349 lines
12 KiB
TypeScript
349 lines
12 KiB
TypeScript
/**
|
|
* Copyright (c) Microsoft Corporation.
|
|
*
|
|
* Licensed under the Apache License, Version 2.0 (the "License");
|
|
* you may not use this file except in compliance with the License.
|
|
* You may obtain a copy of the License at
|
|
*
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
|
*
|
|
* Unless required by applicable law or agreed to in writing, software
|
|
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
* See the License for the specific language governing permissions and
|
|
* limitations under the License.
|
|
*/
|
|
|
|
import fs from 'fs';
|
|
import path from 'path';
|
|
|
|
import mime from 'mime';
|
|
import { WebSocketServer as wsServer } from 'ws';
|
|
import { assert } from '@isomorphic/assert';
|
|
import { createGuid } from './crypto';
|
|
import { isPathInside } from './fileUtils';
|
|
import { createHttpServer, startHttpServer } from './network';
|
|
|
|
import type http from 'http';
|
|
|
|
// Minimal shape of the Vite dev server we rely on. Kept inline so this file
|
|
// doesn't need a type dep on `vite`, which is only available in watch builds.
|
|
export type ViteDevServer = {
|
|
middlewares: (req: http.IncomingMessage, res: http.ServerResponse, next: (err?: unknown) => void) => void;
|
|
transformIndexHtml: (url: string, html: string, originalUrl?: string) => Promise<string>;
|
|
close: () => Promise<void>;
|
|
};
|
|
|
|
export type ServerRouteHandler = (request: http.IncomingMessage, response: http.ServerResponse) => boolean;
|
|
|
|
export type Transport = {
|
|
sendEvent?: (method: string, params: any) => void;
|
|
close?: () => void;
|
|
onconnect: () => void;
|
|
dispatch: (method: string, params: any) => Promise<any>;
|
|
onclose: () => void;
|
|
};
|
|
|
|
export class HttpServer {
|
|
private _server: http.Server;
|
|
private _urlPrefixPrecise: string = '';
|
|
private _urlPrefixHumanReadable: string = '';
|
|
private _port: number = 0;
|
|
private _started = false;
|
|
private _routes: { prefix?: string, exact?: string, handler: ServerRouteHandler }[] = [];
|
|
private _wsGuid: string | undefined;
|
|
// Allowed Host headers; null disables the check (host bound to a public address).
|
|
private _allowedHosts: Set<string> | null = null;
|
|
private _staticRoot: string | undefined;
|
|
|
|
constructor(staticRoot?: string) {
|
|
this._server = createHttpServer(this._onRequest.bind(this));
|
|
this._staticRoot = staticRoot ? path.resolve(staticRoot) : undefined;
|
|
}
|
|
|
|
server() {
|
|
return this._server;
|
|
}
|
|
|
|
routePrefix(prefix: string, handler: ServerRouteHandler) {
|
|
this._routes.push({ prefix, handler });
|
|
}
|
|
|
|
routePath(path: string, handler: ServerRouteHandler) {
|
|
this._routes.push({ exact: path, handler });
|
|
}
|
|
|
|
port(): number {
|
|
return this._port;
|
|
}
|
|
|
|
createWebSocket(transportFactory: (url: URL) => Transport, guid?: string) {
|
|
assert(!this._wsGuid, 'can only create one main websocket transport per server');
|
|
this._wsGuid = guid || createGuid();
|
|
// HMR begin: route upgrades manually with `noServer` so Vite HMR's upgrade
|
|
// listener on the same http.Server is not pre-empted. With `{ server, path }`
|
|
// the ws library aborts non-matching upgrades with 400.
|
|
const wsPath = '/' + this._wsGuid;
|
|
const wss = new wsServer({ noServer: true });
|
|
this._server.on('upgrade', (request, socket, head) => {
|
|
const pathname = new URL(request.url ?? '/', 'http://localhost').pathname;
|
|
if (pathname !== wsPath)
|
|
return;
|
|
wss.handleUpgrade(request, socket, head, ws => wss.emit('connection', ws, request));
|
|
});
|
|
// HMR end
|
|
wss.on('connection', (ws, request) => {
|
|
const url = new URL(request.url ?? '/', 'http://localhost');
|
|
const transport = transportFactory(url);
|
|
transport.sendEvent = (method, params) => ws.send(JSON.stringify({ method, params }));
|
|
transport.close = () => ws.close();
|
|
transport.onconnect();
|
|
ws.on('message', async message => {
|
|
const { id, method, params } = JSON.parse(String(message));
|
|
try {
|
|
const result = await transport.dispatch(method, params);
|
|
ws.send(JSON.stringify({ id, result }));
|
|
} catch (e) {
|
|
ws.send(JSON.stringify({ id, error: String(e) }));
|
|
}
|
|
});
|
|
ws.on('close', () => transport.onclose());
|
|
ws.on('error', () => transport.onclose());
|
|
});
|
|
}
|
|
|
|
wsGuid(): string | undefined {
|
|
return this._wsGuid;
|
|
}
|
|
|
|
async createViteDevServer(options: { root: string, base?: string }): Promise<ViteDevServer> {
|
|
// HMR begin: hide the `vite` import from esbuild so release bundles can
|
|
// DCE this whole branch without keeping a resolvable module reference.
