putsreq 0.0.1

data/app/assets/stylesheets/helpers.css

@@ -0,0 +1,154 @@
+.bg {background:#000 !important}
+.block {display:block !important}
+.border {border:1px solid black !important}
+.breadcrumb {font-size:11px !important}
+.bz {border: 0 !important}
+.f9 {font-size:57px !important;}
+.f8 {font-size:38px !important;}
+.f7 {font-size:30px !important;}
+.f6 {font-size:27px !important;}
+.f5 {font-size:20px !important;}
+.f4 {font-size:17px !important;}
+.f3 {font-size:15px !important;}
+.f2 {font-size:13px !important;}
+.f1 {font-size:8px !important;}
+.f10 {font-size:10px !important;}
+.fw {width:100% !important}
+.fwb {font-weight:bold !important}
+.fsi {font-style:italic !important}
+.fl {float:left !important}
+.fr {float:right !important}
+.h10 {height:10px !important}
+.h20 {height:20px !important}
+.h30 {height:30px !important}
+.h40 {height:40px !important}
+.h50 {height:50px !important}
+.h80 {height:80px !important}
+.h100 {height:100px !important}
+.h150 {height:150px !important}
+.h200 {height:200px !important}
+.h250 {height:250px !important}
+.h300 {height:300px !important}
+.hidden {display: none !important}
+.hr {border-top: 1px solid #c9c9c9;}
+.left {float:left}
+.lh5 {line-height:5px !important}
+.lh10 {line-height:10px !important}
+.lh15 {line-height:15px !important}
+.lh20 {line-height:20px !important}
+.lh25 {line-height:25px !important}
+.lh30 {line-height:30px !important}
+.lh35 {line-height:35px !important}
+.lm0 {margin-left:0 !important}
+.no-text-shadow {text-shadow: none;}
+.p5 {padding: 5px !important;}
+.right {float:right}
+.tac {text-align:center !important}
+.tal {text-align:left !important}
+.tar {text-align:right !important}
+.tm1 {margin-top:1px !important}
+.tm2 {margin-top:2px !important}
+.tm3 {margin-top:3px !important}
+.tm4 {margin-top:4px !important}
+.tm5 {margin-top:5px !important}
+.tm6 {margin-top:6px !important}
+.tm7 {margin-top:7px !important}
+.tm8 {margin-top:8px !important}
+.tm9 {margin-top:9px !important}
+.tm10 {margin-top:10px !important}
+.tm11 {margin-top:11px !important}
+.tm12 {margin-top:12px !important}
+.tm13 {margin-top:13px !important}
+.tm14 {margin-top:14px !important}
+.tm15 {margin-top:15px !important}
+.tm20 {margin-top:20px !important}
+.tm25 {margin-top:25px !important}
+.tm30 {margin-top:30px !important}
+.tm35 {margin-top:35px !important}
+.tm40 {margin-top:40px !important}
+.tm45 {margin-top:45px !important}
+.tm50 {margin-top:50px !important}
+.tm60 {margin-top:60px !important}
+.tm70 {margin-top:70px !important}
+.tm80 {margin-top:80px !important}
+.tm90 {margin-top:90px !important}
+.tm100 {margin-top:100px !important}
+.tm130 {margin-top:130px !important}
+.bm0 {margin-bottom:0 !important}
+.bm5 {margin-bottom:5px !important}
+.bm10 {margin-bottom:10px !important}
+.bm15 {margin-bottom:15px !important}
+.bm20 {margin-bottom:20px !important}
+.bm25 {margin-bottom:25px !important}
+.bm30 {margin-bottom:30px !important}
+.bm35 {margin-bottom:35px !important}
+.bm40 {margin-bottom:40px !important}
+.bm45 {margin-bottom:45px !important}
+.bm50 {margin-bottom:50px !important}
+.pt1 {padding-top:1px !important}
+.pt2 {padding-top:2px !important}
+.pt3 {padding-top:3px !important}
+.pt4 {padding-top:4px !important}
+.pt5 {padding-top:5px !important}
+.pt10 {padding-top:10px !important}
+.pt20 {padding-top:20px !important}
+.pt30 {padding-top:30px !important}
+.pb1 {padding-bottom:1px !important}
+.pb2 {padding-bottom:2px !important}
+.pb3 {padding-bottom:3px !important}
+.pb4 {padding-bottom:4px !important}
+.pb5 {padding-bottom:5px !important}
+.pb10 {padding-bottom:10px !important}
+.pb20 {padding-bottom:20px !important}
+.pb30 {padding-bottom:30px !important}
+.pl10 {padding-left:10px !important}
+.pl20 {padding-left:20px !important}
+.pl30 {padding-left:30px !important}
+.pr10 {padding-right:10px !important}
+.pr20 {padding-right:20px !important}
+.pr30 {padding-right:30px !important}
+.lm1 {margin-left:1px !important}
+.lm2 {margin-left:2px !important}
+.lm3 {margin-left:3px !important}
+.lm4 {margin-left:4px !important}
+.lm5 {margin-left:5px !important}
+.lm10 {margin-left:10px !important}
+.lm15 {margin-left:15px !important}
+.lm20 {margin-left:20px !important}
+.lm25 {margin-left:25px !important}
+.lm30 {margin-left:30px !important}
+.lm35 {margin-left:35px !important}
+.lm40 {margin-left:40px !important}
+.lm45 {margin-left:45px !important}
+.lm50 {margin-left:50px !important}
+.pointer {cursor: pointer !important}
+.rm1 {margin-right:1px !important}
+.rm2 {margin-right:2px !important}
+.rm3 {margin-right:3px !important}
+.rm4 {margin-right:4px !important}
+.rm5 {margin-right:5px !important}
+.rm10 {margin-right:10px !important}
+.rm15 {margin-right:15px !important}
+.rm20 {margin-right:20px !important}
+.rm25 {margin-right:25px !important}
+.rm30 {margin-right:30px !important}
+.rm35 {margin-right:35px !important}
+.rm40 {margin-right:40px !important}
+.rm45 {margin-right:45px !important}
+.rm50 {margin-right:50px !important}
+.w100 {width:100px !important}
+.w200 {width:200px !important}
+.w300 {width:300px !important}
+.w400 {width:400px !important}
+.w500 {width:500px !important}
+.w5pc {width:5% !important;}
+.w10pc {width:10% !important;}
+.w20pc {width:10% !important;}
+.w30pc {width:30% !important;}
+.w40pc {width:40% !important;}
+.w50pc {width:50% !important;}
+.w60pc {width:60% !important;}
+.w70pc {width:70% !important;}
+.w80pc {width:80% !important;}
+.w90pc {width:90% !important;}
+.w100pc {width:100% !important;}

