2007-05-18 02:24:50 -04:00
|
|
|
require 'tempfile'
|
|
|
|
require 'stringio'
|
|
|
|
require 'strscan'
|
|
|
|
|
2009-05-13 04:10:37 -04:00
|
|
|
require 'active_support/core_ext/hash/indifferent_access'
|
2009-11-07 14:23:21 -05:00
|
|
|
require 'active_support/core_ext/string/access'
|
2010-11-02 06:47:32 -04:00
|
|
|
require 'active_support/inflector'
|
2009-12-12 19:41:26 -05:00
|
|
|
require 'action_dispatch/http/headers'
|
2011-06-29 09:38:09 -04:00
|
|
|
require 'action_controller/metal/exceptions'
|
2007-11-28 21:08:51 -05:00
|
|
|
|
2009-01-27 19:54:01 -05:00
|
|
|
module ActionDispatch
|
2009-01-09 12:15:38 -05:00
|
|
|
class Request < Rack::Request
|
2010-01-16 07:17:03 -05:00
|
|
|
include ActionDispatch::Http::Cache::Request
|
|
|
|
include ActionDispatch::Http::MimeNegotiation
|
|
|
|
include ActionDispatch::Http::Parameters
|
2010-01-21 05:39:57 -05:00
|
|
|
include ActionDispatch::Http::FilterParameters
|
2010-01-16 07:17:03 -05:00
|
|
|
include ActionDispatch::Http::Upload
|
|
|
|
include ActionDispatch::Http::URL
|
2008-12-22 19:15:08 -05:00
|
|
|
|
2011-05-04 20:56:56 -04:00
|
|
|
LOCALHOST = [/^127\.0\.0\.\d{1,3}$/, "::1", /^0:0:0:0:0:0:0:1(%.*)?$/].freeze
|
|
|
|
ENV_METHODS = %w[ AUTH_TYPE GATEWAY_INTERFACE
|
2008-12-22 19:15:08 -05:00
|
|
|
PATH_TRANSLATED REMOTE_HOST
|
2009-01-09 12:15:38 -05:00
|
|
|
REMOTE_IDENT REMOTE_USER REMOTE_ADDR
|
2008-12-22 19:15:08 -05:00
|
|
|
SERVER_NAME SERVER_PROTOCOL
|
|
|
|
|
|
|
|
HTTP_ACCEPT HTTP_ACCEPT_CHARSET HTTP_ACCEPT_ENCODING
|
|
|
|
HTTP_ACCEPT_LANGUAGE HTTP_CACHE_CONTROL HTTP_FROM
|
2011-05-04 20:56:56 -04:00
|
|
|
HTTP_NEGOTIATE HTTP_PRAGMA ].freeze
|
2011-05-24 17:38:59 -04:00
|
|
|
|
2011-05-04 20:56:56 -04:00
|
|
|
ENV_METHODS.each do |env|
|
2010-01-16 07:17:03 -05:00
|
|
|
class_eval <<-METHOD, __FILE__, __LINE__ + 1
|
|
|
|
def #{env.sub(/^HTTP_/n, '').downcase}
|
|
|
|
@env["#{env}"]
|
|
|
|
end
|
|
|
|
METHOD
|
2008-12-22 19:15:08 -05:00
|
|
|
end
|
|
|
|
|
2010-03-08 18:57:07 -05:00
|
|
|
def self.new(env)
|
|
|
|
if request = env["action_dispatch.request"] && request.instance_of?(self)
|
|
|
|
return request
|
|
|
|
end
|
|
|
|
|
|
|
|
super
|
|
|
|
end
|
|
|
|
|
2008-12-22 19:15:08 -05:00
|
|
|
def key?(key)
|
|
|
|
@env.key?(key)
|
|
|
|
end
|
|
|
|
|
2010-11-02 06:47:32 -04:00
|
|
|
# List of HTTP request methods from the following RFCs:
|
|
|
|
# Hypertext Transfer Protocol -- HTTP/1.1 (http://www.ietf.org/rfc/rfc2616.txt)
|
|
|
|
# HTTP Extensions for Distributed Authoring -- WEBDAV (http://www.ietf.org/rfc/rfc2518.txt)
|
|
|
|
