Decorating Applications with Stack (Symfony Live London 2014)

Stack is a convention for composing HttpKernelInterface middlewares. By following Stack's conventions you can add behavior and functionality to any application based on Symfony's HttpKernelInterface. This means Stack middlewares can be applied to Silex, Laravel 4, and Drupal 8 applications in addition to any other HttpKernelInterface based application. Learn the conventions, see community middlewares, and find out how to get started with Stack.

Transcript

1. Decorating Applications with Stack joind.in/11560
6. Hello, Stack!
7. #silex-php
9. February 1st, 2013 <simensen> igorw: what is the closest analogy to middlewares is there in silex/symfony? anything? <igorw> simensen: what kind of middlewares? <simensen> like ruby rack middlewares or python middlewares. <igorw> httpkernel decorators ... <igorw> I guess you can think of it like a stack of httpkernels?
10. May 23rd, 2013
11. So what is Stack?
12. Stack is a convention for composing HttpKernelInterface middlewares
13. Stack is a convention for composing HttpKernelInterface middlewares
14. Stack is NOT a library
15. Stack is NOT a framework
16. • A Stack middleware MUST implement the HttpKernelInterface. • A Stack middleware MAY delegate to a decorated HttpKernelInterface instance. • A Stack middleware MUST take an HttpKernelInterface as its first constructor argument. Good old RFC 2119...
17. That’s it. That’s a Stack middleware.
18. STACK-1 Core
19. STACK-2 Authentication
20. STACK-3 Authorization
21. Stack is a convention for composing HttpKernelInterface middlewares
23. –Fabien Potencier, HttpKernelInterface.php “HttpKernelInterface handles a Request to convert it to a Response.”
25. "Stack is framework agnostic."
27. "Framework agnostic," my foot!
28. ... and more!
29. Stack is a convention for composing HttpKernelInterface middlewares
30. HAS-A vs IS-A
31. HAS-A <3
32. Interfaces?
33. Decorate them!
34. WRAPS-A? :)
35. MUST implement every method Good old RFC 2119...
36. :(
38. just one method
39. handle()
40. :)
41. Stack is a convention for composing HttpKernelInterface middlewares
43. – http://silex.sensiolabs.org/doc/middlewares.html “Silex allows you to run code, that changes the default Silex behavior, at different stages during the handling of a request through middlewares”
45. – https://docs.djangoproject.com/en/dev/topics/http/middleware/ “Middleware is a framework of hooks into Django’s request/response processing. It’s a light, low-level “plugin” system for globally altering Django’s input or output.”
46. – https://docs.djangoproject.com/en/dev/topics/http/middleware/ "Each middleware component is responsible for doing some specific function. For example, Django includes a middleware component [...] that associates users with requests using sessions."
48. – http://rubylearning.com/blog/a-quick-introduction-to-rack/#C12 “The fundamental idea behind Rack middleware is – come between the calling client and the server, process the HTTP request before sending it to the server, and processing the HTTP response before returning it to the client.”
49. – http://zaiste.net/2012/08/concisely_about_rack_applications/ "Rack middleware provides a way to implement a chained process execution for web applications. It's an implementation of the pipeline design pattern. It acts "in the middle" between the client and the server processing requests before they reach the server and responses before they are returned to the client."
50. Stack is a convention for composing HttpKernelInterface middlewares
51. Anatomy of a Middleware
52. class Passthru implements HttpKernelInterface { private $app; public function __construct(HttpKernelInterface $app) { $this->app = $app; } public function handle( Request $request, $type = self::MASTER_REQUEST, $catch = true ) { return $this->app->handle($request, $type, $catch) } }
53. for the sake of brevity
54. "use HttpKernelInterface as HKI"
55. public function handle($request)
56. class Passthru implements HKI { private $app; public function __construct(HKI $app) { $this->app = $app; } public function handle($request) { return $this->app->handle($request) } }
57. class Passthru implements HKI { private $app; public function __construct(HKI $app) { $this->app = $app; } public function handle($request) { return $this->app->handle($request) } }
58. class Passthru implements HKI { private $app; public function __construct(HKI $app) { $this->app = $app; } public function handle($request) { // Request / before ! // Delegate $response = $this->app->handle($request) ! // Response /after return $response; } }
61. Stack Builder
62. Builder is NOT required to "implement Stack"
63. Builder IS a tool to help "implement Stack"
64. $stack = (new Stack\Builder()) ! ->push('Stack\Session') ! ->push('Dflydev\Stack\BasicAuthentication') ! ->push('Silpion\Stack\Logger'); ! $app = new YourAppKernel(); ! $app = $stack->resolve($app);
65. push() accepts the classname of a Stack middleware !
