Server executing client's requested configuration with the right permissions

[hcoop/domtool2.git] / src / main.sml

diff --git a/src/main.sml b/src/main.sml
index 7740522..e0beaf2 100644 (file)
--- a/src/main.sml
+++ b/src/main.sml
@@ -22,71 +22,172 @@ structure Main :> MAIN = struct
 
 open Ast Print
 
-val dmy = ErrorMsg.dummyLoc
+structure SM = StringMap
 
-val tInit = (TAction ((CRoot, dmy),
-                     StringMap.empty,
-                     StringMap.empty),
-            dmy)
+fun init () = Acl.read Config.aclFile
            
-fun check fname =
+fun check' G fname =
     let
        val prog = Parse.parse fname
     in
        if !ErrorMsg.anyErrors then
-           ()
+           G
        else
-           let
-               val G' = Tycheck.checkFile Env.empty tInit prog
-           in
-               ()
-           end
+           Tycheck.checkFile G (Defaults.tInit ()) prog
     end
 
-fun reduce fname =
+fun basis () =
     let
-       val prog = Parse.parse fname
+       val dir = Posix.FileSys.opendir Config.libRoot
+
+       fun loop files =
+           case Posix.FileSys.readdir dir of
+               NONE => (Posix.FileSys.closedir dir;
+                        files)
+             | SOME fname =>
+               if String.isSuffix ".dtl" fname then
+                   loop (OS.Path.joinDirFile {dir = Config.libRoot,
+                                              file = fname}
+                         :: files)
+               else
+                   loop files
+
+       val files = loop []
+       val files = Order.order files
     in
        if !ErrorMsg.anyErrors then
-           ()
+           Env.empty
+       else
+           foldl (fn (fname, G) => check' G fname) Env.empty files
+    end
+
+fun check fname =
+    let
+       val _ = ErrorMsg.reset ()
+       val _ = Env.preTycheck ()
+
+       val b = basis ()
+    in
+       if !ErrorMsg.anyErrors then
+           (b, NONE)
        else
            let
-               val G' = Tycheck.checkFile Env.empty tInit prog
+               val _ = ErrorMsg.reset ()
+               val prog = Parse.parse fname
            in
                if !ErrorMsg.anyErrors then
-                   ()
+                   (Env.empty, NONE)
                else
-                   case prog of
-                       (_, SOME body) =>
-                       let
-                           val body' = Reduce.reduceExp G' body
-                       in
-                           printd (PD.hovBox (PD.PPS.Rel 0,
-                                              [PD.string "Result:",
-                                               PD.space 1,
-                                               p_exp body']))
-                       end
-                     | _ => ()
+                   let
+                       val G' = Tycheck.checkFile b (Defaults.tInit ()) prog
+                   in
+                       (G', #3 prog)
+                   end
            end
     end
 
-fun eval fname =
+fun reduce fname =
     let
-       val prog = Parse.parse fname
+       val (G, body) = check fname
     in
+       if !ErrorMsg.anyErrors then
+           NONE
+       else
+           case body of
+               SOME body =>
+               let
+                   val body' = Reduce.reduceExp G body
+               in
+                   (*printd (PD.hovBox (PD.PPS.Rel 0,
+                                        [PD.string "Result:",
+                                         PD.space 1,
+                                         p_exp body']))*)
+                   SOME body'
+               end
+             | _ => NONE
+    end
+
+fun eval fname =
+    case reduce fname of
+       (SOME body') =>
        if !ErrorMsg.anyErrors then
            ()
        else
-           let
-               val G' = Tycheck.checkFile Env.empty tInit prog
-           in
-               if !ErrorMsg.anyErrors then
-                   ()
-               else
-                   case prog of
-                       (_, SOME body) => Eval.exec StringMap.empty body
-                     | _ => ()
-           end
+           Eval.exec (Defaults.eInit ()) body'
+      | NONE => ()
+
+val dispatcher =
+    Config.dispatcher ^ ":" ^ Int.toString Config.dispatcherPort
+
+fun request fname =
+    let
+       val uid = Posix.ProcEnv.getuid ()
+       val user = Posix.SysDB.Passwd.name (Posix.SysDB.getpwuid uid)
+
+       val () = Acl.read Config.aclFile
+       val () = Domain.setUser user
+       val _ = check fname
+
+       val context = OpenSSL.context (Config.certDir ^ "/" ^ user ^ ".pem",
+                                      Config.keyDir ^ "/" ^ user ^ ".pem",
+                                      Config.trustStore)
+
+       val bio = OpenSSL.connect (context, dispatcher)
+
+       val inf = TextIO.openIn fname
+
+       fun loop () =
+           case TextIO.inputLine inf of
+               NONE => ()
+             | SOME line => (OpenSSL.writeAll (bio, line);
+                             loop ())
+    in
+       loop ();
+       TextIO.closeIn inf;
+       OpenSSL.close bio
+    end
+    handle ErrorMsg.Error => ()
+
+fun service () =
+    let
+       val () = Acl.read Config.aclFile
+       
+       val context = OpenSSL.context (Config.serverCert,
+                                      Config.serverKey,
+                                      Config.trustStore)
+
+       val sock = OpenSSL.listen (context, Config.dispatcherPort)
+
+       fun loop () =
+           case OpenSSL.accept sock of
+               NONE => ()
+             | SOME bio =>
+               let
+                   val user = OpenSSL.peerCN bio
+                   val () = print ("\nConnection from " ^ user ^ "\n")
+                   val () = Domain.setUser user
+
+                   val outname = OS.FileSys.tmpName ()
+                   val outf = TextIO.openOut outname
+
+                   fun loop' () =
+                       case OpenSSL.readOne bio of
+                           NONE => ()
+                         | SOME line => (TextIO.output (outf, line);
+                                         loop' ())
+               in
+                   (loop' ();
+                    TextIO.closeOut outf;
+                    eval outname
+                    handle ErrorMsg.Error => ();
+                    OS.FileSys.remove outname;
+                    OpenSSL.close bio)
+                   handle OpenSSL.OpenSSL _ => ();
+                   loop ()
+               end
+    in
+       loop ();
+       OpenSSL.shutdown sock
     end
 
 end