36 Il Libro di Ridgun
La lib http — URI RFC 3986, Codec HTTP/1.1 RFC 9112 e Client TCP Live
36.1. Perché esiste la lib http? (Il problema reale e la filosofia Ridgun)
«Perché ho bisogno di una lib
httpscritta da zero in Ridgun puro invece di collegare una libreria C tradizionale?»
Questa è la prima domanda che si pone qualsiasi ingegnere di sistema arrivando a http. E la risposta riassume l'intera filosofia di ridgun-libs:
Siamo sinceri: se non filtri i ritorni a capo \r\n nei valori delle intestazioni HTTP, un attaccante può iniettare intestazioni false o dividere la risposta (CRLF Response Splitting), e collegare libcurl per fare una semplice GET o POST è eccessivo.
La lib http implementa la scomposizione di URI RFC 3986, la costruzione e l'analisi di richieste e risposte HTTP/1.1 RFC 9112 con sanificazione automatica di CRLF (VUL-INJ-002) e Content-Length automatico, l'estrazione di token Bearer e un client HTTP/1.1 live su socket TCP del kernel (http get, http post, http request tcp).
In un ecosistema tradizionale, risolvere i compiti del dominio HTTP comporta trascinare dipendenze esterne in C, gestire puntatori grezzi, conversioni opache di tipo, eccezioni non verificate o pause imprevedibili del garbage collector. In Ridgun, la lib http (src/main/ridgun/lib/http.rg) affronta il problema con quattro principi non negoziabili:
- Dichiara
import http(oimport http as alias) all'inizio del file: ogni lib definisce il proprio spazio dei nomimodule :: httpe in modalità--strictle funzioni multi-parola si invocano sempre con spazi naturali. - Concatena le tue pipeline da sinistra a destra con
->: scriviinput passo uno -> passo due -> risultato, usa le maschere(+ _ _ +)per destrutturare le sequenze e ometti_ =nelle istruzioni sequenziali (o scarta il valore con-> ()). - Ricorsione di coda con TCO (Tail-Call Optimization): tutte le scansioni interne di
httpvengono compilate in cicli nativi in spazio di stack $O(1)$. - Memoria deterministica (
RMM1/RMM2): ogni struttura intermedia viene liberata nell'istante esatto in cui termina la sua ultima lettura, senza Garbage Collector.
36.2. Artefatti nativi, importazione e catalogo completo dell'API di http
In ridgun-libs, http è una lib di prima classe situata in src/main/ridgun/lib/http.rg (dominio HTTP). Compilando con stable bundle, viene impacchettata in tre artefatti nativi:
| Artefatto | Percorso | Scopo |
|---|---|---|
| Bundle Ridgun | target/bundles/http.rglib | Distribuzione e importazione diretta con import http |
| File compilato | target/http.rgc | Artefatto intermedio verificato da ridgunc |
| Oggetto condiviso ELF64 | target/libhttp.so | Libreria dinamica nativa senza dipendenze C né libc |
Ogni lib dichiara il proprio spazio dei nomi con
module :: http: basta scrivereimport http(oimport http as alias) nell'intestazione e invocare le sue funzioni con spazi naturali (mia funzione x) e pipeline->(x mia funzione -> risultato).
