DP-460 Upgrade to PHP 8.1 / Laravel 9

Resolve conflict with `db.schema` component. App code used `db.schema`
name for `DbSchemaExtensions` component. Starting from Laravel 9 this
name is used internally because of migration to string based accessor
for Schema facade laravel/framework@8059b39.
The cure is to use `df` prefix for app `db.schema` component.

Fix single quotes encode in error message. In PHP 8 default string
escape strategy changed to escape single quotes (') as well. This commit
adds explicit use of `ENT_COMPAT` flag.
See https://www.php.net/manual/en/function.htmlentities.php

Get rid of request dynamic properties retrieving.
`request->wrap` dynamic property was leading to full request params
reload including file uploads. Uploaded file was moved and not available
that caused an error. Instead we explicitly read query param by name.

Resolve deprecated required parameter after optional one.
See https://php.watch/versions/8.0/deprecate-required-param-after-optional

Fix db migration using SQLite. Connection config must hold `name`
property since Laravel 8.83.2. See laravel/framework@03e3a807.

Use 30 sec timeout for cURL requests. Misconfigured TCP logger was
leading to system hang up because of endless waiting for response.
Now requests will fail after 30 seconds of waiting.

We could switch to v2.0 of tymon/jwt-auth package when this issue got resolved:
tymondesigns/jwt-auth#2213

Other changes:
- Update dependencies
- Upgrade CORS middleware
- Fix unit tests

Author: daniilly

composer.json

@@ -30,12 +30,12 @@
   "minimum-stability": "dev",
   "prefer-stable": true,
   "require":     {
-    "php":                    ">=7.0.0",
-    "barryvdh/laravel-cors":  "~0.11.0",
-    "doctrine/dbal":          "~2.5.0",
-    "guzzlehttp/guzzle":      "~6.0",
-    "symfony/yaml":           "~2.8|~3.0",
-    "tymon/jwt-auth":         "~1.0.0"
+    "php":                    "^8.0",
+    "fruitcake/laravel-cors": "~3.0.0",
+    "doctrine/dbal":          "^3.1.4",
+    "guzzlehttp/guzzle":      "~7.4.5",
+    "symfony/yaml":           "^6.0",
+    "tymon/jwt-auth":         "dev-develop"
   },
   "require-dev": {
     "phpunit/phpunit": "@stable"

src/Components/DfResponse.php

@@ -22,4 +22,8 @@ protected function morphToJson($content)
 
         return json_encode($content, JSON_UNESCAPED_SLASHES);
     }
+
+    static function create($content = '', $status = 200, array $headers = []) {
+        return new DfResponse($content, $status, $headers);
+    }
 }

src/Components/ExceptionResponse.php

@@ -51,7 +51,7 @@ public static function exceptionToArray(\Exception $exception)
         }
 
         $errorInfo['code'] = ($exception->getCode()) ?: ServiceResponseInterface::HTTP_INTERNAL_SERVER_ERROR;
-        $errorInfo['message'] = htmlentities($exception->getMessage());
+        $errorInfo['message'] = htmlentities($exception->getMessage(), ENT_COMPAT);
 
         if (config('app.debug', false)) {
             $trace = $exception->getTraceAsString();
@@ -68,4 +68,4 @@ public static function exceptionToArray(\Exception $exception)
 
         return $errorInfo;
     }
-}
+}

src/Database/Schema/TableSchema.php

@@ -212,10 +212,9 @@ public function getColumns(bool $use_alias = false): array
 
         // re-index for alias usage, easier to find requested fields from client
         $columns = [];
-        $this->columns = null;
 
-        /** @var ColumnSchema $column */
         try {
+            /** @var ColumnSchema $column */
             foreach ($this->columns as $column) {
                 $columns[strtolower($column->getName(true))] = $column;
             }

src/Exceptions/DfException.php

@@ -64,7 +64,7 @@ public function toArray()
     {
         $errorInfo['code'] = $this->getCode();
         $errorInfo['context'] = $this->getContext();
-        $errorInfo['message'] = htmlentities($this->getMessage());
+        $errorInfo['message'] = htmlentities($this->getMessage(), ENT_COMPAT);
 
         if (config('app.debug', false)) {
             $trace = $this->getTraceAsString();

src/Facades/DbSchemaExtensions.php

@@ -16,6 +16,6 @@ class DbSchemaExtensions extends Facade
      */
     protected static function getFacadeAccessor()
     {
-        return 'db.schema';
+        return 'df.db.schema';
     }
 }

src/LaravelServiceProvider.php

@@ -87,7 +87,7 @@ protected function addAliases()
     {
         $this->app->alias('df.service', ServiceManager::class);
         $this->app->alias('df.system.table_model_map', SystemTableModelMapper::class);
-        $this->app->alias('db.schema', DbSchemaExtensions::class);
+        $this->app->alias('df.db.schema', DbSchemaExtensions::class);
 
         // DreamFactory Specific Facades...
         $loader = AliasLoader::getInstance();
@@ -162,7 +162,7 @@ protected function registerServices()
 
