Bring ical_dezonify() into caldav_reports.c
[citadel.git] / webcit-ng / server / caldav_reports.c
1 // This file contains functions which handle all of the CalDAV "REPORT" queries specified in RFC4791 section 7.
2 // Copyright (c) 2023-2024 by the citadel.org team
3 // This program is open source software.  Use, duplication, or disclosure is subject to the GNU General Public License v3.
4
5 #include "webcit.h"
6
7 #define CAL "urn:ietf:params:xml:ns:caldav:"            // Shorthand for the XML namespace of CalDAV
8 #define CALLEN sizeof(CAL)-1                            // And the length of that string
9
10 // A CalDAV REPORT can only be one type.  This is stored in the report_type member.
11 enum cr_type {
12         cr_calendar_query,
13         cr_calendar_multiget,
14         cr_freebusy_query
15 };
16
17
18 // Data type for CalDAV Report Parameters.
19 // As we slog our way through the XML we learn what the client is asking for
20 // and build up the contents of this data type.
21 struct cr_params {
22         int comp_filter_nesting_level;
23         enum cr_type report_type;       // which RFC4791 section 7 REPORT are we generating
24         StrBuf *Chardata;               // XML chardata in between tags is built up here
25         StrBuf *Hrefs;                  // list of items requested by a `calendar-multiget` REPORT
26         Array *filters;                 // If the query contains a FILTER stanza, the filter criteria are populated here
27         int filter_nest;                // tag nesting level where a FILTER stanza begins
28 };
29
30
31 // XML parser callback
32 void caldav_xml_start(void *data, const char *el, const char **attr) {
33         struct cr_params *crp = (struct cr_params *) data;
34
35 #ifdef DEBUG_XML_PARSE
36         // logging
37         syslog(LOG_DEBUG, "<%s>", el);
38         for (int i = 0; attr[i] != NULL; i += 2) {
39                 syslog(LOG_DEBUG, "Attribute '%s' = '%s'", attr[i], attr[i + 1]);
40         }
41         // end logging
42 #endif
43
44         // RFC4791 7.8 "calendar-query" REPORT - Client will send a lot of search criteria.
45         if (!strcasecmp(el, CAL"calendar-query")) {
46                 crp->report_type = cr_calendar_query;
47         }
48
49         // RFC4791 7.9 "calendar-multiget" REPORT - Client will supply a list of specific hrefs.
50         else if (!strcasecmp(el, CAL"calendar-multiget")) {
51                 crp->report_type = cr_calendar_multiget;
52         }
53
54         // RFC4791 7.10 "free-busy-query" REPORT
55         else if (!strcasecmp(el, CAL"free-busy-query")) {
56                 crp->report_type = cr_freebusy_query;
57         }
58
59         // RFC4791 9.7 create a filter array if this query contains a "filter" stanza
60         else if (!strcasecmp(el, CAL"filter")) {
61                 crp->filters = array_new(SIZ);
62                 crp->filter_nest = crp->comp_filter_nesting_level;
63         }
64
65         // Handle the filters defined in RFC4791 9.7.1 through 9.7.5
66         else if (       (       (!strcasecmp(el, CAL"comp-filter"))
67                                 || (!strcasecmp(el, CAL"prop-filter"))
68                                 || (!strcasecmp(el, CAL"param-filter"))
69                                 || (!strcasecmp(el, CAL"is-not-defined"))
70                                 || (!strcasecmp(el, CAL"text-match"))
71                                 || (!strcasecmp(el, CAL"time-range"))
72                         )
73                         && (crp->filters)                       // Make sure we actually allocated an array
74         ) {
75
76                 if (!strcasecmp(el, CAL"comp-filter")) {
77                         ++crp->comp_filter_nesting_level;
78                 }
79
80                 char newfilter[SIZ];
81                 int a = 0;
82                 int len = snprintf(newfilter, SIZ, "%d|", crp->comp_filter_nesting_level - crp->filter_nest - 1);
83                 len += snprintf(&newfilter[len], SIZ-len, "%s", &el[CALLEN]);           // filter name without the namespace
84                 while (attr[a]) {
85                         len += snprintf(&newfilter[len], SIZ-len, "|%s", attr[a++]);    // now save the attributes
86                 }
87                 array_append(crp->filters, newfilter);
88         }
89
90 }
91
92
93 // XML parser callback
94 void caldav_xml_end(void *data, const char *el) {
95         struct cr_params *crp = (struct cr_params *) data;
96
97 #ifdef DEBUG_XML_PARSE
98         // logging
99         int i;
100         syslog(LOG_DEBUG, "</%s>", el);
101         // end logging
102 #endif
103
104         if (!strcasecmp(el, CAL"comp-filter")) {
105                 --crp->comp_filter_nesting_level;
106         }
107
108
109         if ((!strcasecmp(el, "DAV::href")) || (!strcasecmp(el, "DAV:href"))) {
110                 if (crp->Hrefs == NULL) {       // append crp->Chardata to crp->Hrefs
111                         crp->Hrefs = NewStrBuf();
112                 }
113                 else {
114                         StrBufAppendBufPlain(crp->Hrefs, HKEY("|"), 0);
115                 }
116                 StrBufAppendBuf(crp->Hrefs, crp->Chardata, 0);
117         }
118
119         if (crp->Chardata != NULL) {            // Tag is closed; chardata is now out of scope.
