With this change we move `XhrFactory` to the root entrypoint of `@angular/commmon`, this is needed so that we can configure `XhrFactory` DI token at a platform level, and not add a dependency between `@angular/platform-browser` and `@angular/common/http`. Currently, when using `HttpClientModule` in a child module on the server, `ReferenceError: XMLHttpRequest is not defined` is being thrown because the child module has its own Injector and causes `XhrFactory` provider to be configured to use `BrowserXhr`. Therefore, we should configure the `XhrFactory` at a platform level similar to other Browser specific providers. BREAKING CHANGE: `XhrFactory` has been moved from `@angular/common/http` to `@angular/common`. **Before** ```ts import {XhrFactory} from '@angular/common/http'; ``` **After** ```ts import {XhrFactory} from '@angular/common'; ``` Closes #41311 PR Close #41313
187 lines
5.7 KiB
TypeScript
187 lines
5.7 KiB
TypeScript
/**
|
|
* @license
|
|
* Copyright Google LLC All Rights Reserved.
|
|
*
|
|
* Use of this source code is governed by an MIT-style license that can be
|
|
* found in the LICENSE file at https://angular.io/license
|
|
*/
|
|
|
|
import {Injectable, Injector, ModuleWithProviders, NgModule} from '@angular/core';
|
|
import {Observable} from 'rxjs';
|
|
|
|
import {HttpBackend, HttpHandler} from './backend';
|
|
import {HttpClient} from './client';
|
|
import {HTTP_INTERCEPTORS, HttpInterceptor, HttpInterceptorHandler, NoopInterceptor} from './interceptor';
|
|
import {JsonpCallbackContext, JsonpClientBackend, JsonpInterceptor} from './jsonp';
|
|
import {HttpRequest} from './request';
|
|
import {HttpEvent} from './response';
|
|
import {HttpXhrBackend} from './xhr';
|
|
import {HttpXsrfCookieExtractor, HttpXsrfInterceptor, HttpXsrfTokenExtractor, XSRF_COOKIE_NAME, XSRF_HEADER_NAME} from './xsrf';
|
|
|
|
/**
|
|
* An injectable `HttpHandler` that applies multiple interceptors
|
|
* to a request before passing it to the given `HttpBackend`.
|
|
*
|
|
* The interceptors are loaded lazily from the injector, to allow
|
|
* interceptors to themselves inject classes depending indirectly
|
|
* on `HttpInterceptingHandler` itself.
|
|
* @see `HttpInterceptor`
|
|
*/
|
|
@Injectable()
|
|
export class HttpInterceptingHandler implements HttpHandler {
|
|
private chain: HttpHandler|null = null;
|
|
|
|
constructor(private backend: HttpBackend, private injector: Injector) {}
|
|
|
|
handle(req: HttpRequest<any>): Observable<HttpEvent<any>> {
|
|
if (this.chain === null) {
|
|
const interceptors = this.injector.get(HTTP_INTERCEPTORS, []);
|
|
this.chain = interceptors.reduceRight(
|
|
(next, interceptor) => new HttpInterceptorHandler(next, interceptor), this.backend);
|
|
}
|
|
return this.chain.handle(req);
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Constructs an `HttpHandler` that applies interceptors
|
|
* to a request before passing it to the given `HttpBackend`.
|
|
*
|
|
* Use as a factory function within `HttpClientModule`.
|
|
*
|
|
*
|
|
*/
|
|
export function interceptingHandler(
|
|
backend: HttpBackend, interceptors: HttpInterceptor[]|null = []): HttpHandler {
|
|
if (!interceptors) {
|
|
return backend;
|
|
}
|
|
return interceptors.reduceRight(
|
|
(next, interceptor) => new HttpInterceptorHandler(next, interceptor), backend);
|
|
}
|
|
|
|
/**
|
|
* Factory function that determines where to store JSONP callbacks.
|
|
*
|
|
* Ordinarily JSONP callbacks are stored on the `window` object, but this may not exist
|
|
* in test environments. In that case, callbacks are stored on an anonymous object instead.
|
|
*
|
|
*
|
|
*/
|
|
export function jsonpCallbackContext(): Object {
|
|
if (typeof window === 'object') {
|
|
return window;
|
|
}
|
|
return {};
|
|
}
|
|
|
|
/**
|
|
* Configures XSRF protection support for outgoing requests.
