mirror of
https://github.com/esp8266/Arduino.git
synced 2025-06-12 01:53:07 +03:00
Better follow redirection for HTTPClient
(#7157)
* Add way to force follow redirections in `HTTPClient` * Follow other client implementations about `HTTP_CODE_FOUND`; Small rewrite of `sendRequest` function of `HTTPClient` * Better names for follow redirection modes in `HTTPClient` Also changed a bit order of the enums (0 element to be DISABLED) * Rewrite `sendRequest` to remove recursion Also got rid of unnecessary `redirectCount` field. Now redirect counting and limiting is handled in `sendRequest` directly. * Use new `setFollowRedirects` of `HTTPClient` instead deprecated one. * More explanatory comment for `followRedirects_t` in HTTPClient
This commit is contained in:
committed by
GitHub
parent
1127a090ad
commit
d91f1dac36
@ -423,7 +423,6 @@ void HTTPClient::end(void)
|
||||
{
|
||||
disconnect(false);
|
||||
clear();
|
||||
_redirectCount = 0;
|
||||
}
|
||||
|
||||
/**
|
||||
@ -558,8 +557,17 @@ bool HTTPClient::setURL(const String& url)
|
||||
/**
|
||||
* set true to follow redirects.
|
||||
* @param follow
|
||||
* @deprecated
|
||||
*/
|
||||
void HTTPClient::setFollowRedirects(bool follow)
|
||||
{
|
||||
_followRedirects = follow ? HTTPC_STRICT_FOLLOW_REDIRECTS : HTTPC_DISABLE_FOLLOW_REDIRECTS;
|
||||
}
|
||||
/**
|
||||
* set redirect follow mode. See `followRedirects_t` enum for avaliable modes.
|
||||
* @param follow
|
||||
*/
|
||||
void HTTPClient::setFollowRedirects(followRedirects_t follow)
|
||||
{
|
||||
_followRedirects = follow;
|
||||
}
|
||||
@ -652,8 +660,9 @@ int HTTPClient::sendRequest(const char * type, const String& payload)
|
||||
*/
|
||||
int HTTPClient::sendRequest(const char * type, const uint8_t * payload, size_t size)
|
||||
{
|
||||
int code;
|
||||
bool redirect = false;
|
||||
int code = 0;
|
||||
uint16_t redirectCount = 0;
|
||||
do {
|
||||
// wipe out any existing headers from previous request
|
||||
for(size_t i = 0; i < _headerKeysCount; i++) {
|
||||
@ -662,8 +671,7 @@ int HTTPClient::sendRequest(const char * type, const uint8_t * payload, size_t s
|
||||
}
|
||||
}
|
||||
|
||||
redirect = false;
|
||||
DEBUG_HTTPCLIENT("[HTTP-Client][sendRequest] type: '%s' redirCount: %d\n", type, _redirectCount);
|
||||
DEBUG_HTTPCLIENT("[HTTP-Client][sendRequest] type: '%s' redirCount: %d\n", type, redirectCount);
|
||||
|
||||
// connect to server
|
||||
if(!connect()) {
|
||||
@ -687,9 +695,9 @@ int HTTPClient::sendRequest(const char * type, const uint8_t * payload, size_t s
|
||||
int towrite = std::min((int)size, (int)HTTP_TCP_BUFFER_SIZE);
|
||||
written = _client->write(p + bytesWritten, towrite);
|
||||
if (written < 0) {
|
||||
return returnError(HTTPC_ERROR_SEND_PAYLOAD_FAILED);
|
||||
return returnError(HTTPC_ERROR_SEND_PAYLOAD_FAILED);
|
||||
} else if (written == 0) {
|
||||
return returnError(HTTPC_ERROR_CONNECTION_LOST);
|
||||
return returnError(HTTPC_ERROR_CONNECTION_LOST);
|
||||
}
|
||||
bytesWritten += written;
|
||||
size -= written;
|
||||
@ -700,42 +708,67 @@ int HTTPClient::sendRequest(const char * type, const uint8_t * payload, size_t s
|
||||
code = handleHeaderResponse();
|
||||
|
||||
//
|
||||
// We can follow redirects for 301/302/307 for GET and HEAD requests and
|
||||
// and we have not exceeded the redirect limit preventing an infinite
|
||||
// redirect loop.
|
||||
//
|
||||
// Handle redirections as stated in RFC document:
|
||||
// https://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html
|
||||
//
|
||||
if (_followRedirects &&
|
||||
(_redirectCount < _redirectLimit) &&
|
||||
(_location.length() > 0) &&
|
||||
(code == 301 || code == 302 || code == 307) &&
|
||||
(!strcmp(type, "GET") || !strcmp(type, "HEAD"))
|
||||
) {
|
||||
_redirectCount += 1; // increment the count for redirect.
|
||||
redirect = true;
|
||||
DEBUG_HTTPCLIENT("[HTTP-Client][sendRequest] following redirect:: '%s' redirCount: %d\n", _location.c_str(), _redirectCount);
|
||||
if (!setURL(_location)) {
|
||||
// return the redirect instead of handling on failure of setURL()
|
||||
redirect = false;
|
||||
// Implementing HTTP_CODE_FOUND as redirection with GET method,
|
||||
// to follow most of existing user agent implementations.
