Skip to content

Releases: amphp/http-server

2.1.3

18 Aug 15:20
1f16f11
Compare
Choose a tag to compare
  • Fixed abrupt client disconnections when the server is shutdown by invoking server observers before closing connected clients. This provides an opportunity for observers to send or receive data from clients before the connection is closed.

2.1.2

16 Apr 18:31
v2.1.2
d1f71b0
Compare
Choose a tag to compare
  • Fixed loading src/Server.php with --classmap-authoritative

2.1.1

16 Apr 18:30
v2.1.1
c25a05e
Compare
Choose a tag to compare
  • Fixed typo in performance recommender.

2.1.0

20 Jun 18:08
v2.1.0
Compare
Choose a tag to compare
  • Added CallableMiddleware (#313)
  • Improved exception logging (#306)
  • Added setting to Options to pass the Request object to the logger context. The option defaults to off. (#310)
  • Fixed HTTP/2 streams closing if the response was sent before the request body was fully received. (#304)
  • Fixed HTTP/2 window size for too large request bodies, so they can be rejected instead of hanging

2.0.1

11 Mar 17:27
Compare
Choose a tag to compare
  • Fixed HTTP/2 window size validation on 32 bit platforms

2.0.0

18 Feb 17:34
5e75761
Compare
Choose a tag to compare

This release provides compatibility with amphp/socket v1.0. Please see the amphp/socket release notes for more information on changes in that library. While most code using this library should not require major changes, some compatibility breaks with v1.x were made.

Summary of compatibility breaks from v1.x to v2.0

  • Updated to league/uri@^6. Consequentially, PHP 7.2+ is now required.
  • Renamed Server to HttpServer. An alias of Server to HttpServer was kept for backward compatibility with v1.x, but may be removed in a future version.
  • Added Push object for pushed resources. Response::getPush() now returns an array of Push objects.
  • Upgrade callbacks (those set with Response::upgrade()) now receive an instance of Amp\Socket\EncryptableSocket, an interface extending Amp\Socket\Socket, as the parameter to the callback function. Upgrade callback are now run as a coroutine if a generater is returned. Coroutine (or promise returned from the callback) failures are logged to the server log.
  • Driver\Client returns an instance of Amp\Socket\SocketAddress from getLocalAddress() and getRemoteAddress(). The methods getLocalPort() and getRemotePort() have been removed. The IP address and port are available on the instance of SocketAddress returned.
  • Driver\Client::getCryptoContext() has been replaced with getTlsInfo(), which now returns an instance of Amp\Socket\TlsInfo for encrypted clients or null for plaintext clients.
  • HTTP/2 protocol is now declared as "2" instead of "2.0" in requests and responses (see https://http2.github.io/faq/#is-it-http20-or-http2).
  • Refactored HTTP/2 flood prevention to be based on a ratio between payload and non-payload bytes received, inspired by NGINX's flood prevention. Some options were removed:
    • Removed Options::getMinimumAverageFrameSize() and withMinimumAverageFrameSize().
    • Removed Options::getFramesPerSecondLimit() and withFramesPerSecondLimit().
  • Removed Options::getConnectionTimeout() and withConnectionTimeout(). HTTP/1.x and HTTP/2 connection timeouts are now separate and can be set using the http1Timeout (default 15 seconds) and http2Timeout (default 60 seconds) options.

Trailers

The Trailers object has been refactored to contain a list of header declared trailer fields (which may be empty) and a promise for an Amp\Http\Message object containing the future trailer values. Trailers in requests have been moved from the request body to the Request object. Request::getTrailers() returns a Trailers object having two methods:

  • Trailers::getFields(): Returns an array of declared trailer fields (this list may be empty, but still receive trailers).
  • Trailers::await(): Returns a promise that is resolved with a Amp\Http\Message instance once all trailers have been received.

Trailers are now supported in responses. A new Response constructor parameter or Response::setTrailers(Trailers $trailers) may be used to set a Trailers object for the response. The promise provided to the Trailers constructor should be resolved with an array of header values indexed by the header field name, similar to header field array provided to the Response constructor or Response::setHeaders().

