ws.cpp

Go to the documentation of this file.

 
#include "server/ws/ws.h"
 
#include "string/encoding.h"
#include "string/format.h"
#include "string/string_utils.h"
 
#include <algorithm>
#include <openssl/sha.h>
 
namespace CppServer {
namespace WS {
 
void WebSocket::InitWSNonce()
{
    std::generate(_ws_nonce.begin(), _ws_nonce.end(), []() { return (uint8_t)std::rand(); });
}
 
bool WebSocket::PerformClientUpgrade(const HTTP::HTTPResponse& response, const CppCommon::UUID& id)
{
    if (response.status() != 101)
        return false;
 
    bool error = false;
    bool accept = false;
    bool connection = false;
    bool upgrade = false;
 
    // Validate WebSocket handshake headers
    for (size_t i = 0; i < response.headers(); ++i)
    {
        auto header = response.header(i);
        auto key = std::get<0>(header);
        auto value = std::get<1>(header);
 
        if (CppCommon::StringUtils::CompareNoCase(key, "Connection"))
        {
            if (!CppCommon::StringUtils::CompareNoCase(value, "Upgrade"))
            {
                error = true;
                onWSError("Invalid WebSocket handshaked response: 'Connection' header value must be 'Upgrade'");
                break;
            }
 
            connection = true;
        }
        else if (CppCommon::StringUtils::CompareNoCase(key, "Upgrade"))
        {
            if (!CppCommon::StringUtils::CompareNoCase(value, "websocket"))
            {
                error = true;
                onWSError("Invalid WebSocket handshaked response: 'Upgrade' header value must be 'websocket'");
                break;
            }
 
            upgrade = true;
        }
        else if (CppCommon::StringUtils::CompareNoCase(key, "Sec-WebSocket-Accept"))
        {
            // Calculate the original WebSocket hash
            std::string wskey = CppCommon::Encoding::Base64Encode(ws_nonce()) + "258EAFA5-E914-47DA-95CA-C5AB0DC85B11";
            char wshash[SHA_DIGEST_LENGTH];
            SHA1((const unsigned char*)wskey.data(), wskey.size(), (unsigned char*)wshash);
 
            // Get the received WebSocket hash
            wskey = CppCommon::Encoding::Base64Decode(value);
 
            // Compare original and received hashes
            if (std::strncmp(wskey.data(), wshash, std::min(wskey.size(), sizeof(wshash))) != 0)
            {
                error = true;
                onWSError("Invalid WebSocket handshaked response: 'Sec-WebSocket-Accept' value validation failed");
                break;
            }
 
            accept = true;
        }
    }
 
    // Failed to perform WebSocket handshake
    if (!accept || !connection || !upgrade)
    {
        if (!error)
            onWSError("Invalid WebSocket response");
        return false;
    }
 
    // WebSocket successfully handshaked!
    _ws_handshaked = true;
    *((uint32_t*)_ws_send_mask) = rand();
    onWSConnected(response);
 
    return true;
}
 
bool WebSocket::PerformServerUpgrade(const HTTP::HTTPRequest& request, HTTP::HTTPResponse& response)
{
    if (request.method() != "GET")
        return false;
 
    bool error = false;
    bool connection = false;
    bool upgrade = false;
    bool ws_key = false;
    bool ws_version = false;
 
    std::string accept;
 
    // Validate WebSocket handshake headers
    for (size_t i = 0; i < request.headers(); ++i)
    {
        auto header = request.header(i);
        auto key = std::get<0>(header);
        auto value = std::get<1>(header);
 
        if (CppCommon::StringUtils::CompareNoCase(key, "Connection"))
        {
            if (!CppCommon::StringUtils::CompareNoCase(value, "Upgrade") && !CppCommon::StringUtils::CompareNoCase(CppCommon::StringUtils::RemoveBlank(value), "keep-alive,Upgrade"))
            {
                error = true;
                response.MakeErrorResponse(400, "Invalid WebSocket handshaked request: 'Connection' header value must be 'Upgrade' or 'keep-alive, Upgrade'");
                break;
            }
 
            connection = true;
        }
        else if (CppCommon::StringUtils::CompareNoCase(key, "Upgrade"))
        {
            if (!CppCommon::StringUtils::CompareNoCase(value, "websocket"))
            {
                error = true;
                response.MakeErrorResponse(400, "Invalid WebSocket handshaked request: 'Upgrade' header value must be 'websocket'");
                break;
            }
 
            upgrade = true;
        }
        else if (CppCommon::StringUtils::CompareNoCase(key, "Sec-WebSocket-Key"))
        {
            if (value.empty())
            {
                error = true;
                response.MakeErrorResponse(400, "Invalid WebSocket handshaked request: 'Sec-WebSocket-Key' header value must be non empty");
                break;
            }
 
