prosody-hg: plugins/mod_bosh.lua comparison

comparison plugins/mod_bosh.lua @ 6054:7a5ddbaf758d

Merge 0.9->0.10

author	Matthew Wild <mwild1@gmail.com>
date	Wed, 02 Apr 2014 17:41:38 +0100
parents	bd0ff8ae98a8
children	f0687c313cf1

comparison

equal deleted inserted replaced

-:2f93a04564b2
+:7a5ddbaf758d
 -- Prosody IM
 -- Copyright (C) 2008-2010 Matthew Wild
 -- Copyright (C) 2008-2010 Waqas Hussain
 --
 -- This project is MIT/X11 licensed. Please see the
 -- COPYING file in the source package for more information.
 --
 module:set_global(); -- Global module
 local BOSH_DEFAULT_POLLING = module:get_option_number("bosh_max_polling", 5);
 local BOSH_DEFAULT_REQUESTS = module:get_option_number("bosh_max_requests", 2);
 local bosh_max_wait = module:get_option_number("bosh_max_wait", 120);
 local consider_bosh_secure = module:get_option_boolean("consider_bosh_secure");
-local default_headers = { ["Content-Type"] = "text/xml; charset=utf-8" };
 local cross_domain = module:get_option("cross_domain_bosh", false);
-if cross_domain then
-	default_headers["Access-Control-Allow-Methods"] = "GET, POST, OPTIONS";
+if cross_domain == true then cross_domain = "*"; end
-	default_headers["Access-Control-Allow-Headers"] = "Content-Type";
+if type(cross_domain) == "table" then cross_domain = table.concat(cross_domain, ", "); end
-	default_headers["Access-Control-Max-Age"] = "7200";
-	if cross_domain == true then
-		default_headers["Access-Control-Allow-Origin"] = "*";
-	elseif type(cross_domain) == "table" then
-		cross_domain = table.concat(cross_domain, ", ");
-	end
-	if type(cross_domain) == "string" then
-		default_headers["Access-Control-Allow-Origin"] = cross_domain;
-	end
-end
 local trusted_proxies = module:get_option_set("trusted_proxies", {"127.0.0.1"})._items;
 local function get_ip_from_request(request)
 	local ip = request.conn:ip();
 -- All sessions, and sessions that have no requests open
 local sessions, inactive_sessions = module:shared("sessions", "inactive_sessions");
 -- Used to respond to idle sessions (those with waiting requests)
-local waiting_requests = {};
+local waiting_requests = module:shared("waiting_requests");
 function on_destroy_request(request)
 	log("debug", "Request destroyed: %s", tostring(request));
 	waiting_requests[request] = nil;
 	local session = sessions[request.context.sid];
 	if session then
 			if r == request then
 				t_remove(requests, i);
 				break;
 			end
 		end
 		-- If this session now has no requests open, mark it as inactive
 		local max_inactive = session.bosh_max_inactive;
 		if max_inactive and #requests == 0 then
 			inactive_sessions[session] = os_time() + max_inactive;
 			(session.log or log)("debug", "BOSH session marked as inactive (for %ds)", max_inactive);
 		end
 	end
 end
-function handle_OPTIONS(request)
+local function set_cross_domain_headers(response)
-	local headers = {};
+	local headers = response.headers;
-	for k,v in pairs(default_headers) do headers[k] = v; end
+	headers.access_control_allow_methods = "GET, POST, OPTIONS";
-	headers["Content-Type"] = nil;
+	headers.access_control_allow_headers = "Content-Type";
-	return { headers = headers, body = "" };
+	headers.access_control_max_age = "7200";
+	headers.access_control_allow_origin = cross_domain;
+	return response;
+end
+function handle_OPTIONS(event)
+	if cross_domain and event.request.headers.origin then
+		set_cross_domain_headers(event.response);
+	end
+	return "";
 end
 function handle_POST(event)
 	log("debug", "Handling new request %s: %s\n----------", tostring(event.request), tostring(event.request.body));
 	local body = request.body;
 	local context = { request = request, response = response, notopen = true };
 	local stream = new_xmpp_stream(context, stream_callbacks);
 	response.context = context;
+	local headers = response.headers;
+	headers.content_type = "text/xml; charset=utf-8";
+	if cross_domain and event.request.headers.origin then
+		set_cross_domain_headers(response);
+	end
