package middleware import ( "errors" "fmt" "html/template" "io" "io/fs" "net/http" "net/url" "os" "path" "path/filepath" "strconv" "strings" "github.com/labstack/echo/v5" ) // StaticConfig defines the config for Static middleware. type StaticConfig struct { // Skipper defines a function to skip middleware. Skipper Skipper // Root directory from where the static content is served (relative to given Filesystem). // `Root: "."` means root folder from Filesystem. // Required. Root string // Filesystem provides access to the static content. // Optional. Defaults to echo.Filesystem (serves files from `.` folder where executable is started) Filesystem fs.FS // Index file for serving a directory. // Optional. Default value "index.html". Index string // Enable HTML5 mode by forwarding all not-found requests to root so that // SPA (single-page application) can handle the routing. // Optional. Default value false. HTML5 bool // Enable directory browsing. // Optional. Default value false. Browse bool // Enable ignoring of the base of the URL path. // Example: when assigning a static middleware to a non root path group, // the filesystem path is not doubled // Optional. Default value false. IgnoreBase bool // DisablePathUnescaping disables path parameter (param: *) unescaping. This is useful when router is set to unescape // all parameter and doing it again in this middleware would corrupt filename that is requested. DisablePathUnescaping bool // DirectoryListTemplate is template to list directory contents // Optional. Default to `directoryListHTMLTemplate` constant below. DirectoryListTemplate string } const directoryListHTMLTemplate = ` {{ .Name }}
{{ .Name }}
` // DefaultStaticConfig is the default Static middleware config. var DefaultStaticConfig = StaticConfig{ Skipper: DefaultSkipper, Index: "index.html", } // Static returns a Static middleware to serves static content from the provided root directory. func Static(root string) echo.MiddlewareFunc { c := DefaultStaticConfig c.Root = root return StaticWithConfig(c) } // StaticWithConfig returns a Static middleware to serves static content or panics on invalid configuration. func StaticWithConfig(config StaticConfig) echo.MiddlewareFunc { return toMiddlewareOrPanic(config) } // ToMiddleware converts StaticConfig to middleware or returns an error for invalid configuration func (config StaticConfig) ToMiddleware() (echo.MiddlewareFunc, error) { // Defaults if config.Root == "" { config.Root = "." // For security we want to restrict to CWD. } if config.Skipper == nil { config.Skipper = DefaultStaticConfig.Skipper } if config.Index == "" { config.Index = DefaultStaticConfig.Index } if config.DirectoryListTemplate == "" { config.DirectoryListTemplate = directoryListHTMLTemplate } dirListTemplate, err := template.New("index").Parse(config.DirectoryListTemplate) if err != nil { return nil, fmt.Errorf("echo static middleware directory list template parsing error: %w", err) } return func(next echo.HandlerFunc) echo.HandlerFunc { return func(c echo.Context) error { if config.Skipper(c) { return next(c) } p := c.Request().URL.Path pathUnescape := true if strings.HasSuffix(c.Path(), "*") { // When serving from a group, e.g. `/static*`. p = c.PathParam("*") pathUnescape = !config.DisablePathUnescaping // because router could already do PathUnescape } if pathUnescape { p, err = url.PathUnescape(p) if err != nil { return err } } name := filepath.Join(config.Root, filepath.Clean("/"+p)) // "/"+ for security if config.IgnoreBase { routePath := path.Base(strings.TrimRight(c.Path(), "/*")) baseURLPath := path.Base(p) if baseURLPath == routePath { i := strings.LastIndex(name, routePath) name = name[:i] + strings.Replace(name[i:], routePath, "", 1) } } currentFS := config.Filesystem if currentFS == nil { currentFS = c.Echo().Filesystem } file, err := openFile(currentFS, name) if err != nil { if !os.IsNotExist(err) { return err } // when file does not exist let handler to handle that request. if it succeeds then we are done err = next(c) if err == nil { return nil } he, ok := err.(*echo.HTTPError) if !(ok && config.HTML5 && he.Code == http.StatusNotFound) { return err } // is case HTML5 mode is enabled + echo 404 we serve index to the client file, err = openFile(currentFS, filepath.Join(config.Root, config.Index)) if err != nil { return err } } defer file.Close() info, err := file.Stat() if err != nil { return err } if info.IsDir() { index, err := openFile(currentFS, filepath.Join(name, config.Index)) if err != nil { if config.Browse { return listDir(dirListTemplate, name, currentFS, file, c.Response()) } if os.IsNotExist(err) { return next(c) } } defer index.Close() info, err = index.Stat() if err != nil { return err } return serveFile(c, index, info) } return serveFile(c, file, info) } }, nil } func openFile(fs fs.FS, name string) (fs.File, error) { pathWithSlashes := filepath.ToSlash(name) return fs.Open(pathWithSlashes) } func serveFile(c echo.Context, file fs.File, info os.FileInfo) error { ff, ok := file.(io.ReadSeeker) if !ok { return errors.New("file does not implement io.ReadSeeker") } http.ServeContent(c.Response(), c.Request(), info.Name(), info.ModTime(), ff) return nil } func listDir(t *template.Template, name string, filesystem fs.FS, dir fs.File, res *echo.Response) error { // Create directory index res.Header().Set(echo.HeaderContentType, echo.MIMETextHTMLCharsetUTF8) data := struct { Name string Files []interface{} }{ Name: name, } err := fs.WalkDir(filesystem, ".", func(path string, d fs.DirEntry, err error) error { if err != nil { return err } info, infoErr := d.Info() if infoErr != nil { return fmt.Errorf("static middleware list dir error when getting file info: %w", err) } data.Files = append(data.Files, struct { Name string Dir bool Size string }{d.Name(), d.IsDir(), format(info.Size())}) return nil }) if err != nil { return err } return t.Execute(res, data) } // format formats bytes integer to human readable string. // For example, 31323 bytes will return 30.59KB. func format(b int64) string { multiple := "" value := float64(b) switch { case b >= EB: value /= float64(EB) multiple = "EB" case b >= PB: value /= float64(PB) multiple = "PB" case b >= TB: value /= float64(TB) multiple = "TB" case b >= GB: value /= float64(GB) multiple = "GB" case b >= MB: value /= float64(MB) multiple = "MB" case b >= KB: value /= float64(KB) multiple = "KB" case b == 0: return "0" default: return strconv.FormatInt(b, 10) + "B" } return fmt.Sprintf("%.2f%s", value, multiple) }