commit 346229dd640fe3a41065ad902caadadf5bddc9ad Author: Robert Goodall Date: Wed Jul 29 00:39:00 2026 -0400 Initial commit diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..07a7a29 --- /dev/null +++ b/.gitignore @@ -0,0 +1,8 @@ +# build output +/build/ + +# runtime database +*.db + +# macos +.DS_Store diff --git a/CMakeLists.txt b/CMakeLists.txt new file mode 100644 index 0000000..c8dfeb7 --- /dev/null +++ b/CMakeLists.txt @@ -0,0 +1,48 @@ +cmake_minimum_required(VERSION 3.15) +project(Bluehound) + +set(CMAKE_CXX_STANDARD 17) +set(CMAKE_CXX_STANDARD_REQUIRED ON) + +# SimpleBLE local build +set(SIMPLEBLE_DIR "${CMAKE_CURRENT_SOURCE_DIR}/simpleble/simpleble") +set(SIMPLEBLE_ROOT "${CMAKE_CURRENT_SOURCE_DIR}/simpleble") +add_library(simpleble STATIC IMPORTED) +set_target_properties(simpleble PROPERTIES + IMPORTED_LOCATION "${SIMPLEBLE_DIR}/build/lib/libsimpleble.a" + INTERFACE_INCLUDE_DIRECTORIES "${SIMPLEBLE_DIR}/include;${SIMPLEBLE_DIR}/build/export;${SIMPLEBLE_ROOT}/dependencies/external" +) + +# Find other packages +find_package(SQLite3 REQUIRED) + +# cpp-httplib v0.14.3 vendored under third_party for offline builds +set(HTTPLIB_DIR "${CMAKE_CURRENT_SOURCE_DIR}/third_party") + +# Executable +add_executable(bluehound + bluehound.cpp + classic_bluetooth.mm +) + +# Enable Objective-C++ for .mm files +set_source_files_properties(classic_bluetooth.mm PROPERTIES + COMPILE_FLAGS "-x objective-c++ -fobjc-arc" +) + +target_link_libraries(bluehound + simpleble + SQLite::SQLite3 + pthread + "-framework Foundation" + "-framework CoreBluetooth" + "-framework IOKit" + "-framework IOBluetooth" +) + +target_include_directories(bluehound PRIVATE + ${HTTPLIB_DIR} +) + +# Installation +install(TARGETS bluehound DESTINATION bin) diff --git a/README.md b/README.md new file mode 100644 index 0000000..143719d --- /dev/null +++ b/README.md @@ -0,0 +1,127 @@ +# Bluehound + +Continuous BLE and Classic Bluetooth scanner with time-searchable logging, a REST API, and a web dashboard. Built for macOS and embedded/sensor-node deployments with WiFi streaming support. + +Bluehound scans nearby Bluetooth devices in a loop, enriches each observation (manufacturer, service UUIDs, device class, estimated distance, Apple Continuity data), and persists everything to SQLite. A built-in HTTP server exposes the data for the bundled dashboard or any client. + +## Features + +- **Dual-stack scanning** — BLE via [SimpleBLE](https://github.com/OpenBluetoothToolbox/SimpleBLE), plus Classic Bluetooth inquiry and SDP service discovery on macOS via IOBluetooth. +- **Time-searchable history** — every observation is stamped with date, time, hour, and minute and indexed for fast range queries. +- **Device enrichment** — company/manufacturer lookup, standard service and characteristic UUID decoding, device-class decoding, and GATT characteristic enumeration on connect. +- **Distance estimation** — RSSI + Tx power path-loss model, with per-device distance history. +- **Apple Continuity decoding** — parses proximity/pairing advertisements. +- **Passive security assessment** — flags risky services (OBEX, SPP, HID, audio) and known-vulnerable device signatures, assigning a HIGH/MEDIUM/LOW/NONE risk level. +- **Device nicknames** — assign and manage human-readable labels per address. +- **ESP32 ingestion** — remote sensor nodes can POST scan batches over WiFi to `/esp32/scan`. +- **REST API + web dashboard** — a single-file HTML dashboard served over HTTP. + +## Requirements + +- macOS (Classic Bluetooth support uses IOBluetooth/CoreBluetooth frameworks) +- CMake >= 3.15 +- SQLite3 +- Vendored dependencies (included in the repo): + - SimpleBLE static library at `simpleble/simpleble/build/lib/libsimpleble.a` + - cpp-httplib header at `third_party/httplib.h` + +## Build + +```sh +./build.sh +``` + +This verifies the vendored dependencies, configures with CMake into `build/`, and compiles. The resulting binary is `build/bluehound`. + +To build manually: + +```sh +mkdir -p build && cd build +cmake .. +make -j +``` + +Install system-wide with `sudo make install` from the `build/` directory. + +## Run + +```sh +./build/bluehound +``` + +On start, Bluehound initializes `ble_scans.db`, launches the HTTP server on port `8080` (bound to `0.0.0.0`), and begins scanning. Shut down cleanly with `Ctrl-C` (SIGINT/SIGTERM are handled gracefully). + +Default configuration (compiled into `Config` in [bluehound.cpp](bluehound.cpp)): + +| Setting | Default | +| --- | --- | +| Scan duration | 5000 ms per cycle | +| Scan interval | 1000 ms between cycles | +| Database path | `ble_scans.db` | +| HTTP port | 8080 | +| Max DB entries | 1,000,000 (rotates) | + +## Web dashboard + +Serve the dashboard with the helper script (static server on port 8090): + +```sh +python3 serve_dashboard.py +``` + +Then open http://127.0.0.1:8090. The dashboard queries the scanner's API on port 8080, so run the `bluehound` binary alongside it. + +## REST API + +The scanner serves the following endpoints on port 8080: + +| Method | Path | Description | +| --- | --- | --- | +| GET | `/health` | Health check | +| GET | `/scans/recent?limit=N` | Most recent observations | +| GET | `/scans/date/:date` | Observations for `YYYY-MM-DD` | +| GET | `/scans/hour/:hour` | Observations for hour `HH` | +| GET | `/stats` | Aggregate statistics | +| GET | `/device/:address/count` | Observation count for a device | +| GET | `/distance/:address` | Distance history for a device | +| GET | `/characteristics/:address` | Discovered GATT characteristics | +| GET | `/read/:address/:service/:characteristic` | Read a characteristic value | +| GET | `/nickname/:address` | Get a device nickname | +| POST | `/nickname/:address` | Set a device nickname | +| DELETE | `/nickname/:address` | Remove a device nickname | +| GET | `/nicknames` | List all nicknames | +| GET | `/security/:address` | Security assessment for a device | +| GET | `/security` | All security assessments | +| GET | `/tracking/:address` | Tracking data (device info, Apple Continuity) | +| POST | `/esp32/scan` | Ingest a scan batch from a remote ESP32 node | + +CORS is enabled for all origins. + +## Data model + +Observations are stored in `ble_scans.db` (SQLite). Key tables: + +- `ble_scans` — every observation, with timestamps, RSSI, manufacturer/company, service UUIDs, estimated distance, protocol type, and Classic device-class/SDP fields. +- `device_distance_history` — per-device RSSI/distance samples over time. +- `device_characteristics` — discovered GATT services and characteristics. +- `device_nicknames` — user-assigned labels. +- `security_assessments` — risk level, vulnerabilities, and recommendations per device. +- `device_tracking_data` — device model/firmware/serial, Apple Continuity, pairing status, and tracking identifiers. + +## Project layout + +| Path | Purpose | +| --- | --- | +| [bluehound.cpp](bluehound.cpp) | Scanner core: scan loop, SQLite logging, HTTP API, BLE decoding, security assessment | +| [classic_bluetooth.h](classic_bluetooth.h) / [classic_bluetooth.mm](classic_bluetooth.mm) | Classic Bluetooth inquiry and SDP via IOBluetooth (Objective-C++) | +| [web_dashboard.html](web_dashboard.html) | Single-file web dashboard | +| [serve_dashboard.py](serve_dashboard.py) | Static server for the dashboard | +| [CMakeLists.txt](CMakeLists.txt) / [build.sh](build.sh) | Build configuration | +| `simpleble/` | Vendored SimpleBLE | +| `third_party/httplib.h` | Vendored cpp-httplib | + +## Notes + +- Classic Bluetooth scanning and the IOBluetooth-backed features are macOS-only. BLE scanning via SimpleBLE is portable, but the build as configured links macOS frameworks. +- The ESP32 endpoint uses lightweight string-based JSON parsing; use a proper JSON library for production ingestion. +- Security assessments are heuristic and intended for authorized inventory and awareness, not as a substitute for a full audit. diff --git a/bluehound.cpp b/bluehound.cpp new file mode 100644 index 0000000..8672255 --- /dev/null +++ b/bluehound.cpp @@ -0,0 +1,2497 @@ +/* + * Bluehound - Continuous BLE/Classic Bluetooth scanner with time-searchable logging + * Built for embedded devices with WiFi streaming support + */ + +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include + +// HTTP server library - using cpp-httplib (single header) +#include "httplib.h" + +// Classic Bluetooth support +#include "classic_bluetooth.h" + +// Configuration +struct Config { + int scan_duration_ms = 5000; // Scan for 5 seconds per cycle + int scan_interval_ms = 1000; // Wait 1 second between scans + std::string db_path = "ble_scans.db"; + int http_port = 8080; + bool enable_http_server = true; + int max_db_entries = 1000000; // Rotate after 1M entries +}; + +// Global state +std::atomic running(true); +std::mutex db_mutex; +std::set enumerated_devices; // Track devices we've already enumerated +std::mutex enumerated_mutex; +Config config; + +// Forward declarations +std::string get_timestamp(); + +// Signal handler for graceful shutdown +void signal_handler(int signal) { + std::cout << "\nReceived signal " << signal << ", shutting down gracefully..." << std::endl; + running = false; +} + +// BLE UUID Decoder - Standard Services +std::string decode_service_uuid(const std::string& uuid) { + static const std::map services = { + {"1800", "Generic Access"}, + {"1801", "Generic Attribute"}, + {"1804", "Tx Power"}, + {"180A", "Device Information"}, + {"180D", "Heart Rate"}, + {"180F", "Battery Service"}, + {"1810", "Blood Pressure"}, + {"1812", "Human Interface Device"}, + {"1816", "Cycling Speed and Cadence"}, + {"1818", "Cycling Power"}, + {"181A", "Environmental Sensing"}, + {"181B", "Body Composition"}, + {"181C", "User Data"}, + {"181D", "Weight Scale"} + }; + + std::string upper_uuid = uuid; + std::transform(upper_uuid.begin(), upper_uuid.end(), upper_uuid.begin(), ::toupper); + + // Extract 16-bit UUID from 128-bit format (0000XXXX-0000-1000-8000-00805f9b34fb) + if (upper_uuid.length() >= 8 && upper_uuid.substr(0, 4) == "0000") { + upper_uuid = upper_uuid.substr(4, 4); + } else if (upper_uuid.length() > 4) { + return ""; // Custom vendor UUID + } + + auto it = services.find(upper_uuid); + return (it != services.end()) ? it->second : ""; +} + +// BLE UUID Decoder - Standard Characteristics +std::string decode_characteristic_uuid(const std::string& uuid) { + static const std::map characteristics = { + {"2A00", "Device Name"}, + {"2A01", "Appearance"}, + {"2A04", "Peripheral Preferred Connection Parameters"}, + {"2A05", "Service Changed"}, + {"2A07", "Tx Power Level"}, + {"2A19", "Battery Level"}, + {"2A23", "System ID"}, + {"2A24", "Model Number String"}, + {"2A25", "Serial Number String"}, + {"2A26", "Firmware Revision String"}, + {"2A27", "Hardware Revision String"}, + {"2A28", "Software Revision String"}, + {"2A29", "Manufacturer Name String"}, + {"2A37", "Heart Rate Measurement"}, + {"2A38", "Body Sensor Location"}, + {"2A49", "Blood Pressure Feature"}, + {"2A4A", "HID Information"}, + {"2A50", "PnP ID"}, + {"2A6E", "Temperature"}, + {"2A6F", "Humidity"}, + {"2A9E", "Weight Measurement"} + }; + + std::string upper_uuid = uuid; + std::transform(upper_uuid.begin(), upper_uuid.end(), upper_uuid.begin(), ::toupper); + + // Extract 16-bit UUID from 128-bit format (0000XXXX-0000-1000-8000-00805f9b34fb) + if (upper_uuid.length() >= 8 && upper_uuid.substr(0, 4) == "0000") { + upper_uuid = upper_uuid.substr(4, 4); + } else if (upper_uuid.length() > 4) { + return ""; // Custom vendor UUID + } + + auto it = characteristics.find(upper_uuid); + return (it != characteristics.end()) ? it->second : ""; +} + +// Get characteristic description +std::string get_characteristic_description(const std::string& uuid) { + static const std::map descriptions = { + {"2A19", "Battery charge level (0-100%)"}, + {"2A00", "Human-readable device name"}, + {"2A29", "Name of device manufacturer"}, + {"2A24", "Device model number"}, + {"2A26", "Firmware version"}, + {"2A37", "Heart rate in beats per minute"}, + {"2A6E", "Temperature in Celsius"}, + {"2A6F", "Relative humidity percentage"}, + {"2A50", "Product ID information"}, + {"2A07", "Transmit power level"} + }; + + std::string upper_uuid = uuid; + std::transform(upper_uuid.begin(), upper_uuid.end(), upper_uuid.begin(), ::toupper); + + // Extract 16-bit UUID from 128-bit format + if (upper_uuid.length() >= 8 && upper_uuid.substr(0, 4) == "0000") { + upper_uuid = upper_uuid.substr(4, 4); + } else if (upper_uuid.length() > 4) { + return ""; + } + + auto it = descriptions.find(upper_uuid); + return (it != descriptions.end()) ? it->second : ""; +} + +// Security Assessment Structure +struct Vulnerability { + std::string name; + std::string severity; // HIGH, MEDIUM, LOW + std::string description; + std::string cve; +}; + +struct SecurityAssessment { + std::string device_address; + std::string risk_level; // HIGH, MEDIUM, LOW, NONE + std::vector vulnerabilities; + std::vector recommendations; +}; + +// Apple Continuity Data Structure +struct AppleContinuityData { + std::string device_type; + std::string device_model; + int battery_level; + bool battery_charging; + bool airpods_in_ear; + bool airpods_case_lid_open; + std::string airpods_case_battery; + std::string airpods_left_battery; + std::string airpods_right_battery; + std::string proximity_pairing_status; + std::string handoff_data; + std::string nearby_action; + std::string raw_data; +}; + +// Decode Apple Continuity/Proximity data +AppleContinuityData decode_apple_continuity(const SimpleBLE::ByteArray& data) { + AppleContinuityData result; + result.battery_level = -1; + result.battery_charging = false; + result.airpods_in_ear = false; + result.airpods_case_lid_open = false; + + if (data.empty()) return result; + + // Convert to hex string for analysis + std::stringstream hex_stream; + for (uint8_t byte : data) { + hex_stream << std::hex << std::setw(2) << std::setfill('0') << (int)byte; + } + result.raw_data = hex_stream.str(); + + // Apple uses different message types in manufacturer data + if (data.size() < 2) return result; + + uint8_t message_type = data[0]; + + // Type 0x02: Handoff + if (message_type == 0x02) { + result.handoff_data = "Handoff enabled (clipboard, call switching)"; + } + // Type 0x05: AirDrop + else if (message_type == 0x05) { + result.handoff_data = "AirDrop discoverable"; + } + // Type 0x07: AirPods/AirTag + else if (message_type == 0x07 && data.size() >= 27) { + // AirPods status + result.device_type = "AirPods"; + + uint8_t status = data[6]; + result.airpods_in_ear = (status & 0x01) != 0; + result.airpods_case_lid_open = (status & 0x02) != 0; + + // Battery levels (4-bit each, 0-10 scale) + uint8_t battery_data = data[7]; + result.battery_level = (battery_data >> 4) * 10; // Left AirPod + + if (data.size() >= 10) { + int left = (data[8] >> 4) & 0x0F; + int right = data[8] & 0x0F; + int case_battery = (data[9] >> 4) & 0x0F; + + if (left <= 10) result.airpods_left_battery = std::to_string(left * 10) + "%"; + if (right <= 10) result.airpods_right_battery = std::to_string(right * 10) + "%"; + if (case_battery <= 10) result.airpods_case_battery = std::to_string(case_battery * 10) + "%"; + } + } + // Type 0x09: AirPlay + else if (message_type == 0x09) { + result.handoff_data = "AirPlay target available"; + } + // Type 0x0C: Proximity Pairing + else if (message_type == 0x0C && data.size() >= 3) { + result.proximity_pairing_status = "Proximity pairing active"; + uint8_t device_type_byte = data[2]; + + switch (device_type_byte) { + case 0x01: result.device_type = "iPhone"; break; + case 0x02: result.device_type = "iPad"; break; + case 0x03: result.device_type = "Apple Watch"; break; + case 0x0E: result.device_type = "AirPods"; break; + case 0x0F: result.device_type = "AirPods Pro"; break; + case 0x13: result.device_type = "AirPods Max"; break; + default: result.device_type = "Unknown Apple Device"; break; + } + } + // Type 0x10: Nearby Action + else if (message_type == 0x10) { + result.nearby_action = "Device requesting action (AirTag, FindMy)"; + } + + return result; +} + +// Check if service list contains a specific service +bool has_service(const std::vector& services, const std::string& target) { + for (const auto& service : services) { + std::string lower_service = service; + std::string lower_target = target; + std::transform(lower_service.begin(), lower_service.end(), lower_service.begin(), ::tolower); + std::transform(lower_target.begin(), lower_target.end(), lower_target.begin(), ::tolower); + + if (lower_service.find(lower_target) != std::string::npos) { + return true; + } + } + return false; +} + +// Assess device security based on services and characteristics +SecurityAssessment assess_device_security( + const std::string& address, + const std::vector& services, + bool is_paired, + bool is_connectable, + const std::string& device_name +) { + SecurityAssessment assessment; + assessment.device_address = address; + + // Check for OBEX services (HIGH risk - file transfer) + if (has_service(services, "obex object push") || has_service(services, "1105")) { + assessment.vulnerabilities.push_back({ + "Unsecured File Transfer", + "HIGH", + "Device accepts file transfers without authentication", + "CVE-2020-13543" + }); + assessment.recommendations.push_back("Disable OBEX Object Push service"); + assessment.recommendations.push_back("Enable PIN protection for file transfers"); + } + + if (has_service(services, "obex file transfer") || has_service(services, "1106")) { + assessment.vulnerabilities.push_back({ + "File System Access", + "HIGH", + "Full filesystem access via OBEX FTP", + "" + }); + assessment.recommendations.push_back("Disable OBEX File Transfer service"); + assessment.recommendations.push_back("Restrict filesystem access permissions"); + } + + // Check for Serial Port service (MEDIUM risk) + if (has_service(services, "serial port") || has_service(services, "1101")) { + assessment.vulnerabilities.push_back({ + "Open Serial Port", + "MEDIUM", + "Serial port service available without authentication", + "" + }); + assessment.recommendations.push_back("Disable unused serial port services"); + assessment.recommendations.push_back("Require authentication for SPP connections"); + } + + // Check for HID service (MEDIUM risk - input injection) + if (has_service(services, "human interface device") || has_service(services, "1812")) { + assessment.vulnerabilities.push_back({ + "HID Service Exposed", + "MEDIUM", + "HID service allows input injection attacks", + "" + }); + assessment.recommendations.push_back("Verify HID pairing before accepting connections"); + assessment.recommendations.push_back("Disable HID if not needed"); + } + + // Check for Audio services (LOW risk - eavesdropping) + if (has_service(services, "audio") || has_service(services, "110a") || has_service(services, "110b")) { + assessment.vulnerabilities.push_back({ + "Audio Streaming", + "LOW", + "Audio service allows unauthorized streaming", + "" + }); + assessment.recommendations.push_back("Require pairing for audio connections"); + assessment.recommendations.push_back("Set device to non-discoverable when not in use"); + } + + // Check for unpaired but connectable devices (LOW risk) + if (!is_paired && is_connectable) { + assessment.vulnerabilities.push_back({ + "Discoverable Mode", + "LOW", + "Device is discoverable and not paired", + "" + }); + assessment.recommendations.push_back("Set device to non-discoverable mode"); + assessment.recommendations.push_back("Enable pairing timeout"); + } + + // Check for Android devices (potential BlueBorne) + std::string lower_name = device_name; + std::transform(lower_name.begin(), lower_name.end(), lower_name.begin(), ::tolower); + if (lower_name.find("android") != std::string::npos && services.size() > 5) { + assessment.vulnerabilities.push_back({ + "Potential BlueBorne Vulnerability", + "HIGH", + "Android device may be vulnerable to RCE if unpatched", + "CVE-2017-1000251" + }); + assessment.recommendations.push_back("Update device to latest firmware immediately"); + assessment.recommendations.push_back("Apply BlueBorne security patches"); + } + + // Calculate overall risk level + bool has_high = false; + bool has_medium = false; + + for (const auto& vuln : assessment.vulnerabilities) { + if (vuln.severity == "HIGH") has_high = true; + if (vuln.severity == "MEDIUM") has_medium = true; + } + + if (has_high) { + assessment.risk_level = "HIGH"; + } else if (has_medium) { + assessment.risk_level = "MEDIUM"; + } else if (!assessment.vulnerabilities.empty()) { + assessment.risk_level = "LOW"; + } else { + assessment.risk_level = "NONE"; + } + + // Add general recommendations for high/medium risk + if (assessment.risk_level == "HIGH" || assessment.risk_level == "MEDIUM") { + assessment.recommendations.push_back("Disable Bluetooth when not in use"); + assessment.recommendations.push_back("Keep device firmware updated"); + } + + // Remove duplicate recommendations + std::sort(assessment.recommendations.begin(), assessment.recommendations.end()); + assessment.recommendations.erase( + std::unique(assessment.recommendations.begin(), assessment.recommendations.end()), + assessment.recommendations.end() + ); + + return assessment; +} + +// Passive vulnerability assessment (no connection required) +SecurityAssessment assess_device_passive( + const std::string& address, + const std::string& device_name, + const std::string& company_name, + bool is_connectable, + const std::string& manufacturer_data +) { + SecurityAssessment assessment; + assessment.device_address = address; + + std::string lower_name = device_name; + std::string lower_company = company_name; + std::transform(lower_name.begin(), lower_name.end(), lower_name.begin(), ::tolower); + std::transform(lower_company.begin(), lower_company.end(), lower_company.begin(), ::tolower); + + // Known vulnerable devices by name/manufacturer + if (lower_name.find("android") != std::string::npos) { + assessment.vulnerabilities.push_back({ + "Potential BlueBorne Target", + "HIGH", + "Android device potentially vulnerable to BlueBorne if unpatched (2017)", + "CVE-2017-1000251" + }); + assessment.recommendations.push_back("Update Android to latest security patches"); + assessment.recommendations.push_back("Verify BlueBorne fix is applied"); + } + + // Old Samsung devices + if (lower_company.find("samsung") != std::string::npos && + (lower_name.find("galaxy s") != std::string::npos || lower_name.find("galaxy note") != std::string::npos)) { + assessment.vulnerabilities.push_back({ + "Legacy Samsung Device", + "MEDIUM", + "Older Samsung devices had Bluetooth vulnerabilities in 2019-2020", + "CVE-2019-16400" + }); + assessment.recommendations.push_back("Check for firmware updates"); + } + + // Apple devices with older iOS + if (lower_company.find("apple") != std::string::npos && + (lower_name.find("iphone") != std::string::npos || lower_name.find("ipad") != std::string::npos)) { + assessment.vulnerabilities.push_back({ + "Apple BLE Privacy Concern", + "LOW", + "Apple devices may leak tracking information via BLE advertising", + "" + }); + assessment.recommendations.push_back("Keep iOS updated"); + assessment.recommendations.push_back("Disable Bluetooth when not in use"); + } + + // Fitness trackers - common privacy issues + if (lower_name.find("fitbit") != std::string::npos || + lower_name.find("garmin") != std::string::npos || + lower_name.find("xiaomi") != std::string::npos) { + assessment.vulnerabilities.push_back({ + "Fitness Tracker Privacy", + "LOW", + "Fitness devices may broadcast health data in clear text", + "" + }); + assessment.recommendations.push_back("Check privacy settings in companion app"); + } + + // IoT devices - typically less secure + if (lower_name.find("smart") != std::string::npos || + lower_name.find("lock") != std::string::npos || + lower_name.find("sensor") != std::string::npos) { + assessment.vulnerabilities.push_back({ + "IoT Device Security", + "MEDIUM", + "IoT devices often have outdated firmware and weak security", + "" + }); + assessment.recommendations.push_back("Update firmware regularly"); + assessment.recommendations.push_back("Check manufacturer security bulletins"); + } + + // Devices that are connectable but not bonded - easy targets + if (is_connectable) { + assessment.vulnerabilities.push_back({ + "Connectable Without Pairing", + "LOW", + "Device accepts connections without requiring pairing first", + "" + }); + assessment.recommendations.push_back("Enable pairing requirements"); + assessment.recommendations.push_back("Set device to non-discoverable when not in use"); + } + + // Check for weak random address (privacy issue) + if (address.find("00:00:00") != std::string::npos || + address.find("FF:FF:FF") != std::string::npos) { + assessment.vulnerabilities.push_back({ + "Weak Random Address", + "LOW", + "Device may not properly randomize Bluetooth address", + "" + }); + assessment.recommendations.push_back("Check device privacy settings"); + } + + // Calculate risk level + bool has_high = false; + bool has_medium = false; + for (const auto& vuln : assessment.vulnerabilities) { + if (vuln.severity == "HIGH") has_high = true; + if (vuln.severity == "MEDIUM") has_medium = true; + } + + if (has_high) { + assessment.risk_level = "HIGH"; + } else if (has_medium) { + assessment.risk_level = "MEDIUM"; + } else if (!assessment.vulnerabilities.empty()) { + assessment.risk_level = "LOW"; + } else { + assessment.risk_level = "NONE"; + } + + // Remove duplicate recommendations + std::sort(assessment.recommendations.begin(), assessment.recommendations.end()); + assessment.recommendations.erase( + std::unique(assessment.recommendations.begin(), assessment.recommendations.end()), + assessment.recommendations.end() + ); + + return assessment; +} + +// Active vulnerability assessment (attempts connection) +SecurityAssessment assess_device_active( + sqlite3* db, + SimpleBLE::Peripheral& peripheral, + const SecurityAssessment& passive_assessment +) { + SecurityAssessment assessment = passive_assessment; + std::string address = peripheral.address(); + + try { + std::cout << "[ACTIVE SCAN] Testing " << address << " for vulnerabilities..." << std::endl; + + // Test 1: Can we connect without pairing? + bool connected_unpaired = false; + if (!peripheral.is_paired()) { + try { + peripheral.connect(); + if (peripheral.is_connected()) { + connected_unpaired = true; + assessment.vulnerabilities.push_back({ + "Connects Without Pairing", + "MEDIUM", + "Device accepts connections without requiring pairing/authentication", + "" + }); + assessment.recommendations.push_back("Require pairing before allowing connections"); + std::cout << "[ACTIVE SCAN] ✓ Connected without pairing" << std::endl; + } + } catch (...) { + std::cout << "[ACTIVE SCAN] ✗ Connection requires pairing" << std::endl; + } + } + + // Test 2: Enumerate services (if connected) + if (peripheral.is_connected()) { + try { + auto services = peripheral.services(); + std::vector service_names; + + for (auto& service : services) { + std::string service_uuid = service.uuid(); + std::string service_name = decode_service_uuid(service_uuid); + if (!service_name.empty()) { + service_names.push_back(service_name); + } + service_names.push_back(service_uuid); + + // Check for OBEX services + if (service_uuid.find("1105") != std::string::npos || + service_uuid.find("1106") != std::string::npos) { + assessment.vulnerabilities.push_back({ + "OBEX Service Accessible", + "HIGH", + "File transfer service accessible without authentication", + "CVE-2020-13543" + }); + assessment.recommendations.push_back("Disable OBEX services"); + std::cout << "[ACTIVE SCAN] ✓ OBEX service found" << std::endl; + } + + // Check for Serial Port + if (service_uuid.find("1101") != std::string::npos) { + assessment.vulnerabilities.push_back({ + "Serial Port Accessible", + "MEDIUM", + "Serial port service accessible without authentication", + "" + }); + assessment.recommendations.push_back("Disable serial port or require authentication"); + std::cout << "[ACTIVE SCAN] ✓ Serial Port found" << std::endl; + } + + // Check for HID + if (service_uuid.find("1812") != std::string::npos) { + assessment.vulnerabilities.push_back({ + "HID Service Accessible", + "MEDIUM", + "Keyboard/mouse service accessible - potential input injection", + "" + }); + assessment.recommendations.push_back("Verify HID pairing requirements"); + std::cout << "[ACTIVE SCAN] ✓ HID service found" << std::endl; + } + } + + // Test 3: Try to read characteristics without pairing + if (connected_unpaired && !services.empty()) { + int readable_without_auth = 0; + for (auto& service : services) { + auto characteristics = service.characteristics(); + for (auto& characteristic : characteristics) { + if (characteristic.can_read()) { + try { + SimpleBLE::ByteArray data = peripheral.read( + SimpleBLE::BluetoothUUID(service.uuid()), + SimpleBLE::BluetoothUUID(characteristic.uuid()) + ); + readable_without_auth++; + } catch (...) { + // Read failed - good, requires auth + } + } + } + } + + if (readable_without_auth > 0) { + assessment.vulnerabilities.push_back({ + "Unauthenticated Characteristic Access", + "HIGH", + std::string("Can read ") + std::to_string(readable_without_auth) + + " characteristics without authentication", + "" + }); + assessment.recommendations.push_back("Enable authentication for all characteristics"); + std::cout << "[ACTIVE SCAN] ✓ " << readable_without_auth + << " characteristics readable without auth" << std::endl; + } + } + + } catch (const std::exception& e) { + std::cerr << "[ACTIVE SCAN] Error enumerating services: " << e.what() << std::endl; + } + + // Disconnect after testing + try { + peripheral.disconnect(); + } catch (...) {} + } + + std::cout << "[ACTIVE SCAN] Complete for " << address << std::endl; + + } catch (const std::exception& e) { + std::cerr << "[ACTIVE SCAN] Error: " << e.what() << std::endl; + } + + // Recalculate risk level + bool has_high = false; + bool has_medium = false; + for (const auto& vuln : assessment.vulnerabilities) { + if (vuln.severity == "HIGH") has_high = true; + if (vuln.severity == "MEDIUM") has_medium = true; + } + + if (has_high) { + assessment.risk_level = "HIGH"; + } else if (has_medium) { + assessment.risk_level = "MEDIUM"; + } else if (!assessment.vulnerabilities.empty()) { + assessment.risk_level = "LOW"; + } else { + assessment.risk_level = "NONE"; + } + + // Remove duplicate vulnerabilities and recommendations + std::sort(assessment.recommendations.begin(), assessment.recommendations.end()); + assessment.recommendations.erase( + std::unique(assessment.recommendations.begin(), assessment.recommendations.end()), + assessment.recommendations.end() + ); + + return assessment; +} + +// Classic Bluetooth vulnerability assessment +SecurityAssessment assess_classic_device(const ClassicBluetooth::ClassicDevice& device) { + SecurityAssessment assessment; + assessment.device_address = device.address; + assessment.risk_level = "NONE"; + + // Check for OBEX services (file transfer without auth) + for (const auto& service : device.services) { + if (service.uuid == "1105") { // OBEX Object Push + Vulnerability vuln; + vuln.name = "OBEX Object Push Service"; + vuln.severity = "HIGH"; + vuln.description = "Device accepts file transfers without authentication via OBEX Object Push"; + vuln.cve = "CVE-2020-13543"; + assessment.vulnerabilities.push_back(vuln); + assessment.recommendations.push_back("Disable OBEX Object Push service"); + assessment.recommendations.push_back("Enable PIN protection for file transfers"); + } + + if (service.uuid == "1106") { // OBEX File Transfer + Vulnerability vuln; + vuln.name = "OBEX File Transfer Service"; + vuln.severity = "HIGH"; + vuln.description = "Full filesystem access available via OBEX FTP without proper authentication"; + vuln.cve = "CVE-2020-13543"; + assessment.vulnerabilities.push_back(vuln); + assessment.recommendations.push_back("Disable OBEX File Transfer service"); + assessment.recommendations.push_back("Restrict filesystem access permissions"); + } + + if (service.uuid == "1101") { // Serial Port Profile (SPP) + Vulnerability vuln; + vuln.name = "Serial Port Profile Exposed"; + vuln.severity = "MEDIUM"; + vuln.description = "Serial port service allows unauthorized command execution"; + assessment.vulnerabilities.push_back(vuln); + assessment.recommendations.push_back("Disable unused Serial Port services"); + assessment.recommendations.push_back("Require authentication for SPP connections"); + } + + if (service.uuid == "1812") { // HID Service + Vulnerability vuln; + vuln.name = "HID Service Accessible"; + vuln.severity = "MEDIUM"; + vuln.description = "Human Interface Device service allows input injection attacks"; + assessment.vulnerabilities.push_back(vuln); + assessment.recommendations.push_back("Verify HID pairing before accepting connections"); + assessment.recommendations.push_back("Disable HID if not needed"); + } + + if (service.uuid == "1103") { // Dialup Networking + Vulnerability vuln; + vuln.name = "Dialup Networking Service"; + vuln.severity = "LOW"; + vuln.description = "Legacy DUN service may have security weaknesses"; + assessment.vulnerabilities.push_back(vuln); + assessment.recommendations.push_back("Disable DUN if not actively used"); + } + } + + // Check for Android devices (BlueBorne risk) + if (device.device_class.major_class == "Phone" && device.device_class.minor_class == "Smartphone") { + // Check if device name suggests Android + std::string name_lower = device.name; + std::transform(name_lower.begin(), name_lower.end(), name_lower.begin(), ::tolower); + + if (name_lower.find("android") != std::string::npos || + name_lower.find("galaxy") != std::string::npos || + name_lower.find("pixel") != std::string::npos) { + Vulnerability vuln; + vuln.name = "Potential BlueBorne Target"; + vuln.severity = "HIGH"; + vuln.description = "Android device may be vulnerable to BlueBorne remote code execution if unpatched"; + vuln.cve = "CVE-2017-1000251"; + assessment.vulnerabilities.push_back(vuln); + assessment.recommendations.push_back("Update Android to latest security patches"); + assessment.recommendations.push_back("Verify BlueBorne patches are applied"); + } + } + + // Check for IoT/Smart devices + if (device.device_class.major_class == "Peripheral" || device.device_class.major_class == "Toy") { + Vulnerability vuln; + vuln.name = "IoT Device Security Risk"; + vuln.severity = "MEDIUM"; + vuln.description = "IoT and peripheral devices often have outdated firmware and weak security"; + assessment.vulnerabilities.push_back(vuln); + assessment.recommendations.push_back("Check for firmware updates"); + assessment.recommendations.push_back("Review device pairing and authentication settings"); + } + + // Calculate risk level + for (const auto& vuln : assessment.vulnerabilities) { + if (vuln.severity == "HIGH") { + assessment.risk_level = "HIGH"; + break; + } else if (vuln.severity == "MEDIUM" && assessment.risk_level != "HIGH") { + assessment.risk_level = "MEDIUM"; + } else if (vuln.severity == "LOW" && assessment.risk_level == "NONE") { + assessment.risk_level = "LOW"; + } + } + + // Add general recommendations for Classic BT + if (!assessment.vulnerabilities.empty()) { + assessment.recommendations.push_back("Disable Bluetooth when not in use"); + assessment.recommendations.push_back("Keep device firmware updated"); + assessment.recommendations.push_back("Set device to non-discoverable mode when not pairing"); + } + + // Remove duplicate recommendations + std::sort(assessment.recommendations.begin(), assessment.recommendations.end()); + assessment.recommendations.erase( + std::unique(assessment.recommendations.begin(), assessment.recommendations.end()), + assessment.recommendations.end() + ); + + return assessment; +} + +// Store security assessment in database +void store_security_assessment(sqlite3* db, const SecurityAssessment& assessment) { + std::lock_guard lock(db_mutex); + + // Convert vulnerabilities to JSON string + std::stringstream vulns_json; + vulns_json << "["; + for (size_t i = 0; i < assessment.vulnerabilities.size(); i++) { + if (i > 0) vulns_json << ","; + vulns_json << "{\"name\":\"" << assessment.vulnerabilities[i].name << "\"," + << "\"severity\":\"" << assessment.vulnerabilities[i].severity << "\"," + << "\"description\":\"" << assessment.vulnerabilities[i].description << "\""; + if (!assessment.vulnerabilities[i].cve.empty()) { + vulns_json << ",\"cve\":\"" << assessment.vulnerabilities[i].cve << "\""; + } + vulns_json << "}"; + } + vulns_json << "]"; + + // Convert recommendations to JSON array + std::stringstream recs_json; + recs_json << "["; + for (size_t i = 0; i < assessment.recommendations.size(); i++) { + if (i > 0) recs_json << ","; + recs_json << "\"" << assessment.recommendations[i] << "\""; + } + recs_json << "]"; + + const char* upsert_sql = R"( + INSERT INTO security_assessments (device_address, risk_level, vulnerabilities, recommendations, last_assessed) + VALUES (?, ?, ?, ?, datetime('now')) + ON CONFLICT(device_address) + DO UPDATE SET risk_level = excluded.risk_level, + vulnerabilities = excluded.vulnerabilities, + recommendations = excluded.recommendations, + last_assessed = datetime('now'); + )"; + + sqlite3_stmt* stmt; + if (sqlite3_prepare_v2(db, upsert_sql, -1, &stmt, nullptr) == SQLITE_OK) { + sqlite3_bind_text(stmt, 1, assessment.device_address.c_str(), -1, SQLITE_TRANSIENT); + sqlite3_bind_text(stmt, 2, assessment.risk_level.c_str(), -1, SQLITE_TRANSIENT); + sqlite3_bind_text(stmt, 3, vulns_json.str().c_str(), -1, SQLITE_TRANSIENT); + sqlite3_bind_text(stmt, 4, recs_json.str().c_str(), -1, SQLITE_TRANSIENT); + sqlite3_step(stmt); + sqlite3_finalize(stmt); + } +} + +// Map company ID to company name +std::string get_company_name(uint16_t company_id) { + static const std::map companies = { + {0x0001, "Nokia"}, {0x0002, "Intel"}, {0x0004, "TDK"}, + {0x0006, "Microsoft"}, {0x0007, "Lucent"}, {0x0008, "Motorola"}, + {0x0009, "Infineon"}, {0x000A, "Qualcomm"}, {0x000B, "Silicon Wave"}, + {0x000C, "Digianswer"}, {0x000D, "Texas Instruments"}, {0x000F, "Broadcom"}, + {0x0012, "CSR"}, {0x0013, "Atmel"}, {0x0014, "Mitsubishi"}, + {0x0015, "RTX"}, {0x0018, "GCT Semiconductor"}, {0x0019, "Marvell"}, + {0x001D, "Sony"}, {0x001E, "Hanback"}, {0x0020, "ST Microelectronics"}, + {0x0025, "NXP"}, {0x002E, "Plantronics"}, {0x0030, "Dynastream"}, + {0x0031, "Timex"}, {0x0039, "Bose"}, {0x003A, "Sony Ericsson"}, + {0x003C, "Harman"}, {0x003D, "NXP Semiconductors"}, {0x0046, "MediaTek"}, + {0x004C, "Apple"}, {0x004E, "LG Electronics"}, {0x0050, "Huawei"}, + {0x005B, "Toshiba"}, {0x005D, "Polar Electro"}, {0x0067, "HP"}, + {0x0075, "Samsung"}, {0x007C, "HTC"}, {0x0080, "Lenovo"}, + {0x00E0, "Google"}, {0x00E5, "Garmin"}, {0x0106, "Xiaomi"}, + {0x0117, "Fitbit"}, {0x0131, "Tile"}, {0x0157, "Xiaomi"}, + {0x0171, "Amazon"}, {0x01A0, "OnePlus"}, {0x0276, "Fitbit"}, + {0x02E5, "Garmin"}, {0x0499, "Ruuvi Innovations"} + }; + + auto it = companies.find(company_id); + return (it != companies.end()) ? it->second : "Unknown"; +} + +// Calculate estimated distance from TX power and RSSI +double calculate_distance(int16_t tx_power, int16_t rssi) { + // If TX power is invalid or not advertised, use RSSI-only estimation + if (tx_power == -32768 || tx_power == 0) { + // Empirical RSSI to distance mapping (calibrated for typical BLE devices at 0 dBm TX) + // Based on real-world measurements + if (rssi >= -35) return 0.5; // Immediate proximity (< 0.5m) + if (rssi >= -45) return 1.0; // Very close (0.5-1m) + if (rssi >= -55) return 2.0; // Close (1-2m) + if (rssi >= -65) return 5.0; // Near (2-5m) + if (rssi >= -75) return 10.0; // Medium (5-10m) + if (rssi >= -85) return 20.0; // Far (10-20m) + return 30.0; // Very far (>20m) + } + + // If TX power is available, use path loss formula + // Formula: distance = 10 ^ ((TX_Power - RSSI) / (10 * N)) + // N = 2.0 for free space, 3.0-4.0 for indoor with obstacles + const double N = 2.0; // More accurate for typical indoor environments + + double distance = std::pow(10.0, (tx_power - rssi) / (10.0 * N)); + return distance; +} + +// Get address type as string +std::string get_address_type_string(SimpleBLE::BluetoothAddressType type) { + switch (type) { + case SimpleBLE::BluetoothAddressType::PUBLIC: + return "PUBLIC"; + case SimpleBLE::BluetoothAddressType::RANDOM: + return "RANDOM"; + default: + return "UNSPECIFIED"; + } +} + +// Enumerate characteristics for a connected device +bool enumerate_characteristics(sqlite3* db, SimpleBLE::Peripheral& peripheral) { + std::lock_guard lock(db_mutex); + + std::string address = peripheral.address(); + std::string name = peripheral.identifier(); + + try { + auto services = peripheral.services(); + + for (auto& service : services) { + std::string service_uuid = service.uuid(); + auto characteristics = service.characteristics(); + + for (auto& characteristic : characteristics) { + std::string char_uuid = characteristic.uuid(); + + // Build properties string + std::stringstream props; + bool can_read = characteristic.can_read(); + bool can_write = characteristic.can_write_request() || characteristic.can_write_command(); + bool can_notify = characteristic.can_notify(); + bool can_indicate = characteristic.can_indicate(); + + if (can_read) props << "READ,"; + if (can_write) props << "WRITE,"; + if (can_notify) props << "NOTIFY,"; + if (can_indicate) props << "INDICATE,"; + + std::string properties = props.str(); + if (!properties.empty()) { + properties.pop_back(); // Remove trailing comma + } + + // Insert into database + const char* insert_sql = R"( + INSERT OR REPLACE INTO device_characteristics + (device_address, device_name, service_uuid, characteristic_uuid, properties) + VALUES (?, ?, ?, ?, ?); + )"; + + sqlite3_stmt* stmt; + int rc = sqlite3_prepare_v2(db, insert_sql, -1, &stmt, nullptr); + if (rc == SQLITE_OK) { + sqlite3_bind_text(stmt, 1, address.c_str(), -1, SQLITE_TRANSIENT); + sqlite3_bind_text(stmt, 2, name.c_str(), -1, SQLITE_TRANSIENT); + sqlite3_bind_text(stmt, 3, service_uuid.c_str(), -1, SQLITE_TRANSIENT); + sqlite3_bind_text(stmt, 4, char_uuid.c_str(), -1, SQLITE_TRANSIENT); + sqlite3_bind_text(stmt, 5, properties.c_str(), -1, SQLITE_TRANSIENT); + sqlite3_step(stmt); + sqlite3_finalize(stmt); + } + } + } + + std::cout << "[" << get_timestamp() << "] Enumerated characteristics for " << address << std::endl; + return true; + } catch (const std::exception& e) { + std::cerr << "Error enumerating characteristics for " << address << ": " << e.what() << std::endl; + return false; + } +} + +// Connect to device and enumerate characteristics (runs in background) +void connect_and_enumerate(sqlite3* db, SimpleBLE::Peripheral peripheral) { + std::string address = peripheral.address(); + + try { + std::cout << "[" << get_timestamp() << "] Attempting to connect to " << address << "..." << std::endl; + + peripheral.connect(); + + if (peripheral.is_connected()) { + std::cout << "[" << get_timestamp() << "] Connected to " << address << std::endl; + + enumerate_characteristics(db, peripheral); + + // Run ACTIVE security assessment after enumeration + try { + // First, get passive assessment from database + SecurityAssessment passive_assessment; + passive_assessment.device_address = address; + passive_assessment.risk_level = "NONE"; + + // Load existing passive assessment if available + { + std::lock_guard lock(db_mutex); + const char* query = "SELECT risk_level, vulnerabilities FROM security_assessments WHERE device_address = ?;"; + sqlite3_stmt* stmt; + if (sqlite3_prepare_v2(db, query, -1, &stmt, nullptr) == SQLITE_OK) { + sqlite3_bind_text(stmt, 1, address.c_str(), -1, SQLITE_TRANSIENT); + if (sqlite3_step(stmt) == SQLITE_ROW) { + passive_assessment.risk_level = reinterpret_cast(sqlite3_column_text(stmt, 0)); + // Parse vulnerabilities JSON if needed + } + sqlite3_finalize(stmt); + } + } + + // Perform active assessment + SecurityAssessment assessment = assess_device_active(db, peripheral, passive_assessment); + + store_security_assessment(db, assessment); + std::cout << "[" << get_timestamp() << "] Active security assessment: " << address + << " - Risk: " << assessment.risk_level + << " (" << assessment.vulnerabilities.size() << " vulnerabilities)" << std::endl; + + // Try to extract additional tracking information + try { + std::cout << "[INFO EXTRACT] Attempting to read device information..." << std::endl; + + std::string manufacturer_name = ""; + std::string model_number = ""; + std::string firmware_version = ""; + std::string hardware_version = ""; + std::string serial_number = ""; + + // Look for Device Information Service (0x180A) + auto services = peripheral.services(); + for (auto& service : services) { + std::string service_uuid = service.uuid(); + + // Device Information Service + if (service_uuid.find("180a") != std::string::npos || + service_uuid.find("180A") != std::string::npos) { + + auto characteristics = service.characteristics(); + for (auto& characteristic : characteristics) { + std::string char_uuid = characteristic.uuid(); + + try { + if (characteristic.can_read()) { + SimpleBLE::ByteArray data = peripheral.read( + SimpleBLE::BluetoothUUID(service.uuid()), + SimpleBLE::BluetoothUUID(characteristic.uuid()) + ); + + std::string value(data.begin(), data.end()); + + // Manufacturer Name (0x2A29) + if (char_uuid.find("2a29") != std::string::npos || + char_uuid.find("2A29") != std::string::npos) { + manufacturer_name = value; + std::cout << "[INFO EXTRACT] Manufacturer: " << value << std::endl; + } + // Model Number (0x2A24) + else if (char_uuid.find("2a24") != std::string::npos || + char_uuid.find("2A24") != std::string::npos) { + model_number = value; + std::cout << "[INFO EXTRACT] Model: " << value << std::endl; + } + // Firmware Version (0x2A26) + else if (char_uuid.find("2a26") != std::string::npos || + char_uuid.find("2A26") != std::string::npos) { + firmware_version = value; + std::cout << "[INFO EXTRACT] Firmware: " << value << std::endl; + } + // Hardware Version (0x2A27) + else if (char_uuid.find("2a27") != std::string::npos || + char_uuid.find("2A27") != std::string::npos) { + hardware_version = value; + std::cout << "[INFO EXTRACT] Hardware: " << value << std::endl; + } + // Serial Number (0x2A25) + else if (char_uuid.find("2a25") != std::string::npos || + char_uuid.find("2A25") != std::string::npos) { + serial_number = value; + std::cout << "[INFO EXTRACT] Serial: " << value << std::endl; + } + } + } catch (...) { + // Some characteristics may require pairing/encryption + } + } + } + } + + // Store tracking data + { + std::lock_guard lock(db_mutex); + const char* upsert_sql = R"( + INSERT INTO device_tracking_data + (device_address, manufacturer_name, device_model, firmware_version, hardware_version, serial_number, last_updated) + VALUES (?, ?, ?, ?, ?, ?, datetime('now')) + ON CONFLICT(device_address) + DO UPDATE SET + manufacturer_name = COALESCE(excluded.manufacturer_name, manufacturer_name), + device_model = COALESCE(excluded.device_model, device_model), + firmware_version = COALESCE(excluded.firmware_version, firmware_version), + hardware_version = COALESCE(excluded.hardware_version, hardware_version), + serial_number = COALESCE(excluded.serial_number, serial_number), + last_updated = datetime('now'); + )"; + + sqlite3_stmt* stmt; + if (sqlite3_prepare_v2(db, upsert_sql, -1, &stmt, nullptr) == SQLITE_OK) { + sqlite3_bind_text(stmt, 1, address.c_str(), -1, SQLITE_TRANSIENT); + sqlite3_bind_text(stmt, 2, manufacturer_name.empty() ? nullptr : manufacturer_name.c_str(), -1, SQLITE_TRANSIENT); + sqlite3_bind_text(stmt, 3, model_number.empty() ? nullptr : model_number.c_str(), -1, SQLITE_TRANSIENT); + sqlite3_bind_text(stmt, 4, firmware_version.empty() ? nullptr : firmware_version.c_str(), -1, SQLITE_TRANSIENT); + sqlite3_bind_text(stmt, 5, hardware_version.empty() ? nullptr : hardware_version.c_str(), -1, SQLITE_TRANSIENT); + sqlite3_bind_text(stmt, 6, serial_number.empty() ? nullptr : serial_number.c_str(), -1, SQLITE_TRANSIENT); + sqlite3_step(stmt); + sqlite3_finalize(stmt); + } + } + + } catch (const std::exception& e) { + std::cerr << "[INFO EXTRACT] Error: " << e.what() << std::endl; + } + + } catch (const std::exception& e) { + std::cerr << "Error assessing security for " << address << ": " << e.what() << std::endl; + } + + std::this_thread::sleep_for(std::chrono::seconds(1)); + peripheral.disconnect(); + std::cout << "[" << get_timestamp() << "] Disconnected from " << address << std::endl; + } + } catch (const std::exception& e) { + std::cerr << "Error connecting to " << address << ": " << e.what() << std::endl; + } +} + +// Get current timestamp in ISO 8601 format +std::string get_timestamp() { + auto now = std::chrono::system_clock::now(); + auto time_t_now = std::chrono::system_clock::to_time_t(now); + auto ms = std::chrono::duration_cast( + now.time_since_epoch()) % 1000; + + std::stringstream ss; + ss << std::put_time(std::localtime(&time_t_now), "%Y-%m-%d %H:%M:%S"); + ss << '.' << std::setfill('0') << std::setw(3) << ms.count(); + return ss.str(); +} + +// Initialize SQLite database +bool init_database(sqlite3** db) { + int rc = sqlite3_open(config.db_path.c_str(), db); + if (rc != SQLITE_OK) { + std::cerr << "Cannot open database: " << sqlite3_errmsg(*db) << std::endl; + return false; + } + + const char* create_table_sql = R"( + CREATE TABLE IF NOT EXISTS ble_scans ( + id INTEGER PRIMARY KEY AUTOINCREMENT, + timestamp DATETIME DEFAULT CURRENT_TIMESTAMP, + device_address TEXT NOT NULL, + device_name TEXT, + rssi INTEGER, + manufacturer_data TEXT, + scan_date DATE, + scan_time TIME, + scan_hour INTEGER, + scan_minute INTEGER, + address_type TEXT, + tx_power INTEGER, + mtu INTEGER, + is_connectable BOOLEAN, + service_uuids TEXT, + company_id INTEGER, + company_name TEXT, + estimated_distance REAL, + protocol_type TEXT DEFAULT 'BLE', + device_class_major TEXT, + device_class_minor TEXT, + device_class_cod INTEGER, + sdp_services TEXT + ); + + CREATE INDEX IF NOT EXISTS idx_timestamp ON ble_scans(timestamp); + CREATE INDEX IF NOT EXISTS idx_scan_date ON ble_scans(scan_date); + CREATE INDEX IF NOT EXISTS idx_scan_time ON ble_scans(scan_time); + CREATE INDEX IF NOT EXISTS idx_device_address ON ble_scans(device_address); + CREATE INDEX IF NOT EXISTS idx_scan_hour ON ble_scans(scan_hour); + CREATE INDEX IF NOT EXISTS idx_company_name ON ble_scans(company_name); + + CREATE TABLE IF NOT EXISTS device_distance_history ( + id INTEGER PRIMARY KEY AUTOINCREMENT, + timestamp DATETIME DEFAULT CURRENT_TIMESTAMP, + device_address TEXT NOT NULL, + device_name TEXT, + rssi INTEGER, + tx_power INTEGER, + estimated_distance REAL, + scan_date DATE, + scan_hour INTEGER + ); + + CREATE INDEX IF NOT EXISTS idx_distance_timestamp ON device_distance_history(timestamp); + CREATE INDEX IF NOT EXISTS idx_distance_device ON device_distance_history(device_address); + CREATE INDEX IF NOT EXISTS idx_distance_date ON device_distance_history(scan_date); + + CREATE TABLE IF NOT EXISTS device_characteristics ( + id INTEGER PRIMARY KEY AUTOINCREMENT, + discovered_at DATETIME DEFAULT CURRENT_TIMESTAMP, + device_address TEXT NOT NULL, + device_name TEXT, + service_uuid TEXT, + characteristic_uuid TEXT, + properties TEXT, + UNIQUE(device_address, service_uuid, characteristic_uuid) + ); + + CREATE INDEX IF NOT EXISTS idx_char_device ON device_characteristics(device_address); + + CREATE TABLE IF NOT EXISTS device_nicknames ( + device_address TEXT PRIMARY KEY, + nickname TEXT NOT NULL, + created_at DATETIME DEFAULT CURRENT_TIMESTAMP, + updated_at DATETIME DEFAULT CURRENT_TIMESTAMP + ); + + CREATE TABLE IF NOT EXISTS security_assessments ( + device_address TEXT PRIMARY KEY, + risk_level TEXT NOT NULL, + vulnerabilities TEXT, + recommendations TEXT, + last_assessed DATETIME DEFAULT CURRENT_TIMESTAMP + ); + + CREATE INDEX IF NOT EXISTS idx_security_risk ON security_assessments(risk_level); + + CREATE TABLE IF NOT EXISTS device_tracking_data ( + device_address TEXT PRIMARY KEY, + device_type TEXT, + device_model TEXT, + manufacturer_name TEXT, + firmware_version TEXT, + hardware_version TEXT, + serial_number TEXT, + apple_continuity_data TEXT, + pairing_status TEXT, + last_seen_location TEXT, + tracking_identifiers TEXT, + additional_info TEXT, + last_updated DATETIME DEFAULT CURRENT_TIMESTAMP + ); + + CREATE INDEX IF NOT EXISTS idx_tracking_device ON device_tracking_data(device_address); + )"; + + char* err_msg = nullptr; + rc = sqlite3_exec(*db, create_table_sql, nullptr, nullptr, &err_msg); + if (rc != SQLITE_OK) { + std::cerr << "SQL error: " << err_msg << std::endl; + sqlite3_free(err_msg); + return false; + } + + std::cout << "Database initialized: " << config.db_path << std::endl; + return true; +} + +// Log BLE scan result to database with enhanced fields +bool log_scan_result(sqlite3* db, SimpleBLE::Peripheral& peripheral) { + std::lock_guard lock(db_mutex); + + auto now = std::chrono::system_clock::now(); + auto time_t_now = std::chrono::system_clock::to_time_t(now); + auto tm_now = std::localtime(&time_t_now); + + std::string address = peripheral.address(); + std::string name = peripheral.identifier(); + int rssi = peripheral.rssi(); + int16_t tx_power = peripheral.tx_power(); + uint16_t mtu = peripheral.mtu(); + bool is_connectable = peripheral.is_connectable(); + std::string address_type = get_address_type_string(peripheral.address_type()); + + // Extract manufacturer data + std::string manufacturer_data = ""; + uint16_t company_id = 0; + std::string company_name = ""; + auto mfg_data = peripheral.manufacturer_data(); + if (!mfg_data.empty()) { + std::stringstream ss; + for (const auto& pair : mfg_data) { + company_id = pair.first; // Use the first company ID found + company_name = get_company_name(company_id); + ss << std::hex << std::setfill('0') << std::setw(4) << pair.first << ":"; + for (uint8_t byte : pair.second) { + ss << std::hex << std::setfill('0') << std::setw(2) << (int)byte; + } + ss << ";"; + } + manufacturer_data = ss.str(); + } + + // Get service UUIDs + std::string service_uuids = ""; + auto services = peripheral.services(); + if (!services.empty()) { + std::stringstream ss; + for (size_t i = 0; i < services.size(); i++) { + ss << services[i].uuid(); + if (i < services.size() - 1) ss << ","; + } + service_uuids = ss.str(); + } + + // Calculate estimated distance + double estimated_distance = calculate_distance(tx_power, rssi); + + const char* insert_sql = R"( + INSERT INTO ble_scans + (device_address, device_name, rssi, manufacturer_data, scan_date, scan_time, scan_hour, scan_minute, + address_type, tx_power, mtu, is_connectable, service_uuids, company_id, company_name, estimated_distance) + VALUES (?, ?, ?, ?, date('now', 'localtime'), time('now', 'localtime'), ?, ?, + ?, ?, ?, ?, ?, ?, ?, ?); + )"; + + sqlite3_stmt* stmt; + int rc = sqlite3_prepare_v2(db, insert_sql, -1, &stmt, nullptr); + if (rc != SQLITE_OK) { + std::cerr << "Failed to prepare statement: " << sqlite3_errmsg(db) << std::endl; + return false; + } + + sqlite3_bind_text(stmt, 1, address.c_str(), -1, SQLITE_TRANSIENT); + sqlite3_bind_text(stmt, 2, name.c_str(), -1, SQLITE_TRANSIENT); + sqlite3_bind_int(stmt, 3, rssi); + sqlite3_bind_text(stmt, 4, manufacturer_data.c_str(), -1, SQLITE_TRANSIENT); + sqlite3_bind_int(stmt, 5, tm_now->tm_hour); + sqlite3_bind_int(stmt, 6, tm_now->tm_min); + sqlite3_bind_text(stmt, 7, address_type.c_str(), -1, SQLITE_TRANSIENT); + sqlite3_bind_int(stmt, 8, tx_power); + sqlite3_bind_int(stmt, 9, mtu); + sqlite3_bind_int(stmt, 10, is_connectable ? 