{-# LANGUAGE QuasiQuotes #-} {-# LANGUAGE OverloadedStrings #-} {-# LANGUAGE RecordWildCards #-} {-# LANGUAGE FlexibleContexts #-} {-# LANGUAGE CPP #-} module Yesod.Form.Functions ( -- * Running in MForm monad newFormIdent , askParams , askFiles -- * Applicative/Monadic conversion , formToAForm , aFormToForm -- * Fields to Forms , mreq , mopt , areq , aopt -- * Run a form , runFormPost , runFormPostNoToken , runFormGet -- * Generate a blank form , generateFormPost , generateFormGet -- * Rendering , FormRender , renderTable , renderDivs , renderDivsNoLabels , renderBootstrap -- * Validation , check , checkBool , checkM , checkMMap , checkMMod , customErrorMessage -- * Utilities , fieldSettingsLabel , aformM , parseHelper ) where import Yesod.Form.Types import Data.Text (Text, pack) import Control.Arrow (second) import Control.Monad.Trans.RWS (ask, get, put, runRWST, tell, evalRWST) import Control.Monad.Trans.Class (lift) import Control.Monad (liftM, join) import Crypto.Classes (constTimeEq) import Text.Blaze (Markup, toMarkup) #define Html Markup #define toHtml toMarkup import Yesod.Handler (GHandler, getRequest, runRequestBody, newIdent, getYesod) import Yesod.Core (RenderMessage, SomeMessage (..)) import Yesod.Widget (GWidget, whamlet) import Yesod.Request (reqToken, reqWaiRequest, reqGetParams, languages) import Network.Wai (requestMethod) import Text.Hamlet (shamlet) import Data.Monoid (mempty) import Data.Maybe (listToMaybe, fromMaybe) import Yesod.Message (RenderMessage (..)) import qualified Data.Map as Map import qualified Data.Text.Encoding as TE import Control.Applicative ((<$>)) import Control.Arrow (first) -- | Get a unique identifier. newFormIdent :: MForm sub master Text newFormIdent = do i <- get let i' = incrInts i put i' return $ pack $ 'f' : show i' where incrInts (IntSingle i) = IntSingle $ i + 1 incrInts (IntCons i is) = (i + 1) `IntCons` is formToAForm :: MForm sub master (FormResult a, [FieldView sub master]) -> AForm sub master a formToAForm form = AForm $ \(master, langs) env ints -> do ((a, xmls), ints', enc) <- runRWST form (env, master, langs) ints return (a, (++) xmls, ints', enc) aFormToForm :: AForm sub master a -> MForm sub master (FormResult a, [FieldView sub master] -> [FieldView sub master]) aFormToForm (AForm aform) = do ints <- get (env, master, langs) <- ask (a, xml, ints', enc) <- lift $ aform (master, langs) env ints put ints' tell enc return (a, xml) askParams :: MForm sub master (Maybe Env) askParams = do (x, _, _) <- ask return $ liftM fst x askFiles :: MForm sub master (Maybe FileEnv) askFiles = do (x, _, _) <- ask return $ liftM snd x mreq :: RenderMessage master FormMessage => Field sub master a -> FieldSettings master -> Maybe a -> MForm sub master (FormResult a, FieldView sub master) mreq field fs mdef = mhelper field fs mdef (\m l -> FormFailure [renderMessage m l MsgValueRequired]) FormSuccess True mopt :: Field sub master a -> FieldSettings master -> Maybe (Maybe a) -> MForm sub master (FormResult (Maybe a), FieldView sub master) mopt field fs mdef = mhelper field fs (join mdef) (const $ const $ FormSuccess Nothing) (FormSuccess . Just) False mhelper :: Field sub master a -> FieldSettings master -> Maybe a -> (master -> [Text] -> FormResult b) -- ^ on missing -> (a -> FormResult b) -- ^ on success -> Bool -- ^ is it required? -> MForm sub master (FormResult b, FieldView sub master) mhelper Field {..} FieldSettings {..} mdef onMissing onFound isReq = do mp <- askParams name <- maybe newFormIdent return fsName theId <- lift $ maybe newIdent return fsId (_, master, langs) <- ask let mr2 = renderMessage master langs (res, val) <- case mp of Nothing -> return (FormMissing, maybe (Left "") Right mdef) Just p -> do let mvals = fromMaybe [] $ Map.lookup name p emx <- lift $ fieldParse mvals return $ case emx of Left (SomeMessage e) -> (FormFailure [renderMessage master langs e], maybe (Left "") Left (listToMaybe mvals)) Right mx -> case mx of Nothing -> (onMissing master langs, Left "") Just x -> (onFound x, Right x) return (res, FieldView { fvLabel = toHtml $ mr2 fsLabel , fvTooltip = fmap toHtml $ fmap mr2 fsTooltip , fvId = theId , fvInput = fieldView theId name fsAttrs val isReq , fvErrors = case res of FormFailure [e] -> Just $ toHtml e _ -> Nothing , fvRequired = isReq }) areq :: RenderMessage master FormMessage => Field sub master a -> FieldSettings master -> Maybe a -> AForm sub master a areq a b = formToAForm . fmap (second return) . mreq a b aopt :: Field sub master a -> FieldSettings master -> Maybe (Maybe a) -> AForm sub master (Maybe a) aopt a b = formToAForm . fmap (second return) . mopt a b runFormGeneric :: MForm sub master a -> master -> [Text] -> Maybe (Env, FileEnv) -> GHandler sub master (a, Enctype) runFormGeneric form master langs env = evalRWST form (env, master, langs) (IntSingle 1) -- | This function is used to both initially render a form and to later extract -- results from it. Note that, due to CSRF protection and a few other issues, -- forms submitted via GET and POST are slightly different. As such, be sure to -- call the relevant function based on how the form will be submitted, /not/ -- the current request method. -- -- For example, a common case is displaying a form on a GET request and having -- the form submit to a POST page. In such a case, both the GET and POST -- handlers should use 'runFormPost'. runFormPost :: RenderMessage master FormMessage => (Html -> MForm sub master (FormResult a, xml)) -> GHandler sub master ((FormResult a, xml), Enctype) runFormPost form = do env <- postEnv postHelper form env postHelper :: RenderMessage master FormMessage => (Html -> MForm sub master (FormResult a, xml)) -> Maybe (Env, FileEnv) -> GHandler sub master ((FormResult a, xml), Enctype) postHelper form env = do req <- getRequest let tokenKey = "_token" let token = case reqToken req of Nothing -> mempty Just n -> [shamlet| $newline never |] m <- getYesod langs <- languages ((res, xml), enctype) <- runFormGeneric (form token) m langs env let res' = case (res, env) of (FormSuccess{}, Just (params, _)) | not (Map.lookup tokenKey params === reqToken req) -> FormFailure [renderMessage m langs MsgCsrfWarning] _ -> res where (Just [t1]) === (Just t2) = TE.encodeUtf8 t1 `constTimeEq` TE.encodeUtf8 t2 Nothing === Nothing = True -- ^ It's important to use constTimeEq _ === _ = False -- in order to avoid timing attacks. return ((res', xml), enctype) -- | Similar to 'runFormPost', except it always ignore the currently available -- environment. This is necessary in cases like a wizard UI, where a single -- page will both receive and incoming form and produce a new, blank form. For -- general usage, you can stick with @runFormPost@. generateFormPost :: RenderMessage master FormMessage => (Html -> MForm sub master (FormResult a, xml)) -> GHandler sub master (xml, Enctype) generateFormPost form = first snd <$> postHelper form Nothing postEnv :: GHandler sub master (Maybe (Env, FileEnv)) postEnv = do req <- getRequest if requestMethod (reqWaiRequest req) == "GET" then return Nothing else do (p, f) <- runRequestBody let p' = Map.unionsWith (++) $ map (\(x, y) -> Map.singleton x [y]) p return $ Just (p', Map.fromList f) runFormPostNoToken :: (Html -> MForm sub master (FormResult a, xml)) -> GHandler sub master ((FormResult a, xml), Enctype) runFormPostNoToken form = do langs <- languages m <- getYesod env <- postEnv runFormGeneric (form mempty) m langs env runFormGet :: (Html -> MForm sub master a) -> GHandler sub master (a, Enctype) runFormGet form = do gets <- liftM reqGetParams getRequest let env = case lookup getKey gets of Nothing -> Nothing Just _ -> Just (Map.unionsWith (++) $ map (\(x, y) -> Map.singleton x [y]) gets, Map.empty) getHelper form env generateFormGet :: (Html -> MForm sub master a) -> GHandler sub master (a, Enctype) generateFormGet form = getHelper form Nothing getKey :: Text getKey = "_hasdata" getHelper :: (Html -> MForm sub master a) -> Maybe (Env, FileEnv) -> GHandler sub master (a, Enctype) getHelper form env = do let fragment = [shamlet| $newline never |] langs <- languages m <- getYesod runFormGeneric (form fragment) m langs env type FormRender sub master a = AForm sub master a -> Html -> MForm sub master (FormResult a, GWidget sub master ()) renderTable, renderDivs, renderDivsNoLabels :: FormRender sub master a renderTable aform fragment = do (res, views') <- aFormToForm aform let views = views' [] -- FIXME non-valid HTML let widget = [whamlet| $newline never \#{fragment} $forall view <- views