[ViewVC] Annotation of: cvs/AnyEvent-HTTP/Changes

Revision history for AnyEvent::HTTP

TODO: provide lwp_request function that takes an lwp http requets and returns a http response.
TODO: set_proxy hook
TODO: use proxy hook
TODO: ip6 literals in url
TODO: maybe read big chunks in smaller portions for chunked-encoding + on_body.
TODL: on_upgrade, for 101 responses?
TODO: document session vs. sessionid correctly.
TODO: support proxy username:password in both proxy switch and set_proxy string (dzagashev@gmail.com)

TODO: infinite recursion (Kostirya)
TODO: ipv6 not properly parsed in authority (Raphael Geissert)

        - delete the body when mutating request to GET request when
          redirecting (reported by joe trader).
        - send proxy-authorization header to proxy when using CONNECT
          (reported by dzagashev@gmail.com).
        - do not send Proxy-Authroization header when not using a proxy.

2.21 Mon Jun  9 01:35:54 CEST 2014
        - correctly keep body when redirecting POSTs, instead of
          deleting them.

2.2  Mon Jun  9 01:31:46 CEST 2014
        - connection header was malformed (patch by Raphael Geissert).
        - add lots of known idempotent methods from httpbis.
        - implement relative location headers (rfc 7231), with fallback on URI.
        - add support for status code 308 from rfc 7238.
        - recommend URI.

2.15 Wed Nov 14 23:22:07 CET 2012
        - use the recurse parameter to also limit the number of retries to be
          done, avodiing endless loops with broken servers, as reported
          by Carl Chambers.

2.14 Sun Apr 22 14:57:51 CEST 2012
        - Time::Local::timegm croaks on out-of-range values. Don't let
          this disturb AnyEvent::HTTP (reported by: tell me, I forgot...).

2.13 Wed Jul 27 17:53:58 CEST 2011
        - garbled chunked responses caused AnyEvent::HTTP to malfunction
          (patch by Dmitri Melikyan).
        - fix GET => HEAD in one case in the documentation (James Bromberger).

2.12 Tue Jun 14 07:22:54 CEST 2011
        - fix a possible 'Can't call method "destroyed"' error (which would
          have been reported by Carl Chambers).

2.11 Tue May 10 14:33:28 CEST 2011
        - the keepalive session cache wouldn't take port and scheme into account
          when reusing connection - potentially causing information leaks
          (reported by Nick Kostirya).
        - bump AnyEvent dependency version (reported by Richard Harris).

2.1  Thu Feb 24 13:11:51 CET 2011
        - the keepalive and persistent parameters were actually named
          differently in the code - they now work as documented.
        - fix a bug where callbacks would sometimes never be called when
          the request timeout is near or below the persistent connection
          timeout (testcase by Cindy Wang).
        - destroying the guard would have no effect when a request was
          recursing or being retired.

2.04 Sat Feb 19 07:45:24 CET 2011
        - "proxy => undef" now overrides any global proxy when specified.
        - require scheme in urls, also use a stricter match to match urls,
          leading or trailing garbage is no longer tolerated.
        - EXPERIMENTAL: allow '=' in cookie values.

2.03 Tue Jan 18 18:49:35 CET 2011
        - dummy reupload, file gone from cpan somehow.

2.02 Wed Jan 12 04:29:37 CET 2011
        - do not lowercase cookie names, only parameter names.

2.01 Tue Jan 11 07:38:15 CET 2011
        - add missing dependency on common::sense.
        - add a resume download example.

2.0  Tue Jan  4 09:16:56 CET 2011
        - hopefully fully upgraded to HTTP/1.1.
        - support HTTP/1.1 persistent and HTTP/1.0 keep-alive connections.
        - drop https-proxy-connection support. seems unused and ill-specified.
        - use more differentiated 59x status codes.
        - properly use url (not proxy) hostname to verify server certificate.
        - much improved cookie implementation:
           - properly implement cookie expiry (for new cookies).
           - new function to expire cookies and sessions: cookie_jar_expire.
           - add special exception to parse broken expires= keys in
             set-cookie headers.
           - do not quote cookie values when not strictly necessary, to
             improve compatibility with broken servers.
           - accept and send lots of invalid cookie values exactly as
             they were received - this should not impact valid values.
           - lowercase cookie parameter names for improved compatibility.
           - support the max-age cookie parameter, overrides expires.
           - support cookie dates (and a few others) in parse_date.
           - properly support value-less parameters (e.g. secure, httponly).
        - do not send Host: header in a proxy CONNECT request.
        - use common::sense.
        - lowercase hostnames and schemes.
        - ignore leading zeroes in http version.
        - handle spaces in content-length headers more gracefully.