            // Calculate WebSocket accept value
            std::string wskey = std::string(value) + "258EAFA5-E914-47DA-95CA-C5AB0DC85B11";
            char wshash[SHA_DIGEST_LENGTH];
            SHA1((const unsigned char*)wskey.data(), wskey.size(), (unsigned char*)wshash);
 
            accept = CppCommon::Encoding::Base64Encode(std::string(wshash, sizeof(wshash)));
 
            ws_key = true;
        }
        else if (CppCommon::StringUtils::CompareNoCase(key, "Sec-WebSocket-Version"))
        {
            if (!CppCommon::StringUtils::CompareNoCase(value, "13"))
            {
                error = true;
                response.MakeErrorResponse(400, "Invalid WebSocket handshaked request: 'Sec-WebSocket-Version' header value must be '13'");
                break;
            }
 
            ws_version = true;
        }
    }
 
    // Filter out non WebSocket handshake requests
    if (!connection && !upgrade && !ws_key && !ws_version)
        return false;
 
    // Failed to perform WebSocket handshake
    if (!connection || !upgrade || !ws_key || !ws_version)
    {
        if (!error)
            response.MakeErrorResponse(400, "Invalid WebSocket response");
        SendResponse(response);
        return false;
    }
 
    // Prepare WebSocket upgrade success response
    response.Clear();
    response.SetBegin(101, "HTTP/1.1");
    response.SetHeader("Connection", "Upgrade");
    response.SetHeader("Upgrade", "websocket");
    response.SetHeader("Sec-WebSocket-Accept", accept);
    response.SetBody();
 
    // Validate WebSocket upgrade request and response
    if (!onWSConnecting(request, response))
        return false;
 
    // Send WebSocket upgrade response
    SendResponse(response);
 
    // WebSocket successfully handshaked!
    _ws_handshaked = true;
    *((uint32_t*)_ws_send_mask) = 0;
    onWSConnected(request);
 
    return true;
}
 
void WebSocket::PrepareSendFrame(uint8_t opcode, bool mask, const void* buffer, size_t size, int status)
{
    // Check if we need to store additional 2 bytes of close status frame
    bool store_status = ((opcode & WS_CLOSE) == WS_CLOSE) && ((size > 0) || (status != 0));
    if (store_status)
        size += 2;
 
    // Clear the previous WebSocket send buffer
    _ws_send_buffer.clear();
 
    // Append WebSocket frame opcode
    _ws_send_buffer.push_back(opcode);
 
    // Append WebSocket frame size
    if (size <= 125)
        _ws_send_buffer.push_back((size & 0xFF) | (mask ? 0x80 : 0));
    else if (size <= 65535)
    {
        _ws_send_buffer.push_back(126 | (mask ? 0x80 : 0));
        _ws_send_buffer.push_back((size >> 8) & 0xFF);
        _ws_send_buffer.push_back(size & 0xFF);
    }
    else
    {
        _ws_send_buffer.push_back(127 | (mask ? 0x80 : 0));
        for (int i = 7; i >= 0; --i)
            _ws_send_buffer.push_back((size >> (8 * i)) & 0xFF);
    }
 
    if (mask)
    {
        // Append WebSocket frame mask
        _ws_send_buffer.push_back(_ws_send_mask[0]);
        _ws_send_buffer.push_back(_ws_send_mask[1]);
        _ws_send_buffer.push_back(_ws_send_mask[2]);
        _ws_send_buffer.push_back(_ws_send_mask[3]);
    }
 
    // Resize WebSocket frame buffer
    size_t offset = _ws_send_buffer.size();
    _ws_send_buffer.resize(offset + size);
 
    size_t index = 0;
    const uint8_t* data = (const uint8_t*)buffer;
 
    // Append WebSocket close status
    // RFC 6455: If there is a body, the first two bytes of the body MUST
    // be a 2-byte unsigned integer (in network byte order) representing
    // a status code with value code.
    if (store_status)
    {
        index += 2;
        _ws_send_buffer[offset + 0] = ((status >> 8) & 0xFF) ^ _ws_send_mask[0];
        _ws_send_buffer[offset + 1] = (status & 0xFF) ^ _ws_send_mask[1];
    }
 