120                 FreeStrBuf(&crp->Chardata);     // Free the buffer.
121                 crp->Chardata = NULL;
122         }
123 }
124
125
126 // XML parser callback
127 void caldav_xml_chardata(void *data, const XML_Char *s, int len) {
128         struct cr_params *crp = (struct cr_params *) data;
129
130         char *app = malloc(len+1);
131         if (!app) {
132                 return;
133         }
134         memcpy(app, s, len);
135         app[len] = 0;
136
137         if (crp->Chardata == NULL) {
138                 crp->Chardata = NewStrBuf();
139         }
140
141         StrBufAppendBufPlain(crp->Chardata, app, len, 0);
142
143 #ifdef DEBUG_XML_PARSE
144         // logging
145         string_trim(app);               // remove leading/trailing whitespace.  ok to mangle it because we've already appended.
146         if (!IsEmptyStr(app)) {
147                 int i;
148                 syslog(LOG_DEBUG, "%s", app, len);
149         }
150         // end logging
151 #endif
152
153         free(app);
154         return;
155 }
156
157
158 // Called by caldav_report_one_item() to fetch a message (by number) in the current room,
159 // and return only the icalendar data as a StrBuf.  Returns NULL if not found.
160 //
161 // NOTE: this function expects that "MSGP text/calendar" was issued at the beginning
162 // of a REPORT operation to set our preferred MIME type to calendar data.
163 StrBuf *fetch_ical(struct ctdlsession *c, long msgnum) {
164         char buf[1024];
165         StrBuf *Buf = NULL;
166
167         ctdl_printf(c, "MSG4 %ld", msgnum);
168         ctdl_readline(c, buf, sizeof(buf));
169         if (buf[0] != '1') {
170                 return NULL;
171         }
172
173         while (ctdl_readline(c, buf, sizeof(buf)), strcmp(buf, "000")) {
174                 if (Buf != NULL) {              // already in body
175                         StrBufAppendPrintf(Buf, "%s\n", buf);
176                 }
177                 else if (IsEmptyStr(buf)) {     // beginning of body
178                         Buf = NewStrBuf();
179                 }
180         }
181
182         return Buf;
183 }
184
185
186 // Called by multiple REPORT types to actually perform the output in "multiget" format.
187 // We need to already know the source message number and the href, but also already have the output data.
