demarches-normaliennes/lib/active_storage/service/cellar_service.rb

require 'base64'
require 'net/http'
require 'openssl'

module ActiveStorage
  class Service::CellarService < Service
    def initialize(access_key_id:, secret_access_key:, bucket:, **)
      @endpoint = URI::HTTPS.build(host: "#{bucket}.cellar.services.clever-cloud.com")
      @access_key_id = access_key_id
      @secret_access_key = secret_access_key
      @bucket = bucket
    end

    def download(key)
      if block_given?
        instrument :streaming_download, key: key do
          http_start do |http|
            http.request(get_request(key)) do |response|
              if response.is_a?(Net::HTTPSuccess)
                response.read_body do |chunk|
                  yield(chunk.force_encoding(Encoding::BINARY))
                end
              else
                # TODO: error handling
              end
            end
          end
        end
      else
        instrument :download, key: key do
          http_start do |http|
            response = http.request(get_request(key))
            if response.is_a?(Net::HTTPSuccess)
              response.body.force_encoding(Encoding::BINARY)
            else
              # TODO: error handling
            end
          end
        end
      end
    end

    def delete(key)
      # TODO: error handling
      instrument :delete, key: key do
        http_start do |http|
          perform_delete(http, key)
        end
      end
    end

    def delete_prefixed(prefix)
      # TODO: error handling
      # TODO: handle pagination if more than 1000 keys
      instrument :delete_prefixed, prefix: prefix do
        http_start do |http|
          list_prefixed(http, prefix).each do |key|
            # TODO: use bulk delete instead
            perform_delete(http, key)
          end
        end
      end
    end

    def exist?(key)
      instrument :exist, key: key do |payload|
        http_start do |http|
          request = Net::HTTP::Head.new(URI::join(@endpoint, "/#{key}"))
          sign(request, key)
          response = http.request(request)
          answer = response.is_a?(Net::HTTPSuccess)
          payload[:exist] = answer
          answer
        end
      end
    end

    def url(key, expires_in:, filename:, disposition:, content_type:)
      instrument :url, key: key do |payload|
        generated_url = presigned_url(
          method: 'GET',
          key: key,
          expires_in: expires_in,
          "response-content-disposition": content_disposition_with(type: disposition, filename: filename),
          "response-content-type": content_type
        )
        payload[:url] = generated_url
        generated_url
      end
    end

    def url_for_direct_upload(key, expires_in:, content_type:, content_length:, checksum:)
      instrument :url, key: key do |payload|
        generated_url = presigned_url(
          method: 'PUT',
          key: key,
          expires_in: expires_in,
          content_type: content_type,
          checksum: checksum
        )
        payload[:url] = generated_url
        generated_url
      end
    end

    def headers_for_direct_upload(key, content_type:, checksum:, **)
      { "Content-Type" => content_type, "Content-MD5" => checksum }
    end

    private

    def http_start(&block)
      Net::HTTP.start(@endpoint.host, @endpoint.port, use_ssl: true, &block)
    end

    def sign(request, key, checksum: '')
      date = Time.now.httpdate
      sig = signature(method: request.method, key: key, date: date, checksum: checksum)
      request['date'] = date
      request['authorization'] = "AWS #{@access_key_id}:#{sig}"
    end

    def presigned_url(method:, key:, expires_in:, content_type: '', checksum: '', **query_params)
      expires = expires_in.from_now.to_i

      query = query_params.merge({
        AWSAccessKeyId: @access_key_id,
        Expires: expires,
        Signature: signature(method: method, key: key, expires: expires, content_type: content_type, checksum: checksum)
      })

      generated_url = URI::join(@endpoint, "/#{key}","?#{query.to_query}").to_s
    end

    def signature(method:, key:, expires: '', date: '', content_type: '', checksum: '')
      canonicalized_amz_headers = ""
      canonicalized_resource = "/#{@bucket}/#{key}"
      string_to_sign = "#{method}\n#{checksum}\n#{content_type}\n#{expires}#{date}\n" +
                       "#{canonicalized_amz_headers}#{canonicalized_resource}"
      Base64.encode64(OpenSSL::HMAC.digest(OpenSSL::Digest.new('sha1'), @secret_access_key, string_to_sign)).strip
    end

    def list_prefixed(http, prefix)
      request = Net::HTTP::Get.new(URI::join(@endpoint, "/?prefix=#{prefix}"))
      sign(request, "")
      response = http.request(request)
      if response.is_a?(Net::HTTPSuccess)
        parse_bucket_listing(response.body)
      end
    end

    def parse_bucket_listing(bucket_listing_xml)
      doc = Nokogiri::XML(bucket_listing_xml)
      doc
        .xpath('//xmlns:Contents/xmlns:Key')
        .map{ |k| k.text }
    end

    def get_request(key)
      request = Net::HTTP::Get.new(URI::join(@endpoint, "/#{key}"))
      sign(request, key)
      request
    end

    def bulk_deletion_request_body(keys)
      builder = Nokogiri::XML::Builder.new(:encoding => 'UTF-8') do |xml|
        xml.Delete do
          keys.each do |k|
            xml.Object do
              xml.Key(k)
            end
          end
        end
      end
      builder.to_xml
    end

    def perform_delete(http, key)
      request = Net::HTTP::Delete.new(URI::join(@endpoint, "/#{key}"))
      sign(request, key)
      http.request(request)
    end
  end
end