|
|
const loadVite = new Function('return import("vite")') as () => Promise<any>;
|
|
const vite = await loadVite();
|
|
return await vite.createServer({
|
|
root: options.root,
|
|
base: options.base,
|
|
server: {
|
|
middlewareMode: true,
|
|
// Dedicated path so Vite's HMR websocket does not collide with any
|
|
// websocket HttpServer owns via createWebSocket().
|
|
hmr: { path: '/__vite_hmr', server: this._server },
|
|
},
|
|
appType: 'spa',
|
|
clearScreen: false,
|
|
});
|
|
}
|
|
// HMR end
|
|
|
|
// Vite's middleware `next` callback for the "no middleware matched" case;
|
|
// emits a 404 only if nothing downstream already responded.
|
|
static notFoundFallback(response: http.ServerResponse): () => void {
|
|
return () => {
|
|
if (!response.headersSent) {
|
|
response.statusCode = 404;
|
|
response.end();
|
|
}
|
|
};
|
|
}
|
|
|
|
async start(options: { port?: number, preferredPort?: number, host?: string } = {}): Promise<void> {
|
|
assert(!this._started, 'server already started');
|
|
this._started = true;
|
|
|
|
const host = options.host;
|
|
if (options.preferredPort) {
|
|
try {
|
|
await startHttpServer(this._server, { port: options.preferredPort, host });
|
|
} catch (e) {
|
|
if (!e || !e.message || !e.message.includes('EADDRINUSE'))
|
|
throw e;
|
|
await startHttpServer(this._server, { host });
|
|
}
|
|
} else {
|
|
await startHttpServer(this._server, { port: options.port, host });
|
|
}
|
|
|
|
const address = this._server.address();
|
|
assert(address, 'Could not bind server socket');
|
|
if (typeof address === 'string') {
|
|
this._urlPrefixPrecise = address;
|
|
this._urlPrefixHumanReadable = address;
|
|
} else {
|
|
this._port = address.port;
|
|
this._urlPrefixPrecise = `http://${urlHostFromAddress(address)}:${address.port}`;
|
|
this._urlPrefixHumanReadable = `http://${host ?? 'localhost'}:${address.port}`;
|
|
this._allowedHosts = computeAllowedHosts(host, address.address);
|
|
}
|
|
}
|
|
|
|
async stop() {
|
|
await new Promise(cb => this._server!.close(cb));
|
|
}
|
|
|
|
urlPrefix(purpose: 'human-readable' | 'precise'): string {
|
|
return purpose === 'human-readable' ? this._urlPrefixHumanReadable : this._urlPrefixPrecise;
|
|
}
|
|
|
|
serveFile(request: http.IncomingMessage, response: http.ServerResponse, absoluteFilePath: string, headers?: { [name: string]: string }, options?: { skipRootCheck?: boolean }): boolean {
|
|
if (this._staticRoot && !options?.skipRootCheck && !isPathInside(this._staticRoot, absoluteFilePath)) {
|
|
response.statusCode = 403;
|
|
response.end();
|
|
return true;
|
|
}
|
|
try {
|
|
for (const [name, value] of Object.entries(headers || {}))
|
|
response.setHeader(name, value);
|
|
if (request.headers.range)
|
|
this._serveRangeFile(request, response, absoluteFilePath);
|
|
else
|
|
this._serveFile(response, absoluteFilePath);
|
|
return true;
|
|
} catch (e) {
|
|
return false;
|
|
}
|
|
}
|
|
|
|
private _serveFile(response: http.ServerResponse, absoluteFilePath: string) {
|
|
const content = fs.readFileSync(absoluteFilePath);
|
|
response.statusCode = 200;
|
|
const contentType = mime.getType(path.extname(absoluteFilePath)) || 'application/octet-stream';
|
|
response.setHeader('Content-Type', contentType);
|
|
response.setHeader('Content-Length', content.byteLength);
|
|
response.end(content);
|
|
}
|
|
|
|
private _serveRangeFile(request: http.IncomingMessage, response: http.ServerResponse, absoluteFilePath: string) {
|
|
const range = request.headers.range;
|
|
if (!range || !range.startsWith('bytes=') || range.includes(', ') || [...range].filter(char => char === '-').length !== 1) {
|
|
response.statusCode = 400;
|
|
return response.end('Bad request');
|
|
}
|
|
|
|
// Parse the range header: https://datatracker.ietf.org/doc/html/rfc7233#section-2.1
|
|
const [startStr, endStr] = range.replace(/bytes=/, '').split('-');
|
|
|
|
// Both start and end (when passing to fs.createReadStream) and the range header are inclusive and start counting at 0.