# Versioning Extensions to WebDAV (http://www.ietf.org/rfc/rfc3253.txt)
|
|
|
|
# Ordered Collections Protocol (WebDAV) (http://www.ietf.org/rfc/rfc3648.txt)
|
|
|
|
# Web Distributed Authoring and Versioning (WebDAV) Access Control Protocol (http://www.ietf.org/rfc/rfc3744.txt)
|
|
|
|
# Web Distributed Authoring and Versioning (WebDAV) SEARCH (http://www.ietf.org/rfc/rfc5323.txt)
|
|
|
|
# PATCH Method for HTTP (http://www.ietf.org/rfc/rfc5789.txt)
|
|
|
|
RFC2616 = %w(OPTIONS GET HEAD POST PUT DELETE TRACE CONNECT)
|
|
|
|
RFC2518 = %w(PROPFIND PROPPATCH MKCOL COPY MOVE LOCK UNLOCK)
|
|
|
|
RFC3253 = %w(VERSION-CONTROL REPORT CHECKOUT CHECKIN UNCHECKOUT MKWORKSPACE UPDATE LABEL MERGE BASELINE-CONTROL MKACTIVITY)
|
|
|
|
RFC3648 = %w(ORDERPATCH)
|
|
|
|
RFC3744 = %w(ACL)
|
|
|
|
RFC5323 = %w(SEARCH)
|
|
|
|
RFC5789 = %w(PATCH)
|
|
|
|
|
|
|
|
HTTP_METHODS = RFC2616 + RFC2518 + RFC3253 + RFC3648 + RFC3744 + RFC5323 + RFC5789
|
|
|
|
HTTP_METHOD_LOOKUP = Hash.new { |h, m| h[m] = m.underscore.to_sym if HTTP_METHODS.include?(m) }
|
2008-08-08 02:43:12 -04:00
|
|
|
|
2010-04-03 23:23:23 -04:00
|
|
|
# Returns the HTTP \method that the application should see.
|
|
|
|
# In the case where the \method was overridden by a middleware
|
|
|
|
# (for instance, if a HEAD request was converted to a GET,
|
|
|
|
# or if a _method parameter was used to determine the \method
|
|
|
|
# the application should use), this \method returns the overridden
|
|
|
|
# value, not the original.
|
2007-11-28 21:08:51 -05:00
|
|
|
def request_method
|
2010-09-29 19:09:58 -04:00
|
|
|
@request_method ||= check_method(env["REQUEST_METHOD"])
|
2010-04-03 23:23:23 -04:00
|
|
|
end
|
|
|
|
|
|
|
|
# Returns a symbol form of the #request_method
|
|
|
|
def request_method_symbol
|
|
|
|
HTTP_METHOD_LOOKUP[request_method]
|
2007-11-28 21:08:51 -05:00
|
|
|
end
|
|
|
|
|
2010-04-03 23:23:23 -04:00
|
|
|
# Returns the original value of the environment's REQUEST_METHOD,
|
|
|
|
# even if it was overridden by middleware. See #request_method for
|
|
|
|
# more information.
|
2004-11-23 20:04:44 -05:00
|
|
|
def method
|
2010-09-29 19:09:58 -04:00
|
|
|
@method ||= check_method(env["rack.methodoverride.original_method"] || env['REQUEST_METHOD'])
|
2010-04-03 23:23:23 -04:00
|
|
|
end
|
|
|
|
|
|
|
|
# Returns a symbol form of the #method
|
|
|
|
def method_symbol
|
|
|
|
HTTP_METHOD_LOOKUP[method]
|
2004-11-23 20:04:44 -05:00
|
|
|
end
|
|
|
|
|
2010-04-03 23:23:23 -04:00
|
|
|
# Is this a GET (or HEAD) request?
|
|
|
|
# Equivalent to <tt>request.request_method == :get</tt>.
|
2004-11-23 20:04:44 -05:00
|
|
|
def get?