36.2.1. Riepilogo delle famiglie funzionali di http
| Firma / Funzione / Tipo | Cosa fa e quando usarla |
|---|---|
uri parse / uri scheme / uri host / uri port / uri path / uri query | Scompone URI RFC 3986 con porte predefinite automatiche (80 in http, 443 in https) |
http build request / http parse request | Formatta e analizza richieste HTTP/1.1 con sanificazione CRLF delle intestazioni |
http build response / http parse response | Formatta e analizza risposte HTTP/1.1 con frasi di stato standard |
http header get / http bearer token | Ricerca di intestazioni case-insensitive ed estrazione di Authorization: Bearer <token> |
http get / http post / http request tcp | Esegue chiamate HTTP/1.1 live su socket TCP del kernel con timeout_ms |
36.2.2. Catalogo esaustivo dei tipi e delle firme in src/main/ridgun/lib/http.rg
Di seguito trovi l'inventario completo dei tipi algebrici (type), degli operatori (op ::) e delle firme di funzione (fn ::) definiti in src/main/ridgun/lib/http.rg (0 tipi, 0 operatori e 76 funzioni):
| # | Funzione / Firma (fn ::) | Tipo di Ritorno |
|---|---|---|
1 | fn :: ht index of loop String String Int Int Int | Int |
2 | fn :: ht index of String String | Int |
3 | fn :: ht lower char String Int Int | String |
4 | fn :: ht to lower loop String Int Int | String |
5 | fn :: ht to lower String | String |
6 | fn :: ht is ws Int | Bool |
7 | fn :: ht trim left String Int Int | Int |
8 | fn :: ht trim right String Int Int | Int |
9 | fn :: ht trim String | String |
10 | fn :: ht strip crlf loop String Int Int | String |
11 | fn :: ht strip crlf String | String |
12 | fn :: ht is digits loop String Int Int | Bool |
13 | fn :: ht parse int or String Int | Int |
14 | fn :: ht default port String | Int |
15 | fn :: ht split host port String Int Int | String Int |
16 | fn :: ht split path query String Int | String String |
17 | fn :: ht split auth rest String Int | String String |
18 | fn :: ht finish uri String (String Int) (String String) | String String Int String String |
19 | fn :: ht parse uri after scheme String String | String String Int String String |
20 | fn :: ht parse uri at String Int | String String Int String String |
21 | fn :: uri parse String | String String Int String String |
22 | fn :: ht u1 (String String Int String String) | String |
23 | fn :: ht u2 (String String Int String String) | String |
24 | fn :: ht u3 (String String Int String String) | Int |
25 | fn :: ht u4 (String String Int String String) | String |
26 | fn :: ht u5 (String String Int String String) | String |
27 | fn :: uri scheme String | String |
28 | fn :: uri host String | String |
29 | fn :: uri port String | Int |
30 | fn :: uri path String | String |
31 | fn :: uri query String | String |
32 | fn :: http status text Int | String |
33 | fn :: ht pair key (String String) | String |
34 | fn :: ht pair val (String String) | String |
35 | fn :: ht hdr get lower [String String] String | String |
36 | fn :: http header get [String String] String | String |
37 | fn :: ht extract bearer String | String |
38 | fn :: http bearer token [String String] | String |
39 | fn :: ht fmt headers [String String] | String |
40 | fn :: ht auto cl [String String] String | String |
41 | fn :: http build request String String [String String] String | String |
42 | fn :: http build response Int [String String] String | String |
43 | fn :: ht split lines loop String Int Int Int | [String] |
44 | fn :: ht parse hdr line String Int | [String String] |
45 | fn :: ht parse hdr lines [String] | [String String] |
46 | fn :: ht split head body String Int Int | String String |
47 | fn :: ht parse req rem String String Int | String String |
48 | fn :: ht parse req line String Int | String String |
49 | fn :: ht parse req parts [String] String | String String String |
50 | fn :: ht parse hdr parts [String] | [String String] |
51 | fn :: http parse headers String | [String String] |
52 | fn :: http parse request String | String String String |
53 | fn :: ht parse status rem String Int | Int String |
54 | fn :: ht parse status line String Int | Int String |
55 | fn :: ht st code (Int String) | Int |
56 | fn :: ht st text (Int String) | String |
57 | fn :: ht parse resp parts [String] String | Int String String |
58 | fn :: http parse response String | Int String String |
59 | fn :: ht ensure hdr [String String] String String | [String String] |
60 | fn :: ht read tcp step Int Int String (Int String) | String |
61 | fn :: ht read tcp loop Int Int String | String |
62 | fn :: ht resp code (Int String String) | Int |
63 | fn :: ht resp body (Int String String) | String |
64 | fn :: ht finish tcp resp String | Int Int String |
65 | fn :: ht send read step Int Int (Int Int) | Int Int String |
66 | fn :: ht connect send tcp Int Int String Int | Int Int String |
67 | fn :: http request tcp String Int String String [String String] String Int | Int Int String |
68 | fn :: ht pick path String | String |
69 | fn :: ht build target path String String | String |
70 | fn :: ht exec url req (String String Int String String) String [String String] String Int | Int Int String |
71 | fn :: http get String Int | Int Int String |
72 | fn :: http post String String String Int | Int Int String |
73 | fn :: http resp rc (Int Int String) | Int |
74 | fn :: http resp status (Int Int String) | Int |
75 | fn :: http resp headers (Int Int String) | [String String] |
76 | fn :: http resp body (Int Int String) | String |
36.3. Esplorare http a fondo: Esempi passo dopo passo di ogni funzionalità
Non basta consultare la tabella delle firme: esploreremo ciascuna delle funzionalità della lib http tramite esempi progressivi ed eseguibili in Ridgun. Inizieremo con due ricette tabulari di uso quotidiano e poi percorreremo nel dettaglio tutti gli scenari funzionali, le trasformazioni e i casi limite verificati in src/test/ridgun/test http.rg.
