Tags: alextech/zend-diactoros
Tags
### Added - Nothing. ### Changed - Nothing. ### Deprecated - Nothing. ### Removed - Nothing. ### Fixed - [zendframework#324](zendframework#324) fixes a reference to an undefined variable in the `ServerRequestFactory`, which made it impossible to fetch a specific header by name.
zend-diactoros 1.8.4
Added
-----
- Nothing.
Changed
-------
- This release modifies how `ServerRequestFactory` marshals the request URI. In
prior releases, we would attempt to inspect the `X-Rewrite-Url` and
`X-Original-Url` headers, using their values, if present. These headers are
issued by the ISAPI_Rewrite module for IIS (developed by HeliconTech).
However, we have no way of guaranteeing that the module is what issued the
headers, making it an unreliable source for discovering the URI. As such, we
have removed this feature in this release of Diactoros.
If you are developing a middleware application, you can mimic the
functionality via middleware as follows:
```php
use Psr\Http\Message\ResponseInterface;
use Psr\Http\Message\ServerRequestInterface;
use Psr\Http\Server\RequestHandlerInterface;
use Zend\Diactoros\Uri;
public function process(ServerRequestInterface $request, RequestHandlerInterface $handler) : ResponseInterface
{
$requestUri = null;
$httpXRewriteUrl = $request->getHeaderLine('X-Rewrite-Url');
if ($httpXRewriteUrl !== null) {
$requestUri = $httpXRewriteUrl;
}
$httpXOriginalUrl = $request->getHeaderLine('X-Original-Url');
if ($httpXOriginalUrl !== null) {
$requestUri = $httpXOriginalUrl;
}
if ($requestUri !== null) {
$request = $request->withUri(new Uri($requestUri));
}
return $handler->handle($request);
}
```
If you use middleware such as the above, make sure you also instruct your web
server to strip any incoming headers of the same name so that you can
guarantee they are issued by the ISAPI_Rewrite module.
Deprecated
----------
- Nothing.
Removed
-------
- Nothing.
Fixed
-----
- Nothing.
zend-diactoros 1.8.3 Added ----- - Nothing. Changed ------- - Nothing. Deprecated ---------- - Nothing. Removed ------- - Nothing. Fixed ----- - [zendframework#321](zendframework#321) updates the logic in `Uri::withPort()` to ensure that it checks that the value provided is either an integer or a string integer, as only those values may be cast to integer without data loss. - [zendframework#320](zendframework#320) adds checking within `Response` to ensure that the provided reason phrase is a string; an `InvalidArgumentException` is now raised if it is not. This change ensures the class adheres strictly to the PSR-7 specification. - [zendframework#319](zendframework#319) provides a fix to `Zend\Diactoros\Response` that ensures that the status code returned is _always_ an integer (and never a string containing an integer), thus ensuring it strictly adheres to the PSR-7 specification.
zend-diactoros 1.8.2 Added ----- - Nothing. Changed ------- - Nothing. Deprecated ---------- - Nothing. Removed ------- - Nothing. Fixed ----- - [zendframework#318](zendframework#318) fixes the logic for discovering whether an HTTPS scheme is in play to be case insensitive when comparing header and SAPI values, ensuring no false negative lookups occur. - [zendframework#314](zendframework#314) modifies error handling around opening a file resource within `Zend\Diactoros\Stream::setStream()` to no longer use the second argument to `set_error_handler()`, and instead check the error type in the handler itself; this fixes an issue when the handler is nested inside another error handler, which currently has buggy behavior within the PHP engine.
zend-diactoros 1.8.1 Added ----- - Nothing. Changed ------- - [zendframework#313](zendframework#313) changes the reason phrase associated with the status code 425 to "Too Early", corresponding to a new definition of the code as specified by the IANA. Deprecated ---------- - Nothing. Removed ------- - Nothing. Fixed ----- - [zendframework#312](zendframework#312) fixes how the `normalizeUploadedFiles()` utility function handles nested trees of uploaded files, ensuring it detects them properly.
