wechat_hitxy/crmpixel.go

package main

import (
	"encoding/base64"
	"encoding/json"
	"errors"
	"fmt"
	"log"
	"math/rand"
	"net/http"
	"net/url"
	"strconv"
	"strings"
	"time"
)

var cookLeadID = "biukop_cl"

func crmpixelImage() (pixel []byte, err error) {
	b64pixel := "iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAABmJLR0QA/wD/AP+gvaeTAAAACXBIWXMAAAsTAAALEwEAmpwYAAAAB3RJTUUH4QcIBzEJ3JY/6wAAAAh0RVh0Q29tbWVudAD2zJa/AAAADUlEQVQI12NgYGBgAAAABQABXvMqOgAAAABJRU5ErkJggg=="
	pixel, err = base64.StdEncoding.DecodeString(b64pixel)
	return
}

func crmpixel(w http.ResponseWriter, r *http.Request) {
	cookie := crmpixelCookie(r)
	http.SetCookie(w, &cookie)

	//send out pixel 1x1 transparent png file
	pixel, err := crmpixelImage()
	if err == nil {
		w.Write(pixel)
	} else {
		fmt.Fprint(w, "decodig pixel image wrong")
	}
}

func crmpixelCookie(r *http.Request) (ret http.Cookie) {
	cookie, leadok := r.Cookie(cookLeadID) //crm lead

	if leadok != nil {
		ret, _ = createNewCookie(r)
		return
	}

	valid := isValidCookieBiukopCL(cookie.Value)
	if !valid {
		ret, _ = createNewCookie(r)
		return
	}

	//refresh expiration
	ret = *cookie
	ret.Expires = time.Now().Add(10 * 365 * 24 * time.Hour)

	return
}

func getLeadIDFromCookie(r *http.Request) (leadID string, ok bool) {
	return cookieVerifyAndGet(r, cookLeadID)
}

func cookieVerifyAndGet(r *http.Request, name string) (value string, ok bool) {
	ok = false
	cookie, leadok := r.Cookie(name)
	if leadok != nil {
		return
	}
	valid := isValidCookieBiukopCL(cookie.Value)
	if !valid {
		return
	}

	//correctly split string
	s := strings.Split(cookie.Value, "|")
	if len(s) != 4 || s[0] == "" {
		return
	}
	ok = true
	value = s[0]
	return

}

func createNewCookie(r *http.Request) (ret http.Cookie, info crmdLead) {
	info = crmCreateNewAnonymousLeadByHTTPRequest(r)
	ret = cookieFromLeadID(info.ID)
	return
}

func cookieFromLeadID(leadID string) (ret http.Cookie) {
	return cookieCreateLongTerm(cookLeadID, leadID)
}

func cookieCreateLongTerm(name, value string) (ret http.Cookie) {
	expiration := time.Now().Add(10 * 365 * 24 * time.Hour)
	signedValue := cookieSignValue(value)
	ret = http.Cookie{Name: name, Value: signedValue, Expires: expiration}
	return
}

func cookieCreate(name, value string, expireInSeconds int) (ret http.Cookie) {
	expiration := time.Now().Add(time.Duration(expireInSeconds) * time.Second)
	signedValue := cookieSignValue(value)
	ret = http.Cookie{Name: name, Value: signedValue, Expires: expiration}
	return
}

//set to "" and make it expire
func cookieClear(name string) (ret http.Cookie) {
	expiration := time.Unix(0, 0) //Epoc
	ret = http.Cookie{Name: name, Value: "", Expires: expiration}
	return
}

func crmCreateNewAnonymousLeadByHTTPRequest(r *http.Request) (info crmdLead) {
	info.FirstName = "Anonymous"
	info.LastName = "User " + r.RemoteAddr
	info.Password = "Password"
	info.Status = "Anonymous"
	info.Description = "Anonymous user from " + r.RemoteAddr
	info.ForceDuplicate = true
	b, err := json.Marshal(info)
	if err != nil {
		return
	}
	entity, err := crmCreateEntity("Lead", b)
	if err == nil || isErrIndicateDuplicate(err) {
		info, _ = entity.(crmdLead)
	}
	return
}

func isValidCookieBiukopCL(cookieValue string) (valid bool) {
	valid = false

	//correctly split string
	s := strings.Split(cookieValue, "|")
	if len(s) != 4 || s[0] == "" {
		return
	}
	id, nonce, timestamp, signature := s[0], s[1], s[2], s[3]

