ap / plack-middleware-rewrite Goto Github PK
View Code? Open in Web Editor NEWmod_rewrite for Plack
Home Page: https://metacpan.org/release/Plack-Middleware-Rewrite
mod_rewrite for Plack
Home Page: https://metacpan.org/release/Plack-Middleware-Rewrite
use 5.006; use strict; use warnings; package Plack::Middleware::Rewrite; our $VERSION = '2.102'; BEGIN { require Plack::Middleware; our @ISA = 'Plack::Middleware' } use Plack::Util::Accessor qw( request response rules ); use Plack::Request (); use Plack::Util (); use overload (); sub call { my $self = shift; my ( $env ) = @_; my ( $app, $res, $legacy ); my ( $rules, $modify_cb ) = ( $self->request, $self->response ); unless ( $rules or $modify_cb ) { $rules = $self->rules; $legacy = 1; } # call rules with $_ aliased to PATH_INFO ( $res ) = map { scalar $rules->( $env ) } $env->{'PATH_INFO'} if $rules; if ( $legacy ) { if ( 'CODE' eq ref $res ) { ( $modify_cb, $res ) = $res } elsif ( 'ARRAY' eq ref $res ) { undef $res if not @$res } elsif ( ref $res ) { undef $res } else { # upgrade scalar to response if it looks like an HTTP status $res = ( defined $res and $res =~ /\A[1-5][0-9][0-9]\z/ ) ? [ $res, [], [] ] : undef; } } else { if ( 'CODE' eq ref $res ) { ( $app, $res ) = $res } elsif ( 'ARRAY' eq ref $res ) { @$res = ( 303, [], [] ) if not @$res } elsif ( ref $res ) { die 'Unhandled reference type in request rewrite: ', overload::StrVal( $res ), "\n" } else { undef $res } } if ( $res ) { # external redirect, or explicit response push @$res, map { [] } @$res .. 2; if ( $res->[0] =~ /\A3(?:0[0-35-9]|[1-9][0-9])\z/ ) { my $dest = Plack::Util::header_get( $res->[1], 'Location' ); if ( not $dest ) { $dest = Plack::Request->new( $env )->uri; Plack::Util::header_set( $res->[1], Location => $dest ); } unless ( Plack::Util::content_length( $res->[2] ) or Plack::Util::header_exists( $res->[1], 'Content-Length' ) ) { my $href = Plack::Util::encode_html( $dest ); Plack::Util::header_set( $res->[1], qw( Content-Type text/html ) ); $res->[2] = [ qq'<!DOCTYPE html><title>Moved</title>This resource has moved to <a href="$href">a new address</a>.' ]; } } } else { # internal redirect $app ||= $self->app; $res = $app->( $env ); } return $res if not $modify_cb; Plack::Util::response_cb( $res, sub { my $response = $_[0]; my $hdrs = Plack::Util::headers( $response->[1] ); $hdrs->{'status'} = sub { @_ ? $response->[0] = $_[0] : $response->[0] }; my ( $result ) = map $modify_cb->( $env ), $hdrs; return 'CODE' eq ref $result ? $result : (); } ); } 1; __END__ =pod =encoding UTF-8 =head1 NAME Plack::Middleware::Rewrite - mod_rewrite for Plack =head1 SYNOPSIS # in app.psgi use Plack::Builder; builder { enable 'Rewrite', request => sub { s{^/here(?=/|$)}{/there}; return [303] if s{^/foo/?$}{/bar/} or s{^/baz/?$}{/quux/}; return [301, [ Location => 'http://example.org/' ], []] if m{^/example/?$}; return [201] if $_ eq '/favicon.ico'; return [503] if -e '/path/to/app/maintenance.lock'; return [200, [qw(Content-Type text/plain)], ['You found it!']] if $_ eq '/easter-egg'; }, response => sub { $_->status( 303 ) if $_->status eq 201 and $_->get( 'Location' ); $_->set( 'Content-Type', 'application/xhtml+xml' ) if ( $_[0]{'HTTP_ACCEPT'} || '' ) =~ m{application/xhtml\+xml(?!\s*;\s*q=0)}; }; $app; }; =head1 DESCRIPTION This middleware provides a convenient way to modify requests in flight in Plack apps. Rewrite rules are simply written in Perl, which means everything that can be done with mod_rewrite can be done with this middleware much more intuitively (if in syntactically wordier ways). Its primary purpose is rewriting paths, but almost anything is possible very easily. =head1 CONFIGURATION OPTIONS =head2 C<request> Takes a reference to a function that will be called in scalar context for each request. On call, C<$_> will be aliased to C<PATH_INFO>, so that you can easily use regexp matches and subtitutions to examine and modify it. The L<PSGI> environment will be passed to the function as its first and only argument. The function may return three kinds of valid value: =over 4 =item A plain scalar Ignored. The value will be thrown away and any path rewriting (or any other modifications of the PSGI environment) will take effect during the current request cycle, invisibly to the client user agent. =item An array reference A L<PSGI> array response to return immediately without invoking the wrapped PSGI application. The array may have fewer than 3 elements, in which case it will be filled to 3E<nbsp>elements by pushing the default values: an empty body array, empty headers array, and a 303E<nbsp>statusE<nbsp>code. If the C<Location> header is missing from a redirect response (i.e. one with 3xxE<nbsp>statusE<nbsp>code), it will be filled in automatically from the value left in C<PATH_INFO> by your callback. (Note that this only allows you to redirect to URLs with the same hostname. To redirect the client to a different host, you will have to supply a C<Location> header manually.) =item A code reference A PSGI application which will be called to process the request. This prevents the wrapped application from being called. =item Any other kind of reference Error. An exception will be thrown. =back =head2 C<response> Takes a reference to a function that will be called I<after> the request has been processed and the response is ready to be returned. On call, C<$_> will be aliased to a specially extended a L<C<Plack::Util::headers>|Plack::Util/headers> object for the response, for convenient alteration of headers. The extension is a C<status> method, which allows you to inspect and modify the response status code. Just as in L</C<request>>, the L<PSGI> environment is passed as first and only argument. Any return value from this function will be ignored unless it is a code reference. In that case it will be used to filter the response body, as documented in L<Plack::Middleware/RESPONSE CALLBACK>: =over 4 return sub { my $chunk = shift; return unless defined $chunk; $chunk =~ s/Foo/Bar/g; return $chunk; }; The callback takes one argument C<$chunk> and your callback is expected to return the updated chunk. If the given C<$chunk> is undef, it means the stream has reached the end, so your callback should also return undef, or return the final chunk and return undef when called next time. =back =head1 LEGACY INTERFACE The old interface uses a single attribute, C<rules>, instead of the C<request> and C<response> pair, with a more complex set of return values, containing an ambiguity. It is also less expressive than the new interface. The old interface is documented here for the purposes of maintaining old code; its use in new code is L<discouraged|perlpolicy/Terminology>. In the far future it may get removed entirely, and in the meantime it will not gain new features. The return value of the C<rules> callback is interpreted as follows: =over 4 =item An array reference (with at least one element) A regular L<PSGI> response, except that you may omit either or both the headers and body elements. You I<may not> omit the status. =item A scalar value that looks like an HTTP status Like returning a reference to a one-element. Beware: every subroutine in Perl has a return value, even if you do not return anything explicitly. To avoid ambiguities you must return one-element arrays instead of plain values and use an explicit C<return> at the end of your rules: return [201] if $_ eq '/favicon.ico'; s{^/here(?=/|$)}{/there}; return; =item A code reference Equivalent to the L</C<response>> callback in the new interface, with the same arguments and return values. =item Any other kind of value Internal rewrite. =back =head2 Porting from the old to the new interface There are two major incompatibilities between the interfaces: =over 4 =item 1. You can no longer return status codes as plain scalars, as in C<return 301>. You B<must> now C<return [301]> (which you could before, but didn't have to). =item 2. Rewriting the response is no longer done by returning a C<sub>. Instead you must use the C<response> attribute. This may be inconvient if the function was closing over variables from the C<rules> callback; in that case you now have to explicitly pass that state from one callback to the other through the environment hash. However, such code is rare, and in all other cases your code will be more readable under the new interface. =back =cut
I got this error running tests:
# Failed test '... which is XSS-safe'
# at t/rewrite.t line 77.
# '<!DOCTYPE html><title>Moved</title>This resource has moved to <a href="http://localhost/tempted%26badly/">a new address</a>.'
# doesn't match '(?^:<a href="http://localhost/tempted&badly/">)'
# Looks like you failed 1 test of 29.
t/rewrite.t ..
The difference has to do with whether or not the & is URL-encoded. I don't know exactly what the test is doing, and whether this detail is important. But one fix would be this (line 124 of t/rewrite.t):
like $res->content, qr!<a href="http://localhost/tempted(&|%26)badly/">!, '... which is XSS-safe';
This sounds very cool:
Its primary purpose is rewriting paths, but almost anything is possible very easily.
But:
Just as in
request
, the PSGI environment is passed as first and only argument.
From now I can not rewrite response code based on response body/headers
It will be cool if you pass whole $res
array as second parameter too
If rules code returns arrayref with 3xx status, its location is ignored, usually resulting in infinite redirect.
Example:
use strict;
use warnings;
use Plack::Builder;
builder {
enable 'Rewrite', rules => sub {
return [ 302, [ Location => '/foo'], [] ] if /bar/;
};
sub {
my $env = shift;
return [200, [], [ "Path: $env->{PATH_INFO}" ] ];
};
};
This app produces an infinite redirect if asked for /bar
url.
PS: The reason I'm using it this way instead of substituting $_
and returning 302 is that I call external $app
on different rules, and they handle some rewriting themselves.
A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.