36.3.1. Esempio 1: Flusso principale in stile tabulare con http
Osserva come in Ridgun i segni = e i passaggi di trasformazione con http risultino allineati come una tabella pulita, senza variabili mutabili superflue né effetti collaterali nascosti:
import http
fn :: inspeccionar endpoint String => String Int String String
inspeccionar endpoint url =
url uri host -> host
url uri port -> port
url uri path -> path
http build request "GET" path [("Host", host)] "" -> wire
(host, port, path, wire)
36.3.2. Esempio 2: Composizione sicura e gestione dei casi limite
Ogni funzione della lib http è progettata per comporsi con le guardie booleane | e con il resto delle 34 lib di ridgun-libs:
import http
fn :: extraer cabeceras peticion String => String String
extraer cabeceras peticion raw_req =
raw_req http req method -> metodo
raw_req http req path -> ruta
http req header raw_req "Authorization" -> auth
(metodo + " " + ruta, auth)
36.3.3. Esempio 3: Analisi di URI RFC 3986 (uri scheme, uri host, uri port, uri path, uri query)
In questo esempio pratico esploriamo in modo esaustivo come si comporta http in questo blocco funzionale, inclusi input standard, combinazioni di parametri e valori di frontiera:
fn :: test uri parsing => ()
test uri parsing =
u1 = "https://api.example.com:8443/v1/users?active=1&role=admin"
assert str eq (uri scheme u1) "https" "uri_scheme https"
assert str eq (uri host u1) "api.example.com" "uri_host"
assert int equals (uri port u1) 8443 "uri_port 8443"
assert str eq (uri path u1) "/v1/users" "uri_path"
assert str eq (uri query u1) "active=1&role=admin" "uri_query"
u2 = "http://localhost/health"
assert str eq (uri scheme u2) "http" "uri_scheme http"
assert str eq (uri host u2) "localhost" "uri_host localhost"
assert int equals (uri port u2) 80 "default http port 80"
assert str eq (uri path u2) "/health" "uri_path /health"
assert str eq (uri query u2) "" "uri_query empty"
()
36.3.4. Esempio 4: Costruzione, serializzazione e analisi di richieste e risposte HTTP/1.1 (http format request/response, http parse request/response, http get header)
In questo esempio pratico esploriamo in modo esaustivo come si comporta http in questo blocco funzionale, inclusi input standard, combinazioni di parametri e valori di frontiera:
fn :: test http11 request and response => ()
test http11 request and response =
hdrs = [("Host", "api.example.com"), ("Authorization", "Bearer tok_xyz_987"), ("X-Injected", "safe\r\nEvil: 1")]
raw_req = http build request "POST" "/v1/login" hdrs "{\"user\":\"alice\"}"
parsed = http parse request raw_req
assert str eq (req method parsed) "POST" "req method POST"
assert str eq (req path parsed) "/v1/login" "req path /v1/login"
assert str eq (req body parsed) "{\"user\":\"alice\"}" "req body"
phdrs = http parse headers raw_req
assert str eq (http header get phdrs "host") "api.example.com" "case-insensitive host header"
assert str eq (http header get phdrs "content-length") "16" "auto Content-Length 16"
assert str eq (http bearer token phdrs) "tok_xyz_987" "http_bearer_token"
assert str eq (http header get phdrs "Evil") "" "CRLF injection prevented"
assert str eq (http status text 200) "OK" "status 200 OK"
assert str eq (http status text 404) "Not Found" "status 404 Not Found"
raw_resp = http build response 201 [("Content-Type", "application/json")] "{\"id\":42}"
presp = http parse response raw_resp
rhdrs = http parse headers raw_resp
assert int equals (resp code presp) 201 "resp code 201"
assert str eq (resp reason presp) "Created" "resp reason Created"
assert str eq (http header get rhdrs "content-type") "application/json" "resp Content-Type"
assert str eq (resp body presp) "{\"id\":42}" "resp body"
()
36.3.5. Esempio 5: Client e server HTTP/1.1 reali su socket TCP del kernel (http get, http post, http request tcp)