Other backward compatibility breaks unlikely to affect application code

  • Driver\Http1Driver and Driver\Http2Driver constructors now require an instance of Psr\Log\LoggerInterface as the final parameter.
  • Promise parameter for Trailers object removed from RequestBody constructor.
  • void returns added to start(), onClose(), and close() methods in Driver\Client interface.
  • void return added to TimeReference::onTimeUpdate().
  • HTTP/2 pseudo headers (header fields starting with a colon (:) such as :method or :status) cannot be used in Request and Response. Accordingly, these header fields are no longer included in requests generated by the server. The values of these headers are used to populate request properties and should be accessed by getters in Request.
  • Removed TimeReference and SystemTimeReference. Use Amp\Http\formatDateHeader() in the amphp/[email protected] package to generate the value for an HTTP header value containing a date.
  • Refactored TimeoutCache and renamed some methods. Client timeouts are no longer updated within Client, rather HttpDriver implementations must update the client timeout. Users should be unaffected by this change unless they implemented their own Client or HttpDriver.
  • HttpDriverFactory::selectDriver() now requires instances of ErrorHandler, Psr\Log\LoggerInterface, and Options in addition to the Client instance.

New Features

  • The original casing of HTTP/1.x request headers is now available through Request::getRawHeaders().
  • Added Request::getAttributes() to retrieve an array of all request attributes and Request::removeAttribute() to remove an attribute.
  • Added Request::removeAttribute().
  • Added ClientException::getClient() that returns the Client that caused the error.
  • Back-pressure from consumption of request bodies is now used to control window sizes in HTTP/2. Window sizes are only increased in small increments instead of the entire allowable body size. This will improve memory consumption when handling large request bodies.
  • Added tlsSetupTimeout in Options. Default is 5 seconds.

Upgrading from v1.x

We believe only minor changes will be necessary for applications to upgrade from v1.x to v2.0. As trailers and upgrade responses are uncommon for applications, the most likely concern for upgraders is the shift to SocketAddress in Client::getLocalAddress() and Client::getRemoteAddress(), changes to methods in Options, as well as the changes made in amphp/socket v1.0.

2.0.0 RC4

04 Jan 18:24
2c3d572
Compare
Choose a tag to compare
2.0.0 RC4 Pre-release
Pre-release
  • Http2Driver now uses an HTTP/2 parser shared with amphp/http-client. Removed Http2Exception and child classes, which have been replaced by exception classes in amphp/http.
  • Upgraded to amphp/hpack @ ^3.
  • Renamed Request::getPush() to getPushes().

1.1.3

08 Jan 17:00
Compare
Choose a tag to compare
  • Fixed a bug in calculating remaining chunk length in HTTP/1.x chunked request body parsing (#292)

2.0.0 RC3

05 Nov 23:03
5a4baa7
Compare
Choose a tag to compare
2.0.0 RC3 Pre-release
Pre-release
  • Updated to league/uri@^6. Consequentially, PHP 7.2+ is now required.
  • Renamed Server to HttpServer. An alias of Server to HttpServer was kept for backward compatibility with v1.x, but may be removed in a future version.
  • Added Push object for pushed resources. Response::getPush() now returns an array of Push objects.
  • Restored Client::isUnix() method.
  • Added ClientException::getClient() that returns the Client that caused the error.
  • Renamed Trailers::awaitMessage() to await().
  • Added Request::removeAttribute().
  • Back-pressure from consumption of request bodies is now used to control window sizes in HTTP/2. Window sizes are only increased in small increments instead of the entire allowable body size. This will improve memory consumption when handling large request bodies.
  • Refactored HTTP/2 flood prevention to be based on a ratio between payload and non-payload bytes received, inspired by NGINX's flood prevention. Some options were removed:
    • Removed Options::getMinimumAverageFrameSize() and withMinimumAverageFrameSize().
    • Removed Options::getFramesPerSecondLimit() and withFramesPerSecondLimit().
  • Removed Options::getConnectionTimeout() and withConnectionTimeout(). HTTP/1.x and HTTP/2 connection timeouts are now separate and can be set using the http1Timeout (default 15 seconds) and http2Timeout (default 60 seconds) options.
  • Added tlsSetupTimeout option. Default is 5 seconds.
  • Removed TimeReference and SystemTimeReference. Use Amp\Http\formatDateHeader() in the amphp/[email protected] package to generate the value for an HTTP header value containing a date.
  • Refactored TimeoutCache and renamed some methods. Client timeouts are no longer updated within Client, rather HttpDriver implementations must update the client timeout. Users should be unaffected by this change unless they implemented their own Client or HttpDriver.
  • HttpDriverFactory::selectDriver() now requires instances of ErrorHandler, Psr\Log\LoggerInterface, and Options in addition to the Client instance.

2.0.0 RC2

16 Sep 17:41
0379152
Compare
Choose a tag to compare
2.0.0 RC2 Pre-release
Pre-release

Note: This is a pre-release, there might be breaking changes in the final stable version.

  • HTTP/2 protocol is now declared as "2" instead of "2.0" in requests and responses (see https://http2.github.io/faq/#is-it-http20-or-http2).
  • Added Request::getAttributes() to retrieve an array of all request attributes and Request::removeAttribute() to remove an attribute.