Two questions about THttpApiServer

Flashcqxg · 2024-07-20 08:59:57

The code is as follows:

fHttpServer := THttpApiServer.Create('');

fHttpServer.RegisterCompress(CompressGZip, 10);
fHttpServer.RegisterCompress(CompressDeflate, 10);

fHttpServer. AddUrl('', '8888', False, '127.0.0.1');
// fHttpServer. AddUrl('', '8888', False, '*');
//fHttpServer.AddUrl('', '8888', False, '+');

1. Whether I use * or+, the following three methods cannot be accessed:
http://127.0.0.1:8888
http://localhost:8888
http://192.168.1.9:8888 (Local intranet IP address)

2. After using Register Compress, use Ctxt.SetOutFile send a static file to the browser,but that has not been compressed.

Thank you.

ab · 2024-07-20 19:22:58

Did you register the URL at http.sys level?

Flashcqxg · 2024-07-20 22:48:23

How to register the URL as http.sys level? the code fHttpServer.add can't be registered?

Flashcqxg · 2024-07-21 08:57:23

The first problem has been solved. The second issue has not been resolved, as the output static HTML file is not compressed.

Flashcqxg · 2024-07-22 03:38:39

The static files is not compressed in the DoOnRequest:

function TGEApiServer.DoOnRequest(C: THttpServerRequestAbstract): cardinal;
var
sFile: string;
begin

var sUrl := UrlDecode(C.URL);
sFile := ExtractFilePath(ParamStr(0)) + 'dist\' + sUrl;
if FileExists(sFile) then
begin
Result := C.SetOutFile(sFile, False);
end
else if FileExists(sFile + '\index.html') then
begin
// eg: http://17.0.0.1 = http://127.0.0.1/index.html
sFile := sFile + '\index.html';
Result := C.SetOutFile(sFile, False);
end
else if sUrl = '/login' then
begin
Result := C.SetOutFile('.\dist\index.html', False);
end
else
begin
Result := 200;
end;
end;

ab · 2024-07-22 06:19:13

Compression of files is not supported by the Windows API.
It can either return from memory or a file handle (see THttpChunkType).

So if you want compression, use SetOutContent(StringFromFile()).
Or even better, SetOutContent() with a cached value.

Flashcqxg · 2024-07-22 10:08:18

I am using SetOutContent(StringFromFile())，but it cannot output web pages properly.

ab · 2024-07-22 12:54:45

Please refine what "it cannot output web pages properly" means.

Flashcqxg · 2024-07-22 12:58:51

What I mean is: I put some static files such as HTML, JS, CSS in the www directory and use THttpApiServer as a static web server. Currently, using SetOutContent (StringFromFile()) cannot achieve the goal.

ab · 2024-07-22 14:13:04

Did you debug and see what is wrong?

How did you add the URI?
It sounds like if you don't understand what a http.sys domain is, and that you need to authorize the URI with admin rights at least once on the computer.

Flashcqxg · 2024-07-22 14:15:23

I just delphi the static files the DoOnRequest:

function TGEApiServer.DoOnRequest(C: THttpServerRequestAbstract): cardinal;
var
sFile: string;
begin

var sUrl := UrlDecode(C.URL);
sFile := ExtractFilePath(ParamStr(0)) + 'dist\' + sUrl;
if FileExists(sFile) then
begin
Result := C.SetOutFile(sFile, False);
end
else if FileExists(sFile + '\index.html') then
begin
// eg: http://17.0.0.1 = http://127.0.0.1/index.html
sFile := sFile + '\index.html';
Result := C.SetOutFile(sFile, False);
end
else if sUrl = '/login' then
begin
Result := C.SetOutFile('.\dist\index.html', False);
end
else
begin
Result := 200;
end;
end;

ab · 2024-07-22 16:04:31

1) your code is unsafe because you can access any file on your system using ..\ patterns in the URI.

2) debug a little and see if it goes inside the method

3) http.sys needs to register the URI once with admin rights

Flashcqxg · 2024-07-22 23:30:15

Hi,
ab,What should safe code look like?and how to register the URI use code?
Oh, Mormot is so powerful, but its reference manual and demo are so few, making it difficult for beginners of Delphi to quickly get started.
Thanks for your help.

mORMot Open Source

#1 2024-07-20 08:59:57

Two questions about THttpApiServer

#2 2024-07-20 19:22:58

Re: Two questions about THttpApiServer

#3 2024-07-20 22:48:23

Re: Two questions about THttpApiServer

#4 2024-07-21 08:57:23

Re: Two questions about THttpApiServer

#5 2024-07-22 03:38:39

Re: Two questions about THttpApiServer

#6 2024-07-22 06:19:13

Re: Two questions about THttpApiServer

#7 2024-07-22 10:08:18

Re: Two questions about THttpApiServer

#8 2024-07-22 12:54:45

Re: Two questions about THttpApiServer

#9 2024-07-22 12:58:51

Re: Two questions about THttpApiServer

#10 2024-07-22 14:13:04

Re: Two questions about THttpApiServer

#11 2024-07-22 14:15:23

Re: Two questions about THttpApiServer

#12 2024-07-22 16:04:31

Re: Two questions about THttpApiServer

#13 2024-07-22 23:30:15

Re: Two questions about THttpApiServer

Board footer