1 : 0); + sqlite3_bind_text(stmt, 11, service_uuids.c_str(), -1, SQLITE_TRANSIENT); + sqlite3_bind_int(stmt, 12, company_id); + sqlite3_bind_text(stmt, 13, company_name.c_str(), -1, SQLITE_TRANSIENT); + if (estimated_distance >= 0) { + sqlite3_bind_double(stmt, 14, estimated_distance); + } else { + sqlite3_bind_null(stmt, 14); + } + + rc = sqlite3_step(stmt); + sqlite3_finalize(stmt); + + if (rc != SQLITE_DONE) { + std::cerr << "Failed to insert data: " << sqlite3_errmsg(db) << std::endl; + return false; + } + + // Also log to distance history if distance is available + if (estimated_distance >= 0) { + const char* distance_sql = R"( + INSERT INTO device_distance_history + (device_address, device_name, rssi, tx_power, estimated_distance, scan_date, scan_hour) + VALUES (?, ?, ?, ?, ?, date('now', 'localtime'), ?); + )"; + + sqlite3_stmt* dist_stmt; + rc = sqlite3_prepare_v2(db, distance_sql, -1, &dist_stmt, nullptr); + if (rc == SQLITE_OK) { + sqlite3_bind_text(dist_stmt, 1, address.c_str(), -1, SQLITE_TRANSIENT); + sqlite3_bind_text(dist_stmt, 2, name.c_str(), -1, SQLITE_TRANSIENT); + sqlite3_bind_int(dist_stmt, 3, rssi); + sqlite3_bind_int(dist_stmt, 4, tx_power); + sqlite3_bind_double(dist_stmt, 5, estimated_distance); + sqlite3_bind_int(dist_stmt, 6, tm_now->tm_hour); + sqlite3_step(dist_stmt); + sqlite3_finalize(dist_stmt); + } + } + + return true; +} + +// Log Classic Bluetooth device to database +bool log_classic_device(sqlite3* db, const ClassicBluetooth::ClassicDevice& device) { + std::lock_guard lock(db_mutex); + + auto now = std::chrono::system_clock::now(); + auto time_t_now = std::chrono::system_clock::to_time_t(now); + auto tm_now = std::localtime(&time_t_now); + + // Serialize SDP services to JSON + std::stringstream sdp_json; + sdp_json << "["; + for (size_t i = 0; i < device.services.size(); i++) { + sdp_json << "{\"uuid\":\"" << device.services[i].uuid << "\"," + << "\"name\":\"" << device.services[i].name << "\"," + << "\"rfcomm_channel\":" << (int)device.services[i].rfcomm_channel << "}"; + if (i < device.services.size() - 1) sdp_json << ","; + } + sdp_json << "]"; + + const char* insert_sql = R"( + INSERT INTO ble_scans + (device_address, device_name, rssi, scan_date, scan_time, scan_hour, scan_minute, + is_connectable, company_name, protocol_type, device_class_major, device_class_minor, + device_class_cod, sdp_services) + VALUES (?, ?, ?, date('now', 'localtime'), time('now', 'localtime'), ?, ?, + ?, ?, 'CLASSIC', ?, ?, ?, ?); + )"; + + sqlite3_stmt* stmt; + int rc = sqlite3_prepare_v2(db, insert_sql, -1, &stmt, nullptr); + if (rc != SQLITE_OK) { + std::cerr << "Failed to prepare statement: " << sqlite3_errmsg(db) << std::endl; + return false; + } + + sqlite3_bind_text(stmt, 1, device.address.c_str(), -1, SQLITE_TRANSIENT); + sqlite3_bind_text(stmt, 2, device.name.c_str(), -1, SQLITE_TRANSIENT); + sqlite3_bind_int(stmt, 3, device.rssi); + sqlite3_bind_int(stmt, 4, tm_now->tm_hour); + sqlite3_bind_int(stmt, 5, tm_now->tm_min); + sqlite3_bind_int(stmt, 6, device.is_connected ? 1 : 0); + sqlite3_bind_text(stmt, 7, "Classic Bluetooth", -1, SQLITE_TRANSIENT); + sqlite3_bind_text(stmt, 8, device.device_class.major_class.c_str(), -1, SQLITE_TRANSIENT); + sqlite3_bind_text(stmt, 9, device.device_class.minor_class.c_str(), -1, SQLITE_TRANSIENT); + sqlite3_bind_int(stmt, 10, device.device_class.class_of_device); + sqlite3_bind_text(stmt, 11, sdp_json.str().c_str(), -1, SQLITE_TRANSIENT); + + rc = sqlite3_step(stmt); + sqlite3_finalize(stmt); + + if (rc != SQLITE_DONE) { + std::cerr << "Failed to insert Classic device: " << sqlite3_errmsg(db) << std::endl; + return false; + } + + return true; +} + +// Perform BLE scan +void perform_scan(sqlite3* db) { + auto adapters = SimpleBLE::Adapter::get_adapters(); + + if (adapters.empty()) { + std::cerr << "No Bluetooth adapters found" << std::endl; + return; + } + + auto adapter = adapters[0]; + std::cout << "Using adapter: " << adapter.identifier() << " [" << adapter.address() << "]" << std::endl; + + adapter.set_callback_on_scan_found([&](SimpleBLE::Peripheral peripheral) { + std::string address = peripheral.address(); + std::string name = peripheral.identifier(); + int rssi = peripheral.rssi(); + int16_t tx_power = peripheral.tx_power(); + double distance = calculate_distance(tx_power, rssi); + bool is_connectable = peripheral.is_connectable(); + + std::cout << "[" << get_timestamp() << "] Found: " << address + << " | Name: " << (name.empty() ? "" : name) + << " | RSSI: " << rssi << " dBm"; + + if (distance >= 0) { + std::cout << " | Distance: ~" << std::fixed << std::setprecision(1) << distance << "m"; + } + + // Extract company name and decode Apple data + std::string company_name = "Unknown"; + AppleContinuityData apple_data; + auto mfg_data = peripheral.manufacturer_data(); + if (!mfg_data.empty()) { + for (const auto& pair : mfg_data) { + company_name = get_company_name(pair.first); + std::cout << " | " << company_name; + + // If Apple device, decode continuity data + if (pair.first == 0x004C) { // Apple company ID + apple_data = decode_apple_continuity(pair.second); + + // Log decoded Apple data + if (!apple_data.device_type.empty()) { + std::cout << " [" << apple_data.device_type << "]"; + } + if (apple_data.battery_level >= 0) { + std::cout << " [Battery: " << apple_data.battery_level << "%]"; + } + if (!apple_data.airpods_left_battery.empty()) { + std::cout << " [L:" << apple_data.airpods_left_battery + << " R:" << apple_data.airpods_right_battery + << " Case:" << apple_data.airpods_case_battery << "]"; + } + + // Store Apple continuity data + try { + std::lock_guard lock(db_mutex); + std::stringstream apple_json; + apple_json << "{" + << "\"device_type\":\"" << apple_data.device_type << "\"," + << "\"battery\":" << apple_data.battery_level << "," + << "\"airpods_left\":\"" << apple_data.airpods_left_battery << "\"," + << "\"airpods_right\":\"" << apple_data.airpods_right_battery << "\"," + << "\"airpods_case\":\"" << apple_data.airpods_case_battery << "\"," + << "\"in_ear\":" << (apple_data.airpods_in_ear ? "true" : "false") << "," + << "\"case_open\":" << (apple_data.airpods_case_lid_open ? "true" : "false") << "," + << "\"handoff\":\"" << apple_data.handoff_data << "\"," + << "\"raw\":\"" << apple_data.raw_data << "\"" + << "}"; + + const char* upsert_sql = R"( + INSERT INTO device_tracking_data (device_address, device_type, apple_continuity_data, last_updated) + VALUES (?, ?, ?, datetime('now')) + ON CONFLICT(device_address) + DO UPDATE SET apple_continuity_data = excluded.apple_continuity_data, last_updated = datetime('now'); + )"; + + sqlite3_stmt* stmt; + if (sqlite3_prepare_v2(db, upsert_sql, -1, &stmt, nullptr) == SQLITE_OK) { + sqlite3_bind_text(stmt, 1, address.c_str(), -1, SQLITE_TRANSIENT); + sqlite3_bind_text(stmt, 2, apple_data.device_type.c_str(), -1, SQLITE_TRANSIENT); + sqlite3_bind_text(stmt, 3, apple_json.str().c_str(), -1, SQLITE_TRANSIENT); + sqlite3_step(stmt); + sqlite3_finalize(stmt); + } + } catch (...) {} + } + break; // Show first company only + } + } + + if (is_connectable) { + std::cout << " | Connectable"; + } + + std::cout << std::endl; + + log_scan_result(db, peripheral); + + // Perform PASSIVE security assessment immediately (no connection needed) + try { + SecurityAssessment passive_assessment = assess_device_passive( + address, + peripheral.identifier(), + company_name, + is_connectable, + "" // manufacturer_data - could extract from peripheral if available + ); + + // Store passive assessment + store_security_assessment(db, passive_assessment); + std::cout << "[PASSIVE SCAN] " << address << " - Risk: " << passive_assessment.risk_level; + if (!passive_assessment.vulnerabilities.empty()) { + std::cout << " (" << passive_assessment.vulnerabilities.size() << " issues)"; + } + std::cout << std::endl; + } catch (const std::exception& e) { + std::cerr << "Error in passive assessment: " << e.what() << std::endl; + } + + // Optionally connect to connectable devices we haven't enumerated yet + if (is_connectable) { + std::lock_guard lock(enumerated_mutex); + if (enumerated_devices.find(address) == enumerated_devices.end()) { + enumerated_devices.insert(address); + + // Launch connection in background thread + std::thread([db, peripheral]() mutable { + connect_and_enumerate(db, peripheral); + }).detach(); + } + } + }); + + // Initialize Classic Bluetooth scanner + ClassicBluetooth::Scanner classic_scanner; + classic_scanner.set_device_found_callback([db](const ClassicBluetooth::ClassicDevice& device) { + std::cout << "[" << get_timestamp() << "] Classic BT Found: " << device.address + << " | Name: " << device.name + << " | RSSI: " << device.rssi << " dBm" + << " | Class: " << device.device_class.major_class + << " (" << device.device_class.minor_class << ")" + << " | Services: " << device.services.size() + << std::endl; + + // Perform security assessment + SecurityAssessment assessment = assess_classic_device(device); + if (!assessment.vulnerabilities.empty()) { + std::cout << "[CLASSIC SECURITY] " << device.address + << " - Risk: " << assessment.risk_level + << " (" << assessment.vulnerabilities.size() << " vulnerabilities)" + << std::endl; + store_security_assessment(db, assessment); + } + + // Log to database + log_classic_device(db, device); + }); + + int scan_cycle = 0; + while (running) { + try { + // BLE scan every cycle + std::cout << "\n[" << get_timestamp() << "] Starting BLE scan..." << std::endl; + adapter.scan_for(config.scan_duration_ms); + std::cout << "[" << get_timestamp() << "] BLE scan complete." << std::endl; + + // Classic Bluetooth inquiry every 3 cycles (less frequent due to longer duration) + if (scan_cycle % 3 == 0) { + std::cout << "[" << get_timestamp() << "] Starting Classic Bluetooth inquiry..." << std::endl; + classic_scanner.start_inquiry(10); // 10 second inquiry + + // Wait for inquiry to complete + std::this_thread::sleep_for(std::chrono::seconds(11)); + std::cout << "[" << get_timestamp() << "] Classic Bluetooth inquiry complete." << std::endl; + } + + scan_cycle++; + std::cout << "[" << get_timestamp() << "] Scan cycle " << scan_cycle << " complete. Waiting..." << std::endl; + std::this_thread::sleep_for(std::chrono::milliseconds(config.scan_interval_ms)); + } catch (const std::exception& e) { + std::cerr << "Scan error: " << e.what() << std::endl; + std::this_thread::sleep_for(std::chrono::seconds(5)); + } + } +} + +// HTTP API handlers +void setup_http_server(httplib::Server& server, sqlite3* db) { + // Add CORS headers to all responses + server.set_post_routing_handler([](const httplib::Request&, httplib::Response& res) { + res.set_header("Access-Control-Allow-Origin", "*"); + res.set_header("Access-Control-Allow-Methods", "GET, POST, DELETE, OPTIONS"); + res.set_header("Access-Control-Allow-Headers", "Content-Type"); + }); + + // Handle preflight OPTIONS requests for CORS + server.Options(R"(/.*)", [](const httplib::Request&, httplib::Response& res) { + res.status = 204; + }); + + // Health check endpoint + server.Get("/health", [](const httplib::Request&, httplib::Response& res) { + res.set_content("{\"status\":\"ok\"}", "application/json"); + }); + + // Get recent scans + server.Get("/scans/recent", [db](const httplib::Request& req, httplib::Response& res) { + int limit = 100; + if (req.has_param("limit")) { + limit = std::stoi(req.get_param_value("limit")); + } + + std::lock_guard lock(db_mutex); + + std::string query = "SELECT timestamp, device_address, device_name, rssi, address_type, " + "tx_power, mtu, is_connectable, service_uuids, company_name, estimated_distance, " + "protocol_type, device_class_major, device_class_minor, sdp_services " + "FROM ble_scans ORDER BY timestamp DESC LIMIT ?;"; + + sqlite3_stmt* stmt; + if (sqlite3_prepare_v2(db, query.c_str(), -1, &stmt, nullptr) != SQLITE_OK) { + res.status = 500; + res.set_content("{\"error\":\"Database error\"}", "application/json"); + return; + } + + sqlite3_bind_int(stmt, 1, limit); + + std::stringstream json; + json << "{\"scans\":["; + bool first = true; + + while (sqlite3_step(stmt) == SQLITE_ROW) { + if (!first) json << ","; + first = false; + + json << "{\"timestamp\":\"" << sqlite3_column_text(stmt, 0) << "\"," + << "\"address\":\"" << sqlite3_column_text(stmt, 1) << "\"," + << "\"name\":\"" << (sqlite3_column_text(stmt, 2) ? (const char*)sqlite3_column_text(stmt, 2) : "") << "\"," + << "\"rssi\":" << sqlite3_column_int(stmt, 3) << "," + << "\"address_type\":\"" << (sqlite3_column_text(stmt, 4) ? (const char*)sqlite3_column_text(stmt, 4) : "") << "\"," + << "\"tx_power\":" << sqlite3_column_int(stmt, 5) << "," + << "\"mtu\":" << sqlite3_column_int(stmt, 6) << "," + << "\"is_connectable\":" << (sqlite3_column_int(stmt, 7) ? "true" : "false") << "," + << "\"service_uuids\":\"" << (sqlite3_column_text(stmt, 8) ? (const char*)sqlite3_column_text(stmt, 8) : "") << "\"," + << "\"company_name\":\"" << (sqlite3_column_text(stmt, 9) ? (const char*)sqlite3_column_text(stmt, 9) : "") << "\""; + + if (sqlite3_column_type(stmt, 10) != SQLITE_NULL) { + json << ",\"distance\":" << std::fixed << std::setprecision(1) << sqlite3_column_double(stmt, 10); + } + + json << ",\"protocol_type\":\"" << (sqlite3_column_text(stmt, 11) ? (const char*)sqlite3_column_text(stmt, 11) : "BLE") << "\""; + + if (sqlite3_column_type(stmt, 12) != SQLITE_NULL) { + json << ",\"device_class_major\":\"" << sqlite3_column_text(stmt, 12) << "\""; + } + if (sqlite3_column_type(stmt, 13) != SQLITE_NULL) { + json << ",\"device_class_minor\":\"" << sqlite3_column_text(stmt, 13) << "\""; + } + if (sqlite3_column_type(stmt, 14) != SQLITE_NULL) { + json << ",\"sdp_services\":" << sqlite3_column_text(stmt, 14); + } + + json << "}"; + } + + json << "]}"; + sqlite3_finalize(stmt); + + res.set_content(json.str(), "application/json"); + }); + + // Query by date + server.Get("/scans/date/:date", [db](const httplib::Request& req, httplib::Response& res) { + std::string date = req.path_params.at("date"); + + std::lock_guard lock(db_mutex); + + std::string query = "SELECT timestamp, device_address, device_name, rssi FROM ble_scans " + "WHERE scan_date = ? ORDER BY timestamp;"; + + sqlite3_stmt* stmt; + if (sqlite3_prepare_v2(db, query.c_str(), -1, &stmt, nullptr) != SQLITE_OK) { + res.status = 500; + res.set_content("{\"error\":\"Database error\"}", "application/json"); + return; + } + + sqlite3_bind_text(stmt, 1, date.c_str(), -1, SQLITE_TRANSIENT); + + std::stringstream json; + json << "{\"date\":\"" << date << "\",\"scans\":["; + bool first = true; + + while (sqlite3_step(stmt) == SQLITE_ROW) { + if (!first) json << ","; + first = false; + + json << "{\"timestamp\":\"" << sqlite3_column_text(stmt, 0) << "\"," + << "\"address\":\"" << sqlite3_column_text(stmt, 1) << "\"," + << "\"name\":\"" << sqlite3_column_text(stmt, 2) << "\"," + << "\"rssi\":" << sqlite3_column_int(stmt, 3) << "}"; + } + + json << "]}"; + sqlite3_finalize(stmt); + + res.set_content(json.str(), "application/json"); + }); + + // Query by hour range + server.Get("/scans/hour/:hour", [db](const httplib::Request& req, httplib::Response& res) { + int hour = std::stoi(req.path_params.at("hour")); + + std::lock_guard lock(db_mutex); + + std::string query = "SELECT timestamp, device_address, device_name, rssi FROM ble_scans " + "WHERE scan_hour = ? ORDER BY timestamp DESC LIMIT 1000;"; + + sqlite3_stmt* stmt; + if (sqlite3_prepare_v2(db, query.c_str(), -1, &stmt, nullptr) != SQLITE_OK) { + res.status = 500; + res.set_content("{\"error\":\"Database error\"}", "application/json"); + return; + } + + sqlite3_bind_int(stmt, 1, hour); + + std::stringstream json; + json << "{\"hour\":" << hour << ",\"scans\":["; + bool first = true; + + while (sqlite3_step(stmt) == SQLITE_ROW) { + if (!first) json << ","; + first = false; + + json << "{\"timestamp\":\"" << sqlite3_column_text(stmt, 0) << "\"," + << "\"address\":\"" << sqlite3_column_text(stmt, 1) << "\"," + << "\"name\":\"" << sqlite3_column_text(stmt, 2) << "\"," + << "\"rssi\":" << sqlite3_column_int(stmt, 3) << "}"; + } + + json << "]}"; + sqlite3_finalize(stmt); + + res.set_content(json.str(), "application/json"); + }); + + // Statistics endpoint + server.Get("/stats", [db](const httplib::Request&, httplib::Response& res) { + std::lock_guard lock(db_mutex); + + std::string query = "SELECT COUNT(*) as total, " + "COUNT(DISTINCT device_address) as unique_devices, " + "MIN(timestamp) as first_scan, " + "MAX(timestamp) as last_scan FROM ble_scans;"; + + sqlite3_stmt* stmt; + if (sqlite3_prepare_v2(db, query.c_str(), -1, &stmt, nullptr) != SQLITE_OK) { + res.status = 500; + res.set_content("{\"error\":\"Database error\"}", "application/json"); + return; + } + + std::stringstream json; + if (sqlite3_step(stmt) == SQLITE_ROW) { + json << "{\"total_scans\":" << sqlite3_column_int(stmt, 0) << "," + << "\"unique_devices\":" << sqlite3_column_int(stmt, 1) << "," + << "\"first_scan\":\"" << sqlite3_column_text(stmt, 2) << "\"," + << "\"last_scan\":\"" << sqlite3_column_text(stmt, 3) << "\"}"; + } + + sqlite3_finalize(stmt); + res.set_content(json.str(), "application/json"); + }); + + // Get device scan count + server.Get("/device/:address/count", [db](const httplib::Request& req, httplib::Response& res) { + std::string address = req.path_params.at("address"); + std::lock_guard lock(db_mutex); + + std::string query = "SELECT COUNT(*) as count FROM ble_scans WHERE device_address = ?;"; + sqlite3_stmt* stmt; + + if (sqlite3_prepare_v2(db, query.c_str(), -1, &stmt, nullptr) != SQLITE_OK) { + res.status = 500; + res.set_content("{\"error\":\"Database error\"}", "application/json"); + return; + } + + sqlite3_bind_text(stmt, 1, address.c_str(), -1, SQLITE_TRANSIENT); + + std::stringstream json; + if (sqlite3_step(stmt) == SQLITE_ROW) { + json << "{\"address\":\"" << address << "\"," + << "\"count\":" << sqlite3_column_int(stmt, 0) << "}"; + } else { + json << "{\"address\":\"" << address << "\",\"count\":0}"; + } + + sqlite3_finalize(stmt); + res.set_content(json.str(), "application/json"); + }); + + // Get distance history for a device + server.Get("/distance/:address", [db](const httplib::Request& req, httplib::Response& res) { + std::string address = req.path_params.at("address"); + int limit = req.has_param("limit") ? std::stoi(req.get_param_value("limit")) : 100; + + std::lock_guard lock(db_mutex); + + std::string query = "SELECT timestamp, rssi, tx_power, estimated_distance FROM device_distance_history " + "WHERE device_address = ? ORDER BY timestamp DESC LIMIT ?;"; + + sqlite3_stmt* stmt; + if (sqlite3_prepare_v2(db, query.c_str(), -1, &stmt, nullptr) != SQLITE_OK) { + res.status = 500; + res.set_content("{\"error\":\"Database error\"}", "application/json"); + return; + } + + sqlite3_bind_text(stmt, 1, address.c_str(), -1, SQLITE_TRANSIENT); + sqlite3_bind_int(stmt, 2, limit); + + std::stringstream json; + json << "{\"address\":\"" << address << "\",\"history\":["; + bool first = true; + + while (sqlite3_step(stmt) == SQLITE_ROW) { + if (!first) json << ","; + first = false; + + json << "{\"timestamp\":\"" << sqlite3_column_text(stmt, 0) << "\"," + << "\"rssi\":" << sqlite3_column_int(stmt, 1) << "," + << "\"tx_power\":" << sqlite3_column_int(stmt, 2) << "," + << "\"distance\":" << std::fixed << std::setprecision(1) << sqlite3_column_double(stmt, 3) << "}"; + } + + json << "]}"; + sqlite3_finalize(stmt); + res.set_content(json.str(), "application/json"); + }); + + // Get characteristics for a device + server.Get("/characteristics/:address", [db](const httplib::Request& req, httplib::Response& res) { + std::string address = req.path_params.at("address"); + + std::lock_guard lock(db_mutex); + + std::string query = "SELECT service_uuid, characteristic_uuid, properties, discovered_at " + "FROM device_characteristics WHERE device_address = ? ORDER BY discovered_at DESC;"; + + sqlite3_stmt* stmt; + if (sqlite3_prepare_v2(db, query.c_str(), -1, &stmt, nullptr) != SQLITE_OK) { + res.status = 500; + res.set_content("{\"error\":\"Database error\"}", "application/json"); + return; + } + + sqlite3_bind_text(stmt, 1, address.c_str(), -1, SQLITE_TRANSIENT); + + std::stringstream json; + json << "{\"address\":\"" << address << "\",\"characteristics\":["; + bool first = true; + + while (sqlite3_step(stmt) == SQLITE_ROW) { + if (!first) json << ","; + first = false; + + std::string service_uuid = reinterpret_cast(sqlite3_column_text(stmt, 0)); + std::string char_uuid = reinterpret_cast(sqlite3_column_text(stmt, 1)); + std::string properties = reinterpret_cast(sqlite3_column_text(stmt, 2)); + + std::string service_name = decode_service_uuid(service_uuid); + std::string char_name = decode_characteristic_uuid(char_uuid); + std::string char_desc = get_characteristic_description(char_uuid); + + json << "{\"service\":\"" << service_uuid << "\"," + << "\"service_name\":\"" << service_name << "\"," + << "\"characteristic\":\"" << char_uuid << "\"," + << "\"characteristic_name\":\"" << char_name << "\"," + << "\"description\":\"" << char_desc << "\"," + << "\"properties\":\"" << properties << "\"," + << "\"discovered_at\":\"" << sqlite3_column_text(stmt, 3) << "\"}"; + } + + json << "]}"; + sqlite3_finalize(stmt); + res.set_content(json.str(), "application/json"); + }); + + // Read characteristic value + server.Get("/read/:address/:service/:characteristic", [](const httplib::Request& req, httplib::Response& res) { + std::string address = req.path_params.at("address"); + std::string service_uuid = req.path_params.at("service"); + std::string char_uuid = req.path_params.at("characteristic"); + + try { + auto adapters = SimpleBLE::Adapter::get_adapters(); + if (adapters.empty()) { + res.status = 500; + res.set_content("{\"error\":\"No Bluetooth adapters found\"}", "application/json"); + return; + } + + auto adapter = adapters[0]; + auto peripherals = adapter.scan_get_results(); + + SimpleBLE::Peripheral target_peripheral; + bool found = false; + + for (auto& peripheral : peripherals) { + if (peripheral.identifier() == address || peripheral.address() == address) { + target_peripheral = peripheral; + found = true; + break; + } + } + + if (!found) { + res.status = 404; + res.set_content("{\"error\":\"Device not found or not in range\"}", "application/json"); + return; + } + + if (!target_peripheral.is_connected()) { + std::cout << "[READ] Connecting to " << address << "..." << std::endl; + target_peripheral.connect(); + std::this_thread::sleep_for(std::chrono::milliseconds(1000)); + } + + SimpleBLE::BluetoothUUID service(service_uuid); + SimpleBLE::BluetoothUUID characteristic(char_uuid); + + SimpleBLE::ByteArray data = target_peripheral.read(service, characteristic); + + // Disconnect after reading + if (target_peripheral.is_connected()) { + target_peripheral.disconnect(); + } + + // Convert byte array to hex string and interpret based on characteristic type + std::stringstream json; + json << "{\"address\":\"" << address << "\"," + << "\"service\":\"" << service_uuid << "\"," + << "\"characteristic\":\"" << char_uuid << "\"," + << "\"raw\":\""; + + for (uint8_t byte : data) { + json << std::hex << std::setw(2) << std::setfill('0') << (int)byte; + } + json << "\","; + + // Decode specific known characteristics + std::string upper_char = char_uuid; + std::transform(upper_char.begin(), upper_char.end(), upper_char.begin(), ::toupper); + + if (upper_char.find("2A19") != std::string::npos && data.size() >= 1) { + // Battery Level (0-100%) + json << "\"value\":" << (int)data[0] << "," + << "\"unit\":\"%\",\"type\":\"battery\""; + } else if (upper_char.find("2A00") != std::string::npos || + upper_char.find("2A29") != std::string::npos || + upper_char.find("2A24") != std::string::npos || + upper_char.find("2A26") != std::string::npos) { + // String characteristics (Device Name, Manufacturer, Model, Firmware) + std::string text(data.begin(), data.end()); + json << "\"value\":\"" << text << "\",\"type\":\"string\""; + } else if (upper_char.find("2A6E") != std::string::npos && data.size() >= 2) { + // Temperature (signed 16-bit) + int16_t temp = (data[1] << 8) | data[0]; + json << "\"value\":" << (temp / 100.0) << "," + << "\"unit\":\"°C\",\"type\":\"temperature\""; + } else if (upper_char.find("2A37") != std::string::npos && data.size() >= 2) { + // Heart Rate + uint8_t bpm = data[1]; + json << "\"value\":" << (int)bpm << "," + << "\"unit\":\"bpm\",\"type\":\"heart_rate\""; + } else { + json << "\"value\":null,\"type\":\"unknown\""; + } + + json << "}"; + res.set_content(json.str(), "application/json"); + + } catch (const std::exception& e) { + std::cerr << "[READ] Error: " << e.what() << std::endl; + + std::string error_msg = e.what(); + std::stringstream json; + + // Check for encryption/pairing errors + if (error_msg.find("Encryption") != std::string::npos || + error_msg.find("insufficient") != std::string::npos || + error_msg.find("Authentication") != std::string::npos) { + res.status = 403; + json << "{\"error\":\"Device requires pairing/bonding\"," + << "\"details\":\"This characteristic is encrypted and requires you to pair with the device first. " + << "Pair via System Settings → Bluetooth, then try again.\"," + << "\"requires_pairing\":true}"; + } else if (error_msg.find("not in range") != std::string::npos || + error_msg.find("not found") != std::string::npos) { + res.status = 404; + json << "{\"error\":\"Device not found\"," + << "\"details\":\"Device is not currently in range or not responding.\"}"; + } else if (error_msg.find("timeout") != std::string::npos || + error_msg.find("Timed out") != std::string::npos) { + res.status = 504; + json << "{\"error\":\"Connection timeout\"," + << "\"details\":\"Device did not respond in time. It may be too far away or busy.\"}"; + } else { + res.status = 500; + json << "{\"error\":\"" << error_msg << "\"}"; + } + + res.set_content(json.str(), "application/json"); + } + }); + + // ESP32 sensor data ingestion endpoint + server.Post("/esp32/scan", [db](const httplib::Request& req, httplib::Response& res) { + std::lock_guard lock(db_mutex); + + try { + // Parse JSON from ESP32 + std::string body = req.body; + std::cout << "[ESP32] Received data from sensor node (" << body.length() << " bytes)" << std::endl; + + // Very basic JSON parsing (production should use a proper JSON library) + size_t device_name_pos = body.find("\"device_name\":\""); + std::string device_name = "ESP32"; + if (device_name_pos != std::string::npos) { + size_t start = device_name_pos + 15; + size_t end = body.find("\"", start); + device_name = body.substr(start, end - start); + } + + // Extract scans array + size_t scans_pos = body.find("\"scans\":["); + if (scans_pos == std::string::npos) { + res.status = 400; + res.set_content("{\"status\":\"error\",\"message\":\"No scans array found\"}", "application/json"); + return; + } + + // Count devices by looking for address fields + int device_count = 0; + size_t pos = 0; + while ((pos = body.find("\"address\":", pos)) != std::string::npos) { + device_count++; + + // Extract device data + size_t addr_start = body.find("\"", pos + 10) + 1; + size_t addr_end = body.find("\"", addr_start); + std::string address = body.substr(addr_start, addr_end - addr_start); + + // Extract name + size_t name_pos = body.find("\"name\":\"", pos); + std::string name = ""; + if (name_pos != std::string::npos && name_pos < pos + 500) { + size_t name_start = name_pos + 8; + size_t name_end = body.find("\"", name_start); + name = body.substr(name_start, name_end - name_start); + } + + // Extract RSSI + size_t rssi_pos = body.find("\"rssi\":", pos); + int rssi = 0; + if (rssi_pos != std::string::npos && rssi_pos < pos + 500) { + size_t rssi_start = rssi_pos + 7; + size_t rssi_end = body.find_first_of(",}", rssi_start); + rssi = std::stoi(body.substr(rssi_start, rssi_end - rssi_start)); + } + + // Extract company_name + size_t company_pos = body.find("\"company_name\":\"", pos); + std::string company = ""; + if (company_pos != std::string::npos && company_pos < pos + 500) { + size_t company_start = company_pos + 16; + size_t company_end = body.find("\"", company_start); + company = body.substr(company_start, company_end - company_start); + } + + // Insert into database with source indication + const char* insert_sql = R"( + INSERT INTO ble_scans + (device_address, device_name, rssi, manufacturer_data, scan_date, scan_time, scan_hour, scan_minute, company_name) + VALUES (?, ?, ?, ?, date('now', 'localtime'), time('now', 'localtime'), ?, ?, ?); + )"; + + sqlite3_stmt* stmt; + if (sqlite3_prepare_v2(db, insert_sql, -1, &stmt, nullptr) == SQLITE_OK) { + auto now = std::chrono::system_clock::now(); + auto time_t_now = std::chrono::system_clock::to_time_t(now); + auto tm_now = std::localtime(&time_t_now); + + std::string source_data = "ESP32:" + device_name; + + sqlite3_bind_text(stmt, 1, address.c_str(), -1, SQLITE_TRANSIENT); + sqlite3_bind_text(stmt, 2, name.c_str(), -1, SQLITE_TRANSIENT); + sqlite3_bind_int(stmt, 3, rssi); + sqlite3_bind_text(stmt, 4, source_data.c_str(), -1, SQLITE_TRANSIENT); + sqlite3_bind_int(stmt, 5, tm_now->tm_hour); + sqlite3_bind_int(stmt, 6, tm_now->tm_min); + sqlite3_bind_text(stmt, 7, company.c_str(), -1, SQLITE_TRANSIENT); + + sqlite3_step(stmt); + sqlite3_finalize(stmt); + } + + pos = addr_end; + } + + std::cout << "[ESP32] Stored " << device_count << " scans from " << device_name << std::endl; + + std::stringstream json; + json << "{\"status\":\"ok\",\"received\":" << device_count << ",\"source\":\"" << device_name << "\"}"; + res.set_content(json.str(), "application/json"); + + } catch (const std::exception& e) { + std::cerr << "[ESP32] Error processing data: " << e.what() << std::endl; + res.status = 500; + res.set_content("{\"status\":\"error\",\"message\":\"Processing error\"}", "application/json"); + } + }); + + // Get device nickname + server.Get("/nickname/:address", [db](const httplib::Request& req, httplib::Response& res) { + std::string address = req.path_params.at("address"); + std::lock_guard lock(db_mutex); + + std::string query = "SELECT nickname FROM device_nicknames WHERE device_address = ?;"; + sqlite3_stmt* stmt; + + if (sqlite3_prepare_v2(db, query.c_str(), -1, &stmt, nullptr) != SQLITE_OK) { + res.status = 500; + res.set_content("{\"error\":\"Database error\"}", "application/json"); + return; + } + + sqlite3_bind_text(stmt, 1, address.c_str(), -1, SQLITE_TRANSIENT); + + if (sqlite3_step(stmt) == SQLITE_ROW) { + std::string nickname = reinterpret_cast(sqlite3_column_text(stmt, 0)); + std::stringstream json; + json << "{\"address\":\"" << address << "\",\"nickname\":\"" << nickname << "\"}"; + res.set_content(json.str(), "application/json"); + } else { + res.status = 404; + res.set_content("{\"error\":\"No nickname found\"}", "application/json"); + } + + sqlite3_finalize(stmt); + }); + + // Set device nickname + server.Post("/nickname/:address", [db](const httplib::Request& req, httplib::Response& res) { + std::string address = req.path_params.at("address"); + std::string body = req.body; + + // Extract nickname from JSON body + size_t nickname_pos = body.find("\"nickname\":\""); + if (nickname_pos == std::string::npos) { + res.status = 400; + res.set_content("{\"error\":\"Missing nickname field\"}", "application/json"); + return; + } + + size_t nickname_start = nickname_pos + 12; + size_t nickname_end = body.find("\"", nickname_start); + std::string nickname = body.substr(nickname_start, nickname_end - nickname_start); + + std::lock_guard lock(db_mutex); + + const char* upsert_sql = R"( + INSERT INTO device_nicknames (device_address, nickname, updated_at) + VALUES (?, ?, datetime('now')) + ON CONFLICT(device_address) + DO UPDATE SET nickname = excluded.nickname, updated_at = datetime('now'); + )"; + + sqlite3_stmt* stmt; + if (sqlite3_prepare_v2(db, upsert_sql, -1, &stmt, nullptr) != SQLITE_OK) { + res.status = 500; + res.set_content("{\"error\":\"Database error\"}", "application/json"); + return; + } + + sqlite3_bind_text(stmt, 1, address.c_str(), -1, SQLITE_TRANSIENT); + sqlite3_bind_text(stmt, 2, nickname.c_str(), -1, SQLITE_TRANSIENT); + + if (sqlite3_step(stmt) == SQLITE_DONE) { + std::stringstream json; + json << "{\"status\":\"ok\",\"address\":\"" << address << "\",\"nickname\":\"" << nickname << "\"}"; + res.set_content(json.str(), "application/json"); + } else { + res.status = 500; + res.set_content("{\"error\":\"Failed to save nickname\"}", "application/json"); + } + + sqlite3_finalize(stmt); + }); + + // Delete device nickname + server.Delete("/nickname/:address", [db](const httplib::Request& req, httplib::Response& res) { + std::string address = req.path_params.at("address"); + std::lock_guard lock(db_mutex); + + const char* delete_sql = "DELETE FROM device_nicknames WHERE device_address = ?;"; + sqlite3_stmt* stmt; + + if (sqlite3_prepare_v2(db, delete_sql, -1, &stmt, nullptr) != SQLITE_OK) { + res.status = 500; + res.set_content("{\"error\":\"Database error\"}", "application/json"); + return; + } + + sqlite3_bind_text(stmt, 1, address.c_str(), -1, SQLITE_TRANSIENT); + + if (sqlite3_step(stmt) == SQLITE_DONE) { + res.set_content("{\"status\":\"ok\"}", "application/json"); + } else { + res.status = 500; + res.set_content("{\"error\":\"Failed to delete nickname\"}", "application/json"); + } + + sqlite3_finalize(stmt); + }); + + // Get all nicknames + server.Get("/nicknames", [db](const httplib::Request&, httplib::Response& res) { + std::lock_guard lock(db_mutex); + + std::string query = "SELECT device_address, nickname FROM device_nicknames;"; + sqlite3_stmt* stmt; + + if (sqlite3_prepare_v2(db, query.c_str(), -1, &stmt, nullptr) != SQLITE_OK) { + res.status = 500; + res.set_content("{\"error\":\"Database error\"}", "application/json"); + return; + } + + std::stringstream json; + json << "{\"nicknames\":{"; + bool first = true; + + while (sqlite3_step(stmt) == SQLITE_ROW) { + if (!first) json << ","; + first = false; + + std::string address = reinterpret_cast(sqlite3_column_text(stmt, 0)); + std::string nickname = reinterpret_cast(sqlite3_column_text(stmt, 1)); + json << "\"" << address << "\":\"" << nickname << "\""; + } + + json << "}}"; + sqlite3_finalize(stmt); + res.set_content(json.str(), "application/json"); + }); + + // Get security assessment for a device + server.Get("/security/:address", [db](const httplib::Request& req, httplib::Response& res) { + std::string address = req.path_params.at("address"); + std::lock_guard lock(db_mutex); + + std::string query = "SELECT risk_level, vulnerabilities, recommendations, last_assessed " + "FROM security_assessments WHERE device_address = ?;"; + sqlite3_stmt* stmt; + + if (sqlite3_prepare_v2(db, query.c_str(), -1, &stmt, nullptr) != SQLITE_OK) { + res.status = 500; + res.set_content("{\"error\":\"Database error\"}", "application/json"); + return; + } + + sqlite3_bind_text(stmt, 1, address.c_str(), -1, SQLITE_TRANSIENT); + + if (sqlite3_step(stmt) == SQLITE_ROW) { + std::string risk_level = reinterpret_cast(sqlite3_column_text(stmt, 0)); + std::string vulnerabilities = reinterpret_cast(sqlite3_column_text(stmt, 1)); + std::string recommendations = reinterpret_cast(sqlite3_column_text(stmt, 2)); + std::string last_assessed = reinterpret_cast(sqlite3_column_text(stmt, 3)); + + std::stringstream json; + json << "{\"address\":\"" << address << "\"," + << "\"risk_level\":\"" << risk_level << "\"," + << "\"vulnerabilities\":" << vulnerabilities << "," + << "\"recommendations\":" << recommendations << "," + << "\"last_assessed\":\"" << last_assessed << "\"}"; + + res.set_content(json.str(), "application/json"); + } else { + res.status = 404; + res.set_content("{\"error\":\"No security assessment found\",\"message\":\"Device not yet assessed\"}", "application/json"); + } + + sqlite3_finalize(stmt); + }); + + // Get all security assessments + server.Get("/security", [db](const httplib::Request&, httplib::Response& res) { + std::lock_guard lock(db_mutex); + + std::string query = "SELECT device_address, risk_level, last_assessed FROM security_assessments ORDER BY risk_level DESC;"; + sqlite3_stmt* stmt; + + if (sqlite3_prepare_v2(db, query.c_str(), -1, &stmt, nullptr) != SQLITE_OK) { + res.status = 500; + res.set_content("{\"error\":\"Database error\"}", "application/json"); + return; + } + + std::stringstream json; + json << "{\"assessments\":["; + bool first = true; + + while (sqlite3_step(stmt) == SQLITE_ROW) { + if (!first) json << ","; + first = false; + + std::string address = reinterpret_cast(sqlite3_column_text(stmt, 0)); + std::string risk_level = reinterpret_cast(sqlite3_column_text(stmt, 1)); + std::string last_assessed = reinterpret_cast(sqlite3_column_text(stmt, 2)); + + json << "{\"address\":\"" << address << "\"," + << "\"risk_level\":\"" << risk_level << "\"," + << "\"last_assessed\":\"" << last_assessed << "\"}"; + } + + json << "]}"; + sqlite3_finalize(stmt); + res.set_content(json.str(), "application/json"); + }); + + // Get tracking data for a device + server.Get("/tracking/:address", [db](const httplib::Request& req, httplib::Response& res) { + std::string address = req.path_params.at("address"); + std::lock_guard lock(db_mutex); + + std::string query = "SELECT * FROM device_tracking_data WHERE device_address = ?;"; + sqlite3_stmt* stmt; + + if (sqlite3_prepare_v2(db, query.c_str(), -1, &stmt, nullptr) != SQLITE_OK) { + res.status = 500; + res.set_content("{\"error\":\"Database error\"}", "application/json"); + return; + } + + sqlite3_bind_text(stmt, 1, address.c_str(), -1, SQLITE_TRANSIENT); + + if (sqlite3_step(stmt) == SQLITE_ROW) { + std::stringstream json; + json << "{\"address\":\"" << address << "\","; + + // Get all columns + if (sqlite3_column_text(stmt, 1)) json << "\"device_type\":\"" << sqlite3_column_text(stmt, 1) << "\","; + if (sqlite3_column_text(stmt, 2)) json << "\"device_model\":\"" << sqlite3_column_text(stmt, 2) << "\","; + if (sqlite3_column_text(stmt, 3)) json << "\"manufacturer_name\":\"" << sqlite3_column_text(stmt, 3) << "\","; + if (sqlite3_column_text(stmt, 4)) json << "\"firmware_version\":\"" << sqlite3_column_text(stmt, 4) << "\","; + if (sqlite3_column_text(stmt, 5)) json << "\"hardware_version\":\"" << sqlite3_column_text(stmt, 5) << "\","; + if (sqlite3_column_text(stmt, 6)) json << "\"serial_number\":\"" << sqlite3_column_text(stmt, 6) << "\","; + if (sqlite3_column_text(stmt, 7)) json << "\"apple_continuity\":" << sqlite3_column_text(stmt, 7) << ","; + if (sqlite3_column_text(stmt, 8)) json << "\"pairing_status\":\"" << sqlite3_column_text(stmt, 8) << "\","; + if (sqlite3_column_text(stmt, 11)) json << "\"additional_info\":\"" << sqlite3_column_text(stmt, 11) << "\","; + json << "\"last_updated\":\"" << sqlite3_column_text(stmt, 12) << "\"}"; + + res.set_content(json.str(), "application/json"); + } else { + res.status = 404; + res.set_content("{\"error\":\"No tracking data found\"}", "application/json"); + } + + sqlite3_finalize(stmt); + }); +} + +int main(int argc, char* argv[]) { + std::cout << "Bluehound v1.0" << std::endl; + std::cout << "==============\n" << std::endl; + + // Setup signal handlers + signal(SIGINT, signal_handler); + signal(SIGTERM, signal_handler); + + // Initialize database + sqlite3* db; + if (!init_database(&db)) { + return 1; + } + + // Start HTTP server in separate thread + std::thread http_thread; + httplib::Server server; + + if (config.enable_http_server) { + setup_http_server(server, db); + + http_thread = std::thread([&server]() { + std::cout << "Starting HTTP server on port " << config.http_port << std::endl; + std::cout << "API Endpoints:" << std::endl; + std::cout << " - GET /health" << std::endl; + std::cout << " - GET /scans/recent?limit=N" << std::endl; + std::cout << " - GET /scans/date/YYYY-MM-DD" << std::endl; + std::cout << " - GET /scans/hour/HH" << std::endl; + std::cout << " - GET /stats\n" << std::endl; + + server.listen("0.0.0.0", config.http_port); + }); + } + + // Start BLE scanning + perform_scan(db); + + // Cleanup + if (config.enable_http_server) { + server.stop(); + if (http_thread.joinable()) { + http_thread.join(); + } + } + + sqlite3_close(db); + std::cout << "Shutdown complete." << std::endl; + + return 0; +} diff --git a/build.sh b/build.sh new file mode 100755 index 0000000..5fd5a34 --- /dev/null +++ b/build.sh @@ -0,0 +1,57 @@ +#!/bin/bash + +set -e + +echo "===================================" +echo "Bluehound Build Script" +echo "===================================" +echo + +SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" + +# vendored simpleble static lib +if [ ! -f "${SCRIPT_DIR}/simpleble/simpleble/build/lib/libsimpleble.a" ]; then + echo "❌ vendored SimpleBLE not found at simpleble/simpleble/build/lib/libsimpleble.a" + exit 1 +fi + +# vendored cpp-httplib header +if [ ! -f "${SCRIPT_DIR}/third_party/httplib.h" ]; then + echo "❌ vendored httplib.h not found at third_party/httplib.h" + exit 1 +fi + +# cmake toolchain +if ! command -v cmake >/dev/null 2>&1; then + echo "❌ cmake not found (need >= 3.15)" + echo " macOS: brew install cmake" + echo " Ubuntu/Debian: sudo apt-get install cmake" + exit 1 +fi + +echo "✓ Dependencies found" +echo + +# Create build directory +mkdir -p build +cd build + +# Configure +echo "Configuring..." +cmake .. + +# Build +echo "Building..." +make -j$(nproc 2>/dev/null || sysctl -n hw.ncpu 2>/dev/null || echo 2) + +echo +echo "===================================" +echo "✓ Build complete!" +echo "===================================" +echo +echo "Run the scanner:" +echo " ./build/bluehound" +echo +echo "Install system-wide:" +echo " sudo make install" +echo diff --git a/classic_bluetooth.h b/classic_bluetooth.h new file mode 100644 index 0000000..5931e1b --- /dev/null +++ b/classic_bluetooth.h @@ -0,0 +1,84 @@ +#ifndef CLASSIC_BLUETOOTH_H +#define CLASSIC_BLUETOOTH_H + +#include +#include +#include + +// C++ interface for Classic Bluetooth scanning (wraps IOBluetooth Objective-C API) + +namespace ClassicBluetooth { + + // Device class information + struct DeviceClass { + std::string major_class; // Computer, Phone, Audio, Peripheral, etc. + std::string minor_class; // Smartphone, Laptop, Headset, etc. + uint32_t class_of_device; // Raw CoD value + }; + + // SDP service record + struct SDPService { + std::string uuid; // Service UUID + std::string name; // Human-readable name (OBEX, SPP, HID, etc.) + uint8_t rfcomm_channel; // RFCOMM channel ID (if applicable) + }; + + // Classic Bluetooth device info + struct ClassicDevice { + std::string address; // MAC address (XX:XX:XX:XX:XX:XX) + std::string name; // Device name + int16_t rssi; // Signal strength + DeviceClass device_class; // Device class info + std::vector services; // SDP services + bool is_connected; // Connection status + bool is_paired; // Pairing status + std::string last_seen; // Timestamp + }; + + // Callback for device discovery + using DeviceFoundCallback = std::function; + using InquiryCompleteCallback = std::function; + + // Scanner interface + class Scanner { + public: + Scanner(); + ~Scanner(); + + // Start Classic Bluetooth inquiry + bool start_inquiry(int duration_seconds = 10); + + // Stop inquiry + void stop_inquiry(); + + // Check if inquiry is running + bool is_scanning() const; + + // Set callback for when devices are found + void set_device_found_callback(DeviceFoundCallback callback); + + // Set callback for when inquiry completes + void set_inquiry_complete_callback(InquiryCompleteCallback callback); + + // Perform SDP query on a specific device + std::vector query_sdp_services(const std::string& address); + + // Get device class information + DeviceClass get_device_class(const std::string& address); + + // Get all discovered devices (synchronous, for one-shot queries) + std::vector get_discovered_devices(); + + private: + class Impl; // Forward declaration for PIMPL + Impl* pImpl; // Pointer to implementation (hides Objective-C from C++ header) + }; + + // Utility functions + std::string decode_device_class_major(uint32_t cod); + std::string decode_device_class_minor(uint32_t cod); + std::string decode_service_uuid(const std::string& uuid); + +} // namespace ClassicBluetooth + +#endif // CLASSIC_BLUETOOTH_H diff --git a/classic_bluetooth.mm b/classic_bluetooth.mm new file mode 100644 index 0000000..40ad9eb --- /dev/null +++ b/classic_bluetooth.mm @@ -0,0 +1,441 @@ +#import "classic_bluetooth.h" +#import +#import +#include +#include +#include +#include +#include + +// Objective-C delegate for IOBluetoothDeviceInquiry +@interface BluetoothInquiryDelegate : NSObject +{ + ClassicBluetooth::DeviceFoundCallback deviceFoundCallback; + ClassicBluetooth::InquiryCompleteCallback inquiryCompleteCallback; + std::vector* discoveredDevices; + std::mutex* devicesMutex; +} + +- (instancetype)initWithCallbacks:(ClassicBluetooth::DeviceFoundCallback)foundCb + completeCb:(ClassicBluetooth::InquiryCompleteCallback)completeCb + devices:(std::vector*)devices + mutex:(std::mutex*)mutex; + +@end + +@implementation BluetoothInquiryDelegate + +- (instancetype)initWithCallbacks:(ClassicBluetooth::DeviceFoundCallback)foundCb + completeCb:(ClassicBluetooth::InquiryCompleteCallback)completeCb + devices:(std::vector*)devices + mutex:(std::mutex*)mutex { + self = [super init]; + if (self) { + deviceFoundCallback = foundCb; + inquiryCompleteCallback = completeCb; + discoveredDevices = devices; + devicesMutex = mutex; + } + return self; +} + +- (void)deviceInquiryDeviceFound:(IOBluetoothDeviceInquiry*)sender + device:(IOBluetoothDevice*)device { + + ClassicBluetooth::ClassicDevice classicDevice; + + // Basic info + classicDevice.address = [[device addressString] UTF8String]; + classicDevice.name = device.name ? [device.name UTF8String] : ""; + classicDevice.rssi = [device rawRSSI]; + classicDevice.is_connected = [device isConnected]; + classicDevice.is_paired = [device isPaired]; + + // Device class + BluetoothClassOfDevice cod = [device classOfDevice]; + classicDevice.device_class.class_of_device = cod; + classicDevice.device_class.major_class = ClassicBluetooth::decode_device_class_major(cod); + classicDevice.device_class.minor_class = ClassicBluetooth::decode_device_class_minor(cod); + + // Timestamp + auto now = std::chrono::system_clock::now(); + auto now_time_t = std::chrono::system_clock::to_time_t(now); + std::tm tm_buf; + gmtime_r(&now_time_t, &tm_buf); + std::ostringstream oss; + oss << std::put_time(&tm_buf, "%Y-%m-%d %H:%M:%S"); + classicDevice.last_seen = oss.str(); + + // Get SDP services (if available) + NSArray *services = [device services]; + if (services && [services count] > 0) { + for (IOBluetoothSDPServiceRecord *record in services) { + ClassicBluetooth::SDPService sdpService; + + // Get RFCOMM channel (for SPP services) + BluetoothRFCOMMChannelID channelID; + if ([record getRFCOMMChannelID:&channelID] == kIOReturnSuccess) { + sdpService.rfcomm_channel = channelID; + } else { + sdpService.rfcomm_channel = 0; + } + + // Try to get service UUID from service record + BluetoothSDPServiceRecordHandle handle; + if ([record getServiceRecordHandle:&handle] == kIOReturnSuccess) { + char uuidStr[10]; + snprintf(uuidStr, sizeof(uuidStr), "%04X", (uint16_t)handle); + sdpService.uuid = uuidStr; + } + + // Get service name if available + NSString *serviceName = nil; + IOBluetoothSDPDataElement *nameElement = [record getAttributeDataElement:kBluetoothSDPAttributeIdentifierServiceName]; + if (nameElement) { + serviceName = [nameElement getStringValue]; + } + + if (serviceName) { + sdpService.name = [serviceName UTF8String]; + } else if (!sdpService.uuid.empty()) { + sdpService.name = ClassicBluetooth::decode_service_uuid(sdpService.uuid); + } else { + sdpService.name = "Unknown Service"; + } + + classicDevice.services.push_back(sdpService); + } + } + + // Store device + { + std::lock_guard lock(*devicesMutex); + discoveredDevices->push_back(classicDevice); + } + + // Callback + if (deviceFoundCallback) { + deviceFoundCallback(classicDevice); + } +} + +- (void)deviceInquiryComplete:(IOBluetoothDeviceInquiry*)sender + error:(IOReturn)error + aborted:(BOOL)aborted { + if (inquiryCompleteCallback) { + bool success = (error == kIOReturnSuccess && !aborted); + std::string errorMsg; + if (!success) { + if (aborted) { + errorMsg = "Inquiry aborted"; + } else { + errorMsg = "Inquiry failed with error code: " + std::to_string(error); + } + } + inquiryCompleteCallback(success, errorMsg); + } +} + +@end + +// PIMPL implementation +namespace ClassicBluetooth { + +class Scanner::Impl { +public: + IOBluetoothDeviceInquiry *inquiry; + BluetoothInquiryDelegate *delegate; + std::vector discovered_devices; + std::mutex devices_mutex; + DeviceFoundCallback device_found_callback; + InquiryCompleteCallback inquiry_complete_callback; + bool is_scanning; + + Impl() : inquiry(nil), delegate(nil), is_scanning(false) { + @autoreleasepool { + delegate = [[BluetoothInquiryDelegate alloc] + initWithCallbacks:nullptr + completeCb:nullptr + devices:&discovered_devices + mutex:&devices_mutex]; + + inquiry = [[IOBluetoothDeviceInquiry alloc] initWithDelegate:delegate]; + } + } + + ~Impl() { + @autoreleasepool { + if (inquiry) { + [inquiry stop]; + inquiry = nil; + } + delegate = nil; + } + } +}; + +// Scanner implementation +Scanner::Scanner() : pImpl(new Impl()) {} + +Scanner::~Scanner() { + delete pImpl; +} + +bool Scanner::start_inquiry(int duration_seconds) { + @autoreleasepool { + if (pImpl->is_scanning) { + return false; // Already scanning + } + + // Clear previous results + { + std::lock_guard lock(pImpl->devices_mutex); + pImpl->discovered_devices.clear(); + } + + [pImpl->inquiry setInquiryLength:duration_seconds]; + [pImpl->inquiry setUpdateNewDeviceNames:YES]; + + IOReturn result = [pImpl->inquiry start]; + if (result == kIOReturnSuccess) { + pImpl->is_scanning = true; + return true; + } + return false; + } +} + +void Scanner::stop_inquiry() { + @autoreleasepool { + if (pImpl->inquiry) { + [pImpl->inquiry stop]; + pImpl->is_scanning = false; + } + } +} + +bool Scanner::is_scanning() const { + return pImpl->is_scanning; +} + +void Scanner::set_device_found_callback(DeviceFoundCallback callback) { + pImpl->device_found_callback = callback; + + @autoreleasepool { + pImpl->delegate = [[BluetoothInquiryDelegate alloc] + initWithCallbacks:callback + completeCb:pImpl->inquiry_complete_callback + devices:&pImpl->discovered_devices + mutex:&pImpl->devices_mutex]; + [pImpl->inquiry setDelegate:pImpl->delegate]; + } +} + +void Scanner::set_inquiry_complete_callback(InquiryCompleteCallback callback) { + pImpl->inquiry_complete_callback = callback; + + @autoreleasepool { + pImpl->delegate = [[BluetoothInquiryDelegate alloc] + initWithCallbacks:pImpl->device_found_callback + completeCb:callback + devices:&pImpl->discovered_devices + mutex:&pImpl->devices_mutex]; + [pImpl->inquiry setDelegate:pImpl->delegate]; + } +} + +std::vector Scanner::get_discovered_devices() { + std::lock_guard lock(pImpl->devices_mutex); + return pImpl->discovered_devices; +} + +std::vector Scanner::query_sdp_services(const std::string& address) { + std::vector services; + + @autoreleasepool { + NSString *addressStr = [NSString stringWithUTF8String:address.c_str()]; + IOBluetoothDevice *device = [IOBluetoothDevice deviceWithAddressString:addressStr]; + + if (!device) { + return services; + } + + // Perform SDP query + IOReturn result = [device performSDPQuery:nil]; + if (result != kIOReturnSuccess) { + return services; + } + + NSArray *sdpRecords = [device services]; + if (!sdpRecords) { + return services; + } + + for (IOBluetoothSDPServiceRecord *record in sdpRecords) { + SDPService service; + + // Service name + NSString *serviceName = [record getServiceName]; + if (serviceName) { + service.name = [serviceName UTF8String]; + } + + // RFCOMM channel + BluetoothRFCOMMChannelID channelID; + if ([record getRFCOMMChannelID:&channelID] == kIOReturnSuccess) { + service.rfcomm_channel = channelID; + } + + // Try to get service UUID + BluetoothSDPServiceRecordHandle handle; + if ([record getServiceRecordHandle:&handle] == kIOReturnSuccess) { + char uuidStr[10]; + snprintf(uuidStr, sizeof(uuidStr), "%04X", (uint16_t)handle); + service.uuid = uuidStr; + service.name = decode_service_uuid(service.uuid); + } + + services.push_back(service); + } + } + + return services; +} + +DeviceClass Scanner::get_device_class(const std::string& address) { + DeviceClass devClass; + + @autoreleasepool { + NSString *addressStr = [NSString stringWithUTF8String:address.c_str()]; + IOBluetoothDevice *device = [IOBluetoothDevice deviceWithAddressString:addressStr]; + + if (device) { + BluetoothClassOfDevice cod = [device classOfDevice]; + devClass.class_of_device = cod; + devClass.major_class = decode_device_class_major(cod); + devClass.minor_class = decode_device_class_minor(cod); + } + } + + return devClass; +} + +// Utility functions +std::string decode_device_class_major(uint32_t cod) { + uint8_t major = (cod >> 8) & 0x1F; + + switch (major) { + case 0x00: return "Miscellaneous"; + case 0x01: return "Computer"; + case 0x02: return "Phone"; + case 0x03: return "LAN/Network Access Point"; + case 0x04: return "Audio/Video"; + case 0x05: return "Peripheral"; + case 0x06: return "Imaging"; + case 0x07: return "Wearable"; + case 0x08: return "Toy"; + case 0x09: return "Health"; + case 0x1F: return "Uncategorized"; + default: return "Unknown"; + } +} + +std::string decode_device_class_minor(uint32_t cod) { + uint8_t major = (cod >> 8) & 0x1F; + uint8_t minor = (cod >> 2) & 0x3F; + + // Computer minor classes + if (major == 0x01) { + switch (minor) { + case 0x00: return "Uncategorized"; + case 0x01: return "Desktop Workstation"; + case 0x02: return "Server-class Computer"; + case 0x03: return "Laptop"; + case 0x04: return "Handheld PC/PDA"; + case 0x05: return "Palm-size PC/PDA"; + case 0x06: return "Wearable Computer"; + case 0x07: return "Tablet"; + default: return "Unknown Computer"; + } + } + + // Phone minor classes + if (major == 0x02) { + switch (minor) { + case 0x00: return "Uncategorized"; + case 0x01: return "Cellular"; + case 0x02: return "Cordless"; + case 0x03: return "Smartphone"; + case 0x04: return "Wired Modem/Voice Gateway"; + case 0x05: return "Common ISDN Access"; + default: return "Unknown Phone"; + } + } + + // Audio/Video minor classes + if (major == 0x04) { + switch (minor) { + case 0x00: return "Uncategorized"; + case 0x01: return "Wearable Headset"; + case 0x02: return "Hands-free"; + case 0x04: return "Microphone"; + case 0x05: return "Loudspeaker"; + case 0x06: return "Headphones"; + case 0x07: return "Portable Audio"; + case 0x08: return "Car Audio"; + case 0x09: return "Set-top Box"; + case 0x0A: return "HiFi Audio"; + case 0x0B: return "VCR"; + case 0x0C: return "Video Camera"; + case 0x0D: return "Camcorder"; + case 0x0E: return "Video Monitor"; + case 0x0F: return "Video Display and Loudspeaker"; + case 0x10: return "Video Conferencing"; + case 0x12: return "Gaming/Toy"; + default: return "Unknown Audio/Video"; + } + } + + return "Unknown"; +} + +std::string decode_service_uuid(const std::string& uuid) { + static const std::map SERVICE_MAP = { + {"1101", "Serial Port (SPP)"}, + {"1102", "LAN Access Using PPP"}, + {"1103", "Dialup Networking (DUN)"}, + {"1104", "IrMC Sync"}, + {"1105", "OBEX Object Push"}, + {"1106", "OBEX File Transfer"}, + {"1107", "IrMC Sync Command"}, + {"1108", "Headset"}, + {"1109", "Cordless Telephony"}, + {"110A", "Audio Source"}, + {"110B", "Audio Sink"}, + {"110C", "A/V Remote Control Target"}, + {"110D", "Advanced Audio Distribution"}, + {"110E", "A/V Remote Control"}, + {"110F", "A/V Remote Control Controller"}, + {"1112", "Headset Audio Gateway"}, + {"1115", "PANU"}, + {"1116", "NAP"}, + {"1117", "GN"}, + {"1118", "Direct Printing"}, + {"111E", "Handsfree"}, + {"111F", "Handsfree Audio Gateway"}, + {"1200", "PnP Information"}, + {"1201", "Generic Networking"}, + {"1202", "Generic File Transfer"}, + {"1203", "Generic Audio"}, + {"1204", "Generic Telephony"}, + {"1812", "Human Interface Device (HID)"} + }; + + auto it = SERVICE_MAP.find(uuid); + if (it != SERVICE_MAP.end()) { + return it->second; + } + return "Unknown Service (" + uuid + ")"; +} + +} // namespace ClassicBluetooth diff --git a/serve_dashboard.py b/serve_dashboard.py new file mode 100644 index 0000000..a36f99f --- /dev/null +++ b/serve_dashboard.py @@ -0,0 +1,22 @@ +#!