|
2010-04-03 23:23:23 -04:00
|
|
|
HTTP_METHOD_LOOKUP[request_method] == :get
|
2004-11-23 20:04:44 -05:00
|
|
|
end
|
|
|
|
|
2010-04-03 23:23:23 -04:00
|
|
|
# Is this a POST request?
|
|
|
|
# Equivalent to <tt>request.request_method == :post</tt>.
|
2004-11-23 20:04:44 -05:00
|
|
|
def post?
|
2010-04-03 23:23:23 -04:00
|
|
|
HTTP_METHOD_LOOKUP[request_method] == :post
|
2004-11-23 20:04:44 -05:00
|
|
|
end
|
|
|
|
|
2010-04-03 23:23:23 -04:00
|
|
|
# Is this a PUT request?
|
|
|
|
# Equivalent to <tt>request.request_method == :put</tt>.
|
2004-11-23 20:04:44 -05:00
|
|
|
def put?
|
2010-04-03 23:23:23 -04:00
|
|
|
HTTP_METHOD_LOOKUP[request_method] == :put
|
2004-11-23 20:04:44 -05:00
|
|
|
end
|
|
|
|
|
2010-04-03 23:23:23 -04:00
|
|
|
# Is this a DELETE request?
|
|
|
|
# Equivalent to <tt>request.request_method == :delete</tt>.
|
2004-11-23 20:04:44 -05:00
|
|
|
def delete?
|
2010-04-03 23:23:23 -04:00
|
|
|
HTTP_METHOD_LOOKUP[request_method] == :delete
|
2004-11-23 20:04:44 -05:00
|
|
|
end
|
|
|
|
|
2010-04-03 23:23:23 -04:00
|
|
|
# Is this a HEAD request?
|
|
|
|
# Equivalent to <tt>request.method == :head</tt>.
|
2004-12-07 05:50:26 -05:00
|
|
|
def head?
|
2010-04-03 23:23:23 -04:00
|
|
|
HTTP_METHOD_LOOKUP[method] == :head
|
2004-12-07 05:50:26 -05:00
|
|
|
end
|
2005-05-14 04:36:19 -04:00
|
|
|
|
2008-07-16 08:00:36 -04:00
|
|
|
# Provides access to the request's HTTP headers, for example:
|
2008-09-03 12:58:47 -04:00
|
|
|
#
|
|
|
|
# request.headers["Content-Type"] # => "text/plain"
|
2007-02-17 13:16:44 -05:00
|
|
|
def headers
|
2009-01-27 19:54:01 -05:00
|
|
|
Http::Headers.new(@env)
|
2007-02-17 13:16:44 -05:00
|
|
|
end
|
|
|
|
|
2010-06-04 12:47:25 -04:00
|
|
|
def fullpath
|
|
|
|
@fullpath ||= super
|
|
|
|
end
|
|
|
|
|
2009-04-25 14:56:37 -04:00
|
|
|
def media_type
|
2010-03-28 16:40:38 -04:00
|
|
|
content_mime_type.to_s
|
2009-04-25 14:56:37 -04:00
|
|
|
end
|
|
|
|
|
2010-01-16 07:17:03 -05:00
|
|
|
# Returns the content length of the request as an integer.
|
|
|
|
def content_length
|
|
|
|
super.to_i
|
2008-06-27 14:24:21 -04:00
|
|
|
end
|
|
|
|
|
2010-09-11 18:57:45 -04:00
|
|
|
# Returns true if the "X-Requested-With" header contains "XMLHttpRequest"
|
|
|
|
# (case-insensitive). All major JavaScript libraries send this header with
|
|
|
|
# every Ajax request.
|
2005-05-22 03:43:05 -04:00
|
|
|
def xml_http_request?
|
2010-09-11 18:57:45 -04:00
|
|
|
@env['HTTP_X_REQUESTED_WITH'] =~ /XMLHttpRequest/i
|
2005-05-22 03:43:05 -04:00
|
|
|
end
|
2009-07-28 15:29:29 -04:00
|
|
|
alias :xhr? :xml_http_request?