188 void cal_multiget_out(long msgnum, StrBuf *ThisHref, StrBuf *Caldata, StrBuf *ReportOut) {
189
190         StrBufAppendPrintf(ReportOut, "<D:response>");
191         StrBufAppendPrintf(ReportOut, "<D:href>");
192         StrBufXMLEscAppend(ReportOut, ThisHref, NULL, 0, 0);
193         StrBufAppendPrintf(ReportOut, "</D:href>");
194         StrBufAppendPrintf(ReportOut, "<D:propstat>");
195
196         if (Caldata != NULL) {
197                 // syslog(LOG_DEBUG, "caldav_report_one_item(%s) 200 OK", ChrPtr(ThisHref));
198                 StrBufAppendPrintf(ReportOut, "<D:status>");
199                 StrBufAppendPrintf(ReportOut, "HTTP/1.1 200 OK");
200                 StrBufAppendPrintf(ReportOut, "</D:status>");
201                 StrBufAppendPrintf(ReportOut, "<D:prop>");
202                 StrBufAppendPrintf(ReportOut, "<D:getetag>");
203                 StrBufAppendPrintf(ReportOut, "%ld", msgnum);
204                 StrBufAppendPrintf(ReportOut, "</D:getetag>");
205                 StrBufAppendPrintf(ReportOut, "<C:calendar-data>");
206                 StrBufXMLEscAppend(ReportOut, Caldata, NULL, 0, 0);
207                 StrBufAppendPrintf(ReportOut, "</C:calendar-data>");
208                 StrBufAppendPrintf(ReportOut, "</D:prop>");
209         }
210         else {
211                 // syslog(LOG_DEBUG, "caldav_report_one_item(%s) 404 not found", ChrPtr(ThisHref));
212                 StrBufAppendPrintf(ReportOut, "<D:status>");
213                 StrBufAppendPrintf(ReportOut, "HTTP/1.1 404 not found");
214                 StrBufAppendPrintf(ReportOut, "</D:status>");
215         }
216
217         StrBufAppendPrintf(ReportOut, "</D:propstat>");
218         StrBufAppendPrintf(ReportOut, "</D:response>");
219 }
220
221
222 // Called by caldav_report() to output a single item.
223 // Our policy is to throw away the list of properties the client asked for, and just send everything.
224 void caldav_report_one_item(struct http_transaction *h, struct ctdlsession *c, StrBuf *ReportOut, StrBuf *ThisHref) {
225         long msgnum;
226         StrBuf *Caldata = NULL;
227         char *euid;
228
229         euid = strrchr(ChrPtr(ThisHref), '/');
230         if (euid != NULL) {
231                 ++euid;
232         }
233         else {
234                 euid = (char *) ChrPtr(ThisHref);
235         }
236
237         char *unescaped_euid = strdup(euid);
238         if (!unescaped_euid) {
239                 return;
240         }
241         unescape_input(unescaped_euid);
242
243         msgnum = locate_message_by_uid(c, unescaped_euid);
244         free(unescaped_euid);
245         if (msgnum > 0) {
246                 Caldata = fetch_ical(c, msgnum);
247         }
248         else {
249                 Caldata = NULL;
250         }
251
252         cal_multiget_out(msgnum, ThisHref, Caldata, ReportOut);
253
254         if (Caldata != NULL) {
255                 FreeStrBuf(&Caldata);
256         }
257 }
258
259
260 // Compare function for "time-range" tests (RFC4791 section 9.9)
261 // Returns nonzero if the supplied icalcomponent occurs within the specified time range
262 int caldav_time_range_filter_matches(icalcomponent *supplied_cal, char *start_str, char *end_str) {
263
264         struct icaltimetype start = (start_str ? icaltime_from_string(start_str) : icaltime_null_time());
265         struct icaltimetype end = (end_str ? icaltime_from_string(end_str) : icaltime_null_time());
266
267         // make a local copy of the component because we are going to modify it by converting times to UTC
268         icalcomponent *cal = icalcomponent_new_clone(supplied_cal);
269         ical_dezonify(cal);
270
271         syslog(LOG_DEBUG, "\033[7mcaldav_time_range_filter_matches()\033[0m : Does this %s fall between %s and %s ?",
272                 icalcomponent_kind_to_string(icalcomponent_isa(cal)),
273                 start_str,
274                 end_str
275         );
276
277         syslog(LOG_DEBUG, "Well, here it is:");
278         syslog(LOG_DEBUG, "\033[35m%s\033[0m", icalcomponent_as_ical_string_r(cal));
279
280         icaltimetype dts = icalcomponent_get_dtstart(cal);
281         syslog(LOG_DEBUG, "component start: \033[36m%s\033[0m", icaltime_as_ical_string_r(dts));
282
283         icaltimetype dte = icalcomponent_get_dtend(cal);
284         syslog(LOG_DEBUG, "component   end: \033[36m%s\033[0m", icaltime_as_ical_string_r(dte));
285
286         icalcomponent_free(cal);
287         return(0);                                              // FIXME reject everything for now
288 }
289
290
291 // Recursive function to apply CalDAV FILTERS to a calendar item.