    // Mask WebSocket frame content
    for (size_t i = index; i < size; ++i)
        _ws_send_buffer[offset + i] = data[i - index] ^ _ws_send_mask[i % 4];
}
 
void WebSocket::PrepareReceiveFrame(const void* buffer, size_t size)
{
    const uint8_t* data = (const uint8_t*)buffer;
 
    // Clear received data after WebSocket frame was processed
    if (_ws_frame_received)
    {
        _ws_frame_received = false;
        _ws_header_size = 0;
        _ws_payload_size = 0;
        _ws_receive_frame_buffer.clear();
        *((uint32_t*)_ws_receive_mask) = 0;
    }
    if (_ws_final_received)
    {
        _ws_final_received = false;
        _ws_receive_final_buffer.clear();
    }
 
    while (size > 0)
    {
        // Clear received data after WebSocket frame was processed
        if (_ws_frame_received)
        {
            _ws_frame_received = false;
            _ws_header_size = 0;
            _ws_payload_size = 0;
            _ws_receive_frame_buffer.clear();
            *((uint32_t*)_ws_receive_mask) = 0;
        }
        if (_ws_final_received)
        {
            _ws_final_received = false;
            _ws_receive_final_buffer.clear();
        }
 
        // Prepare WebSocket frame opcode and mask flag
        if (_ws_receive_frame_buffer.size() < 2)
        {
            for (size_t i = 0; i < 2; ++i, ++data, --size)
            {
                if (size == 0)
                    return;
                _ws_receive_frame_buffer.push_back(*data);
            }
        }
 
        uint8_t opcode = _ws_receive_frame_buffer[0] & 0x0F;
        bool fin = ((_ws_receive_frame_buffer[0] >> 7) & 0x01) != 0;
        bool mask = ((_ws_receive_frame_buffer[1] >> 7) & 0x01) != 0;
        size_t payload = _ws_receive_frame_buffer[1] & (~0x80);
 
        // Prepare WebSocket opcode
        _ws_opcode = (opcode != 0) ? opcode : _ws_opcode;
 
        // Prepare WebSocket frame size
        if (payload <= 125)
        {
            _ws_header_size = 2 + (mask ? 4 : 0);
            _ws_payload_size = payload;
            _ws_receive_frame_buffer.reserve(_ws_header_size + _ws_payload_size);
            _ws_receive_final_buffer.reserve(_ws_header_size + _ws_payload_size);
        }
        else if (payload == 126)
        {
            if (_ws_receive_frame_buffer.size() < 4)
            {
                for (size_t i = 0; i < 2; ++i, ++data, --size)
                {
                    if (size == 0)
                        return;
                    _ws_receive_frame_buffer.push_back(*data);
                }
            }
 
            payload = (((size_t)_ws_receive_frame_buffer[2] << 8) | ((size_t)_ws_receive_frame_buffer[3] << 0));
            _ws_header_size = 4 + (mask ? 4 : 0);
            _ws_payload_size = payload;
            _ws_receive_frame_buffer.reserve(_ws_header_size + _ws_payload_size);
            _ws_receive_final_buffer.reserve(_ws_header_size + _ws_payload_size);
        }
        else if (payload == 127)
        {
            if (_ws_receive_frame_buffer.size() < 10)
            {
                for (size_t i = 0; i < 8; ++i, ++data, --size)
                {
                    if (size == 0)
                        return;
                    _ws_receive_frame_buffer.push_back(*data);
                }
            }
 
            payload = (((size_t)_ws_receive_frame_buffer[2] << 56) | ((size_t)_ws_receive_frame_buffer[3] << 48) | ((size_t)_ws_receive_frame_buffer[4] << 40) | ((size_t)_ws_receive_frame_buffer[5] << 32) | ((size_t)_ws_receive_frame_buffer[6] << 24) | ((size_t)_ws_receive_frame_buffer[7] << 16) | ((size_t)_ws_receive_frame_buffer[8] << 8) | ((size_t)_ws_receive_frame_buffer[9] << 0));
            _ws_header_size = 10 + (mask ? 4 : 0);
            _ws_payload_size = payload;
            _ws_receive_frame_buffer.reserve(_ws_header_size + _ws_payload_size);
            _ws_receive_final_buffer.reserve(_ws_header_size + _ws_payload_size);
        }
 