/usr/bin/env python3 +# serves web_dashboard.html at / on localhost:8090 +import http.server +import os + +PORT = 8090 +DASHBOARD = "web_dashboard.html" + + +class Handler(http.server.SimpleHTTPRequestHandler): + def do_GET(self): + if self.path in ("/", "/index.html"): + self.path = "/" + DASHBOARD + return super().do_GET() + + def log_message(self, *args): + pass # quiet + + +if __name__ == "__main__": + os.chdir(os.path.dirname(os.path.abspath(__file__))) + http.server.HTTPServer(("127.0.0.1", PORT), Handler).serve_forever() diff --git a/simpleble/dependencies/external/kvn/kvn_bytearray.h b/simpleble/dependencies/external/kvn/kvn_bytearray.h new file mode 100644 index 0000000..32a72af --- /dev/null +++ b/simpleble/dependencies/external/kvn/kvn_bytearray.h @@ -0,0 +1,323 @@ +#ifndef KVN_BYTEARRAY_H +#define KVN_BYTEARRAY_H + +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include + +namespace kvn { + +/** + * @class bytearray + * @brief A class to handle byte arrays and their conversion from/to hex strings. + */ +class bytearray { + public: + using value_type = uint8_t; + using size_type = std::size_t; + using difference_type = std::ptrdiff_t; + using reference = uint8_t&; + using const_reference = const uint8_t&; + using pointer = uint8_t*; + using const_pointer = const uint8_t*; + using iterator = std::vector::iterator; + using const_iterator = std::vector::const_iterator; + + /** + * @brief Default constructor. + */ + bytearray() = default; + + /** + * @brief Constructs byte array from a vector of uint8_t. + * @param vec A vector of uint8_t. + */ + bytearray(const std::vector& vec) : data_(vec) {} + + /** + * @brief Constructs byte array from an initializer list of uint8_t. + * @param list An initializer list of uint8_t. + */ + bytearray(std::initializer_list list) : data_(list) {} + + /** + * @brief Constructs byte array from a raw pointer and size. + * @param ptr A pointer to uint8_t data. + * @param size The size of the data. + */ + bytearray(const uint8_t* ptr, size_t size) : data_(ptr, ptr + size) {} + + /** + * @brief Constructs byte array from iterators. + * @tparam InputIt Iterator type. + * @param first Iterator to the first element. + * @param last Iterator to one past the last element. + */ + template + bytearray(InputIt first, InputIt last) : data_(first, last) {} + + /** + * @brief Constructs byte array from a std::string. + * @param byteArr A string containing byte data. + */ + bytearray(const std::string& byteArr) : data_(byteArr.begin(), byteArr.end()) {} + + /** + * @brief Constructs byte array from a C-style string and size. + * @param byteArr A C-style string. + * @param size The size of the string. + */ + bytearray(const char* byteArr, size_t size) : bytearray(std::string(byteArr, size)) {} + + /** + * @brief Constructs byte array from a C-style string. + * @param byteArr A C-style string. + */ + bytearray(const char* byteArr) : bytearray(std::string(byteArr)) {} + + /** + * @brief Constructs a byte array of specified size, initialized with zeros. + * @param size The number of bytes to allocate. + */ + explicit bytearray(size_t size) : data_(size) {} + + /** + * @brief Creates a ByteArray from a hex string. + * + * Case is ignored and the string may have a '0x' hex prefix or not. + * + * @param hexStr A string containing hex data. + * @return A ByteArray object. + * @throws std::invalid_argument If the hex string contains non-hexadecimal characters. + * @throws std::length_error If the hex string length is not even. + */ + static bytearray fromHex(const std::string& hexStr) { + std::string cleanString(hexStr); + + // Check and skip the '0x' prefix if present + if (cleanString.size() >= 2 && cleanString.substr(0, 2) == "0x") { + cleanString = cleanString.substr(2); + } + + size_t size = cleanString.size(); + if (size % 2 != 0) { + throw std::length_error("Hex string length must be even."); + } + + bytearray byteArray; + byteArray.data_.reserve(size / 2); + + for (size_t i = 0; i < size; i += 2) { + uint8_t byte = static_cast(std::stoi(cleanString.substr(i, 2), nullptr, 16)); + byteArray.data_.push_back(byte); + } + + return byteArray; + } + + /** + * @overload + */ + static bytearray fromHex(const char* byteArr) { return fromHex(std::string(byteArr)); } + + /** + * @overload + */ + static bytearray fromHex(const char* byteArr, size_t size) { return fromHex(std::string(byteArr, size)); } + + /** + * @brief Converts the byte array to a lowercase hex string without '0x' prefix. + * @param spacing Whether to include spaces between bytes. + * + * @return A hex string representation of the byte array. + */ + std::string toHex(bool spacing = false) const { + std::ostringstream oss; + for (auto byte : data_) { + oss << std::hex << std::setw(2) << std::setfill('0') << static_cast(byte); + if (spacing) { + oss << " "; + } + } + return oss.str(); + } + + /** + * @brief Slices the byte array from a specified start index to an end index. + * + * This method creates a new byte array containing bytes from the specified range. + * The start index is inclusive, while the end index is exclusive. + * + * @param start The starting index from which to begin slicing. + * @param end The ending index up to which to slice (exclusive). + * @return byte array A new byte array containing the sliced segment. + * @throws std::out_of_range If the start index is greater than the end index or if the end index is out of bounds. + */ + bytearray slice(size_t start, size_t end) const { + if (start > end || end > data_.size()) { + throw std::out_of_range("Invalid slice range"); + } + return bytearray(data_.data() + start, end - start); + } + + /** + * @brief Slices the byte array from a specified start index to the end of the array. + * + * This method creates a new byte array containing all bytes from the specified start index to the end of the + * byte array. + * + * @param start The starting index from which to begin slicing. + * @return byte array A new byte array containing the sliced segment from the start index to the end. + * @throws std::out_of_range If the start index is out of the bounds of the byte array. + */ + bytearray slice_from(size_t start) const { return slice(start, data_.size()); } + + /** + * @brief Slices the byte array from the beginning to a specified end index. + * + * This method creates a new byte array containing all bytes from the beginning of the byte array to the specified + * end index. + * + * @param end The ending index up to which to slice (exclusive). + * @return byte array A new byte array containing the sliced segment from the beginning to the end index. + * @throws std::out_of_range If the end index is out of the bounds of the byte array. + */ + bytearray slice_to(size_t end) const { return slice(0, end); } + + /** + * @brief Overloaded stream insertion operator for byte array. + * @param os The output stream. + * @param byteArray The byte array object. + * @return The output stream. + */ + friend std::ostream& operator<<(std::ostream& os, const bytearray& byteArray) { + os << byteArray.toHex(true); + return os; + } + + /** + * @brief Conversion operator to convert byte array to std::string. + * + * @note This is provided to support code that relies on byte array + * being representd as a string. + * @return String containing the raw bytes of the byte array + */ + operator std::string() const { return std::string(data_.begin(), data_.end()); } + + /** + * @brief Conversion operator to convert byte array to std::vector. + * @return Vector containing the raw bytes of the byte array + */ + operator std::vector() const { return data_; } + + //! @cond Doxygen_Suppress + // Expose vector-like functionality + size_type size() const { return data_.size(); } + const uint8_t* data() const { return data_.data(); } + uint8_t* data() { return data_.data(); } + bool empty() const { return data_.empty(); } + void clear() { data_.clear(); } + void reserve(size_type n) { data_.reserve(n); } + void resize(size_type n) { data_.resize(n); } + void resize(size_type n, uint8_t v) { data_.resize(n, v); } + uint8_t& operator[](size_type index) { return data_[index]; } + const uint8_t& operator[](size_type index) const { return data_[index]; } + uint8_t& at(size_type index) { return data_.at(index); } + const uint8_t& at(size_type index) const { return data_.at(index); } + void push_back(uint8_t byte) { data_.push_back(byte); } + + /** + * @brief Appends a uint16_t value as 2 little-endian bytes. + * @param value The uint16_t value to append. + */ + void push_back(uint16_t value) { + for (size_t i = 0; i < 2; ++i) { + data_.push_back(static_cast(value >> (i * 8))); + } + } + + /** + * @brief Appends a uint32_t value as 4 little-endian bytes. + * @param value The uint32_t value to append. + */ + void push_back(uint32_t value) { + for (size_t i = 0; i < 4; ++i) { + data_.push_back(static_cast(value >> (i * 8))); + } + } + + /** + * @brief Appends a uint64_t value as 8 little-endian bytes. + * @param value The uint64_t value to append. + */ + void push_back(uint64_t value) { + for (size_t i = 0; i < 8; ++i) { + data_.push_back(static_cast(value >> (i * 8))); + } + } + auto begin() { return data_.begin(); } + auto begin() const { return data_.begin(); } + auto end() { return data_.end(); } + auto end() const { return data_.end(); } + + /** + * @brief Inserts a single byte at the specified position. + * @param pos Iterator to the position where the element is inserted. + * @param value The byte to insert. + * @return Iterator pointing to the inserted element. + */ + auto insert(iterator pos, uint8_t value) { return data_.insert(pos, value); } + auto insert(const_iterator pos, uint8_t value) { return data_.insert(pos, value); } + + /** + * @brief Inserts multiple copies of a byte at the specified position. + * @param pos Iterator to the position where the elements are inserted. + * @param count Number of copies to insert. + * @param value The byte to insert. + * @return Iterator pointing to the first inserted element. + */ + auto insert(iterator pos, size_type count, uint8_t value) { return data_.insert(pos, count, value); } + auto insert(const_iterator pos, size_type count, uint8_t value) { return data_.insert(pos, count, value); } + + /** + * @brief Inserts elements from a range at the specified position. + * @tparam InputIt Iterator type. + * @param pos Iterator to the position where the elements are inserted. + * @param first Iterator to the first element of the range. + * @param last Iterator to one past the last element of the range. + * @return Iterator pointing to the first inserted element. + */ + template + auto insert(iterator pos, InputIt first, InputIt last) { + return data_.insert(pos, first, last); + } + template + auto insert(const_iterator pos, InputIt first, InputIt last) { + return data_.insert(pos, first, last); + } + + /** + * @brief Inserts another bytearray at the specified position. + * @param pos Iterator to the position where the elements are inserted. + * @param other The bytearray to insert. + * @return Iterator pointing to the first inserted element. + */ + auto insert(iterator pos, const bytearray& other) { return data_.insert(pos, other.begin(), other.end()); } + auto insert(const_iterator pos, const bytearray& other) { return data_.insert(pos, other.begin(), other.end()); } + + //! @endcond + + private: + std::vector data_; +}; + +} // namespace kvn + +#endif // KVN_BYTEARRAY_H diff --git a/simpleble/dependencies/external/kvn/kvn_safe_callback.hpp b/simpleble/dependencies/external/kvn/kvn_safe_callback.hpp new file mode 100644 index 0000000..1a9696e --- /dev/null +++ b/simpleble/dependencies/external/kvn/kvn_safe_callback.hpp @@ -0,0 +1,66 @@ +/* + * SPDX-FileCopyrightText: 2022 Kevin Dewald + * + * SPDX-License-Identifier: MIT + */ + +#ifndef KVN_SAFE_CALLBACK_HPP +#define KVN_SAFE_CALLBACK_HPP + +#include +#include +#include +#include + +namespace kvn { + +template +class safe_callback; + +template +class safe_callback<_Res(_ArgTypes...)> { + public: + safe_callback() = default; + + // Remove copy constructor and copy assignment + safe_callback(const safe_callback&) = delete; + safe_callback& operator=(const safe_callback&) = delete; + + virtual ~safe_callback() { unload(); }; + + void load(std::function<_Res(_ArgTypes...)> callback) { + if (callback == nullptr) return; + + std::scoped_lock lock(_mutex); + _callback = std::move(callback); + _is_loaded = true; + } + + void unload() { + std::scoped_lock lock(_mutex); + _callback = nullptr; + _is_loaded = false; + } + + bool is_loaded() const { return _is_loaded; } + + explicit operator bool() const { return is_loaded(); } + + _Res operator()(_ArgTypes... arguments) { + std::scoped_lock lock(_mutex); + if (_is_loaded) { + return _callback(std::forward<_ArgTypes&&>(arguments)...); + } else { + return _Res(); + } + } + + protected: + std::atomic_bool _is_loaded{false}; + std::function<_Res(_ArgTypes...)> _callback; + std::recursive_mutex _mutex; +}; + +} // namespace kvn + +#endif // KVN_SAFE_CALLBACK_HPP diff --git a/simpleble/dependencies/external/kvn/logfwd.hpp b/simpleble/dependencies/external/kvn/logfwd.hpp new file mode 100644 index 0000000..c1d903f --- /dev/null +++ b/simpleble/dependencies/external/kvn/logfwd.hpp @@ -0,0 +1,35 @@ +#ifndef LOGFWD_HPP +#define LOGFWD_HPP + +#include + +namespace logfwd { + +enum level : int { + NONE = 0, + FATAL, + ERROR, + WARN, + INFO, +#pragma push_macro("DEBUG") +#undef DEBUG + DEBUG, +#pragma pop_macro("DEBUG") + VERBOSE, +}; + +// clang-format off + +void receive( + level level, + const std::string& module, + const std::string& file, + uint32_t line, + const std::string& function, + const std::string& message); + +// clang-format on + +} // namespace logfwd + +#endif // LOGFWD_HPP diff --git a/simpleble/simpleble/build/export/simpleble/export.h b/simpleble/simpleble/build/export/simpleble/export.h new file mode 100644 index 0000000..cd6fe93 --- /dev/null +++ b/simpleble/simpleble/build/export/simpleble/export.h @@ -0,0 +1,43 @@ + +#ifndef SIMPLEBLE_EXPORT_H +#define SIMPLEBLE_EXPORT_H + +#ifdef SIMPLEBLE_STATIC_DEFINE +# define SIMPLEBLE_EXPORT +# define SIMPLEBLE_NO_EXPORT +#else +# ifndef SIMPLEBLE_EXPORT +# ifdef simpleble_EXPORTS + /* We are building this library */ +# define SIMPLEBLE_EXPORT +# else + /* We are using this library */ +# define SIMPLEBLE_EXPORT +# endif +# endif + +# ifndef SIMPLEBLE_NO_EXPORT +# define SIMPLEBLE_NO_EXPORT +# endif +#endif + +#ifndef SIMPLEBLE_DEPRECATED +# define SIMPLEBLE_DEPRECATED __attribute__ ((__deprecated__)) +#endif + +#ifndef SIMPLEBLE_DEPRECATED_EXPORT +# define SIMPLEBLE_DEPRECATED_EXPORT SIMPLEBLE_EXPORT SIMPLEBLE_DEPRECATED +#endif + +#ifndef SIMPLEBLE_DEPRECATED_NO_EXPORT +# define SIMPLEBLE_DEPRECATED_NO_EXPORT SIMPLEBLE_NO_EXPORT SIMPLEBLE_DEPRECATED +#endif + +/* NOLINTNEXTLINE(readability-avoid-unconditional-preprocessor-if) */ +#if 0 /* DEFINE_NO_DEPRECATED */ +# ifndef SIMPLEBLE_NO_DEPRECATED +# define SIMPLEBLE_NO_DEPRECATED +# endif +#endif + +#endif /* SIMPLEBLE_EXPORT_H */ diff --git a/simpleble/simpleble/build/lib/libsimpleble.a b/simpleble/simpleble/build/lib/libsimpleble.a new file mode 100644 index 0000000..77353c9 Binary files /dev/null and b/simpleble/simpleble/build/lib/libsimpleble.a differ diff --git a/simpleble/simpleble/include/simpleble/Adapter.h b/simpleble/simpleble/include/simpleble/Adapter.h new file mode 100644 index 0000000..4677087 --- /dev/null +++ b/simpleble/simpleble/include/simpleble/Adapter.h @@ -0,0 +1,105 @@ +#pragma once + +#include +#include +#include +#include + +#include + +#include +#include +#include + +namespace SimpleBLE { + +class AdapterBase; + +/** + * Bluetooth Adapter. + * + * A default-constructed Adapter object is not initialized. Calling any method + * other than `initialized()` on an uninitialized Adapter will throw an exception + * of type `SimpleBLE::NotInitialized`. + * + * NOTE: This class is intended to be used by the user only. Library developers + * should use shared pointers to `AdapterBase` instead. + */ +class SIMPLEBLE_EXPORT Adapter { + public: + Adapter() = default; + virtual ~Adapter() = default; + + bool initialized() const; + + /** + * Retrieve the underlying OS object/handle. + * + * For certain compatibility with external libraries, we sometimes need to + * expose the actual OS handle to the user. This is particularly important + * for MacOS right now. + */ + void* underlying() const; + + std::string identifier(); + BluetoothAddress address(); + + /** + * Control the power state of the adapter. + * + * NOTE: Power control support depends on the backend and platform. + * Unsupported backends may do nothing. + * NOTE: Power callbacks are supported by backends that provide power state change events. + */ + void power_on(); + void power_off(); + bool is_powered(); + void set_callback_on_power_on(std::function on_power_on); + void set_callback_on_power_off(std::function on_power_off); + + void scan_start(); + void scan_stop(); + void scan_for(int timeout_ms); + bool scan_is_active(); + std::vector scan_get_results(); + + void set_callback_on_scan_start(std::function on_scan_start); + void set_callback_on_scan_stop(std::function on_scan_stop); + void set_callback_on_scan_updated(std::function on_scan_updated); + void set_callback_on_scan_found(std::function on_scan_found); + + /** + * Retrieve a list of all paired peripherals. + * + * NOTE:This method is currently only supported by the Linux, Windows and Android backends. + */ + std::vector get_paired_peripherals(); + + /** + * Retrieve a list of all connected peripherals. + * + * NOTE: This method is currently only supported by the Windows backend. (More backends coming soon.) + */ + std::vector get_connected_peripherals(); + + static bool bluetooth_enabled(); + + /** + * Fetches a list of all available adapters from all available backends. + * + * This will cause backends to be instantiated/initialized and adapters + * too. + * + * @note All configuration values must be set prior to calling this function. + * Please refer to the SimpleBLE::Config documentation for more details. + */ + static std::vector get_adapters(); + + protected: + AdapterBase* operator->(); + const AdapterBase* operator->() const; + + std::shared_ptr internal_; +}; + +} // namespace SimpleBLE diff --git a/simpleble/simpleble/include/simpleble/AdapterSafe.h b/simpleble/simpleble/include/simpleble/AdapterSafe.h new file mode 100644 index 0000000..a55e296 --- /dev/null +++ b/simpleble/simpleble/include/simpleble/AdapterSafe.h @@ -0,0 +1,58 @@ +#pragma once + +#include + +#include +#include +#include +#include +#include + +namespace SimpleBLE { + +namespace Safe { + +/** + * Wrapper around the Adapter class that provides a noexcept interface. + * + * We use instances of this class directly and not through shared_ptr because + * this is just a wrapper around the Adapter class, which is already managed by + * shared_ptr. + */ +class SIMPLEBLE_EXPORT Adapter { + public: + Adapter(SimpleBLE::Adapter& adapter); + Adapter(SimpleBLE::Adapter&& adapter); + virtual ~Adapter() = default; + + std::optional identifier() noexcept; + std::optional address() noexcept; + + bool scan_start() noexcept; + bool scan_stop() noexcept; + bool scan_for(int timeout_ms) noexcept; + std::optional scan_is_active() noexcept; + std::optional> scan_get_results() noexcept; + + bool set_callback_on_scan_start(std::function on_scan_start) noexcept; + bool set_callback_on_scan_stop(std::function on_scan_stop) noexcept; + bool set_callback_on_scan_updated(std::function on_scan_updated) noexcept; + bool set_callback_on_scan_found(std::function on_scan_found) noexcept; + + std::optional> get_paired_peripherals() noexcept; + + static std::optional bluetooth_enabled() noexcept; + static std::optional> get_adapters() noexcept; + + /** + * Cast to the underlying adapter object. + */ + operator SimpleBLE::Adapter() const noexcept; + + protected: + SimpleBLE::Adapter internal_; +}; + +} // namespace Safe + +} // namespace SimpleBLE diff --git a/simpleble/simpleble/include/simpleble/Advanced.h b/simpleble/simpleble/include/simpleble/Advanced.h new file mode 100644 index 0000000..ff828d7 --- /dev/null +++ b/simpleble/simpleble/include/simpleble/Advanced.h @@ -0,0 +1,50 @@ +#pragma once + +#include + +#if __APPLE__ +#include "TargetConditionals.h" +#endif + +/** + * Advanced Features + * + * The functions presented in this namespace are OS-specific backdoors that are + * not part of the standard SimpleBLE API, which allow the user to access + * low-level details of the implementation for advanced use cases. + * + * These functions should be used with caution. + */ + +#if defined(_WIN32) +namespace SimpleBLE::Advanced::Windows {} + +#endif + +#if TARGET_OS_OSX +namespace SimpleBLE::Advanced::MacOS {} + +#endif + +#if TARGET_OS_IOS +namespace SimpleBLE::Advanced::iOS {} + +#endif + +#if defined(__ANDROID__) + +#include + +namespace SimpleBLE::Advanced::Android { + +JavaVM* SIMPLEBLE_EXPORT get_jvm(); +void SIMPLEBLE_EXPORT set_jvm(JavaVM* jvm); + +} // namespace SimpleBLE::Advanced::Android + +#endif + +#if defined(__linux__) && !defined(__ANDROID__) +namespace SimpleBLE::Advanced::Linux {} + +#endif \ No newline at end of file diff --git a/simpleble/simpleble/include/simpleble/Backend.h b/simpleble/simpleble/include/simpleble/Backend.h new file mode 100644 index 0000000..93f24f2 --- /dev/null +++ b/simpleble/simpleble/include/simpleble/Backend.h @@ -0,0 +1,51 @@ +#pragma once + +#include +#include +#include + +#include +#include + +namespace SimpleBLE { + +class BackendBase; + +class SIMPLEBLE_EXPORT Backend { + friend class Adapter; + public: + Backend() = default; + virtual ~Backend() = default; + + bool initialized() const; + + /** + * Get a list of all available adapters from this backend. + */ + std::vector adapters(); + + /** + * Check if Bluetooth is enabled for this backend. + */ + bool bluetooth_enabled(); + + /** + * Get the identifier of the backend. + */ + std::string identifier() const noexcept; + + /** + * Get all available backends. + * + * This will cause backends to be instantiated/initialized. + */ + static std::vector get_backends(); + + protected: + BackendBase* operator->(); + const BackendBase* operator->() const; + + std::shared_ptr internal_; +}; + +} // namespace SimpleBLE diff --git a/simpleble/simpleble/include/simpleble/Characteristic.h b/simpleble/simpleble/include/simpleble/Characteristic.h new file mode 100644 index 0000000..1100286 --- /dev/null +++ b/simpleble/simpleble/include/simpleble/Characteristic.h @@ -0,0 +1,39 @@ +#pragma once + +#include + +#include + +#include +#include +#include + +namespace SimpleBLE { + +class CharacteristicBase; + +class SIMPLEBLE_EXPORT Characteristic { + public: + Characteristic() = default; + virtual ~Characteristic() = default; + + bool initialized() const; + + BluetoothUUID uuid(); + std::vector descriptors(); + std::vector capabilities(); + + bool can_read(); + bool can_write_request(); + bool can_write_command(); + bool can_notify(); + bool can_indicate(); + + protected: + CharacteristicBase* operator->(); + const CharacteristicBase* operator->() const; + + std::shared_ptr internal_; +}; + +} // namespace SimpleBLE diff --git a/simpleble/simpleble/include/simpleble/Config.h b/simpleble/simpleble/include/simpleble/Config.h new file mode 100644 index 0000000..324c442 --- /dev/null +++ b/simpleble/simpleble/include/simpleble/Config.h @@ -0,0 +1,78 @@ +#pragma once +#include +#include + +//clang-format off +namespace SimpleBLE { +/** + * @namespace SimpleBLE::Config + * @brief Configuration options for SimpleBLE. + * + * @note All configuration values must be set prior to any other interaction with a SimpleBLE component. + * Changes made after an adapter has been retrieved may not take effect or could lead to undefined behavior. + */ +namespace Config { +namespace SimpleBluez { + extern SIMPLEBLE_EXPORT bool use_legacy_bluez_backend; + extern SIMPLEBLE_EXPORT bool use_system_bus; // NOTE: This is only available in the new Bluez backend. + extern SIMPLEBLE_EXPORT std::chrono::steady_clock::duration connection_timeout; + extern SIMPLEBLE_EXPORT std::chrono::steady_clock::duration disconnection_timeout; + + static void reset() { + use_legacy_bluez_backend = false; + use_system_bus = true; + connection_timeout = std::chrono::seconds(2); + disconnection_timeout = std::chrono::seconds(1); + } +} // namespace SimpleBluez + +namespace WinRT { + /** + * @deprecated SimpleBLE uses its own MTA apartment by default. This compatibility flag will be removed in a future release. + */ + extern SIMPLEBLE_EXPORT bool experimental_use_own_mta_apartment; + extern SIMPLEBLE_EXPORT bool experimental_reinitialize_winrt_apartment_on_main_thread; + extern SIMPLEBLE_EXPORT bool use_deferred_disconnect; + + static void reset() { + experimental_use_own_mta_apartment = true; + experimental_reinitialize_winrt_apartment_on_main_thread = false; + use_deferred_disconnect = true; + } +} // namespace WinRT + +namespace CoreBluetooth { + static void reset() {} +} // namespace CoreBluetooth + +namespace Android { + enum class ConnectionPriorityRequest { DISABLED = -1, BALANCED = 0, HIGH = 1, LOW_POWER = 2, DCK = 3 }; + + extern SIMPLEBLE_EXPORT ConnectionPriorityRequest connection_priority_request; + + static void reset() { connection_priority_request = ConnectionPriorityRequest::DISABLED; } +} // namespace Android + +namespace Dongl { + extern SIMPLEBLE_EXPORT bool use_dongl_backend; + extern SIMPLEBLE_EXPORT bool auto_update; + extern SIMPLEBLE_EXPORT bool force_update; + static void reset() { + use_dongl_backend = false; + auto_update = false; + force_update = false; + } +} // namespace Dongl + +namespace Base { + static void reset_all() { + SimpleBluez::reset(); + WinRT::reset(); + CoreBluetooth::reset(); + Android::reset(); + Dongl::reset(); + } +} // namespace Base +} // namespace Config +} // namespace SimpleBLE +//clang-format on diff --git a/simpleble/simpleble/include/simpleble/Descriptor.h b/simpleble/simpleble/include/simpleble/Descriptor.h new file mode 100644 index 0000000..75bb839 --- /dev/null +++ b/simpleble/simpleble/include/simpleble/Descriptor.h @@ -0,0 +1,30 @@ +#pragma once + +#include + +#include + +#include +#include + +namespace SimpleBLE { + +class DescriptorBase; + +class SIMPLEBLE_EXPORT Descriptor { + public: + Descriptor() = default; + virtual ~Descriptor() = default; + + bool initialized() const; + + BluetoothUUID uuid(); + + protected: + DescriptorBase* operator->(); + const DescriptorBase* operator->() const; + + std::shared_ptr internal_; +}; + +} // namespace SimpleBLE diff --git a/simpleble/simpleble/include/simpleble/Exceptions.h b/simpleble/simpleble/include/simpleble/Exceptions.h new file mode 100644 index 0000000..e0e2dd7 --- /dev/null +++ b/simpleble/simpleble/include/simpleble/Exceptions.h @@ -0,0 +1,73 @@ +#pragma once + +#include +#include + +#include + +#include "Types.h" + +namespace SimpleBLE { + +namespace Exception { + +class SIMPLEBLE_EXPORT BaseException : public std::runtime_error { + public: + BaseException(const std::string& __arg) : std::runtime_error(__arg) {} +}; + +class SIMPLEBLE_EXPORT NotInitialized : public BaseException { + public: + NotInitialized(); +}; + +class SIMPLEBLE_EXPORT NotConnected : public BaseException { + public: + NotConnected(); +}; + +class SIMPLEBLE_EXPORT InvalidReference : public BaseException { + public: + InvalidReference(); +}; + +class SIMPLEBLE_EXPORT ServiceNotFound : public BaseException { + public: + ServiceNotFound(BluetoothUUID uuid); +}; + +class SIMPLEBLE_EXPORT CharacteristicNotFound : public BaseException { + public: + CharacteristicNotFound(BluetoothUUID uuid); +}; + +class SIMPLEBLE_EXPORT DescriptorNotFound : public BaseException { + public: + DescriptorNotFound(BluetoothUUID uuid); +}; + +class SIMPLEBLE_EXPORT OperationNotSupported : public BaseException { + public: + OperationNotSupported(); + OperationNotSupported(const std::string& operation, const BluetoothUUID& characteristic_uuid); +}; + +class SIMPLEBLE_EXPORT OperationFailed : public BaseException { + public: + OperationFailed(); + OperationFailed(const std::string& err_msg); +}; + +class SIMPLEBLE_EXPORT WinRTException : public BaseException { + public: + WinRTException(int32_t err_code, const std::string& err_msg); +}; + +class SIMPLEBLE_EXPORT CoreBluetoothException : public BaseException { + public: + CoreBluetoothException(const std::string& err_msg); +}; + +} // namespace Exception + +} // namespace SimpleBLE diff --git a/simpleble/simpleble/include/simpleble/Logging.h b/simpleble/simpleble/include/simpleble/Logging.h new file mode 100644 index 0000000..4aa9941 --- /dev/null +++ b/simpleble/simpleble/include/simpleble/Logging.h @@ -0,0 +1,73 @@ +#pragma once + +#include +#include +#include +#include + +#include + +namespace SimpleBLE { + +namespace Logging { + +enum Level : int { + None = 0, + Fatal, + Error, + Warn, + Info, + Debug, + Verbose, +}; + +// clang-format off +using Callback = std::function; +// clang-format on + +class SIMPLEBLE_EXPORT Logger { + public: + static Logger* get(); + + void set_level(Level level); + Level get_level(); + + void set_callback(Callback callback); + bool has_callback(); + + void log_default_stdout(); + void log_default_file(); + void log_default_file(const std::string path); + + // clang-format off + void log( + Level level, + const std::string& module, + const std::string& file, + uint32_t line, + const std::string& function, + const std::string& message); + // clang-format on + + private: + Logger(); + ~Logger(); + Logger(Logger& other) = delete; // Remove copy constructor + void operator=(const Logger&) = delete; // Remove copy assignment + + static std::string level_to_str(Level level); + + Level level_{Level::Info}; + Callback callback_{nullptr}; + std::recursive_mutex mutex_; +}; + +} // namespace Logging + +} // namespace SimpleBLE diff --git a/simpleble/simpleble/include/simpleble/Peripheral.h b/simpleble/simpleble/include/simpleble/Peripheral.h new file mode 100644 index 0000000..e2c0546 --- /dev/null +++ b/simpleble/simpleble/include/simpleble/Peripheral.h @@ -0,0 +1,82 @@ +#pragma once + +#include +#include +#include +#include +#include +#include + +#include + +#include +#include +#include + +namespace SimpleBLE { + +class PeripheralBase; + +class SIMPLEBLE_EXPORT Peripheral { + public: + Peripheral() = default; + virtual ~Peripheral() = default; + + bool initialized() const; + void* underlying() const; + + std::string identifier(); + BluetoothAddress address(); + BluetoothAddressType address_type(); + int16_t rssi(); + + /** + * @brief Provides the advertised transmit power in dBm. + * + * @note If the field has not been advertised by the peripheral, + * the returned value will be -32768. + */ + int16_t tx_power(); + uint16_t mtu(); + + void connect(); + void disconnect(); + bool is_connected(); + bool is_connectable(); + bool is_paired(); + void unpair(); + + /** + * @brief Provides a list of all services that are available on the peripheral. + * + * @note If the peripheral is not connected, it will return a list of services + * that were advertised by the device. + */ + std::vector services(); + std::map manufacturer_data(); + + /* Calling any of the methods below when the device is not connected will throw + Exception::NotConnected */ + // clang-format off + ByteArray read(BluetoothUUID const& service, BluetoothUUID const& characteristic); + void write_request(BluetoothUUID const& service, BluetoothUUID const& characteristic, ByteArray const& data); + void write_command(BluetoothUUID const& service, BluetoothUUID const& characteristic, ByteArray const& data); + void notify(BluetoothUUID const& service, BluetoothUUID const& characteristic, std::function callback); + void indicate(BluetoothUUID const& service, BluetoothUUID const& characteristic, std::function callback); + void unsubscribe(BluetoothUUID const& service, BluetoothUUID const& characteristic); + + ByteArray read(BluetoothUUID const& service, BluetoothUUID const& characteristic, BluetoothUUID const& descriptor); + void write(BluetoothUUID const& service, BluetoothUUID const& characteristic, BluetoothUUID const& descriptor, ByteArray const& data); + // clang-format on + + void set_callback_on_connected(std::function on_connected); + void set_callback_on_disconnected(std::function on_disconnected); + + protected: + PeripheralBase* operator->(); + const PeripheralBase* operator->() const; + + std::shared_ptr internal_; +}; + +} // namespace SimpleBLE diff --git a/simpleble/simpleble/include/simpleble/PeripheralSafe.h b/simpleble/simpleble/include/simpleble/PeripheralSafe.h new file mode 100644 index 0000000..7b97f1c --- /dev/null +++ b/simpleble/simpleble/include/simpleble/PeripheralSafe.h @@ -0,0 +1,64 @@ +#pragma once + +#include +#include + +#include + +#include +#include + +namespace SimpleBLE { + +namespace Safe { + +class SIMPLEBLE_EXPORT Peripheral { + public: + Peripheral(SimpleBLE::Peripheral& peripheral); + Peripheral(SimpleBLE::Peripheral&& peripheral); + virtual ~Peripheral() = default; + + std::optional identifier() noexcept; + std::optional address() noexcept; + std::optional address_type() noexcept; + std::optional rssi() noexcept; + std::optional tx_power() noexcept; + std::optional mtu() noexcept; + + bool connect() noexcept; + bool disconnect() noexcept; + std::optional is_connected() noexcept; + std::optional is_connectable() noexcept; + std::optional is_paired() noexcept; + bool unpair() noexcept; + + std::optional> services() noexcept; + std::optional> manufacturer_data() noexcept; + + // clang-format off + std::optional read(BluetoothUUID const& service, BluetoothUUID const& characteristic) noexcept; + bool write_request(BluetoothUUID const& service, BluetoothUUID const& characteristic, ByteArray const& data) noexcept; + bool write_command(BluetoothUUID const& service, BluetoothUUID const& characteristic, ByteArray const& data) noexcept; + bool notify(BluetoothUUID const& service, BluetoothUUID const& characteristic, std::function callback) noexcept; + bool indicate(BluetoothUUID const& service, BluetoothUUID const& characteristic, std::function callback) noexcept; + bool unsubscribe(BluetoothUUID const& service, BluetoothUUID const& characteristic) noexcept; + + std::optional read(BluetoothUUID const& service, BluetoothUUID const& characteristic, BluetoothUUID const& descriptor) noexcept; + bool write(BluetoothUUID const& service, BluetoothUUID const& characteristic, BluetoothUUID const& descriptor, ByteArray const& data) noexcept; + // clang-format on + + bool set_callback_on_connected(std::function on_connected) noexcept; + bool set_callback_on_disconnected(std::function on_disconnected) noexcept; + + /** + * Get the underlying peripheral object. + */ + operator SimpleBLE::Peripheral() const noexcept; + + protected: + SimpleBLE::Peripheral internal_; +}; + +} // namespace Safe + +} // namespace SimpleBLE diff --git a/simpleble/simpleble/include/simpleble/Service.h b/simpleble/simpleble/include/simpleble/Service.h new file mode 100644 index 0000000..fb1332a --- /dev/null +++ b/simpleble/simpleble/include/simpleble/Service.h @@ -0,0 +1,34 @@ +#pragma once + +#include +#include + +#include + +#include +#include +#include "simpleble/Characteristic.h" + +namespace SimpleBLE { + +class ServiceBase; + +class SIMPLEBLE_EXPORT Service { + public: + Service() = default; + virtual ~Service() = default; + + bool initialized() const; + + BluetoothUUID uuid(); + ByteArray data(); + std::vector characteristics(); + + protected: + const ServiceBase* operator->() const; + ServiceBase* operator->(); + + std::shared_ptr internal_; +}; + +} // namespace SimpleBLE diff --git a/simpleble/simpleble/include/simpleble/SimpleBLE.h b/simpleble/simpleble/include/simpleble/SimpleBLE.h new file mode 100644 index 0000000..6df2a9b --- /dev/null +++ b/simpleble/simpleble/include/simpleble/SimpleBLE.h @@ -0,0 +1,8 @@ +#pragma once + +#include +#include +#include +#include +#include +#include diff --git a/simpleble/simpleble/include/simpleble/Types.h b/simpleble/simpleble/include/simpleble/Types.h new file mode 100644 index 0000000..918be56 --- /dev/null +++ b/simpleble/simpleble/include/simpleble/Types.h @@ -0,0 +1,49 @@ +#pragma once + +#include +#include +#include +#include "kvn/kvn_bytearray.h" + +/** + * @file Types.h + * @brief Defines types and enumerations used throughout the SimpleBLE library. + */ + +namespace SimpleBLE { + +using BluetoothAddress = std::string; + +// IDEA: Extend BluetoothUUID to include a `uuid` function that +// returns the same string, but provides a homogeneous interface. +using BluetoothUUID = std::string; + +/** + * @typedef ByteArray + * @brief Represents a byte array using kvn::bytearray from the external library. + */ +using ByteArray = kvn::bytearray; + +#ifdef ANDROID +#pragma push_macro("ANDROID") +#undef ANDROID +#define ANDROID_WAS_DEFINED +#endif + +enum class OperatingSystem { + WINDOWS, + MACOS, + IOS, + LINUX, + ANDROID, +}; + +#ifdef ANDROID_WAS_DEFINED +#pragma pop_macro("ANDROID") +#undef ANDROID_WAS_DEFINED +#endif + +// TODO: Add to_string functions for all enums. +enum BluetoothAddressType : int32_t { PUBLIC = 0, RANDOM = 1, UNSPECIFIED = 2 }; + +} // namespace SimpleBLE diff --git a/simpleble/simpleble/include/simpleble/Utils.h b/simpleble/simpleble/include/simpleble/Utils.h new file mode 100644 index 0000000..f270b7f --- /dev/null +++ b/simpleble/simpleble/include/simpleble/Utils.h @@ -0,0 +1,13 @@ +#pragma once + +#include + +#include + +namespace SimpleBLE { + +OperatingSystem SIMPLEBLE_EXPORT get_operating_system(); + +std::string SIMPLEBLE_EXPORT get_simpleble_version(); + +} // namespace SimpleBLE diff --git a/third_party/httplib.h b/third_party/httplib.h new file mode 100644 index 0000000..d29ff85 --- /dev/null +++ b/third_party/httplib.h @@ -0,0 +1,9370 @@ +// +// httplib.h +// +// Copyright (c) 2023 Yuji Hirose. All rights reserved. +// MIT License +// + +#ifndef CPPHTTPLIB_HTTPLIB_H +#define CPPHTTPLIB_HTTPLIB_H + +#define CPPHTTPLIB_VERSION "0.14.3" + +/* + * Configuration + */ + +#ifndef CPPHTTPLIB_KEEPALIVE_TIMEOUT_SECOND +#define CPPHTTPLIB_KEEPALIVE_TIMEOUT_SECOND 5 +#endif + +#ifndef CPPHTTPLIB_KEEPALIVE_MAX_COUNT +#define CPPHTTPLIB_KEEPALIVE_MAX_COUNT 5 +#endif + +#ifndef CPPHTTPLIB_CONNECTION_TIMEOUT_SECOND +#define CPPHTTPLIB_CONNECTION_TIMEOUT_SECOND 300 +#endif + +#ifndef CPPHTTPLIB_CONNECTION_TIMEOUT_USECOND +#define CPPHTTPLIB_CONNECTION_TIMEOUT_USECOND 0 +#endif + +#ifndef CPPHTTPLIB_READ_TIMEOUT_SECOND +#define CPPHTTPLIB_READ_TIMEOUT_SECOND 5 +#endif + +#ifndef CPPHTTPLIB_READ_TIMEOUT_USECOND +#define CPPHTTPLIB_READ_TIMEOUT_USECOND 0 +#endif + +#ifndef CPPHTTPLIB_WRITE_TIMEOUT_SECOND +#define CPPHTTPLIB_WRITE_TIMEOUT_SECOND 5 +#endif + +#ifndef CPPHTTPLIB_WRITE_TIMEOUT_USECOND +#define CPPHTTPLIB_WRITE_TIMEOUT_USECOND 0 +#endif + +#ifndef CPPHTTPLIB_IDLE_INTERVAL_SECOND +#define CPPHTTPLIB_IDLE_INTERVAL_SECOND 0 +#endif + +#ifndef CPPHTTPLIB_IDLE_INTERVAL_USECOND +#ifdef _WIN32 +#define CPPHTTPLIB_IDLE_INTERVAL_USECOND 10000 +#else +#define CPPHTTPLIB_IDLE_INTERVAL_USECOND 0 +#endif +#endif + +#ifndef CPPHTTPLIB_REQUEST_URI_MAX_LENGTH +#define CPPHTTPLIB_REQUEST_URI_MAX_LENGTH 8192 +#endif + +#ifndef CPPHTTPLIB_HEADER_MAX_LENGTH +#define CPPHTTPLIB_HEADER_MAX_LENGTH 8192 +#endif + +#ifndef CPPHTTPLIB_REDIRECT_MAX_COUNT +#define CPPHTTPLIB_REDIRECT_MAX_COUNT 20 +#endif + +#ifndef CPPHTTPLIB_MULTIPART_FORM_DATA_FILE_MAX_COUNT +#define CPPHTTPLIB_MULTIPART_FORM_DATA_FILE_MAX_COUNT 1024 +#endif + +#ifndef CPPHTTPLIB_PAYLOAD_MAX_LENGTH +#define CPPHTTPLIB_PAYLOAD_MAX_LENGTH ((std::numeric_limits::max)()) +#endif + +#ifndef CPPHTTPLIB_FORM_URL_ENCODED_PAYLOAD_MAX_LENGTH +#define CPPHTTPLIB_FORM_URL_ENCODED_PAYLOAD_MAX_LENGTH 8192 +#endif + +#ifndef CPPHTTPLIB_TCP_NODELAY +#define CPPHTTPLIB_TCP_NODELAY false +#endif + +#ifndef CPPHTTPLIB_RECV_BUFSIZ +#define CPPHTTPLIB_RECV_BUFSIZ size_t(4096u) +#endif + +#ifndef CPPHTTPLIB_COMPRESSION_BUFSIZ +#define CPPHTTPLIB_COMPRESSION_BUFSIZ size_t(16384u) +#endif + +#ifndef CPPHTTPLIB_THREAD_POOL_COUNT +#define CPPHTTPLIB_THREAD_POOL_COUNT \ + ((std::max)(8u, std::thread::hardware_concurrency() > 0 \ + ? std::thread::hardware_concurrency() - 1 \ + : 0)) +#endif + +#ifndef CPPHTTPLIB_RECV_FLAGS +#define CPPHTTPLIB_RECV_FLAGS 0 +#endif + +#ifndef CPPHTTPLIB_SEND_FLAGS +#define CPPHTTPLIB_SEND_FLAGS 0 +#endif + +#ifndef CPPHTTPLIB_LISTEN_BACKLOG +#define CPPHTTPLIB_LISTEN_BACKLOG 5 +#endif + +/* + * Headers + */ + +#ifdef _WIN32 +#ifndef _CRT_SECURE_NO_WARNINGS +#define _CRT_SECURE_NO_WARNINGS +#endif //_CRT_SECURE_NO_WARNINGS + +#ifndef _CRT_NONSTDC_NO_DEPRECATE +#define _CRT_NONSTDC_NO_DEPRECATE +#endif //_CRT_NONSTDC_NO_DEPRECATE + +#if defined(_MSC_VER) +#if _MSC_VER < 1900 +#error Sorry, Visual Studio versions prior to 2015 are not supported +#endif + +#pragma comment(lib, "ws2_32.lib") + +#ifdef _WIN64 +using ssize_t = __int64; +#else +using ssize_t = long; +#endif +#endif // _MSC_VER + +#ifndef S_ISREG +#define S_ISREG(m) (((m) & S_IFREG) == S_IFREG) +#endif // S_ISREG + +#ifndef S_ISDIR +#define S_ISDIR(m) (((m) & S_IFDIR) == S_IFDIR) +#endif // S_ISDIR + +#ifndef NOMINMAX +#define NOMINMAX +#endif // NOMINMAX + +#include +#include +#include + +#ifndef WSA_FLAG_NO_HANDLE_INHERIT +#define WSA_FLAG_NO_HANDLE_INHERIT 0x80 +#endif + +#ifndef strcasecmp +#define strcasecmp _stricmp +#endif // strcasecmp + +using socket_t = SOCKET; +#ifdef CPPHTTPLIB_USE_POLL +#define poll(fds, nfds, timeout) WSAPoll(fds, nfds, timeout) +#endif + +#else // not _WIN32 + +#include +#if !defined(_AIX) && !defined(__MVS__) +#include +#endif +#ifdef __MVS__ +#include +#ifndef NI_MAXHOST +#define NI_MAXHOST 1025 +#endif +#endif +#include +#include +#include +#ifdef __linux__ +#include +#endif +#include +#ifdef CPPHTTPLIB_USE_POLL +#include +#endif +#include +#include +#include +#include +#include +#include +#include + +using socket_t = int; +#ifndef INVALID_SOCKET +#define INVALID_SOCKET (-1) +#endif +#endif //_WIN32 + +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include + +#ifdef CPPHTTPLIB_OPENSSL_SUPPORT +#ifdef _WIN32 +#include + +// these are defined in wincrypt.h and it breaks compilation if BoringSSL is +// used +#undef X509_NAME +#undef X509_CERT_PAIR +#undef X509_EXTENSIONS +#undef PKCS7_SIGNER_INFO + +#ifdef _MSC_VER +#pragma comment(lib, "crypt32.lib") +#endif +#elif defined(CPPHTTPLIB_USE_CERTS_FROM_MACOSX_KEYCHAIN) && defined(__APPLE__) +#include +#if TARGET_OS_OSX +#include +#include +#endif // TARGET_OS_OSX +#endif // _WIN32 + +#include +#include +#include +#include + +#if defined(_WIN32) && defined(OPENSSL_USE_APPLINK) +#include +#endif + +#include +#include + +#if OPENSSL_VERSION_NUMBER < 0x1010100fL +#error Sorry, OpenSSL versions prior to 1.1.1 are not supported +#elif OPENSSL_VERSION_NUMBER < 0x30000000L +#define SSL_get1_peer_certificate SSL_get_peer_certificate +#endif + +#endif + +#ifdef CPPHTTPLIB_ZLIB_SUPPORT +#include +#endif + +#ifdef CPPHTTPLIB_BROTLI_SUPPORT +#include +#include +#endif + +/* + * Declaration + */ +namespace httplib { + +namespace detail { + +/* + * Backport std::make_unique from C++14. + * + * NOTE: This code came up with the following stackoverflow post: + * https://stackoverflow.com/questions/10149840/c-arrays-and-make-unique + * + */ + +template +typename std::enable_if::value, std::unique_ptr>::type +make_unique(Args &&...args) { + return std::unique_ptr(new T(std::forward(args)...)); +} + +template +typename std::enable_if::value, std::unique_ptr>::type +make_unique(std::size_t n) { + typedef typename std::remove_extent::type RT; + return std::unique_ptr(new RT[n]); +} + +struct ci { + bool operator()(const std::string &s1, const std::string &s2) const { + return std::lexicographical_compare(s1.begin(), s1.end(), s2.begin(), + s2.end(), + [](unsigned char c1, unsigned char c2) { + return ::tolower(c1) < ::tolower(c2); + }); + } +}; + +// This is based on +// "http://www.open-std.org/jtc1/sc22/wg21/docs/papers/2014/n4189". + +struct scope_exit { + explicit scope_exit(std::function &&f) + : exit_function(std::move(f)), execute_on_destruction{true} {} + + scope_exit(scope_exit &&rhs) noexcept + : exit_function(std::move(rhs.exit_function)), + execute_on_destruction{rhs.execute_on_destruction} { + rhs.release(); + } + + ~scope_exit() { + if (execute_on_destruction) { this->exit_function(); } + } + + void release() { this->execute_on_destruction = false; } + +private: + scope_exit(const scope_exit &) = delete; + void operator=(const scope_exit &) = delete; + scope_exit &operator=(scope_exit &&) = delete; + + std::function exit_function; + bool execute_on_destruction; +}; + +} // namespace detail + +enum StatusCode { + // Information responses + Continue_100 = 100, + SwitchingProtocol_101 = 101, + Processing_102 = 102, + EarlyHints_103 = 103, + + // Successful responses + OK_200 = 200, + Created_201 = 201, + Accepted_202 = 202, + NonAuthoritativeInformation_203 = 203, + NoContent_204 = 204, + ResetContent_205 = 205, + PartialContent_206 = 206, + MultiStatus_207 = 207, + AlreadyReported_208 = 208, + IMUsed_226 = 226, + + // Redirection messages + MultipleChoices_300 = 300, + MovedPermanently_301 = 301, + Found_302 = 302, + SeeOther_303 = 303, + NotModified_304 = 304, + UseProxy_305 = 305, + unused_306 = 306, + TemporaryRedirect_307 = 307, + PermanentRedirect_308 = 308, + + // Client error responses + BadRequest_400 = 400, + Unauthorized_401 = 401, + PaymentRequired_402 = 402, + Forbidden_403 = 403, + NotFound_404 = 404, + MethodNotAllowed_405 = 405, + NotAcceptable_406 = 406, + ProxyAuthenticationRequired_407 = 407, + RequestTimeout_408 = 408, + Conflict_409 = 409, + Gone_410 = 410, + LengthRequired_411 = 411, + PreconditionFailed_412 = 412, + PayloadTooLarge_413 = 413, + UriTooLong_414 = 414, + UnsupportedMediaType_415 = 415, + RangeNotSatisfiable_416 = 416, + ExpectationFailed_417 = 417, + ImATeapot_418 = 418, + MisdirectedRequest_421 = 421, + UnprocessableContent_422 = 422, + Locked_423 = 423, + FailedDependency_424 = 424, + TooEarly_425 = 