|
2005-05-22 03:43:05 -04:00
|
|
|
|
2010-06-04 12:47:25 -04:00
|
|
|
def ip
|
|
|
|
@ip ||= super
|
|
|
|
end
|
|
|
|
|
2008-03-28 17:38:01 -04:00
|
|
|
# Which IP addresses are "trusted proxies" that can be stripped from
|
2010-09-11 19:33:42 -04:00
|
|
|
# the right-hand-side of X-Forwarded-For.
|
|
|
|
#
|
|
|
|
# http://en.wikipedia.org/wiki/Private_network#Private_IPv4_address_spaces.
|
|
|
|
TRUSTED_PROXIES = %r{
|
|
|
|
^127\.0\.0\.1$ | # localhost
|
|
|
|
^(10 | # private IP 10.x.x.x
|
|
|
|
172\.(1[6-9]|2[0-9]|3[0-1]) | # private IP in the range 172.16.0.0 .. 172.31.255.255
|
|
|
|
192\.168 # private IP 192.168.x.x
|
|
|
|
)\.
|
|
|
|
}x
|
2008-03-28 17:38:01 -04:00
|
|
|
|
2011-05-23 19:22:33 -04:00
|
|
|
# Determines originating IP address. REMOTE_ADDR is the standard
|
|
|
|
# but will fail if the user is behind a proxy. HTTP_CLIENT_IP and/or
|
2008-03-28 17:38:01 -04:00
|
|
|
# HTTP_X_FORWARDED_FOR are set by proxies so check for these if
|
2011-05-23 19:22:33 -04:00
|
|
|
# REMOTE_ADDR is a proxy. HTTP_X_FORWARDED_FOR may be a comma-
|
2008-03-28 17:38:01 -04:00
|
|
|
# delimited list in the case of multiple chained proxies; the last
|
|
|
|
# address which is not trusted is the originating IP.
|
2004-11-23 20:04:44 -05:00
|
|
|
def remote_ip
|
2010-06-04 12:47:25 -04:00
|
|
|
@remote_ip ||= (@env["action_dispatch.remote_ip"] || ip).to_s
|
2004-11-23 20:04:44 -05:00
|
|
|
end
|
|
|
|
|
2007-03-04 15:32:38 -05:00
|
|
|
# Returns the lowercase name of the HTTP server software.
|
|
|
|
def server_software
|
|
|
|
(@env['SERVER_SOFTWARE'] && /^([a-zA-Z]+)/ =~ @env['SERVER_SOFTWARE']) ? $1.downcase : nil
|
|
|
|
end
|
|
|
|
|
2008-09-03 12:58:47 -04:00
|
|
|
# Read the request \body. This is useful for web services that need to
|
2007-05-23 15:09:37 -04:00
|
|
|
# work with raw requests directly.
|
2007-03-04 15:32:38 -05:00
|
|
|
def raw_post
|
2009-01-17 21:29:50 -05:00
|
|
|
unless @env.include? 'RAW_POST_DATA'
|
|
|
|
@env['RAW_POST_DATA'] = body.read(@env['CONTENT_LENGTH'].to_i)
|
|
|
|
body.rewind if body.respond_to?(:rewind)
|
|
|
|
end
|
|
|
|
@env['RAW_POST_DATA']
|
2004-12-18 13:01:28 -05:00
|
|
|
end
|
|
|
|
|
2009-01-17 21:29:50 -05:00
|
|
|
# The request body is an IO input stream. If the RAW_POST_DATA environment
|
|
|
|
# variable is already set, wrap it in a StringIO.
|
2008-08-08 02:43:12 -04:00
|
|
|
def body
|
2009-01-17 21:29:50 -05:00
|
|
|
if raw_post = @env['RAW_POST_DATA']
|
|
|
|
raw_post.force_encoding(Encoding::BINARY) if raw_post.respond_to?(:force_encoding)
|
|
|
|
StringIO.new(raw_post)
|
|
|
|
else
|
|
|
|
@env['rack.input']
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
def form_data?