1.5  Fri Dec 31 04:47:08 CET 2010
        - bugfix: after headers were received, if any error occured the wrong
          (server-sent) Status and Reason fields would be passed to the callback.
        - when an error occurs during transfer, preserve status/reason.
        - add socks4a connect example.
        - new "tcp_connect" parameter.
        - new format_date and parse_date functions.
        - diagnose unexpected eof as such when the length is known.
        - add 205 to the responses without body.

1.46 Mon Sep  6 08:29:34 CEST 2010
        - some (broken) servers differentiate between empty search parts
          and nonexistant search parts, work around this (problem
          analyzed by Sergey Zasenko).
        - possibly increase robustness by always setting an on_error
          callback on the AnyEvent::Handle object (especially in case
          of user errors, such as nehative timeouts).
        - we now always follow 301/302/303 redirects and mutate POST to GET.
        - we now always follow 307 redirects, even for POST.
        - header-less responses are not parsed correctly (at a negative
          speed penatly :).

1.45 Wed Jun 16 21:15:26 CEST 2010
        - fix a bug where the handle would go away directly after a successful
          connect (analyzed and patch by Maxim Dounin).
        - due to popular demand, introduce the Redirect pseudo response header.
        - document URL pseudo-header better.
        - explain how to implement DNS caching.

1.44 Sat Dec  5 16:36:20 CET 2009
        - do not generate content-length on get requests (if the body is empty),
          as there are even more broken servers out there.
        - allow set_proxy to clear the proxy again.
        - set_proxy will now croak on invalid urls.
        - support overriding the Host-header (requested by Tatsuhiko Miyagawa).

1.43 Fri Aug 14 17:02:02 CEST 2009
        - provide on_prepare callback on common request.

1.42 Wed Aug  5 18:43:01 CEST 2009
        - allow suppression of auto-supplied header fields by specifying undef
          (requested by Mr Guest).
        - allow proxy scheme to be missing, as documented
          (reported by Mr Guest).
        - do not follow redirects if we do not have a location header
          (requested by Mr Guest).

1.41 Sat Jul 25 03:27:05 CEST 2009
        - correctly parse completely headerless responses (e.g. by gatling).
          (analysed by Robin Redeker).

1.4  Tue Jul  7 02:14:53 CEST 2009
        - http_request would not instantly clear the connection slot on
          tcp_connect failures, potentially leading to deadlocks.
        - fix a bug where a connection error is wrongly reported
          as EINPROGRESS.
        - new parameters: on_header, on_body, want_body_handle.
        - redirects will be followed when recurse is enabled whether or not
          the body dowload was successful or not.
        - include :port in Host header when given in the url (many sites break
          when it's always there, and many break if it's missing...).
        - pass the empty string, not undef, when there is no body but
          no error occured.
        - allow passing of tls_ctx, predefine two https security profiles.
        - ucfirst all error messages generated internally.
        - include "U" token in User-Agent.
        - document $AnyEvent::HTTP::MAX_PER_HOST.
        - allow empty field names in response headers (microsoft hits. microsoft
          hits. microsoft hits. you die).

1.12 Thu Jun 11 14:45:18 CEST 2009
        - $scheme wasn't optional in the proxy specification (reported by
          Felix Antonius Wilhelm Ostmann).

1.11 Fri Nov 21 09:18:11 CET 2008
        - work around a perl core bug not properly refcounting function arguments,
          causing "200 OK" with random body results (reported by Дмитрий Шалашов).

1.1  Thu Oct 30 04:46:27 CET 2008
        - work around different behaviour of AnyEvent::Handle in TLS mode.
        - cleanup cookie implementation, many examples and comments were
          provided by Дмитрий Шалашов.
        - document the return values of http_* functions better.
        - separate multiple header values by "," not "\x00" (this does not
          break correctly written users of the old API).
        - improve Set-Cookie: parsing.
        - add experimental https-over-http-proxy support.
        - downgrade https-over-https proxy to https-over-http.
        - ignore spurious CR characters in headers, they show up
          in the weirdest of places.
        - ucfirst the request headers, for a slightly less weird look.
        - work around (some) memleaks in perl regarding qr.