425, + UpgradeRequired_426 = 426, + PreconditionRequired_428 = 428, + TooManyRequests_429 = 429, + RequestHeaderFieldsTooLarge_431 = 431, + UnavailableForLegalReasons_451 = 451, + + // Server error responses + InternalServerError_500 = 500, + NotImplemented_501 = 501, + BadGateway_502 = 502, + ServiceUnavailable_503 = 503, + GatewayTimeout_504 = 504, + HttpVersionNotSupported_505 = 505, + VariantAlsoNegotiates_506 = 506, + InsufficientStorage_507 = 507, + LoopDetected_508 = 508, + NotExtended_510 = 510, + NetworkAuthenticationRequired_511 = 511, +}; + +using Headers = std::multimap; + +using Params = std::multimap; +using Match = std::smatch; + +using Progress = std::function; + +struct Response; +using ResponseHandler = std::function; + +struct MultipartFormData { + std::string name; + std::string content; + std::string filename; + std::string content_type; +}; +using MultipartFormDataItems = std::vector; +using MultipartFormDataMap = std::multimap; + +class DataSink { +public: + DataSink() : os(&sb_), sb_(*this) {} + + DataSink(const DataSink &) = delete; + DataSink &operator=(const DataSink &) = delete; + DataSink(DataSink &&) = delete; + DataSink &operator=(DataSink &&) = delete; + + std::function write; + std::function is_writable; + std::function done; + std::function done_with_trailer; + std::ostream os; + +private: + class data_sink_streambuf : public std::streambuf { + public: + explicit data_sink_streambuf(DataSink &sink) : sink_(sink) {} + + protected: + std::streamsize xsputn(const char *s, std::streamsize n) override { + sink_.write(s, static_cast(n)); + return n; + } + + private: + DataSink &sink_; + }; + + data_sink_streambuf sb_; +}; + +using ContentProvider = + std::function; + +using ContentProviderWithoutLength = + std::function; + +using ContentProviderResourceReleaser = std::function; + +struct MultipartFormDataProvider { + std::string name; + ContentProviderWithoutLength provider; + std::string filename; + std::string content_type; +}; +using MultipartFormDataProviderItems = std::vector; + +using ContentReceiverWithProgress = + std::function; + +using ContentReceiver = + std::function; + +using MultipartContentHeader = + std::function; + +class ContentReader { +public: + using Reader = std::function; + using MultipartReader = std::function; + + ContentReader(Reader reader, MultipartReader multipart_reader) + : reader_(std::move(reader)), + multipart_reader_(std::move(multipart_reader)) {} + + bool operator()(MultipartContentHeader header, + ContentReceiver receiver) const { + return multipart_reader_(std::move(header), std::move(receiver)); + } + + bool operator()(ContentReceiver receiver) const { + return reader_(std::move(receiver)); + } + + Reader reader_; + MultipartReader multipart_reader_; +}; + +using Range = std::pair; +using Ranges = std::vector; + +struct Request { + std::string method; + std::string path; + Headers headers; + std::string body; + + std::string remote_addr; + int remote_port = -1; + std::string local_addr; + int local_port = -1; + + // for server + std::string version; + std::string target; + Params params; + MultipartFormDataMap files; + Ranges ranges; + Match matches; + std::unordered_map path_params; + + // for client + ResponseHandler response_handler; + ContentReceiverWithProgress content_receiver; + Progress progress; +#ifdef CPPHTTPLIB_OPENSSL_SUPPORT + const SSL *ssl = nullptr; +#endif + + bool has_header(const std::string &key) const; + std::string get_header_value(const std::string &key, size_t id = 0) const; + uint64_t get_header_value_u64(const std::string &key, size_t id = 0) const; + size_t get_header_value_count(const std::string &key) const; + void set_header(const std::string &key, const std::string &val); + + bool has_param(const std::string &key) const; + std::string get_param_value(const std::string &key, size_t id = 0) const; + size_t get_param_value_count(const std::string &key) const; + + bool is_multipart_form_data() const; + + bool has_file(const std::string &key) const; + MultipartFormData get_file_value(const std::string &key) const; + std::vector get_file_values(const std::string &key) const; + + // private members... + size_t redirect_count_ = CPPHTTPLIB_REDIRECT_MAX_COUNT; + size_t content_length_ = 0; + ContentProvider content_provider_; + bool is_chunked_content_provider_ = false; + size_t authorization_count_ = 0; +}; + +struct Response { + std::string version; + int status = -1; + std::string reason; + Headers headers; + std::string body; + std::string location; // Redirect location + + bool has_header(const std::string &key) const; + std::string get_header_value(const std::string &key, size_t id = 0) const; + uint64_t get_header_value_u64(const std::string &key, size_t id = 0) const; + size_t get_header_value_count(const std::string &key) const; + void set_header(const std::string &key, const std::string &val); + + void set_redirect(const std::string &url, int status = StatusCode::Found_302); + void set_content(const char *s, size_t n, const std::string &content_type); + void set_content(const std::string &s, const std::string &content_type); + + void set_content_provider( + size_t length, const std::string &content_type, ContentProvider provider, + ContentProviderResourceReleaser resource_releaser = nullptr); + + void set_content_provider( + const std::string &content_type, ContentProviderWithoutLength provider, + ContentProviderResourceReleaser resource_releaser = nullptr); + + void set_chunked_content_provider( + const std::string &content_type, ContentProviderWithoutLength provider, + ContentProviderResourceReleaser resource_releaser = nullptr); + + Response() = default; + Response(const Response &) = default; + Response &operator=(const Response &) = default; + Response(Response &&) = default; + Response &operator=(Response &&) = default; + ~Response() { + if (content_provider_resource_releaser_) { + content_provider_resource_releaser_(content_provider_success_); + } + } + + // private members... + size_t content_length_ = 0; + ContentProvider content_provider_; + ContentProviderResourceReleaser content_provider_resource_releaser_; + bool is_chunked_content_provider_ = false; + bool content_provider_success_ = false; +}; + +class Stream { +public: + virtual ~Stream() = default; + + virtual bool is_readable() const = 0; + virtual bool is_writable() const = 0; + + virtual ssize_t read(char *ptr, size_t size) = 0; + virtual ssize_t write(const char *ptr, size_t size) = 0; + virtual void get_remote_ip_and_port(std::string &ip, int &port) const = 0; + virtual void get_local_ip_and_port(std::string &ip, int &port) const = 0; + virtual socket_t socket() const = 0; + + template + ssize_t write_format(const char *fmt, const Args &...args); + ssize_t write(const char *ptr); + ssize_t write(const std::string &s); +}; + +class TaskQueue { +public: + TaskQueue() = default; + virtual ~TaskQueue() = default; + + virtual void enqueue(std::function fn) = 0; + virtual void shutdown() = 0; + + virtual void on_idle() {} +}; + +class ThreadPool : public TaskQueue { +public: + explicit ThreadPool(size_t n) : shutdown_(false) { + while (n) { + threads_.emplace_back(worker(*this)); + n--; + } + } + + ThreadPool(const ThreadPool &) = delete; + ~ThreadPool() override = default; + + void enqueue(std::function fn) override { + { + std::unique_lock lock(mutex_); + jobs_.push_back(std::move(fn)); + } + + cond_.notify_one(); + } + + void shutdown() override { + // Stop all worker threads... + { + std::unique_lock lock(mutex_); + shutdown_ = true; + } + + cond_.notify_all(); + + // Join... + for (auto &t : threads_) { + t.join(); + } + } + +private: + struct worker { + explicit worker(ThreadPool &pool) : pool_(pool) {} + + void operator()() { + for (;;) { + std::function fn; + { + std::unique_lock lock(pool_.mutex_); + + pool_.cond_.wait( + lock, [&] { return !pool_.jobs_.empty() || pool_.shutdown_; }); + + if (pool_.shutdown_ && pool_.jobs_.empty()) { break; } + + fn = std::move(pool_.jobs_.front()); + pool_.jobs_.pop_front(); + } + + assert(true == static_cast(fn)); + fn(); + } + } + + ThreadPool &pool_; + }; + friend struct worker; + + std::vector threads_; + std::list> jobs_; + + bool shutdown_; + + std::condition_variable cond_; + std::mutex mutex_; +}; + +using Logger = std::function; + +using SocketOptions = std::function; + +void default_socket_options(socket_t sock); + +const char *status_message(int status); + +namespace detail { + +class MatcherBase { +public: + virtual ~MatcherBase() = default; + + // Match request path and populate its matches and + virtual bool match(Request &request) const = 0; +}; + +/** + * Captures parameters in request path and stores them in Request::path_params + * + * Capture name is a substring of a pattern from : to /. + * The rest of the pattern is matched agains the request path directly + * Parameters are captured starting from the next character after + * the end of the last matched static pattern fragment until the next /. + * + * Example pattern: + * "/path/fragments/:capture/more/fragments/:second_capture" + * Static fragments: + * "/path/fragments/", "more/fragments/" + * + * Given the following request path: + * "/path/fragments/:1/more/fragments/:2" + * the resulting capture will be + * {{"capture", "1"}, {"second_capture", "2"}} + */ +class PathParamsMatcher : public MatcherBase { +public: + PathParamsMatcher(const std::string &pattern); + + bool match(Request &request) const override; + +private: + static constexpr char marker = ':'; + // Treat segment separators as the end of path parameter capture + // Does not need to handle query parameters as they are parsed before path + // matching + static constexpr char separator = '/'; + + // Contains static path fragments to match against, excluding the '/' after + // path params + // Fragments are separated by path params + std::vector static_fragments_; + // Stores the names of the path parameters to be used as keys in the + // Request::path_params map + std::vector param_names_; +}; + +/** + * Performs std::regex_match on request path + * and stores the result in Request::matches + * + * Note that regex match is performed directly on the whole request. + * This means that wildcard patterns may match multiple path segments with /: + * "/begin/(.*)/end" will match both "/begin/middle/end" and "/begin/1/2/end". + */ +class RegexMatcher : public MatcherBase { +public: + RegexMatcher(const std::string &pattern) : regex_(pattern) {} + + bool match(Request &request) const override; + +private: + std::regex regex_; +}; + +ssize_t write_headers(Stream &strm, const Headers &headers); + +} // namespace detail + +class Server { +public: + using Handler = std::function; + + using ExceptionHandler = + std::function; + + enum class HandlerResponse { + Handled, + Unhandled, + }; + using HandlerWithResponse = + std::function; + + using HandlerWithContentReader = std::function; + + using Expect100ContinueHandler = + std::function; + + Server(); + + virtual ~Server(); + + virtual bool is_valid() const; + + Server &Get(const std::string &pattern, Handler handler); + Server &Post(const std::string &pattern, Handler handler); + Server &Post(const std::string &pattern, HandlerWithContentReader handler); + Server &Put(const std::string &pattern, Handler handler); + Server &Put(const std::string &pattern, HandlerWithContentReader handler); + Server &Patch(const std::string &pattern, Handler handler); + Server &Patch(const std::string &pattern, HandlerWithContentReader handler); + Server &Delete(const std::string &pattern, Handler handler); + Server &Delete(const std::string &pattern, HandlerWithContentReader handler); + Server &Options(const std::string &pattern, Handler handler); + + bool set_base_dir(const std::string &dir, + const std::string &mount_point = std::string()); + bool set_mount_point(const std::string &mount_point, const std::string &dir, + Headers headers = Headers()); + bool remove_mount_point(const std::string &mount_point); + Server &set_file_extension_and_mimetype_mapping(const std::string &ext, + const std::string &mime); + Server &set_default_file_mimetype(const std::string &mime); + Server &set_file_request_handler(Handler handler); + + Server &set_error_handler(HandlerWithResponse handler); + Server &set_error_handler(Handler handler); + Server &set_exception_handler(ExceptionHandler handler); + Server &set_pre_routing_handler(HandlerWithResponse handler); + Server &set_post_routing_handler(Handler handler); + + Server &set_expect_100_continue_handler(Expect100ContinueHandler handler); + Server &set_logger(Logger logger); + + Server &set_address_family(int family); + Server &set_tcp_nodelay(bool on); + Server &set_socket_options(SocketOptions socket_options); + + Server &set_default_headers(Headers headers); + Server & + set_header_writer(std::function const &writer); + + Server &set_keep_alive_max_count(size_t count); + Server &set_keep_alive_timeout(time_t sec); + + Server &set_read_timeout(time_t sec, time_t usec = 0); + template + Server &set_read_timeout(const std::chrono::duration &duration); + + Server &set_write_timeout(time_t sec, time_t usec = 0); + template + Server &set_write_timeout(const std::chrono::duration &duration); + + Server &set_idle_interval(time_t sec, time_t usec = 0); + template + Server &set_idle_interval(const std::chrono::duration &duration); + + Server &set_payload_max_length(size_t length); + + bool bind_to_port(const std::string &host, int port, int socket_flags = 0); + int bind_to_any_port(const std::string &host, int socket_flags = 0); + bool listen_after_bind(); + + bool listen(const std::string &host, int port, int socket_flags = 0); + + bool is_running() const; + void wait_until_ready() const; + void stop(); + + std::function new_task_queue; + +protected: + bool process_request(Stream &strm, bool close_connection, + bool &connection_closed, + const std::function &setup_request); + + std::atomic svr_sock_{INVALID_SOCKET}; + size_t keep_alive_max_count_ = CPPHTTPLIB_KEEPALIVE_MAX_COUNT; + time_t keep_alive_timeout_sec_ = CPPHTTPLIB_KEEPALIVE_TIMEOUT_SECOND; + time_t read_timeout_sec_ = CPPHTTPLIB_READ_TIMEOUT_SECOND; + time_t read_timeout_usec_ = CPPHTTPLIB_READ_TIMEOUT_USECOND; + time_t write_timeout_sec_ = CPPHTTPLIB_WRITE_TIMEOUT_SECOND; + time_t write_timeout_usec_ = CPPHTTPLIB_WRITE_TIMEOUT_USECOND; + time_t idle_interval_sec_ = CPPHTTPLIB_IDLE_INTERVAL_SECOND; + time_t idle_interval_usec_ = CPPHTTPLIB_IDLE_INTERVAL_USECOND; + size_t payload_max_length_ = CPPHTTPLIB_PAYLOAD_MAX_LENGTH; + +private: + using Handlers = + std::vector, Handler>>; + using HandlersForContentReader = + std::vector, + HandlerWithContentReader>>; + + static std::unique_ptr + make_matcher(const std::string &pattern); + + socket_t create_server_socket(const std::string &host, int port, + int socket_flags, + SocketOptions socket_options) const; + int bind_internal(const std::string &host, int port, int socket_flags); + bool listen_internal(); + + bool routing(Request &req, Response &res, Stream &strm); + bool handle_file_request(const Request &req, Response &res, + bool head = false); + bool dispatch_request(Request &req, Response &res, + const Handlers &handlers) const; + bool dispatch_request_for_content_reader( + Request &req, Response &res, ContentReader content_reader, + const HandlersForContentReader &handlers) const; + + bool parse_request_line(const char *s, Request &req) const; + void apply_ranges(const Request &req, Response &res, + std::string &content_type, std::string &boundary) const; + bool write_response(Stream &strm, bool close_connection, const Request &req, + Response &res); + bool write_response_with_content(Stream &strm, bool close_connection, + const Request &req, Response &res); + bool write_response_core(Stream &strm, bool close_connection, + const Request &req, Response &res, + bool need_apply_ranges); + bool write_content_with_provider(Stream &strm, const Request &req, + Response &res, const std::string &boundary, + const std::string &content_type); + bool read_content(Stream &strm, Request &req, Response &res); + bool + read_content_with_content_receiver(Stream &strm, Request &req, Response &res, + ContentReceiver receiver, + MultipartContentHeader multipart_header, + ContentReceiver multipart_receiver); + bool read_content_core(Stream &strm, Request &req, Response &res, + ContentReceiver receiver, + MultipartContentHeader multipart_header, + ContentReceiver multipart_receiver) const; + + virtual bool process_and_close_socket(socket_t sock); + + std::atomic is_running_{false}; + std::atomic done_{false}; + + struct MountPointEntry { + std::string mount_point; + std::string base_dir; + Headers headers; + }; + std::vector base_dirs_; + std::map file_extension_and_mimetype_map_; + std::string default_file_mimetype_ = "application/octet-stream"; + Handler file_request_handler_; + + Handlers get_handlers_; + Handlers post_handlers_; + HandlersForContentReader post_handlers_for_content_reader_; + Handlers put_handlers_; + HandlersForContentReader put_handlers_for_content_reader_; + Handlers patch_handlers_; + HandlersForContentReader patch_handlers_for_content_reader_; + Handlers delete_handlers_; + HandlersForContentReader delete_handlers_for_content_reader_; + Handlers options_handlers_; + + HandlerWithResponse error_handler_; + ExceptionHandler exception_handler_; + HandlerWithResponse pre_routing_handler_; + Handler post_routing_handler_; + Expect100ContinueHandler expect_100_continue_handler_; + + Logger logger_; + + int address_family_ = AF_UNSPEC; + bool tcp_nodelay_ = CPPHTTPLIB_TCP_NODELAY; + SocketOptions socket_options_ = default_socket_options; + + Headers default_headers_; + std::function header_writer_ = + detail::write_headers; +}; + +enum class Error { + Success = 0, + Unknown, + Connection, + BindIPAddress, + Read, + Write, + ExceedRedirectCount, + Canceled, + SSLConnection, + SSLLoadingCerts, + SSLServerVerification, + UnsupportedMultipartBoundaryChars, + Compression, + ConnectionTimeout, + ProxyConnection, + + // For internal use only + SSLPeerCouldBeClosed_, +}; + +std::string to_string(Error error); + +std::ostream &operator<<(std::ostream &os, const Error &obj); + +class Result { +public: + Result() = default; + Result(std::unique_ptr &&res, Error err, + Headers &&request_headers = Headers{}) + : res_(std::move(res)), err_(err), + request_headers_(std::move(request_headers)) {} + // Response + operator bool() const { return res_ != nullptr; } + bool operator==(std::nullptr_t) const { return res_ == nullptr; } + bool operator!=(std::nullptr_t) const { return res_ != nullptr; } + const Response &value() const { return *res_; } + Response &value() { return *res_; } + const Response &operator*() const { return *res_; } + Response &operator*() { return *res_; } + const Response *operator->() const { return res_.get(); } + Response *operator->() { return res_.get(); } + + // Error + Error error() const { return err_; } + + // Request Headers + bool has_request_header(const std::string &key) const; + std::string get_request_header_value(const std::string &key, + size_t id = 0) const; + uint64_t get_request_header_value_u64(const std::string &key, + size_t id = 0) const; + size_t get_request_header_value_count(const std::string &key) const; + +private: + std::unique_ptr res_; + Error err_ = Error::Unknown; + Headers request_headers_; +}; + +class ClientImpl { +public: + explicit ClientImpl(const std::string &host); + + explicit ClientImpl(const std::string &host, int port); + + explicit ClientImpl(const std::string &host, int port, + const std::string &client_cert_path, + const std::string &client_key_path); + + virtual ~ClientImpl(); + + virtual bool is_valid() const; + + Result Get(const std::string &path); + Result Get(const std::string &path, const Headers &headers); + Result Get(const std::string &path, Progress progress); + Result Get(const std::string &path, const Headers &headers, + Progress progress); + Result Get(const std::string &path, ContentReceiver content_receiver); + Result Get(const std::string &path, const Headers &headers, + ContentReceiver content_receiver); + Result Get(const std::string &path, ContentReceiver content_receiver, + Progress progress); + Result Get(const std::string &path, const Headers &headers, + ContentReceiver content_receiver, Progress progress); + Result Get(const std::string &path, ResponseHandler response_handler, + ContentReceiver content_receiver); + Result Get(const std::string &path, const Headers &headers, + ResponseHandler response_handler, + ContentReceiver content_receiver); + Result Get(const std::string &path, ResponseHandler response_handler, + ContentReceiver content_receiver, Progress progress); + Result Get(const std::string &path, const Headers &headers, + ResponseHandler response_handler, ContentReceiver content_receiver, + Progress progress); + + Result Get(const std::string &path, const Params ¶ms, + const Headers &headers, Progress progress = nullptr); + Result Get(const std::string &path, const Params ¶ms, + const Headers &headers, ContentReceiver content_receiver, + Progress progress = nullptr); + Result Get(const std::string &path, const Params ¶ms, + const Headers &headers, ResponseHandler response_handler, + ContentReceiver content_receiver, Progress progress = nullptr); + + Result Head(const std::string &path); + Result Head(const std::string &path, const Headers &headers); + + Result Post(const std::string &path); + Result Post(const std::string &path, const Headers &headers); + Result Post(const std::string &path, const char *body, size_t content_length, + const std::string &content_type); + Result Post(const std::string &path, const Headers &headers, const char *body, + size_t content_length, const std::string &content_type); + Result Post(const std::string &path, const std::string &body, + const std::string &content_type); + Result Post(const std::string &path, const Headers &headers, + const std::string &body, const std::string &content_type); + Result Post(const std::string &path, size_t content_length, + ContentProvider content_provider, + const std::string &content_type); + Result Post(const std::string &path, + ContentProviderWithoutLength content_provider, + const std::string &content_type); + Result Post(const std::string &path, const Headers &headers, + size_t content_length, ContentProvider content_provider, + const std::string &content_type); + Result Post(const std::string &path, const Headers &headers, + ContentProviderWithoutLength content_provider, + const std::string &content_type); + Result Post(const std::string &path, const Params ¶ms); + Result Post(const std::string &path, const Headers &headers, + const Params ¶ms); + Result Post(const std::string &path, const MultipartFormDataItems &items); + Result Post(const std::string &path, const Headers &headers, + const MultipartFormDataItems &items); + Result Post(const std::string &path, const Headers &headers, + const MultipartFormDataItems &items, const std::string &boundary); + Result Post(const std::string &path, const Headers &headers, + const MultipartFormDataItems &items, + const MultipartFormDataProviderItems &provider_items); + + Result Put(const std::string &path); + Result Put(const std::string &path, const char *body, size_t content_length, + const std::string &content_type); + Result Put(const std::string &path, const Headers &headers, const char *body, + size_t content_length, const std::string &content_type); + Result Put(const std::string &path, const std::string &body, + const std::string &content_type); + Result Put(const std::string &path, const Headers &headers, + const std::string &body, const std::string &content_type); + Result Put(const std::string &path, size_t content_length, + ContentProvider content_provider, const std::string &content_type); + Result Put(const std::string &path, + ContentProviderWithoutLength content_provider, + const std::string &content_type); + Result Put(const std::string &path, const Headers &headers, + size_t content_length, ContentProvider content_provider, + const std::string &content_type); + Result Put(const std::string &path, const Headers &headers, + ContentProviderWithoutLength content_provider, + const std::string &content_type); + Result Put(const std::string &path, const Params ¶ms); + Result Put(const std::string &path, const Headers &headers, + const Params ¶ms); + Result Put(const std::string &path, const MultipartFormDataItems &items); + Result Put(const std::string &path, const Headers &headers, + const MultipartFormDataItems &items); + Result Put(const std::string &path, const Headers &headers, + const MultipartFormDataItems &items, const std::string &boundary); + Result Put(const std::string &path, const Headers &headers, + const MultipartFormDataItems &items, + const MultipartFormDataProviderItems &provider_items); + + Result Patch(const std::string &path); + Result Patch(const std::string &path, const char *body, size_t content_length, + const std::string &content_type); + Result Patch(const std::string &path, const Headers &headers, + const char *body, size_t content_length, + const std::string &content_type); + Result Patch(const std::string &path, const std::string &body, + const std::string &content_type); + Result Patch(const std::string &path, const Headers &headers, + const std::string &body, const std::string &content_type); + Result Patch(const std::string &path, size_t content_length, + ContentProvider content_provider, + const std::string &content_type); + Result Patch(const std::string &path, + ContentProviderWithoutLength content_provider, + const std::string &content_type); + Result Patch(const std::string &path, const Headers &headers, + size_t content_length, ContentProvider content_provider, + const std::string &content_type); + Result Patch(const std::string &path, const Headers &headers, + ContentProviderWithoutLength content_provider, + const std::string &content_type); + + Result Delete(const std::string &path); + Result Delete(const std::string &path, const Headers &headers); + Result Delete(const std::string &path, const char *body, + size_t content_length, const std::string &content_type); + Result Delete(const std::string &path, const Headers &headers, + const char *body, size_t content_length, + const std::string &content_type); + Result Delete(const std::string &path, const std::string &body, + const std::string &content_type); + Result Delete(const std::string &path, const Headers &headers, + const std::string &body, const std::string &content_type); + + Result Options(const std::string &path); + Result Options(const std::string &path, const Headers &headers); + + bool send(Request &req, Response &res, Error &error); + Result send(const Request &req); + + void stop(); + + std::string host() const; + int port() const; + + size_t is_socket_open() const; + socket_t socket() const; + + void set_hostname_addr_map(std::map addr_map); + + void set_default_headers(Headers headers); + + void + set_header_writer(std::function const &writer); + + void set_address_family(int family); + void set_tcp_nodelay(bool on); + void set_socket_options(SocketOptions socket_options); + + void set_connection_timeout(time_t sec, time_t usec = 0); + template + void + set_connection_timeout(const std::chrono::duration &duration); + + void set_read_timeout(time_t sec, time_t usec = 0); + template + void set_read_timeout(const std::chrono::duration &duration); + + void set_write_timeout(time_t sec, time_t usec = 0); + template + void set_write_timeout(const std::chrono::duration &duration); + + void set_basic_auth(const std::string &username, const std::string &password); + void set_bearer_token_auth(const std::string &token); +#ifdef CPPHTTPLIB_OPENSSL_SUPPORT + void set_digest_auth(const std::string &username, + const std::string &password); +#endif + + void set_keep_alive(bool on); + void set_follow_location(bool on); + + void set_url_encode(bool on); + + void set_compress(bool on); + + void set_decompress(bool on); + + void set_interface(const std::string &intf); + + void set_proxy(const std::string &host, int port); + void set_proxy_basic_auth(const std::string &username, + const std::string &password); + void set_proxy_bearer_token_auth(const std::string &token); +#ifdef CPPHTTPLIB_OPENSSL_SUPPORT + void set_proxy_digest_auth(const std::string &username, + const std::string &password); +#endif + +#ifdef CPPHTTPLIB_OPENSSL_SUPPORT + void set_ca_cert_path(const std::string &ca_cert_file_path, + const std::string &ca_cert_dir_path = std::string()); + void set_ca_cert_store(X509_STORE *ca_cert_store); + X509_STORE *create_ca_cert_store(const char *ca_cert, std::size_t size) const; +#endif + +#ifdef CPPHTTPLIB_OPENSSL_SUPPORT + void enable_server_certificate_verification(bool enabled); +#endif + + void set_logger(Logger logger); + +protected: + struct Socket { + socket_t sock = INVALID_SOCKET; +#ifdef CPPHTTPLIB_OPENSSL_SUPPORT + SSL *ssl = nullptr; +#endif + + bool is_open() const { return sock != INVALID_SOCKET; } + }; + + virtual bool create_and_connect_socket(Socket &socket, Error &error); + + // All of: + // shutdown_ssl + // shutdown_socket + // close_socket + // should ONLY be called when socket_mutex_ is locked. + // Also, shutdown_ssl and close_socket should also NOT be called concurrently + // with a DIFFERENT thread sending requests using that socket. + virtual void shutdown_ssl(Socket &socket, bool shutdown_gracefully); + void shutdown_socket(Socket &socket) const; + void close_socket(Socket &socket); + + bool process_request(Stream &strm, Request &req, Response &res, + bool close_connection, Error &error); + + bool write_content_with_provider(Stream &strm, const Request &req, + Error &error) const; + + void copy_settings(const ClientImpl &rhs); + + // Socket endpoint information + const std::string host_; + const int port_; + const std::string host_and_port_; + + // Current open socket + Socket socket_; + mutable std::mutex socket_mutex_; + std::recursive_mutex request_mutex_; + + // These are all protected under socket_mutex + size_t socket_requests_in_flight_ = 0; + std::thread::id socket_requests_are_from_thread_ = std::thread::id(); + bool socket_should_be_closed_when_request_is_done_ = false; + + // Hostname-IP map + std::map addr_map_; + + // Default headers + Headers default_headers_; + + // Header writer + std::function header_writer_ = + detail::write_headers; + + // Settings + std::string client_cert_path_; + std::string client_key_path_; + + time_t connection_timeout_sec_ = CPPHTTPLIB_CONNECTION_TIMEOUT_SECOND; + time_t connection_timeout_usec_ = CPPHTTPLIB_CONNECTION_TIMEOUT_USECOND; + time_t read_timeout_sec_ = CPPHTTPLIB_READ_TIMEOUT_SECOND; + time_t read_timeout_usec_ = CPPHTTPLIB_READ_TIMEOUT_USECOND; + time_t write_timeout_sec_ = CPPHTTPLIB_WRITE_TIMEOUT_SECOND; + time_t write_timeout_usec_ = CPPHTTPLIB_WRITE_TIMEOUT_USECOND; + + std::string basic_auth_username_; + std::string basic_auth_password_; + std::string bearer_token_auth_token_; +#ifdef CPPHTTPLIB_OPENSSL_SUPPORT + std::string digest_auth_username_; + std::string digest_auth_password_; +#endif + + bool keep_alive_ = false; + bool follow_location_ = false; + + bool url_encode_ = true; + + int address_family_ = AF_UNSPEC; + bool tcp_nodelay_ = CPPHTTPLIB_TCP_NODELAY; + SocketOptions socket_options_ = nullptr; + + bool compress_ = false; + bool decompress_ = true; + + std::string interface_; + + std::string proxy_host_; + int proxy_port_ = -1; + + std::string proxy_basic_auth_username_; + std::string proxy_basic_auth_password_; + std::string proxy_bearer_token_auth_token_; +#ifdef CPPHTTPLIB_OPENSSL_SUPPORT + std::string proxy_digest_auth_username_; + std::string proxy_digest_auth_password_; +#endif + +#ifdef CPPHTTPLIB_OPENSSL_SUPPORT + std::string ca_cert_file_path_; + std::string ca_cert_dir_path_; + + X509_STORE *ca_cert_store_ = nullptr; +#endif + +#ifdef CPPHTTPLIB_OPENSSL_SUPPORT + bool server_certificate_verification_ = true; +#endif + + Logger logger_; + +private: + bool send_(Request &req, Response &res, Error &error); + Result send_(Request &&req); + + socket_t create_client_socket(Error &error) const; + bool read_response_line(Stream &strm, const Request &req, + Response &res) const; + bool write_request(Stream &strm, Request &req, bool close_connection, + Error &error); + bool redirect(Request &req, Response &res, Error &error); + bool handle_request(Stream &strm, Request &req, Response &res, + bool close_connection, Error &error); + std::unique_ptr send_with_content_provider( + Request &req, const char *body, size_t content_length, + ContentProvider content_provider, + ContentProviderWithoutLength content_provider_without_length, + const std::string &content_type, Error &error); + Result send_with_content_provider( + const std::string &method, const std::string &path, + const Headers &headers, const char *body, size_t content_length, + ContentProvider content_provider, + ContentProviderWithoutLength content_provider_without_length, + const std::string &content_type); + ContentProviderWithoutLength get_multipart_content_provider( + const std::string &boundary, const MultipartFormDataItems &items, + const MultipartFormDataProviderItems &provider_items) const; + + std::string adjust_host_string(const std::string &host) const; + + virtual bool process_socket(const Socket &socket, + std::function callback); + virtual bool is_ssl() const; +}; + +class Client { +public: + // Universal interface + explicit Client(const std::string &scheme_host_port); + + explicit Client(const std::string &scheme_host_port, + const std::string &client_cert_path, + const std::string &client_key_path); + + // HTTP only interface + explicit Client(const std::string &host, int port); + + explicit Client(const std::string &host, int port, + const std::string &client_cert_path, + const std::string &client_key_path); + + Client(Client &&) = default; + + ~Client(); + + bool is_valid() const; + + Result Get(const std::string &path); + Result Get(const std::string &path, const Headers &headers); + Result Get(const std::string &path, Progress progress); + Result Get(const std::string &path, const Headers &headers, + Progress progress); + Result Get(const std::string &path, ContentReceiver content_receiver); + Result Get(const std::string &path, const Headers &headers, + ContentReceiver content_receiver); + Result Get(const std::string &path, ContentReceiver content_receiver, + Progress progress); + Result Get(const std::string &path, const Headers &headers, + ContentReceiver content_receiver, Progress progress); + Result Get(const std::string &path, ResponseHandler response_handler, + ContentReceiver content_receiver); + Result Get(const std::string &path, const Headers &headers, + ResponseHandler response_handler, + ContentReceiver content_receiver); + Result Get(const std::string &path, const Headers &headers, + ResponseHandler response_handler, ContentReceiver content_receiver, + Progress progress); + Result Get(const std::string &path, ResponseHandler response_handler, + ContentReceiver content_receiver, Progress progress); + + Result Get(const std::string &path, const Params ¶ms, + const Headers &headers, Progress progress = nullptr); + Result Get(const std::string &path, const Params ¶ms, + const Headers &headers, ContentReceiver content_receiver, + Progress progress = nullptr); + Result Get(const std::string &path, const Params ¶ms, + const Headers &headers, ResponseHandler response_handler, + ContentReceiver content_receiver, Progress progress = nullptr); + + Result Head(const std::string &path); + Result Head(const std::string &path, const Headers &headers); + + Result Post(const std::string &path); + Result Post(const std::string &path, const Headers &headers); + Result Post(const std::string &path, const char *body, size_t content_length, + const std::string &content_type); + Result Post(const std::string &path, const Headers &headers, const char *body, + size_t content_length, const std::string &content_type); + Result Post(const std::string &path, const std::string &body, + const std::string &content_type); + Result Post(const std::string &path, const Headers &headers, + const std::string &body, const std::string &content_type); + Result Post(const std::string &path, size_t content_length, + ContentProvider content_provider, + const std::string &content_type); + Result Post(const std::string &path, + ContentProviderWithoutLength content_provider, + const std::string &content_type); + Result Post(const std::string &path, const Headers &headers, + size_t content_length, ContentProvider content_provider, + const std::string &content_type); + Result Post(const std::string &path, const Headers &headers, + ContentProviderWithoutLength content_provider, + const std::string &content_type); + Result Post(const std::string &path, const Params ¶ms); + Result Post(const std::string &path, const Headers &headers, + const Params ¶ms); + Result Post(const std::string &path, const MultipartFormDataItems &items); + Result Post(const std::string &path, const Headers &headers, + const MultipartFormDataItems &items); + Result Post(const std::string &path, const Headers &headers, + const MultipartFormDataItems &items, const std::string &boundary); + Result Post(const std::string &path, const Headers &headers, + const MultipartFormDataItems &items, + const MultipartFormDataProviderItems &provider_items); + + Result Put(const std::string &path); + Result Put(const std::string &path, const char *body, size_t content_length, + const std::string &content_type); + Result Put(const std::string &path, const Headers &headers, const char *body, + size_t content_length, const std::string &content_type); + Result Put(const std::string &path, const std::string &body, + const std::string &content_type); + Result Put(const std::string &path, const Headers &headers, + const std::string &body, const std::string &content_type); + Result Put(const std::string &path, size_t content_length, + ContentProvider content_provider, const std::string &content_type); + Result Put(const std::string &path, + ContentProviderWithoutLength content_provider, + const std::string &content_type); + Result Put(const std::string &path, const Headers &headers, + size_t content_length, ContentProvider content_provider, + const std::string &content_type); + Result Put(const std::string &path, const Headers &headers, + ContentProviderWithoutLength content_provider, + const std::string &content_type); + Result Put(const std::string &path, const Params ¶ms); + Result Put(const std::string &path, const Headers &headers, + const Params ¶ms); + Result Put(const std::string &path, const MultipartFormDataItems &items); + Result Put(const std::string &path, const Headers &headers, + const MultipartFormDataItems &items); + Result Put(const std::string &path, const Headers &headers, + const MultipartFormDataItems &items, const std::string &boundary); + Result Put(const std::string &path, const Headers &headers, + const MultipartFormDataItems &items, + const MultipartFormDataProviderItems &provider_items); + + Result Patch(const std::string &path); + Result Patch(const std::string &path, const char *body, size_t content_length, + const std::string &content_type); + Result Patch(const std::string &path, const Headers &headers, + const char *body, size_t content_length, + const std::string &content_type); + Result Patch(const std::string &path, const std::string &body, + const std::string &content_type); + Result Patch(const std::string &path, const Headers &headers, + const std::string &body, const std::string &content_type); + Result Patch(const std::string &path, size_t content_length, + ContentProvider content_provider, + const std::string &content_type); + Result Patch(const std::string &path, + ContentProviderWithoutLength content_provider, + const std::string &content_type); + Result Patch(const std::string &path, const Headers &headers, + size_t content_length, ContentProvider content_provider, + const std::string &content_type); + Result Patch(const std::string &path, const Headers &headers, + ContentProviderWithoutLength content_provider, + const std::string &content_type); + + Result Delete(const std::string &path); + Result Delete(const std::string &path, const Headers &headers); + Result Delete(const std::string &path, const char *body, + size_t content_length, const std::string &content_type); + Result Delete(const std::string &path, const Headers &headers, + const char *body, size_t content_length, + const std::string &content_type); + Result Delete(const std::string &path, const std::string &body, + const std::string &content_type); + Result Delete(const std::string &path, const Headers &headers, + const std::string &body, const std::string &content_type); + + Result Options(const std::string &path); + Result Options(const std::string &path, const Headers &headers); + + bool send(Request &req, Response &res, Error &error); + Result send(const Request &req); + + void stop(); + + std::string host() const; + int port() const; + + size_t is_socket_open() const; + socket_t socket() const; + + void set_hostname_addr_map(std::map addr_map); + + void set_default_headers(Headers headers); + + void + set_header_writer(std::function const &writer); + + void set_address_family(int family); + void set_tcp_nodelay(bool on); + void set_socket_options(SocketOptions socket_options); + + void set_connection_timeout(time_t sec, time_t usec = 0); + template + void + set_connection_timeout(const std::chrono::duration &duration); + + void set_read_timeout(time_t sec, time_t usec = 0); + template + void set_read_timeout(const std::chrono::duration &duration); + + void set_write_timeout(time_t sec, time_t usec = 0); + template + void set_write_timeout(const std::chrono::duration &duration); + + void set_basic_auth(const std::string &username, const std::string &password); + void set_bearer_token_auth(const std::string &token); +#ifdef CPPHTTPLIB_OPENSSL_SUPPORT + void set_digest_auth(const std::string &username, + const std::string &password); +#endif + + void set_keep_alive(bool on); + void set_follow_location(bool on); + + void set_url_encode(bool on); + + void set_compress(bool on); + + void set_decompress(bool on); + + void set_interface(const std::string &intf); + + void set_proxy(const std::string &host, int port); + void set_proxy_basic_auth(const std::string &username, + const std::string &password); + void set_proxy_bearer_token_auth(const std::string &token); +#ifdef CPPHTTPLIB_OPENSSL_SUPPORT + void set_proxy_digest_auth(const std::string &username, + const std::string &password); +#endif + +#ifdef CPPHTTPLIB_OPENSSL_SUPPORT + void enable_server_certificate_verification(bool enabled); +#endif + + void set_logger(Logger logger); + + // SSL +#ifdef CPPHTTPLIB_OPENSSL_SUPPORT + void set_ca_cert_path(const std::string &ca_cert_file_path, + const std::string &ca_cert_dir_path = std::string()); + + void set_ca_cert_store(X509_STORE *ca_cert_store); + void load_ca_cert_store(const char *ca_cert, std::size_t size); + + long get_openssl_verify_result() const; + + SSL_CTX *ssl_context() const; +#endif + +private: + std::unique_ptr cli_; + +#ifdef CPPHTTPLIB_OPENSSL_SUPPORT + bool is_ssl_ = false; +#endif +}; + +#ifdef CPPHTTPLIB_OPENSSL_SUPPORT +class SSLServer : public Server { +public: + SSLServer(const char *cert_path, const char *private_key_path, + const char *client_ca_cert_file_path = nullptr, + const char *client_ca_cert_dir_path = nullptr, + const char *private_key_password = nullptr); + + SSLServer(X509 *cert, EVP_PKEY *private_key, + X509_STORE *client_ca_cert_store = nullptr); + + SSLServer( + const std::function &setup_ssl_ctx_callback); + + ~SSLServer() override; + + bool is_valid() const override; + + SSL_CTX *ssl_context() const; + +private: + bool process_and_close_socket(socket_t sock) override; + + SSL_CTX *ctx_; + std::mutex ctx_mutex_; +}; + +class SSLClient : public ClientImpl { +public: + explicit SSLClient(const std::string &host); + + explicit SSLClient(const std::string &host, int port); + + explicit SSLClient(const std::string &host, int port, + const std::string &client_cert_path, + const std::string &client_key_path); + + explicit SSLClient(const std::string &host, int port, X509 *client_cert, + EVP_PKEY *client_key); + + ~SSLClient() override; + + bool is_valid() const override; + + void set_ca_cert_store(X509_STORE *ca_cert_store); + void load_ca_cert_store(const char *ca_cert, std::size_t size); + + long get_openssl_verify_result() const; + + SSL_CTX *ssl_context() const; + +private: + bool create_and_connect_socket(Socket &socket, Error &error) override; + void shutdown_ssl(Socket &socket, bool shutdown_gracefully) override; + void shutdown_ssl_impl(Socket &socket, bool shutdown_gracefully); + + bool process_socket(const Socket &socket, + std::function callback) override; + bool is_ssl() const override; + + bool connect_with_proxy(Socket &sock, Response &res, bool &success, + Error &error); + bool initialize_ssl(Socket &socket, Error &error); + + bool load_certs(); + + bool verify_host(X509 *server_cert) const; + bool verify_host_with_subject_alt_name(X509 *server_cert) const; + bool verify_host_with_common_name(X509 *server_cert) const; + bool check_host_name(const char *pattern, size_t pattern_len) const; + + SSL_CTX *ctx_; + std::mutex ctx_mutex_; + std::once_flag initialize_cert_; + + std::vector host_components_; + + long verify_result_ = 0; + + friend class ClientImpl; +}; +#endif + +/* + * Implementation of template methods. + */ + +namespace detail { + +template +inline void duration_to_sec_and_usec(const T &duration, U callback) { + auto sec = std::chrono::duration_cast(duration).count(); + auto usec = std::chrono::duration_cast( + duration - std::chrono::seconds(sec)) + .count(); + callback(static_cast(sec), static_cast(usec)); +} + +inline uint64_t get_header_value_u64(const Headers &headers, + const std::string &key, size_t id, + uint64_t def) { + auto rng = headers.equal_range(key); + auto it = rng.first; + std::advance(it, static_cast(id)); + if (it != rng.second) { + return std::strtoull(it->second.data(), nullptr, 10); + } + return def; +} + +} // namespace detail + +inline uint64_t Request::get_header_value_u64(const std::string &key, + size_t id) const { + return detail::get_header_value_u64(headers, key, id, 0); +} + +inline uint64_t Response::get_header_value_u64(const std::string &key, + size_t id) const { + return detail::get_header_value_u64(headers, key, id, 0); +} + +template +inline ssize_t Stream::write_format(const char *fmt, const Args &...args) { + const auto bufsiz = 2048; + std::array buf{}; + + auto sn = snprintf(buf.data(), buf.size() - 1, fmt, args...); + if (sn <= 0) { return sn; } + + auto n = static_cast(sn); + + if (n >= buf.size() - 1) { + std::vector glowable_buf(buf.size()); + + while (n >= glowable_buf.size() - 1) { + glowable_buf.resize(glowable_buf.size() * 2); + n = static_cast( + snprintf(&glowable_buf[0], glowable_buf.size() - 1, fmt, args...)); + } + return write(&glowable_buf[0], n); + } else { + return write(buf.data(), n); + } +} + +inline void default_socket_options(socket_t sock) { + int yes = 1; +#ifdef _WIN32 + setsockopt(sock, SOL_SOCKET, SO_REUSEADDR, + reinterpret_cast(&yes), sizeof(yes)); + setsockopt(sock, SOL_SOCKET, SO_EXCLUSIVEADDRUSE, + reinterpret_cast(&yes), sizeof(yes)); +#else +#ifdef SO_REUSEPORT + setsockopt(sock, SOL_SOCKET, SO_REUSEPORT, + reinterpret_cast(&yes), sizeof(yes)); +#else + setsockopt(sock, SOL_SOCKET, SO_REUSEADDR, + reinterpret_cast(&yes), sizeof(yes)); +#endif +#endif +} + +inline const char *status_message(int status) { + switch (status) { + case StatusCode::Continue_100: return "Continue"; + case StatusCode::SwitchingProtocol_101: return "Switching Protocol"; + case StatusCode::Processing_102: return "Processing"; + case StatusCode::EarlyHints_103: return "Early Hints"; + case StatusCode::OK_200: return "OK"; + case StatusCode::Created_201: return "Created"; + case StatusCode::Accepted_202: return "Accepted"; + case StatusCode::NonAuthoritativeInformation_203: + return "Non-Authoritative Information"; + case StatusCode::NoContent_204: return "No Content"; + case StatusCode::ResetContent_205: return "Reset Content"; + case StatusCode::PartialContent_206: return "Partial Content"; + case StatusCode::MultiStatus_207: return "Multi-Status"; + case StatusCode::AlreadyReported_208: return "Already Reported"; + case StatusCode::IMUsed_226: return "IM Used"; + case StatusCode::MultipleChoices_300: return "Multiple Choices"; + case StatusCode::MovedPermanently_301: return "Moved Permanently"; + case StatusCode::Found_302: return "Found"; + case StatusCode::SeeOther_303: return "See Other"; + case StatusCode::NotModified_304: return "Not Modified"; + case StatusCode::UseProxy_305: return "Use Proxy"; + case StatusCode::unused_306: return "unused"; + case StatusCode::TemporaryRedirect_307: return "Temporary Redirect"; + case StatusCode::PermanentRedirect_308: return "Permanent Redirect"; + case StatusCode::BadRequest_400: return "Bad Request"; + case StatusCode::Unauthorized_401: return "Unauthorized"; + case StatusCode::PaymentRequired_402: return "Payment Required"; + case StatusCode::Forbidden_403: return "Forbidden"; + case StatusCode::NotFound_404: return "Not Found"; + case StatusCode::MethodNotAllowed_405: return "Method Not Allowed"; + case StatusCode::NotAcceptable_406: return "Not Acceptable"; + case StatusCode::ProxyAuthenticationRequired_407: + return "Proxy Authentication Required"; + case StatusCode::RequestTimeout_408: return "Request Timeout"; + case StatusCode::Conflict_409: return "Conflict"; + case StatusCode::Gone_410: return "Gone"; + case StatusCode::LengthRequired_411: return "Length Required"; + case StatusCode::PreconditionFailed_412: return "Precondition Failed"; + case StatusCode::PayloadTooLarge_413: return "Payload Too Large"; + case StatusCode::UriTooLong_414: return "URI Too Long"; + case StatusCode::UnsupportedMediaType_415: return "Unsupported Media Type"; + case StatusCode::RangeNotSatisfiable_416: return "Range Not Satisfiable"; + case StatusCode::ExpectationFailed_417: return "Expectation Failed"; + case StatusCode::ImATeapot_418: return "I'm a teapot"; + case StatusCode::MisdirectedRequest_421: return "Misdirected Request"; + case StatusCode::UnprocessableContent_422: return "Unprocessable Content"; + case StatusCode::Locked_423: return "Locked"; + case StatusCode::FailedDependency_424: return "Failed Dependency"; + case StatusCode::TooEarly_425: return "Too Early"; + case StatusCode::UpgradeRequired_426: return "Upgrade Required"; + case StatusCode::PreconditionRequired_428: return "Precondition Required"; + case StatusCode::TooManyRequests_429: return "Too Many Requests"; + case StatusCode::RequestHeaderFieldsTooLarge_431: + return "Request Header Fields Too Large"; + case StatusCode::UnavailableForLegalReasons_451: + return "Unavailable For Legal Reasons"; + case StatusCode::NotImplemented_501: return "Not Implemented"; + case StatusCode::BadGateway_502: return "Bad Gateway"; + case StatusCode::ServiceUnavailable_503: return "Service Unavailable"; + case StatusCode::GatewayTimeout_504: return "Gateway Timeout"; + case StatusCode::HttpVersionNotSupported_505: + return "HTTP Version Not Supported"; + case StatusCode::VariantAlsoNegotiates_506: return "Variant Also Negotiates"; + case StatusCode::InsufficientStorage_507: return "Insufficient Storage"; + case StatusCode::LoopDetected_508: return "Loop Detected"; + case StatusCode::NotExtended_510: return "Not Extended"; + case StatusCode::NetworkAuthenticationRequired_511: + return "Network Authentication Required"; + + default: + case StatusCode::InternalServerError_500: return "Internal Server Error"; + } +} + +template +inline Server & +Server::set_read_timeout(const std::chrono::duration &duration) { + detail::duration_to_sec_and_usec( + duration, [&](time_t sec, time_t usec) { set_read_timeout(sec, usec); }); + return *this; +} + +template +inline Server & +Server::set_write_timeout(const std::chrono::duration &duration) { + detail::duration_to_sec_and_usec( + duration, [&](time_t sec, time_t usec) { set_write_timeout(sec, usec); }); + return *this; +} + +template +inline Server & +Server::set_idle_interval(const std::chrono::duration &duration) { + detail::duration_to_sec_and_usec( + duration, [&](time_t sec, time_t usec) { set_idle_interval(sec, usec); }); + return *this; +} + +inline std::string to_string(const Error error) { + switch (error) { + case Error::Success: return "Success (no error)"; + case Error::Connection: return "Could not establish