|
|
*
|
|
* For a server that supports a cookie-based XSRF protection system,
|
|
* use directly to configure XSRF protection with the correct
|
|
* cookie and header names.
|
|
*
|
|
* If no names are supplied, the default cookie name is `XSRF-TOKEN`
|
|
* and the default header name is `X-XSRF-TOKEN`.
|
|
*
|
|
* @publicApi
|
|
*/
|
|
@NgModule({
|
|
providers: [
|
|
HttpXsrfInterceptor,
|
|
{provide: HTTP_INTERCEPTORS, useExisting: HttpXsrfInterceptor, multi: true},
|
|
{provide: HttpXsrfTokenExtractor, useClass: HttpXsrfCookieExtractor},
|
|
{provide: XSRF_COOKIE_NAME, useValue: 'XSRF-TOKEN'},
|
|
{provide: XSRF_HEADER_NAME, useValue: 'X-XSRF-TOKEN'},
|
|
],
|
|
})
|
|
export class HttpClientXsrfModule {
|
|
/**
|
|
* Disable the default XSRF protection.
|
|
*/
|
|
static disable(): ModuleWithProviders<HttpClientXsrfModule> {
|
|
return {
|
|
ngModule: HttpClientXsrfModule,
|
|
providers: [
|
|
{provide: HttpXsrfInterceptor, useClass: NoopInterceptor},
|
|
],
|
|
};
|
|
}
|
|
|
|
/**
|
|
* Configure XSRF protection.
|
|
* @param options An object that can specify either or both
|
|
* cookie name or header name.
|
|
* - Cookie name default is `XSRF-TOKEN`.
|
|
* - Header name default is `X-XSRF-TOKEN`.
|
|
*
|
|
*/
|
|
static withOptions(options: {
|
|
cookieName?: string,
|
|
headerName?: string,
|
|
} = {}): ModuleWithProviders<HttpClientXsrfModule> {
|
|
return {
|
|
ngModule: HttpClientXsrfModule,
|
|
providers: [
|
|
options.cookieName ? {provide: XSRF_COOKIE_NAME, useValue: options.cookieName} : [],
|
|
options.headerName ? {provide: XSRF_HEADER_NAME, useValue: options.headerName} : [],
|
|
],
|
|
};
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Configures the [dependency injector](guide/glossary#injector) for `HttpClient`
|
|
* with supporting services for XSRF. Automatically imported by `HttpClientModule`.
|
|
*
|
|
* You can add interceptors to the chain behind `HttpClient` by binding them to the
|
|
* multiprovider for built-in [DI token](guide/glossary#di-token) `HTTP_INTERCEPTORS`.
|
|
*
|
|
* @publicApi
|
|
*/
|
|
@NgModule({
|
|
/**
|
|
* Optional configuration for XSRF protection.
|
|
*/
|
|
imports: [
|
|
HttpClientXsrfModule.withOptions({
|
|
cookieName: 'XSRF-TOKEN',
|
|
headerName: 'X-XSRF-TOKEN',
|
|
}),
|
|
],
|
|
/**
|
|
* Configures the [dependency injector](guide/glossary#injector) where it is imported
|
|
* with supporting services for HTTP communications.
|
|
*/
|
|
providers: [
|
|
HttpClient,
|
|
{provide: HttpHandler, useClass: HttpInterceptingHandler},
|
|
HttpXhrBackend,
|
|
{provide: HttpBackend, useExisting: HttpXhrBackend},
|
|
],
|
|
})
|
|
export class HttpClientModule {
|
|
}
|
|
|
|
/**
|
|
* Configures the [dependency injector](guide/glossary#injector) for `HttpClient`
|
|
* with supporting services for JSONP.
|
|
* Without this module, Jsonp requests reach the backend
|
|
* with method JSONP, where they are rejected.
|
|
*
|
|
* You can add interceptors to the chain behind `HttpClient` by binding them to the
|
|
* multiprovider for built-in [DI token](guide/glossary#di-token) `HTTP_INTERCEPTORS`.
|
|
*
|
|
* @publicApi
|
|
*/
|
|
@NgModule({
|
|
providers: [
|
|
JsonpClientBackend,
|
|
{provide: JsonpCallbackContext, useFactory: jsonpCallbackContext},
|
|
{provide: HTTP_INTERCEPTORS, useClass: JsonpInterceptor, multi: true},
|
|
],
|
|
})
|
|
export class HttpClientJsonpModule {
|
|
}
|