| 123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415 | 'use strict';const EventEmitter = require('events');const crypto = require('crypto');const http = require('http');const PerMessageDeflate = require('./permessage-deflate');const extension = require('./extension');const WebSocket = require('./websocket');const { GUID } = require('./constants');const keyRegex = /^[+/0-9A-Za-z]{22}==$/;/** * Class representing a WebSocket server. * * @extends EventEmitter */class WebSocketServer extends EventEmitter {  /**   * Create a `WebSocketServer` instance.   *   * @param {Object} options Configuration options   * @param {Number} options.backlog The maximum length of the queue of pending   *     connections   * @param {Boolean} options.clientTracking Specifies whether or not to track   *     clients   * @param {Function} options.handleProtocols An hook to handle protocols   * @param {String} options.host The hostname where to bind the server   * @param {Number} options.maxPayload The maximum allowed message size   * @param {Boolean} options.noServer Enable no server mode   * @param {String} options.path Accept only connections matching this path   * @param {(Boolean|Object)} options.perMessageDeflate Enable/disable   *     permessage-deflate   * @param {Number} options.port The port where to bind the server   * @param {http.Server} options.server A pre-created HTTP/S server to use   * @param {Function} options.verifyClient An hook to reject connections   * @param {Function} callback A listener for the `listening` event   */  constructor(options, callback) {    super();    options = Object.assign(      {        maxPayload: 100 * 1024 * 1024,        perMessageDeflate: false,        handleProtocols: null,        clientTracking: true,        verifyClient: null,        noServer: false,        backlog: null, // use default (511 as implemented in net.js)        server: null,        host: null,        path: null,        port: null      },      options    );    if (options.port == null && !options.server && !options.noServer) {      throw new TypeError(        'One of the "port", "server", or "noServer" options must be specified'      );    }    if (options.port != null) {      this._server = http.createServer((req, res) => {        const body = http.STATUS_CODES[426];        res.writeHead(426, {          'Content-Length': body.length,          'Content-Type': 'text/plain'        });        res.end(body);      });      this._server.listen(        options.port,        options.host,        options.backlog,        callback      );    } else if (options.server) {      this._server = options.server;    }    if (this._server) {      this._removeListeners = addListeners(this._server, {        listening: this.emit.bind(this, 'listening'),        error: this.emit.bind(this, 'error'),        upgrade: (req, socket, head) => {          this.handleUpgrade(req, socket, head, (ws) => {            this.emit('connection', ws, req);          });        }      });    }    if (options.perMessageDeflate === true) options.perMessageDeflate = {};    if (options.clientTracking) this.clients = new Set();    this.options = options;  }  /**   * Returns the bound address, the address family name, and port of the server   * as reported by the operating system if listening on an IP socket.   * If the server is listening on a pipe or UNIX domain socket, the name is   * returned as a string.   *   * @return {(Object|String|null)} The address of the server   * @public   */  address() {    if (this.options.noServer) {      throw new Error('The server is operating in "noServer" mode');    }    if (!this._server) return null;    return this._server.address();  }  /**   * Close the server.   *   * @param {Function} cb Callback   * @public   */  close(cb) {    if (cb) this.once('close', cb);    //    // Terminate all associated clients.    //    if (this.clients) {      for (const client of this.clients) client.terminate();    }    const server = this._server;    if (server) {      this._removeListeners();      this._removeListeners = this._server = null;      //      // Close the http server if it was internally created.      //      if (this.options.port != null) {        server.close(() => this.emit('close'));        return;      }    }    process.nextTick(emitClose, this);  }  /**   * See if a given request should be handled by this server instance.   *   * @param {http.IncomingMessage} req Request object to inspect   * @return {Boolean} `true` if the request is valid, else `false`   * @public   */  shouldHandle(req) {    if (this.options.path) {      const index = req.url.indexOf('?');      const pathname = index !== -1 ? req.url.slice(0, index) : req.url;      if (pathname !== this.options.path) return false;    }    return true;  }  /**   * Handle a HTTP Upgrade request.   *   * @param {http.IncomingMessage} req The request object   * @param {net.Socket} socket The network socket between the server and client   * @param {Buffer} head The first packet of the upgraded stream   * @param {Function} cb Callback   * @public   */  handleUpgrade(req, socket, head, cb) {    socket.on('error', socketOnError);    const key =      req.headers['sec-websocket-key'] !== undefined        ? req.headers['sec-websocket-key'].trim()        : false;    const upgrade = req.headers.upgrade;    const version = +req.headers['sec-websocket-version'];    const extensions = {};    if (      req.method !== 'GET' ||      upgrade === undefined ||      upgrade.toLowerCase() !== 'websocket' ||      !key ||      !keyRegex.test(key) ||      (version !== 8 && version !