php-http /
plugins
This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
| 1 | <?php |
||
| 2 | |||
| 3 | namespace Http\Client\Plugin; |
||
| 4 | |||
| 5 | 1 | @trigger_error('The '.__NAMESPACE__.'\CachePlugin class is deprecated since version 1.1 and will be removed in 2.0. Use Http\Client\Common\Plugin\CachePlugin instead.', E_USER_DEPRECATED); |
|
|
0 ignored issues
–
show
|
|||
| 6 | |||
| 7 | use Http\Message\StreamFactory; |
||
| 8 | use Http\Promise\FulfilledPromise; |
||
| 9 | use Psr\Cache\CacheItemPoolInterface; |
||
| 10 | use Psr\Http\Message\RequestInterface; |
||
| 11 | use Psr\Http\Message\ResponseInterface; |
||
| 12 | use Symfony\Component\OptionsResolver\OptionsResolver; |
||
| 13 | |||
| 14 | /** |
||
| 15 | * Allow for caching a response with a PSR-6 compatible caching engine. |
||
| 16 | * |
||
| 17 | * It can follow the RFC-7234 caching specification or use a fixed cache lifetime. |
||
| 18 | * |
||
| 19 | * @author Tobias Nyholm <[email protected]> |
||
| 20 | * |
||
| 21 | * @deprecated since since version 1.1, and will be removed in 2.0. Use {@link \Http\Client\Common\Plugin\CachePlugin} instead. |
||
| 22 | */ |
||
| 23 | class CachePlugin implements Plugin |
||
| 24 | { |
||
| 25 | /** |
||
| 26 | * @var CacheItemPoolInterface |
||
| 27 | */ |
||
| 28 | private $pool; |
||
| 29 | |||
| 30 | /** |
||
| 31 | * @var StreamFactory |
||
| 32 | */ |
||
| 33 | private $streamFactory; |
||
| 34 | |||
| 35 | /** |
||
| 36 | * @var array |
||
| 37 | */ |
||
| 38 | private $config; |
||
| 39 | |||
| 40 | /** |
||
| 41 | * @param CacheItemPoolInterface $pool |
||
| 42 | * @param StreamFactory $streamFactory |
||
| 43 | * @param array $config { |
||
| 44 | * |
||
| 45 | * @var bool $respect_cache_headers Whether to look at the cache directives or ignore them |
||
| 46 | * @var int $default_ttl If we do not respect cache headers or the headers specify cache control, use this value |
||
| 47 | * } |
||
| 48 | */ |
||
| 49 | 6 | public function __construct(CacheItemPoolInterface $pool, StreamFactory $streamFactory, array $config = []) |
|
| 50 | { |
||
| 51 | 6 | $this->pool = $pool; |
|
| 52 | 6 | $this->streamFactory = $streamFactory; |
|
| 53 | |||
| 54 | 6 | $optionsResolver = new OptionsResolver(); |
|
| 55 | 6 | $this->configureOptions($optionsResolver); |
|
| 56 | 6 | $this->config = $optionsResolver->resolve($config); |
|
| 57 | 6 | } |
|
| 58 | |||
| 59 | /** |
||
| 60 | * {@inheritdoc} |
||
| 61 | */ |
||
| 62 | 4 | public function handleRequest(RequestInterface $request, callable $next, callable $first) |
|
| 63 | { |
||
| 64 | 4 | $method = strtoupper($request->getMethod()); |
|
| 65 | |||
| 66 | // if the request is not cacheable, move to $next |
||
| 67 | 4 | if ('GET' !== $method && 'HEAD' !== $method) { |
|
| 68 | 1 | return $next($request); |
|
| 69 | } |
||
| 70 | |||
| 71 | 3 | $key = $this->createCacheKey($request); |
|
| 72 | 3 | $cacheItem = $this->pool->getItem($key); |
|
| 73 | |||
| 74 | 3 | if ($cacheItem->isHit()) { |
|
| 75 | $data = $cacheItem->get(); |
||
| 76 | /** @var ResponseInterface $response */ |
||
| 77 | $response = $data['response']; |
||
| 78 | $response = $response->withBody($this->streamFactory->createStream($data['body'])); |
||
| 79 | |||
| 80 | return new FulfilledPromise($response); |
||
| 81 | } |
||
| 82 | |||
| 83 | 3 | return $next($request)->then(function (ResponseInterface $response) use ($cacheItem) { |
|
| 84 | 3 | if ($this->isCacheable($response)) { |
|
| 85 | 2 | $bodyStream = $response->getBody(); |
|
| 86 | 2 | $body = (string) $bodyStream; |
|
| 87 | 2 | if ($bodyStream->isSeekable()) { |
|
| 88 | 2 | $bodyStream->rewind(); |
|
| 89 | 2 | } else { |
|
| 90 | $response = $response->withBody($this->streamFactory->createStream($body)); |
||
| 91 | } |
||
| 92 | |||
| 93 | 2 | $cacheItem->set(['response' => $response, 'body' => $body]) |
|
| 94 | 2 | ->expiresAfter($this->getMaxAge($response)); |
|
| 95 | 2 | $this->pool->save($cacheItem); |
|
| 96 | 2 | } |
|
| 97 | |||
| 98 | 3 | return $response; |
|
| 99 | 3 | }); |
