W3cubDocs

class ActionDispatch::Request

Parent:: Object
Included modules:: ActionDispatch::Http::Cache::Request, ActionDispatch::Http::MimeNegotiation, ActionDispatch::Http::Parameters, ActionDispatch::Http::FilterParameters, ActionDispatch::Http::URL, ActionDispatch::ContentSecurityPolicy::Request

Constants

ENV_METHODS
HTTP_METHODS
HTTP_METHOD_LOOKUP
LOCALHOST
RFC2518
RFC2616: List of HTTP request methods from the following RFCs: Hypertext Transfer Protocol – HTTP/1.1 (www.ietf.org/rfc/rfc2616.txt) HTTP Extensions for Distributed Authoring – WEBDAV (www.ietf.org/rfc/rfc2518.txt) Versioning Extensions to WebDAV (www.ietf.org/rfc/rfc3253.txt) Ordered Collections Protocol (WebDAV) (www.ietf.org/rfc/rfc3648.txt) Web Distributed Authoring and Versioning (WebDAV) Access Control Protocol (www.ietf.org/rfc/rfc3744.txt) Web Distributed Authoring and Versioning (WebDAV) SEARCH (www.ietf.org/rfc/rfc5323.txt) Calendar Extensions to WebDAV (www.ietf.org/rfc/rfc4791.txt) PATCH Method for HTTP (www.ietf.org/rfc/rfc5789.txt)
RFC3253
RFC3648
RFC3744
RFC4791
RFC5323
RFC5789

Public Class Methods

# File actionpack/lib/action_dispatch/http/request.rb, line 55
def self.empty
  new({})
end

new(env) Show source

# File actionpack/lib/action_dispatch/http/request.rb, line 59
def initialize(env)
  super
  @method            = nil
  @request_method    = nil
  @remote_ip         = nil
  @original_fullpath = nil
  @fullpath          = nil
  @ip                = nil
end

Calls superclass method ActionDispatch::Http::URL.new

Public Instance Methods

GET() Show source

# File actionpack/lib/action_dispatch/http/request.rb, line 366
def GET
  fetch_header("action_dispatch.request.query_parameters") do |k|
    rack_query_params = super || {}
    # Check for non UTF-8 parameter values, which would cause errors later
    Request::Utils.check_param_encoding(rack_query_params)
    set_header k, Request::Utils.normalize_encode_params(rack_query_params)
  end
rescue Rack::Utils::ParameterTypeError, Rack::Utils::InvalidParameterError => e
  raise ActionController::BadRequest.new("Invalid query parameters: #{e.message}")
end

Override Rack's #GET method to support indifferent access.

Calls superclass method

Also aliased as: query_parameters

POST() Show source

# File actionpack/lib/action_dispatch/http/request.rb, line 379
def POST
  fetch_header("action_dispatch.request.request_parameters") do
    pr = parse_formatted_parameters(params_parsers) do |params|
      super || {}
    end
    self.request_parameters = Request::Utils.normalize_encode_params(pr)
  end
rescue Http::Parameters::ParseError # one of the parse strategies blew up
  self.request_parameters = Request::Utils.normalize_encode_params(super || {})
  raise
rescue Rack::Utils::ParameterTypeError, Rack::Utils::InvalidParameterError => e
  raise ActionController::BadRequest.new("Invalid request parameters: #{e.message}")
end

Override Rack's #POST method to support indifferent access.

Calls superclass method

Also aliased as: request_parameters

authorization() Show source

# File actionpack/lib/action_dispatch/http/request.rb, line 396
def authorization
  get_header("HTTP_AUTHORIZATION")   ||
  get_header("X-HTTP_AUTHORIZATION") ||
  get_header("X_HTTP_AUTHORIZATION") ||
  get_header("REDIRECT_X_HTTP_AUTHORIZATION")
end

Returns the authorization header regardless of whether it was specified directly or through one of the proxy alternatives.

body() Show source

# File actionpack/lib/action_dispatch/http/request.rb, line 322
def body
  if raw_post = get_header("RAW_POST_DATA")
    raw_post = raw_post.dup.force_encoding(Encoding::BINARY)
    StringIO.new(raw_post)
  else
    body_stream
  end
end

The request body is an IO input stream. If the RAW_POST_DATA environment variable is already set, wrap it in a StringIO.

commit_flash() Show source

# File actionpack/lib/action_dispatch/http/request.rb, line 417
def commit_flash
end

content_length() Show source

# File actionpack/lib/action_dispatch/http/request.rb, line 259
def content_length
  super.to_i
end

Returns the content length of the request as an integer.