connection"; + case Error::BindIPAddress: return "Failed to bind IP address"; + case Error::Read: return "Failed to read connection"; + case Error::Write: return "Failed to write connection"; + case Error::ExceedRedirectCount: return "Maximum redirect count exceeded"; + case Error::Canceled: return "Connection handling canceled"; + case Error::SSLConnection: return "SSL connection failed"; + case Error::SSLLoadingCerts: return "SSL certificate loading failed"; + case Error::SSLServerVerification: return "SSL server verification failed"; + case Error::UnsupportedMultipartBoundaryChars: + return "Unsupported HTTP multipart boundary characters"; + case Error::Compression: return "Compression failed"; + case Error::ConnectionTimeout: return "Connection timed out"; + case Error::ProxyConnection: return "Proxy connection failed"; + case Error::Unknown: return "Unknown"; + default: break; + } + + return "Invalid"; +} + +inline std::ostream &operator<<(std::ostream &os, const Error &obj) { + os << to_string(obj); + os << " (" << static_cast::type>(obj) << ')'; + return os; +} + +inline uint64_t Result::get_request_header_value_u64(const std::string &key, + size_t id) const { + return detail::get_header_value_u64(request_headers_, key, id, 0); +} + +template +inline void ClientImpl::set_connection_timeout( + const std::chrono::duration &duration) { + detail::duration_to_sec_and_usec(duration, [&](time_t sec, time_t usec) { + set_connection_timeout(sec, usec); + }); +} + +template +inline void ClientImpl::set_read_timeout( + const std::chrono::duration &duration) { + detail::duration_to_sec_and_usec( + duration, [&](time_t sec, time_t usec) { set_read_timeout(sec, usec); }); +} + +template +inline void ClientImpl::set_write_timeout( + const std::chrono::duration &duration) { + detail::duration_to_sec_and_usec( + duration, [&](time_t sec, time_t usec) { set_write_timeout(sec, usec); }); +} + +template +inline void Client::set_connection_timeout( + const std::chrono::duration &duration) { + cli_->set_connection_timeout(duration); +} + +template +inline void +Client::set_read_timeout(const std::chrono::duration &duration) { + cli_->set_read_timeout(duration); +} + +template +inline void +Client::set_write_timeout(const std::chrono::duration &duration) { + cli_->set_write_timeout(duration); +} + +/* + * Forward declarations and types that will be part of the .h file if split into + * .h + .cc. + */ + +std::string hosted_at(const std::string &hostname); + +void hosted_at(const std::string &hostname, std::vector &addrs); + +std::string append_query_params(const std::string &path, const Params ¶ms); + +std::pair make_range_header(Ranges ranges); + +std::pair +make_basic_authentication_header(const std::string &username, + const std::string &password, + bool is_proxy = false); + +namespace detail { + +std::string encode_query_param(const std::string &value); + +std::string decode_url(const std::string &s, bool convert_plus_to_space); + +void read_file(const std::string &path, std::string &out); + +std::string trim_copy(const std::string &s); + +void split(const char *b, const char *e, char d, + std::function fn); + +void split(const char *b, const char *e, char d, size_t m, + std::function fn); + +bool process_client_socket(socket_t sock, time_t read_timeout_sec, + time_t read_timeout_usec, time_t write_timeout_sec, + time_t write_timeout_usec, + std::function callback); + +socket_t create_client_socket( + const std::string &host, const std::string &ip, int port, + int address_family, bool tcp_nodelay, SocketOptions socket_options, + time_t connection_timeout_sec, time_t connection_timeout_usec, + time_t read_timeout_sec, time_t read_timeout_usec, time_t write_timeout_sec, + time_t write_timeout_usec, const std::string &intf, Error &error); + +const char *get_header_value(const Headers &headers, const std::string &key, + size_t id = 0, const char *def = nullptr); + +std::string params_to_query_str(const Params ¶ms); + +void parse_query_text(const std::string &s, Params ¶ms); + +bool parse_multipart_boundary(const std::string &content_type, + std::string &boundary); + +bool parse_range_header(const std::string &s, Ranges &ranges); + +int close_socket(socket_t sock); + +ssize_t send_socket(socket_t sock, const void *ptr, size_t size, int flags); + +ssize_t read_socket(socket_t sock, void *ptr, size_t size, int flags); + +enum class EncodingType { None = 0, Gzip, Brotli }; + +EncodingType encoding_type(const Request &req, const Response &res); + +class BufferStream : public Stream { +public: + BufferStream() = default; + ~BufferStream() override = default; + + bool is_readable() const override; + bool is_writable() const override; + ssize_t read(char *ptr, size_t size) override; + ssize_t write(const char *ptr, size_t size) override; + void get_remote_ip_and_port(std::string &ip, int &port) const override; + void get_local_ip_and_port(std::string &ip, int &port) const override; + socket_t socket() const override; + + const std::string &get_buffer() const; + +private: + std::string buffer; + size_t position = 0; +}; + +class compressor { +public: + virtual ~compressor() = default; + + typedef std::function Callback; + virtual bool compress(const char *data, size_t data_length, bool last, + Callback callback) = 0; +}; + +class decompressor { +public: + virtual ~decompressor() = default; + + virtual bool is_valid() const = 0; + + typedef std::function Callback; + virtual bool decompress(const char *data, size_t data_length, + Callback callback) = 0; +}; + +class nocompressor : public compressor { +public: + ~nocompressor() override = default; + + bool compress(const char *data, size_t data_length, bool /*last*/, + Callback callback) override; +}; + +#ifdef CPPHTTPLIB_ZLIB_SUPPORT +class gzip_compressor : public compressor { +public: + gzip_compressor(); + ~gzip_compressor() override; + + bool compress(const char *data, size_t data_length, bool last, + Callback callback) override; + +private: + bool is_valid_ = false; + z_stream strm_; +}; + +class gzip_decompressor : public decompressor { +public: + gzip_decompressor(); + ~gzip_decompressor() override; + + bool is_valid() const override; + + bool decompress(const char *data, size_t data_length, + Callback callback) override; + +private: + bool is_valid_ = false; + z_stream strm_; +}; +#endif + +#ifdef CPPHTTPLIB_BROTLI_SUPPORT +class brotli_compressor : public compressor { +public: + brotli_compressor(); + ~brotli_compressor(); + + bool compress(const char *data, size_t data_length, bool last, + Callback callback) override; + +private: + BrotliEncoderState *state_ = nullptr; +}; + +class brotli_decompressor : public decompressor { +public: + brotli_decompressor(); + ~brotli_decompressor(); + + bool is_valid() const override; + + bool decompress(const char *data, size_t data_length, + Callback callback) override; + +private: + BrotliDecoderResult decoder_r; + BrotliDecoderState *decoder_s = nullptr; +}; +#endif + +// NOTE: until the read size reaches `fixed_buffer_size`, use `fixed_buffer` +// to store data. The call can set memory on stack for performance. +class stream_line_reader { +public: + stream_line_reader(Stream &strm, char *fixed_buffer, + size_t fixed_buffer_size); + const char *ptr() const; + size_t size() const; + bool end_with_crlf() const; + bool getline(); + +private: + void append(char c); + + Stream &strm_; + char *fixed_buffer_; + const size_t fixed_buffer_size_; + size_t fixed_buffer_used_size_ = 0; + std::string glowable_buffer_; +}; + +class mmap { +public: + mmap(const char *path); + ~mmap(); + + bool open(const char *path); + void close(); + + bool is_open() const; + size_t size() const; + const char *data() const; + +private: +#if defined(_WIN32) + HANDLE hFile_; + HANDLE hMapping_; +#else + int fd_; +#endif + size_t size_; + void *addr_; +}; + +} // namespace detail + +// ---------------------------------------------------------------------------- + +/* + * Implementation that will be part of the .cc file if split into .h + .cc. + */ + +namespace detail { + +inline bool is_hex(char c, int &v) { + if (0x20 <= c && isdigit(c)) { + v = c - '0'; + return true; + } else if ('A' <= c && c <= 'F') { + v = c - 'A' + 10; + return true; + } else if ('a' <= c && c <= 'f') { + v = c - 'a' + 10; + return true; + } + return false; +} + +inline bool from_hex_to_i(const std::string &s, size_t i, size_t cnt, + int &val) { + if (i >= s.size()) { return false; } + + val = 0; + for (; cnt; i++, cnt--) { + if (!s[i]) { return false; } + auto v = 0; + if (is_hex(s[i], v)) { + val = val * 16 + v; + } else { + return false; + } + } + return true; +} + +inline std::string from_i_to_hex(size_t n) { + static const auto charset = "0123456789abcdef"; + std::string ret; + do { + ret = charset[n & 15] + ret; + n >>= 4; + } while (n > 0); + return ret; +} + +inline size_t to_utf8(int code, char *buff) { + if (code < 0x0080) { + buff[0] = static_cast(code & 0x7F); + return 1; + } else if (code < 0x0800) { + buff[0] = static_cast(0xC0 | ((code >> 6) & 0x1F)); + buff[1] = static_cast(0x80 | (code & 0x3F)); + return 2; + } else if (code < 0xD800) { + buff[0] = static_cast(0xE0 | ((code >> 12) & 0xF)); + buff[1] = static_cast(0x80 | ((code >> 6) & 0x3F)); + buff[2] = static_cast(0x80 | (code & 0x3F)); + return 3; + } else if (code < 0xE000) { // D800 - DFFF is invalid... + return 0; + } else if (code < 0x10000) { + buff[0] = static_cast(0xE0 | ((code >> 12) & 0xF)); + buff[1] = static_cast(0x80 | ((code >> 6) & 0x3F)); + buff[2] = static_cast(0x80 | (code & 0x3F)); + return 3; + } else if (code < 0x110000) { + buff[0] = static_cast(0xF0 | ((code >> 18) & 0x7)); + buff[1] = static_cast(0x80 | ((code >> 12) & 0x3F)); + buff[2] = static_cast(0x80 | ((code >> 6) & 0x3F)); + buff[3] = static_cast(0x80 | (code & 0x3F)); + return 4; + } + + // NOTREACHED + return 0; +} + +// NOTE: This code came up with the following stackoverflow post: +// https://stackoverflow.com/questions/180947/base64-decode-snippet-in-c +inline std::string base64_encode(const std::string &in) { + static const auto lookup = + "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"; + + std::string out; + out.reserve(in.size()); + + auto val = 0; + auto valb = -6; + + for (auto c : in) { + val = (val << 8) + static_cast(c); + valb += 8; + while (valb >= 0) { + out.push_back(lookup[(val >> valb) & 0x3F]); + valb -= 6; + } + } + + if (valb > -6) { out.push_back(lookup[((val << 8) >> (valb + 8)) & 0x3F]); } + + while (out.size() % 4) { + out.push_back('='); + } + + return out; +} + +inline bool is_file(const std::string &path) { +#ifdef _WIN32 + return _access_s(path.c_str(), 0) == 0; +#else + struct stat st; + return stat(path.c_str(), &st) >= 0 && S_ISREG(st.st_mode); +#endif +} + +inline bool is_dir(const std::string &path) { + struct stat st; + return stat(path.c_str(), &st) >= 0 && S_ISDIR(st.st_mode); +} + +inline bool is_valid_path(const std::string &path) { + size_t level = 0; + size_t i = 0; + + // Skip slash + while (i < path.size() && path[i] == '/') { + i++; + } + + while (i < path.size()) { + // Read component + auto beg = i; + while (i < path.size() && path[i] != '/') { + i++; + } + + auto len = i - beg; + assert(len > 0); + + if (!path.compare(beg, len, ".")) { + ; + } else if (!path.compare(beg, len, "..")) { + if (level == 0) { return false; } + level--; + } else { + level++; + } + + // Skip slash + while (i < path.size() && path[i] == '/') { + i++; + } + } + + return true; +} + +inline std::string encode_query_param(const std::string &value) { + std::ostringstream escaped; + escaped.fill('0'); + escaped << std::hex; + + for (auto c : value) { + if (std::isalnum(static_cast(c)) || c == '-' || c == '_' || + c == '.' || c == '!' || c == '~' || c == '*' || c == '\'' || c == '(' || + c == ')') { + escaped << c; + } else { + escaped << std::uppercase; + escaped << '%' << std::setw(2) + << static_cast(static_cast(c)); + escaped << std::nouppercase; + } + } + + return escaped.str(); +} + +inline std::string encode_url(const std::string &s) { + std::string result; + result.reserve(s.size()); + + for (size_t i = 0; s[i]; i++) { + switch (s[i]) { + case ' ': result += "%20"; break; + case '+': result += "%2B"; break; + case '\r': result += "%0D"; break; + case '\n': result += "%0A"; break; + case '\'': result += "%27"; break; + case ',': result += "%2C"; break; + // case ':': result += "%3A"; break; // ok? probably... + case ';': result += "%3B"; break; + default: + auto c = static_cast(s[i]); + if (c >= 0x80) { + result += '%'; + char hex[4]; + auto len = snprintf(hex, sizeof(hex) - 1, "%02X", c); + assert(len == 2); + result.append(hex, static_cast(len)); + } else { + result += s[i]; + } + break; + } + } + + return result; +} + +inline std::string decode_url(const std::string &s, + bool convert_plus_to_space) { + std::string result; + + for (size_t i = 0; i < s.size(); i++) { + if (s[i] == '%' && i + 1 < s.size()) { + if (s[i + 1] == 'u') { + auto val = 0; + if (from_hex_to_i(s, i + 2, 4, val)) { + // 4 digits Unicode codes + char buff[4]; + size_t len = to_utf8(val, buff); + if (len > 0) { result.append(buff, len); } + i += 5; // 'u0000' + } else { + result += s[i]; + } + } else { + auto val = 0; + if (from_hex_to_i(s, i + 1, 2, val)) { + // 2 digits hex codes + result += static_cast(val); + i += 2; // '00' + } else { + result += s[i]; + } + } + } else if (convert_plus_to_space && s[i] == '+') { + result += ' '; + } else { + result += s[i]; + } + } + + return result; +} + +inline void read_file(const std::string &path, std::string &out) { + std::ifstream fs(path, std::ios_base::binary); + fs.seekg(0, std::ios_base::end); + auto size = fs.tellg(); + fs.seekg(0); + out.resize(static_cast(size)); + fs.read(&out[0], static_cast(size)); +} + +inline std::string file_extension(const std::string &path) { + std::smatch m; + static auto re = std::regex("\\.([a-zA-Z0-9]+)$"); + if (std::regex_search(path, m, re)) { return m[1].str(); } + return std::string(); +} + +inline bool is_space_or_tab(char c) { return c == ' ' || c == '\t'; } + +inline std::pair trim(const char *b, const char *e, size_t left, + size_t right) { + while (b + left < e && is_space_or_tab(b[left])) { + left++; + } + while (right > 0 && is_space_or_tab(b[right - 1])) { + right--; + } + return std::make_pair(left, right); +} + +inline std::string trim_copy(const std::string &s) { + auto r = trim(s.data(), s.data() + s.size(), 0, s.size()); + return s.substr(r.first, r.second - r.first); +} + +inline std::string trim_double_quotes_copy(const std::string &s) { + if (s.length() >= 2 && s.front() == '"' && s.back() == '"') { + return s.substr(1, s.size() - 2); + } + return s; +} + +inline void split(const char *b, const char *e, char d, + std::function fn) { + return split(b, e, d, std::numeric_limits::max(), fn); +} + +inline void split(const char *b, const char *e, char d, size_t m, + std::function fn) { + size_t i = 0; + size_t beg = 0; + size_t count = 1; + + while (e ? (b + i < e) : (b[i] != '\0')) { + if (b[i] == d && count < m) { + auto r = trim(b, e, beg, i); + if (r.first < r.second) { fn(&b[r.first], &b[r.second]); } + beg = i + 1; + count++; + } + i++; + } + + if (i) { + auto r = trim(b, e, beg, i); + if (r.first < r.second) { fn(&b[r.first], &b[r.second]); } + } +} + +inline stream_line_reader::stream_line_reader(Stream &strm, char *fixed_buffer, + size_t fixed_buffer_size) + : strm_(strm), fixed_buffer_(fixed_buffer), + fixed_buffer_size_(fixed_buffer_size) {} + +inline const char *stream_line_reader::ptr() const { + if (glowable_buffer_.empty()) { + return fixed_buffer_; + } else { + return glowable_buffer_.data(); + } +} + +inline size_t stream_line_reader::size() const { + if (glowable_buffer_.empty()) { + return fixed_buffer_used_size_; + } else { + return glowable_buffer_.size(); + } +} + +inline bool stream_line_reader::end_with_crlf() const { + auto end = ptr() + size(); + return size() >= 2 && end[-2] == '\r' && end[-1] == '\n'; +} + +inline bool stream_line_reader::getline() { + fixed_buffer_used_size_ = 0; + glowable_buffer_.clear(); + + for (size_t i = 0;; i++) { + char byte; + auto n = strm_.read(&byte, 1); + + if (n < 0) { + return false; + } else if (n == 0) { + if (i == 0) { + return false; + } else { + break; + } + } + + append(byte); + + if (byte == '\n') { break; } + } + + return true; +} + +inline void stream_line_reader::append(char c) { + if (fixed_buffer_used_size_ < fixed_buffer_size_ - 1) { + fixed_buffer_[fixed_buffer_used_size_++] = c; + fixed_buffer_[fixed_buffer_used_size_] = '\0'; + } else { + if (glowable_buffer_.empty()) { + assert(fixed_buffer_[fixed_buffer_used_size_] == '\0'); + glowable_buffer_.assign(fixed_buffer_, fixed_buffer_used_size_); + } + glowable_buffer_ += c; + } +} + +inline mmap::mmap(const char *path) +#if defined(_WIN32) + : hFile_(NULL), hMapping_(NULL) +#else + : fd_(-1) +#endif + , + size_(0), addr_(nullptr) { + open(path); +} + +inline mmap::~mmap() { close(); } + +inline bool mmap::open(const char *path) { + close(); + +#if defined(_WIN32) + hFile_ = ::CreateFileA(path, GENERIC_READ, FILE_SHARE_READ, NULL, + OPEN_EXISTING, FILE_ATTRIBUTE_NORMAL, NULL); + + if (hFile_ == INVALID_HANDLE_VALUE) { return false; } + + size_ = ::GetFileSize(hFile_, NULL); + + hMapping_ = ::CreateFileMapping(hFile_, NULL, PAGE_READONLY, 0, 0, NULL); + + if (hMapping_ == NULL) { + close(); + return false; + } + + addr_ = ::MapViewOfFile(hMapping_, FILE_MAP_READ, 0, 0, 0); +#else + fd_ = ::open(path, O_RDONLY); + if (fd_ == -1) { return false; } + + struct stat sb; + if (fstat(fd_, &sb) == -1) { + close(); + return false; + } + size_ = static_cast(sb.st_size); + + addr_ = ::mmap(NULL, size_, PROT_READ, MAP_PRIVATE, fd_, 0); +#endif + + if (addr_ == nullptr) { + close(); + return false; + } + + return true; +} + +inline bool mmap::is_open() const { return addr_ != nullptr; } + +inline size_t mmap::size() const { return size_; } + +inline const char *mmap::data() const { return (const char *)addr_; } + +inline void mmap::close() { +#if defined(_WIN32) + if (addr_) { + ::UnmapViewOfFile(addr_); + addr_ = nullptr; + } + + if (hMapping_) { + ::CloseHandle(hMapping_); + hMapping_ = NULL; + } + + if (hFile_ != INVALID_HANDLE_VALUE) { + ::CloseHandle(hFile_); + hFile_ = INVALID_HANDLE_VALUE; + } +#else + if (addr_ != nullptr) { + munmap(addr_, size_); + addr_ = nullptr; + } + + if (fd_ != -1) { + ::close(fd_); + fd_ = -1; + } +#endif + size_ = 0; +} +inline int close_socket(socket_t sock) { +#ifdef _WIN32 + return closesocket(sock); +#else + return close(sock); +#endif +} + +template inline ssize_t handle_EINTR(T fn) { + ssize_t res = 0; + while (true) { + res = fn(); + if (res < 0 && errno == EINTR) { continue; } + break; + } + return res; +} + +inline ssize_t read_socket(socket_t sock, void *ptr, size_t size, int flags) { + return handle_EINTR([&]() { + return recv(sock, +#ifdef _WIN32 + static_cast(ptr), static_cast(size), +#else + ptr, size, +#endif + flags); + }); +} + +inline ssize_t send_socket(socket_t sock, const void *ptr, size_t size, + int flags) { + return handle_EINTR([&]() { + return send(sock, +#ifdef _WIN32 + static_cast(ptr), static_cast(size), +#else + ptr, size, +#endif + flags); + }); +} + +inline ssize_t select_read(socket_t sock, time_t sec, time_t usec) { +#ifdef CPPHTTPLIB_USE_POLL + struct pollfd pfd_read; + pfd_read.fd = sock; + pfd_read.events = POLLIN; + + auto timeout = static_cast(sec * 1000 + usec / 1000); + + return handle_EINTR([&]() { return poll(&pfd_read, 1, timeout); }); +#else +#ifndef _WIN32 + if (sock >= FD_SETSIZE) { return 1; } +#endif + + fd_set fds; + FD_ZERO(&fds); + FD_SET(sock, &fds); + + timeval tv; + tv.tv_sec = static_cast(sec); + tv.tv_usec = static_cast(usec); + + return handle_EINTR([&]() { + return select(static_cast(sock + 1), &fds, nullptr, nullptr, &tv); + }); +#endif +} + +inline ssize_t select_write(socket_t sock, time_t sec, time_t usec) { +#ifdef CPPHTTPLIB_USE_POLL + struct pollfd pfd_read; + pfd_read.fd = sock; + pfd_read.events = POLLOUT; + + auto timeout = static_cast(sec * 1000 + usec / 1000); + + return handle_EINTR([&]() { return poll(&pfd_read, 1, timeout); }); +#else +#ifndef _WIN32 + if (sock >= FD_SETSIZE) { return 1; } +#endif + + fd_set fds; + FD_ZERO(&fds); + FD_SET(sock, &fds); + + timeval tv; + tv.tv_sec = static_cast(sec); + tv.tv_usec = static_cast(usec); + + return handle_EINTR([&]() { + return select(static_cast(sock + 1), nullptr, &fds, nullptr, &tv); + }); +#endif +} + +inline Error wait_until_socket_is_ready(socket_t sock, time_t sec, + time_t usec) { +#ifdef CPPHTTPLIB_USE_POLL + struct pollfd pfd_read; + pfd_read.fd = sock; + pfd_read.events = POLLIN | POLLOUT; + + auto timeout = static_cast(sec * 1000 + usec / 1000); + + auto poll_res = handle_EINTR([&]() { return poll(&pfd_read, 1, timeout); }); + + if (poll_res == 0) { return Error::ConnectionTimeout; } + + if (poll_res > 0 && pfd_read.revents & (POLLIN | POLLOUT)) { + auto error = 0; + socklen_t len = sizeof(error); + auto res = getsockopt(sock, SOL_SOCKET, SO_ERROR, + reinterpret_cast(&error), &len); + auto successful = res >= 0 && !error; + return successful ? Error::Success : Error::Connection; + } + + return Error::Connection; +#else +#ifndef _WIN32 + if (sock >= FD_SETSIZE) { return Error::Connection; } +#endif + + fd_set fdsr; + FD_ZERO(&fdsr); + FD_SET(sock, &fdsr); + + auto fdsw = fdsr; + auto fdse = fdsr; + + timeval tv; + tv.tv_sec = static_cast(sec); + tv.tv_usec = static_cast(usec); + + auto ret = handle_EINTR([&]() { + return select(static_cast(sock + 1), &fdsr, &fdsw, &fdse, &tv); + }); + + if (ret == 0) { return Error::ConnectionTimeout; } + + if (ret > 0 && (FD_ISSET(sock, &fdsr) || FD_ISSET(sock, &fdsw))) { + auto error = 0; + socklen_t len = sizeof(error); + auto res = getsockopt(sock, SOL_SOCKET, SO_ERROR, + reinterpret_cast(&error), &len); + auto successful = res >= 0 && !error; + return successful ? Error::Success : Error::Connection; + } + return Error::Connection; +#endif +} + +inline bool is_socket_alive(socket_t sock) { + const auto val = detail::select_read(sock, 0, 0); + if (val == 0) { + return true; + } else if (val < 0 && errno == EBADF) { + return false; + } + char buf[1]; + return detail::read_socket(sock, &buf[0], sizeof(buf), MSG_PEEK) > 0; +} + +class SocketStream : public Stream { +public: + SocketStream(socket_t sock, time_t read_timeout_sec, time_t read_timeout_usec, + time_t write_timeout_sec, time_t write_timeout_usec); + ~SocketStream() override; + + bool is_readable() const override; + bool is_writable() const override; + ssize_t read(char *ptr, size_t size) override; + ssize_t write(const char *ptr, size_t size) override; + void get_remote_ip_and_port(std::string &ip, int &port) const override; + void get_local_ip_and_port(std::string &ip, int &port) const override; + socket_t socket() const override; + +private: + socket_t sock_; + time_t read_timeout_sec_; + time_t read_timeout_usec_; + time_t write_timeout_sec_; + time_t write_timeout_usec_; + + std::vector read_buff_; + size_t read_buff_off_ = 0; + size_t read_buff_content_size_ = 0; + + static const size_t read_buff_size_ = 1024l * 4; +}; + +#ifdef CPPHTTPLIB_OPENSSL_SUPPORT +class SSLSocketStream : public Stream { +public: + SSLSocketStream(socket_t sock, SSL *ssl, time_t read_timeout_sec, + time_t read_timeout_usec, time_t write_timeout_sec, + time_t write_timeout_usec); + ~SSLSocketStream() override; + + bool is_readable() const override; + bool is_writable() const override; + ssize_t read(char *ptr, size_t size) override; + ssize_t write(const char *ptr, size_t size) override; + void get_remote_ip_and_port(std::string &ip, int &port) const override; + void get_local_ip_and_port(std::string &ip, int &port) const override; + socket_t socket() const override; + +private: + socket_t sock_; + SSL *ssl_; + time_t read_timeout_sec_; + time_t read_timeout_usec_; + time_t write_timeout_sec_; + time_t write_timeout_usec_; +}; +#endif + +inline bool keep_alive(socket_t sock, time_t keep_alive_timeout_sec) { + using namespace std::chrono; + auto start = steady_clock::now(); + while (true) { + auto val = select_read(sock, 0, 10000); + if (val < 0) { + return false; + } else if (val == 0) { + auto current = steady_clock::now(); + auto duration = duration_cast(current - start); + auto timeout = keep_alive_timeout_sec * 1000; + if (duration.count() > timeout) { return false; } + std::this_thread::sleep_for(std::chrono::milliseconds(1)); + } else { + return true; + } + } +} + +template +inline bool +process_server_socket_core(const std::atomic &svr_sock, socket_t sock, + size_t keep_alive_max_count, + time_t keep_alive_timeout_sec, T callback) { + assert(keep_alive_max_count > 0); + auto ret = false; + auto count = keep_alive_max_count; + while (svr_sock != INVALID_SOCKET && count > 0 && + keep_alive(sock, keep_alive_timeout_sec)) { + auto close_connection = count == 1; + auto connection_closed = false; + ret = callback(close_connection, connection_closed); + if (!ret || connection_closed) { break; } + count--; + } + return ret; +} + +template +inline bool +process_server_socket(const std::atomic &svr_sock, socket_t sock, + size_t keep_alive_max_count, + time_t keep_alive_timeout_sec, time_t read_timeout_sec, + time_t read_timeout_usec, time_t write_timeout_sec, + time_t write_timeout_usec, T callback) { + return process_server_socket_core( + svr_sock, sock, keep_alive_max_count, keep_alive_timeout_sec, + [&](bool close_connection, bool &connection_closed) { + SocketStream strm(sock, read_timeout_sec, read_timeout_usec, + write_timeout_sec, write_timeout_usec); + return callback(strm, close_connection, connection_closed); + }); +} + +inline bool process_client_socket(socket_t sock, time_t read_timeout_sec, + time_t read_timeout_usec, + time_t write_timeout_sec, + time_t write_timeout_usec, + std::function callback) { + SocketStream strm(sock, read_timeout_sec, read_timeout_usec, + write_timeout_sec, write_timeout_usec); + return callback(strm); +} + +inline int shutdown_socket(socket_t sock) { +#ifdef _WIN32 + return shutdown(sock, SD_BOTH); +#else + return shutdown(sock, SHUT_RDWR); +#endif +} + +template +socket_t create_socket(const std::string &host, const std::string &ip, int port, + int address_family, int socket_flags, bool tcp_nodelay, + SocketOptions socket_options, + BindOrConnect bind_or_connect) { + // Get address info + const char *node = nullptr; + struct addrinfo hints; + struct addrinfo *result; + + memset(&hints, 0, sizeof(struct addrinfo)); + hints.ai_socktype = SOCK_STREAM; + hints.ai_protocol = 0; + + if (!ip.empty()) { + node = ip.c_str(); + // Ask getaddrinfo to convert IP in c-string to address + hints.ai_family = AF_UNSPEC; + hints.ai_flags = AI_NUMERICHOST; + } else { + if (!host.empty()) { node = host.c_str(); } + hints.ai_family = address_family; + hints.ai_flags = socket_flags; + } + +#ifndef _WIN32 + if (hints.ai_family == AF_UNIX) { + const auto addrlen = host.length(); + if (addrlen > sizeof(sockaddr_un::sun_path)) { return INVALID_SOCKET; } + + auto sock = socket(hints.ai_family, hints.ai_socktype, hints.ai_protocol); + if (sock != INVALID_SOCKET) { + sockaddr_un addr{}; + addr.sun_family = AF_UNIX; + std::copy(host.begin(), host.end(), addr.sun_path); + + hints.ai_addr = reinterpret_cast(&addr); + hints.ai_addrlen = static_cast( + sizeof(addr) - sizeof(addr.sun_path) + addrlen); + + fcntl(sock, F_SETFD, FD_CLOEXEC); + if (socket_options) { socket_options(sock); } + + if (!bind_or_connect(sock, hints)) { + close_socket(sock); + sock = INVALID_SOCKET; + } + } + return sock; + } +#endif + + auto service = std::to_string(port); + + if (getaddrinfo(node, service.c_str(), &hints, &result)) { +#if defined __linux__ && !defined __ANDROID__ + res_init(); +#endif + return INVALID_SOCKET; + } + + for (auto rp = result; rp; rp = rp->ai_next) { + // Create a socket +#ifdef _WIN32 + auto sock = + WSASocketW(rp->ai_family, rp->ai_socktype, rp->ai_protocol, nullptr, 0, + WSA_FLAG_NO_HANDLE_INHERIT | WSA_FLAG_OVERLAPPED); + /** + * Since the WSA_FLAG_NO_HANDLE_INHERIT is only supported on Windows 7 SP1 + * and above the socket creation fails on older Windows Systems. + * + * Let's try to create a socket the old way in this case. + * + * Reference: + * https://docs.microsoft.com/en-us/windows/win32/api/winsock2/nf-winsock2-wsasocketa + * + * WSA_FLAG_NO_HANDLE_INHERIT: + * This flag is supported on Windows 7 with SP1, Windows Server 2008 R2 with + * SP1, and later + * + */ + if (sock == INVALID_SOCKET) { + sock = socket(rp->ai_family, rp->ai_socktype, rp->ai_protocol); + } +#else + auto sock = socket(rp->ai_family, rp->ai_socktype, rp->ai_protocol); +#endif + if (sock == INVALID_SOCKET) { continue; } + +#ifndef _WIN32 + if (fcntl(sock, F_SETFD, FD_CLOEXEC) == -1) { + close_socket(sock); + continue; + } +#endif + + if (tcp_nodelay) { + auto yes = 1; +#ifdef _WIN32 + setsockopt(sock, IPPROTO_TCP, TCP_NODELAY, + reinterpret_cast(&yes), sizeof(yes)); +#else + setsockopt(sock, IPPROTO_TCP, TCP_NODELAY, + reinterpret_cast(&yes), sizeof(yes)); +#endif + } + + if (socket_options) { socket_options(sock); } + + if (rp->ai_family == AF_INET6) { + auto no = 0; +#ifdef _WIN32 + setsockopt(sock, IPPROTO_IPV6, IPV6_V6ONLY, + reinterpret_cast(&no), sizeof(no)); +#else + setsockopt(sock, IPPROTO_IPV6, IPV6_V6ONLY, + reinterpret_cast(&no), sizeof(no)); +#endif + } + + // bind or connect + if (bind_or_connect(sock, *rp)) { + freeaddrinfo(result); + return sock; + } + + close_socket(sock); + } + + freeaddrinfo(result); + return INVALID_SOCKET; +} + +inline void set_nonblocking(socket_t sock, bool nonblocking) { +#ifdef _WIN32 + auto flags = nonblocking ? 1UL : 0UL; + ioctlsocket(sock, FIONBIO, &flags); +#else + auto flags = fcntl(sock, F_GETFL, 0); + fcntl(sock, F_SETFL, + nonblocking ? (flags | O_NONBLOCK) : (flags & (~O_NONBLOCK))); +#endif +} + +inline bool is_connection_error() { +#ifdef _WIN32 + return WSAGetLastError() != WSAEWOULDBLOCK; +#else + return errno != EINPROGRESS; +#endif +} + +inline bool bind_ip_address(socket_t sock, const std::string &host) { + struct addrinfo hints; + struct addrinfo *result; + + memset(&hints, 0, sizeof(struct addrinfo)); + hints.ai_family = AF_UNSPEC; + hints.ai_socktype = SOCK_STREAM; + hints.ai_protocol = 0; + + if (getaddrinfo(host.c_str(), "0", &hints, &result)) { return false; } + + auto ret = false; + for (auto rp = result; rp; rp = rp->ai_next) { + const auto &ai = *rp; + if (!::bind(sock, ai.ai_addr, static_cast(ai.ai_addrlen))) { + ret = true; + break; + } + } + + freeaddrinfo(result); + return ret; +} + +#if !defined _WIN32 && !defined ANDROID && !defined _AIX && !defined __MVS__ +#define USE_IF2IP +#endif + +#ifdef USE_IF2IP +inline std::string if2ip(int address_family, const std::string &ifn) { + struct ifaddrs *ifap; + getifaddrs(&ifap); + std::string addr_candidate; + for (auto ifa = ifap; ifa; ifa = ifa->ifa_next) { + if (ifa->ifa_addr && ifn == ifa->ifa_name && + (AF_UNSPEC == address_family || + ifa->ifa_addr->sa_family == address_family)) { + if (ifa->ifa_addr->sa_family == AF_INET) { + auto sa = reinterpret_cast(ifa->ifa_addr); + char buf[INET_ADDRSTRLEN]; + if (inet_ntop(AF_INET, &sa->sin_addr, buf, INET_ADDRSTRLEN)) { + freeifaddrs(ifap); + return std::string(buf, INET_ADDRSTRLEN); + } + } else if (ifa->ifa_addr->sa_family == AF_INET6) { + auto sa = reinterpret_cast(ifa->ifa_addr); + if (!IN6_IS_ADDR_LINKLOCAL(&sa->sin6_addr)) { + char buf[INET6_ADDRSTRLEN] = {}; + if (inet_ntop(AF_INET6, &sa->sin6_addr, buf, INET6_ADDRSTRLEN)) { + // equivalent to mac's IN6_IS_ADDR_UNIQUE_LOCAL + auto s6_addr_head = sa->sin6_addr.s6_addr[0]; + if (s6_addr_head == 0xfc || s6_addr_head == 0xfd) { + addr_candidate = std::string(buf, INET6_ADDRSTRLEN); + } else { + freeifaddrs(ifap); + return std::string(buf, INET6_ADDRSTRLEN); + } + } + } + } + } + } + freeifaddrs(ifap); + return addr_candidate; +} +#endif + +inline socket_t create_client_socket( + const std::string &host, const std::string &ip, int port, + int address_family, bool tcp_nodelay, SocketOptions socket_options, + time_t connection_timeout_sec, time_t connection_timeout_usec, + time_t read_timeout_sec, time_t read_timeout_usec, time_t write_timeout_sec, + time_t write_timeout_usec, const std::string &intf, Error &error) { + auto sock = create_socket( + host, ip, port, address_family, 0, tcp_nodelay, std::move(socket_options), + [&](socket_t sock2, struct addrinfo &ai) -> bool { + if (!intf.empty()) { +#ifdef USE_IF2IP + auto ip_from_if = if2ip(address_family, intf); + if (ip_from_if.empty()) { ip_from_if = intf; } + if (!bind_ip_address(sock2, ip_from_if)) { + error = Error::BindIPAddress; + return false; + } +#endif + } + + set_nonblocking(sock2, true); + + auto ret = + ::connect(sock2, ai.ai_addr, static_cast(ai.ai_addrlen)); + + if (ret < 0) { + if (is_connection_error()) { + error = Error::Connection; + return false; + } + error = wait_until_socket_is_ready(sock2, connection_timeout_sec, + connection_timeout_usec); + if (error != Error::Success) { return false; } + } + + set_nonblocking(sock2, false); + + { +#ifdef _WIN32 + auto timeout = static_cast(read_timeout_sec * 1000 + + read_timeout_usec / 1000); + setsockopt(sock2, SOL_SOCKET, SO_RCVTIMEO, + reinterpret_cast(&timeout), sizeof(timeout)); +#else + timeval tv; + tv.tv_sec = static_cast(read_timeout_sec); + tv.tv_usec = static_cast(read_timeout_usec); + setsockopt(sock2, SOL_SOCKET, SO_RCVTIMEO, + reinterpret_cast(&tv), sizeof(tv)); +#endif + } + { + +#ifdef _WIN32 + auto timeout = static_cast(write_timeout_sec * 1000 + + write_timeout_usec / 1000); + setsockopt(sock2, SOL_SOCKET, SO_SNDTIMEO, + reinterpret_cast(&timeout), sizeof(timeout)); +#else + timeval tv; + tv.tv_sec = static_cast(write_timeout_sec); + tv.tv_usec = static_cast(write_timeout_usec); + setsockopt(sock2, SOL_SOCKET, SO_SNDTIMEO, + reinterpret_cast(&tv), sizeof(tv)); +#endif + } + + error = Error::Success; + return true; + }); + + if (sock != INVALID_SOCKET) { + error = Error::Success; + } else { + if (error == Error::Success) { error = Error::Connection; } + } + + return sock; +} + +inline bool get_ip_and_port(const struct sockaddr_storage &addr, + socklen_t addr_len, std::string &ip, int &port) { + if (addr.ss_family == AF_INET) { + port = ntohs(reinterpret_cast(&addr)->sin_port); + } else if (addr.ss_family == AF_INET6) { + port = + ntohs(reinterpret_cast(&addr)->sin6_port); + } else { + return false; + } + + std::array ipstr{}; + if (getnameinfo(reinterpret_cast(&addr), addr_len, + ipstr.data(), static_cast(ipstr.size()), nullptr, + 0, NI_NUMERICHOST)) { + return false; + } + + ip = ipstr.data(); + return true; +} + +inline void get_local_ip_and_port(socket_t sock, std::string &ip, int &port) { + struct sockaddr_storage addr; + socklen_t addr_len = sizeof(addr); + if (!getsockname(sock, reinterpret_cast(&addr), + &addr_len)) { + get_ip_and_port(addr, addr_len, ip, port); + } +} + +inline void get_remote_ip_and_port(socket_t sock, std::string &ip, int &port) { + struct sockaddr_storage addr; + socklen_t addr_len = sizeof(addr); + + if (!getpeername(sock, reinterpret_cast(&addr), + &addr_len)) { +#ifndef _WIN32 + if (addr.ss_family == AF_UNIX) { +#if defined(__linux__) + struct ucred ucred; + socklen_t len = sizeof(ucred); + if (getsockopt(sock, SOL_SOCKET, SO_PEERCRED, &ucred, &len) == 0) { + port = ucred.pid; + } +#elif defined(SOL_LOCAL) && defined(SO_PEERPID) // __APPLE__ + pid_t pid; + socklen_t len = sizeof(pid); + if (getsockopt(sock, SOL_LOCAL, SO_PEERPID, &pid, &len) == 0) { + port = pid; + } +#endif + return; + } +#endif + get_ip_and_port(addr, addr_len, ip, port); + } +} + +inline constexpr unsigned int str2tag_core(const char *s, size_t l, + unsigned int h) { + return (l == 0) + ? h + : str2tag_core( + s + 1, l - 1, + // Unsets the 6 high bits of h, therefore no overflow happens + (((std::numeric_limits::max)() >> 6) & + h * 33) ^ + static_cast(*s)); +} + +inline unsigned int str2tag(const std::string &s) { + return str2tag_core(s.data(), s.size(), 0); +} + +namespace udl { + +inline constexpr unsigned int operator"" _t(const char *s, size_t l) { + return str2tag_core(s, l, 0); +} + +} // namespace udl + +inline std::string +find_content_type(const std::string &path, + const std::map &user_data, + const std::string &default_content_type) { + auto ext = file_extension(path); + + auto it = user_data.find(ext); + if (it != user_data.end()) { return it->second; } + + using udl::operator""_t; + + switch (str2tag(ext)) { + default: return default_content_type; + + case "css"_t: return "text/css"; + case "csv"_t: return "text/csv"; + case "htm"_t: + case "html"_t: return "text/html"; + case "js"_t: + case "mjs"_t: return "text/javascript"; + case "txt"_t: return "text/plain"; + case "vtt"_t: return "text/vtt"; + + case "apng"_t: return "image/apng"; + case "avif"_t: return "image/avif"; + case "bmp"_t: return "image/bmp"; + case "gif"_t: return "image/gif"; + case "png"_t: return "image/png"; + case "svg"_t: return "image/svg+xml"; + case "webp"_t: return "image/webp"; + case "ico"_t: return "image/x-icon"; + case "tif"_t: return "image/tiff"; + case "tiff"_t: return "image/tiff"; + case "jpg"_t: + case "jpeg"_t: return "image/jpeg"; + + case "mp4"_t: return "video/mp4"; + case "mpeg"_t: return "video/mpeg"; + case "webm"_t: return "video/webm"; + + case "mp3"_t: return "audio/mp3"; + case "mpga"_t: return "audio/mpeg"; + case "weba"_t: return "audio/webm"; + case "wav"_t: return "audio/wave"; + + case "otf"_t: return "font/otf"; + case "ttf"_t: return "font/ttf"; + case "woff"_t: return "font/woff"; + case "woff2"_t: return "font/woff2"; + + case "7z"_t: return "application/x-7z-compressed"; + case "atom"_t: return "application/atom+xml"; + case "pdf"_t: return "application/pdf"; + case "json"_t: return "application/json"; + case "rss"_t: return "application/rss+xml"; + case "tar"_t: return "application/x-tar"; + case "xht"_t: + case "xhtml"_t: return "application/xhtml+xml"; + case "xslt"_t: return "application/xslt+xml"; + case "xml"_t: return "application/xml"; + case "gz"_t: return "application/gzip"; + case "zip"_t: return "application/zip"; + case "wasm"_t: return "application/wasm"; + } +} + +inline bool can_compress_content_type(const std::string &content_type) { + using udl::operator""_t; + + auto tag = str2tag(content_type); + + switch (tag) { + case "image/svg+xml"_t: + case "application/javascript"_t: + case "application/json"_t: + case "application/xml"_t: + case "application/protobuf"_t: + case "application/xhtml+xml"_t: return true; + + default: + return !content_type.rfind("text/", 0) && tag != "text/event-stream"_t; + } +} + +inline EncodingType encoding_type(const Request &req, const Response &res) { + auto ret = + detail::can_compress_content_type(res.get_header_value("Content-Type")); + if (!ret) { return EncodingType::None; } + + const auto &s = req.get_header_value("Accept-Encoding"); + (void)(s); + +#ifdef CPPHTTPLIB_BROTLI_SUPPORT + // TODO: 'Accept-Encoding' has br, not br;q=0 + ret = s.find("br") != std::string::npos; + if (ret) { return EncodingType::Brotli; } +#endif + +#ifdef CPPHTTPLIB_ZLIB_SUPPORT + // TODO: 'Accept-Encoding' has gzip, not gzip;q=0 + ret = s.find("gzip") != std::string::npos; + if (ret) { return EncodingType::Gzip; } +#endif + + return EncodingType::None; +} + +inline bool nocompressor::compress(const char *data, size_t data_length, + bool /*last*/, Callback callback) { + if (!data_length) { return true; } + return callback(data, data_length); +} + +#ifdef CPPHTTPLIB_ZLIB_SUPPORT +inline gzip_compressor::gzip_compressor() { + std::memset(&strm_, 0, sizeof(strm_)); + strm_.zalloc = Z_NULL; + strm_.zfree = Z_NULL; + strm_.opaque = Z_NULL; + + is_valid_ = deflateInit2(&strm_, Z_DEFAULT_COMPRESSION, Z_DEFLATED, 31, 8, + Z_DEFAULT_STRATEGY) == Z_OK; +} + +inline gzip_compressor::~gzip_compressor() { deflateEnd(&strm_); } + +inline bool gzip_compressor::compress(const char *data, size_t data_length, + bool last, Callback callback) { + assert(is_valid_); + + do { + constexpr size_t max_avail_in = + (std::numeric_limits::max)(); + + strm_.avail_in = static_cast( + (std::min)(data_length, max_avail_in)); + strm_.next_in = const_cast(reinterpret_cast(data)); + + data_length -= strm_.avail_in; + data += strm_.avail_in; + + auto flush = (last && data_length == 0) ? Z_FINISH : Z_NO_FLUSH; + auto ret = Z_OK; + + std::array buff{}; + do { + strm_.avail_out = static_cast(buff.size()); + strm_.next_out = reinterpret_cast(buff.data()); + + ret = deflate(&strm_, flush); + if (ret == Z_STREAM_ERROR) { return false; } + + if (!callback(buff.data(), buff.size() - strm_.avail_out)) { + return false; + } + } while (strm_.avail_out == 0); + + assert((flush == Z_FINISH && ret == Z_STREAM_END) || + (flush == Z_NO_FLUSH && ret == Z_OK)); + assert(strm_.avail_in == 0); + } while (data_length > 0); + + return true; +} + +inline gzip_decompressor::gzip_decompressor() { + std::memset(&strm_, 0, sizeof(strm_)); + strm_.zalloc = Z_NULL; + strm_.zfree = Z_NULL; + strm_.opaque = Z_NULL; + + // 15 is the value of wbits, which should be at the maximum possible value + // to ensure that any gzip stream can be decoded. The offset of 32 specifies + // that the stream type should be automatically detected either gzip or + // deflate. + is_valid_ = inflateInit2(&strm_, 32 + 15) == Z_OK; +} + +inline gzip_decompressor::~gzip_decompressor() { inflateEnd(&strm_); } + +inline bool gzip_decompressor::is_valid() const { return is_valid_; } + +inline bool gzip_decompressor::decompress(const char *data, size_t data_length, + Callback callback) { + assert(is_valid_); + + auto ret = Z_OK; + + do { + constexpr size_t max_avail_in = + (std::numeric_limits::max)(); + + strm_.avail_in = static_cast( + (std::min)(data_length, max_avail_in)); + strm_.next_in = const_cast(reinterpret_cast(data)); + + data_length -= strm_.avail_in; + data += strm_.avail_in; + + std::array buff{}; + while (strm_.avail_in > 0 && ret == Z_OK) { + strm_.avail_out = static_cast(buff.size()); + strm_.next_out = reinterpret_cast(buff.data()); + + ret = inflate(&strm_, Z_NO_FLUSH); + + assert(ret != Z_STREAM_ERROR); + switch (ret) { + case Z_NEED_DICT: + case Z_DATA_ERROR: + case Z_MEM_ERROR: inflateEnd(&strm_); return false; + } + + if (!callback(buff.data(), buff.size() - strm_.avail_out)) { + return false; + } + } + + if (ret != Z_OK && ret != Z_STREAM_END) { return false; } + + } while (data_length > 0); + + return true; +} +#endif + +#ifdef CPPHTTPLIB_BROTLI_SUPPORT +inline brotli_compressor::brotli_compressor() { + state_ = BrotliEncoderCreateInstance(nullptr, nullptr, nullptr); +} + +inline brotli_compressor::~brotli_compressor() { + BrotliEncoderDestroyInstance(state_); +} + +inline bool brotli_compressor::compress(const char *data, size_t data_length, + bool last, Callback callback) { + std::array buff{}; + + auto operation = last ? BROTLI_OPERATION_FINISH : BROTLI_OPERATION_PROCESS; + auto available_in = data_length; + auto next_in = reinterpret_cast(data); + + for (;;) { + if (last) { + if (BrotliEncoderIsFinished(state_)) { break; } + } else { + if (!available_in) { break; } + } + + auto available_out = buff.size(); + auto next_out = buff.data(); + + if (!BrotliEncoderCompressStream(state_, operation, &available_in, &next_in, + &available_out, &next_out, nullptr)) { + return false; + } + + auto output_bytes = buff.size() - available_out; + if (output_bytes) { + callback(reinterpret_cast(buff.data()), output_bytes); + } + } + + return true; +} + +inline brotli_decompressor::brotli_decompressor() { + decoder_s = BrotliDecoderCreateInstance(0, 0, 0); + decoder_r = decoder_s ? BROTLI_DECODER_RESULT_NEEDS_MORE_INPUT + : BROTLI_DECODER_RESULT_ERROR; +} + +inline brotli_decompressor::~brotli_decompressor() { + if (decoder_s) { BrotliDecoderDestroyInstance(decoder_s); } +} + +inline bool brotli_decompressor::is_valid() const { return decoder_s; } + +inline bool brotli_decompressor::decompress(const char *data, + size_t data_length, + Callback callback) { + if (decoder_r == BROTLI_DECODER_RESULT_SUCCESS || + decoder_r == BROTLI_DECODER_RESULT_ERROR) { + return 0; + } + + auto next_in = reinterpret_cast(data); + size_t avail_in = data_length; + size_t total_out; + + decoder_r = BROTLI_DECODER_RESULT_NEEDS_MORE_OUTPUT; + + std::array buff{}; + while (decoder_r == BROTLI_DECODER_RESULT_NEEDS_MORE_OUTPUT) { + char *next_out = buff.data(); + size_t avail_out = buff.size(); + + decoder_r = BrotliDecoderDecompressStream( + decoder_s, &avail_in, &next_in, &avail_out, + reinterpret_cast(&next_out), &total_out); + + if (decoder_r == BROTLI_DECODER_RESULT_ERROR) { return false; } + + if (!callback(buff.data(), buff.size() - avail_out)) { return false; } + } + + return decoder_r == BROTLI_DECODER_RESULT_SUCCESS || + decoder_r == BROTLI_DECODER_RESULT_NEEDS_MORE_INPUT; +} +#endif + +inline bool has_header(const Headers &headers, const std::string &key) { + return headers.find(key) != headers.end(); +} + +inline const char *get_header_value(const Headers &headers, + const std::string &key, size_t id, + const char *def) { + auto rng = headers.equal_range(key); + auto it = rng.first; + std::advance(it, static_cast(id)); + if (it != rng.second) { return it->second.c_str(); } + return def; +} + +inline bool compare_case_ignore(const std::string &a, const std::string &b) { + if (a.size() != b.size()) { return false; } + for (size_t i = 0; i < b.size(); i++) { + if (::tolower(a[i]) != ::tolower(b[i])) { return false; } + } + return true; +} + +template +inline bool parse_header(const char *beg, const char *end, T fn) { + // Skip trailing spaces and tabs. + while (beg < end && is_space_or_tab(end[-1])) { + end--; + } + + auto p = beg; + while (p < end && *p != ':') { + p++; + } + + if (p == end) { return false; } + + auto key_end = p; + + if (*p++ != ':') { return false; } + + while (p < end && is_space_or_tab(*p)) { + p++; + } + + if (p < end) { + auto key_len = key_end - beg; + if (!key_len) { return false; } + + auto key = std::string(beg, key_end); + auto val = compare_case_ignore(key, "Location") + ? std::string(p, end) + : decode_url(std::string(p, end), false); + fn(std::move(key), std::move(val)); + return true; + } + + return false; +} + +inline bool read_headers(Stream &strm, Headers &headers) { + const auto bufsiz = 2048; + char buf[bufsiz]; + stream_line_reader line_reader(strm, buf, bufsiz); + + for (;;) { + if (!line_reader.getline()) { return false; } + + // Check if the line ends with CRLF. + auto line_terminator_len = 2; + if (line_reader.end_with_crlf()) { + // Blank line indicates end of headers. + if (line_reader.size() == 2) { break; } +#ifdef CPPHTTPLIB_ALLOW_LF_AS_LINE_TERMINATOR + } else { + // Blank line indicates end of headers. + if (line_reader.size() == 1) { break; } + line_terminator_len = 1; + } +#else + } else { + continue; // Skip invalid line. + } +#endif + + if (line_reader.size() > CPPHTTPLIB_HEADER_MAX_LENGTH) { return false; } + + // Exclude line terminator + auto end = line_reader.ptr() + line_reader.size() - line_terminator_len; + + parse_header(line_reader.ptr(), end, + [&](std::string &&key, std::string &&val) { + headers.emplace(std::move(key), std::move(val)); + }); + } + + return true; +} + +inline bool read_content_with_length(Stream &strm, uint64_t len, + Progress progress, + ContentReceiverWithProgress out) { + char buf[CPPHTTPLIB_RECV_BUFSIZ]; + + uint64_t r = 0; + while (r < len) { + auto read_len = static_cast(len - r); + auto n = strm.read(buf, (std::min)(read_len, CPPHTTPLIB_RECV_BUFSIZ)); + if (n <= 0) { return false; } + + if (!out(buf, static_cast(n), r, len)) { return false; } + r += static_cast(n); + + if (progress) { + if (!progress(r, len)) { return false; } + } + } + + return true; +} + +inline void skip_content_with_length(Stream &strm, uint64_t len) { + char buf[CPPHTTPLIB_RECV_BUFSIZ]; + uint64_t r = 0; + while (r < len) { + auto read_len = static_cast(len - r); + auto n = strm.read(buf, (std::min)(read_len, CPPHTTPLIB_RECV_BUFSIZ)); + if (n <= 0) { return; } + r += static_cast(n); + } +} + +inline bool read_content_without_length(Stream &strm, + ContentReceiverWithProgress out) { + char buf[CPPHTTPLIB_RECV_BUFSIZ]; + uint64_t r = 0; + for (;;) { + auto n = strm.read(buf, CPPHTTPLIB_RECV_BUFSIZ); + if (n <= 0) { return true; } + + if (!out(buf, static_cast(n), r, 0)) { return false; } + r += static_cast(n); + } + + return true; +} + +template +inline bool read_content_chunked(Stream &strm, T &x, + ContentReceiverWithProgress out) { + const auto bufsiz = 16; + char buf[bufsiz]; + + stream_line_reader line_reader(strm, buf, bufsiz); + + if (!line_reader.getline()) { return false; } + + unsigned long chunk_len; + while (true) { + char *end_ptr; + + chunk_len = std::strtoul(line_reader.ptr(), &end_ptr, 16); + + if (end_ptr == line_reader.ptr()) { return false; } + if (chunk_len == ULONG_MAX) { return false; } + + if (chunk_len == 0) { break; } + + if (!read_content_with_length(strm, chunk_len, nullptr, out)) { + return false; + } + + if (!line_reader.getline()) { return false; } + + if (strcmp(line_reader.ptr(), "\r\n") != 0) { return false; } + + if (!line_reader.getline()) { return false; } + } + + assert(chunk_len == 0); + + // Trailer + if (!line_reader.getline()) { return false; } + + while (strcmp(line_reader.ptr(), "\r\n") != 0) { + if (line_reader.size() > CPPHTTPLIB_HEADER_MAX_LENGTH) { return false; } + + // Exclude line terminator + constexpr auto line_terminator_len = 2; + auto end = line_reader.ptr() + line_reader.size() - line_terminator_len; + + parse_header(line_reader.ptr(), end, + [&](std::string &&key, std::string &&val) { + x.headers.emplace(std::move(key), std::move(val)); + }); + + if (!line_reader.getline()) { return false; } + } + + return true; +} + +inline bool is_chunked_transfer_encoding(const Headers &headers) { + return !strcasecmp(get_header_value(headers, "Transfer-Encoding", 0, ""), + "chunked"); +} + +template +bool prepare_content_receiver(T &x, int &status, + ContentReceiverWithProgress receiver, + bool decompress, U callback) { + if (decompress) { + std::string encoding = x.get_header_value("Content-Encoding"); + std::unique_ptr decompressor; + + if (encoding == "gzip" || encoding == "deflate") { +#ifdef CPPHTTPLIB_ZLIB_SUPPORT + decompressor = detail::make_unique(); +#else + status = StatusCode::UnsupportedMediaType_415; + return false; +#endif + } else if (encoding.find("br") != std::string::npos) { +#ifdef CPPHTTPLIB_BROTLI_SUPPORT + decompressor = detail::make_unique(); +#else + status = StatusCode::UnsupportedMediaType_415; + return false; +#endif + } + + if (decompressor) { + if (decompressor->is_valid()) { + ContentReceiverWithProgress out = [&](const char *buf, size_t n, + uint64_t off, uint64_t len) { + return decompressor->decompress(buf, n, + [&](const char *buf2, size_t n2) { + return receiver(buf2, n2, off, len); + }); + }; + return callback(std::move(out)); + } else { + status = StatusCode::InternalServerError_500; + return false; + } + } + } + + ContentReceiverWithProgress out = [&](const char *buf, size_t n, uint64_t off, + uint64_t len) { + return receiver(buf, n, off, len); + }; + return callback(std::move(out)); +} + +template +bool read_content(Stream &strm, T &x, size_t payload_max_length, int &status, + Progress progress, ContentReceiverWithProgress receiver, + bool decompress) { + return prepare_content_receiver( + x, status, std::move(receiver), decompress, + [&](const ContentReceiverWithProgress &out) { + auto ret = true; + auto exceed_payload_max_length = false; + + if (is_chunked_transfer_encoding(x.headers)) { + ret = read_content_chunked(strm, x, out); + } else if (!has_header(x.headers, "Content-Length")) { + ret = read_content_without_length(strm, out); + } else { + auto len = get_header_value_u64(x.headers, "Content-Length", 0, 0); + if (len > payload_max_length) { + exceed_payload_max_length = true; + skip_content_with_length(strm, len); + ret = false; + } else if (len > 0) { + ret = read_content_with_length(strm, len, std::move(progress), out); + } + } + + if (!ret) { + status = exceed_payload_max_length ? StatusCode::PayloadTooLarge_413 + : StatusCode::BadRequest_400; + } + return ret; + }); +} // namespace detail + +inline ssize_t write_headers(Stream &strm, const Headers &headers) { + ssize_t write_len = 0; + for (const auto &x : headers) { + auto len = + strm.write_format("%s: %s\r\n", x.first.c_str(), x.second.c_str()); + if (len < 0) { return len; } + write_len += len; + } + auto len = strm.write("\r\n"); + if (len < 0) { return len; } + write_len += len; + return write_len; +} + +inline bool write_data(Stream &strm, const char *d, size_t