|
||||
//
|
||||
redirect = false;
|
||||
if (
|
||||
_followRedirects != HTTPC_DISABLE_FOLLOW_REDIRECTS &&
|
||||
redirectCount < _redirectLimit &&
|
||||
_location.length() > 0
|
||||
) {
|
||||
switch (code) {
|
||||
// redirecting using the same method
|
||||
case HTTP_CODE_MOVED_PERMANENTLY:
|
||||
case HTTP_CODE_TEMPORARY_REDIRECT: {
|
||||
if (
|
||||
// allow to force redirections on other methods
|
||||
// (the RFC require user to accept the redirection)
|
||||
_followRedirects == HTTPC_FORCE_FOLLOW_REDIRECTS ||
|
||||
// allow GET and HEAD methods without force
|
||||
!strcmp(type, "GET") ||
|
||||
!strcmp(type, "HEAD")
|
||||
) {
|
||||
redirectCount += 1;
|
||||
DEBUG_HTTPCLIENT("[HTTP-Client][sendRequest] following redirect (the same method): '%s' redirCount: %d\n", _location.c_str(), redirectCount);
|
||||
if (!setURL(_location)) {
|
||||
DEBUG_HTTPCLIENT("[HTTP-Client][sendRequest] failed setting URL for redirection\n");
|
||||
// no redirection
|
||||
break;
|
||||
}
|
||||
// redirect using the same request method and payload, diffrent URL
|
||||
redirect = true;
|
||||
}
|
||||
break;
|
||||
}
|
||||
// redirecting with method dropped to GET or HEAD
|
||||
// note: it does not need `HTTPC_FORCE_FOLLOW_REDIRECTS` for any method
|
||||
case HTTP_CODE_FOUND:
|
||||
case HTTP_CODE_SEE_OTHER: {
|
||||
redirectCount += 1;
|
||||
DEBUG_HTTPCLIENT("[HTTP-Client][sendRequest] following redirect (dropped to GET/HEAD): '%s' redirCount: %d\n", _location.c_str(), redirectCount);
|
||||
if (!setURL(_location)) {
|
||||
DEBUG_HTTPCLIENT("[HTTP-Client][sendRequest] failed setting URL for redirection\n");
|
||||
// no redirection
|
||||
break;
|
||||
}
|
||||
// redirect after changing method to GET/HEAD and dropping payload
|
||||
type = "GET";
|
||||
payload = nullptr;
|
||||
size = 0;
|
||||
redirect = true;
|
||||
break;
|
||||
}
|
||||
|
||||
default:
|
||||
break;
|
||||
}
|
||||
}
|
||||
|
||||
} while (redirect);
|
||||
|
||||
// handle 303 redirect for non GET/HEAD by changing to GET and requesting new url
|
||||
if (_followRedirects &&
|
||||
(_redirectCount < _redirectLimit) &&
|
||||
(_location.length() > 0) &&
|
||||
(code == 303) &&
|
||||
strcmp(type, "GET") && strcmp(type, "HEAD")
|
||||
) {
|
||||
_redirectCount += 1;
|
||||
if (setURL(_location)) {
|
||||
code = sendRequest("GET");
|
||||
}
|
||||
}
|
||||
|
||||
// handle Server Response (Header)
|
||||
return returnError(code);
|
||||
}
|
||||
|
@ -130,6 +130,23 @@ typedef enum {
|
||||
HTTPC_TE_CHUNKED
|
||||
} transferEncoding_t;
|
||||
|
||||
/**
|
||||
* redirection follow mode.
|
||||
* + `HTTPC_DISABLE_FOLLOW_REDIRECTS` - no redirection will be followed.
|
||||
* + `HTTPC_STRICT_FOLLOW_REDIRECTS` - strict RFC2616, only requests using
|
||||
* GET or HEAD methods will be redirected (using the same method),
|
||||
* since the RFC requires end-user confirmation in other cases.
|
||||
* + `HTTPC_FORCE_FOLLOW_REDIRECTS` - all redirections will be followed,
|
||||
* regardless of a used method. New request will use the same method,
|
||||
* and they will include the same body data and the same headers.
|
||||
* In the sense of the RFC, it's just like every redirection is confirmed.
|
||||
*/
|
||||
typedef enum {
|
||||
HTTPC_DISABLE_FOLLOW_REDIRECTS,
|
||||
HTTPC_STRICT_FOLLOW_REDIRECTS,
|
||||
HTTPC_FORCE_FOLLOW_REDIRECTS
|
||||
} followRedirects_t;
|
||||
|
||||
#if HTTPCLIENT_1_1_COMPATIBLE
|
||||
class TransportTraits;
|
||||
typedef std::unique_ptr<TransportTraits> TransportTraitsPtr;
|
||||
@ -173,8 +190,12 @@ public:
|
||||
void setAuthorization(const char * user, const char * password);
|
||||
void setAuthorization(const char * auth);
|
||||
void setTimeout(uint16_t timeout);
|
||||
void setFollowRedirects(bool follow);
|
||||
|
||||
// Redirections
|
||||
void setFollowRedirects(bool follow) __attribute__ ((deprecated));
|
||||
void setFollowRedirects(followRedirects_t follow);
|
||||
void setRedirectLimit(uint16_t limit); // max redirects to follow for a single request
|
||||
|
||||
bool setURL(const String& url); // handy for handling redirects
|
||||
void useHTTP10(bool usehttp10 = true);
|
||||
|
||||
@ -252,8 +273,7 @@ protected:
|
||||
int _returnCode = 0;
|
||||
int _size = -1;
|
||||
bool _canReuse = false;
|
||||
bool _followRedirects = false;
|
||||
uint16_t _redirectCount = 0;
|
||||
followRedirects_t _followRedirects = HTTPC_DISABLE_FOLLOW_REDIRECTS;
|
||||
uint16_t _redirectLimit = 10;
|
||||
String _location;
|
||||
transferEncoding_t _transferEncoding = HTTPC_TE_IDENTITY;
|
||||
|
Reference in New Issue
Block a user