66. push() accepts the classname of a Stack middleware ! ... or ...
67. a callable whose first argument is an HttpKernelInterface instance !
68. class Application implements HttpKernelInterface { public function run(SymfonyRequest $request = null) { $request = $request ?: $this['request']; ! $response = with($stack = $this->getStackedClient())->handle($request); ! $response->send(); ! $stack->terminate($request, $response); } ! protected function getStackedClient() { $sessionReject = $this->bound('session.reject') ? $this['session.reject'] : null; ! $client = (new \Stack\Builder) ->push('Illuminate\Cookie\Guard', $this['encrypter']) ->push('Illuminate\Cookie\Queue', $this['cookie']) ->push('Illuminate\Session\Middleware', $this['session'], $sessionReject); ! $this->mergeCustomMiddlewares($client); ! return $client->resolve($this); } }
69. class StackedKernelPass implements CompilerPassInterface { public function process(ContainerBuilder $container) { if (!$container->hasDefinition('http_kernel_factory')) { return; } ! $http_kernel_factory = $container->getDefinition('http_kernel_factory'); $middleware_priorities = array(); $middleware_arguments = array(); foreach ($container->findTaggedServiceIds('http_middleware') as $id => $attributes) { $priority = isset($attributes[0]['priority']) ? $attributes[0]['priority'] : 0; $middleware_priorities[$id] = $priority; $definition = $container->getDefinition($id); $middleware_arguments[$id] = $definition->getArguments(); array_unshift($middleware_arguments[$id], $definition->getClass()); } array_multisort($middleware_priorities, SORT_DESC, $middleware_arguments, SORT_DESC); ! foreach ($middleware_arguments as $id => $push_arguments) { $http_kernel_factory->addMethodCall('push', $push_arguments); } } }
70. Middlewares
71. Inline Middleware (Inline functions / callables)
72. class Inline implements HKI { public function __construct(HKI $app, $callable) { $this->app = $app; $this->callable = $callable; } public function handle($request) { return call_user_func($this->callable, $this->app); } }
73. $app = new Silex\Application(); ! $app->get('/', function (Request $request) { if ('success' === $request->attributes->get('callable_middleware')) { return new Response('SUCCESS'); } ! return new Response('FAILED', 500); }); ! $inlineMiddleware = function(HKI $app) { $request->attributes->set('callable_middleware', 'success'); $response = $app->handle($request, $type, $catch); $response->setContent('['.$response->getContent().']'); return $response; }; ! $stack = (new Stack\Builder()) ->push('Stack\Inline', $inlineMiddleware); ! $app = $stack->resolve($app);
74. 200, "[SUCCESS]"
75. Great for testing
76. Session Middleware
77. class Session implements HKI { public function __construct(HKI $app, $session) { $this->app = $app; $this->session = $session; } public function handle($request) { $request->setSession($this->session); $this->session->setId($request->cookies->get($this->session->getName())); ! $response = $this->app->handle($request); ! if ($this->session && $this->session->isStarted()) { $response->headers->setCookie(new Cookie( $session->getName(), $session->getId(), /* ... */ )); } ! return $response; } }
78. class Session implements HKI { public function __construct(HKI $app, $session) { $this->app = $app; $this->session = $session; } public function handle($request) { $request->setSession($this->session); $this->session->setId($request->cookies->get($this->session->getName())); ! $response = $this->app->handle($request); ! if ($this->session && $this->session->isStarted()) { $response->headers->setCookie(new Cookie( $session->getName(), $session->getId(), /* ... */ )); } ! return $response; } }
79. class Session implements HKI { public function __construct(HKI $app, $session) { $this->app = $app; $this->session = $session; } public function handle($request) { $request->setSession($this->session); $this->session->setId($request->cookies->get($this->session->getName())); ! $response = $this->app->handle($request); ! if ($this->session && $this->session->isStarted()) { $response->headers->setCookie(new Cookie( $session->getName(), $session->getId(), /* ... */ )); } ! return $response; } }
80. class Session implements HKI { public function __construct(HKI $app, $session) { $this->app = $app; $this->session = $session; } public function handle($request) { $request->setSession($this->session); $this->session->setId($request->cookies->get($this->session->getName())); ! $response = $this->app->handle($request); ! if ($this->session && $this->session->isStarted()) { $response->headers->setCookie(new Cookie( $session->getName(), $session->getId(), /* ... */ )); } ! return $response; } }