|
2010-03-28 16:40:38 -04:00
|
|
|
FORM_DATA_MEDIA_TYPES.include?(content_mime_type.to_s)
|
2008-08-08 02:43:12 -04:00
|
|
|
end
|
2005-06-24 10:43:15 -04:00
|
|
|
|
2008-08-08 02:43:12 -04:00
|
|
|
def body_stream #:nodoc:
|
2008-12-22 19:15:08 -05:00
|
|
|
@env['rack.input']
|
2004-11-23 20:04:44 -05:00
|
|
|
end
|
|
|
|
|
2010-06-25 03:36:26 -04:00
|
|
|
# TODO This should be broken apart into AD::Request::Session and probably
|
|
|
|
# be included by the session middleware.
|
2009-04-26 15:33:57 -04:00
|
|
|
def reset_session
|
2010-10-03 15:45:27 -04:00
|
|
|
session.destroy if session && session.respond_to?(:destroy)
|
2009-04-26 15:33:57 -04:00
|
|
|
self.session = {}
|
2010-06-25 03:36:26 -04:00
|
|
|
@env['action_dispatch.request.flash_hash'] = nil
|
2004-11-23 20:04:44 -05:00
|
|
|
end
|
|
|
|
|
2006-02-09 15:05:11 -05:00
|
|
|
def session=(session) #:nodoc:
|
2009-01-05 04:10:55 -05:00
|
|
|
@env['rack.session'] = session
|
2006-02-09 15:05:11 -05:00
|
|
|
end
|
|
|
|
|
2008-12-22 19:15:08 -05:00
|
|
|
def session_options=(options)
|
|
|
|
@env['rack.session.options'] = options
|
|
|
|
end
|
|
|
|
|
2010-01-16 07:17:03 -05:00
|
|
|
# Override Rack's GET method to support indifferent access
|
|
|
|
def GET
|
2010-07-18 12:10:20 -04:00
|
|
|
@env["action_dispatch.request.query_parameters"] ||= (normalize_parameters(super) || {})
|
2010-01-16 07:17:03 -05:00
|
|
|
end
|
|
|
|
alias :query_parameters :GET
|
|
|
|
|
|
|
|
# Override Rack's POST method to support indifferent access
|
|
|
|
def POST
|
2010-07-18 12:10:20 -04:00
|
|
|
@env["action_dispatch.request.request_parameters"] ||= (normalize_parameters(super) || {})
|
2010-01-16 07:17:03 -05:00
|
|
|
end
|
|
|
|
alias :request_parameters :POST
|
|
|
|
|
|
|
|
|
2009-12-20 21:30:50 -05:00
|
|
|
# Returns the authorization header regardless of whether it was specified directly or through one of the
|
|
|
|
# proxy alternatives.
|
|
|
|
def authorization
|
|
|
|
@env['HTTP_AUTHORIZATION'] ||
|
|
|
|
@env['X-HTTP_AUTHORIZATION'] ||
|
|
|
|
@env['X_HTTP_AUTHORIZATION'] ||
|
|
|
|
@env['REDIRECT_X_HTTP_AUTHORIZATION']
|
|
|
|
end
|
2010-08-13 16:34:20 -04:00
|
|
|
|
|
|
|
# True if the request came from localhost, 127.0.0.1.
|
|
|
|
def local?
|
|
|
|
LOCALHOST.any? { |local_ip| local_ip === remote_addr && local_ip === remote_ip }
|
|
|
|
end
|
2010-09-29 19:09:58 -04:00
|
|
|
|
|
|
|
private
|
|
|
|
|
|
|
|
def check_method(name)
|
|
|
|
HTTP_METHOD_LOOKUP[name] || raise(ActionController::UnknownHttpMethod, "#{name}, accepted HTTP methods are #{HTTP_METHODS.to_sentence(:locale => :en)}")
|
|
|
|
name
|
|
|
|
end
|
2007-10-06 07:40:13 -04:00
|
|
|
end
|
2007-10-02 01:32:14 -04:00
|
|
|
end
|