4 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Zakaria El OrcheandClaude Sonnet 5	fa0a2d79b4	feat(core): add HTTP QUERY method support ... Adds the QUERY method (RFC 10008) — safe and idempotent like GET, but carries a request body like POST, useful for complex filters that don't fit in a URL query string. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>	2026-08-10 13:09:26 +00:00
Zakaria El OrcheandClaude Sonnet 5	1b48d14b4f	feat(core): ALPN configuration and TLS visibility on Request/WebSocketSession ... - TlsConfig.applicationProtocols(String...) sets the listener's negotiable ALPN protocol list via SSLParameters, inherited by every accepted socket like clientAuth — works on both keystore() and ofContext(), untouched unless called. Enables TLS-ALPN-01 (RFC 8737) style on-demand cert issuance: a custom KeyManager can read the already-resolved protocol via engine/socket getHandshakeApplicationProtocol() inside chooseEngineServerAlias/chooseServerAlias, since ALPN is resolved during ClientHello/ServerHello, always before Certificate production. - Request gains isSecure()/sslSession(), threaded through RequestParser from the accepted SSLSocket exactly like remoteAddress() — reference-only, zero per-request allocation. sslSession() defers to SSLSocket#getSession() lazily, so it's a cached-field read (handshake already completed by the time a handler can call it), never a forced handshake. - WebSocketSession.isSecure()/sslSession() delegate to the upgrading Request rather than tracking the socket a second time. - Documents TLS end-to-end in README.md (listeners, TlsConfig, SNI, ALPN, mTLS, Request/WebSocketSession accessors). Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>	2026-08-09 23:34:22 +00:00
Zakaria El OrcheandClaude Sonnet 5	9f6808e90c	feat(core): add TLS/mTLS support with multi-listener and SNI ... Flash can now serve HTTPS and WSS, on one or many listeners per app: - FlashConfiguration gains an optional `tls` field for the single default listener, and a `listeners` list for apps that bind multiple ports (each independently plain or TLS). - New dev.relism.flash.tls package: TlsConfig.keystore(path, password) builds an SSLContext from a PKCS12/JKS keystore, with SNI-based certificate selection for free when the keystore holds more than one alias (matched by SAN/CN, pure JDK APIs). TlsConfig.ofContext(sslContext) is a full escape hatch — Flash never calls setSSLParameters on that path, so caller-set protocols/cipher suites/ALPN survive untouched. TlsConfig.clientAuth(...) adds optional/required mTLS on either path. - HttpServer moves from a single ServerSocket to a list of bound listeners; the per-request hot path (RequestParser, routing, response writing) is untouched — TLS only changes which bytes come out of accept(), so WSS needs no separate code path from WS. - process()'s catch is widened to log non-IOException failures (e.g. a misbehaving custom KeyManager/TrustManager on the ofContext path) instead of swallowing them silently; the failure was already isolated to the one connection via the existing try-with-resources/executor-submission boundary — this only fixes the missing log line. - Fixes a pre-existing gap where FlashConfiguration#host was accepted but never used to bind (listeners always bound to the wildcard address). Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>	2026-08-09 21:41:57 +00:00
Zakaria El OrcheandClaude Sonnet 5	a037456634	feat(core): WS client-mode masking, zero-copy header iteration, shared I/O relay buffer ... - WebSocketSession supports client-mode outgoing frame masking (RFC 6455) via in-place XOR, reusing the unmask routine already used for inbound frames. - HeaderMap gains an allocation-free forEach(HeaderConsumer) for callers that must handle an open-ended set of header names (e.g. proxying). - HttpServer relays streaming/chunked response bodies through a shared per-connection ThreadLocal buffer instead of relying on InputStream#transferTo (which allocates internally) or a fresh byte[8192] per chunked write. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>	2026-08-09 20:24:56 +00:00