l) { + size_t offset = 0; + while (offset < l) { + auto length = strm.write(d + offset, l - offset); + if (length < 0) { return false; } + offset += static_cast(length); + } + return true; +} + +template +inline bool write_content(Stream &strm, const ContentProvider &content_provider, + size_t offset, size_t length, T is_shutting_down, + Error &error) { + size_t end_offset = offset + length; + auto ok = true; + DataSink data_sink; + + data_sink.write = [&](const char *d, size_t l) -> bool { + if (ok) { + if (strm.is_writable() && write_data(strm, d, l)) { + offset += l; + } else { + ok = false; + } + } + return ok; + }; + + data_sink.is_writable = [&]() -> bool { return strm.is_writable(); }; + + while (offset < end_offset && !is_shutting_down()) { + if (!strm.is_writable()) { + error = Error::Write; + return false; + } else if (!content_provider(offset, end_offset - offset, data_sink)) { + error = Error::Canceled; + return false; + } else if (!ok) { + error = Error::Write; + return false; + } + } + + error = Error::Success; + return true; +} + +template +inline bool write_content(Stream &strm, const ContentProvider &content_provider, + size_t offset, size_t length, + const T &is_shutting_down) { + auto error = Error::Success; + return write_content(strm, content_provider, offset, length, is_shutting_down, + error); +} + +template +inline bool +write_content_without_length(Stream &strm, + const ContentProvider &content_provider, + const T &is_shutting_down) { + size_t offset = 0; + auto data_available = true; + auto ok = true; + DataSink data_sink; + + data_sink.write = [&](const char *d, size_t l) -> bool { + if (ok) { + offset += l; + if (!strm.is_writable() || !write_data(strm, d, l)) { ok = false; } + } + return ok; + }; + + data_sink.is_writable = [&]() -> bool { return strm.is_writable(); }; + + data_sink.done = [&](void) { data_available = false; }; + + while (data_available && !is_shutting_down()) { + if (!strm.is_writable()) { + return false; + } else if (!content_provider(offset, 0, data_sink)) { + return false; + } else if (!ok) { + return false; + } + } + return true; +} + +template +inline bool +write_content_chunked(Stream &strm, const ContentProvider &content_provider, + const T &is_shutting_down, U &compressor, Error &error) { + size_t offset = 0; + auto data_available = true; + auto ok = true; + DataSink data_sink; + + data_sink.write = [&](const char *d, size_t l) -> bool { + if (ok) { + data_available = l > 0; + offset += l; + + std::string payload; + if (compressor.compress(d, l, false, + [&](const char *data, size_t data_len) { + payload.append(data, data_len); + return true; + })) { + if (!payload.empty()) { + // Emit chunked response header and footer for each chunk + auto chunk = + from_i_to_hex(payload.size()) + "\r\n" + payload + "\r\n"; + if (!strm.is_writable() || + !write_data(strm, chunk.data(), chunk.size())) { + ok = false; + } + } + } else { + ok = false; + } + } + return ok; + }; + + data_sink.is_writable = [&]() -> bool { return strm.is_writable(); }; + + auto done_with_trailer = [&](const Headers *trailer) { + if (!ok) { return; } + + data_available = false; + + std::string payload; + if (!compressor.compress(nullptr, 0, true, + [&](const char *data, size_t data_len) { + payload.append(data, data_len); + return true; + })) { + ok = false; + return; + } + + if (!payload.empty()) { + // Emit chunked response header and footer for each chunk + auto chunk = from_i_to_hex(payload.size()) + "\r\n" + payload + "\r\n"; + if (!strm.is_writable() || + !write_data(strm, chunk.data(), chunk.size())) { + ok = false; + return; + } + } + + static const std::string done_marker("0\r\n"); + if (!write_data(strm, done_marker.data(), done_marker.size())) { + ok = false; + } + + // Trailer + if (trailer) { + for (const auto &kv : *trailer) { + std::string field_line = kv.first + ": " + kv.second + "\r\n"; + if (!write_data(strm, field_line.data(), field_line.size())) { + ok = false; + } + } + } + + static const std::string crlf("\r\n"); + if (!write_data(strm, crlf.data(), crlf.size())) { ok = false; } + }; + + data_sink.done = [&](void) { done_with_trailer(nullptr); }; + + data_sink.done_with_trailer = [&](const Headers &trailer) { + done_with_trailer(&trailer); + }; + + while (data_available && !is_shutting_down()) { + if (!strm.is_writable()) { + error = Error::Write; + return false; + } else if (!content_provider(offset, 0, data_sink)) { + error = Error::Canceled; + return false; + } else if (!ok) { + error = Error::Write; + return false; + } + } + + error = Error::Success; + return true; +} + +template +inline bool write_content_chunked(Stream &strm, + const ContentProvider &content_provider, + const T &is_shutting_down, U &compressor) { + auto error = Error::Success; + return write_content_chunked(strm, content_provider, is_shutting_down, + compressor, error); +} + +template +inline bool redirect(T &cli, Request &req, Response &res, + const std::string &path, const std::string &location, + Error &error) { + Request new_req = req; + new_req.path = path; + new_req.redirect_count_ -= 1; + + if (res.status == StatusCode::SeeOther_303 && + (req.method != "GET" && req.method != "HEAD")) { + new_req.method = "GET"; + new_req.body.clear(); + new_req.headers.clear(); + } + + Response new_res; + + auto ret = cli.send(new_req, new_res, error); + if (ret) { + req = new_req; + res = new_res; + + if (res.location.empty()) { res.location = location; } + } + return ret; +} + +inline std::string params_to_query_str(const Params ¶ms) { + std::string query; + + for (auto it = params.begin(); it != params.end(); ++it) { + if (it != params.begin()) { query += "&"; } + query += it->first; + query += "="; + query += encode_query_param(it->second); + } + return query; +} + +inline void parse_query_text(const std::string &s, Params ¶ms) { + std::set cache; + split(s.data(), s.data() + s.size(), '&', [&](const char *b, const char *e) { + std::string kv(b, e); + if (cache.find(kv) != cache.end()) { return; } + cache.insert(kv); + + std::string key; + std::string val; + split(b, e, '=', [&](const char *b2, const char *e2) { + if (key.empty()) { + key.assign(b2, e2); + } else { + val.assign(b2, e2); + } + }); + + if (!key.empty()) { + params.emplace(decode_url(key, true), decode_url(val, true)); + } + }); +} + +inline bool parse_multipart_boundary(const std::string &content_type, + std::string &boundary) { + auto boundary_keyword = "boundary="; + auto pos = content_type.find(boundary_keyword); + if (pos == std::string::npos) { return false; } + auto end = content_type.find(';', pos); + auto beg = pos + strlen(boundary_keyword); + boundary = trim_double_quotes_copy(content_type.substr(beg, end - beg)); + return !boundary.empty(); +} + +inline void parse_disposition_params(const std::string &s, Params ¶ms) { + std::set cache; + split(s.data(), s.data() + s.size(), ';', [&](const char *b, const char *e) { + std::string kv(b, e); + if (cache.find(kv) != cache.end()) { return; } + cache.insert(kv); + + std::string key; + std::string val; + split(b, e, '=', [&](const char *b2, const char *e2) { + if (key.empty()) { + key.assign(b2, e2); + } else { + val.assign(b2, e2); + } + }); + + if (!key.empty()) { + params.emplace(trim_double_quotes_copy((key)), + trim_double_quotes_copy((val))); + } + }); +} + +#ifdef CPPHTTPLIB_NO_EXCEPTIONS +inline bool parse_range_header(const std::string &s, Ranges &ranges) { +#else +inline bool parse_range_header(const std::string &s, Ranges &ranges) try { +#endif + static auto re_first_range = std::regex(R"(bytes=(\d*-\d*(?:,\s*\d*-\d*)*))"); + std::smatch m; + if (std::regex_match(s, m, re_first_range)) { + auto pos = static_cast(m.position(1)); + auto len = static_cast(m.length(1)); + auto all_valid_ranges = true; + split(&s[pos], &s[pos + len], ',', [&](const char *b, const char *e) { + if (!all_valid_ranges) { return; } + static auto re_another_range = std::regex(R"(\s*(\d*)-(\d*))"); + std::cmatch cm; + if (std::regex_match(b, e, cm, re_another_range)) { + ssize_t first = -1; + if (!cm.str(1).empty()) { + first = static_cast(std::stoll(cm.str(1))); + } + + ssize_t last = -1; + if (!cm.str(2).empty()) { + last = static_cast(std::stoll(cm.str(2))); + } + + if (first != -1 && last != -1 && first > last) { + all_valid_ranges = false; + return; + } + ranges.emplace_back(std::make_pair(first, last)); + } + }); + return all_valid_ranges; + } + return false; +#ifdef CPPHTTPLIB_NO_EXCEPTIONS +} +#else +} catch (...) { return false; } +#endif + +class MultipartFormDataParser { +public: + MultipartFormDataParser() = default; + + void set_boundary(std::string &&boundary) { + boundary_ = boundary; + dash_boundary_crlf_ = dash_ + boundary_ + crlf_; + crlf_dash_boundary_ = crlf_ + dash_ + boundary_; + } + + bool is_valid() const { return is_valid_; } + + bool parse(const char *buf, size_t n, const ContentReceiver &content_callback, + const MultipartContentHeader &header_callback) { + + buf_append(buf, n); + + while (buf_size() > 0) { + switch (state_) { + case 0: { // Initial boundary + buf_erase(buf_find(dash_boundary_crlf_)); + if (dash_boundary_crlf_.size() > buf_size()) { return true; } + if (!buf_start_with(dash_boundary_crlf_)) { return false; } + buf_erase(dash_boundary_crlf_.size()); + state_ = 1; + break; + } + case 1: { // New entry + clear_file_info(); + state_ = 2; + break; + } + case 2: { // Headers + auto pos = buf_find(crlf_); + if (pos > CPPHTTPLIB_HEADER_MAX_LENGTH) { return false; } + while (pos < buf_size()) { + // Empty line + if (pos == 0) { + if (!header_callback(file_)) { + is_valid_ = false; + return false; + } + buf_erase(crlf_.size()); + state_ = 3; + break; + } + + const auto header = buf_head(pos); + + if (!parse_header(header.data(), header.data() + header.size(), + [&](std::string &&, std::string &&) {})) { + is_valid_ = false; + return false; + } + + static const std::string header_content_type = "Content-Type:"; + + if (start_with_case_ignore(header, header_content_type)) { + file_.content_type = + trim_copy(header.substr(header_content_type.size())); + } else { + static const std::regex re_content_disposition( + R"~(^Content-Disposition:\s*form-data;\s*(.*)$)~", + std::regex_constants::icase); + + std::smatch m; + if (std::regex_match(header, m, re_content_disposition)) { + Params params; + parse_disposition_params(m[1], params); + + auto it = params.find("name"); + if (it != params.end()) { + file_.name = it->second; + } else { + is_valid_ = false; + return false; + } + + it = params.find("filename"); + if (it != params.end()) { file_.filename = it->second; } + + it = params.find("filename*"); + if (it != params.end()) { + // Only allow UTF-8 enconnding... + static const std::regex re_rfc5987_encoding( + R"~(^UTF-8''(.+?)$)~", std::regex_constants::icase); + + std::smatch m2; + if (std::regex_match(it->second, m2, re_rfc5987_encoding)) { + file_.filename = decode_url(m2[1], false); // override... + } else { + is_valid_ = false; + return false; + } + } + } + } + buf_erase(pos + crlf_.size()); + pos = buf_find(crlf_); + } + if (state_ != 3) { return true; } + break; + } + case 3: { // Body + if (crlf_dash_boundary_.size() > buf_size()) { return true; } + auto pos = buf_find(crlf_dash_boundary_); + if (pos < buf_size()) { + if (!content_callback(buf_data(), pos)) { + is_valid_ = false; + return false; + } + buf_erase(pos + crlf_dash_boundary_.size()); + state_ = 4; + } else { + auto len = buf_size() - crlf_dash_boundary_.size(); + if (len > 0) { + if (!content_callback(buf_data(), len)) { + is_valid_ = false; + return false; + } + buf_erase(len); + } + return true; + } + break; + } + case 4: { // Boundary + if (crlf_.size() > buf_size()) { return true; } + if (buf_start_with(crlf_)) { + buf_erase(crlf_.size()); + state_ = 1; + } else { + if (dash_.size() > buf_size()) { return true; } + if (buf_start_with(dash_)) { + buf_erase(dash_.size()); + is_valid_ = true; + buf_erase(buf_size()); // Remove epilogue + } else { + return true; + } + } + break; + } + } + } + + return true; + } + +private: + void clear_file_info() { + file_.name.clear(); + file_.filename.clear(); + file_.content_type.clear(); + } + + bool start_with_case_ignore(const std::string &a, + const std::string &b) const { + if (a.size() < b.size()) { return false; } + for (size_t i = 0; i < b.size(); i++) { + if (::tolower(a[i]) != ::tolower(b[i])) { return false; } + } + return true; + } + + const std::string dash_ = "--"; + const std::string crlf_ = "\r\n"; + std::string boundary_; + std::string dash_boundary_crlf_; + std::string crlf_dash_boundary_; + + size_t state_ = 0; + bool is_valid_ = false; + MultipartFormData file_; + + // Buffer + bool start_with(const std::string &a, size_t spos, size_t epos, + const std::string &b) const { + if (epos - spos < b.size()) { return false; } + for (size_t i = 0; i < b.size(); i++) { + if (a[i + spos] != b[i]) { return false; } + } + return true; + } + + size_t buf_size() const { return buf_epos_ - buf_spos_; } + + const char *buf_data() const { return &buf_[buf_spos_]; } + + std::string buf_head(size_t l) const { return buf_.substr(buf_spos_, l); } + + bool buf_start_with(const std::string &s) const { + return start_with(buf_, buf_spos_, buf_epos_, s); + } + + size_t buf_find(const std::string &s) const { + auto c = s.front(); + + size_t off = buf_spos_; + while (off < buf_epos_) { + auto pos = off; + while (true) { + if (pos == buf_epos_) { return buf_size(); } + if (buf_[pos] == c) { break; } + pos++; + } + + auto remaining_size = buf_epos_ - pos; + if (s.size() > remaining_size) { return buf_size(); } + + if (start_with(buf_, pos, buf_epos_, s)) { return pos - buf_spos_; } + + off = pos + 1; + } + + return buf_size(); + } + + void buf_append(const char *data, size_t n) { + auto remaining_size = buf_size(); + if (remaining_size > 0 && buf_spos_ > 0) { + for (size_t i = 0; i < remaining_size; i++) { + buf_[i] = buf_[buf_spos_ + i]; + } + } + buf_spos_ = 0; + buf_epos_ = remaining_size; + + if (remaining_size + n > buf_.size()) { buf_.resize(remaining_size + n); } + + for (size_t i = 0; i < n; i++) { + buf_[buf_epos_ + i] = data[i]; + } + buf_epos_ += n; + } + + void buf_erase(size_t size) { buf_spos_ += size; } + + std::string buf_; + size_t buf_spos_ = 0; + size_t buf_epos_ = 0; +}; + +inline std::string to_lower(const char *beg, const char *end) { + std::string out; + auto it = beg; + while (it != end) { + out += static_cast(::tolower(*it)); + it++; + } + return out; +} + +inline std::string make_multipart_data_boundary() { + static const char data[] = + "0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz"; + + // std::random_device might actually be deterministic on some + // platforms, but due to lack of support in the c++ standard library, + // doing better requires either some ugly hacks or breaking portability. + std::random_device seed_gen; + + // Request 128 bits of entropy for initialization + std::seed_seq seed_sequence{seed_gen(), seed_gen(), seed_gen(), seed_gen()}; + std::mt19937 engine(seed_sequence); + + std::string result = "--cpp-httplib-multipart-data-"; + + for (auto i = 0; i < 16; i++) { + result += data[engine() % (sizeof(data) - 1)]; + } + + return result; +} + +inline bool is_multipart_boundary_chars_valid(const std::string &boundary) { + auto valid = true; + for (size_t i = 0; i < boundary.size(); i++) { + auto c = boundary[i]; + if (!std::isalnum(c) && c != '-' && c != '_') { + valid = false; + break; + } + } + return valid; +} + +template +inline std::string +serialize_multipart_formdata_item_begin(const T &item, + const std::string &boundary) { + std::string body = "--" + boundary + "\r\n"; + body += "Content-Disposition: form-data; name=\"" + item.name + "\""; + if (!item.filename.empty()) { + body += "; filename=\"" + item.filename + "\""; + } + body += "\r\n"; + if (!item.content_type.empty()) { + body += "Content-Type: " + item.content_type + "\r\n"; + } + body += "\r\n"; + + return body; +} + +inline std::string serialize_multipart_formdata_item_end() { return "\r\n"; } + +inline std::string +serialize_multipart_formdata_finish(const std::string &boundary) { + return "--" + boundary + "--\r\n"; +} + +inline std::string +serialize_multipart_formdata_get_content_type(const std::string &boundary) { + return "multipart/form-data; boundary=" + boundary; +} + +inline std::string +serialize_multipart_formdata(const MultipartFormDataItems &items, + const std::string &boundary, bool finish = true) { + std::string body; + + for (const auto &item : items) { + body += serialize_multipart_formdata_item_begin(item, boundary); + body += item.content + serialize_multipart_formdata_item_end(); + } + + if (finish) { body += serialize_multipart_formdata_finish(boundary); } + + return body; +} + +inline std::pair +get_range_offset_and_length(const Request &req, size_t content_length, + size_t index) { + auto r = req.ranges[index]; + + if (r.first == -1 && r.second == -1) { + return std::make_pair(0, content_length); + } + + auto slen = static_cast(content_length); + + if (r.first == -1) { + r.first = (std::max)(static_cast(0), slen - r.second); + r.second = slen - 1; + } + + if (r.second == -1) { r.second = slen - 1; } + return std::make_pair(r.first, static_cast(r.second - r.first) + 1); +} + +inline std::string +make_content_range_header_field(const std::pair &range, + size_t content_length) { + std::string field = "bytes "; + if (range.first != -1) { field += std::to_string(range.first); } + field += "-"; + if (range.second != -1) { field += std::to_string(range.second); } + field += "/"; + field += std::to_string(content_length); + return field; +} + +template +bool process_multipart_ranges_data(const Request &req, Response &res, + const std::string &boundary, + const std::string &content_type, + SToken stoken, CToken ctoken, + Content content) { + for (size_t i = 0; i < req.ranges.size(); i++) { + ctoken("--"); + stoken(boundary); + ctoken("\r\n"); + if (!content_type.empty()) { + ctoken("Content-Type: "); + stoken(content_type); + ctoken("\r\n"); + } + + ctoken("Content-Range: "); + const auto &range = req.ranges[i]; + stoken(make_content_range_header_field(range, res.content_length_)); + ctoken("\r\n"); + ctoken("\r\n"); + + auto offsets = get_range_offset_and_length(req, res.content_length_, i); + auto offset = offsets.first; + auto length = offsets.second; + if (!content(offset, length)) { return false; } + ctoken("\r\n"); + } + + ctoken("--"); + stoken(boundary); + ctoken("--"); + + return true; +} + +inline bool make_multipart_ranges_data(const Request &req, Response &res, + const std::string &boundary, + const std::string &content_type, + std::string &data) { + return process_multipart_ranges_data( + req, res, boundary, content_type, + [&](const std::string &token) { data += token; }, + [&](const std::string &token) { data += token; }, + [&](size_t offset, size_t length) { + if (offset < res.body.size()) { + data += res.body.substr(offset, length); + return true; + } + return false; + }); +} + +inline size_t +get_multipart_ranges_data_length(const Request &req, Response &res, + const std::string &boundary, + const std::string &content_type) { + size_t data_length = 0; + + process_multipart_ranges_data( + req, res, boundary, content_type, + [&](const std::string &token) { data_length += token.size(); }, + [&](const std::string &token) { data_length += token.size(); }, + [&](size_t /*offset*/, size_t length) { + data_length += length; + return true; + }); + + return data_length; +} + +template +inline bool write_multipart_ranges_data(Stream &strm, const Request &req, + Response &res, + const std::string &boundary, + const std::string &content_type, + const T &is_shutting_down) { + return process_multipart_ranges_data( + req, res, boundary, content_type, + [&](const std::string &token) { strm.write(token); }, + [&](const std::string &token) { strm.write(token); }, + [&](size_t offset, size_t length) { + return write_content(strm, res.content_provider_, offset, length, + is_shutting_down); + }); +} + +inline std::pair +get_range_offset_and_length(const Request &req, const Response &res, + size_t index) { + auto r = req.ranges[index]; + + if (r.second == -1) { + r.second = static_cast(res.content_length_) - 1; + } + + return std::make_pair(r.first, r.second - r.first + 1); +} + +inline bool expect_content(const Request &req) { + if (req.method == "POST" || req.method == "PUT" || req.method == "PATCH" || + req.method == "PRI" || req.method == "DELETE") { + return true; + } + // TODO: check if Content-Length is set + return false; +} + +inline bool has_crlf(const std::string &s) { + auto p = s.c_str(); + while (*p) { + if (*p == '\r' || *p == '\n') { return true; } + p++; + } + return false; +} + +#ifdef CPPHTTPLIB_OPENSSL_SUPPORT +inline std::string message_digest(const std::string &s, const EVP_MD *algo) { + auto context = std::unique_ptr( + EVP_MD_CTX_new(), EVP_MD_CTX_free); + + unsigned int hash_length = 0; + unsigned char hash[EVP_MAX_MD_SIZE]; + + EVP_DigestInit_ex(context.get(), algo, nullptr); + EVP_DigestUpdate(context.get(), s.c_str(), s.size()); + EVP_DigestFinal_ex(context.get(), hash, &hash_length); + + std::stringstream ss; + for (auto i = 0u; i < hash_length; ++i) { + ss << std::hex << std::setw(2) << std::setfill('0') + << static_cast(hash[i]); + } + + return ss.str(); +} + +inline std::string MD5(const std::string &s) { + return message_digest(s, EVP_md5()); +} + +inline std::string SHA_256(const std::string &s) { + return message_digest(s, EVP_sha256()); +} + +inline std::string SHA_512(const std::string &s) { + return message_digest(s, EVP_sha512()); +} +#endif + +#ifdef CPPHTTPLIB_OPENSSL_SUPPORT +#ifdef _WIN32 +// NOTE: This code came up with the following stackoverflow post: +// https://stackoverflow.com/questions/9507184/can-openssl-on-windows-use-the-system-certificate-store +inline bool load_system_certs_on_windows(X509_STORE *store) { + auto hStore = CertOpenSystemStoreW((HCRYPTPROV_LEGACY)NULL, L"ROOT"); + if (!hStore) { return false; } + + auto result = false; + PCCERT_CONTEXT pContext = NULL; + while ((pContext = CertEnumCertificatesInStore(hStore, pContext)) != + nullptr) { + auto encoded_cert = + static_cast(pContext->pbCertEncoded); + + auto x509 = d2i_X509(NULL, &encoded_cert, pContext->cbCertEncoded); + if (x509) { + X509_STORE_add_cert(store, x509); + X509_free(x509); + result = true; + } + } + + CertFreeCertificateContext(pContext); + CertCloseStore(hStore, 0); + + return result; +} +#elif defined(CPPHTTPLIB_USE_CERTS_FROM_MACOSX_KEYCHAIN) && defined(__APPLE__) +#if TARGET_OS_OSX +template +using CFObjectPtr = + std::unique_ptr::type, void (*)(CFTypeRef)>; + +inline void cf_object_ptr_deleter(CFTypeRef obj) { + if (obj) { CFRelease(obj); } +} + +inline bool retrieve_certs_from_keychain(CFObjectPtr &certs) { + CFStringRef keys[] = {kSecClass, kSecMatchLimit, kSecReturnRef}; + CFTypeRef values[] = {kSecClassCertificate, kSecMatchLimitAll, + kCFBooleanTrue}; + + CFObjectPtr query( + CFDictionaryCreate(nullptr, reinterpret_cast(keys), values, + sizeof(keys) / sizeof(keys[0]), + &kCFTypeDictionaryKeyCallBacks, + &kCFTypeDictionaryValueCallBacks), + cf_object_ptr_deleter); + + if (!query) { return false; } + + CFTypeRef security_items = nullptr; + if (SecItemCopyMatching(query.get(), &security_items) != errSecSuccess || + CFArrayGetTypeID() != CFGetTypeID(security_items)) { + return false; + } + + certs.reset(reinterpret_cast(security_items)); + return true; +} + +inline bool retrieve_root_certs_from_keychain(CFObjectPtr &certs) { + CFArrayRef root_security_items = nullptr; + if (SecTrustCopyAnchorCertificates(&root_security_items) != errSecSuccess) { + return false; + } + + certs.reset(root_security_items); + return true; +} + +inline bool add_certs_to_x509_store(CFArrayRef certs, X509_STORE *store) { + auto result = false; + for (auto i = 0; i < CFArrayGetCount(certs); ++i) { + const auto cert = reinterpret_cast( + CFArrayGetValueAtIndex(certs, i)); + + if (SecCertificateGetTypeID() != CFGetTypeID(cert)) { continue; } + + CFDataRef cert_data = nullptr; + if (SecItemExport(cert, kSecFormatX509Cert, 0, nullptr, &cert_data) != + errSecSuccess) { + continue; + } + + CFObjectPtr cert_data_ptr(cert_data, cf_object_ptr_deleter); + + auto encoded_cert = static_cast( + CFDataGetBytePtr(cert_data_ptr.get())); + + auto x509 = + d2i_X509(NULL, &encoded_cert, CFDataGetLength(cert_data_ptr.get())); + + if (x509) { + X509_STORE_add_cert(store, x509); + X509_free(x509); + result = true; + } + } + + return result; +} + +inline bool load_system_certs_on_macos(X509_STORE *store) { + auto result = false; + CFObjectPtr certs(nullptr, cf_object_ptr_deleter); + if (retrieve_certs_from_keychain(certs) && certs) { + result = add_certs_to_x509_store(certs.get(), store); + } + + if (retrieve_root_certs_from_keychain(certs) && certs) { + result = add_certs_to_x509_store(certs.get(), store) || result; + } + + return result; +} +#endif // TARGET_OS_OSX +#endif // _WIN32 +#endif // CPPHTTPLIB_OPENSSL_SUPPORT + +#ifdef _WIN32 +class WSInit { +public: + WSInit() { + WSADATA wsaData; + if (WSAStartup(0x0002, &wsaData) == 0) is_valid_ = true; + } + + ~WSInit() { + if (is_valid_) WSACleanup(); + } + + bool is_valid_ = false; +}; + +static WSInit wsinit_; +#endif + +#ifdef CPPHTTPLIB_OPENSSL_SUPPORT +inline std::pair make_digest_authentication_header( + const Request &req, const std::map &auth, + size_t cnonce_count, const std::string &cnonce, const std::string &username, + const std::string &password, bool is_proxy = false) { + std::string nc; + { + std::stringstream ss; + ss << std::setfill('0') << std::setw(8) << std::hex << cnonce_count; + nc = ss.str(); + } + + std::string qop; + if (auth.find("qop") != auth.end()) { + qop = auth.at("qop"); + if (qop.find("auth-int") != std::string::npos) { + qop = "auth-int"; + } else if (qop.find("auth") != std::string::npos) { + qop = "auth"; + } else { + qop.clear(); + } + } + + std::string algo = "MD5"; + if (auth.find("algorithm") != auth.end()) { algo = auth.at("algorithm"); } + + std::string response; + { + auto H = algo == "SHA-256" ? detail::SHA_256 + : algo == "SHA-512" ? detail::SHA_512 + : detail::MD5; + + auto A1 = username + ":" + auth.at("realm") + ":" + password; + + auto A2 = req.method + ":" + req.path; + if (qop == "auth-int") { A2 += ":" + H(req.body); } + + if (qop.empty()) { + response = H(H(A1) + ":" + auth.at("nonce") + ":" + H(A2)); + } else { + response = H(H(A1) + ":" + auth.at("nonce") + ":" + nc + ":" + cnonce + + ":" + qop + ":" + H(A2)); + } + } + + auto opaque = (auth.find("opaque") != auth.end()) ? auth.at("opaque") : ""; + + auto field = "Digest username=\"" + username + "\", realm=\"" + + auth.at("realm") + "\", nonce=\"" + auth.at("nonce") + + "\", uri=\"" + req.path + "\", algorithm=" + algo + + (qop.empty() ? ", response=\"" + : ", qop=" + qop + ", nc=" + nc + ", cnonce=\"" + + cnonce + "\", response=\"") + + response + "\"" + + (opaque.empty() ? "" : ", opaque=\"" + opaque + "\""); + + auto key = is_proxy ? "Proxy-Authorization" : "Authorization"; + return std::make_pair(key, field); +} +#endif + +inline bool parse_www_authenticate(const Response &res, + std::map &auth, + bool is_proxy) { + auto auth_key = is_proxy ? "Proxy-Authenticate" : "WWW-Authenticate"; + if (res.has_header(auth_key)) { + static auto re = std::regex(R"~((?:(?:,\s*)?(.+?)=(?:"(.*?)"|([^,]*))))~"); + auto s = res.get_header_value(auth_key); + auto pos = s.find(' '); + if (pos != std::string::npos) { + auto type = s.substr(0, pos); + if (type == "Basic") { + return false; + } else if (type == "Digest") { + s = s.substr(pos + 1); + auto beg = std::sregex_iterator(s.begin(), s.end(), re); + for (auto i = beg; i != std::sregex_iterator(); ++i) { + const auto &m = *i; + auto key = s.substr(static_cast(m.position(1)), + static_cast(m.length(1))); + auto val = m.length(2) > 0 + ? s.substr(static_cast(m.position(2)), + static_cast(m.length(2))) + : s.substr(static_cast(m.position(3)), + static_cast(m.length(3))); + auth[key] = val; + } + return true; + } + } + } + return false; +} + +// https://stackoverflow.com/questions/440133/how-do-i-create-a-random-alpha-numeric-string-in-c/440240#answer-440240 +inline std::string random_string(size_t length) { + auto randchar = []() -> char { + const char charset[] = "0123456789" + "ABCDEFGHIJKLMNOPQRSTUVWXYZ" + "abcdefghijklmnopqrstuvwxyz"; + const size_t max_index = (sizeof(charset) - 1); + return charset[static_cast(std::rand()) % max_index]; + }; + std::string str(length, 0); + std::generate_n(str.begin(), length, randchar); + return str; +} + +class ContentProviderAdapter { +public: + explicit ContentProviderAdapter( + ContentProviderWithoutLength &&content_provider) + : content_provider_(content_provider) {} + + bool operator()(size_t offset, size_t, DataSink &sink) { + return content_provider_(offset, sink); + } + +private: + ContentProviderWithoutLength content_provider_; +}; + +} // namespace detail + +inline std::string hosted_at(const std::string &hostname) { + std::vector addrs; + hosted_at(hostname, addrs); + if (addrs.empty()) { return std::string(); } + return addrs[0]; +} + +inline void hosted_at(const std::string &hostname, + std::vector &addrs) { + struct addrinfo hints; + struct addrinfo *result; + + memset(&hints, 0, sizeof(struct addrinfo)); + hints.ai_family = AF_UNSPEC; + hints.ai_socktype = SOCK_STREAM; + hints.ai_protocol = 0; + + if (getaddrinfo(hostname.c_str(), nullptr, &hints, &result)) { +#if defined __linux__ && !defined __ANDROID__ + res_init(); +#endif + return; + } + + for (auto rp = result; rp; rp = rp->ai_next) { + const auto &addr = + *reinterpret_cast(rp->ai_addr); + std::string ip; + auto dummy = -1; + if (detail::get_ip_and_port(addr, sizeof(struct sockaddr_storage), ip, + dummy)) { + addrs.push_back(ip); + } + } + + freeaddrinfo(result); +} + +inline std::string append_query_params(const std::string &path, + const Params ¶ms) { + std::string path_with_query = path; + const static std::regex re("[^?]+\\?.*"); + auto delm = std::regex_match(path, re) ? '&' : '?'; + path_with_query += delm + detail::params_to_query_str(params); + return path_with_query; +} + +// Header utilities +inline std::pair make_range_header(Ranges ranges) { + std::string field = "bytes="; + auto i = 0; + for (auto r : ranges) { + if (i != 0) { field += ", "; } + if (r.first != -1) { field += std::to_string(r.first); } + field += '-'; + if (r.second != -1) { field += std::to_string(r.second); } + i++; + } + return std::make_pair("Range", std::move(field)); +} + +inline std::pair +make_basic_authentication_header(const std::string &username, + const std::string &password, bool is_proxy) { + auto field = "Basic " + detail::base64_encode(username + ":" + password); + auto key = is_proxy ? "Proxy-Authorization" : "Authorization"; + return std::make_pair(key, std::move(field)); +} + +inline std::pair +make_bearer_token_authentication_header(const std::string &token, + bool is_proxy = false) { + auto field = "Bearer " + token; + auto key = is_proxy ? "Proxy-Authorization" : "Authorization"; + return std::make_pair(key, std::move(field)); +} + +// Request implementation +inline bool Request::has_header(const std::string &key) const { + return detail::has_header(headers, key); +} + +inline std::string Request::get_header_value(const std::string &key, + size_t id) const { + return detail::get_header_value(headers, key, id, ""); +} + +inline size_t Request::get_header_value_count(const std::string &key) const { + auto r = headers.equal_range(key); + return static_cast(std::distance(r.first, r.second)); +} + +inline void Request::set_header(const std::string &key, + const std::string &val) { + if (!detail::has_crlf(key) && !detail::has_crlf(val)) { + headers.emplace(key, val); + } +} + +inline bool Request::has_param(const std::string &key) const { + return params.find(key) != params.end(); +} + +inline std::string Request::get_param_value(const std::string &key, + size_t id) const { + auto rng = params.equal_range(key); + auto it = rng.first; + std::advance(it, static_cast(id)); + if (it != rng.second) { return it->second; } + return std::string(); +} + +inline size_t Request::get_param_value_count(const std::string &key) const { + auto r = params.equal_range(key); + return static_cast(std::distance(r.first, r.second)); +} + +inline bool Request::is_multipart_form_data() const { + const auto &content_type = get_header_value("Content-Type"); + return !content_type.rfind("multipart/form-data", 0); +} + +inline bool Request::has_file(const std::string &key) const { + return files.find(key) != files.end(); +} + +inline MultipartFormData Request::get_file_value(const std::string &key) const { + auto it = files.find(key); + if (it != files.end()) { return it->second; } + return MultipartFormData(); +} + +inline std::vector +Request::get_file_values(const std::string &key) const { + std::vector values; + auto rng = files.equal_range(key); + for (auto it = rng.first; it != rng.second; it++) { + values.push_back(it->second); + } + return values; +} + +// Response implementation +inline bool Response::has_header(const std::string &key) const { + return headers.find(key) != headers.end(); +} + +inline std::string Response::get_header_value(const std::string &key, + size_t id) const { + return detail::get_header_value(headers, key, id, ""); +} + +inline size_t Response::get_header_value_count(const std::string &key) const { + auto r = headers.equal_range(key); + return static_cast(std::distance(r.first, r.second)); +} + +inline void Response::set_header(const std::string &key, + const std::string &val) { + if (!detail::has_crlf(key) && !detail::has_crlf(val)) { + headers.emplace(key, val); + } +} + +inline void Response::set_redirect(const std::string &url, int stat) { + if (!detail::has_crlf(url)) { + set_header("Location", url); + if (300 <= stat && stat < 400) { + this->status = stat; + } else { + this->status = StatusCode::Found_302; + } + } +} + +inline void Response::set_content(const char *s, size_t n, + const std::string &content_type) { + body.assign(s, n); + + auto rng = headers.equal_range("Content-Type"); + headers.erase(rng.first, rng.second); + set_header("Content-Type", content_type); +} + +inline void Response::set_content(const std::string &s, + const std::string &content_type) { + set_content(s.data(), s.size(), content_type); +} + +inline void Response::set_content_provider( + size_t in_length, const std::string &content_type, ContentProvider provider, + ContentProviderResourceReleaser resource_releaser) { + set_header("Content-Type", content_type); + content_length_ = in_length; + if (in_length > 0) { content_provider_ = std::move(provider); } + content_provider_resource_releaser_ = resource_releaser; + is_chunked_content_provider_ = false; +} + +inline void Response::set_content_provider( + const std::string &content_type, ContentProviderWithoutLength provider, + ContentProviderResourceReleaser resource_releaser) { + set_header("Content-Type", content_type); + content_length_ = 0; + content_provider_ = detail::ContentProviderAdapter(std::move(provider)); + content_provider_resource_releaser_ = resource_releaser; + is_chunked_content_provider_ = false; +} + +inline void Response::set_chunked_content_provider( + const std::string &content_type, ContentProviderWithoutLength provider, + ContentProviderResourceReleaser resource_releaser) { + set_header("Content-Type", content_type); + content_length_ = 0; + content_provider_ = detail::ContentProviderAdapter(std::move(provider)); + content_provider_resource_releaser_ = resource_releaser; + is_chunked_content_provider_ = true; +} + +// Result implementation +inline bool Result::has_request_header(const std::string &key) const { + return request_headers_.find(key) != request_headers_.end(); +} + +inline std::string Result::get_request_header_value(const std::string &key, + size_t id) const { + return detail::get_header_value(request_headers_, key, id, ""); +} + +inline size_t +Result::get_request_header_value_count(const std::string &key) const { + auto r = request_headers_.equal_range(key); + return static_cast(std::distance(r.first, r.second)); +} + +// Stream implementation +inline ssize_t Stream::write(const char *ptr) { + return write(ptr, strlen(ptr)); +} + +inline ssize_t Stream::write(const std::string &s) { + return write(s.data(), s.size()); +} + +namespace detail { + +// Socket stream implementation +inline SocketStream::SocketStream(socket_t sock, time_t read_timeout_sec, + time_t read_timeout_usec, + time_t write_timeout_sec, + time_t write_timeout_usec) + : sock_(sock), read_timeout_sec_(read_timeout_sec), + read_timeout_usec_(read_timeout_usec), + write_timeout_sec_(write_timeout_sec), + write_timeout_usec_(write_timeout_usec), read_buff_(read_buff_size_, 0) {} + +inline SocketStream::~SocketStream() = default; + +inline bool SocketStream::is_readable() const { + return select_read(sock_, read_timeout_sec_, read_timeout_usec_) > 0; +} + +inline bool SocketStream::is_writable() const { + return select_write(sock_, write_timeout_sec_, write_timeout_usec_) > 0 && + is_socket_alive(sock_); +} + +inline ssize_t SocketStream::read(char *ptr, size_t size) { +#ifdef _WIN32 + size = + (std::min)(size, static_cast((std::numeric_limits::max)())); +#else + size = (std::min)(size, + static_cast((std::numeric_limits::max)())); +#endif + + if (read_buff_off_ < read_buff_content_size_) { + auto remaining_size = read_buff_content_size_ - read_buff_off_; + if (size <= remaining_size) { + memcpy(ptr, read_buff_.data() + read_buff_off_, size); + read_buff_off_ += size; + return static_cast(size); + } else { + memcpy(ptr, read_buff_.data() + read_buff_off_, remaining_size); + read_buff_off_ += remaining_size; + return static_cast(remaining_size); + } + } + + if (!is_readable()) { return -1; } + + read_buff_off_ = 0; + read_buff_content_size_ = 0; + + if (size < read_buff_size_) { + auto n = read_socket(sock_, read_buff_.data(), read_buff_size_, + CPPHTTPLIB_RECV_FLAGS); + if (n <= 0) { + return n; + } else if (n <= static_cast(size)) { + memcpy(ptr, read_buff_.data(), static_cast(n)); + return n; + } else { + memcpy(ptr, read_buff_.data(), size); + read_buff_off_ = size; + read_buff_content_size_ = static_cast(n); + return static_cast(size); + } + } else { + return read_socket(sock_, ptr, size, CPPHTTPLIB_RECV_FLAGS); + } +} + +inline ssize_t SocketStream::write(const char *ptr, size_t size) { + if (!is_writable()) { return -1; } + +#if defined(_WIN32) && !defined(_WIN64) + size = + (std::min)(size, static_cast((std::numeric_limits::max)())); +#endif + + return send_socket(sock_, ptr, size, CPPHTTPLIB_SEND_FLAGS); +} + +inline void SocketStream::get_remote_ip_and_port(std::string &ip, + int &port) const { + return detail::get_remote_ip_and_port(sock_, ip, port); +} + +inline void SocketStream::get_local_ip_and_port(std::string &ip, + int &port) const { + return detail::get_local_ip_and_port(sock_, ip, port); +} + +inline socket_t SocketStream::socket() const { return sock_; } + +// Buffer stream implementation +inline bool BufferStream::is_readable() const { return true; } + +inline bool BufferStream::is_writable() const { return true; } + +inline ssize_t BufferStream::read(char *ptr, size_t size) { +#if defined(_MSC_VER) && _MSC_VER < 1910 + auto len_read = buffer._Copy_s(ptr, size, size, position); +#else + auto len_read = buffer.copy(ptr, size, position); +#endif + position += static_cast(len_read); + return static_cast(len_read); +} + +inline ssize_t BufferStream::write(const char *ptr, size_t size) { + buffer.append(ptr, size); + return static_cast(size); +} + +inline void BufferStream::get_remote_ip_and_port(std::string & /*ip*/, + int & /*port*/) const {} + +inline void BufferStream::get_local_ip_and_port(std::string & /*ip*/, + int & /*port*/) const {} + +inline socket_t BufferStream::socket() const { return 0; } + +inline const std::string &BufferStream::get_buffer() const { return buffer; } + +inline PathParamsMatcher::PathParamsMatcher(const std::string &pattern) { + // One past the last ending position of a path param substring + std::size_t last_param_end = 0; + +#ifndef CPPHTTPLIB_NO_EXCEPTIONS + // Needed to ensure that parameter names are unique during matcher + // construction + // If exceptions are disabled, only last duplicate path + // parameter will be set + std::unordered_set param_name_set; +#endif + + while (true) { + const auto marker_pos = pattern.find(marker, last_param_end); + if (marker_pos == std::string::npos) { break; } + + static_fragments_.push_back( + pattern.substr(last_param_end, marker_pos - last_param_end)); + + const auto param_name_start = marker_pos + 1; + + auto sep_pos = pattern.find(separator, param_name_start); + if (sep_pos == std::string::npos) { sep_pos = pattern.length(); } + + auto param_name = + pattern.substr(param_name_start, sep_pos - param_name_start); + +#ifndef CPPHTTPLIB_NO_EXCEPTIONS + if (param_name_set.find(param_name) != param_name_set.cend()) { + std::string msg = "Encountered path parameter '" + param_name + + "' multiple times in route pattern '" + pattern + "'."; + throw std::invalid_argument(msg); + } +#endif + + param_names_.push_back(std::move(param_name)); + + last_param_end = sep_pos + 1; + } + + if (last_param_end < pattern.length()) { + static_fragments_.push_back(pattern.substr(last_param_end)); + } +} + +inline bool PathParamsMatcher::match(Request &request) const { + request.matches = std::smatch(); + request.path_params.clear(); + request.path_params.reserve(param_names_.size()); + + // One past the position at which the path matched the pattern last time + std::size_t starting_pos = 0; + for (size_t i = 0; i < static_fragments_.size(); ++i) { + const auto &fragment = static_fragments_[i]; + + if (starting_pos + fragment.length() > request.path.length()) { + return false; + } + + // Avoid unnecessary allocation by using strncmp instead of substr + + // comparison + if (std::strncmp(request.path.c_str() + starting_pos, fragment.c_str(), + fragment.length()) != 0) { + return false; + } + + starting_pos += fragment.length(); + + // Should only happen when we have a static fragment after a param + // Example: '/users/:id/subscriptions' + // The 'subscriptions' fragment here does not have a corresponding param + if (i >= param_names_.size()) { continue; } + + auto sep_pos = request.path.find(separator, starting_pos); + if (sep_pos == std::string::npos) { sep_pos = request.path.length(); } + + const auto ¶m_name = param_names_[i]; + + request.path_params.emplace( + param_name, request.path.substr(starting_pos, sep_pos - starting_pos)); + + // Mark everythin up to '/' as matched + starting_pos = sep_pos + 1; + } + // Returns false if the path is longer than the pattern + return starting_pos >= request.path.length(); +} + +inline bool RegexMatcher::match(Request &request) const { + request.path_params.clear(); + return std::regex_match(request.path, request.matches, regex_); +} + +} // namespace detail + +// HTTP server implementation +inline Server::Server() + : new_task_queue( + [] { return new ThreadPool(CPPHTTPLIB_THREAD_POOL_COUNT); }) { +#ifndef _WIN32 + signal(SIGPIPE, SIG_IGN); +#endif +} + +inline Server::~Server() = default; + +inline std::unique_ptr +Server::make_matcher(const std::string &pattern) { + if (pattern.find("/:") != std::string::npos) { + return detail::make_unique(pattern); + } else { + return detail::make_unique(pattern); + } +} + +inline Server &Server::Get(const std::string &pattern, Handler handler) { + get_handlers_.emplace_back(make_matcher(pattern), std::move(handler)); + return *this; +} + +inline Server &Server::Post(const std::string &pattern, Handler handler) { + post_handlers_.emplace_back(make_matcher(pattern), std::move(handler)); + return *this; +} + +inline Server &Server::Post(const std::string &pattern, + HandlerWithContentReader handler) { + post_handlers_for_content_reader_.emplace_back(make_matcher(pattern), + std::move(handler)); + return *this; +} + +inline Server &Server::Put(const std::string &pattern, Handler handler) { + put_handlers_.emplace_back(make_matcher(pattern), std::move(handler)); + return *this; +} + +inline Server &Server::Put(const std::string &pattern, + HandlerWithContentReader handler) { + put_handlers_for_content_reader_.emplace_back(make_matcher(pattern), + std::move(handler)); + return *this; +} + +inline Server &Server::Patch(const std::string &pattern, Handler handler) { + patch_handlers_.emplace_back(make_matcher(pattern), std::move(handler)); + return *this; +} + +inline Server &Server::Patch(const std::string &pattern, + HandlerWithContentReader handler) { + patch_handlers_for_content_reader_.emplace_back(make_matcher(pattern), + std::move(handler)); + return *this; +} + +inline Server &Server::Delete(const std::string &pattern, Handler handler) { + delete_handlers_.emplace_back(make_matcher(pattern), std::move(handler)); + return *this; +} + +inline Server &Server::Delete(const std::string &pattern, + HandlerWithContentReader handler) { + delete_handlers_for_content_reader_.emplace_back(make_matcher(pattern), + std::move(handler)); + return *this; +} + +inline Server &Server::Options(const std::string &pattern, Handler handler) { + options_handlers_.emplace_back(make_matcher(pattern), std::move(handler)); + return *this; +} + +inline bool Server::set_base_dir(const std::string &dir, + const std::string &mount_point) { + return set_mount_point(mount_point, dir); +} + +inline bool Server::set_mount_point(const std::string &mount_point, + const std::string &dir, Headers headers) { + if (detail::is_dir(dir)) { + std::string mnt = !mount_point.empty() ? mount_point : "/"; + if (!mnt.empty() && mnt[0] == '/') { + base_dirs_.push_back({mnt, dir, std::move(headers)}); + return true; + } + } + return false; +} + +inline bool Server::remove_mount_point(const std::string &mount_point) { + for (auto it = base_dirs_.begin(); it != base_dirs_.end(); ++it) { + if (it->mount_point == mount_point) { + base_dirs_.erase(it); + return true; + } + } + return false; +} + +inline Server & +Server::set_file_extension_and_mimetype_mapping(const std::string &ext, + const std::string &mime) { + file_extension_and_mimetype_map_[ext] = mime; + return *this; +} + +inline Server &Server::set_default_file_mimetype(const std::string &mime) { + default_file_mimetype_ = mime; + return *this; +} + +inline Server &Server::set_file_request_handler(Handler handler) { + file_request_handler_ = std::move(handler); + return *this; +} + +inline Server &Server::set_error_handler(HandlerWithResponse handler) { + error_handler_ = std::move(handler); + return *this; +} + +inline Server &Server::set_error_handler(Handler handler) { + error_handler_ = [handler](const Request &req, Response &res) { + handler(req, res); + return HandlerResponse::Handled; + }; + return *this; +} + +inline Server &Server::set_exception_handler(ExceptionHandler handler) { + exception_handler_ = std::move(handler); + return *this; +} + +inline Server &Server::set_pre_routing_handler(HandlerWithResponse handler) { + pre_routing_handler_ = std::move(handler); + return *this; +} + +inline Server &Server::set_post_routing_handler(Handler handler) { + post_routing_handler_ = std::move(handler); + return *this; +} + +inline Server &Server::set_logger(Logger logger) { + logger_ = std::move(logger); + return *this; +} + +inline Server & +Server::set_expect_100_continue_handler(Expect100ContinueHandler handler) { + expect_100_continue_handler_ = std::move(handler); + return *this; +} + +inline Server &Server::set_address_family(int family) { + address_family_ = family; + return *this; +} + +inline Server &Server::set_tcp_nodelay(bool on) { + tcp_nodelay_ = on; + return *this; +} + +inline Server &Server::set_socket_options(SocketOptions socket_options) { + socket_options_ = std::move(socket_options); + return *this; +} + +inline Server &Server::set_default_headers(Headers headers) { + default_headers_ = std::move(headers); + return *this; +} + +inline Server &Server::set_header_writer( + std::function const &writer) { + header_writer_ = writer; + return *this; +} + +inline Server &Server::set_keep_alive_max_count(size_t count) { + keep_alive_max_count_ = count; + return *this; +} + +inline Server &Server::set_keep_alive_timeout(time_t sec) { + keep_alive_timeout_sec_ = sec; + return *this; +} + +inline Server &Server::set_read_timeout(time_t sec, time_t usec) { + read_timeout_sec_ = sec; + read_timeout_usec_ = usec; + return *this; +} + +inline Server &Server::set_write_timeout(time_t sec, time_t usec) { + write_timeout_sec_ = sec; + write_timeout_usec_ = usec; + return *this; +} + +inline Server &Server::set_idle_interval(time_t sec, time_t usec) { + idle_interval_sec_ = sec; + idle_interval_usec_ = usec; + return *this; +} + +inline Server &Server::set_payload_max_length(size_t length) { + payload_max_length_ = length; + return *this; +} + +inline bool Server::bind_to_port(const std::string &host, int port, + int socket_flags) { + return bind_internal(host, port, socket_flags) >= 0; +} +inline int Server::bind_to_any_port(const std::string &host, int socket_flags) { + return bind_internal(host, 0, socket_flags); +} + +inline bool Server::listen_after_bind() { + auto se = detail::scope_exit([&]() { done_ = true; }); + return listen_internal(); +} + +inline bool Server::listen(const std::string &host, int port, + int socket_flags) { + auto se = detail::scope_exit([&]() { done_ = true; }); + return bind_to_port(host, port, socket_flags) && listen_internal(); +} + +inline bool Server::is_running() const { return is_running_; } + +inline void Server::wait_until_ready() const { + while (!is_running() && !done_) { + std::this_thread::sleep_for(std::chrono::milliseconds{1}); + } +} + +inline void Server::stop() { + if (is_running_) { + assert(svr_sock_ != INVALID_SOCKET); + std::atomic sock(svr_sock_.exchange(INVALID_SOCKET)); + detail::shutdown_socket(sock); + detail::close_socket(sock); + } +} + +inline bool Server::parse_request_line(const char *s, Request &req) const { + auto len = strlen(s); + if (len < 2 || s[len - 2] != '\r' || s[len - 1] != '\n') { return false; } + len -= 2; + + { + size_t count = 0; + + detail::split(s, s + len, ' ', [&](const char *b, const char *e) { + switch (count) { + case 0: req.method = std::string(b, e); break; + case 1: req.target = std::string(b, e); break; + case 2: req.version = std::string(b, e); break; + default: break; + } + count++; + }); + + if (count != 3) { return false; } + } + + static const std::set methods{ + "GET", "HEAD", "POST", "PUT", "DELETE", + "CONNECT", "OPTIONS", "TRACE", "PATCH", "PRI"}; + + if (methods.find(req.method) == methods.end()) { return false; } + + if (req.version != "HTTP/1.1" && req.version != "HTTP/1.0") { return false; } + + { + // Skip URL fragment + for (size_t i = 0; i < req.target.size(); i++) { + if (req.target[i] == '#') { + req.target.erase(i); + break; + } + } + + size_t count = 0; + + detail::split(req.target.data(), req.target.data() + req.target.size(), '?', + 2, [&](const char *b, const char *e) { + switch (count) { + case 0: + req.path = detail::decode_url(std::string(b, e), false); + break; + case 1: { + if (e - b > 0) { + detail::parse_query_text(std::string(b, e), req.params); + } + break; + } + default: break; + } + count++; + }); + + if (count > 2) { return false; } + } + + return true; +} + +inline bool Server::write_response(Stream &strm, bool close_connection, + const Request &req, Response &res) { + return write_response_core(strm, close_connection, req, res, false); +} + +inline bool Server::write_response_with_content(Stream &strm, + bool close_connection, + const Request &req, + Response &res) { + return write_response_core(strm, close_connection, req, res, true); +} + +inline bool Server::write_response_core(Stream &strm, bool close_connection, + const Request &req, Response &res, + bool need_apply_ranges) { + assert(res.status != -1); + + if (400 <= res.status && error_handler_ && + error_handler_(req, res) == HandlerResponse::Handled) { + need_apply_ranges = true; + } + + std::string content_type; + std::string boundary; + if (need_apply_ranges) { apply_ranges(req, res, content_type, boundary); } + + // Prepare additional headers + if (close_connection || req.get_header_value("Connection") == "close") { + res.set_header("Connection", "close"); + } else { + std::stringstream ss; + ss << "timeout=" << keep_alive_timeout_sec_ + << ", max=" << keep_alive_max_count_; + res.set_header("Keep-Alive", ss.str()); + } + + if (!res.has_header("Content-Type") && + (!res.body.empty() || res.content_length_ > 0 || res.content_provider_)) { + res.set_header("Content-Type", "text/plain"); + } + + if (!res.has_header("Content-Length") && res.body.empty() && + !res.content_length_ && !res.content_provider_) { + res.set_header("Content-Length", "0"); + } + + if (!res.has_header("Accept-Ranges") && req.method == "HEAD") { + res.set_header("Accept-Ranges", "bytes"); + } + + if (post_routing_handler_) { post_routing_handler_(req, res); } + + // Response line and headers + { + detail::BufferStream bstrm; + + if (!bstrm.write_format("HTTP/1.1 %d %s\r\n", res.status, + status_message(res.status))) { + return false; + } + + if (!header_writer_(bstrm, res.headers)) { return false; } + + // Flush buffer + auto &data = bstrm.get_buffer(); + detail::write_data(strm, data.data(), data.size()); + } + + // Body + auto ret = true; + if (req.method != "HEAD") { + if (!res.body.empty()) { + if (!detail::write_data(strm, res.body.data(), res.body.size())) { + ret = false; + } + } else if (res.content_provider_) { + if (write_content_with_provider(strm, req, res, boundary, content_type)) { + res.content_provider_success_ = true; + } else { + res.content_provider_success_ = false; + ret = false; + } + } + } + + // Log + if (logger_) { logger_(req, res); } + + return ret; +} + +inline bool +Server::write_content_with_provider(Stream &strm, const Request &req, + Response &res, const std::string &boundary, + const std::string &content_type) { + auto is_shutting_down = [this]() { + return this->svr_sock_ == INVALID_SOCKET; + }; + + if (res.content_length_ > 0) { + if (req.ranges.empty()) { + return detail::write_content(strm, res.content_provider_, 0, + res.content_length_, is_shutting_down); + } else if (req.ranges.size() == 1) { + auto offsets = + detail::get_range_offset_and_length(req, res.content_length_, 0); + auto offset = offsets.first; + auto length = offsets.second; + return detail::write_content(strm, res.content_provider_, offset, length, + is_shutting_down); + } else { + return detail::write_multipart_ranges_data( + strm, req, res, boundary, content_type, is_shutting_down); + } + } else { + if (res.is_chunked_content_provider_) { + auto type = detail::encoding_type(req, res); + + std::unique_ptr compressor; + if (type == detail::EncodingType::Gzip) { +#ifdef CPPHTTPLIB_ZLIB_SUPPORT + compressor = detail::make_unique(); +#endif + } else if (type == detail::EncodingType::Brotli) { +#ifdef CPPHTTPLIB_BROTLI_SUPPORT + compressor = detail::make_unique(); +#endif + } else { + compressor = detail::make_unique(); + } + assert(compressor != nullptr); + + return detail::write_content_chunked(strm, res.content_provider_, + is_shutting_down, *compressor); + } else { + return detail::write_content_without_length(strm, res.content_provider_, + is_shutting_down); + } + } +} + +inline bool Server::read_content(Stream &strm, Request &req, Response &res) { + MultipartFormDataMap::iterator cur; + auto file_count = 0; + if (read_content_core( + strm, req, res, + // Regular + [&](const char *buf, size_t n) { + if (req.body.size() + n > req.body.max_size()) { return false; } + req.body.append(buf, n); + return true; + }, + // Multipart + [&](const MultipartFormData &file) { + if (file_count++ == CPPHTTPLIB_MULTIPART_FORM_DATA_FILE_MAX_COUNT) { + return false; + } + cur = req.files.emplace(file.name, file); + return true; + }, + [&](const char *buf, size_t n) { + auto &content = cur->second.content; + if (content.size() + n > content.max_size()) { return false; } + content.append(buf, n); + return true; + })) { + const auto &content_type = req.get_header_value("Content-Type"); + if (!content_type.find("application/x-www-form-urlencoded")) { + if (req.body.size() > CPPHTTPLIB_FORM_URL_ENCODED_PAYLOAD_MAX_LENGTH) { + res.status = StatusCode::PayloadTooLarge_413; // NOTE: should be 414? + return false; + } + detail::parse_query_text(req.body, req.params); + } + return true; + } + return false; +} + +inline bool Server::read_content_with_content_receiver( + Stream &strm, Request &req, Response &res, ContentReceiver receiver, + MultipartContentHeader multipart_header, + ContentReceiver multipart_receiver) { + return read_content_core(strm, req, res, std::move(receiver), + std::move(multipart_header), + std::move(multipart_receiver)); +} + +inline bool +Server::read_content_core(Stream &strm, Request &req, Response &res, + ContentReceiver receiver, + MultipartContentHeader multipart_header, + ContentReceiver multipart_receiver) const { + detail::MultipartFormDataParser multipart_form_data_parser; + ContentReceiverWithProgress out; + + if (req.is_multipart_form_data()) { + const auto &content_type = req.get_header_value("Content-Type"); + std::string boundary; + if (!detail::parse_multipart_boundary(content_type, boundary)) { + res.status = StatusCode::BadRequest_400; + return false; + } + + multipart_form_data_parser.set_boundary(std::move(boundary)); + out = [&](const char *buf, size_t n, uint64_t /*off*/, uint64_t /*len*/) { + /* For debug + size_t pos = 0; + while (pos < n) { + auto read_size = (std::min)(1, n - pos); + auto ret = multipart_form_data_parser.parse( + buf + pos, read_size, multipart_receiver, multipart_header); + if (!ret) { return false; } + pos += read_size; + } + return true; + */ + return multipart_form_data_parser.parse(buf, n, multipart_receiver, + multipart_header); + }; + } else { + out = [receiver](const char *buf, size_t n, uint64_t /*off*/, + uint64_t /*len*/) { return receiver(buf, n); }; + } + + if (req.method == "DELETE" && !req.has_header("Content-Length")) { + return true; + } + + if (!detail::read_content(strm, req, payload_max_length_, res.status, nullptr, + out, true)) { + return false; + } + + if (req.is_multipart_form_data()) { + if (!multipart_form_data_parser.is_valid()) { + res.status = StatusCode::BadRequest_400; + return false; + } + } + + return true; +} + +inline bool Server::handle_file_request(const Request &req, Response &res, + bool head) { + for (const auto &entry : base_dirs_) { + // Prefix match + if (!req.path.compare(0, entry.mount_point.size(), entry.mount_point)) { + std::string sub_path = "/" + req.path.substr(entry.mount_point.size()); + if (detail::is_valid_path(sub_path)) { + auto path = entry.base_dir + sub_path; + if (path.back() == '/') { path += "index.html"; } + + if (detail::is_file(path)) { + for (const auto &kv : entry.headers) { + res.set_header(kv.first, kv.second); + } + + auto mm = std::make_shared(path.c_str()); + if (!mm->is_open()) { return false; } + + res.set_content_provider( + mm->size(), + detail::find_content_type(path, file_extension_and_mimetype_map_, + default_file_mimetype_), + [mm](size_t offset, size_t length, DataSink &sink) -> bool { + sink.write(mm->data() + offset, length); + return true; + }); + + if (!head && file_request_handler_) { + file_request_handler_(req, res); + } + + return true; + } + } + } + } + return false; +} + +inline socket_t +Server::create_server_socket(const std::string &host, int port, + int socket_flags, + SocketOptions socket_options) const { + return detail::create_socket( + host, std::string(), port, address_family_, socket_flags, tcp_nodelay_, + std::move(socket_options), + [](socket_t sock, struct addrinfo &ai) -> bool { + if (::bind(sock, ai.ai_addr, static_cast(ai.ai_addrlen))) { + return false; + } + if (::listen(sock, CPPHTTPLIB_LISTEN_BACKLOG)) { return false; } + return true; + }); +} + +inline int Server::bind_internal(const std::string &host, int port, + int socket_flags) { + if (!is_valid()) { return -1; } + + svr_sock_ = create_server_socket(host, port, socket_flags, socket_options_); + if (svr_sock_ == INVALID_SOCKET) { return -1; } + + if (port == 0) { + struct sockaddr_storage addr; + socklen_t addr_len = sizeof(addr); + if (getsockname(svr_sock_, reinterpret_cast(&addr), + &addr_len) == -1) { + return -1; + } + if (addr.ss_family == AF_INET) { + return ntohs(reinterpret_cast(&addr)->sin_port); + } else if (addr.ss_family == AF_INET6) { + return ntohs(reinterpret_cast(&addr)->sin6_port); + } else { + return -1; + } + } else { + return port; + } +} + +inline bool Server::listen_internal() { + auto ret = true; + is_running_ = true; + auto se = detail::scope_exit([&]() { is_running_ = false; }); + + { + std::unique_ptr task_queue(new_task_queue()); + + while (svr_sock_ != INVALID_SOCKET) { +#ifndef _WIN32 + if (idle_interval_sec_ > 0 || idle_interval_usec_ > 0) { +#endif + auto val = detail::select_read(svr_sock_, idle_interval_sec_, + idle_interval_usec_); + if (val == 0) { // Timeout + task_queue->on_idle(); + continue; + } +#ifndef _WIN32 + } +#endif + socket_t sock = accept(svr_sock_, nullptr, nullptr); + + if (sock == INVALID_SOCKET) { + if (errno == EMFILE) { + // The per-process limit of open file descriptors has been reached. + // Try to accept new connections after a short sleep. + std::this_thread::sleep_for(std::chrono::milliseconds(1)); + continue; + } else if (errno == EINTR || errno == EAGAIN) { + continue; + } + if (svr_sock_ != INVALID_SOCKET) { + detail::close_socket(svr_sock_); + ret = false; + } else { + ; // The server socket was closed by user. + } + break; + } + + { +#ifdef _WIN32 + auto timeout = static_cast(read_timeout_sec_ * 1000 + + read_timeout_usec_ / 1000); + setsockopt(sock, SOL_SOCKET, SO_RCVTIMEO, + reinterpret_cast(&timeout), sizeof(timeout)); +#else + timeval tv; + tv.tv_sec = static_cast(read_timeout_sec_); + tv.tv_usec = static_cast(read_timeout_usec_); + setsockopt(sock, SOL_SOCKET, SO_RCVTIMEO, + reinterpret_cast(&tv), sizeof(tv)); +#endif + } + { + +#ifdef _WIN32 + auto timeout = static_cast(write_timeout_sec_ * 1000 + + write_timeout_usec_ / 1000); + setsockopt(sock, SOL_SOCKET, SO_SNDTIMEO, + reinterpret_cast(&timeout), sizeof(timeout)); +#else + timeval tv; + tv.tv_sec = static_cast(write_timeout_sec_); + tv.tv_usec = static_cast(write_timeout_usec_); + setsockopt(sock, SOL_SOCKET, SO_SNDTIMEO, + reinterpret_cast(&tv), sizeof(tv)); +#endif + } + + task_queue->enqueue([this, sock]() { process_and_close_socket(sock); }); + } + + task_queue->shutdown(); + } + + return ret; +} + +inline bool Server::routing(Request &req, Response &res, Stream &strm) { + if (pre_routing_handler_ && + pre_routing_handler_(req, res) == HandlerResponse::Handled) { + return true; + } + + // File handler + auto is_head_request = req.method == "HEAD"; + if ((req.method == "GET" || is_head_request) && + handle_file_request(req, res, is_head_request)) { + return true; + } + + if (detail::expect_content(req)) { + // Content reader handler + { + ContentReader reader( + [&](ContentReceiver receiver) { + return read_content_with_content_receiver( + strm, req, res, std::move(receiver), nullptr, nullptr); + }, + [&](MultipartContentHeader header, ContentReceiver receiver) { + return read_content_with_content_receiver(strm, req, res, nullptr, + std::move(header), + std::move(receiver)); + }); + + if (req.method == "POST") { + if (dispatch_request_for_content_reader( + req, res, std::move(reader), + post_handlers_for_content_reader_)) { + return true; + } + } else if (req.method == "PUT") { + if (dispatch_request_for_content_reader( + req, res, std::move(reader), + put_handlers_for_content_reader_)) { + return true; + } + } else if (req.method == "PATCH") { + if (dispatch_request_for_content_reader( + req, res, std::move(reader), + patch_handlers_for_content_reader_)) { + return true; + } + } else if (req.method == "DELETE") { + if (dispatch_request_for_content_reader( + req, res, std::move(reader), + delete_handlers_for_content_reader_)) { + return true; + } + } + } + + // Read content into `req.body` + if (!read_content(strm, req, res)) { return false; } + } + + // Regular handler + if (req.method == "GET" || req.method == "HEAD") { + return dispatch_request(req, res, get_handlers_); + } else if (req.method == "POST") { + return dispatch_request(req, res, post_handlers_); + } else if (req.method == "PUT") { + return dispatch_request(req, res, put_handlers_); + } else if (req.method == "DELETE") { + return dispatch_request(req, res, delete_handlers_); + } else if (req.method == "OPTIONS") { + return dispatch_request(req, res, options_handlers_); + } else if (req.method == "PATCH") { + return dispatch_request(req, res, patch_handlers_); + } + + res.status = StatusCode::BadRequest_400; + return false; +} + +inline bool Server::dispatch_request(Request &req, Response &res, + const Handlers &handlers) const { + for (const auto &x : handlers) { + const auto &matcher = x.first; + const auto &handler = x.second; + + if (matcher->match(req)) { + handler(req, res); + return true; + } + } + return false; +} + +inline void Server::apply_ranges(const Request &req, Response &res, + std::string &content_type, + std::string &boundary) const { + if (req.ranges.size() > 1) { + boundary = detail::make_multipart_data_boundary(); + + auto it = res.headers.find("Content-Type"); + if (it != res.headers.end()) { + content_type = it->second; + res.headers.erase(it); + } + + res.set_header("Content-Type", + "multipart/byteranges; boundary=" + boundary); + } + + auto type = detail::encoding_type(req, res); + + if (res.body.empty()) { + if (res.content_length_ > 0) { + size_t length = 0; + if (req.ranges.empty()) { + length = res.content_length_; + } else if (req.ranges.size() == 1) { + auto offsets = + detail::get_range_offset_and_length(req, res.content_length_, 0); + length = offsets.second; + + auto content_range = detail::make_content_range_header_field( + req.ranges[0], res.content_length_); + res.set_header("Content-Range", content_range); + } else { + length = detail::get_multipart_ranges_data_length(req, res, boundary, + content_type); + } + res.set_header("Content-Length", std::to_string(length)); + } else { + if (res.content_provider_) { + if (res.is_chunked_content_provider_) { + res.set_header("Transfer-Encoding", "chunked"); + if (type == detail::EncodingType::Gzip) { + res.set_header("Content-Encoding", "gzip"); + } else if (type == detail::EncodingType::Brotli) { + res.set_header("Content-Encoding", "br"); + } + } + } + } + } else { + if (req.ranges.empty()) { + ; + } else if (req.ranges.size() == 1) { + auto content_range = detail::make_content_range_header_field( + req.ranges[0], res.body.size()); + res.set_header("Content-Range", content_range); + + auto offsets = + detail::get_range_offset_and_length(req, res.body.size(), 0); + auto offset = offsets.first; + auto length = offsets.second; + + if (offset < res.body.size()) { + res.body = res.body.substr(offset, length); + } else { + res.body.clear(); + res.status = StatusCode::RangeNotSatisfiable_416; + } + } else { + std::string data; + if (detail::make_multipart_ranges_data(req, res, boundary, content_type, + data)) { + res.body.swap(data); + } else { + res.body.clear(); + res.status = StatusCode::RangeNotSatisfiable_416; + } + } + + if (type != detail::EncodingType::None) { + std::unique_ptr compressor; + std::string content_encoding; + + if (type == detail::EncodingType::Gzip) { +#ifdef CPPHTTPLIB_ZLIB_SUPPORT + compressor = detail::make_unique(); + content_encoding = "gzip"; +#endif + } else if (type == detail::EncodingType::Brotli) { +#ifdef CPPHTTPLIB_BROTLI_SUPPORT + compressor = detail::make_unique(); + content_encoding = "br"; +#endif + } + + if (compressor) { + std::string compressed; + if (compressor->compress(res.body.data(), res.body.size(), true, + [&](const char *data, size_t data_len) { + compressed.append(data, data_len); + return true; + })) { + res.body.swap(compressed); + res.set_header("Content-Encoding", content_encoding); + } + } + } + + auto length = std::to_string(res.body.size()); + res.set_header("Content-Length", length); + } +} + +inline bool Server::dispatch_request_for_content_reader( + Request &req, Response &res, ContentReader content_reader, + const HandlersForContentReader &handlers) const { + for (const auto &x : handlers) { + const auto &matcher = x.first; + const auto &handler = x.second; + + if (matcher->match(req)) { + handler(req, res, content_reader); + return true; + } + } + return false; +} + +inline bool +Server::process_request(Stream &strm, bool close_connection, + bool &connection_closed, + const std::function &setup_request) { + std::array buf{}; + + detail::stream_line_reader line_reader(strm, buf.data(), buf.size()); + + // Connection has been closed on client + if (!line_reader.getline()) { return false; } + + Request req; + + Response res; + res.version = "HTTP/1.1"; + res.headers = default_headers_; + +#ifdef _WIN32 + // TODO: Increase FD_SETSIZE statically (libzmq), dynamically (MySQL). +#else +#ifndef CPPHTTPLIB_USE_POLL + // Socket file descriptor exceeded FD_SETSIZE... + if (strm.socket() >= FD_SETSIZE) { + Headers dummy; + detail::read_headers(strm, dummy); + res.status = StatusCode::InternalServerError_500; + return write_response(strm, close_connection, req, res); + } +#endif +#endif + + // Check if the request URI doesn't exceed the limit + if (line_reader.size() > CPPHTTPLIB_REQUEST_URI_MAX_LENGTH) { + Headers dummy; + detail::read_headers(strm, dummy); + res.status = StatusCode::UriTooLong_414; + return write_response(strm, close_connection, req, res); + } + + // Request line and headers + if (!parse_request_line(line_reader.ptr(), req) || + !detail::read_headers(strm, req.headers)) { + res.status = StatusCode::BadRequest_400; + return write_response(strm, close_connection, req, res); + } + + if (req.get_header_value("Connection") == "close") { + connection_closed = true; + } + + if (req.version == "HTTP/1.0" && + req.get_header_value("Connection") != "Keep-Alive") { + connection_closed = true; + } + + strm.get_remote_ip_and_port(req.remote_addr, req.remote_port); + req.set_header("REMOTE_ADDR", req.remote_addr); + req.set_header("REMOTE_PORT", std::to_string(req.remote_port)); + + strm.get_local_ip_and_port(req.local_addr, req.local_port); + req.set_header("LOCAL_ADDR", req.local_addr); + req.set_header("LOCAL_PORT", std::to_string(req.local_port)); + + if (req.has_header("Range")) { + const auto &range_header_value = req.get_header_value("Range"); + if (!detail::parse_range_header(range_header_value, req.ranges)) { + res.status = StatusCode::RangeNotSatisfiable_416; + return write_response(strm, close_connection, req, res); + } + } + + if (setup_request) { setup_request(req); } + + if (req.get_header_value("Expect") == "100-continue") { + int status = StatusCode::Continue_100; + if (expect_100_continue_handler_) { + status = expect_100_continue_handler_(req, res); + } + switch (status) { + case StatusCode::Continue_100: + case StatusCode::ExpectationFailed_417: + strm.write_format("HTTP/1.1 %d %s\r\n\r\n", status, + status_message(status)); + break; + default: return write_response(strm, close_connection, req, res); + } + } + + // Rounting + auto routed = false; +#ifdef CPPHTTPLIB_NO_EXCEPTIONS + routed = routing(req, res, strm); +#else + try { + routed = routing(req, res, strm); + } catch (std::exception &e) { + if (exception_handler_) { + auto ep = std::current_exception(); + exception_handler_(req, res, ep); + routed = true; + } else { + res.status = StatusCode::InternalServerError_500; + std::string val; + auto s = e.what(); + for (size_t i = 0; s[i]; i++) { + switch (s[i]) { + case '\r': val += "\\r"; break; + case '\n': val += "\\n"; break; + default: val += s[i]; break; + } + } + res.set_header("EXCEPTION_WHAT", val); + } + } catch (...) { + if (exception_handler_) { + auto ep = std::current_exception(); + exception_handler_(req, res, ep); + routed = true; + } else { + res.status = StatusCode::InternalServerError_500; + res.set_header("EXCEPTION_WHAT", "UNKNOWN"); + } + } +#endif + + if (routed) { + if (res.status == -1) { + res.status = req.ranges.empty() ? StatusCode::OK_200 + : StatusCode::PartialContent_206; + } + return write_response_with_content(strm, close_connection, req, res); + } else { + if (res.status == -1) { res.status = StatusCode::NotFound_404; } + return write_response(strm, close_connection, req, res); + } +} + +inline bool Server::is_valid() const { return true; } + +inline bool Server::process_and_close_socket(socket_t sock) { + auto ret = detail::process_server_socket( + svr_sock_, sock, keep_alive_max_count_, keep_alive_timeout_sec_, + read_timeout_sec_, read_timeout_usec_, write_timeout_sec_, + write_timeout_usec_, + [this](Stream &strm, bool close_connection, bool &connection_closed) { + return process_request(strm, close_connection, connection_closed, + nullptr); + }); + + detail::shutdown_socket(sock); + detail::close_socket(sock); + return ret; +} + +// HTTP client implementation +inline ClientImpl::ClientImpl(const std::string &host) + : ClientImpl(host, 80, std::string(), std::string()) {} + +inline ClientImpl::ClientImpl(const std::string &host, int port) + : ClientImpl(host, port, std::string(), std::string()) {} + +inline ClientImpl::ClientImpl(const std::string &host, int port, + const std::string &client_cert_path, + const std::string &client_key_path) + : host_(host), port_(port), + host_and_port_(adjust_host_string(host) + ":" + std::to_string(port)), + client_cert_path_(client_cert_path), client_key_path_(client_key_path) {} + +inline ClientImpl::~ClientImpl() { + std::lock_guard guard(socket_mutex_); + shutdown_socket(socket_); + close_socket(socket_); +} + +inline bool ClientImpl::is_valid() const { return true; } + +inline void ClientImpl::copy_settings(const ClientImpl &rhs) { + client_cert_path_ = rhs.client_cert_path_; + client_key_path_ = rhs.client_key_path_; + connection_timeout_sec_ = rhs.connection_timeout_sec_; + read_timeout_sec_ = rhs.read_timeout_sec_; + read_timeout_usec_ = rhs.read_timeout_usec_; + write_timeout_sec_ = rhs.write_timeout_sec_; + write_timeout_usec_ = rhs.write_timeout_usec_; + basic_auth_username_ = rhs.basic_auth_username_; + basic_auth_password_ = rhs.basic_auth_password_; + bearer_token_auth_token_ = rhs.bearer_token_auth_token_; +#ifdef CPPHTTPLIB_OPENSSL_SUPPORT + digest_auth_username_ = rhs.digest_auth_username_; + digest_auth_password_ = rhs.digest_auth_password_; +#endif + keep_alive_ = rhs.keep_alive_; + follow_location_ = rhs.follow_location_; + url_encode_ = rhs.url_encode_; + address_family_ = rhs.address_family_; + tcp_nodelay_ = rhs.tcp_nodelay_; + socket_options_ = rhs.socket_options_; + compress_ = rhs.compress_; + decompress_ = rhs.decompress_; + interface_ = rhs.interface_; + proxy_host_ = rhs.proxy_host_; + proxy_port_ = rhs.proxy_port_; + proxy_basic_auth_username_ = rhs.proxy_basic_auth_username_; + proxy_basic_auth_password_ = rhs.proxy_basic_auth_password_; + proxy_bearer_token_auth_token_ = rhs.proxy_bearer_token_auth_token_; +#ifdef CPPHTTPLIB_OPENSSL_SUPPORT + proxy_digest_auth_username_ = rhs.proxy_digest_auth_username_; + proxy_digest_auth_password_ = rhs.proxy_digest_auth_password_; +#endif +#ifdef CPPHTTPLIB_OPENSSL_SUPPORT + ca_cert_file_path_ = rhs.ca_cert_file_path_; + ca_cert_dir_path_ = rhs.ca_cert_dir_path_; + ca_cert_store_ = rhs.ca_cert_store_; +#endif +#ifdef CPPHTTPLIB_OPENSSL_SUPPORT + server_certificate_verification_ = rhs.server_certificate_verification_; +#endif + logger_ = rhs.logger_; +} + +inline socket_t ClientImpl::create_client_socket(Error &error) const { + if (!proxy_host_.empty() && proxy_port_ != -1) { + return detail::create_client_socket( + proxy_host_, std::string(), proxy_port_, address_family_, tcp_nodelay_, + socket_options_, connection_timeout_sec_, connection_timeout_usec_, + read_timeout_sec_, read_timeout_usec_, write_timeout_sec_, + write_timeout_usec_, interface_, error); + } + + // Check is custom IP specified for host_ + std::string ip; + auto it = addr_map_.find(host_); + if (it != addr_map_.end()) { ip = it->second; } + + return detail::create_client_socket( + host_, ip, port_, address_family_, tcp_nodelay_, socket_options_, + connection_timeout_sec_, connection_timeout_usec_, read_timeout_sec_, + read_timeout_usec_, write_timeout_sec_, write_timeout_usec_, interface_, + error); +} + +inline bool ClientImpl::create_and_connect_socket(Socket &socket, + Error &error) { + auto sock = create_client_socket(error); + if (sock == INVALID_SOCKET) { return false; } + socket.sock = sock; + return true; +} + +inline void ClientImpl::shutdown_ssl(Socket & /*socket*/, + bool /*shutdown_gracefully*/) { + // If there are any requests in flight from threads other than us, then it's + // a thread-unsafe race because individual ssl* objects are not thread-safe. + assert(socket_requests_in_flight_ == 0 || + socket_requests_are_from_thread_ == std::this_thread::get_id()); +} + +inline void ClientImpl::shutdown_socket(Socket &socket) const { + if (socket.sock == INVALID_SOCKET) { return; } + detail::shutdown_socket(socket.sock); +} + +inline void ClientImpl::close_socket(Socket &socket) { + // If there are requests in flight in another thread, usually closing + // the socket will be fine and they will simply receive an error when + // using the closed socket, but it is still a bug since rarely the OS + // may reassign the socket id to be used for a new socket, and then + // suddenly they will be operating on a live socket that is different + // than the one they intended! + assert(socket_requests_in_flight_ == 0 || + socket_requests_are_from_thread_ == std::this_thread::get_id()); + + // It is also a bug if this happens while SSL is still active +#ifdef CPPHTTPLIB_OPENSSL_SUPPORT + assert(socket.ssl == nullptr); +#endif + if (socket.sock == INVALID_SOCKET) { return; } + detail::close_socket(socket.sock); + socket.sock = INVALID_SOCKET; +} + +inline bool ClientImpl::read_response_line(Stream &strm, const Request &req, + Response &res) const { + std::array buf{}; + + detail::stream_line_reader line_reader(strm, buf.data(), buf.size()); + + if (!line_reader.getline()) { return false; } + +#ifdef CPPHTTPLIB_ALLOW_LF_AS_LINE_TERMINATOR + const static std::regex re("(HTTP/1\\.[01]) (\\d{3})(?: (.*?))?\r?\n"); +#else + const static std::regex re("(HTTP/1\\.[01]) (\\d{3})(?: (.*?))?\r\n"); +#endif + + std::cmatch m; + if (!std::regex_match(line_reader.ptr(), m, re)) { + return req.method == "CONNECT"; + } + res.version = std::string(m[1]); + res.status = std::stoi(std::string(m[2])); + res.reason = std::string(m[3]); + + // Ignore '100 Continue' + while (res.status == StatusCode::Continue_100) { + if (!line_reader.getline()) { return false; } // CRLF + if (!line_reader.getline()) { return false; } // next response line + + if (!std::regex_match(line_reader.ptr(), m, re)) { return false; } + res.version = std::string(m[1]); + res.status = std::stoi(std::string(m[2])); + res.reason = std::string(m[3]); + } + + return true; +} + +inline bool ClientImpl::send(Request &req, Response &res, Error &error) { + std::lock_guard request_mutex_guard(request_mutex_); + auto ret = send_(req, res, error); + if (error == Error::SSLPeerCouldBeClosed_) { + assert(!ret); + ret = send_(req, res, error); + } + return ret; +} + +inline bool ClientImpl::send_(Request &req, Response &res, Error &error) { + { + std::lock_guard guard(socket_mutex_); + + // Set this to false immediately - if it ever gets set to true by the end of + // the request, we know another thread instructed us to close the socket. + socket_should_be_closed_when_request_is_done_ = false; + + auto is_alive = false; + if (socket_.is_open()) { + is_alive = detail::is_socket_alive(socket_.sock); + if (!is_alive) { + // Attempt to avoid sigpipe by shutting down nongracefully if it seems + // like the other side has already closed the connection Also, there + // cannot be any requests in flight from other threads since we locked + // request_mutex_, so safe to close everything immediately + const bool shutdown_gracefully = false; + shutdown_ssl(socket_, shutdown_gracefully); + shutdown_socket(socket_); + close_socket(socket_); + } + } + + if (!is_alive) { + if (!create_and_connect_socket(socket_, error)) { return false; } + +#ifdef CPPHTTPLIB_OPENSSL_SUPPORT + // TODO: refactoring + if (is_ssl()) { + auto &scli = static_cast(*this); + if (!proxy_host_.empty() && proxy_port_ != -1) { + auto success = false; + if (!scli.connect_with_proxy(socket_, res, success, error)) { + return success; + } + } + + if (!scli.initialize_ssl(socket_, error)) { return false; } + } +#endif + } + + // Mark the current socket as being in use so that it cannot be closed by + // anyone else while this request is ongoing, even though we will be + // releasing the mutex. + if (socket_requests_in_flight_ > 1) { + assert(socket_requests_are_from_thread_ == std::this_thread::get_id()); + } + socket_requests_in_flight_ += 1; + socket_requests_are_from_thread_ = std::this_thread::get_id(); + } + + for (const auto &header : default_headers_) { + if (req.headers.find(header.first) == req.headers.end()) { + req.headers.insert(header); + } + } + + auto ret = false; + auto close_connection = !keep_alive_; + + auto se = detail::scope_exit([&]() { + // Briefly lock mutex in order to mark that a request is no longer ongoing + std::lock_guard guard(socket_mutex_); + socket_requests_in_flight_ -= 1; + if (socket_requests_in_flight_ <= 0) { + assert(socket_requests_in_flight_ == 0); + socket_requests_are_from_thread_ = std::thread::id(); + } + + if (socket_should_be_closed_when_request_is_done_ || close_connection || + !ret) { + shutdown_ssl(socket_, true); + shutdown_socket(socket_); + close_socket(socket_); + } + }); + + ret = process_socket(socket_, [&](Stream &strm) { + return handle_request(strm, req, res, close_connection, error); + }); + + if (!ret) { + if (error == Error::Success) { error = Error::Unknown; } + } + + return ret; +} + +inline Result ClientImpl::send(const Request &req) { + auto req2 = req; + return send_(std::move(req2)); +} + +inline Result ClientImpl::send_(Request &&req) { + auto res = detail::make_unique(); + auto error = Error::Success; + auto ret = send(req, *res, error); + return Result{ret ? std::move(res) : nullptr, error, std::move(req.headers)}; +} + +inline bool ClientImpl::handle_request(Stream &strm, Request &req, + Response &res, bool close_connection, + Error &error) { + if (req.path.empty()) { + error = Error::Connection; + return false; + } + + auto req_save = req; + + bool ret; + + if (!is_ssl() && !proxy_host_.empty() && proxy_port_ != -1) { + auto req2 = req; + req2.path = "http://" + host_and_port_ + req.path; + ret = process_request(strm, req2, res, close_connection, error); + req = req2; + req.path = req_save.path; + } else { + ret = process_request(strm, req, res, close_connection, error); + } + + if (!ret) { return false; } + + if (res.get_header_value("Connection") == "close" || + (res.version == "HTTP/1.0" && res.reason != "Connection established")) { + // TODO this requires a not-entirely-obvious chain of calls to be correct + // for this to be safe. + + // This is safe to call because handle_request is only called by send_ + // which locks the request mutex during the process. It would be a bug + // to call it from a different thread since it's a thread-safety issue + // to do these things to the socket if another thread is using the socket. + std::lock_guard guard(socket_mutex_); + shutdown_ssl(socket_, true); + shutdown_socket(socket_); + close_socket(socket_); + } + + if (300 < res.status && res.status < 400 && follow_location_) { + req = req_save; + ret = redirect(req, res, error); + } + +#ifdef CPPHTTPLIB_OPENSSL_SUPPORT + if ((res.status == StatusCode::Unauthorized_401 || + res.status == StatusCode::ProxyAuthenticationRequired_407) && + req.authorization_count_ < 5) { + auto is_proxy = res.status == StatusCode::ProxyAuthenticationRequired_407; + const auto &username = + is_proxy ? proxy_digest_auth_username_ : digest_auth_username_; + const auto &password = + is_proxy ? proxy_digest_auth_password_ : digest_auth_password_; + + if (!username.empty() && !password.empty()) { + std::map auth; + if (detail::parse_www_authenticate(res, auth, is_proxy)) { + Request new_req = req; + new_req.authorization_count_ += 1; + new_req.headers.erase(is_proxy ? "Proxy-Authorization" + : "Authorization"); + new_req.headers.insert(detail::make_digest_authentication_header( + req, auth, new_req.authorization_count_, detail::random_string(10), + username, password, is_proxy)); + + Response new_res; + + ret = send(new_req, new_res, error); + if (ret) { res = new_res; } + } + } + } +#endif + + return ret; +} + +inline bool ClientImpl::redirect(Request &req, Response &res, Error &error) { + if (req.redirect_count_ == 0) { + error = Error::ExceedRedirectCount; + return false; + } + + auto location = res.get_header_value("location"); + if (location.empty()) { return false; } + + const static std::regex re( + R"((?:(https?):)?(?://(?:\[([\d:]+)\]|([^:/?#]+))(?::(\d+))?)?([^?#]*)(\?[^#]*)?(?:#.*)?)"); + + std::smatch m; + if (!std::regex_match(location, m, re)) { return false; } + + auto scheme = is_ssl() ? "https" : "http"; + + auto next_scheme = m[1].str(); + auto next_host = m[2].str(); + if (next_host.empty()) { next_host = m[3].str(); } + auto port_str = m[4].str(); + auto next_path = m[5].str(); + auto next_query = m[6].str(); + + auto next_port = port_; + if (!port_str.empty()) { + next_port = std::stoi(port_str); + } else if (!next_scheme.empty()) { + next_port = next_scheme == "https" ? 443 : 80; + } + + if (next_scheme.empty()) { next_scheme = scheme; } + if (next_host.empty()) { next_host = host_; } + if (next_path.empty()) { next_path = "/"; } + + auto path = detail::decode_url(next_path, true) + next_query; + + if (next_scheme == scheme && next_host == host_ && next_port == port_) { + return detail::redirect(*this, req, res, path, location, error); + } else { + if (next_scheme == "https") { +#ifdef CPPHTTPLIB_OPENSSL_SUPPORT + SSLClient cli(next_host, next_port); + cli.copy_settings(*this); + if (ca_cert_store_) { cli.set_ca_cert_store(ca_cert_store_); } + return detail::redirect(cli, req, res, path, location, error); +#else + return false; +#endif + } else { + ClientImpl cli(next_host, next_port); + cli.copy_settings(*this); + return detail::redirect(cli, req, res, path, location, error); + } + } +} + +inline bool ClientImpl::write_content_with_provider(Stream &strm, + const Request &req, + Error &error) const { + auto is_shutting_down = []() { return false; }; + + if (req.is_chunked_content_provider_) { + // TODO: Brotli support + std::unique_ptr compressor; +#ifdef CPPHTTPLIB_ZLIB_SUPPORT + if (compress_) { + compressor = detail::make_unique(); + } else +#endif + { + compressor = detail::make_unique(); + } + + return detail::write_content_chunked(strm, req.content_provider_, + is_shutting_down, *compressor, error); + } else { + return detail::write_content(strm, req.content_provider_, 0, + req.content_length_, is_shutting_down, error); + } +} + +inline bool ClientImpl::write_request(Stream &strm, Request &req, + bool close_connection, Error &error) { + // Prepare additional headers + if (close_connection) { + if (!req.has_header("Connection")) { + req.set_header("Connection", "close"); + } + } + + if (!req.has_header("Host")) { + if (is_ssl()) { + if (port_ == 443) { + req.set_header("Host", host_); + } else { + req.set_header("Host", host_and_port_); + } + } else { + if (port_ == 80) { + req.set_header("Host", host_); + } else { + req.set_header("Host", host_and_port_); + } + } + } + + if (!req.has_header("Accept")) { req.set_header("Accept", "*/*"); } + +#ifndef CPPHTTPLIB_NO_DEFAULT_USER_AGENT + if (!req.has_header("User-Agent")) { + auto agent = std::string("cpp-httplib/") + CPPHTTPLIB_VERSION; + req.set_header("User-Agent", agent); + } +#endif + + if (req.body.empty()) { + if (req.content_provider_) { + if (!req.is_chunked_content_provider_) { + if (!req.has_header("Content-Length")) { + auto length = std::to_string(req.content_length_); + req.set_header("Content-Length", length); + } + } + } else { + if (req.method == "POST" || req.method == "PUT" || + req.method == "PATCH") { + req.set_header("Content-Length", "0"); + } + } + } else { + if (!req.has_header("Content-Type")) { + req.set_header("Content-Type", "text/plain"); + } + + if (!req.has_header("Content-Length")) { + auto length = std::to_string(req.body.size()); + req.set_header("Content-Length", length); + } + } + + if (!basic_auth_password_.empty() || !basic_auth_username_.empty()) { + if (!req.has_header("Authorization")) { + req.headers.insert(make_basic_authentication_header( + basic_auth_username_, basic_auth_password_, false)); + } + } + + if (!proxy_basic_auth_username_.empty() && + !proxy_basic_auth_password_.empty()) { + if (!req.has_header("Proxy-Authorization")) { + req.headers.insert(make_basic_authentication_header( + proxy_basic_auth_username_, proxy_basic_auth_password_, true)); + } + } + + if (!bearer_token_auth_token_.empty()) { + if (!req.has_header("Authorization")) { + req.headers.insert(make_bearer_token_authentication_header( + bearer_token_auth_token_, false)); + } + } + + if (!proxy_bearer_token_auth_token_.empty()) { + if (!req.has_header("Proxy-Authorization")) { + req.headers.insert(make_bearer_token_authentication_header( + proxy_bearer_token_auth_token_, true)); + } + } + + // Request line and headers + { + detail::BufferStream bstrm; + + const auto &path = url_encode_ ? detail::encode_url(req.path) : req.path; + bstrm.write_format("%s %s HTTP/1.1\r\n", req.method.c_str(), path.c_str()); + + header_writer_(bstrm, req.headers); + + // Flush buffer + auto &data = bstrm.get_buffer(); + if (!detail::write_data(strm, data.data(), data.size())) { + error = Error::Write; + return false; + } + } + + // Body + if (req.body.empty()) { + return write_content_with_provider(strm, req, error); + } + + if (!detail::write_data(strm, req.body.data(), req.body.size())) { + error = Error::Write; + return false; + } + + return true; +} + +inline std::unique_ptr ClientImpl::send_with_content_provider( + Request &req, const char *body, size_t content_length, + ContentProvider content_provider, + ContentProviderWithoutLength content_provider_without_length, + const std::string &content_type, Error &error) { + if (!content_type.empty()) { req.set_header("Content-Type", content_type); } + +#ifdef CPPHTTPLIB_ZLIB_SUPPORT + if (compress_) { req.set_header("Content-Encoding", "gzip"); } +#endif + +#ifdef CPPHTTPLIB_ZLIB_SUPPORT + if (compress_ && !content_provider_without_length) { + // TODO: Brotli support + detail::gzip_compressor compressor; + + if (content_provider) { + auto ok = true; + size_t offset = 0; + DataSink data_sink; + + data_sink.write = [&](const char *data, size_t data_len) -> bool { + if (ok) { + auto last = offset + data_len == content_length; + + auto ret = compressor.compress( + data, data_len, last, + [&](const char *compressed_data, size_t compressed_data_len) { + req.body.append(compressed_data, compressed_data_len); + return true; + }); + + if (ret) { + offset += data_len; + } else { + ok = false; + } + } + return ok; + }; + + while (ok && offset < content_length) { + if (!content_provider(offset, content_length - offset, data_sink)) { + error = Error::Canceled; + return nullptr; + } + } + } else { + if (!compressor.compress(body, content_length, true, + [&](const char *data, size_t data_len) { + req.body.append(data, data_len); + return true; + })) { + error = Error::Compression; + return nullptr; + } + } + } else +#endif + { + if (content_provider) { + req.content_length_ = content_length; + req.content_provider_ = std::move(content_provider); + req.is_chunked_content_provider_ = false; + } else if (content_provider_without_length) { + req.content_length_ = 0; + req.content_provider_ = detail::ContentProviderAdapter( + std::move(content_provider_without_length)); + req.is_chunked_content_provider_ = true; + req.set_header("Transfer-Encoding", "chunked"); + } else { + req.body.assign(body, content_length); + } + } + + auto res = detail::make_unique(); + return send(req, *res, error) ? std::move(res) : nullptr; +} + +inline Result ClientImpl::send_with_content_provider( + const std::string &method, const std::string &path, const Headers &headers, + const char *body, size_t content_length, ContentProvider content_provider, + ContentProviderWithoutLength content_provider_without_length, + const std::string &content_type) { + Request req; + req.method = method; + req.headers = headers; + req.path = path; + + auto error = Error::Success; + + auto res = send_with_content_provider( + req, body, content_length, std::move(content_provider), + std::move(content_provider_without_length), content_type, error); + + return Result{std::move(res), error, std::move(req.headers)}; +} + +inline std::string +ClientImpl::adjust_host_string(const std::string &host) const { + if (host.find(':') != std::string::npos) { return "[" + host + "]"; } + return host; +} + +inline bool ClientImpl::process_request(Stream &strm, Request &req, + Response &res, bool close_connection, + Error &error) { + // Send request + if (!write_request(strm, req, close_connection, error)) { return false; } + +#ifdef CPPHTTPLIB_OPENSSL_SUPPORT + if (is_ssl()) { + auto is_proxy_enabled = !proxy_host_.empty() && proxy_port_ != -1; + if (!is_proxy_enabled) { + char buf[1]; + if (SSL_peek(socket_.ssl, buf, 1) == 0 && + SSL_get_error(socket_.ssl, 0) == SSL_ERROR_ZERO_RETURN) { + error = Error::SSLPeerCouldBeClosed_; + return false; + } + } + } +#endif + + // Receive response and headers + if (!read_response_line(strm, req, res) || + !detail::read_headers(strm, res.headers)) { + error = Error::Read; + return false; + } + + // Body + if ((res.status != StatusCode::NoContent_204) && req.method != "HEAD" && + req.method != "CONNECT") { + auto redirect = 300 < res.status && res.status < 400 && follow_location_; + + if (req.response_handler && !redirect) { + if (!req.response_handler(res)) { + error = Error::Canceled; + return false; + } + } + + auto out = + req.content_receiver + ? static_cast( + [&](const char *buf, size_t n, uint64_t off, uint64_t len) { + if (redirect) { return true; } + auto ret = req.content_receiver(buf, n, off, len); + if (!ret) { error = Error::Canceled; } + return ret; + }) + : static_cast( + [&](const char *buf, size_t n, uint64_t /*off*/, + uint64_t /*len*/) { + if (res.body.size() + n > res.body.max_size()) { + return false; + } + res.body.append(buf, n); + return true; + }); + + auto progress = [&](uint64_t current, uint64_t total) { + if (!req.progress || redirect) { return true; } + auto ret = req.progress(current, total); + if (!ret) { error = Error::Canceled; } + return ret; + }; + + int dummy_status; + if (!detail::read_content(strm, res, (std::numeric_limits::max)(), + dummy_status, std::move(progress), std::move(out), + decompress_)) { + if (error != Error::Canceled) { error = Error::Read; } + return false; + } + } + + // Log + if (logger_) { logger_(req, res); } + + return true; +} + +inline ContentProviderWithoutLength ClientImpl::get_multipart_content_provider( + const std::string &boundary, const MultipartFormDataItems &items, + const MultipartFormDataProviderItems &provider_items) const { + size_t cur_item = 0; + size_t cur_start = 0; + // cur_item and cur_start are copied to within the std::function and maintain + // state between successive calls + return [&, cur_item, cur_start](size_t offset, + DataSink &sink) mutable -> bool { + if (!offset && !items.empty()) { + sink.os << detail::serialize_multipart_formdata(items, boundary, false); + return true; + } else if (cur_item < provider_items.size()) { + if (!cur_start) { + const auto &begin = detail::serialize_multipart_formdata_item_begin( + provider_items[cur_item], boundary); + offset += begin.size(); + cur_start = offset; + sink.os << begin; + } + + DataSink cur_sink; + auto has_data = true; + cur_sink.write = sink.write; + cur_sink.done = [&]() { has_data = false; }; + + if (!provider_items[cur_item].provider(offset - cur_start, cur_sink)) { + return false; + } + + if (!has_data) { + sink.os << detail::serialize_multipart_formdata_item_end(); + cur_item++; + cur_start = 0; + } + return true; + } else { + sink.os << detail::serialize_multipart_formdata_finish(boundary); + sink.done(); + return true; + } + }; +} + +inline bool +ClientImpl::process_socket(const Socket &socket, + std::function callback) { + return detail::process_client_socket( + socket.sock, read_timeout_sec_, read_timeout_usec_, write_timeout_sec_, + write_timeout_usec_, std::move(callback)); +} + +inline bool ClientImpl::is_ssl() const { return false; } + +inline Result ClientImpl::Get(const std::string &path) { + return Get(path, Headers(), Progress()); +} + +inline Result ClientImpl::Get(const std::string &path, Progress progress) { + return Get(path, Headers(), std::move(progress)); +} + +inline Result ClientImpl::Get(const std::string &path, const Headers &headers) { + return Get(path, headers, Progress()); +} + +inline Result ClientImpl::Get(const std::string &path, const Headers &headers, + Progress progress) { + Request req; + req.method = "GET"; + req.path = path; + req.headers = headers; + req.progress = std::move(progress); + + return send_(std::move(req)); +} + +inline Result ClientImpl::Get(const std::string &path, + ContentReceiver content_receiver) { + return Get(path, Headers(), nullptr, std::move(content_receiver), nullptr); +} + +inline Result ClientImpl::Get(const std::string &path, + ContentReceiver content_receiver, + Progress progress) { + return Get(path, Headers(), nullptr, std::move(content_receiver), + std::move(progress)); +} + +inline Result ClientImpl::Get(const std::string &path, const Headers &headers, + ContentReceiver content_receiver) { + return Get(path, headers, nullptr, std::move(content_receiver), nullptr); +} + +inline Result ClientImpl::Get(const std::string &path, const Headers &headers, + ContentReceiver content_receiver, + Progress progress) { + return Get(path, headers, nullptr, std::move(content_receiver), + std::move(progress)); +} + +inline Result ClientImpl::Get(const std::string &path, + ResponseHandler response_handler, + ContentReceiver content_receiver) { + return Get(path, Headers(), std::move(response_handler), + std::move(content_receiver), nullptr); +} + +inline Result ClientImpl::Get(const std::string &path, const Headers &headers, + ResponseHandler response_handler, + ContentReceiver content_receiver) { + return Get(path, headers, std::move(response_handler), + std::move(content_receiver), nullptr); +} + +inline Result ClientImpl::Get(const std::string &path, + ResponseHandler response_handler, + ContentReceiver content_receiver, + Progress progress) { + return Get(path, Headers(), std::move(response_handler), + std::move(content_receiver), std::move(progress)); +} + +inline Result ClientImpl::Get(const std::string &path, const Headers &headers, + ResponseHandler response_handler, + ContentReceiver content_receiver, + Progress progress) { + Request req; + req.method = "GET"; + req.path = path; + req.headers = headers; + req.response_handler = std::move(response_handler); + req.content_receiver = + [content_receiver](const char *data, size_t data_length, + uint64_t /*offset*/, uint64_t /*total_length*/) { + return content_receiver(data, data_length); + }; + req.progress = std::move(progress); + + return send_(std::move(req)); +} + +inline Result ClientImpl::Get(const std::string &path, const Params ¶ms, + const Headers &headers, Progress progress) { + if (params.empty()) { return Get(path, headers); } + + std::string path_with_query = append_query_params(path, params); + return Get(path_with_query, headers, progress); +} + +inline Result ClientImpl::Get(const std::string &path, const Params ¶ms, + const Headers &headers, + ContentReceiver content_receiver, + Progress progress) { + return Get(path, params, headers, nullptr, content_receiver, progress); +} + +inline Result ClientImpl::Get(const std::string &path, const Params ¶ms, + const Headers &headers, + ResponseHandler response_handler, + ContentReceiver content_receiver, + Progress progress) { + if (params.empty()) { + return Get(path, headers, response_handler, content_receiver, progress); + } + + std::string path_with_query = append_query_params(path, params); + return Get(path_with_query, headers, response_handler, content_receiver, + progress); +} + +inline Result ClientImpl::Head(const std::string &path) { + return Head(path, Headers()); +} + +inline Result ClientImpl::Head(const std::string &path, + const Headers &headers) { + Request req; + req.method = "HEAD"; + req.headers = headers; + req.path = path; + + return send_(std::move(req)); +} + +inline Result ClientImpl::Post(const std::string &path) { + return Post(path, std::string(), std::string()); +} + +inline Result ClientImpl::Post(const std::string &path, + const Headers &headers) { + return Post(path, headers, nullptr, 0, std::string()); +} + +inline Result ClientImpl::Post(const std::string &path, const char *body, + size_t content_length, + const std::string &content_type) { + return Post(path, Headers(), body, content_length, content_type); +} + +inline Result ClientImpl::Post(const std::string &path, const Headers &headers, + const char *body, size_t content_length, + const std::string &content_type) { + return send_with_content_provider("POST", path, headers, body, content_length, + nullptr, nullptr, content_type); +} + +inline Result ClientImpl::Post(const std::string &path, const std::string &body, + const std::string &content_type) { + return Post(path, Headers(), body, content_type); +} + +inline Result ClientImpl::Post(const std::string &path, const Headers &headers, + const std::string &body, + const std::string &content_type) { + return send_with_content_provider("POST", path, headers, body.data(), + body.size(), nullptr, nullptr, + content_type); +} + +inline Result ClientImpl::Post(const std::string &path, const Params ¶ms) { + return Post(path, Headers(), params); +} + +inline Result ClientImpl::Post(const std::string &path, size_t content_length, + ContentProvider content_provider, + const std::string &content_type) { + return Post(path, Headers(), content_length, std::move(content_provider), + content_type); +} + +inline Result ClientImpl::Post(const std::string &path, + ContentProviderWithoutLength content_provider, + const std::string &content_type) { + return Post(path, Headers(), std::move(content_provider), content_type); +} + +inline Result ClientImpl::Post(const std::string &path, const Headers &headers, + size_t content_length, + ContentProvider content_provider, + const std::string &content_type) { + return send_with_content_provider("POST", path, headers, nullptr, + content_length, std::move(content_provider), + nullptr, content_type); +} + +inline Result ClientImpl::Post(const std::string &path, const Headers &headers, + ContentProviderWithoutLength content_provider, + const std::string &content_type) { + return send_with_content_provider("POST", path, headers, nullptr, 0, nullptr, + std::move(content_provider), content_type); +} + +inline Result ClientImpl::Post(const std::string &path, const Headers &headers, + const Params ¶ms) { + auto query = detail::params_to_query_str(params); + return Post(path, headers, query, "application/x-www-form-urlencoded"); +} + +inline Result ClientImpl::Post(const std::string &path, + const MultipartFormDataItems &items) { + return Post(path, Headers(), items); +} + +inline Result ClientImpl::Post(const std::string &path, const Headers &headers, + const MultipartFormDataItems &items) { + const auto &boundary = detail::make_multipart_data_boundary(); + const auto &content_type = + detail::serialize_multipart_formdata_get_content_type(boundary); + const auto &body = detail::serialize_multipart_formdata(items, boundary); + return Post(path, headers, body, content_type); +} + +inline Result ClientImpl::Post(const std::string &path, const Headers &headers, + const MultipartFormDataItems &items, + const std::string &boundary) { + if (!detail::is_multipart_boundary_chars_valid(boundary)) { + return Result{nullptr, Error::UnsupportedMultipartBoundaryChars}; + } + + const auto &content_type = + detail::serialize_multipart_formdata_get_content_type(boundary); + const auto &body = detail::serialize_multipart_formdata(items, boundary); + return Post(path, headers, body, content_type); +} + +inline Result +ClientImpl::Post(const std::string &path, const Headers &headers, + const MultipartFormDataItems &items, + const MultipartFormDataProviderItems &provider_items) { + const auto &boundary = detail::make_multipart_data_boundary(); + const auto &content_type = + detail::serialize_multipart_formdata_get_content_type(boundary); + return send_with_content_provider( + "POST", path, headers, nullptr, 0, nullptr, + get_multipart_content_provider(boundary, items, provider_items), + content_type); +} + +inline