data/app/controllers/application_controller.rb

@@ -0,0 +1,35 @@
+class ApplicationController < ActionController::Base
+  # Prevent CSRF attacks by raising an exception.
+  # For APIs, you may want to use :null_session instead.
+  protect_from_forgery with: :exception
+
+  helper_method :is_owner?
+
+  before_action :configure_permitted_parameters, if: :devise_controller?
+
+  protected
+
+  def check_ownership!
+    unless is_owner?(bucket)
+      redirect_to bucket_path(bucket.token), alert: 'Only the bucket owner can perform this operation'
+    end
+  end
+
+  def is_owner?(bucket)
+    owner_token == bucket.owner_token || (user_signed_in? && bucket.user == current_user)
+  end
+
+  def owner_token
+    cookies[:owner_token] ||= { value: SecureRandom.hex(24), expires: 1.year.from_now }
+  end
+
+  def bucket
+    @bucket ||= Bucket.find_by(token: params[:token])
+  end
+
+  def configure_permitted_parameters
+    devise_parameter_sanitizer.for(:sign_up) { |u| u.permit(:name, :email, :password, :password_confirmation, :remember_me) }
+    devise_parameter_sanitizer.for(:sign_in) { |u| u.permit(:name, :email, :password, :remember_me) }
+    devise_parameter_sanitizer.for(:account_update) { |u| u.permit(:name, :email, :password, :password_confirmation, :current_password) }
+  end
+end