|
| 100 | } |
||
| 101 | |||
| 102 | /** |
||
| 103 | * Verify that we can cache this response. |
||
| 104 | * |
||
| 105 | * @param ResponseInterface $response |
||
| 106 | * |
||
| 107 | * @return bool |
||
| 108 | */ |
||
| 109 | 3 | protected function isCacheable(ResponseInterface $response) |
|
| 110 | { |
||
| 111 | 3 | if (!in_array($response->getStatusCode(), [200, 203, 300, 301, 302, 404, 410])) { |
|
| 112 | 1 | return false; |
|
| 113 | } |
||
| 114 | 2 | if (!$this->config['respect_cache_headers']) { |
|
| 115 | return true; |
||
| 116 | } |
||
| 117 | 2 | if ($this->getCacheControlDirective($response, 'no-store') || $this->getCacheControlDirective($response, 'private')) { |
|
| 118 | return false; |
||
| 119 | } |
||
| 120 | |||
| 121 | 2 | return true; |
|
| 122 | } |
||
| 123 | |||
| 124 | /** |
||
| 125 | * Get the value of a parameter in the cache control header. |
||
| 126 | * |
||
| 127 | * @param ResponseInterface $response |
||
| 128 | * @param string $name The field of Cache-Control to fetch |
||
| 129 | * |
||
| 130 | * @return bool|string the value of the directive, true if directive without value, false if directive not present |
||
| 131 | */ |
||
| 132 | 2 | private function getCacheControlDirective(ResponseInterface $response, $name) |
|
| 133 | { |
||
| 134 | 2 | $headers = $response->getHeader('Cache-Control'); |
|
| 135 | 2 | foreach ($headers as $header) { |
|
| 136 | 1 | if (preg_match(sprintf('|%s=?([0-9]+)?|i', $name), $header, $matches)) { |
|
| 137 | // return the value for $name if it exists |
||
| 138 | 1 | if (isset($matches[1])) { |
|
| 139 | 1 | return $matches[1]; |
|
| 140 | } |
||
| 141 | |||
| 142 | return true; |
||
| 143 | } |
||
| 144 | 2 | } |
|
| 145 | |||
| 146 | 2 | return false; |
|
| 147 | } |
||
| 148 | |||
| 149 | /** |
||
| 150 | * @param RequestInterface $request |
||
| 151 | * |
||
| 152 | * @return string |
||
| 153 | */ |
||
| 154 | 3 | private function createCacheKey(RequestInterface $request) |
|
| 155 | { |
||
| 156 | 3 | return md5($request->getMethod().' '.$request->getUri()); |
|
| 157 | } |
||
| 158 | |||
| 159 | /** |
||
| 160 | * Get a ttl in seconds. It could return null if we do not respect cache headers and got no defaultTtl. |
||
| 161 | * |
||
| 162 | * @param ResponseInterface $response |
||
| 163 | * |
||
| 164 | * @return int|null |
||
| 165 | */ |
||
| 166 | 2 | private function getMaxAge(ResponseInterface $response) |
|
| 167 | { |
||
| 168 | 2 | if (!$this->config['respect_cache_headers']) { |
|
| 169 | return $this->config['default_ttl']; |
||
| 170 | } |
||
| 171 | |||
| 172 | // check for max age in the Cache-Control header |
||
| 173 | 2 | $maxAge = $this->getCacheControlDirective($response, 'max-age'); |
|
| 174 | 2 | if (!is_bool($maxAge)) { |
|
| 175 | 1 | $ageHeaders = $response->getHeader('Age'); |
|
| 176 | 1 | foreach ($ageHeaders as $age) { |
|
| 177 | 1 | return $maxAge - ((int) $age); |
|
| 178 | } |
||
| 179 | |||
| 180 | return $maxAge; |
||
| 181 | } |
||
| 182 | |||
| 183 | // check for ttl in the Expires header |
||
| 184 | 1 | $headers = $response->getHeader('Expires'); |
|
| 185 | 1 | foreach ($headers as $header) { |
|
| 186 | return (new \DateTime($header))->getTimestamp() - (new \DateTime())->getTimestamp(); |
||
| 187 | 1 | } |
|
| 188 | |||
| 189 | 1 | return $this->config['default_ttl']; |
|
| 190 | } |
||
| 191 | |||
| 192 | /** |
||
| 193 | * Configure an options resolver. |
||
| 194 | * |
||
| 195 | * @param OptionsResolver $resolver |
||
| 196 | */ |
||
| 197 | 6 | private function configureOptions(OptionsResolver $resolver) |
|
| 198 | { |
||
| 199 | 6 | $resolver->setDefaults([ |
|
| 200 | 6 | 'default_ttl' => null, |
|
| 201 | 6 | 'respect_cache_headers' => true, |
|
| 202 | 6 | ]); |
|
| 203 | |||
| 204 | 6 | $resolver->setAllowedTypes('default_ttl', ['int', 'null']); |
|
| 205 | 6 | $resolver->setAllowedTypes('respect_cache_headers', 'bool'); |
|
| 206 | 6 | } |
|
| 207 | } |
||
| 208 |
If you suppress an error, we recommend checking for the error condition explicitly: