// Copyright 2015-2017 Parity Technologies (UK) Ltd. // This file is part of Parity. // Parity is free software: you can redistribute it and/or modify // it under the terms of the GNU General Public License as published by // the Free Software Foundation, either version 3 of the License, or // (at your option) any later version. // Parity is distributed in the hope that it will be useful, // but WITHOUT ANY WARRANTY; without even the implied warranty of // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the // GNU General Public License for more details. // You should have received a copy of the GNU General Public License // along with Parity. If not, see . use std::sync::Arc; use hyper; use ethcore_rpc::{Metadata, Origin}; use jsonrpc_core::{Middleware, MetaIoHandler}; use jsonrpc_http_server::{self as http, AccessControlAllowOrigin, HttpMetaExtractor}; use jsonrpc_http_server::tokio_core::reactor::Remote; use endpoint::{Endpoint, EndpointPath, Handler}; pub fn rpc>( handler: MetaIoHandler, remote: Remote, cors_domains: Vec, ) -> Box { Box::new(RpcEndpoint { handler: Arc::new(handler), remote: remote, meta_extractor: Arc::new(MetadataExtractor), cors_domain: Some(cors_domains), // NOTE [ToDr] We don't need to do any hosts validation here. It's already done in router. allowed_hosts: None, }) } struct RpcEndpoint> { handler: Arc>, remote: Remote, meta_extractor: Arc>, cors_domain: Option>, allowed_hosts: Option>, } impl> Endpoint for RpcEndpoint { fn to_async_handler(&self, _path: EndpointPath, control: hyper::Control) -> Box { Box::new(http::ServerHandler::new( http::Rpc { handler: self.handler.clone(), remote: self.remote.clone(), extractor: self.meta_extractor.clone(), }, self.cors_domain.clone(), self.allowed_hosts.clone(), Arc::new(NoopMiddleware), control, )) } } #[derive(Default)] struct NoopMiddleware; impl http::RequestMiddleware for NoopMiddleware { fn on_request(&self, request: &http::hyper::server::Request) -> http::RequestMiddlewareAction { http::RequestMiddlewareAction::Proceed { should_continue_on_invalid_cors: request.headers().get::().is_none(), } } } struct MetadataExtractor; impl HttpMetaExtractor for MetadataExtractor { fn read_metadata(&self, request: &http::hyper::server::Request) -> Metadata { let dapp_id = request.headers().get::() .map(|origin| format!("{}://{}", origin.scheme, origin.host)) .or_else(|| { // fallback to custom header, but only if origin is null request.headers().get_raw("origin") .and_then(|raw| raw.one()) .and_then(|raw| if raw == "null".as_bytes() { request.headers().get_raw("x-parity-origin") .and_then(|raw| raw.one()) .map(|raw| String::from_utf8_lossy(raw).into_owned()) } else { None }) }); Metadata { origin: Origin::Dapps(dapp_id.map(Into::into).unwrap_or_default()), } } }