Calls superclass method

controller_class() Show source

# File actionpack/lib/action_dispatch/http/request.rb, line 78
def controller_class
  params = path_parameters
  params[:action] ||= "index"
  controller_class_for(params[:controller])
end

controller_class_for(name) Show source

# File actionpack/lib/action_dispatch/http/request.rb, line 84
def controller_class_for(name)
  if name
    controller_param = name.underscore
    const_name = "#{controller_param.camelize}Controller"
    ActiveSupport::Dependencies.constantize(const_name)
  else
    PASS_NOT_FOUND
  end
end

cookie_jar() Show source

# File actionpack/lib/action_dispatch/middleware/cookies.rb, line 11
def cookie_jar
  fetch_header("action_dispatch.cookies".freeze) do
    self.cookie_jar = Cookies::CookieJar.build(self, cookies)
  end
end

form_data?() Show source

# File actionpack/lib/action_dispatch/http/request.rb, line 339
def form_data?
  FORM_DATA_MEDIA_TYPES.include?(media_type)
end

Determine whether the request body contains form-data by checking the request Content-Type for one of the media-types: “application/x-www-form-urlencoded” or “multipart/form-data”. The list of form-data media types can be modified through the FORM_DATA_MEDIA_TYPES array.

A request body is not assumed to contain form-data when no Content-Type header is provided and the #request_method is #POST.

fullpath() Show source

# File actionpack/lib/action_dispatch/http/request.rb, line 238
def fullpath
  @fullpath ||= super
end

Returns the String full path including params of the last URL requested.

# get "/articles"
request.fullpath # => "/articles"

# get "/articles?page=2"
request.fullpath # => "/articles?page=2"

Calls superclass method

headers() Show source

# File actionpack/lib/action_dispatch/http/request.rb, line 199
def headers
  @headers ||= Http::Headers.new(self)
end

Provides access to the request's HTTP headers, for example:

request.headers["Content-Type"] # => "text/plain"

http_auth_salt() Show source

# File actionpack/lib/action_dispatch/http/request.rb, line 168
def http_auth_salt
  get_header "action_dispatch.http_auth_salt"
end

ip() Show source

# File actionpack/lib/action_dispatch/http/request.rb, line 272
def ip
  @ip ||= super
end

Returns the IP address of client as a String.

Calls superclass method

key?(key) Show source

# File actionpack/lib/action_dispatch/http/request.rb, line 97
def key?(key)
  has_header? key
end

Returns true if the request has a header matching the given key parameter.

request.key? :ip_spoofing_check # => true

local?() Show source

# File actionpack/lib/action_dispatch/http/request.rb, line 404
def local?
  LOCALHOST =~ remote_addr && LOCALHOST =~ remote_ip
end

True if the request came from localhost, 127.0.0.1, or ::1.

logger() Show source

# File actionpack/lib/action_dispatch/http/request.rb, line 413
def logger
  get_header("action_dispatch.logger".freeze)
end

media_type() Show source

# File actionpack/lib/action_dispatch/http/request.rb, line 254
def media_type
  content_mime_type.to_s
end

The String MIME type of the request.

# get "/articles"
request.media_type # => "application/x-www-form-urlencoded"

method() Show source

# File actionpack/lib/action_dispatch/http/request.rb, line 187
def method
  @method ||= check_method(get_header("rack.methodoverride.original_method") || get_header("REQUEST_METHOD"))
end

Returns the original value of the environment's REQUEST_METHOD, even if it was overridden by middleware. See request_method for more information.

method_symbol() Show source

# File actionpack/lib/action_dispatch/http/request.rb, line 192
def method_symbol
  HTTP_METHOD_LOOKUP[method]
end

Returns a symbol form of the method.

original_fullpath() Show source

# File actionpack/lib/action_dispatch/http/request.rb, line 227
def original_fullpath
  @original_fullpath ||= (get_header("ORIGINAL_FULLPATH") || fullpath)
end

Returns a String with the last requested path including their params.

# get '/foo'
request.original_fullpath # => '/foo'

# get '/foo?bar'
request.original_fullpath # => '/foo?bar'

original_url() Show source

# File actionpack/lib/action_dispatch/http/request.rb, line 246
def original_url
  base_url + original_fullpath
end

Returns the original request URL as a String.