Result ClientImpl::Put(const std::string &path) { + return Put(path, std::string(), std::string()); +} + +inline Result ClientImpl::Put(const std::string &path, const char *body, + size_t content_length, + const std::string &content_type) { + return Put(path, Headers(), body, content_length, content_type); +} + +inline Result ClientImpl::Put(const std::string &path, const Headers &headers, + const char *body, size_t content_length, + const std::string &content_type) { + return send_with_content_provider("PUT", path, headers, body, content_length, + nullptr, nullptr, content_type); +} + +inline Result ClientImpl::Put(const std::string &path, const std::string &body, + const std::string &content_type) { + return Put(path, Headers(), body, content_type); +} + +inline Result ClientImpl::Put(const std::string &path, const Headers &headers, + const std::string &body, + const std::string &content_type) { + return send_with_content_provider("PUT", path, headers, body.data(), + body.size(), nullptr, nullptr, + content_type); +} + +inline Result ClientImpl::Put(const std::string &path, size_t content_length, + ContentProvider content_provider, + const std::string &content_type) { + return Put(path, Headers(), content_length, std::move(content_provider), + content_type); +} + +inline Result ClientImpl::Put(const std::string &path, + ContentProviderWithoutLength content_provider, + const std::string &content_type) { + return Put(path, Headers(), std::move(content_provider), content_type); +} + +inline Result ClientImpl::Put(const std::string &path, const Headers &headers, + size_t content_length, + ContentProvider content_provider, + const std::string &content_type) { + return send_with_content_provider("PUT", path, headers, nullptr, + content_length, std::move(content_provider), + nullptr, content_type); +} + +inline Result ClientImpl::Put(const std::string &path, const Headers &headers, + ContentProviderWithoutLength content_provider, + const std::string &content_type) { + return send_with_content_provider("PUT", path, headers, nullptr, 0, nullptr, + std::move(content_provider), content_type); +} + +inline Result ClientImpl::Put(const std::string &path, const Params ¶ms) { + return Put(path, Headers(), params); +} + +inline Result ClientImpl::Put(const std::string &path, const Headers &headers, + const Params ¶ms) { + auto query = detail::params_to_query_str(params); + return Put(path, headers, query, "application/x-www-form-urlencoded"); +} + +inline Result ClientImpl::Put(const std::string &path, + const MultipartFormDataItems &items) { + return Put(path, Headers(), items); +} + +inline Result ClientImpl::Put(const std::string &path, const Headers &headers, + const MultipartFormDataItems &items) { + const auto &boundary = detail::make_multipart_data_boundary(); + const auto &content_type = + detail::serialize_multipart_formdata_get_content_type(boundary); + const auto &body = detail::serialize_multipart_formdata(items, boundary); + return Put(path, headers, body, content_type); +} + +inline Result ClientImpl::Put(const std::string &path, const Headers &headers, + const MultipartFormDataItems &items, + const std::string &boundary) { + if (!detail::is_multipart_boundary_chars_valid(boundary)) { + return Result{nullptr, Error::UnsupportedMultipartBoundaryChars}; + } + + const auto &content_type = + detail::serialize_multipart_formdata_get_content_type(boundary); + const auto &body = detail::serialize_multipart_formdata(items, boundary); + return Put(path, headers, body, content_type); +} + +inline Result +ClientImpl::Put(const std::string &path, const Headers &headers, + const MultipartFormDataItems &items, + const MultipartFormDataProviderItems &provider_items) { + const auto &boundary = detail::make_multipart_data_boundary(); + const auto &content_type = + detail::serialize_multipart_formdata_get_content_type(boundary); + return send_with_content_provider( + "PUT", path, headers, nullptr, 0, nullptr, + get_multipart_content_provider(boundary, items, provider_items), + content_type); +} +inline Result ClientImpl::Patch(const std::string &path) { + return Patch(path, std::string(), std::string()); +} + +inline Result ClientImpl::Patch(const std::string &path, const char *body, + size_t content_length, + const std::string &content_type) { + return Patch(path, Headers(), body, content_length, content_type); +} + +inline Result ClientImpl::Patch(const std::string &path, const Headers &headers, + const char *body, size_t content_length, + const std::string &content_type) { + return send_with_content_provider("PATCH", path, headers, body, + content_length, nullptr, nullptr, + content_type); +} + +inline Result ClientImpl::Patch(const std::string &path, + const std::string &body, + const std::string &content_type) { + return Patch(path, Headers(), body, content_type); +} + +inline Result ClientImpl::Patch(const std::string &path, const Headers &headers, + const std::string &body, + const std::string &content_type) { + return send_with_content_provider("PATCH", path, headers, body.data(), + body.size(), nullptr, nullptr, + content_type); +} + +inline Result ClientImpl::Patch(const std::string &path, size_t content_length, + ContentProvider content_provider, + const std::string &content_type) { + return Patch(path, Headers(), content_length, std::move(content_provider), + content_type); +} + +inline Result ClientImpl::Patch(const std::string &path, + ContentProviderWithoutLength content_provider, + const std::string &content_type) { + return Patch(path, Headers(), std::move(content_provider), content_type); +} + +inline Result ClientImpl::Patch(const std::string &path, const Headers &headers, + size_t content_length, + ContentProvider content_provider, + const std::string &content_type) { + return send_with_content_provider("PATCH", path, headers, nullptr, + content_length, std::move(content_provider), + nullptr, content_type); +} + +inline Result ClientImpl::Patch(const std::string &path, const Headers &headers, + ContentProviderWithoutLength content_provider, + const std::string &content_type) { + return send_with_content_provider("PATCH", path, headers, nullptr, 0, nullptr, + std::move(content_provider), content_type); +} + +inline Result ClientImpl::Delete(const std::string &path) { + return Delete(path, Headers(), std::string(), std::string()); +} + +inline Result ClientImpl::Delete(const std::string &path, + const Headers &headers) { + return Delete(path, headers, std::string(), std::string()); +} + +inline Result ClientImpl::Delete(const std::string &path, const char *body, + size_t content_length, + const std::string &content_type) { + return Delete(path, Headers(), body, content_length, content_type); +} + +inline Result ClientImpl::Delete(const std::string &path, + const Headers &headers, const char *body, + size_t content_length, + const std::string &content_type) { + Request req; + req.method = "DELETE"; + req.headers = headers; + req.path = path; + + if (!content_type.empty()) { req.set_header("Content-Type", content_type); } + req.body.assign(body, content_length); + + return send_(std::move(req)); +} + +inline Result ClientImpl::Delete(const std::string &path, + const std::string &body, + const std::string &content_type) { + return Delete(path, Headers(), body.data(), body.size(), content_type); +} + +inline Result ClientImpl::Delete(const std::string &path, + const Headers &headers, + const std::string &body, + const std::string &content_type) { + return Delete(path, headers, body.data(), body.size(), content_type); +} + +inline Result ClientImpl::Options(const std::string &path) { + return Options(path, Headers()); +} + +inline Result ClientImpl::Options(const std::string &path, + const Headers &headers) { + Request req; + req.method = "OPTIONS"; + req.headers = headers; + req.path = path; + + return send_(std::move(req)); +} + +inline void ClientImpl::stop() { + std::lock_guard guard(socket_mutex_); + + // If there is anything ongoing right now, the ONLY thread-safe thing we can + // do is to shutdown_socket, so that threads using this socket suddenly + // discover they can't read/write any more and error out. Everything else + // (closing the socket, shutting ssl down) is unsafe because these actions are + // not thread-safe. + if (socket_requests_in_flight_ > 0) { + shutdown_socket(socket_); + + // Aside from that, we set a flag for the socket to be closed when we're + // done. + socket_should_be_closed_when_request_is_done_ = true; + return; + } + + // Otherwise, still holding the mutex, we can shut everything down ourselves + shutdown_ssl(socket_, true); + shutdown_socket(socket_); + close_socket(socket_); +} + +inline std::string ClientImpl::host() const { return host_; } + +inline int ClientImpl::port() const { return port_; } + +inline size_t ClientImpl::is_socket_open() const { + std::lock_guard guard(socket_mutex_); + return socket_.is_open(); +} + +inline socket_t ClientImpl::socket() const { return socket_.sock; } + +inline void ClientImpl::set_connection_timeout(time_t sec, time_t usec) { + connection_timeout_sec_ = sec; + connection_timeout_usec_ = usec; +} + +inline void ClientImpl::set_read_timeout(time_t sec, time_t usec) { + read_timeout_sec_ = sec; + read_timeout_usec_ = usec; +} + +inline void ClientImpl::set_write_timeout(time_t sec, time_t usec) { + write_timeout_sec_ = sec; + write_timeout_usec_ = usec; +} + +inline void ClientImpl::set_basic_auth(const std::string &username, + const std::string &password) { + basic_auth_username_ = username; + basic_auth_password_ = password; +} + +inline void ClientImpl::set_bearer_token_auth(const std::string &token) { + bearer_token_auth_token_ = token; +} + +#ifdef CPPHTTPLIB_OPENSSL_SUPPORT +inline void ClientImpl::set_digest_auth(const std::string &username, + const std::string &password) { + digest_auth_username_ = username; + digest_auth_password_ = password; +} +#endif + +inline void ClientImpl::set_keep_alive(bool on) { keep_alive_ = on; } + +inline void ClientImpl::set_follow_location(bool on) { follow_location_ = on; } + +inline void ClientImpl::set_url_encode(bool on) { url_encode_ = on; } + +inline void +ClientImpl::set_hostname_addr_map(std::map addr_map) { + addr_map_ = std::move(addr_map); +} + +inline void ClientImpl::set_default_headers(Headers headers) { + default_headers_ = std::move(headers); +} + +inline void ClientImpl::set_header_writer( + std::function const &writer) { + header_writer_ = writer; +} + +inline void ClientImpl::set_address_family(int family) { + address_family_ = family; +} + +inline void ClientImpl::set_tcp_nodelay(bool on) { tcp_nodelay_ = on; } + +inline void ClientImpl::set_socket_options(SocketOptions socket_options) { + socket_options_ = std::move(socket_options); +} + +inline void ClientImpl::set_compress(bool on) { compress_ = on; } + +inline void ClientImpl::set_decompress(bool on) { decompress_ = on; } + +inline void ClientImpl::set_interface(const std::string &intf) { + interface_ = intf; +} + +inline void ClientImpl::set_proxy(const std::string &host, int port) { + proxy_host_ = host; + proxy_port_ = port; +} + +inline void ClientImpl::set_proxy_basic_auth(const std::string &username, + const std::string &password) { + proxy_basic_auth_username_ = username; + proxy_basic_auth_password_ = password; +} + +inline void ClientImpl::set_proxy_bearer_token_auth(const std::string &token) { + proxy_bearer_token_auth_token_ = token; +} + +#ifdef CPPHTTPLIB_OPENSSL_SUPPORT +inline void ClientImpl::set_proxy_digest_auth(const std::string &username, + const std::string &password) { + proxy_digest_auth_username_ = username; + proxy_digest_auth_password_ = password; +} + +inline void ClientImpl::set_ca_cert_path(const std::string &ca_cert_file_path, + const std::string &ca_cert_dir_path) { + ca_cert_file_path_ = ca_cert_file_path; + ca_cert_dir_path_ = ca_cert_dir_path; +} + +inline void ClientImpl::set_ca_cert_store(X509_STORE *ca_cert_store) { + if (ca_cert_store && ca_cert_store != ca_cert_store_) { + ca_cert_store_ = ca_cert_store; + } +} + +inline X509_STORE *ClientImpl::create_ca_cert_store(const char *ca_cert, + std::size_t size) const { + auto mem = BIO_new_mem_buf(ca_cert, static_cast(size)); + if (!mem) { return nullptr; } + + auto inf = PEM_X509_INFO_read_bio(mem, nullptr, nullptr, nullptr); + if (!inf) { + BIO_free_all(mem); + return nullptr; + } + + auto cts = X509_STORE_new(); + if (cts) { + for (auto i = 0; i < static_cast(sk_X509_INFO_num(inf)); i++) { + auto itmp = sk_X509_INFO_value(inf, i); + if (!itmp) { continue; } + + if (itmp->x509) { X509_STORE_add_cert(cts, itmp->x509); } + if (itmp->crl) { X509_STORE_add_crl(cts, itmp->crl); } + } + } + + sk_X509_INFO_pop_free(inf, X509_INFO_free); + BIO_free_all(mem); + return cts; +} + +inline void ClientImpl::enable_server_certificate_verification(bool enabled) { + server_certificate_verification_ = enabled; +} +#endif + +inline void ClientImpl::set_logger(Logger logger) { + logger_ = std::move(logger); +} + +/* + * SSL Implementation + */ +#ifdef CPPHTTPLIB_OPENSSL_SUPPORT +namespace detail { + +template +inline SSL *ssl_new(socket_t sock, SSL_CTX *ctx, std::mutex &ctx_mutex, + U SSL_connect_or_accept, V setup) { + SSL *ssl = nullptr; + { + std::lock_guard guard(ctx_mutex); + ssl = SSL_new(ctx); + } + + if (ssl) { + set_nonblocking(sock, true); + auto bio = BIO_new_socket(static_cast(sock), BIO_NOCLOSE); + BIO_set_nbio(bio, 1); + SSL_set_bio(ssl, bio, bio); + + if (!setup(ssl) || SSL_connect_or_accept(ssl) != 1) { + SSL_shutdown(ssl); + { + std::lock_guard guard(ctx_mutex); + SSL_free(ssl); + } + set_nonblocking(sock, false); + return nullptr; + } + BIO_set_nbio(bio, 0); + set_nonblocking(sock, false); + } + + return ssl; +} + +inline void ssl_delete(std::mutex &ctx_mutex, SSL *ssl, + bool shutdown_gracefully) { + // sometimes we may want to skip this to try to avoid SIGPIPE if we know + // the remote has closed the network connection + // Note that it is not always possible to avoid SIGPIPE, this is merely a + // best-efforts. + if (shutdown_gracefully) { SSL_shutdown(ssl); } + + std::lock_guard guard(ctx_mutex); + SSL_free(ssl); +} + +template +bool ssl_connect_or_accept_nonblocking(socket_t sock, SSL *ssl, + U ssl_connect_or_accept, + time_t timeout_sec, + time_t timeout_usec) { + auto res = 0; + while ((res = ssl_connect_or_accept(ssl)) != 1) { + auto err = SSL_get_error(ssl, res); + switch (err) { + case SSL_ERROR_WANT_READ: + if (select_read(sock, timeout_sec, timeout_usec) > 0) { continue; } + break; + case SSL_ERROR_WANT_WRITE: + if (select_write(sock, timeout_sec, timeout_usec) > 0) { continue; } + break; + default: break; + } + return false; + } + return true; +} + +template +inline bool process_server_socket_ssl( + const std::atomic &svr_sock, SSL *ssl, socket_t sock, + size_t keep_alive_max_count, time_t keep_alive_timeout_sec, + time_t read_timeout_sec, time_t read_timeout_usec, time_t write_timeout_sec, + time_t write_timeout_usec, T callback) { + return process_server_socket_core( + svr_sock, sock, keep_alive_max_count, keep_alive_timeout_sec, + [&](bool close_connection, bool &connection_closed) { + SSLSocketStream strm(sock, ssl, read_timeout_sec, read_timeout_usec, + write_timeout_sec, write_timeout_usec); + return callback(strm, close_connection, connection_closed); + }); +} + +template +inline bool +process_client_socket_ssl(SSL *ssl, socket_t sock, time_t read_timeout_sec, + time_t read_timeout_usec, time_t write_timeout_sec, + time_t write_timeout_usec, T callback) { + SSLSocketStream strm(sock, ssl, read_timeout_sec, read_timeout_usec, + write_timeout_sec, write_timeout_usec); + return callback(strm); +} + +class SSLInit { +public: + SSLInit() { + OPENSSL_init_ssl( + OPENSSL_INIT_LOAD_SSL_STRINGS | OPENSSL_INIT_LOAD_CRYPTO_STRINGS, NULL); + } +}; + +// SSL socket stream implementation +inline SSLSocketStream::SSLSocketStream(socket_t sock, SSL *ssl, + time_t read_timeout_sec, + time_t read_timeout_usec, + time_t write_timeout_sec, + time_t write_timeout_usec) + : sock_(sock), ssl_(ssl), read_timeout_sec_(read_timeout_sec), + read_timeout_usec_(read_timeout_usec), + write_timeout_sec_(write_timeout_sec), + write_timeout_usec_(write_timeout_usec) { + SSL_clear_mode(ssl, SSL_MODE_AUTO_RETRY); +} + +inline SSLSocketStream::~SSLSocketStream() = default; + +inline bool SSLSocketStream::is_readable() const { + return detail::select_read(sock_, read_timeout_sec_, read_timeout_usec_) > 0; +} + +inline bool SSLSocketStream::is_writable() const { + return select_write(sock_, write_timeout_sec_, write_timeout_usec_) > 0 && + is_socket_alive(sock_); +} + +inline ssize_t SSLSocketStream::read(char *ptr, size_t size) { + if (SSL_pending(ssl_) > 0) { + return SSL_read(ssl_, ptr, static_cast(size)); + } else if (is_readable()) { + auto ret = SSL_read(ssl_, ptr, static_cast(size)); + if (ret < 0) { + auto err = SSL_get_error(ssl_, ret); + auto n = 1000; +#ifdef _WIN32 + while (--n >= 0 && (err == SSL_ERROR_WANT_READ || + (err == SSL_ERROR_SYSCALL && + WSAGetLastError() == WSAETIMEDOUT))) { +#else + while (--n >= 0 && err == SSL_ERROR_WANT_READ) { +#endif + if (SSL_pending(ssl_) > 0) { + return SSL_read(ssl_, ptr, static_cast(size)); + } else if (is_readable()) { + std::this_thread::sleep_for(std::chrono::milliseconds(1)); + ret = SSL_read(ssl_, ptr, static_cast(size)); + if (ret >= 0) { return ret; } + err = SSL_get_error(ssl_, ret); + } else { + return -1; + } + } + } + return ret; + } + return -1; +} + +inline ssize_t SSLSocketStream::write(const char *ptr, size_t size) { + if (is_writable()) { + auto handle_size = static_cast( + std::min(size, (std::numeric_limits::max)())); + + auto ret = SSL_write(ssl_, ptr, static_cast(handle_size)); + if (ret < 0) { + auto err = SSL_get_error(ssl_, ret); + auto n = 1000; +#ifdef _WIN32 + while (--n >= 0 && (err == SSL_ERROR_WANT_WRITE || + (err == SSL_ERROR_SYSCALL && + WSAGetLastError() == WSAETIMEDOUT))) { +#else + while (--n >= 0 && err == SSL_ERROR_WANT_WRITE) { +#endif + if (is_writable()) { + std::this_thread::sleep_for(std::chrono::milliseconds(1)); + ret = SSL_write(ssl_, ptr, static_cast(handle_size)); + if (ret >= 0) { return ret; } + err = SSL_get_error(ssl_, ret); + } else { + return -1; + } + } + } + return ret; + } + return -1; +} + +inline void SSLSocketStream::get_remote_ip_and_port(std::string &ip, + int &port) const { + detail::get_remote_ip_and_port(sock_, ip, port); +} + +inline void SSLSocketStream::get_local_ip_and_port(std::string &ip, + int &port) const { + detail::get_local_ip_and_port(sock_, ip, port); +} + +inline socket_t SSLSocketStream::socket() const { return sock_; } + +static SSLInit sslinit_; + +} // namespace detail + +// SSL HTTP server implementation +inline SSLServer::SSLServer(const char *cert_path, const char *private_key_path, + const char *client_ca_cert_file_path, + const char *client_ca_cert_dir_path, + const char *private_key_password) { + ctx_ = SSL_CTX_new(TLS_server_method()); + + if (ctx_) { + SSL_CTX_set_options(ctx_, + SSL_OP_NO_COMPRESSION | + SSL_OP_NO_SESSION_RESUMPTION_ON_RENEGOTIATION); + + SSL_CTX_set_min_proto_version(ctx_, TLS1_1_VERSION); + + // add default password callback before opening encrypted private key + if (private_key_password != nullptr && (private_key_password[0] != '\0')) { + SSL_CTX_set_default_passwd_cb_userdata( + ctx_, + reinterpret_cast(const_cast(private_key_password))); + } + + if (SSL_CTX_use_certificate_chain_file(ctx_, cert_path) != 1 || + SSL_CTX_use_PrivateKey_file(ctx_, private_key_path, SSL_FILETYPE_PEM) != + 1) { + SSL_CTX_free(ctx_); + ctx_ = nullptr; + } else if (client_ca_cert_file_path || client_ca_cert_dir_path) { + SSL_CTX_load_verify_locations(ctx_, client_ca_cert_file_path, + client_ca_cert_dir_path); + + SSL_CTX_set_verify( + ctx_, SSL_VERIFY_PEER | SSL_VERIFY_FAIL_IF_NO_PEER_CERT, nullptr); + } + } +} + +inline SSLServer::SSLServer(X509 *cert, EVP_PKEY *private_key, + X509_STORE *client_ca_cert_store) { + ctx_ = SSL_CTX_new(TLS_server_method()); + + if (ctx_) { + SSL_CTX_set_options(ctx_, + SSL_OP_NO_COMPRESSION | + SSL_OP_NO_SESSION_RESUMPTION_ON_RENEGOTIATION); + + SSL_CTX_set_min_proto_version(ctx_, TLS1_1_VERSION); + + if (SSL_CTX_use_certificate(ctx_, cert) != 1 || + SSL_CTX_use_PrivateKey(ctx_, private_key) != 1) { + SSL_CTX_free(ctx_); + ctx_ = nullptr; + } else if (client_ca_cert_store) { + SSL_CTX_set_cert_store(ctx_, client_ca_cert_store); + + SSL_CTX_set_verify( + ctx_, SSL_VERIFY_PEER | SSL_VERIFY_FAIL_IF_NO_PEER_CERT, nullptr); + } + } +} + +inline SSLServer::SSLServer( + const std::function &setup_ssl_ctx_callback) { + ctx_ = SSL_CTX_new(TLS_method()); + if (ctx_) { + if (!setup_ssl_ctx_callback(*ctx_)) { + SSL_CTX_free(ctx_); + ctx_ = nullptr; + } + } +} + +inline SSLServer::~SSLServer() { + if (ctx_) { SSL_CTX_free(ctx_); } +} + +inline bool SSLServer::is_valid() const { return ctx_; } + +inline SSL_CTX *SSLServer::ssl_context() const { return ctx_; } + +inline bool SSLServer::process_and_close_socket(socket_t sock) { + auto ssl = detail::ssl_new( + sock, ctx_, ctx_mutex_, + [&](SSL *ssl2) { + return detail::ssl_connect_or_accept_nonblocking( + sock, ssl2, SSL_accept, read_timeout_sec_, read_timeout_usec_); + }, + [](SSL * /*ssl2*/) { return true; }); + + auto ret = false; + if (ssl) { + ret = detail::process_server_socket_ssl( + svr_sock_, ssl, sock, keep_alive_max_count_, keep_alive_timeout_sec_, + read_timeout_sec_, read_timeout_usec_, write_timeout_sec_, + write_timeout_usec_, + [this, ssl](Stream &strm, bool close_connection, + bool &connection_closed) { + return process_request(strm, close_connection, connection_closed, + [&](Request &req) { req.ssl = ssl; }); + }); + + // Shutdown gracefully if the result seemed successful, non-gracefully if + // the connection appeared to be closed. + const bool shutdown_gracefully = ret; + detail::ssl_delete(ctx_mutex_, ssl, shutdown_gracefully); + } + + detail::shutdown_socket(sock); + detail::close_socket(sock); + return ret; +} + +// SSL HTTP client implementation +inline SSLClient::SSLClient(const std::string &host) + : SSLClient(host, 443, std::string(), std::string()) {} + +inline SSLClient::SSLClient(const std::string &host, int port) + : SSLClient(host, port, std::string(), std::string()) {} + +inline SSLClient::SSLClient(const std::string &host, int port, + const std::string &client_cert_path, + const std::string &client_key_path) + : ClientImpl(host, port, client_cert_path, client_key_path) { + ctx_ = SSL_CTX_new(TLS_client_method()); + + detail::split(&host_[0], &host_[host_.size()], '.', + [&](const char *b, const char *e) { + host_components_.emplace_back(b, e); + }); + + if (!client_cert_path.empty() && !client_key_path.empty()) { + if (SSL_CTX_use_certificate_file(ctx_, client_cert_path.c_str(), + SSL_FILETYPE_PEM) != 1 || + SSL_CTX_use_PrivateKey_file(ctx_, client_key_path.c_str(), + SSL_FILETYPE_PEM) != 1) { + SSL_CTX_free(ctx_); + ctx_ = nullptr; + } + } +} + +inline SSLClient::SSLClient(const std::string &host, int port, + X509 *client_cert, EVP_PKEY *client_key) + : ClientImpl(host, port) { + ctx_ = SSL_CTX_new(TLS_client_method()); + + detail::split(&host_[0], &host_[host_.size()], '.', + [&](const char *b, const char *e) { + host_components_.emplace_back(b, e); + }); + + if (client_cert != nullptr && client_key != nullptr) { + if (SSL_CTX_use_certificate(ctx_, client_cert) != 1 || + SSL_CTX_use_PrivateKey(ctx_, client_key) != 1) { + SSL_CTX_free(ctx_); + ctx_ = nullptr; + } + } +} + +inline SSLClient::~SSLClient() { + if (ctx_) { SSL_CTX_free(ctx_); } + // Make sure to shut down SSL since shutdown_ssl will resolve to the + // base function rather than the derived function once we get to the + // base class destructor, and won't free the SSL (causing a leak). + shutdown_ssl_impl(socket_, true); +} + +inline bool SSLClient::is_valid() const { return ctx_; } + +inline void SSLClient::set_ca_cert_store(X509_STORE *ca_cert_store) { + if (ca_cert_store) { + if (ctx_) { + if (SSL_CTX_get_cert_store(ctx_) != ca_cert_store) { + // Free memory allocated for old cert and use new store `ca_cert_store` + SSL_CTX_set_cert_store(ctx_, ca_cert_store); + } + } else { + X509_STORE_free(ca_cert_store); + } + } +} + +inline void SSLClient::load_ca_cert_store(const char *ca_cert, + std::size_t size) { + set_ca_cert_store(ClientImpl::create_ca_cert_store(ca_cert, size)); +} + +inline long SSLClient::get_openssl_verify_result() const { + return verify_result_; +} + +inline SSL_CTX *SSLClient::ssl_context() const { return ctx_; } + +inline bool SSLClient::create_and_connect_socket(Socket &socket, Error &error) { + return is_valid() && ClientImpl::create_and_connect_socket(socket, error); +} + +// Assumes that socket_mutex_ is locked and that there are no requests in flight +inline bool SSLClient::connect_with_proxy(Socket &socket, Response &res, + bool &success, Error &error) { + success = true; + Response proxy_res; + if (!detail::process_client_socket( + socket.sock, read_timeout_sec_, read_timeout_usec_, + write_timeout_sec_, write_timeout_usec_, [&](Stream &strm) { + Request req2; + req2.method = "CONNECT"; + req2.path = host_and_port_; + return process_request(strm, req2, proxy_res, false, error); + })) { + // Thread-safe to close everything because we are assuming there are no + // requests in flight + shutdown_ssl(socket, true); + shutdown_socket(socket); + close_socket(socket); + success = false; + return false; + } + + if (proxy_res.status == StatusCode::ProxyAuthenticationRequired_407) { + if (!proxy_digest_auth_username_.empty() && + !proxy_digest_auth_password_.empty()) { + std::map auth; + if (detail::parse_www_authenticate(proxy_res, auth, true)) { + proxy_res = Response(); + if (!detail::process_client_socket( + socket.sock, read_timeout_sec_, read_timeout_usec_, + write_timeout_sec_, write_timeout_usec_, [&](Stream &strm) { + Request req3; + req3.method = "CONNECT"; + req3.path = host_and_port_; + req3.headers.insert(detail::make_digest_authentication_header( + req3, auth, 1, detail::random_string(10), + proxy_digest_auth_username_, proxy_digest_auth_password_, + true)); + return process_request(strm, req3, proxy_res, false, error); + })) { + // Thread-safe to close everything because we are assuming there are + // no requests in flight + shutdown_ssl(socket, true); + shutdown_socket(socket); + close_socket(socket); + success = false; + return false; + } + } + } + } + + // If status code is not 200, proxy request is failed. + // Set error to ProxyConnection and return proxy response + // as the response of the request + if (proxy_res.status != StatusCode::OK_200) { + error = Error::ProxyConnection; + res = std::move(proxy_res); + // Thread-safe to close everything because we are assuming there are + // no requests in flight + shutdown_ssl(socket, true); + shutdown_socket(socket); + close_socket(socket); + return false; + } + + return true; +} + +inline bool SSLClient::load_certs() { + auto ret = true; + + std::call_once(initialize_cert_, [&]() { + std::lock_guard guard(ctx_mutex_); + if (!ca_cert_file_path_.empty()) { + if (!SSL_CTX_load_verify_locations(ctx_, ca_cert_file_path_.c_str(), + nullptr)) { + ret = false; + } + } else if (!ca_cert_dir_path_.empty()) { + if (!SSL_CTX_load_verify_locations(ctx_, nullptr, + ca_cert_dir_path_.c_str())) { + ret = false; + } + } else { + auto loaded = false; +#ifdef _WIN32 + loaded = + detail::load_system_certs_on_windows(SSL_CTX_get_cert_store(ctx_)); +#elif defined(CPPHTTPLIB_USE_CERTS_FROM_MACOSX_KEYCHAIN) && defined(__APPLE__) +#if TARGET_OS_OSX + loaded = detail::load_system_certs_on_macos(SSL_CTX_get_cert_store(ctx_)); +#endif // TARGET_OS_OSX +#endif // _WIN32 + if (!loaded) { SSL_CTX_set_default_verify_paths(ctx_); } + } + }); + + return ret; +} + +inline bool SSLClient::initialize_ssl(Socket &socket, Error &error) { + auto ssl = detail::ssl_new( + socket.sock, ctx_, ctx_mutex_, + [&](SSL *ssl2) { + if (server_certificate_verification_) { + if (!load_certs()) { + error = Error::SSLLoadingCerts; + return false; + } + SSL_set_verify(ssl2, SSL_VERIFY_NONE, nullptr); + } + + if (!detail::ssl_connect_or_accept_nonblocking( + socket.sock, ssl2, SSL_connect, connection_timeout_sec_, + connection_timeout_usec_)) { + error = Error::SSLConnection; + return false; + } + + if (server_certificate_verification_) { + verify_result_ = SSL_get_verify_result(ssl2); + + if (verify_result_ != X509_V_OK) { + error = Error::SSLServerVerification; + return false; + } + + auto server_cert = SSL_get1_peer_certificate(ssl2); + + if (server_cert == nullptr) { + error = Error::SSLServerVerification; + return false; + } + + if (!verify_host(server_cert)) { + X509_free(server_cert); + error = Error::SSLServerVerification; + return false; + } + X509_free(server_cert); + } + + return true; + }, + [&](SSL *ssl2) { + // NOTE: With -Wold-style-cast, this can produce a warning, since + // SSL_set_tlsext_host_name is a macro (in OpenSSL), which contains + // an old style cast. Short of doing compiler specific pragma's + // here, we can't get rid of this warning. :'( + SSL_set_tlsext_host_name(ssl2, host_.c_str()); + return true; + }); + + if (ssl) { + socket.ssl = ssl; + return true; + } + + shutdown_socket(socket); + close_socket(socket); + return false; +} + +inline void SSLClient::shutdown_ssl(Socket &socket, bool shutdown_gracefully) { + shutdown_ssl_impl(socket, shutdown_gracefully); +} + +inline void SSLClient::shutdown_ssl_impl(Socket &socket, + bool shutdown_gracefully) { + if (socket.sock == INVALID_SOCKET) { + assert(socket.ssl == nullptr); + return; + } + if (socket.ssl) { + detail::ssl_delete(ctx_mutex_, socket.ssl, shutdown_gracefully); + socket.ssl = nullptr; + } + assert(socket.ssl == nullptr); +} + +inline bool +SSLClient::process_socket(const Socket &socket, + std::function callback) { + assert(socket.ssl); + return detail::process_client_socket_ssl( + socket.ssl, socket.sock, read_timeout_sec_, read_timeout_usec_, + write_timeout_sec_, write_timeout_usec_, std::move(callback)); +} + +inline bool SSLClient::is_ssl() const { return true; } + +inline bool SSLClient::verify_host(X509 *server_cert) const { + /* Quote from RFC2818 section 3.1 "Server Identity" + + If a subjectAltName extension of type dNSName is present, that MUST + be used as the identity. Otherwise, the (most specific) Common Name + field in the Subject field of the certificate MUST be used. Although + the use of the Common Name is existing practice, it is deprecated and + Certification Authorities are encouraged to use the dNSName instead. + + Matching is performed using the matching rules specified by + [RFC2459]. If more than one identity of a given type is present in + the certificate (e.g., more than one dNSName name, a match in any one + of the set is considered acceptable.) Names may contain the wildcard + character * which is considered to match any single domain name + component or component fragment. E.g., *.a.com matches foo.a.com but + not bar.foo.a.com. f*.com matches foo.com but not bar.com. + + In some cases, the URI is specified as an IP address rather than a + hostname. In this case, the iPAddress subjectAltName must be present + in the certificate and must exactly match the IP in the URI. + + */ + return verify_host_with_subject_alt_name(server_cert) || + verify_host_with_common_name(server_cert); +} + +inline bool +SSLClient::verify_host_with_subject_alt_name(X509 *server_cert) const { + auto ret = false; + + auto type = GEN_DNS; + + struct in6_addr addr6 {}; + struct in_addr addr {}; + size_t addr_len = 0; + +#ifndef __MINGW32__ + if (inet_pton(AF_INET6, host_.c_str(), &addr6)) { + type = GEN_IPADD; + addr_len = sizeof(struct in6_addr); + } else if (inet_pton(AF_INET, host_.c_str(), &addr)) { + type = GEN_IPADD; + addr_len = sizeof(struct in_addr); + } +#endif + + auto alt_names = static_cast( + X509_get_ext_d2i(server_cert, NID_subject_alt_name, nullptr, nullptr)); + + if (alt_names) { + auto dsn_matched = false; + auto ip_matched = false; + + auto count = sk_GENERAL_NAME_num(alt_names); + + for (decltype(count) i = 0; i < count && !dsn_matched; i++) { + auto val = sk_GENERAL_NAME_value(alt_names, i); + if (val->type == type) { + auto name = + reinterpret_cast(ASN1_STRING_get0_data(val->d.ia5)); + auto name_len = static_cast(ASN1_STRING_length(val->d.ia5)); + + switch (type) { + case GEN_DNS: dsn_matched = check_host_name(name, name_len); break; + + case GEN_IPADD: + if (!memcmp(&addr6, name, addr_len) || + !memcmp(&addr, name, addr_len)) { + ip_matched = true; + } + break; + } + } + } + + if (dsn_matched || ip_matched) { ret = true; } + } + + GENERAL_NAMES_free(const_cast( + reinterpret_cast(alt_names))); + return ret; +} + +inline bool SSLClient::verify_host_with_common_name(X509 *server_cert) const { + const auto subject_name = X509_get_subject_name(server_cert); + + if (subject_name != nullptr) { + char name[BUFSIZ]; + auto name_len = X509_NAME_get_text_by_NID(subject_name, NID_commonName, + name, sizeof(name)); + + if (name_len != -1) { + return check_host_name(name, static_cast(name_len)); + } + } + + return false; +} + +inline bool SSLClient::check_host_name(const char *pattern, + size_t pattern_len) const { + if (host_.size() == pattern_len && host_ == pattern) { return true; } + + // Wildcard match + // https://bugs.launchpad.net/ubuntu/+source/firefox-3.0/+bug/376484 + std::vector pattern_components; + detail::split(&pattern[0], &pattern[pattern_len], '.', + [&](const char *b, const char *e) { + pattern_components.emplace_back(b, e); + }); + + if (host_components_.size() != pattern_components.size()) { return false; } + + auto itr = pattern_components.begin(); + for (const auto &h : host_components_) { + auto &p = *itr; + if (p != h && p != "*") { + auto partial_match = (p.size() > 0 && p[p.size() - 1] == '*' && + !p.compare(0, p.size() - 1, h)); + if (!partial_match) { return false; } + } + ++itr; + } + + return true; +} +#endif + +// Universal client implementation +inline Client::Client(const std::string &scheme_host_port) + : Client(scheme_host_port, std::string(), std::string()) {} + +inline Client::Client(const std::string &scheme_host_port, + const std::string &client_cert_path, + const std::string &client_key_path) { + const static std::regex re( + R"((?:([a-z]+):\/\/)?(?:\[([\d:]+)\]|([^:/?#]+))(?::(\d+))?)"); + + std::smatch m; + if (std::regex_match(scheme_host_port, m, re)) { + auto scheme = m[1].str(); + +#ifdef CPPHTTPLIB_OPENSSL_SUPPORT + if (!scheme.empty() && (scheme != "http" && scheme != "https")) { +#else + if (!scheme.empty() && scheme != "http") { +#endif +#ifndef CPPHTTPLIB_NO_EXCEPTIONS + std::string msg = "'" + scheme + "' scheme is not supported."; + throw std::invalid_argument(msg); +#endif + return; + } + + auto is_ssl = scheme == "https"; + + auto host = m[2].str(); + if (host.empty()) { host = m[3].str(); } + + auto port_str = m[4].str(); + auto port = !port_str.empty() ? std::stoi(port_str) : (is_ssl ? 443 : 80); + + if (is_ssl) { +#ifdef CPPHTTPLIB_OPENSSL_SUPPORT + cli_ = detail::make_unique(host, port, client_cert_path, + client_key_path); + is_ssl_ = is_ssl; +#endif + } else { + cli_ = detail::make_unique(host, port, client_cert_path, + client_key_path); + } + } else { + cli_ = detail::make_unique(scheme_host_port, 80, + client_cert_path, client_key_path); + } +} + +inline Client::Client(const std::string &host, int port) + : cli_(detail::make_unique(host, port)) {} + +inline Client::Client(const std::string &host, int port, + const std::string &client_cert_path, + const std::string &client_key_path) + : cli_(detail::make_unique(host, port, client_cert_path, + client_key_path)) {} + +inline Client::~Client() = default; + +inline bool Client::is_valid() const { + return cli_ != nullptr && cli_->is_valid(); +} + +inline Result Client::Get(const std::string &path) { return cli_->Get(path); } +inline Result Client::Get(const std::string &path, const Headers &headers) { + return cli_->Get(path, headers); +} +inline Result Client::Get(const std::string &path, Progress progress) { + return cli_->Get(path, std::move(progress)); +} +inline Result Client::Get(const std::string &path, const Headers &headers, + Progress progress) { + return cli_->Get(path, headers, std::move(progress)); +} +inline Result Client::Get(const std::string &path, + ContentReceiver content_receiver) { + return cli_->Get(path, std::move(content_receiver)); +} +inline Result Client::Get(const std::string &path, const Headers &headers, + ContentReceiver content_receiver) { + return cli_->Get(path, headers, std::move(content_receiver)); +} +inline Result Client::Get(const std::string &path, + ContentReceiver content_receiver, Progress progress) { + return cli_->Get(path, std::move(content_receiver), std::move(progress)); +} +inline Result Client::Get(const std::string &path, const Headers &headers, + ContentReceiver content_receiver, Progress progress) { + return cli_->Get(path, headers, std::move(content_receiver), + std::move(progress)); +} +inline Result Client::Get(const std::string &path, + ResponseHandler response_handler, + ContentReceiver content_receiver) { + return cli_->Get(path, std::move(response_handler), + std::move(content_receiver)); +} +inline Result Client::Get(const std::string &path, const Headers &headers, + ResponseHandler response_handler, + ContentReceiver content_receiver) { + return cli_->Get(path, headers, std::move(response_handler), + std::move(content_receiver)); +} +inline Result Client::Get(const std::string &path, + ResponseHandler response_handler, + ContentReceiver content_receiver, Progress progress) { + return cli_->Get(path, std::move(response_handler), + std::move(content_receiver), std::move(progress)); +} +inline Result Client::Get(const std::string &path, const Headers &headers, + ResponseHandler response_handler, + ContentReceiver content_receiver, Progress progress) { + return cli_->Get(path, headers, std::move(response_handler), + std::move(content_receiver), std::move(progress)); +} +inline Result Client::Get(const std::string &path, const Params ¶ms, + const Headers &headers, Progress progress) { + return cli_->Get(path, params, headers, progress); +} +inline Result Client::Get(const std::string &path, const Params ¶ms, + const Headers &headers, + ContentReceiver content_receiver, Progress progress) { + return cli_->Get(path, params, headers, content_receiver, progress); +} +inline Result Client::Get(const std::string &path, const Params ¶ms, + const Headers &headers, + ResponseHandler response_handler, + ContentReceiver content_receiver, Progress progress) { + return cli_->Get(path, params, headers, response_handler, content_receiver, + progress); +} + +inline Result Client::Head(const std::string &path) { return cli_->Head(path); } +inline Result Client::Head(const std::string &path, const Headers &headers) { + return cli_->Head(path, headers); +} + +inline Result Client::Post(const std::string &path) { return cli_->Post(path); } +inline Result Client::Post(const std::string &path, const Headers &headers) { + return cli_->Post(path, headers); +} +inline Result Client::Post(const std::string &path, const char *body, + size_t content_length, + const std::string &content_type) { + return cli_->Post(path, body, content_length, content_type); +} +inline Result Client::Post(const std::string &path, const Headers &headers, + const char *body, size_t content_length, + const std::string &content_type) { + return cli_->Post(path, headers, body, content_length, content_type); +} +inline Result Client::Post(const std::string &path, const std::string &body, + const std::string &content_type) { + return cli_->Post(path, body, content_type); +} +inline Result Client::Post(const std::string &path, const Headers &headers, + const std::string &body, + const std::string &content_type) { + return cli_->Post(path, headers, body, content_type); +} +inline Result Client::Post(const std::string &path, size_t content_length, + ContentProvider content_provider, + const std::string &content_type) { + return cli_->Post(path, content_length, std::move(content_provider), + content_type); +} +inline Result Client::Post(const std::string &path, + ContentProviderWithoutLength content_provider, + const std::string &content_type) { + return cli_->Post(path, std::move(content_provider), content_type); +} +inline Result Client::Post(const std::string &path, const Headers &headers, + size_t content_length, + ContentProvider content_provider, + const std::string &content_type) { + return cli_->Post(path, headers, content_length, std::move(content_provider), + content_type); +} +inline Result Client::Post(const std::string &path, const Headers &headers, + ContentProviderWithoutLength content_provider, + const std::string &content_type) { + return cli_->Post(path, headers, std::move(content_provider), content_type); +} +inline Result Client::Post(const std::string &path, const Params ¶ms) { + return cli_->Post(path, params); +} +inline Result Client::Post(const std::string &path, const Headers &headers, + const Params ¶ms) { + return cli_->Post(path, headers, params); +} +inline Result Client::Post(const std::string &path, + const MultipartFormDataItems &items) { + return cli_->Post(path, items); +} +inline Result Client::Post(const std::string &path, const Headers &headers, + const MultipartFormDataItems &items) { + return cli_->Post(path, headers, items); +} +inline Result Client::Post(const std::string &path, const Headers &headers, + const MultipartFormDataItems &items, + const std::string &boundary) { + return cli_->Post(path, headers, items, boundary); +} +inline Result +Client::Post(const std::string &path, const Headers &headers, + const MultipartFormDataItems &items, + const MultipartFormDataProviderItems &provider_items) { + return cli_->Post(path, headers, items, provider_items); +} +inline Result Client::Put(const std::string &path) { return cli_->Put(path); } +inline Result Client::Put(const std::string &path, const char *body, + size_t content_length, + const std::string &content_type) { + return cli_->Put(path, body, content_length, content_type); +} +inline Result Client::Put(const std::string &path, const Headers &headers, + const char *body, size_t content_length, + const std::string &content_type) { + return cli_->Put(path, headers, body, content_length, content_type); +} +inline Result Client::Put(const std::string &path, const std::string &body, + const std::string &content_type) { + return cli_->Put(path, body, content_type); +} +inline Result Client::Put(const std::string &path, const Headers &headers, + const std::string &body, + const std::string &content_type) { + return cli_->Put(path, headers, body, content_type); +} +inline Result Client::Put(const std::string &path, size_t content_length, + ContentProvider content_provider, + const std::string &content_type) { + return cli_->Put(path, content_length, std::move(content_provider), + content_type); +} +inline Result Client::Put(const std::string &path, + ContentProviderWithoutLength content_provider, + const std::string &content_type) { + return cli_->Put(path, std::move(content_provider), content_type); +} +inline Result Client::Put(const std::string &path, const Headers &headers, + size_t content_length, + ContentProvider content_provider, + const std::string &content_type) { + return cli_->Put(path, headers, content_length, std::move(content_provider), + content_type); +} +inline Result Client::Put(const std::string &path, const Headers &headers, + ContentProviderWithoutLength content_provider, + const std::string &content_type) { + return cli_->Put(path, headers, std::move(content_provider), content_type); +} +inline Result Client::Put(const std::string &path, const Params ¶ms) { + return cli_->Put(path, params); +} +inline Result Client::Put(const std::string &path, const Headers &headers, + const Params ¶ms) { + return cli_->Put(path, headers, params); +} +inline Result Client::Put(const std::string &path, + const MultipartFormDataItems &items) { + return cli_->Put(path, items); +} +inline Result Client::Put(const std::string &path, const Headers &headers, + const MultipartFormDataItems &items) { + return cli_->Put(path, headers, items); +} +inline Result Client::Put(const std::string &path, const Headers &headers, + const MultipartFormDataItems &items, + const std::string &boundary) { + return cli_->Put(path, headers, items, boundary); +} +inline Result +Client::Put(const std::string &path, const Headers &headers, + const MultipartFormDataItems &items, + const MultipartFormDataProviderItems &provider_items) { + return cli_->Put(path, headers, items, provider_items); +} +inline Result Client::Patch(const std::string &path) { + return cli_->Patch(path); +} +inline Result Client::Patch(const std::string &path, const char *body, + size_t content_length, + const std::string &content_type) { + return cli_->Patch(path, body, content_length, content_type); +} +inline Result Client::Patch(const std::string &path, const Headers &headers, + const char *body, size_t content_length, + const std::string &content_type) { + return cli_->Patch(path, headers, body, content_length, content_type); +} +inline Result Client::Patch(const std::string &path, const std::string &body, + const std::string &content_type) { + return cli_->Patch(path, body, content_type); +} +inline Result Client::Patch(const std::string &path, const Headers &headers, + const std::string &body, + const std::string &content_type) { + return cli_->Patch(path, headers, body, content_type); +} +inline Result Client::Patch(const std::string &path, size_t content_length, + ContentProvider content_provider, + const std::string &content_type) { + return cli_->Patch(path, content_length, std::move(content_provider), + content_type); +} +inline Result Client::Patch(const std::string &path, + ContentProviderWithoutLength content_provider, + const std::string &content_type) { + return cli_->Patch(path, std::move(content_provider), content_type); +} +inline Result Client::Patch(const std::string &path, const Headers &headers, + size_t content_length, + ContentProvider content_provider, + const std::string &content_type) { + return cli_->Patch(path, headers, content_length, std::move(content_provider), + content_type); +} +inline Result Client::Patch(const std::string &path, const Headers &headers, + ContentProviderWithoutLength content_provider, + const std::string &content_type) { + return cli_->Patch(path, headers, std::move(content_provider), content_type); +} +inline Result Client::Delete(const std::string &path) { + return cli_->Delete(path); +} +inline Result Client::Delete(const std::string &path, const Headers &headers) { + return cli_->Delete(path, headers); +} +inline Result Client::Delete(const std::string &path, const char *body, + size_t content_length, + const std::string &content_type) { + return cli_->Delete(path, body, content_length, content_type); +} +inline Result Client::Delete(const std::string &path, const Headers &headers, + const char *body, size_t content_length, + const std::string &content_type) { + return cli_->Delete(path, headers, body, content_length, content_type); +} +inline Result Client::Delete(const std::string &path, const std::string &body, + const std::string &content_type) { + return cli_->Delete(path, body, content_type); +} +inline Result Client::Delete(const std::string &path, const Headers &headers, + const std::string &body, + const std::string &content_type) { + return cli_->Delete(path, headers, body, content_type); +} +inline Result Client::Options(const std::string &path) { + return cli_->Options(path); +} +inline Result Client::Options(const std::string &path, const Headers &headers) { + return cli_->Options(path, headers); +} + +inline bool Client::send(Request &req, Response &res, Error &error) { + return cli_->send(req, res, error); +} + +inline Result Client::send(const Request &req) { return cli_->send(req); } + +inline void Client::stop() { cli_->stop(); } + +inline std::string Client::host() const { return cli_->host(); } + +inline int Client::port() const { return cli_->port(); } + +inline size_t Client::is_socket_open() const { return cli_->is_socket_open(); } + +inline socket_t Client::socket() const { return cli_->socket(); } + +inline void +Client::set_hostname_addr_map(std::map addr_map) { + cli_->set_hostname_addr_map(std::move(addr_map)); +} + +inline void Client::set_default_headers(Headers headers) { + cli_->set_default_headers(std::move(headers)); +} + +inline void Client::set_header_writer( + std::function const &writer) { + cli_->set_header_writer(writer); +} + +inline void Client::set_address_family(int family) { + cli_->set_address_family(family); +} + +inline void Client::set_tcp_nodelay(bool on) { cli_->set_tcp_nodelay(on); } + +inline void Client::set_socket_options(SocketOptions socket_options) { + cli_->set_socket_options(std::move(socket_options)); +} + +inline void Client::set_connection_timeout(time_t sec, time_t usec) { + cli_->set_connection_timeout(sec, usec); +} + +inline void Client::set_read_timeout(time_t sec, time_t usec) { + cli_->set_read_timeout(sec, usec); +} + +inline void Client::set_write_timeout(time_t sec, time_t usec) { + cli_->set_write_timeout(sec, usec); +} + +inline void Client::set_basic_auth(const std::string &username, + const std::string &password) { + cli_->set_basic_auth(username, password); +} +inline void Client::set_bearer_token_auth(const std::string &token) { + cli_->set_bearer_token_auth(token); +} +#ifdef CPPHTTPLIB_OPENSSL_SUPPORT +inline void Client::set_digest_auth(const std::string &username, + const std::string &password) { + cli_->set_digest_auth(username, password); +} +#endif + +inline void Client::set_keep_alive(bool on) { cli_->set_keep_alive(on); } +inline void Client::set_follow_location(bool on) { + cli_->set_follow_location(on); +} + +inline void Client::set_url_encode(bool on) { cli_->set_url_encode(on); } + +inline void Client::set_compress(bool on) { cli_->set_compress(on); } + +inline void Client::set_decompress(bool on) { cli_->set_decompress(on); } + +inline void Client::set_interface(const std::string &intf) { + cli_->set_interface(intf); +} + +inline void Client::set_proxy(const std::string &host, int port) { + cli_->set_proxy(host, port); +} +inline void Client::set_proxy_basic_auth(const std::string &username, + const std::string &password) { + cli_->set_proxy_basic_auth(username, password); +} +inline void Client::set_proxy_bearer_token_auth(const std::string &token) { + cli_->set_proxy_bearer_token_auth(token); +} +#ifdef CPPHTTPLIB_OPENSSL_SUPPORT +inline void Client::set_proxy_digest_auth(const std::string &username, + const std::string &password) { + cli_->set_proxy_digest_auth(username, password); +} +#endif + +#ifdef CPPHTTPLIB_OPENSSL_SUPPORT +inline void Client::enable_server_certificate_verification(bool enabled) { + cli_->enable_server_certificate_verification(enabled); +} +#endif + +inline void Client::set_logger(Logger logger) { + cli_->set_logger(std::move(logger)); +} + +#ifdef CPPHTTPLIB_OPENSSL_SUPPORT +inline void Client::set_ca_cert_path(const std::string &ca_cert_file_path, + const std::string &ca_cert_dir_path) { + cli_->set_ca_cert_path(ca_cert_file_path, ca_cert_dir_path); +} + +inline void Client::set_ca_cert_store(X509_STORE *ca_cert_store) { + if (is_ssl_) { + static_cast(*cli_).set_ca_cert_store(ca_cert_store); + } else { + cli_->set_ca_cert_store(ca_cert_store); + } +} + +inline void Client::load_ca_cert_store(const char *ca_cert, std::size_t size) { + set_ca_cert_store(cli_->create_ca_cert_store(ca_cert, size)); +} + +inline long Client::get_openssl_verify_result() const { + if (is_ssl_) { + return static_cast(*cli_).get_openssl_verify_result(); + } + return -1; // NOTE: -1 doesn't match any of X509_V_ERR_??? +} + +inline SSL_CTX *Client::ssl_context() const { + if (is_ssl_) { return static_cast(*cli_).ssl_context(); } + return nullptr; +} +#endif + +// ---------------------------------------------------------------------------- + +} // namespace httplib + +#if defined(_WIN32) && defined(CPPHTTPLIB_USE_POLL) +#undef poll +#endif + +#endif // CPPHTTPLIB_HTTPLIB_H diff --git a/web_dashboard.html b/web_dashboard.html new file mode 100644 index 0000000..3c07129 --- /dev/null +++ b/web_dashboard.html @@ -0,0 +1,1381 @@ + + + + + + Bluehound + + + +
+

bluehound — ~/bluehound

+

bluehound --monitor --realtime

+ +
+
+
Total Scans
+
-
+
+
+
Unique Devices
+
-
+
+
+
First Scan
+
-
+
+
+
Last Scan
+
-
+
+
+ +
+ + + + + + + +
+ +
+ + + + + + + + + + + + + + + +
Last SeenDevice AddressName / CompanySignalDistanceTypeServices
Loading...
+
+
+ + + +