In questo esempio pratico esploriamo in modo esaustivo come si comporta http in questo blocco funzionale, inclusi input standard, combinazioni di parametri e valori di frontiera:
fn :: test http11 live tcp client and server => ()
test http11 live tcp client and server =
-- Spin up a real kernel TCP listener on port 0, connect a client, send HTTP request, respond, and read back
l_res = sys tcp listen "127.0.0.1" 0 8
assert int equals (sock rc l_res) 0 "http server listen ok"
lfd = sock fd l_res
port = sys local port lfd
assert true (port > 0) "http server ephemeral port > 0"
c_res = sys tcp connect "localhost" port 500
assert int equals (sock rc c_res) 0 "http client connect ok"
cfd = sock fd c_res
a_res = sys accept lfd 500
assert int equals (sock accept rc a_res) 0 "http server accept ok"
sfd = sock accept fd a_res
req_w = http build request "GET" "/v1/ping?echo=1" [("Host", "localhost"), ("Connection", "close")] ""
assert int equals (sock rc (sys send cfd req_w 500)) 0 "http client send request"
srv_rx = sock recv data (sys recv sfd 4096 500)
s_req = http parse request srv_rx
assert str eq (req method s_req) "GET" "server parsed GET"
assert str eq (req path s_req) "/v1/ping?echo=1" "server parsed path"
resp_w = http build response 200 [("Content-Type", "application/json"), ("Connection", "close")] "{\"pong\":true}"
assert int equals (sock rc (sys send sfd resp_w 500)) 0 "http server send response"
assert int equals (sys close sfd) 0 "http server close sfd"
cli_rx = sock recv data (sys recv cfd 4096 500)
c_resp = http parse response cli_rx
c_hdrs = http parse headers cli_rx
assert int equals (resp code c_resp) 200 "client parsed 200"
assert str eq (http header get c_hdrs "content-type") "application/json" "client parsed header"
assert str eq (resp body c_resp) "{\"pong\":true}" "client parsed body"
assert int equals (sys close cfd) 0 "http client close cfd"
assert int equals (sys close lfd) 0 "http server close lfd"
-- Verify http get / http post error handling on invalid scheme or refused port
bad_g = http get "ftp://localhost/file" 100
assert int equals (http resp rc bad_g) (0 - 7) "http_get non-http scheme -> -7"
ref_p = http post "http://127.0.0.1:39998/api" "application/json" "{}" 100
assert int equals (http resp rc ref_p) (0 - 3) "http_post refused port -> -3"
-- Verify http get against a real external background TCP responder over kernel loopback
l_bg = sys tcp listen "127.0.0.1" 0 8
lfd_bg = sock fd l_bg
p_bg = sys local port lfd_bg
sys close lfd_bg -> ()
shell exec "python3 -c \"import socket; s=socket.socket(); s.setsockopt(socket.SOL_SOCKET,socket.SO_REUSEADDR,1); s.bind(('127.0.0.1',{p_bg})); s.listen(1); c,_=s.accept(); c.recv(1024); c.sendall(b'HTTP/1.1 200 OK\\r\\nContent-Type: text/plain\\r\\nContent-Length: 7\\r\\nConnection: close\\r\\n\\r\\nlive-ok'); c.close(); s.close()\" >/dev/null 2>&1 &" -> ()
sys sleep ms 80 -> ()
g_live = http get "http://localhost:{p_bg}/status?check=1" 500
assert int equals (http resp rc g_live) 0 "http_get live external TCP server rc == 0"
assert int equals (http resp status g_live) 200 "http_get live status == 200"
assert str eq (http header get (http resp headers g_live) "content-type") "text/plain" "http_get live header"
assert str eq (http resp body g_live) "live-ok" "http_get live body == live-ok"
()
36.4. Sotto il cofano: come è costruita http in Ridgun puro (src/main/ridgun/lib/http.rg)
Uno dei maggiori vantaggi di ridgun-libs è che non ci sono scatole nere in C. Puoi aprire src/main/ridgun/lib/http.rg e leggere esattamente come è implementata ogni operazione usando pattern matching, alberi di guardie | / |. e ricorsione di coda (TCO). Vediamo i pezzi chiave della sua implementazione reale:
36.4.1. Implementazione interna: Internal String & Case Helpers
Nota come http.rg strutturi prima le firme fn :: ... => ... e risolva ogni caso tramite equazioni allineate e chiamate di coda:
module :: http