81. class Session implements HKI { public function __construct(HKI $app, $session) { $this->app = $app; $this->session = $session; } public function handle($request) { $request->setSession($this->session); $this->session->setId($request->cookies->get($this->session->getName())); ! $response = $this->app->handle($request); ! if ($this->session && $this->session->isStarted()) { $response->headers->setCookie(new Cookie( $session->getName(), $session->getId(), /* ... */ )); } ! return $response; } }
82. (It is actually a little more complicated than that)
83. $app = new Silex\Application(); ! $app->get('/login', function (Request $request) { $session = $request->getSession(); $username = $request->server->get('PHP_AUTH_USER'); $password = $request->server->get('PHP_AUTH_PW'); if ('igor' === $username && 'password' === $password) { $session->set('user', array('username' => $username)); return new RedirectResponse('/account'); } return new Response('Please sign in.', 401, [ 'WWW-Authenticate' => sprintf('Basic realm="%s"', 'site_login'), ]); }); ! $app->get('/account', function (Request $request) { $session = $request->getSession(); if (null === $user = $session->get('user')) { return new RedirectResponse('/login'); } return sprintf('Welcome %s!', $user['username']); }); ! $stack = (new Stack\Builder()) ->push('Stack\Session'); ! $app = $stack->resolve($app);
84. URL Map
85. class UrlMap implements HKI { public function __construct(HKI $app, $map) { $this->app = $app; $this->map = $map; } public function handle($request) { $pathInfo = rawurldecode($request->getPathInfo()); foreach ($this->map as $path => $app) { if (0 === strpos($pathInfo, $path)) { $server = $request->server->all(); $server['SCRIPT_FILENAME'] = $server['SCRIPT_NAME'] = $server['PHP_SELF'] = $request->getBaseUrl().$path; $attributes = $request->attributes->all(); $attributes['stack.url_map.prefix'] = $request->getBaseUrl().$path; $newRequest = $request->duplicate(null, null, $attributes, null, null, $server); return $app->handle($newRequest, $type, $catch); } } return $this->app->handle($request); } }
86. class UrlMap implements HKI { public function __construct(HKI $app, $map) { $this->app = $app; $this->map = $map; } public function handle($request) { $pathInfo = rawurldecode($request->getPathInfo()); foreach ($this->map as $path => $app) { if (0 === strpos($pathInfo, $path)) { $server = $request->server->all(); $server['SCRIPT_FILENAME'] = $server['SCRIPT_NAME'] = $server['PHP_SELF'] = $request->getBaseUrl().$path; $attributes = $request->attributes->all(); $attributes['stack.url_map.prefix'] = $request->getBaseUrl().$path; $newRequest = $request->duplicate(null, null, $attributes, null, null, $server); return $app->handle($newRequest, $type, $catch); } } return $this->app->handle($request); } }
87. class UrlMap implements HKI { public function __construct(HKI $app, $map) { $this->app = $app; $this->map = $map; } public function handle($request) { $pathInfo = rawurldecode($request->getPathInfo()); foreach ($this->map as $path => $app) { if (0 === strpos($pathInfo, $path)) { $server = $request->server->all(); $server['SCRIPT_FILENAME'] = $server['SCRIPT_NAME'] = $server['PHP_SELF'] = $request->getBaseUrl().$path; $attributes = $request->attributes->all(); $attributes['stack.url_map.prefix'] = $request->getBaseUrl().$path; $newRequest = $request->duplicate(null, null, $attributes, null, null, $server); return $app->handle($newRequest, $type, $catch); } } return $this->app->handle($request); } }
88. class UrlMap implements HKI { public function __construct(HKI $app, $map) { $this->app = $app; $this->map = $map; } public function handle($request) { $pathInfo = rawurldecode($request->getPathInfo()); foreach ($this->map as $path => $app) { if (0 === strpos($pathInfo, $path)) { $server = $request->server->all(); $server['SCRIPT_FILENAME'] = $server['SCRIPT_NAME'] = $server['PHP_SELF'] = $request->getBaseUrl().$path; $attributes = $request->attributes->all(); $attributes['stack.url_map.prefix'] = $request->getBaseUrl().$path; $newRequest = $request->duplicate(null, null, $attributes, null, null, $server); return $app->handle($newRequest, $type, $catch); } } return $this->app->handle($request); } }