zend-diactoros 1.8.0 Added ----- - [zendframework#307](zendframework#307) adds the following functions under the `Zend\Diactoros` namespace, each of which may be used to derive artifacts from SAPI supergloabls for the purposes of generating a `ServerRequest` instance: - `normalizeServer(array $server, callable $apacheRequestHeaderCallback = null) : array` (main purpose is to aggregate the `Authorization` header in the SAPI params when under Apache) - `marshalProtocolVersionFromSapi(array $server) : string` - `marshalMethodFromSapi(array $server) : string` - `marshalUriFromSapi(array $server, array $headers) : Uri` - `marshalHeadersFromSapi(array $server) : array` - `parseCookieHeader(string $header) : array` - `createUploadedFile(array $spec) : UploadedFile` (creates the instance from a normal `$_FILES` entry) - `normalizeUploadedFiles(array $files) : UploadedFileInterface[]` (traverses a potentially nested array of uploaded file instances and/or `$_FILES` entries, including those aggregated under mod_php, php-fpm, and php-cgi in order to create a flat array of `UploadedFileInterface` instances to use in a request) Changed ------- - Nothing. Deprecated ---------- - [zendframework#307](zendframework#307) deprecates `ServerRequestFactory::normalizeServer()`; the method is no longer used internally, and users should instead use `Zend\Diactoros\normalizeServer()`, to which it proxies. - [zendframework#307](zendframework#307) deprecates `ServerRequestFactory::marshalHeaders()`; the method is no longer used internally, and users should instead use `Zend\Diactoros\marshalHeadersFromSapi()`, to which it proxies. - [zendframework#307](zendframework#307) deprecates `ServerRequestFactory::marshalUriFromServer()`; the method is no longer used internally. Users should use `marshalUriFromSapi()` instead. - [zendframework#307](zendframework#307) deprecates `ServerRequestFactory::marshalRequestUri()`. the method is no longer used internally, and currently proxies to `marshalUriFromSapi()`, pulling the discovered path from the `Uri` instance returned by that function. Users should use `marshalUriFromSapi()` instead. - [zendframework#307](zendframework#307) deprecates `ServerRequestFactory::marshalHostAndPortFromHeaders()`; the method is no longer used internally, and currently proxies to `marshalUriFromSapi()`, pulling the discovered host and port from the `Uri` instance returned by that function. Users should use `marshalUriFromSapi()` instead. - [zendframework#307](zendframework#307) deprecates `ServerRequestFactory::getHeader()`; the method is no longer used internally. Users should copy and paste the functionality into their own applications if needed, or rely on headers from a fully-populated `Uri` instance instead. - [zendframework#307](zendframework#307) deprecates `ServerRequestFactory::stripQueryString()`; the method is no longer used internally, and users can mimic the functionality via the expression `$path = explode('?', $path, 2)[0];`. - [zendframework#307](zendframework#307) deprecates `ServerRequestFactory::normalizeFiles()`; the functionality is no longer used internally, and users can use `normalizeUploadedFiles()` as a replacement. - [zendframework#303](zendframework#303) deprecates `Zend\Diactoros\Response\EmitterInterface` and its various implementations. These are now provided via the [zendframework/zend-httphandlerrunner](https://docs.zendframework.com/zend-httphandlerrunner) package as 1:1 substitutions. - [zendframework#303](zendframework#303) deprecates the `Zend\Diactoros\Server` class. Users are directed to the `RequestHandlerRunner` class from the [zendframework/zend-httphandlerrunner](https://docs.zendframework.com/zend-httphandlerrunner) package as an alternative. Removed ------- - Nothing. Fixed ----- - Nothing.
zend-diactoros 1.7.2 Added ----- - Nothing. Changed ------- - Nothing. Deprecated ---------- - Nothing. Removed ------- - Nothing. Fixed ----- - [zendframework#301](zendframework#301) adds stricter comparisons within the `uri` class to ensure non-empty values are not treated as empty.
zend-diactoros 1.7.1 Added ----- - Nothing. Changed ------- - [zendframework#293](zendframework#293) updates `Uri::getHost()` to cast the value via `strtolower()` before returning it. While this represents a change, it is fixing a bug in our implementation: the PSR-7 specification for the method, which follows IETF RFC 3986 section 3.2.2, requires that the host name be normalized to lowercase. Deprecated ---------- - Nothing. Removed ------- - Nothing. Fixed ----- - [zendframework#290](zendframework#290) fixes `Stream::getSize()` such that it checks that the result of `fstat` was succesful before attempting to return its `size` member; in the case of an error, it now returns `null`.
zend-diactoros 1.7.0 Added ----- - [zendframework#285](zendframework#285) adds a new custom response type, `Zend\Diactoros\Response\XmlResponse`, for generating responses representing XML. Usage is the same as with the `HtmlResponse` or `TextResponse`; the response generated will have a `Content-Type: application/xml` header by default. - [zendframework#280](zendframework#280) adds the response status code/phrase pairing "103 Early Hints" to the `Response::$phrases` property. This is a new status proposed via [RFC 8297](https://datatracker.ietf.org/doc/rfc8297/). - [zendframework#279](zendframework#279) adds explicit support for PHP 7.2; previously, we'd allowed build failures, though none occured; we now require PHP 7.2 builds to pass. Changed ------- - Nothing. Deprecated ---------- - Nothing. Removed ------- - Nothing. Fixed ----- - Nothing.
zend-diactoros 1.6.1 Added ----- - Nothing. Changed ------- - [zendframework#273](zendframework#273) updates each of the SAPI emitter implementations to emit the status line after emitting other headers; this is done to ensure that the status line is not overridden by PHP. Deprecated ---------- - Nothing. Removed ------- - Nothing. Fixed ----- - [zendframework#273](zendframework#273) modifies how the `SapiEmitterTrait` calls `header()` to ensure that a response code is _always_ passed as the third argument; this is done to prevent PHP from silently overriding it.
PreviousNext