1.05 Mon Sep 29 15:49:58 CEST 2008
        - fix a regex when parsing cookie domains
          (patch by Дмитрий Шалашов).

1.04 Thu Jul 24 08:00:46 CEST 2008
        - parse reason-less http status responses.
        - parse more forms of broken location headers.

1.03 Thu Jul  3 03:47:58 CEST 2008
        - fix http_post, which was totally broken (patch by Pedro Melo).
        - do not recurse on POST requests, as per HTTP/1.[01] (this might
          change as the recommendation isn't followed by anybody else).
        - implement preliminary support for 303/307 redirects.

1.02 Thu Jun 12 13:50:08 CEST 2008
        - make the request URL available in the callback of http_request.
        - export http_post, http_head.

1.01 Fri Jun  6 14:56:37 CEST 2008
        - fixed prototypes for http_* functions

1.0  Thu Jun  5 20:41:43 CEST 2008
        - original version, an AnyEvent::AIO clone.
Revision:	1.84
Committed:	Fri May 8 17:34:34 2015 UTC (9 years ago) by root
Branch:	MAIN
Changes since 1.83:	+1 -1 lines
Log Message:	* empty log message *
#	User	Rev	Content
1	root	1.2	Revision history for AnyEvent::HTTP
2	root	1.1
3	root	1.18	TODO: provide lwp_request function that takes an lwp http requets and returns a http response.
4	root	1.73	TODO: set_proxy hook
5			TODO: use proxy hook
6	root	1.76	TODO: ip6 literals in url
7			TODO: maybe read big chunks in smaller portions for chunked-encoding + on_body.
8	root	1.78	TODL: on_upgrade, for 101 responses?
9	root	1.80	TODO: document session vs. sessionid correctly.
10	root	1.84	TODO: support proxy username:password in both proxy switch and set_proxy string (dzagashev@gmail.com)
11	root	1.76
12	root	1.82	TODO: infinite recursion (Kostirya)
13	root	1.83	TODO: ipv6 not properly parsed in authority (Raphael Geissert)
14
15			- delete the body when mutating request to GET request when
16			redirecting (reported by joe trader).
17			- send proxy-authorization header to proxy when using CONNECT
18			(reported by dzagashev@gmail.com).
19			- do not send Proxy-Authroization header when not using a proxy.
20
21	root	1.81	2.21 Mon Jun 9 01:35:54 CEST 2014
22			- correctly keep body when redirecting POSTs, instead of
23			deleting them.
24
25	root	1.80	2.2 Mon Jun 9 01:31:46 CEST 2014
26	root	1.79	- connection header was malformed (patch by Raphael Geissert).
27	root	1.77	- add lots of known idempotent methods from httpbis.
28	root	1.80	- implement relative location headers (rfc 7231), with fallback on URI.
29			- add support for status code 308 from rfc 7238.
30			- recommend URI.
31	root	1.77
32	root	1.76	2.15 Wed Nov 14 23:22:07 CET 2012
33			- use the recurse parameter to also limit the number of retries to be
34			done, avodiing endless loops with broken servers, as reported
35			by Carl Chambers.
36	root	1.74
37	root	1.75	2.14 Sun Apr 22 14:57:51 CEST 2012
38			- Time::Local::timegm croaks on out-of-range values. Don't let
39			this disturb AnyEvent::HTTP (reported by: tell me, I forgot...).
40
41	root	1.74	2.13 Wed Jul 27 17:53:58 CEST 2011
42	root	1.73	- garbled chunked responses caused AnyEvent::HTTP to malfunction
43			(patch by Dmitri Melikyan).
44	root	1.74	- fix GET => HEAD in one case in the documentation (James Bromberger).
45	root	1.73
46	root	1.72	2.12 Tue Jun 14 07:22:54 CEST 2011
47			- fix a possible 'Can't call method "destroyed"' error (which would
48			have been reported by Carl Chambers).
49
50	root	1.71	2.11 Tue May 10 14:33:28 CEST 2011
51			- the keepalive session cache wouldn't take port and scheme into account
52			when reusing connection - potentially causing information leaks
53			(reported by Nick Kostirya).
54			- bump AnyEvent dependency version (reported by Richard Harris).
55
56	root	1.69	2.1 Thu Feb 24 13:11:51 CET 2011
57			- the keepalive and persistent parameters were actually named
58			differently in the code - they now work as documented.
59			- fix a bug where callbacks would sometimes never be called when
60	root	1.70	the request timeout is near or below the persistent connection
61	root	1.69	timeout (testcase by Cindy Wang).