== 13) ||      !this.shouldHandle(req)    ) {      return abortHandshake(socket, 400);    }    if (this.options.perMessageDeflate) {      const perMessageDeflate = new PerMessageDeflate(        this.options.perMessageDeflate,        true,        this.options.maxPayload      );      try {        const offers = extension.parse(req.headers['sec-websocket-extensions']);        if (offers[PerMessageDeflate.extensionName]) {          perMessageDeflate.accept(offers[PerMessageDeflate.extensionName]);          extensions[PerMessageDeflate.extensionName] = perMessageDeflate;        }      } catch (err) {        return abortHandshake(socket, 400);      }    }    //    // Optionally call external client verification handler.    //    if (this.options.verifyClient) {      const info = {        origin:          req.headers[`${version === 8 ? 'sec-websocket-origin' : 'origin'}`],        secure: !!(req.connection.authorized || req.connection.encrypted),        req      };      if (this.options.verifyClient.length === 2) {        this.options.verifyClient(info, (verified, code, message, headers) => {          if (!verified) {            return abortHandshake(socket, code || 401, message, headers);          }          this.completeUpgrade(key, extensions, req, socket, head, cb);        });        return;      }      if (!this.options.verifyClient(info)) return abortHandshake(socket, 401);    }    this.completeUpgrade(key, extensions, req, socket, head, cb);  }  /**   * Upgrade the connection to WebSocket.   *   * @param {String} key The value of the `Sec-WebSocket-Key` header   * @param {Object} extensions The accepted extensions   * @param {http.IncomingMessage} req The request object   * @param {net.Socket} socket The network socket between the server and client   * @param {Buffer} head The first packet of the upgraded stream   * @param {Function} cb Callback   * @private   */  completeUpgrade(key, extensions, req, socket, head, cb) {    //    // Destroy the socket if the client has already sent a FIN packet.    //    if (!socket.readable || !socket.writable) return socket.destroy();    const digest = crypto      .createHash('sha1')      .update(key + GUID)      .digest('base64');    const headers = [      'HTTP/1.1 101 Switching Protocols',      'Upgrade: websocket',      'Connection: Upgrade',      `Sec-WebSocket-Accept: ${digest}`    ];    const ws = new WebSocket(null);    var protocol = req.headers['sec-websocket-protocol'];    if (protocol) {      protocol = protocol.split(',').map(trim);      //      // Optionally call external protocol selection handler.      //      if (this.options.handleProtocols) {        protocol = this.options.handleProtocols(protocol, req);      } else {        protocol = protocol[0];      }      if (protocol) {        headers.push(`Sec-WebSocket-Protocol: ${protocol}`);        ws.protocol = protocol;      }    }    if (extensions[PerMessageDeflate.extensionName]) {      const params = extensions[PerMessageDeflate.extensionName].params;      const value = extension.format({        [PerMessageDeflate.extensionName]: [params]      });      headers.push(`Sec-WebSocket-Extensions: ${value}`);      ws._extensions = extensions;    }    //    // Allow external modification/inspection of handshake headers.    //    this.emit('headers', headers, req);    socket.write(headers.concat('\r\n').join('\r\n'));    socket.removeListener('error', socketOnError);    ws.setSocket(socket, head, this.options.maxPayload);    if (this.clients) {      this.clients.add(ws);      ws.on('close', () => this.clients.delete(ws));    }    cb(ws);  }}module.exports = WebSocketServer;/** * Add event listeners on an `EventEmitter` using a map of <event, listener> * pairs. * * @param {EventEmitter} server The event emitter * @param {Object.<String, Function>} map The listeners to add * @return {Function} A function that will remove the added listeners when called * @private */function addListeners(server, map) {  for (const event of Object.keys(map)) server.on(event, map[event]);  return function removeListeners() {    for (const event of Object.keys(map)) {      server.removeListener(event, map[event]);    }  };}/** * Emit a `'close'` event on an `EventEmitter`. * * @param {EventEmitter} server The event emitter * @private */function emitClose(server) {  server.emit('close');}/** * Handle premature socket errors. * * @private */function socketOnError() {  this.destroy();}/** * Close the connection when preconditions are not fulfilled. * * @param {net.Socket} socket The socket of the upgrade request * @param {Number} code The HTTP response status code * @param {String} [message] The HTTP response body * @param {Object} [headers] Additional HTTP response headers * @private */function abortHandshake(socket, code, message, headers) {  if (socket.writable) {    message = message || http.STATUS_CODES[code];    headers = Object.assign(      {        Connection: 'close',        'Content-type': 'text/html',        'Content-Length': Buffer.byteLength(message)      },      headers    );    socket.write(      `HTTP/1.1 ${code} ${http.STATUS_CODES[code]}\r\n` +        Object.keys(headers)          .map((h) => `${h}: ${headers[h]}`)          .join('\r\n') +        '\r\n\r\n' +        message    );  }  socket.removeListener('error', socketOnError);  socket.destroy();}/** * Remove whitespace characters from both ends of a string. * * @param {String} str The string * @return {String} A new string representing `str` stripped of whitespace *     characters from both its beginning and end * @private */function trim(str) {  return str.trim();}
 |