 	-- stream:feed() calls the stream_callbacks, so all stanzas in
 	-- the body are processed in this next line before it returns.
 	-- In particular, the streamopened() stream callback is where
 	-- much of the session logic happens, because it's where we first
 	-- get to see the 'sid' of this request.
-	stream:feed(body);
+	if not stream:feed(body) then
+		module:log("warn", "Error parsing BOSH payload")
+		return 400;
+	end
 	-- Stanzas (if any) in the request have now been processed, and
 	-- we take care of the high-level BOSH logic here, including
 	-- giving a response or putting the request "on hold".
 	local session = sessions[context.sid];
 	if session then
 		end
 		local r = session.requests;
 		log("debug", "Session %s has %d out of %d requests open", context.sid, #r, session.bosh_hold);
 		log("debug", "and there are %d things in the send_buffer:", #session.send_buffer);
-		for i, thing in ipairs(session.send_buffer) do
-			log("debug", "    %s", tostring(thing));
-		end
 		if #r > session.bosh_hold then
 			-- We are holding too many requests, send what's in the buffer,
 			log("debug", "We are holding too many requests, so...");
 			if #session.send_buffer > 0 then
 				log("debug", "...sending what is in the buffer")
 			log("debug", "Session has data in the send buffer, will send now..");
 			local resp = t_concat(session.send_buffer);
 			session.send_buffer = {};
 			session.send(resp);
 		end
 		if not response.finished then
 			-- We're keeping this request open, to respond later
 			log("debug", "Have nothing to say, so leaving request unanswered for now");
 			if session.bosh_wait then
 				waiting_requests[response] = os_time() + session.bosh_wait;
 			end
 		end
 		if session.bosh_terminate then
 			session.log("debug", "Closing session with %d requests open", #session.requests);
 			session:close();
 			return nil;
 		else
 			return true; -- Inform http server we shall reply later
 		end
 	end
+	module:log("warn", "Unable to associate request with a session (incomplete request?)");
+	return 400;
 end
 local function bosh_reset_stream(session) session.notopen = true; end
 local stream_xmlns_attr = { xmlns = "urn:ietf:params:xml:ns:xmpp-streams" };
 local function bosh_close_stream(session, reason)
 	(session.log or log)("info", "BOSH client disconnected");
 	local close_reply = st.stanza("body", { xmlns = xmlns_bosh, type = "terminate",
 		["xmlns:stream"] = xmlns_streams });
 	if reason then
 		close_reply.attr.condition = "remote-stream-error";
 		if type(reason) == "string" then -- assume stream error
 			close_reply:tag("stream:error")
 		log("info", "Disconnecting client, <stream:error> is: %s", tostring(close_reply));
 	end
 	local response_body = tostring(close_reply);
 	for _, held_request in ipairs(session.requests) do
-		held_request.headers = default_headers;
 		held_request:send(response_body);
 	end
-	sessions[session.sid]  = nil;
+	sessions[session.sid] = nil;
 	inactive_sessions[session] = nil;
 	sm_destroy_session(session);
 end
 -- Handle the <body> tag in the request payload.
 	local sid = attr.sid;
 	log("debug", "BOSH body open (sid: %s)", sid or "<none>");
 	if not sid then
 		-- New session request
 		context.notopen = nil; -- Signals that we accept this opening tag
 		-- TODO: Sanity checks here (rid, to, known host, etc.)
 		if not hosts[attr.to] then
 			-- Unknown host
 			log("debug", "BOSH client tried to connect to unknown host: %s", tostring(attr.to));
 			local close_reply = st.stanza("body", { xmlns = xmlns_bosh, type = "terminate",
 				["xmlns:stream"] = xmlns_streams, condition = "host-unknown" });
 			response:send(tostring(close_reply));
 			return;
 		end
 		-- New session
 		sid = new_uuid();
 		local session = {
 			type = "c2s_unauthed", conn = {}, sid = sid, rid = tonumber(attr.rid)-1, host = attr.to,
 			bosh_version = attr.ver, bosh_wait = math_min(attr.wait, bosh_max_wait), streamid = sid,
 			close = bosh_close_stream, dispatch_stanza = core_process_stanza, notopen = true,