62			- destroying the guard would have no effect when a request was
63			recursing or being retired.
64
65	root	1.68	2.04 Sat Feb 19 07:45:24 CET 2011
66			- "proxy => undef" now overrides any global proxy when specified.
67	root	1.66	- require scheme in urls, also use a stricter match to match urls,
68			leading or trailing garbage is no longer tolerated.
69	root	1.68	- EXPERIMENTAL: allow '=' in cookie values.
70	root	1.66
71	root	1.65	2.03 Tue Jan 18 18:49:35 CET 2011
72			- dummy reupload, file gone from cpan somehow.
73
74	root	1.64	2.02 Wed Jan 12 04:29:37 CET 2011
75			- do not lowercase cookie names, only parameter names.
76
77	root	1.63	2.01 Tue Jan 11 07:38:15 CET 2011
78	root	1.62	- add missing dependency on common::sense.
79	root	1.63	- add a resume download example.
80	root	1.62
81	root	1.59	2.0 Tue Jan 4 09:16:56 CET 2011
82	root	1.48	- hopefully fully upgraded to HTTP/1.1.
83	root	1.59	- support HTTP/1.1 persistent and HTTP/1.0 keep-alive connections.
84			- drop https-proxy-connection support. seems unused and ill-specified.
85	root	1.60	- use more differentiated 59x status codes.
86			- properly use url (not proxy) hostname to verify server certificate.
87	root	1.48	- much improved cookie implementation:
88	root	1.53	- properly implement cookie expiry (for new cookies).
89			- new function to expire cookies and sessions: cookie_jar_expire.
90	root	1.48	- add special exception to parse broken expires= keys in
91			set-cookie headers.
92	root	1.49	- do not quote cookie values when not strictly necessary, to
93			improve compatibility with broken servers.
94	root	1.50	- accept and send lots of invalid cookie values exactly as
95			they were received - this should not impact valid values.
96	root	1.48	- lowercase cookie parameter names for improved compatibility.
97	root	1.60	- support the max-age cookie parameter, overrides expires.
98	root	1.53	- support cookie dates (and a few others) in parse_date.
99	root	1.60	- properly support value-less parameters (e.g. secure, httponly).
100	root	1.57	- do not send Host: header in a proxy CONNECT request.
101			- use common::sense.
102			- lowercase hostnames and schemes.
103			- ignore leading zeroes in http version.
104			- handle spaces in content-length headers more gracefully.
105	root	1.47
106	root	1.46	1.5 Fri Dec 31 04:47:08 CET 2010
107	root	1.45	- bugfix: after headers were received, if any error occured the wrong
108			(server-sent) Status and Reason fields would be passed to the callback.
109			- when an error occurs during transfer, preserve status/reason.
110	root	1.41	- add socks4a connect example.
111	root	1.40	- new "tcp_connect" parameter.
112	root	1.42	- new format_date and parse_date functions.
113	root	1.45	- diagnose unexpected eof as such when the length is known.
114			- add 205 to the responses without body.
115	root	1.37
116	root	1.39	1.46 Mon Sep 6 08:29:34 CEST 2010
117	root	1.38	- some (broken) servers differentiate between empty search parts
118			and nonexistant search parts, work around this (problem
119			analyzed by Sergey Zasenko).
120			- possibly increase robustness by always setting an on_error
121	root	1.39	callback on the AnyEvent::Handle object (especially in case
122			of user errors, such as nehative timeouts).
123			- we now always follow 301/302/303 redirects and mutate POST to GET.
124			- we now always follow 307 redirects, even for POST.
125			- header-less responses are not parsed correctly (at a negative
126			speed penatly :).
127	root	1.38
128	root	1.37	1.45 Wed Jun 16 21:15:26 CEST 2010
129	root	1.38	- fix a bug where the handle would go away directly after a successful
130	root	1.37	connect (analyzed and patch by Maxim Dounin).
131			- due to popular demand, introduce the Redirect pseudo response header.
132			- document URL pseudo-header better.
133			- explain how to implement DNS caching.
134	root	1.30
135	root	1.35	1.44 Sat Dec 5 16:36:20 CET 2009
136			- do not generate content-length on get requests (if the body is empty),
137			as there are even more broken servers out there.
138	root	1.34	- allow set_proxy to clear the proxy again.
