FEAT: HTTPD server now have ON-ACCEPT actor which can be used to limi…

…t connection to specified IPs only
Oldes · Apr 2, 2019 · ead47c0 · ead47c0
1 parent 7ba3dc2
commit ead47c0
Show file tree

Hide file tree

Showing 3 changed files with 14 additions and 4 deletions.
diff --git a/src/modules/httpd.r3 b/src/modules/httpd.r3
@@ -20,7 +20,6 @@ Rebol [
 	TODO: {
 		* support for multidomain serving using `Host` header field
 		* add support for other methods - PUT, DELETE, TRACE, CONNECT, OPTIONS?
-		* limit connections per IP
 		* better error handling
 		* standard access log
 		* add list-dir action which shows content of a directory, if allowed
@@ -117,6 +116,7 @@ sys/make-scheme [
 			close port/locals/subport
 		]
 
+		On-Accept: func [ctx [object!]][ true ]
 		On-Header: func [ctx [object!]][] ;= placeholder; user can use it for early request processing
 
 		On-Get: func [
@@ -495,8 +495,14 @@ sys/make-scheme [
 
 	New-Client: func[port [port!] /local client info err][
 		client: first port
-		client/awake: :Awake-Client
 		info: query client
+		unless Actor/On-Accept info [
+			; connection not allowed
+			sys/log/info 'HTTPD ["Client not accepted:^[[22m" info/remote-ip]
+			close client
+			return false
+		]
+		client/awake: :Awake-Client
 		client/locals: make object! [
 			state: none
 			parent: port

diff --git a/src/tests/httpd-root/form.html b/src/tests/httpd-root/form.html
@@ -6,7 +6,7 @@
 </head>
 <body>
 <h1>Just  a simple test form</h1>
-<form action="form.html" method="post">
+<form action="/result/" method="post">
   First name: <input type="text" name="fname"><br>
   Last name: <input type="text" name="lname"><br>
   <input type="submit" value="Submit">

diff --git a/src/tests/test-httpd.r3 b/src/tests/test-httpd.r3
@@ -19,6 +19,11 @@ do %../modules/httpd.r3
 system/options/log/httpd: 3 ; for verbose output
 
 my-actor: object [
+	On-Accept: func [info [object!]][
+		; allow only connections from localhost
+		; TRUE = accepted, FALSE = refuse
+		find [ 127.0.0.1 ] info/remote-ip 
+	]
 	On-Header: func [ctx [object!]][
 		switch ctx/inp/target/file [
 			%form/     [
@@ -34,7 +39,6 @@ my-actor: object [
 				; request processing will stop with redirection response
 			]
 		]
-		? ctx
 	]
 	On-Post-Received: func [ctx [object!]][
 		ctx/out/header/Content-Type: "text/html; charset=UTF-8"