1
|
|
|
<?php |
2
|
|
|
|
3
|
|
|
namespace BenTools\MercurePHP\Controller; |
4
|
|
|
|
5
|
|
|
use BenTools\MercurePHP\Configuration\Configuration; |
6
|
|
|
use BenTools\MercurePHP\Exception\Http\AccessDeniedHttpException; |
7
|
|
|
use BenTools\MercurePHP\Exception\Http\BadRequestHttpException; |
8
|
|
|
use BenTools\MercurePHP\Helpers\QueryStringParser; |
9
|
|
|
use BenTools\MercurePHP\Model\Message; |
10
|
|
|
use BenTools\MercurePHP\Security\Authenticator; |
11
|
|
|
use BenTools\MercurePHP\Security\TopicMatcher; |
12
|
|
|
use Psr\Http\Message\RequestInterface; |
13
|
|
|
use Psr\Http\Message\ServerRequestInterface as Request; |
14
|
|
|
use Psr\Log\LoggerInterface; |
15
|
|
|
use React\EventLoop\LoopInterface; |
16
|
|
|
use React\Http\Message\Response; |
17
|
|
|
use React\Promise\PromiseInterface; |
18
|
|
|
use React\Stream\ThroughStream; |
19
|
|
|
use React\Stream\WritableStreamInterface as Stream; |
20
|
|
|
|
21
|
|
|
use function BenTools\MercurePHP\nullify; |
22
|
|
|
use function BenTools\QueryString\query_string; |
23
|
|
|
use function React\Promise\all; |
24
|
|
|
use function React\Promise\resolve; |
25
|
|
|
|
26
|
|
|
final class SubscribeController extends AbstractController |
27
|
|
|
{ |
28
|
|
|
private Authenticator $authenticator; |
29
|
|
|
private LoopInterface $loop; |
30
|
|
|
private QueryStringParser $queryStringParser; |
31
|
|
|
|
32
|
|
|
public function __construct( |
33
|
|
|
LoopInterface $loop, |
34
|
9 |
|
LoggerInterface $logger |
35
|
|
|
) { |
36
|
9 |
|
$this->queryStringParser = new QueryStringParser(); |
37
|
9 |
|
$this->loop = $loop; |
38
|
9 |
|
$this->logger = $logger; |
39
|
9 |
|
} |
40
|
9 |
|
|
41
|
9 |
|
public function __invoke(Request $request): PromiseInterface |
42
|
|
|
{ |
43
|
7 |
|
|
44
|
|
|
if ('OPTIONS' === $request->getMethod()) { |
45
|
7 |
|
return resolve(new Response(200)); |
46
|
|
|
} |
47
|
2 |
|
|
48
|
|
|
$request = $this->withAttributes($request); |
49
|
|
|
|
50
|
|
|
$stream = new ThroughStream(); |
51
|
2 |
|
|
52
|
|
|
$lastEventID = $request->getAttribute('lastEventId'); |
53
|
2 |
|
$subscribedTopics = $request->getAttribute('subscribedTopics'); |
54
|
2 |
|
$this->loop |
55
|
2 |
|
->futureTick( |
56
|
2 |
|
fn() => $this->fetchMissedMessages($lastEventID, $subscribedTopics) |
57
|
2 |
|
->then(fn(iterable $messages) => $this->sendMissedMessages($messages, $request, $stream)) |
58
|
|
|
->then(fn() => $this->subscribe($request, $stream)) |
59
|
|
|
); |
60
|
2 |
|
|
61
|
|
|
$headers = [ |
62
|
|
|
'Content-Type' => 'text/event-stream', |
63
|
2 |
|
'Cache-Control' => 'no-cache', |
64
|
|
|
]; |
65
|
|
|
|
66
|
|
|
return resolve(new Response(200, $headers, $stream)); |
67
|
2 |
|
} |
68
|
|
|
|
69
|
|
|
public function matchRequest(RequestInterface $request): bool |
70
|
5 |
|
{ |
71
|
|
|
return \in_array($request->getMethod(), ['GET', 'OPTIONS'], true) |
72
|
5 |
|
&& '/.well-known/mercure' === $request->getUri()->getPath(); |
73
|
5 |
|
} |
74
|
|
|
|
75
|
|
|
public function withConfig(array $config): self |
76
|
7 |
|
{ |
77
|
|
|
/** @var self $clone */ |
78
|
|
|
$clone = parent::withConfig($config); |
79
|
7 |
|
|
80
|
2 |
|
return $clone->withAuthenticator(Authenticator::createSubscriberAuthenticator($config)); |
81
|
2 |
|
} |
82
|
|
|
|
83
|
|
|
private function withAttributes(Request $request): Request |
84
|
5 |
|
{ |
85
|
2 |
|
try { |
86
|
|
|
$token = $this->authenticator->authenticate($request); |
87
|
|
|
} catch (\RuntimeException $e) { |
88
|
3 |
|
throw new AccessDeniedHttpException($e->getMessage()); |
89
|
3 |
|
} |
90
|
|
|
|
91
|
3 |
|
$allowAnonymous = $this->config[Configuration::ALLOW_ANONYMOUS]; |
92
|
1 |
|
if (null === $token && false === $allowAnonymous) { |
93
|
|
|
throw new AccessDeniedHttpException('Anonymous subscriptions are not allowed on this hub.', 401); |
94
|
|
|
} |
95
|
|
|
|
96
|
2 |
|
$qs = query_string($request->getUri(), $this->queryStringParser); |
97
|
2 |
|
$subscribedTopics = \array_map('\\urldecode', $qs->getParam('topic') ?? []); |
98
|
2 |
|
|
99
|
2 |
|
if ([] === $subscribedTopics) { |
100
|
|
|
throw new BadRequestHttpException('Missing "topic" parameter.'); |
101
|
|
|
} |
102
|
2 |
|
|
103
|
|
|