fn :: ht index of loop String String Int Int Int => Int
ht index of loop s sub idx slen sublen =
| (idx + sublen) > slen = 0 - 1
| (str slice s idx (idx + sublen)) == sub = idx
| otherwise = ht index of loop s sub (idx + 1) slen sublen
fn :: ht index of String String => Int
ht index of s sub =
| (str len sub) == 0 = 0
| otherwise = ht index of loop s sub 0 (str len s) (str len sub)
fn :: ht lower char String Int Int => String
ht lower char s idx c =
| c >= 65 and c <= 90 = char from code (c + 32)
| otherwise = str slice s idx (idx + 1)
fn :: ht to lower loop String Int Int => String
ht to lower loop s idx len =
| idx >= len = ""
| otherwise = (ht lower char s idx (str char at s idx)) + (ht to lower loop s (idx + 1) len)
fn :: ht to lower String => String
ht to lower s = ht to lower loop s 0 (str len s)
fn :: ht is ws Int => Bool
ht is ws c = c == 32 or c == 9 or c == 10 or c == 13
fn :: ht trim left String Int Int => Int
ht trim left s idx len =
| idx >= len = len
| ht is ws (str char at s idx) = ht trim left s (idx + 1) len
| otherwise = idx
fn :: ht trim right String Int Int => Int
ht trim right s start end_pos =
| end_pos <= start = start
| ht is ws (str char at s (end_pos - 1)) = ht trim right s start (end_pos - 1)
| otherwise = end_pos
fn :: ht trim String => String
ht trim s =
s str len -> len
ht trim left s 0 len -> st
ht trim right s st len -> en
str slice s st en
fn :: ht strip crlf loop String Int Int => String
ht strip crlf loop s idx len =
| idx >= len = ""
| (str char at s idx) == 10 or (str char at s idx) == 13 =
ht strip crlf loop s (idx + 1) len
| otherwise =
(str slice s idx (idx + 1)) + (ht strip crlf loop s (idx + 1) len)
fn :: ht strip crlf String => String
ht strip crlf s = ht strip crlf loop s 0 (str len s)
fn :: ht is digits loop String Int Int => Bool
ht is digits loop s idx len =
| idx >= len = True
| (str char at s idx) < 48 or (str char at s idx) > 57 = False
| otherwise = ht is digits loop s (idx + 1) len
fn :: ht parse int or String Int => Int
ht parse int or s fallback =
| (str len s) == 0 = fallback
| not (ht is digits loop s 0 (str len s)) = fallback
| otherwise = str to int s
36.4.2. Implementazione interna: RFC 3986 URI Parsing
Nota come http.rg strutturi prima le firme fn :: ... => ... e risolva ogni caso tramite equazioni allineate e chiamate di coda:
fn :: ht default port String => Int
ht default port scheme =
| scheme == "https" or scheme == "wss" = 443
| scheme == "http" or scheme == "ws" = 80
| otherwise = 0
fn :: ht split host port String Int Int => String Int
ht split host port auth colon_idx def_port =
| colon_idx < 0 = (auth, def_port)
| otherwise =
h = str slice auth 0 colon_idx
p = ht parse int or (str slice auth (colon_idx + 1) (str len auth)) def_port
(h, p)
fn :: ht split path query String Int => String String
ht split path query pq q_idx =
| q_idx < 0 = (pq, "")
| otherwise = (str slice pq 0 q_idx, str slice pq (q_idx + 1) (str len pq))
fn :: ht split auth rest String Int => String String
ht split auth rest rem slash_idx =
| slash_idx < 0 = (rem, "/")
| otherwise = (str slice rem 0 slash_idx, str slice rem slash_idx (str len rem))
fn :: ht finish uri String (String Int) (String String) => String String Int String String
ht finish uri scheme (host, port) (path, query) =
(scheme, host, port, path, query)
fn :: ht parse uri after scheme String String => String String Int String String
ht parse uri after scheme scheme rem =
ht split auth rest rem (ht index of rem "/") -> ap
ap ht pair key -> auth
ap ht pair val -> pq_raw
scheme ht default port -> def_port
ht split host port auth (ht index of auth ":") def_port -> hp
ht split path query pq_raw (ht index of pq_raw "?") -> pq
ht finish uri scheme hp pq
fn :: ht parse uri at String Int => String String Int String String
ht parse uri at raw sep_idx =
| sep_idx < 0 =
pq = ht split path query raw (ht index of raw "?")