data/app/controllers/buckets_controller.rb

@@ -0,0 +1,88 @@
+class BucketsController < ApplicationController
+  skip_before_action :verify_authenticity_token, only: :record
+
+  before_filter :check_ownership!, only: %i[clear destroy update]
+
+  def create
+    new_bucket = { owner_token: owner_token }
+    new_bucket[:user_id] = current_user.id if user_signed_in?
+
+    bucket = Bucket.create(new_bucket)
+
+    redirect_to bucket_path(bucket.token)
+  end
+
+  def fork
+    forked_bucket = Bucket.create(owner_token:       owner_token,
+                                  response_builder:  bucket.response_builder,
+                                  name:              "Copy of #{bucket.name}",
+                                  fork:              bucket)
+
+    redirect_to bucket_path(forked_bucket.token)
+  end
+
+  def clear
+    bucket.clear_history
+
+    redirect_to bucket_path(bucket.token)
+  end
+
+  def destroy
+    bucket.destroy
+
+    redirect_to root_path
+  end
+
+  def show
+    @requests = bucket.requests.page(params[:page]).per 1
+  end
+
+  def update
+    update_bucket = bucket_params
+    update_bucket[:user_id] = current_user.id if user_signed_in?
+
+    bucket.update_attributes update_bucket
+
+    redirect_to bucket_path(bucket.token)
+  end
+
+  def last
+    return render_request_not_found unless last_request = bucket.last_request
+
+    respond_to do |format|
+      format.html { render text: last_request.body }
+      format.json { render json: JSON.pretty_generate(last_request.attributes) }
+    end
+  end
+
+  def last_response
+    return render_request_not_found unless last_response = bucket.last_response
+
+    respond_to do |format|
+      format.html { render text: last_response.body }
+      format.json { render json: JSON.pretty_generate(last_response.attributes) }
+    end
+  end
+
+  def record
+    result = RecordRequest.call(bucket: bucket, rack_request: request)
+    recorded_response = result.response
+
+    response.headers.merge! recorded_response.headers.to_h
+
+    render text: recorded_response.body_as_string, status: recorded_response.status
+  end
+
+  private
+
+  def render_request_not_found
+    respond_to do |format|
+      format.html { redirect_to bucket_path(bucket.token), alert: 'Please submit a request first' }
+      format.json { render nothing: true, status: 404 }
+    end
+  end
+
+  def bucket_params
+    params.require(:bucket).permit(:response_builder, :name)
+  end
+end

data/app/controllers/home_controller.rb

@@ -0,0 +1,18 @@
+class HomeController < ApplicationController
+  def index
+    if user_signed_in?
+      selector = Bucket.or([user: current_user], [owner_token: owner_token])
+    else
+      selector = Bucket.where(owner_token: owner_token)
+    end
+
+    @buckets = selector.order(:created_at.desc).limit(20)
+
+    @buckets.each do |bucket|
+      next if !user_signed_in? || bucket.user
+
+      # assign buckets created without login to the current logged user
+      bucket.update_attribute :user, current_user
+    end
+  end
+end

data/app/helpers/application_helper.rb

@@ -0,0 +1,14 @@
+module ApplicationHelper
+  def dispatcher_route
+    controller_name = controller_path.gsub(/\//, "_")
+    "#{controller_name}##{action_name}"
+  end
+
+  def token_url(token)
+    "#{request.protocol}#{request.host_with_port}/#{token}"
+  end
+
+  def show_no_requests_found(bucket)
+    content_tag(:p, 'No requests found.')
+  end
+end

data/app/interactors/create_request.rb

@@ -0,0 +1,15 @@
+class CreateRequest
+  include Interactor
+
+  delegate :bucket, :rack_request, to: :context
+
+  def call
+    context.request = bucket.requests.create(body:            rack_request.body.read,
+                                             content_length:  rack_request.content_length,
+                                             request_method:  rack_request.request_method,
+                                             ip:              rack_request.ip,
+                                             url:             rack_request.url,
+                                             headers:         FilterHeaders.call(headers: rack_request.env).headers,
+                                             params:          rack_request.request_parameters)
+  end
+end