89. class UrlMap implements HKI { public function __construct(HKI $app, $map) { $this->app = $app; $this->map = $map; } public function handle($request) { $pathInfo = rawurldecode($request->getPathInfo()); foreach ($this->map as $path => $app) { if (0 === strpos($pathInfo, $path)) { $server = $request->server->all(); $server['SCRIPT_FILENAME'] = $server['SCRIPT_NAME'] = $server['PHP_SELF'] = $request->getBaseUrl().$path; $attributes = $request->attributes->all(); $attributes['stack.url_map.prefix'] = $request->getBaseUrl().$path; $newRequest = $request->duplicate(null, null, $attributes, null, null, $server); return $app->handle($newRequest, $type, $catch); } } return $this->app->handle($request); } }
90. class UrlMap implements HKI { public function __construct(HKI $app, $map) { $this->app = $app; $this->map = $map; } public function handle($request) { $pathInfo = rawurldecode($request->getPathInfo()); foreach ($this->map as $path => $app) { if (0 === strpos($pathInfo, $path)) { $server = $request->server->all(); $server['SCRIPT_FILENAME'] = $server['SCRIPT_NAME'] = $server['PHP_SELF'] = $request->getBaseUrl().$path; $attributes = $request->attributes->all(); $attributes['stack.url_map.prefix'] = $request->getBaseUrl().$path; $newRequest = $request->duplicate(null, null, $attributes, null, null, $server); return $app->handle($newRequest, $type, $catch); } } return $this->app->handle($request); } }
91. class UrlMap implements HKI { public function __construct(HKI $app, $map) { $this->app = $app; $this->map = $map; } public function handle($request) { $pathInfo = rawurldecode($request->getPathInfo()); foreach ($this->map as $path => $app) { if (0 === strpos($pathInfo, $path)) { $server = $request->server->all(); $server['SCRIPT_FILENAME'] = $server['SCRIPT_NAME'] = $server['PHP_SELF'] = $request->getBaseUrl().$path; $attributes = $request->attributes->all(); $attributes['stack.url_map.prefix'] = $request->getBaseUrl().$path; $newRequest = $request->duplicate(null, null, $attributes, null, null, $server); return $app->handle($newRequest, $type, $catch); } } return $this->app->handle($request); } }
92. class UrlMap implements HKI { public function __construct(HKI $app, $map) { $this->app = $app; $this->map = $map; } public function handle($request) { $pathInfo = rawurldecode($request->getPathInfo()); foreach ($this->map as $path => $app) { if (0 === strpos($pathInfo, $path)) { $server = $request->server->all(); $server['SCRIPT_FILENAME'] = $server['SCRIPT_NAME'] = $server['PHP_SELF'] = $request->getBaseUrl().$path; $attributes = $request->attributes->all(); $attributes['stack.url_map.prefix'] = $request->getBaseUrl().$path; $newRequest = $request->duplicate(null, null, $attributes, null, null, $server); return $app->handle($newRequest, $type, $catch); } } return $this->app->handle($request); } }
93. class UrlMap implements HKI { public function __construct(HKI $app, $map) { $this->app = $app; $this->map = $map; } public function handle($request) { $pathInfo = rawurldecode($request->getPathInfo()); foreach ($this->map as $path => $app) { if (0 === strpos($pathInfo, $path)) { $server = $request->server->all(); $server['SCRIPT_FILENAME'] = $server['SCRIPT_NAME'] = $server['PHP_SELF'] = $request->getBaseUrl().$path; $attributes = $request->attributes->all(); $attributes['stack.url_map.prefix'] = $request->getBaseUrl().$path; $newRequest = $request->duplicate(null, null, $attributes, null, null, $server); return $app->handle($newRequest, $type, $catch); } } return $this->app->handle($request); } }
94. $app = new Application(); $app->get('/', function () { return "Main Application!"; }); ! $blog = new Application(); $blog->get('/', function () { return "This is the blog!"; }); ! $forum = new Application(); $forum->get('/', function () { return "This is the forum!"; }); ! $map = [ "/blog" => $blog, "/forum" => $forum, ]; ! $stack = (new Stack\Builder()) ->push('Stack\UrlMap', $map); ! $app = $stack->resolve($app);
95. HTTP Cache
96. The original Stack middleware
97. class HttpCache implements HKI { public function __construct(HKI $app, StoreInterface $store) { $this->app = $app; $this->store = $store; } public function handle($request) { if ($this->store->isStillCached($request)) { $response = $this->store->getFromCache($request); } else { $response = $this->app->handle($request); } ! $response = $this->app->handle($request); ! if ($this->store->shouldCache($request, $response)) { $this->store->cache($request, $response); } ! return $response; } }
98. (That was not even close to what actually happens...)
