content: -- This file is part of the Wire Server implementation.
  --
  -- Copyright (C) 2022 Wire Swiss GmbH <opensource@wire.com>
  --
  -- This program is free software: you can redistribute it and/or modify it under
  -- the terms of the GNU Affero General Public License as published by the Free
  -- Software Foundation, either version 3 of the License, or (at your option) any
  -- later version.
  --
  -- This program is distributed in the hope that it will be useful, but WITHOUT
  -- ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
  -- FOR A PARTICULAR PURPOSE. See the GNU Affero General Public License for more
  -- details.
  --
  -- You should have received a copy of the GNU Affero General Public License along
  -- with this program. If not, see <https://www.gnu.org/licenses/>.
  
  module CargoHold.Util where
  
  import CargoHold.API.AuditLog
  import CargoHold.AWS
  import CargoHold.App
  import qualified CargoHold.CloudFront as CloudFront
  import CargoHold.Options
  import CargoHold.S3 (S3AssetMeta)
  import qualified CargoHold.S3 as S3
  import qualified CargoHold.Types as V3
  import Data.ByteString.Conversion
  import Data.Qualified (Qualified)
  import Imports
  import URI.ByteString hiding (urlEncode)
  
  genSignedURL :: (ToByteString p) => Maybe (Qualified V3.Principal) -> Maybe S3AssetMeta -> p -> Maybe Text -> Handler URI
  genSignedURL quid mMeta path mbHost = do
    uri <-
      asks (.aws.cloudFront) >>= \case
        Nothing -> S3.signedURL path mbHost
        Just cf -> CloudFront.signedURL cf path
    whenM (asks (.options.settings.assetAuditLogEnabled)) $
      logSignedURLCreation quid mMeta uri
    pure $! uri
  