 			log = logger.init("bosh"..sid),	secure = consider_bosh_secure or request.secure,
 			ip = get_ip_from_request(request);
 		};
 		sessions[sid] = session;
 		local filter = initialize_filters(session);
 		session.log("debug", "BOSH session created for request from %s", session.ip);
 		log("info", "New BOSH session, assigned it sid '%s'", sid);
 		-- Send creation response
 		local creating_session = true;
 			t_insert(session.send_buffer, tostring(s));
 			local oldest_request = r[1];
 			if oldest_request and not session.bosh_processing then
 				log("debug", "We have an open request, so sending on that");
-				oldest_request.headers = default_headers;
 				local body_attr = { xmlns = "http://jabber.org/protocol/httpbind",
 					["xmlns:stream"] = "http://etherx.jabber.org/streams";
 					type = session.bosh_terminate and "terminate" or nil;
 					sid = sid;
 				};
 			end
 			return true;
 		end
 		request.sid = sid;
 	end
 	local session = sessions[sid];
 	if not session then
 		-- Unknown sid
 		log("info", "Client tried to use sid '%s' which we don't know about", sid);
-		response.headers = default_headers;
 		response:send(tostring(st.stanza("body", { xmlns = xmlns_bosh, type = "terminate", condition = "item-not-found" })));
 		context.notopen = nil;
 		return;
 	end
 	if session.rid then
 		local rid = tonumber(attr.rid);
 		local diff = rid - session.rid;
 		if diff > 1 then
 			session.log("warn", "rid too large (means a request was lost). Last rid: %d New rid: %s", session.rid, attr.rid);
 			t_insert(session.requests, response);
 			return;
 		end
 		session.rid = rid;
 	end
 	if attr.type == "terminate" then
 		-- Client wants to end this session, which we'll do
 		-- after processing any stanzas in this request
 		session.bosh_terminate = true;
 	end
 	session.bosh_processing = true; -- Used to suppress replies until processing of this request is done
 	if session.notopen then
 		local features = st.stanza("stream:features");
 		hosts[session.host].events.fire_event("stream-features", { origin = session, features = features });
-		fire_event("stream-features", session, features);
+		session.send(features);
-		session.send(tostring(features));
 		session.notopen = nil;
 	end
 end
 local function handleerr(err) log("error", "Traceback[bosh]: %s", traceback(tostring(err), 2)); end
 			return xpcall(function () return core_process_stanza(session, stanza) end, handleerr);
 		end
 	end
 end
-function stream_callbacks.streamclosed(request)
+function stream_callbacks.streamclosed(context)
-	local session = sessions[request.sid];
+	local session = sessions[context.sid];
 	if session then
 		session.bosh_processing = false;
 		if #session.send_buffer > 0 then
 			session.send("");
 		end
 function stream_callbacks.error(context, error)
 	log("debug", "Error parsing BOSH request payload; %s", error);
 	if not context.sid then
 		local response = context.response;
-		response.headers = default_headers;
 		response.status_code = 400;
 		response:send();
 		return;
 	end
 	local session = sessions[context.sid];
 	if error == "stream-error" then -- Remote stream error, we close normally
 		session:close();
 	else
 		session:close({ condition = "bad-format", text = "Error processing stream" });
 	end
 end
-local dead_sessions = {};
+local dead_sessions = module:shared("dead_sessions");
 function on_timer()
 	-- log("debug", "Checking for requests soon to timeout...");
 	-- Identify requests timing out within the next few seconds
 	local now = os_time() + 3;
 	for request, reply_before in pairs(waiting_requests) do
 			if request.conn then
 				sessions[request.context.sid].send("");
 			end
 		end
 	end
 	now = now - 3;
 	local n_dead_sessions = 0;
 	for session, close_after in pairs(inactive_sessions) do
 		if close_after < now then
 			(session.log or log)("debug", "BOSH client inactive too long, destroying session at %d", now);

Mercurial > prosody-hg

comparison plugins/mod_bosh.lua @ 6054:7a5ddbaf758d