$request = $request |
104
|
|
|
->withQueryParams($qs->getParams()) |
105
|
|
|
->withAttribute('token', $token) |
106
|
|
|
->withAttribute('subscribedTopics', $subscribedTopics) |
107
|
|
|
->withAttribute('lastEventId', $this->getLastEventID($request, $qs->getParams())) |
108
|
|
|
; |
109
|
|
|
|
110
|
|
|
return $request; |
111
|
|
|
} |
112
|
|
|
|
113
|
|
|
private function subscribe(Request $request, Stream $stream): PromiseInterface |
114
|
|
|
{ |
115
|
|
|
$allowAnonymous = $this->config[Configuration::ALLOW_ANONYMOUS]; |
116
|
|
|
$subscribedTopics = $request->getAttribute('subscribedTopics'); |
117
|
|
|
$token = $request->getAttribute('token'); |
118
|
|
|
$promises = []; |
119
|
|
|
foreach ($subscribedTopics as $topicSelector) { |
120
|
|
|
if (!TopicMatcher::canSubscribeToTopic($topicSelector, $token, $allowAnonymous)) { |
121
|
|
|
$clientId = $request->getAttribute('clientId'); |
122
|
|
|
$this->logger->debug("Client {$clientId} cannot subscribe to {$topicSelector}"); |
123
|
|
|
continue; |
124
|
|
|
} |
125
|
|
|
$promises[] = $this->transport |
126
|
|
|
->subscribe( |
127
|
|
|
$topicSelector, |
128
|
|
|
fn(string $topic, Message $message) => $this->sendIfAllowed($topic, $message, $request, $stream) |
129
|
|
|
) |
130
|
|
|
->then(function (string $topic) use ($request) { |
131
|
|
|
$clientId = $request->getAttribute('clientId'); |
132
|
|
|
$this->logger->debug("Client {$clientId} subscribed to {$topic}"); |
133
|
|
|
}); |
134
|
|
|
} |
135
|
|
|
|
136
|
|
|
if ([] === $promises) { |
137
|
|
|
return resolve(true); |
138
|
|
|
} |
139
|
|
|
|
140
|
|
|
return all($promises); |
141
|
|
|
} |
142
|
|
|
|
143
|
|
|
private function fetchMissedMessages(?string $lastEventID, array $subscribedTopics): PromiseInterface |
144
|
|
|
{ |
145
|
|
|
if (null === $lastEventID) { |
146
|
|
|
return resolve([]); |
147
|
|
|
} |
148
|
|
|
|
149
|
|
|
return $this->storage->retrieveMessagesAfterId($lastEventID, $subscribedTopics); |
150
|
|
|
} |
151
|
|
|
|
152
|
|
|
private function sendMissedMessages(iterable $messages, Request $request, Stream $stream): PromiseInterface |
153
|
|
|
{ |
154
|
|
|
$promises = []; |
155
|
|
|
foreach ($messages as $topic => $message) { |
156
|
|
|
$promises[] = $this->sendIfAllowed($topic, $message, $request, $stream); |
157
|
|
|
} |
158
|
|
|
|
159
|
|
|
if ([] === $promises) { |
160
|
|
|
return resolve(true); |
161
|
|
|
} |
162
|
|
|
|
163
|
|
|
return all($promises); |
164
|
|
|
} |
165
|
|
|
|
166
|
|
|
private function sendIfAllowed(string $topic, Message $message, Request $request, Stream $stream): PromiseInterface |
167
|
|
|
{ |
168
|
|
|
$allowAnonymous = $this->config[Configuration::ALLOW_ANONYMOUS]; |
169
|
|
|
$subscribedTopics = $request->getAttribute('subscribedTopics'); |
170
|
|
|
$token = $request->getAttribute('token'); |
171
|
|
|
if (!TopicMatcher::canReceiveUpdate($topic, $message, $subscribedTopics, $token, $allowAnonymous)) { |
172
|
|
|
return resolve(false); |
173
|
|
|
} |
174
|
|
|
|
175
|
|
|
return resolve($this->send($topic, $message, $request, $stream)); |
176
|
|
|
} |
177
|
|
|
|
178
|
2 |
|
private function send(string $topic, Message $message, Request $request, Stream $stream): PromiseInterface |
179
|
|
|
{ |
180
|
2 |
|
$stream->write((string) $message); |
181
|
2 |
|
$clientId = $request->getAttribute('clientId'); |
182
|
2 |
|
$id = $message->getId(); |
183
|
2 |
|
$this->logger->debug("Dispatched message {$id} to client {$clientId} on topic {$topic}"); |
184
|
|
|
|
185
|
|
|
return resolve(true); |
186
|
|
|
} |
187
|
|
|
|
188
|
|
|
private function getLastEventID(Request $request, array $queryParams): ?string |
189
|
|
|
{ |
190
|
|
|
return nullify($request->getHeaderLine('Last-Event-ID')) |
191
|
|
|
?? nullify($queryParams['Last-Event-ID'] ?? null) |
192
|
|
|
?? nullify($queryParams['Last-Event-Id'] ?? null) |
193
|
|
|
?? nullify($queryParams['last-event-id'] ?? null); |
194
|
|
|
} |
195
|
|
|
|
196
|
|
|
private function withAuthenticator(Authenticator $authenticator): self |
197
|
|
|
{ |
198
|
|
|
$clone = clone $this; |
199
|
|
|
$clone->authenticator = $authenticator; |
200
|
|
|
|
201
|
|
|
return $clone; |
202
|
|
|
} |
203
|
|
|
} |
204
|
|
|
|