("", "", 0, ht pair key pq, ht pair val pq)
| otherwise =
scheme = ht to lower (str slice raw 0 sep_idx)
rem = str slice raw (sep_idx + 3) (str len raw)
ht parse uri after scheme scheme rem
fn :: uri parse String => String String Int String String
uri parse raw = ht parse uri at raw (ht index of raw "://")
fn :: ht u1 (String String Int String String) => String
ht u1 (s, _, _, _, _) = s
fn :: ht u2 (String String Int String String) => String
ht u2 (_, h, _, _, _) = h
fn :: ht u3 (String String Int String String) => Int
ht u3 (_, _, p, _, _) = p
fn :: ht u4 (String String Int String String) => String
ht u4 (_, _, _, pt, _) = pt
fn :: ht u5 (String String Int String String) => String
ht u5 (_, _, _, _, q) = q
fn :: uri scheme String => String
uri scheme raw = ht u1 (uri parse raw)
fn :: uri host String => String
uri host raw = ht u2 (uri parse raw)
fn :: uri port String => Int
uri port raw = ht u3 (uri parse raw)
fn :: uri path String => String
uri path raw = ht u4 (uri parse raw)
fn :: uri query String => String
uri query raw = ht u5 (uri parse raw)
36.4.3. Implementazione interna: HTTP/1.1 Request & Response Formatting & Parsing
Nota come http.rg strutturi prima le firme fn :: ... => ... e risolva ogni caso tramite equazioni allineate e chiamate di coda:
fn :: ht fmt headers [String String] => String
ht fmt headers [] = ""
ht fmt headers (pair:rest) =
k = ht strip crlf (ht pair key pair)
v = ht strip crlf (ht pair val pair)
k + ": " + v + "\r\n" + (ht fmt headers rest)
fn :: ht auto cl [String String] String => String
ht auto cl headers body =
| (str len body) == 0 = ""
| (str len (http header get headers "Content-Length")) > 0 = ""
| otherwise = "Content-Length: " + (int to str (str len body)) + "\r\n"
fn :: http build request String String [String String] String => String
http build request method path headers body =
m = ht strip crlf method
p = ht strip crlf path
cl = ht auto cl headers body
m + " " + p + " HTTP/1.1\r\n" + (ht fmt headers headers) + cl + "\r\n" + body
fn :: http build response Int [String String] String => String
http build response code headers body =
reason = http status text code
cl = ht auto cl headers body
"HTTP/1.1 " + (int to str code) + " " + reason + "\r\n" + (ht fmt headers headers) + cl + "\r\n" + body
fn :: ht split lines loop String Int Int Int => [String]
ht split lines loop s start idx len =
| idx >= len = [(ht strip crlf (str slice s start len))]
| (str char at s idx) == 10 = [(ht strip crlf (str slice s start idx))] :: (ht split lines loop s (idx + 1) (idx + 1) len)
| otherwise = ht split lines loop s start (idx + 1) len
fn :: ht parse hdr line String Int => [String String]
ht parse hdr line line cidx =
| cidx <= 0 = []
| otherwise =
k = ht trim (str slice line 0 cidx)
v = ht trim (str slice line (cidx + 1) (str len line))
[(k, v)]
fn :: ht parse hdr lines [String] => [String String]
ht parse hdr lines [] = []
ht parse hdr lines (l:rest) =
| (str len l) == 0 = ht parse hdr lines rest
| otherwise = (ht parse hdr line l (ht index of l ":")) :: (ht parse hdr lines rest)
fn :: ht split head body String Int Int => String String
ht split head body raw crlf_idx lf_idx =
| crlf_idx >= 0 = (str slice raw 0 crlf_idx, str slice raw (crlf_idx + 4) (str len raw))
| lf_idx >= 0 = (str slice raw 0 lf_idx, str slice raw (lf_idx + 2) (str len raw))
| otherwise = (raw, "")
fn :: ht parse req rem String String Int => String String
ht parse req rem method rem sp2 =
| sp2 < 0 = (method, rem)
| otherwise = (method, str slice rem 0 sp2)
fn :: ht parse req line String Int => String String