# get "/articles?page=2"
request.original_url # => "http://www.example.com/articles?page=2"

query_parameters()

Alias for: GET

raw_post() Show source

# File actionpack/lib/action_dispatch/http/request.rb, line 311
def raw_post
  unless has_header? "RAW_POST_DATA"
    raw_post_body = body
    set_header("RAW_POST_DATA", raw_post_body.read(content_length))
    raw_post_body.rewind if raw_post_body.respond_to?(:rewind)
  end
  get_header "RAW_POST_DATA"
end

Read the request body. This is useful for web services that need to work with raw requests directly.

remote_ip() Show source

# File actionpack/lib/action_dispatch/http/request.rb, line 278
def remote_ip
  @remote_ip ||= (get_header("action_dispatch.remote_ip") || ip).to_s
end

Returns the IP address of client as a String, usually set by the RemoteIp middleware.

remote_ip=(remote_ip) Show source

# File actionpack/lib/action_dispatch/http/request.rb, line 282
def remote_ip=(remote_ip)
  set_header "action_dispatch.remote_ip".freeze, remote_ip
end

request_id() Show source

# File actionpack/lib/action_dispatch/http/request.rb, line 294
def request_id
  get_header ACTION_DISPATCH_REQUEST_ID
end

Returns the unique request id, which is based on either the X-Request-Id header that can be generated by a firewall, load balancer, or web server or by the RequestId middleware (which sets the action_dispatch.request_id environment variable).

This unique ID is useful for tracing a request from end-to-end as part of logging or debugging. This relies on the Rack variable set by the ActionDispatch::RequestId middleware.

Also aliased as: uuid

request_method() Show source

# File actionpack/lib/action_dispatch/http/request.rb, line 134
def request_method
  @request_method ||= check_method(super)
end

Returns the HTTP method that the application should see. In the case where the method was overridden by a middleware (for instance, if a HEAD request was converted to a #GET, or if a _method parameter was used to determine the method the application should use), this method returns the overridden value, not the original.

Calls superclass method

request_method_symbol() Show source

# File actionpack/lib/action_dispatch/http/request.rb, line 180
def request_method_symbol
  HTTP_METHOD_LOOKUP[request_method]
end

Returns a symbol form of the request_method.

request_parameters()

Alias for: POST

request_parameters=(params) Show source

# File actionpack/lib/action_dispatch/http/request.rb, line 408
def request_parameters=(params)
  raise if params.nil?
  set_header("action_dispatch.request.request_parameters".freeze, params)
end

reset_session() Show source

# File actionpack/lib/action_dispatch/http/request.rb, line 349
def reset_session
  if session && session.respond_to?(:destroy)
    session.destroy
  else
    self.session = {}
  end
end

TODO This should be broken apart into AD::Request::Session and probably be included by the session middleware.

send_early_hints(links) Show source

# File actionpack/lib/action_dispatch/http/request.rb, line 214
def send_early_hints(links)
  return unless env["rack.early_hints"]

  env["rack.early_hints"].call(links)
end

Early Hints is an HTTP/2 status code that indicates hints to help a client start making preparations for processing the final response.

If the env contains rack.early_hints then the server accepts HTTP2 push for Link headers.

The send_early_hints method accepts a hash of links as follows:

send_early_hints("Link" => "</style.css>; rel=preload; as=style\n</script.js>; rel=preload")

If you are using javascript_include_tag or stylesheet_link_tag the Early Hints headers are included by default if supported.

server_software() Show source

# File actionpack/lib/action_dispatch/http/request.rb, line 305
def server_software
  (get_header("SERVER_SOFTWARE") && /^([a-zA-Z]+)/ =~ get_header("SERVER_SOFTWARE")) ? $1.downcase : nil
end

Returns the lowercase name of the HTTP server software.

session_options=(options) Show source

# File actionpack/lib/action_dispatch/http/request.rb, line 361
def session_options=(options)
  Session::Options.set self, options
end

ssl?() Show source

# File actionpack/lib/action_dispatch/http/request.rb, line 420
def ssl?
  super || scheme == "wss".freeze
end

Calls superclass method

uuid()

Alias for: request_id

xhr?()

Alias for: xml_http_request?

xml_http_request?() Show source

# File actionpack/lib/action_dispatch/http/request.rb, line 266
def xml_http_request?
  get_header("HTTP_X_REQUESTED_WITH") =~ /XMLHttpRequest/i
end

Returns true if the “X-Requested-With” header contains “XMLHttpRequest” (case-insensitive), which may need to be manually added depending on the choice of JavaScript libraries and frameworks.

Also aliased as: xhr?