=head1 NAME HTTP::Parser - parse HTTP/1.1 request into HTTP::Request/Response object =head1 SYNOPSIS my $parser = HTTP::Parser->new(); ... my $status = $parser->add($text); if(0 == $status) { print "request: ".$parser->request()->as_string(); # HTTP::Request } elsif(-3 == $status) { print "no content length header!\n"; } elsif(-2 == $status) { print "need a line of data\n"; } elsif(-1 == $status) { print "need more data\n"; } else { # $status > 0 print "need $status byte(s)\n"; } =head1 DESCRIPTION This is an HTTP request parser. It takes chunks of text as received and returns a 'hint' as to what is required, or returns the HTTP::Request when a complete request has been read. HTTP/1.1 chunking is supported. It dies if it finds an error. =cut use 5.006_001; use strict; package HTTP::Parser; our $VERSION = '0.06'; use HTTP::Request; use HTTP::Response; use URI; # token is (RFC 2616, ASCII) my $Token = qr/[\x21\x23-\x27\x2a\x2b\x2d\x2e\x30-\x39\x41-\x5a\x5e-\x7a\x7c\x7e]+/; =head2 new ( named params... ) Create a new HTTP::Parser object. Takes named parameters, e.g.: my $parser = HTTP::Parser->new(request => 1); =over 4 =item request Allows or denies parsing an HTTP request and returning an C object. =item response Allows or denies parsing an HTTP response and returning an C object. =back If you pass neither C nor C, only requests are parsed (for backwards compatibility); if you pass either, the other defaults to false (disallowing both requests and responses is a fatal error). =cut sub new { my ($class, %p) = @_; $p{request} = 1 unless exists $p{response} or exists $p{request}; die 'must allow request or response to be parsed' unless $p{request} or $p{response}; @p{qw(state data)} = ('blank', ''); my $self = bless \%p, ref $class || $class; return $self; } =head2 add ( string ) Parse request. Returns: =over 8 =item 0 if finished (call C to get an HTTP::Request or Response object) =item -1 if not finished but not sure how many bytes remain =item -2 if waiting for a line (like 0 with a hint) =item -3 if there was no content-length header, so we can't tell whether we are waiting for more data or not. If you are reading from a TCP stream, you can keep adding data until the connection closes gracefully (the HTTP RFC allows this). If you are reading from a file, you should keep adding until you have all the data. Once you have added all data, you may call C. if you are not sure whether you have all the data, the HTTP::Response object might be incomplete. =item count if waiting for that many bytes =back Dies on error. This method of parsing makes it easier to parse a request from an event-based system, on the other hand, it's quite alright to pass in the whole request. Ideally, the first chunk passed in is the header (up to the double newline), then whatever byte counts are requested. When a request object is returned, the X-HTTP-Version header has the HTTP version, the uri() method will always return a URI object, not a string. Note that a nonzero return is just a hint, and any amount of data can be passed in to a subsequent add() call. =cut sub add { my ($self,$s) = @_; $s = '' if not defined $s; $self->{data} .= $s; # pre-header blank lines are allowed (RFC 2616 4.1) if($self->{state} eq 'blank') { $self->{data} =~ s/^(\x0d?\x0a)+//; return -2 unless length $self->{data}; $self->{state} = 'header'; # done with blank lines; fall through } # still waiting for the header if($self->{state} eq 'header') { # double line break indicates end of header; parse it if($self->{data} =~ /^(.*?)\x0d?\x0a\x0d?\x0a/s) { return $self->_parse_header(length $1); } return -2; # still waiting for unknown amount of header lines # waiting for main body of request } elsif($self->{state} eq 'body') { return $self->_parse_body(); # chunked data } elsif($self->{state} eq 'chunked') { return $self->_parse_chunk(); # trailers } elsif($self->{state} eq 'trailer') { # double line break indicates end of trailer; parse it return $self->_parse_header(length $1,1) if $self->{data} =~ /^(.*?)\x0d?\x0a\x0d?\x0a/s; return -1; # still waiting for unknown amount of trailer data } die "unknown state '$self->{state}'"; } =head2 data Returns current data not parsed. Mainly useful after a request has been parsed. The data is not removed from the object's buffer, and will be seen before the data next passed to add(). =cut sub data { shift->{data} } =head2 extra Returns the count of extra bytes (length of data()) after a request. =cut sub extra { length shift->{data} } =head2 object Returns the object request. Only useful after the parse has completed. =cut sub object { shift->{obj} } # keep this for compatibility with 0.02 sub request { shift->{obj} } # _parse_header ( position of double newline in data [, trailer flag] ) # # helper for parse that parses an HTTP header # prerequisite: we have data up to a double newline in $self->{data} # if the trailer flag is set, we're parsing trailers # sub _parse_header { my ($self,$eoh,$trailer) = @_; my $header = substr($self->{data},0,$eoh,''); $self->{data} =~ s/^\x0d?\x0a\x0d?\x0a//; # parse into lines my @header = split /\x0d?\x0a/,$header; my $request = shift @header unless $trailer; # join folded lines my @out; for(@header) { if(s/^[ \t]+//) { die 'LWS on first header line' unless @out; $out[-1] .