-- HTTP Access to PEP Avatar

-- By Kim Alvefur <zash@zash.se>

local mod_pep = module:depends"pep";

local um = require "core.usermanager";

local nodeprep = require "util.encodings".stringprep.nodeprep;

local base64_decode = require "util.encodings".base64.decode;

local urlencode = require "util.http".urlencode;

module:depends("http")

module:provides("http", {

	route = {

		["GET /*"] = function (event, user)

			if user == "" then

				return [[<h1>Hello from mod_http_pep_avatar</h1><p>This module provides access to public avatars of local users.</p>]];

			end;

			local request, response = event.request, event.response;

			local actor = request.ip;

			local prepped = nodeprep(user);

			if not prepped then return 400; end

			if prepped ~= user then

				response.headers.location = module:http_url() .. "/" .. urlencode(prepped);

				return 302;

			end

			if not um.user_exists(user, module.host) then

				return 404;

			end

			local pep_service = mod_pep.get_pep_service(user);

			local ok, avatar_hash, avatar_meta = pep_service:get_last_item("urn:xmpp:avatar:metadata", actor);

			if not ok or not avatar_hash then

				return 404;

			end

			if avatar_hash == request.headers.if_none_match then

				return 304;

			end

			local data_ok, avatar_data = pep_service:get_items("urn:xmpp:avatar:data", actor, avatar_hash);

			if not data_ok or type(avatar_data) ~= "table" or not avatar_data[avatar_hash] then

				return 404;

			end

			response.headers.etag = avatar_hash;

			local info = avatar_meta.tags[1]:get_child("info");

			response.headers.content_type = info and info.attr.type or "application/octet-stream";

			local data = avatar_data[avatar_hash];

			return base64_decode(data.tags[1]:get_text());

		end;

	}

});