jellyfin/Jellyfin.Server/Middleware/ExceptionMiddleware.cs

using System;
using System.IO;
using System.Net.Mime;
using System.Net.Sockets;
using System.Threading.Tasks;
using MediaBrowser.Common.Extensions;
using MediaBrowser.Controller.Authentication;
using MediaBrowser.Controller.Configuration;
using MediaBrowser.Controller.Net;
using Microsoft.AspNetCore.Http;
using Microsoft.Extensions.Logging;

namespace Jellyfin.Server.Middleware
{
    /// <summary>
    /// Exception Middleware.
    /// </summary>
    public class ExceptionMiddleware
    {
        private readonly RequestDelegate _next;
        private readonly ILogger<ExceptionMiddleware> _logger;
        private readonly IServerConfigurationManager _configuration;

        /// <summary>
        /// Initializes a new instance of the <see cref="ExceptionMiddleware"/> class.
        /// </summary>
        /// <param name="next">Next request delegate.</param>
        /// <param name="logger">Instance of the <see cref="ILogger{ExceptionMiddleware}"/> interface.</param>
        /// <param name="serverConfigurationManager">Instance of the <see cref="IServerConfigurationManager"/> interface.</param>
        public ExceptionMiddleware(
            RequestDelegate next,
            ILogger<ExceptionMiddleware> logger,
            IServerConfigurationManager serverConfigurationManager)
        {
            _next = next;
            _logger = logger;
            _configuration = serverConfigurationManager;
        }

        /// <summary>
        /// Invoke request.
        /// </summary>
        /// <param name="context">Request context.</param>
        /// <returns>Task.</returns>
        public async Task Invoke(HttpContext context)
        {
            try
            {
                await _next(context).ConfigureAwait(false);
            }
            catch (Exception ex)
            {
                if (context.Response.HasStarted)
                {
                    _logger.LogWarning("The response has already started, the exception middleware will not be executed.");
                    throw;
                }

                ex = GetActualException(ex);

                bool ignoreStackTrace =
                    ex is SocketException
                    || ex is IOException
                    || ex is OperationCanceledException
                    || ex is SecurityException
                    || ex is AuthenticationException
                    || ex is FileNotFoundException;

                if (ignoreStackTrace)
                {
                    _logger.LogError(
                        "Error processing request: {ExceptionMessage}. URL {Method} {Url}.",
                        ex.Message.TrimEnd('.'),
                        context.Request.Method,
                        context.Request.Path);
                }
                else
                {
                    _logger.LogError(
                        ex,
                        "Error processing request. URL {Method} {Url}.",
                        context.Request.Method,
                        context.Request.Path);
                }

                context.Response.StatusCode = GetStatusCode(ex);
                context.Response.ContentType = MediaTypeNames.Text.Plain;
                var errorContent = NormalizeExceptionMessage(ex.Message);
                await context.Response.WriteAsync(errorContent).ConfigureAwait(false);
            }
        }

        private static Exception GetActualException(Exception ex)
        {
            if (ex is AggregateException agg)
            {
                var inner = agg.InnerException;
                if (inner != null)
                {
                    return GetActualException(inner);
                }

                var inners = agg.InnerExceptions;
                if (inners.Count > 0)
                {
                    return GetActualException(inners[0]);
                }
            }

            return ex;
        }

        private static int GetStatusCode(Exception ex)
        {
            switch (ex)
            {
                case ArgumentException _: return StatusCodes.Status400BadRequest;
                case SecurityException _: return StatusCodes.Status401Unauthorized;
                case DirectoryNotFoundException _:
                case FileNotFoundException _:
                case ResourceNotFoundException _: return StatusCodes.Status404NotFound;
                case MethodNotAllowedException _: return StatusCodes.Status405MethodNotAllowed;
                default: return StatusCodes.Status500InternalServerError;
            }
        }

        private string NormalizeExceptionMessage(string msg)
        {
            if (msg == null)
            {
                return string.Empty;
            }

            // Strip any information we don't want to reveal
            return msg.Replace(
                    _configuration.ApplicationPaths.ProgramSystemPath,
                    string.Empty,
                    StringComparison.OrdinalIgnoreCase)
                .Replace(
                    _configuration.ApplicationPaths.ProgramDataPath,
                    string.Empty,
                    StringComparison.OrdinalIgnoreCase);
        }
    }
}