= $_; } else { push @out, $_; } } # parse request or response line my $obj; unless($trailer) { my ($major, $minor); # is it an HTTP response? if ($request =~ /^HTTP\/(\d+)\.(\d+)/i) { die 'HTTP responses not allowed' unless $self->{response}; ($major,$minor) = ($1,$2); $request =~ /^HTTP\/\d+\.\d+ (\d+) (.+)$/; my $state = $1; my $msg = $2; $obj = $self->{obj} = HTTP::Response->new($state, $msg); # perhaps a request? } else { my ($method,$uri,$http) = split / /,$request; die "'$request' is not the start of a valid HTTP request or response" unless $http and $http =~ /^HTTP\/(\d+)\.(\d+)$/i; ($major,$minor) = ($1,$2); die 'HTTP requests not allowed' unless $self->{request}; # If the Request-URI is an abs_path, we need to tell URI that we don't # know the scheme, otherwise it will misinterpret paths that start with # // as being scheme-relative uris, and will interpret the first # component after // as the host (see rfc 2616) $uri = "//$uri" if $uri =~ m(^/); $obj = $self->{obj} = HTTP::Request->new($method, URI->new($uri)); } $obj->header(X_HTTP_Version => "$major.$minor"); # pseudo-header # we've already seen the initial line and created the object } else { $obj = $self->{obj}; } # import headers my $token = qr/[^][\x00-\x1f\x7f()<>@,;:\\"\/?={} \t]+/; for $header(@header) { die "bad header name in '$header'" unless $header =~ s/^($token):[\t ]*//; $obj->push_header($1 => $header); } # if we're parsing trailers we don't need to look at content return 0 if $trailer; # see what sort of content we have, if any if(my $length = $obj->header('content_length')) { s/^\s+//, s/\s+$// for $length; die "bad content-length '$length'" unless $length =~ /^(\d+)$/; $self->{state} = 'body'; return $self->_parse_body(); } # check for transfer-encoding, and handle chunking if(my @te = $obj->header('transfer_encoding')) { if(grep { lc $_ eq 'chunked' } @te) { $self->{state} = 'chunked'; return $self->_parse_chunk(); } } # section 14.13 of the spec says an HTTP response "SHOULD" return a # content-length header unless there are reasons not to # however, the same RFC does allow "end of connection" as a valid marker # of the end of data and means the server does not need to set a content # length header. the only status codes that "MAY NOT" return data are # 1xx, 204 and 304. # therefore if there is no content length header, return -3 to the caller # so they can decide whether to keep feeding data. if using HTTP::Parser # with data from tcp, you could assume that the end of a connection is # the end of the response data if($self->{response}) { if (!defined $obj->header('content_length') && $self->object->code ne '204' && $self->object->code ne '304' && $self->object->code !~ /1\d\d/) { # Assume headers are finished and we are moving into body mode $self->{state} = 'body'; $self->{no_content_length} = 1; # Parse any data that might be left return $self->_parse_body() if length $self->data; return -3; } } # else we have no content so return success return 0; } # _parse_body # # helper for parse, returns request object with content if done, else # count of bytes remaining # sub _parse_body { my $self = shift; my $length = $self->{obj}->header('content_length'); # if the server didn't include a content length header, inform the # caller. they may choose to ignore this response or wait for # the end of connection (which is a valid reason to assume that # the response is finished) if($self->{no_content_length}) { $self->{obj}->content($self->{data}); return -3; } if(length $self->{data} >= $length) { $self->{obj}->content(substr($self->{data},0,$length,'')); return 0; } return $length-length $self->{data}; } # _parse_chunk # # helper for parse, parse chunked transfer-encoded message; returns like parse # sub _parse_chunk { my $self = shift; CHUNK: # need beginning of chunk with size if(not $self->{chunk}) { if($self->{data} =~ s/^([0-9a-fA-F]+)[^\x0d\x0a]*?\x0d?\x0a//) { # a zero-size chunk marks the end unless($self->{chunk} = hex $1) { $self->{state} = 'trailer'; # double line break indicates end of trailer; parse it $self->{data} = "\x0d\x0a".$self->{data}; # count previous line break return $self->_parse_header(length $1,1) if $self->{data} =~ /^(.*?)\x0d?\x0a\x0d?\x0a/s; return -1; # still waiting for unknown amount of trailer data } } else { die "expected chunked encoding, got '".substr($self->{data},0,40)."...'" if $self->{data} =~ /\x0d?\x0a/; return -2; # waiting for a line with chunk information } } # do we have a current chunk size? if($self->{chunk}) { # do we have enough data to fill it, plus a CR LF? if(length $self->{data} > $self->{chunk} and substr($self->{data},$self->{chunk},2) =~ /^(\x0d?\x0a)/) { my $crlf = $1; $self->{obj}->add_content(substr($self->{data},0,$self->{chunk})); substr($self->{data},0,length $crlf) = ''; # remove data from the buffer that we've already parsed $self->{data} = substr($self->{data},delete $self->{chunk}); # got chunks? goto CHUNK; } return $self->{chunk}-length($self->{data})+2; # extra CR LF } } =head1 AUTHOR David Robins Edbrobins@davidrobins.netE Fixes for 0.05 by David Cannings Edavid@edeca.netE =head1 SEE ALSO L, L. =cut 1;