ht parse req line line sp1 =
| sp1 <= 0 = ("", "")
| otherwise =
method = str slice line 0 sp1
rem = str slice line (sp1 + 1) (str len line)
ht parse req rem method rem (ht index of rem " ")
fn :: ht parse req parts [String] String => String String String
ht parse req parts [] body = ("", "", body)
ht parse req parts (f:_) body =
mp = ht parse req line f (ht index of f " ")
(ht pair key mp, ht pair val mp, body)
fn :: ht parse hdr parts [String] => [String String]
ht parse hdr parts [] = []
ht parse hdr parts (_:rest) = ht parse hdr lines rest
fn :: http parse headers String => [String String]
http parse headers raw =
hb = ht split head body raw (ht index of raw "\r\n\r\n") (ht index of raw "\n\n")
head = ht pair key hb
lines = ht split lines loop head 0 0 (str len head)
ht parse hdr parts lines
fn :: http parse request String => String String String
http parse request raw =
hb = ht split head body raw (ht index of raw "\r\n\r\n") (ht index of raw "\n\n")
head = ht pair key hb
body = ht pair val hb
lines = ht split lines loop head 0 0 (str len head)
ht parse req parts lines body
fn :: ht parse status rem String Int => Int String
ht parse status rem rem sp2 =
| sp2 < 0 = (ht parse int or rem 0, "")
| otherwise = (ht parse int or (str slice rem 0 sp2) 0, str slice rem (sp2 + 1) (str len rem))
fn :: ht parse status line String Int => Int String
ht parse status line line sp1 =
| sp1 <= 0 = (0, "")
| otherwise =
rem = str slice line (sp1 + 1) (str len line)
ht parse status rem rem (ht index of rem " ")
fn :: ht st code (Int String) => Int
ht st code (c, _) = c
fn :: ht st text (Int String) => String
ht st text (_, t) = t
fn :: ht parse resp parts [String] String => Int String String
ht parse resp parts [] body = (0, "", body)
ht parse resp parts (f:_) body =
st = ht parse status line f (ht index of f " ")
(ht st code st, ht st text st, body)
fn :: http parse response String => Int String String
http parse response raw =
hb = ht split head body raw (ht index of raw "\r\n\r\n") (ht index of raw "\n\n")
head = ht pair key hb
body = ht pair val hb
lines = ht split lines loop head 0 0 (str len head)
ht parse resp parts lines body
36.4.4. Implementazione interna: Live Kernel TCP HTTP/1.1 Client (http request tcp, http get, http post)
Nota come http.rg strutturi prima le firme fn :: ... => ... e risolva ogni caso tramite equazioni allineate e chiamate di coda:
fn :: ht ensure hdr [String String] String String => [String String]
ht ensure hdr headers key val =
| (str len (http header get headers key)) > 0 = headers
| otherwise = headers :: [(key, val)]
fn :: ht read tcp step Int Int String (Int String) => String
ht read tcp step fd timeout_ms acc (rc, chunk) =
| rc != 0 = acc
| otherwise = ht read tcp loop fd timeout_ms (acc + chunk)
fn :: ht read tcp loop Int Int String => String
ht read tcp loop fd timeout_ms acc =
ht read tcp step fd timeout_ms acc (sys recv fd 16384 timeout_ms)
fn :: ht resp code (Int String String) => Int
ht resp code (c, _, _) = c
fn :: ht resp body (Int String String) => String
ht resp body (_, _, b) = b
fn :: ht finish tcp resp String => Int Int String
ht finish tcp resp raw =
| (str len raw) == 0 = (0 - 1, 0, "")
| otherwise =
pr = http parse response raw
code = ht resp code pr
(0, code, raw)
fn :: ht send read step Int Int (Int Int) => Int Int String
ht send read step cfd timeout_ms (s_rc, _) =
| s_rc != 0 =
_ = sys close cfd
(s_rc, 0, "")
| otherwise =
raw = ht read tcp loop cfd timeout_ms ""
_ = sys close cfd
ht finish tcp resp raw
fn :: ht connect send tcp Int Int String Int => Int Int String