292 // Returns zero if the calendar item was disqualified by a filter, nonzero if the calendar item still qualifies.
293 int caldav_apply_filters(void *cal, Array *filters, int apply_at_level) {
294
295         int f = 0;                                      // filter number iterator
296         int qual = 1;                                   // 0 for disqualify, 1 for qualify
297         int previous_level = -1;
298         int disregard_further_comp_filters = 0;
299
300         while ( (f<array_len(filters)) && (qual) ) {
301
302                 // Tokenize the filter (a future performance hack would be to pre-tokenize instead of storing delimited strings)
303                 char this_filter[SIZ];
304                 safestrncpy(this_filter, array_get_element_at(filters, f), sizeof(this_filter));
305                 char *t[10] = { NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL } ;
306                 char *ft = this_filter;
307                 int num_tokens = 0;
308                 while ( (t[num_tokens]=strtok_r(ft, "|", &ft)) && (num_tokens<10) ) {
309                         ++num_tokens;
310                 }
311                 int this_rule_level = atoi(t[0]);
312                 syslog(LOG_DEBUG, "caldav_apply_filters() filter=%d, level=%d, <%s>", f, this_rule_level, array_get_element_at(filters, f) );
313
314                 // Handle the individual filters defined in RFC4791 9.7.1 through 9.7.5
315
316                 if (apply_at_level < previous_level) {
317                         syslog(LOG_DEBUG, "caldav: walking back down");
318                         return(qual);
319                 }
320
321                 else if (this_rule_level != apply_at_level) {
322                         syslog(LOG_DEBUG, "caldav: apply_at_level=%d, this_rule_level=%d, skipping this rule", apply_at_level, this_rule_level);
323                 }
324
325                 else if (       (!strcasecmp(t[1], "comp-filter"))              // RFC4791 9.7.1 - filter by component
326                                 && (!disregard_further_comp_filters)            // one is enough to succeed
327                         ) {
328                         syslog(LOG_DEBUG, "component filter at level %d", this_rule_level);
329
330                         // comp-filter requires exactly one parameter (name="VXXXX")
331                         if (num_tokens < 4) {
332                                 syslog(LOG_DEBUG, "caldav: comp-filter has no parameters - rejecting");
333                                 return(0);
334                         }
335
336                         // Root element is NOT a component, but the root filter is "comp-filter" -- reject!
337                         if ( (!icalcomponent_isa_component(cal)) && (this_rule_level == 0) ) {
338                                 syslog(LOG_DEBUG, "caldav: root element is not a component, rejecting");
339                                 return(0);
340                         }
341
342                         // Current element is a component and the filter is "comp-filter" -- see if it matches the requested type
343                         if (    (icalcomponent_isa_component(cal))
344                                 && (!strcasecmp(t[2], "name"))
345                         ) {
346                                 if (icalcomponent_isa(cal) == icalcomponent_string_to_kind(t[3]) ) {
347                                         syslog(LOG_DEBUG, "caldav: component at level %d is <%s>, looking for <%s>, recursing...",
348                                                 apply_at_level,
349                                                 icalcomponent_kind_to_string(icalcomponent_isa(cal)), t[3]
350                                         );
351
352                                         // We have a match.  Drill down into the subcomponents.
353
354                                         icalcomponent *c = NULL;
355                                         int number_of_subcomponents = 0;
356                                         int number_of_matches = 0;
357                                         for (   c = icalcomponent_get_first_component(cal, ICAL_ANY_COMPONENT);
358                                                 (c != 0);                                                
359                                                 c = icalcomponent_get_next_component(cal, ICAL_ANY_COMPONENT)
360                                         ) {
361                                                 ++number_of_subcomponents;
362                                                 if (caldav_apply_filters(c, filters, apply_at_level+1)) {
363                                                         syslog(LOG_DEBUG, "Subcomponent %d might match", number_of_subcomponents);
364                                                         ++number_of_matches;
365                                                 }
366                                         }
367                                         if (number_of_matches > 0) {                    // something matched
368                                                 qual = 1;
369                                                 disregard_further_comp_filters = 1;
370
371                                         }
372                                         else if (number_of_subcomponents > 0) {         // nothing matched
373                                                 return(0);                              // but only fail if there *were* subcomponents.