139			- set_proxy will now croak on invalid urls.
140	root	1.35	- support overriding the Host-header (requested by Tatsuhiko Miyagawa).
141	root	1.34
142	root	1.33	1.43 Fri Aug 14 17:02:02 CEST 2009
143			- provide on_prepare callback on common request.
144
145	root	1.31	1.42 Wed Aug 5 18:43:01 CEST 2009
146	root	1.61	- allow suppression of auto-supplied header fields by specifying undef
147	root	1.30	(requested by Mr Guest).
148			- allow proxy scheme to be missing, as documented
149			(reported by Mr Guest).
150			- do not follow redirects if we do not have a location header
151			(requested by Mr Guest).
152
153	root	1.29	1.41 Sat Jul 25 03:27:05 CEST 2009
154			- correctly parse completely headerless responses (e.g. by gatling).
155			(analysed by Robin Redeker).
156
157	root	1.28	1.4 Tue Jul 7 02:14:53 CEST 2009
158	root	1.25	- http_request would not instantly clear the connection slot on
159			tcp_connect failures, potentially leading to deadlocks.
160	root	1.28	- fix a bug where a connection error is wrongly reported
161			as EINPROGRESS.
162	root	1.26	- new parameters: on_header, on_body, want_body_handle.
163			- redirects will be followed when recurse is enabled whether or not
164			the body dowload was successful or not.
165	root	1.27	- include :port in Host header when given in the url (many sites break
166			when it's always there, and many break if it's missing...).
167	root	1.26	- pass the empty string, not undef, when there is no body but
168			no error occured.
169			- allow passing of tls_ctx, predefine two https security profiles.
170	root	1.25	- ucfirst all error messages generated internally.
171			- include "U" token in User-Agent.
172	root	1.27	- document $AnyEvent::HTTP::MAX_PER_HOST.
173			- allow empty field names in response headers (microsoft hits. microsoft
174			hits. microsoft hits. you die).
175	root	1.25
176	root	1.24	1.12 Thu Jun 11 14:45:18 CEST 2009
177	root	1.23	- $scheme wasn't optional in the proxy specification (reported by
178			Felix Antonius Wilhelm Ostmann).
179
180	root	1.22	1.11 Fri Nov 21 09:18:11 CET 2008
181			- work around a perl core bug not properly refcounting function arguments,
182			causing "200 OK" with random body results (reported by Дмитрий Шалашов).
183
184	root	1.21	1.1 Thu Oct 30 04:46:27 CET 2008
185	root	1.18	- work around different behaviour of AnyEvent::Handle in TLS mode.
186	root	1.17	- cleanup cookie implementation, many examples and comments were
187			provided by Дмитрий Шалашов.
188			- document the return values of http_* functions better.
189	root	1.19	- separate multiple header values by "," not "\x00" (this does not
190			break correctly written users of the old API).
191			- improve Set-Cookie: parsing.
192			- add experimental https-over-http-proxy support.
193			- downgrade https-over-https proxy to https-over-http.
194			- ignore spurious CR characters in headers, they show up
195			in the weirdest of places.
196			- ucfirst the request headers, for a slightly less weird look.
197	root	1.20	- work around (some) memleaks in perl regarding qr.
198	root	1.17
199	root	1.16	1.05 Mon Sep 29 15:49:58 CEST 2008
200			- fix a regex when parsing cookie domains
201			(patch by Дмитрий Шалашов).
202
203	root	1.15	1.04 Thu Jul 24 08:00:46 CEST 2008
204	root	1.14	- parse reason-less http status responses.
205			- parse more forms of broken location headers.
206
207	root	1.13	1.03 Thu Jul 3 03:47:58 CEST 2008
208	root	1.10	- fix http_post, which was totally broken (patch by Pedro Melo).
209	root	1.13	- do not recurse on POST requests, as per HTTP/1.[01] (this might
210			change as the recommendation isn't followed by anybody else).
211			- implement preliminary support for 303/307 redirects.
212	root	1.10
213	root	1.9	1.02 Thu Jun 12 13:50:08 CEST 2008
214			- make the request URL available in the callback of http_request.
215	root	1.7	- export http_post, http_head.
216
217	root	1.6	1.01 Fri Jun 6 14:56:37 CEST 2008
218	elmex	1.5	- fixed prototypes for http_* functions
219
220	root	1.4	1.0 Thu Jun 5 20:41:43 CEST 2008
221	root	1.3	- original version, an AnyEvent::AIO clone.