data/app/interactors/create_response.rb

@@ -0,0 +1,11 @@
+class CreateResponse
+  include Interactor
+
+  delegate :bucket, :request, :built_response, to: :context
+
+  def call
+    built_response['request'] = request
+
+    context.response = bucket.responses.create(built_response)
+  end
+end

data/app/interactors/eval_response_builder.rb

@@ -0,0 +1,55 @@
+class EvalResponseBuilder
+  include Interactor
+
+  delegate :request, to: :context
+
+  def call
+    v8_ctx = V8::Context.new timeout: timeout
+
+    eval_response_builder(v8_ctx)
+
+    eval_request(v8_ctx)
+
+    eval_response(v8_ctx)
+  rescue => e
+    context.built_response = { 'status'  => 500,
+                               'headers' => { 'Content-Type' => 'text/plain' },
+                               'body'    => e.message }
+  end
+
+  private
+
+  def eval_request(v8_ctx)
+    context.built_request = JSON.parse(v8_ctx.eval('JSON.stringify(request)'))
+  end
+
+  def eval_response(v8_ctx)
+    context.built_response = v8_ctx.eval('JSON.stringify(response)')
+
+    # filter allowed parameters
+    context.built_response = JSON.parse(context.built_response).select do |key, value|
+      %w(status headers body).include?(key) && value.to_s.present?
+    end
+  end
+
+  def initialize_response_builder_attrs(v8_ctx)
+    v8_ctx['response'] = { 'status'  => 200,
+                           'headers' => {},
+                           'body'    => 'ok' }
+
+    v8_ctx['request']  = { 'request_method' => request.request_method,
+                           'body'           => request.body,
+                           'params'         => request.params,
+                           'headers'        => request.headers }
+  end
+
+  def eval_response_builder(v8_ctx)
+    initialize_response_builder_attrs(v8_ctx)
+
+    v8_ctx.eval(context.bucket.response_builder.to_s)
+  end
+
+  def timeout
+    context.timeout ||= 2500
+  end
+end

data/app/interactors/filter_headers.rb

@@ -0,0 +1,28 @@
+class FilterHeaders
+  include Interactor
+
+  BLACKLIST_HEADERS = %w(HOST CF X-REQUEST X-FORWARDED CONNECT-TIME TOTAL-ROUTE-TIME VIA).freeze
+  WHITELIST_HEADERS = %w(HTTP_ CONTENT).freeze
+
+  delegate :headers, to: :context
+
+  def call
+    context.headers = client_supplied_headers
+  end
+
+  private
+
+  def client_supplied_headers
+    headers.to_h.each_with_object({}) do |(key, value), h|
+      next unless value.to_s.present?
+
+      next unless key.upcase.start_with?(*WHITELIST_HEADERS)
+
+      key = key.sub('HTTP_', '').tr('_', '-')
+
+      next if key.upcase.start_with?(*BLACKLIST_HEADERS)
+
+      h[key] = value
+    end
+  end
+end

data/app/interactors/forward_request.rb

@@ -0,0 +1,39 @@
+class ForwardRequest
+  include Interactor
+
+  delegate :built_request, to: :context
+
+  def call
+    return unless forward_url = built_request.try(:[], 'forwardTo')
+
+    # use the response from the forwarded URL
+    context.built_response = forward_to(built_request, forward_url)
+  rescue => e
+    context.built_response = { 'status'  => 500,
+                               'headers' => { 'Content-Type' => 'text/plain' },
+                               'body'    => e.message }
+  end
+
+  private
+
+  def forward_to(built_request, forward_url)
+
+    options = { timeout: 5,
+                headers: built_request['headers'],
+                body: body }
+
+    forwarded_response = HTTParty.send(built_request['request_method'].downcase.to_sym, forward_url, options)
+
+    { 'status'  => forwarded_response.code,
+      'headers' => FilterHeaders.call(headers: forwarded_response.headers).headers,
+      'body'    => forwarded_response.body }
+  end
+
+  def body
+    if built_request['body'].is_a?(Hash)
+      JSON.dump(built_request['body'])
+    else
+      built_request['body'].to_s
+    end
+  end
+end