374                                         }
375
376                                 }
377                                 else {
378                                         syslog(LOG_DEBUG, "caldav: component at level %d is <%s>, looking for <%s>, rejecting",
379                                                 apply_at_level,
380                                                 icalcomponent_kind_to_string(icalcomponent_isa(cal)),
381                                                 t[3]
382                                         );
383                                         return(0);
384                                 }
385                         }
386
387                 }
388
389                 else if (!strcasecmp(t[1], "prop-filter")) {                    // RFC4791 9.7.2 - filter by property
390                         syslog(LOG_DEBUG, "property filter at level %d FIXME not implemented yet", this_rule_level);
391                 }
392
393                 else if (!strcasecmp(t[1], "param-filter")) {                   // RFC4791 9.7.3 - filter by parameter
394                         syslog(LOG_DEBUG, "parameter filter at level %d FIXME not implemented yet", this_rule_level);
395                 }
396
397                 else if (!strcasecmp(t[1], "is-not-defined")) {                 // RFC4791 9.7.4
398                         syslog(LOG_DEBUG, "is-not-defined filter at level %d FIXME not implemented yet", this_rule_level);
399                 }
400
401                 else if (!strcasecmp(t[1], "text-match")) {                     // RFC4791 9.7.5
402                         syslog(LOG_DEBUG, "text match filter at level %d FIXME not implemented yet", this_rule_level);
403                 }
404
405                 else if (!strcasecmp(t[1], "time-range")) {                     // RFC4791 9.9
406                         syslog(LOG_DEBUG, "time range filter at level %d FIXME not implemented yet", this_rule_level);
407                         for (int i=2; (i+1)<num_tokens; i+=2) {
408                                 char *tr_start = NULL;
409                                 char *tr_end = NULL;
410                                 if (!strcasecmp(t[i], "start")) {
411                                         tr_start = t[i+1];
412                                 }
413                                 else if (!strcasecmp(t[i], "end")) {
414                                         tr_end = t[i+1];
415                                 }
416                                 if (caldav_time_range_filter_matches(cal, tr_start, tr_end)) {
417                                         syslog(LOG_DEBUG, "time range matches");
418                                 }
419                                 else {
420                                         syslog(LOG_DEBUG, "time range does not match -- rejecting");
421                                         qual = 0;
422                                 }
423                         }
424                 }
425
426                 ++f;
427         }
428
429         syslog(LOG_DEBUG, "caldav: we reached the end of level %d , returning %d", apply_at_level, qual);
430         return(qual);
431 }
432
433
434 // Called by report_the_room_itself() in room_functions.c when a CalDAV REPORT method
435 // is requested on a calendar room.  We fire up an XML Parser to decode the request and
436 // hopefully produce the correct output.
437 void caldav_report(struct http_transaction *h, struct ctdlsession *c) {
438         struct cr_params crp;
439         char buf[1024];
440
441         memset(&crp, 0, sizeof(struct cr_params));
442
443         XML_Parser xp = XML_ParserCreateNS("UTF-8", ':');
444         if (xp == NULL) {
445                 syslog(LOG_INFO, "Cannot create XML parser!");
446                 do_404(h);
447                 return;
448         }
449
450         XML_SetElementHandler(xp, caldav_xml_start, caldav_xml_end);
451         XML_SetCharacterDataHandler(xp, caldav_xml_chardata);
452         XML_SetUserData(xp, &crp);
453         XML_SetDefaultHandler(xp, NULL);        // Disable internal entity expansion to prevent "billion laughs attack"
454         XML_Parse(xp, h->request_body, h->request_body_length, 1);
455         XML_ParserFree(xp);
456
457         if (crp.Chardata != NULL) {             // Discard any trailing chardata ... normally nothing here
458                 FreeStrBuf(&crp.Chardata);
459                 crp.Chardata = NULL;
460         }
461
462         // We're going to make a lot of MSG4 calls, and the preferred MIME type we want is "text/calendar".