|
|
let start: number;
|
|
let end: number;
|
|
const size = fs.statSync(absoluteFilePath).size;
|
|
if (startStr !== '' && endStr === '') {
|
|
// No end specified: use the whole file
|
|
start = +startStr;
|
|
end = size - 1;
|
|
} else if (startStr === '' && endStr !== '') {
|
|
// No start specified: calculate start manually
|
|
start = size - +endStr;
|
|
end = size - 1;
|
|
} else {
|
|
start = +startStr;
|
|
end = +endStr;
|
|
}
|
|
|
|
// Handle unavailable range request
|
|
if (Number.isNaN(start) || Number.isNaN(end) || start >= size || end >= size || start > end) {
|
|
// Return the 416 Range Not Satisfiable: https://datatracker.ietf.org/doc/html/rfc7233#section-4.4
|
|
response.writeHead(416, {
|
|
'Content-Range': `bytes */${size}`
|
|
});
|
|
return response.end();
|
|
}
|
|
|
|
// Sending Partial Content: https://datatracker.ietf.org/doc/html/rfc7233#section-4.1
|
|
response.writeHead(206, {
|
|
'Content-Range': `bytes ${start}-${end}/${size}`,
|
|
'Accept-Ranges': 'bytes',
|
|
'Content-Length': end - start + 1,
|
|
'Content-Type': mime.getType(path.extname(absoluteFilePath))!,
|
|
});
|
|
|
|
const readable = fs.createReadStream(absoluteFilePath, { start, end });
|
|
readable.pipe(response);
|
|
}
|
|
|
|
private _onRequest(request: http.IncomingMessage, response: http.ServerResponse) {
|
|
if (request.method === 'OPTIONS') {
|
|
response.writeHead(200);
|
|
response.end();
|
|
return;
|
|
}
|
|
|
|
if (this._allowedHosts) {
|
|
const host = request.headers.host?.toLowerCase();
|
|
const hostname = host ? hostnameFromHostHeader(host) : undefined;
|
|
if (!hostname || !this._allowedHosts.has(hostname)) {
|
|
response.statusCode = 403;
|
|
response.end();
|
|
return;
|
|
}
|
|
}
|
|
|
|
request.on('error', () => response.end());
|
|
try {
|
|
if (!request.url) {
|
|
response.end();
|
|
return;
|
|
}
|
|
const url = new URL('http://localhost' + request.url);
|
|
for (const route of this._routes) {
|
|
if (route.exact && url.pathname === route.exact && route.handler(request, response))
|
|
return;
|
|
if (route.prefix && url.pathname.startsWith(route.prefix) && route.handler(request, response))
|
|
return;
|
|
}
|
|
response.statusCode = 404;
|
|
response.end();
|
|
} catch (e) {
|
|
response.end();
|
|
}
|
|
}
|
|
}
|
|
|
|
export function computeAllowedHosts(requested: string | undefined, bound: string): Set<string> | null {
|
|
const loopback = new Set(['127.0.0.1', '::1', 'localhost']);
|
|
const isLoopback = (h: string | undefined) => h !== undefined && loopback.has(h.toLowerCase());
|
|
if (!isLoopback(requested) && requested !== undefined)
|
|
return null;
|
|
if (!isLoopback(bound) && requested === undefined)
|
|
return null;
|
|
return new Set(['localhost', '127.0.0.1', '[::1]']);
|
|
}
|
|
|
|
// Bracket IPv6 literals so they can be used as the host part of a URL.
|
|
export function urlHostFromAddress(address: { address: string, family: string }): string {
|
|
return address.family === 'IPv6' ? `[${address.address}]` : address.address;
|
|
}
|
|
|
|
export function hostnameFromHostHeader(host: string): string {
|
|
if (host.startsWith('[')) {
|
|
const end = host.indexOf(']');
|
|
return end < 0 ? host : host.substring(0, end + 1);
|
|
}
|
|
const colon = host.indexOf(':');
|
|
return colon < 0 ? host : host.substring(0, colon);
|
|
}
|
|
|
|
export function serveFolder(folder: string): HttpServer {
|
|
const server = new HttpServer(folder);
|
|
server.routePrefix('/', (request, response) => {
|
|
let relativePath = new URL('http://localhost' + request.url).pathname;
|
|
if (relativePath.startsWith('/trace/file')) {
|
|
const url = new URL('http://localhost' + request.url!);
|
|
const requested = url.searchParams.get('path');
|
|
if (!requested)
|
|
return false;
|
|
const resolved = path.resolve(requested);
|
|
try {
|
|
return server.serveFile(request, response, resolved);
|
|
} catch (e) {
|
|
return false;
|
|
}
|
|
}
|
|
if (relativePath === '/')
|
|
relativePath = '/index.html';
|
|
const absolutePath = path.join(folder, ...relativePath.split('/'));
|
|
return server.serveFile(request, response, absolutePath);
|
|
});
|
|
return server;
|
|
}
|