        // Prepare WebSocket frame mask
        if (mask)
        {
            if (_ws_receive_frame_buffer.size() < _ws_header_size)
            {
                for (size_t i = 0; i < 4; ++i, ++data, --size)
                {
                    if (size == 0)
                        return;
                    _ws_receive_frame_buffer.push_back(*data);
                    _ws_receive_mask[i] = *data;
                }
            }
        }
 
        size_t total = _ws_header_size + _ws_payload_size;
        size_t length = std::min(total - _ws_receive_frame_buffer.size(), size);
 
        // Prepare WebSocket frame payload
        _ws_receive_frame_buffer.insert(_ws_receive_frame_buffer.end(), data, data + length);
        data += length;
        size -= length;
 
        // Process WebSocket frame
        if (_ws_receive_frame_buffer.size() == total)
        {
            // Unmask WebSocket frame content
            if (mask)
            {
                for (size_t i = 0; i < _ws_payload_size; ++i)
                    _ws_receive_final_buffer.push_back(_ws_receive_frame_buffer[_ws_header_size + i] ^ _ws_receive_mask[i % 4]);
            }
            else
                _ws_receive_final_buffer.insert(_ws_receive_final_buffer.end(), _ws_receive_frame_buffer.begin() + _ws_header_size, _ws_receive_frame_buffer.end());
 
            _ws_frame_received = true;
 
            // Finalize WebSocket frame
            if (fin)
            {
                _ws_final_received = true;
 
                switch (_ws_opcode)
                {
                    case WS_PING:
                    {
                        // Call the WebSocket ping handler
                        onWSPing(_ws_receive_final_buffer.data(), _ws_receive_final_buffer.size());
                        break;
                    }
                    case WS_PONG:
                    {
                        // Call the WebSocket pong handler
                        onWSPong(_ws_receive_final_buffer.data(), _ws_receive_final_buffer.size());
                        break;
                    }
                    case WS_CLOSE:
                    {
                        size_t sindex = 0;
                        int status = 1000;
 
                        // Read WebSocket close status
                        if (_ws_receive_final_buffer.size() >= 2)
                        {
                            sindex += 2;
                            status = ((_ws_receive_final_buffer[0] << 8) | (_ws_receive_final_buffer[1] << 0));
                        }
 
                        // Call the WebSocket close handler
                        onWSClose(_ws_receive_final_buffer.data() + sindex, _ws_receive_final_buffer.size() - sindex, status);
                        break;
                    }
                    case WS_BINARY:
                    case WS_TEXT:
                    {
                        // Call the WebSocket received handler
                        onWSReceived(_ws_receive_final_buffer.data(), _ws_receive_final_buffer.size());
                        break;
                    }
                }
            }
        }
    }
}
 
size_t WebSocket::RequiredReceiveFrameSize()
{
    if (_ws_frame_received)
        return 0;
 
    // Required WebSocket frame opcode and mask flag
    if (_ws_receive_frame_buffer.size() < 2)
        return 2 - _ws_receive_frame_buffer.size();
 
    bool mask = ((_ws_receive_frame_buffer[1] >> 7) & 0x01) != 0;
    size_t payload = _ws_receive_frame_buffer[1] & (~0x80);
 
    // Required WebSocket frame size
    if ((payload == 126) && (_ws_receive_frame_buffer.size() < 4))
        return 4 - _ws_receive_frame_buffer.size();
    if ((payload == 127) && (_ws_receive_frame_buffer.size() < 10))
        return 10 - _ws_receive_frame_buffer.size();
 
    // Required WebSocket frame mask
    if ((mask) && (_ws_receive_frame_buffer.size() < _ws_header_size))
        return _ws_header_size - _ws_receive_frame_buffer.size();
 
    // Required WebSocket frame payload
    return _ws_header_size + _ws_payload_size - _ws_receive_frame_buffer.size();
}
 
void WebSocket::ClearWSBuffers()
{
    _ws_frame_received = false;
    _ws_final_received = false;
    _ws_header_size = 0;
    _ws_payload_size = 0;
    _ws_receive_frame_buffer.clear();
    _ws_receive_final_buffer.clear();
    *((uint32_t*)_ws_receive_mask) = 0;
 
    std::scoped_lock locker(_ws_send_lock);
 
    _ws_send_buffer.clear();
    *((uint32_t*)_ws_send_mask) = 0;
}
 
} // namespace WS
} // namespace CppServer