99. Geo IP
100. class GeoIp implements HKI { public function __construct(HKI $app, $geocoder, $header = 'X-Country') { $this->app = $app; $this->geocoder = $geocoder; $this->header = $header; } public function handle($request) { $results = $this->geocoder->geocode($request->getClientIp()); if ($country = $results->getCountryCode()) { $request->headers->set($this->header, $country, true); } return $this->app->handle($request); } }
101. $app = new Silex\Application(); ! $app->get('/', function(Request $request) { $ip = $request->getClientIp(); $country = $request->headers->get('X-Country', 'UNKNOWN'); ! return new Response($ip . ' => '. $country, 200); }); ! $stack = (new Stack\Builder()) ->push('Geocoder\Stack\GeoIp'); ! $app = $stack->resolve($app);
102. $app = new Silex\Application(); ! $app->get('/', function(Request $request) { $ip = $request->getClientIp(); $country = $request->headers->get('X-Country', 'UNKNOWN'); ! return new Response($ip . ' => '. $country, 200); }); ! $blockAllButUs = function (HKI $app, $request) { if ($request->headers->get('X-Country') != 'US') { return new RedirectResponse('http://google.com); } return $app->handle($request); }; ! $stack = (new Stack\Builder()) ->push('Geocoder\Stack\GeoIp') ->push('Stack\Inline', $blockAllButUs); ! $app = $stack->resolve($app);
103. Backstage (maintenance pages)
104. class Backstage implements HKI { public function __construct(HKI $app, $path) { $this->app = $app; $this->path = $path; } ! public function handle($request) { $path = realpath($this->path); ! if (false !== $path) { return new Response(file_get_contents($path), 503); } ! return $this->app->handle($request); } }
105. $app = new Silex\Application(); ! $app->get('/', function () { return 'my app is working'; }); ! $stack = (new Stack\Builder()) ->push('Atst\StackBackstage', __DIR__.'/maintenance.html'); ! $app = $stack->resolve($app);
106. $ echo "<h1>Down for Maintenance</h1>" > /path/to/your/app/maintenance.html ! # do your thang ! $ rm /path/to/your/app/maintenance.html
107. So many more middlewares...
108. • HTTP Cache • CookieGuard • GeoIp • IpRestrict • Backstage • OAuth • Basic Authentication • Hawk • CORS • Robots • Negotiation • Honeypot • Logger • ... and more
109. The Future!
110. [this page intentionally left blank]
111. Stack is NOT a library
112. Stack is NOT a framework
113. Stack is a convention for composing HttpKernelInterface middlewares
114. ... and more!
115. Questions? @beausimensen dflydev.com ddd.io/sflive joind.in/11560
116. [this page intentionally left blank]
117. @igorwhiletrue @beausimensen @hochchristoph (plus many others!)
118. Stack Conventions
119. STACK-0 Proposals Draft
120. STACK-0 Proposals Draft rfc.zeromq.org
121. Stack-0 Proposals • MUST look like STACK-{NUMBER}. • MUST have a descriptive name. Good old RFC 2119...
122. STACK-1 Core Draft
123. Stack-1 Core • Middlewares MUST implement the HttpKernelInterface. • Middlewares MAY delegate to the decorated HttpKernelInterface. • Middlewares MUST take an HttpKernelInterface as its first constructor argument. Good old RFC 2119...
124. WIP Stack-1 Core • Middlewares MUST implement the HttpKernelInterface. • Middlewares MAY delegate to the decorated HttpKernelInterface. • Middlewares MUST take an HttpKernelInterface as its first constructor argument. Good old RFC 2119...
125. STACK-2 Authentication Draft
126. stack.authn.token (string or serializable)
127. 401 Unauthorized WWW-Authenticate: Stack
128. dflydev/stack-authentication A collection of Stack middlewares designed to help authentication middleware implementors adhere to the STACK-2 Authentication conventions.
129. STACK-3 Authorization Draft
130. stack.authn.token
131. 401 Unauthorized WWW-Authenticate: Stack
132. 403 Forbidden