ht connect send tcp c_rc cfd wire timeout_ms =
| c_rc != 0 = (c_rc, 0, "")
| otherwise = ht send read step cfd timeout_ms (sys send cfd wire timeout_ms)
fn :: http request tcp String Int String String [String String] String Int => Int Int String
http request tcp host port method path headers body timeout_ms =
c_res = sys tcp connect host port timeout_ms
hdrs1 = ht ensure hdr headers "Host" host
hdrs2 = ht ensure hdr hdrs1 "Connection" "close"
wire = http build request method path hdrs2 body
ht connect send tcp (sock rc c_res) (sock fd c_res) wire timeout_ms
fn :: ht pick path String => String
ht pick path p =
| (str len p) == 0 = "/"
| otherwise = p
fn :: ht build target path String String => String
ht build target path p q =
| (str len q) == 0 = ht pick path p
| otherwise = (ht pick path p) + "?" + q
fn :: ht exec url req (String String Int String String) String [String String] String Int => Int Int String
ht exec url req (scheme, host, port, p, q) method headers body timeout_ms =
| scheme != "http" or (str len host) == 0 or port <= 0 = (0 - 7, 0, "")
| otherwise = http request tcp host port method (ht build target path p q) headers body timeout_ms
fn :: http get String Int => Int Int String
http get url timeout_ms =
ht exec url req (uri parse url) "GET" [] "" timeout_ms
fn :: http post String String String Int => Int Int String
http post url content_type body timeout_ms =
ht exec url req (uri parse url) "POST" [("Content-Type", content_type)] body timeout_ms
fn :: http resp rc (Int Int String) => Int
http resp rc (rc, _, _) = rc
fn :: http resp status (Int Int String) => Int
http resp status (_, st, _) = st
fn :: http resp headers (Int Int String) => [String String]
http resp headers (_, _, raw) = http parse headers raw
fn :: http resp body (Int Int String) => String
http resp body (_, _, raw) = ht resp body (http parse response raw)
36.5. Garanzie algoritmiche, memoria RMM1/RMM2 e le 5 Regole d'Oro di http
- Garanzia algoritmica e di sicurezza: Sanificazione automatica di
\re\nin tutte le intestazioni (http sanitize header) per prevenire attacchi di HTTP response splitting. - Complessità dello stack $O(1)$ con TCO: Tutti i cicli ricorsivi in
src/main/ridgun/lib/http.rgsono in posizione di coda, perciòridguncli compila in salti nativi senza crescita dello stack. - Memoria deterministica (
RMM1/RMM2): Zero pause del garbage collector; tutte le strutture intermedie vengono liberate in modo deterministico all'uscita dallo scope. - Verifica continua: Testata in modo esaustivo con
stable checke la suite automatizzatasrc/test/ridgun/test http.rg.
Le 5 Regole d'Oro quando programmi con http
- Dichiara
import httpall'inizio del file e usa le funzioni multi-parola con spazi naturali affinché il tuo codice si legga come prosa. - Allinea le tue pipeline di dati con
=e->: concatena le chiamate ahttpin passaggi con nomi chiari e lascia chestable formatallinei le colonne. - Sfrutta le funzioni totali di
httpnelle tue guardie|: controlla i valori di ritorno o destruttura gli ADT con pattern matching invece di dare per scontato che l'input esterno sia sempre valido. - Evita di copiare grandi strutture se devi solo consultare un campo: ricorda che in
RMM2gli argomenti di input sono prestati e non incrementano né decrementano i contatori (+0/-0). - Combina
httpcontest(import test): scrivi sempre asserzioni conassert equalsoassert trueper fissare gli invarianti del tuo dominio.
Nel Capitolo 37 passeremo a esplorare in profondità la lib ws (La lib ws — Handshake WebSocket RFC 6455, Framing a 16/64 bit e Mascheratura XOR).