	//check signature
	combined := id + nonce
	expected := calculateSignature(timestamp, combined, IntraAPIConfig.CRMSecrete)
	if expected != signature {
		return
	}

	ts, err := strconv.Atoi(timestamp)
	if err != nil {
		return
	}

	if timestampOldThan(int32(ts), 86400) { //older than 1 day
		//find lead data
		_, err := crmpixelLead(id)
		if err != nil {
			return
		}
	}
	valid = true
	return
}

func buildBiukopCLsignature(id, nonce string) (timestamp, signature string) {
	combined := id + nonce
	timestamp = fmt.Sprintf("%d", time.Now().Unix())
	signature = calculateSignature(timestamp, combined, IntraAPIConfig.CRMSecrete)
	return
}

func cookieSignValue(id string) (ret string) {
	rand.Seed(time.Now().Unix())
	nonce := fmt.Sprintf("%d", rand.Intn(655352017))
	timestamp, signature := buildBiukopCLsignature(id, nonce)
	strs := []string{id, nonce, timestamp, signature} //order is very important
	ret = strings.Join(strs, "|")
	return
}

func crmpixelLead(id string) (info crmdLead, err error) {
	entity, err := crmGetEntity("Lead", id)
	if err != nil {
		return
	}

	info, ok := entity.(crmdLead)
	if !ok {
		err = errors.New("search lead, return a bad entity type")
	}
	return
}

//for user's initial registration, especially for wechat users
//they visit a url that is specifically designed for them to
//auth and input their profile data.
//the url's query string will contains a token and a signature
//so that it's verified, by single get request, to allow people to
//enter their details into the CRM system.
//
//this handler, check's the query sting ,set an auth cookie to the client
//and serve angular app, through an URL "/profile/edit"
//or if the user has already been registered,
//redirect user to a URL "/pages/dashboard"
//
func setTrackingCookieAndRecirect(w http.ResponseWriter, r *http.Request) {
	m, err := url.ParseQuery(r.URL.RawQuery)
	if err != nil {
		response400Handler(w)
		return
	}

	url, ok := m["url"]
	if !ok {
		response400Handler(w)
		return
	}

	//check request leadID - lid and my cookie lead id
	leadID, ok := m["lid"]
	myLeadID, found := getLeadIDFromCookie(r) //existing cookie

	expireInSeconds := 120                    //default 2minute
	if found && ok && myLeadID == leadID[0] { //our cookie match the request lid
		expireInSeconds = 86400 //extended to 1 day
	}

	//check signature, prevent unauthorized request
	if !checkSignatureByTokenWithExpireSeconds(r, IntraAPIConfig.CRMSecrete, expireInSeconds) {
		response403Handler(w)
		return
	}

	//set cookie if any
	if ok {
		log.Println("setlead cookie :" + leadID[0])
		cookie := cookieFromLeadID(leadID[0])
		log.Println(cookie)
		http.SetCookie(w, &cookie)
	} else {
		cookie := crmpixelCookie(r)
		http.SetCookie(w, &cookie)
	}

	//get expire settings if any
	expire := 7200 //2 hours
	expireTime, ok := m["expire"]
	if ok {
		expire, _ = strconv.Atoi(expireTime[0])
	}

	//set all cookie from url
	for k, v := range m {
		if k == "lid" || k == "url" || k == "expire" || k == "nonce" || k == "signature" || k == "timestamp" { //skip lead id and URL and expire
			continue
		}

		if v[0] != "" {
			log.Printf("set cookie %s=%s", k, v)
			cookie := cookieCreate(k, v[0], expire)
			http.SetCookie(w, &cookie)
		} else { //clear cook
			log.Printf("clear cookie %s=%s", k, v)
			cookie := cookieClear(k)
			http.SetCookie(w, &cookie)
		}
	}

	//perform redirect
	http.Redirect(w, r, url[0], 307) //302 temp redirect
	return
}