463         // The iCalendar standard is mature now, and we are no longer interested in text/x-vcal or application/ics.
464         ctdl_printf(c, "MSGP text/calendar");
465         ctdl_readline(c, buf, sizeof buf);
466
467         // Now begin the REPORT.
468         syslog(LOG_DEBUG, "CalDAV REPORT type is: %d", crp.report_type);
469         StrBuf *ReportOut = NewStrBuf();
470         StrBufAppendPrintf(ReportOut,
471                 "<?xml version=\"1.0\" encoding=\"utf-8\"?>"
472                 "<D:multistatus "
473                 "xmlns:D=\"DAV:\" "
474                 "xmlns:C=\"urn:ietf:params:xml:ns:caldav\""
475                 ">"
476         );
477
478         // RFC4791 7.8 "calendar-query" REPORT - Client will send a lot of search criteria.
479         if (crp.report_type == cr_calendar_query) {
480                 int i = 0;
481                 Array *msglist = get_msglist(c, "ALL");
482                 if (msglist != NULL) {
483                         for (i = 0; i < array_len(msglist); ++i) {
484                                 long m;
485                                 memcpy(&m, array_get_element_at(msglist, i), sizeof(long));
486
487                                 // load and parse one calendar item
488                                 StrBuf *one_item = fetch_ical(c, m);
489                                 icalcomponent *cal = icalcomponent_new_from_string(ChrPtr(one_item));
490
491                                 // Does this calendar item qualify for output?
492                                 int qualify = 1;
493
494                                 // If there was a filter stanza, run this calendar item through the filters.
495                                 syslog(LOG_DEBUG, "Evaluating message \033[33m%ld\033[0m...", m);
496                                 qualify = caldav_apply_filters(cal, crp.filters, 0);
497                                 syslog(LOG_DEBUG, "Message %ld %s\033[0m qualify", m, (qualify ? "\033[32mDOES" : "\033[31mDOES NOT"));
498                                 syslog(LOG_DEBUG, "");
499
500                                 // Did this calendar item match the query?  If so, output it.
501                                 if (qualify) {
502                                         // FIXME need to populate the Href instead of NULL
503                                         cal_multiget_out(m, NULL, one_item, ReportOut);
504                                 }
505
506                                 icalcomponent_free(cal);
507                                 FreeStrBuf(&one_item);
508
509                         }
510                         array_free(msglist);
511                 }
512         }
513
514         // RFC4791 7.9 "calendar-multiget" REPORT - go get the specific Hrefs the client asked for.
515         // Can we move this back into citserver too?
516         else if ( (crp.report_type == cr_calendar_multiget) && (crp.Hrefs != NULL) ) {
517
518                 StrBuf *ThisHref = NewStrBuf();
519                 const char *pvset = NULL;
520                 while (StrBufExtract_NextToken(ThisHref, crp.Hrefs, &pvset, '|') >= 0) {
521                         StrBufTrim(ThisHref);                           // remove leading/trailing whitespace from the href
522                         caldav_report_one_item(h, c, ReportOut, ThisHref);
523                 }
524                 FreeStrBuf(&ThisHref);
525         }
526
527         // RFC4791 7.10 "free-busy-query" REPORT
528         else if (crp.report_type == cr_freebusy_query) {
529                 // FIXME build this REPORT.  At the moment we send an empty multistatus.
530         }
531
532         // Free any query parameters that might have been allocated during the xml parse
533         if (crp.Hrefs != NULL) {
534                 FreeStrBuf(&crp.Hrefs);
535                 crp.Hrefs = NULL;
536         }
537         if (crp.filters) {
538                 array_free(crp.filters);
539                 crp.filters = NULL;
540         }
541
542         StrBufAppendPrintf(ReportOut, "</D:multistatus>\n");            // End the REPORT.
543
544         add_response_header(h, strdup("Content-type"), strdup("text/xml"));
545         h->response_code = 207;
546         h->response_string = strdup("Multi-Status");
547         h->response_body_length = StrLength(ReportOut);
548         h->response_body = SmashStrBuf(&ReportOut);
549 }