         // The database schema extension manager is used to resolve various database schema extensions.
         // It also implements the resolver interface which may be used by other components adding schema extensions.
-        $this->app->singleton('db.schema', function ($app) {
+        $this->app->singleton('df.db.schema', function ($app) {
             return new DbSchemaExtensions($app);
         });
     }
@@ -171,7 +171,8 @@ protected function registerExtensions()
     {
         // Add our database drivers.
         $this->app->resolving('db', function (DatabaseManager $db) {
-            $db->extend('sqlite', function ($config) {
+            $db->extend('sqlite', function ($config, $name) {
+                $config = Arr::add($config, 'name', $name);
                 $connector = new SQLiteConnector();
                 $connection = $connector->connect($config);
 

src/Providers/CorsServiceProvider.php

@@ -2,9 +2,8 @@
 
 namespace DreamFactory\Core\Providers;
 
-use Barryvdh\Cors\HandleCors;
-use Barryvdh\Cors\HandlePreflight;
-use Asm89\Stack\CorsService;
+use Fruitcake\Cors\HandleCors;
+use Fruitcake\Cors\CorsService;
 use DreamFactory\Core\Models\CorsConfig;
 use Illuminate\Database\QueryException;
 use Illuminate\Contracts\Http\Kernel;
@@ -38,14 +37,6 @@ public function boot(Request $request, Kernel $kernel)
     {
         $config = $this->getOptions($request);
         $this->app->singleton(CorsService::class, function () use ($config){
-
-            if (isset($config['allowedOrigins'])) {
-                foreach ($config['allowedOrigins'] as $origin) {
-                    if (strpos($origin, '*') !== false) {
-                        $config['allowedOriginsPatterns'][] = $this->convertWildcardToPattern($origin);
-                    }
-                }
-            }
             return new CorsService($config);
         });
 
@@ -60,30 +51,6 @@ public function boot(Request $request, Kernel $kernel)
         }
 
         Route::prependMiddlewareToGroup('df.api', 'df.cors');
-
-        if ($request->isMethod('OPTIONS')) {
-            /** @noinspection PhpUndefinedMethodInspection */
-            $kernel->prependMiddleware(HandlePreflight::class);
-        }
-    }
-
-    /**
-     * Create a pattern for a wildcard, based on Str::is() from Laravel
-     *
-     * @see https://github.com/laravel/framework/blob/5.5/src/Illuminate/Support/Str.php
-     * @param $pattern
-     * @return string
-     */
-    protected function convertWildcardToPattern($pattern)
-    {
-        $pattern = preg_quote($pattern, '#');
-
-        // Asterisks are translated into zero-or-more regular expression wildcards
-        // to make it convenient to check if the strings starts with the given
-        // pattern such as "library/*", making any string check convenient.
-        $pattern = str_replace('\*', '.*', $pattern);
-
-        return '#^'.$pattern.'\z#u';
     }
 
     /**

src/Testing/TestCase.php

@@ -37,7 +37,7 @@ class TestCase extends LaravelTestCase
     /**
      * Runs before every test class.
      */
-    public static function setupBeforeClass()
+    public static function setupBeforeClass(): void
     {
         echo "\n------------------------------------------------------------------------------\n";
         echo "Running test: " . get_called_class() . "\n";
@@ -114,7 +114,7 @@ public function stage()
      */
     public function createApplication()
     {
-        $app = require '/opt/dreamfactory/bootstrap/app.php';
+        $app = require './bootstrap/app.php';
 
         $app->make('Illuminate\Contracts\Console\Kernel')->bootstrap();
 

src/Utility/Curl.php

@@ -82,7 +82,7 @@ class Curl extends Verbs
      */
     public static function get($url, $payload = [], $curlOptions = [])
     {
-        return static::_httpRequest(static::GET, $url, $payload, $curlOptions);
+        return static::_httpRequest($url, static::GET, $payload, $curlOptions);
     }
 
     /**
@@ -94,7 +94,7 @@ public static function get($url, $payload = [], $curlOptions = [])
      */
     public static function put($url, $payload = [], $curlOptions = [])
     {
-        return static::_httpRequest(static::PUT, $url, $payload, $curlOptions);
+        return static::_httpRequest($url, static::PUT, $payload, $curlOptions);
     }
 
     /**
@@ -106,7 +106,7 @@ public static function put($url, $payload = [], $curlOptions = [])
      */
     public static function post($url, $payload = [], $curlOptions = [])
     {
-        return static::_httpRequest(static::POST, $url, $payload, $curlOptions);
+        return static::_httpRequest($url, static::POST, $payload, $curlOptions);
     }
 
     /**
@@ -118,7 +118,7 @@ public static function post($url, $payload = [], $curlOptions = [])
      */
     public static function delete($url, $payload = [], $curlOptions = [])
     {
-        return static::_httpRequest(static::DELETE, $url, $payload, $curlOptions);
+        return static::_httpRequest($url, static::DELETE, $payload, $curlOptions);
     }
 
     /**
@@ -130,7 +130,7 @@ public static function delete($url, $payload = [], $curlOptions = [])
      */
     public static function head($url, $payload = [], $curlOptions = [])
     {
-        return static::_httpRequest(static::HEAD, $url, $payload, $curlOptions);
+        return static::_httpRequest($url, static::HEAD, $payload, $curlOptions);
     }
 
     /**
@@ -142,7 +142,7 @@ public static function head($url, $payload = [], $curlOptions = [])
      */
     public static function options($url, $payload = [], $curlOptions = [])
     {
-        return static::_httpRequest(static::OPTIONS, $url, $payload, $curlOptions);
+        return static::_httpRequest($url, static::OPTIONS, $payload, $curlOptions);
     }
 
     /**
@@ -154,7 +154,7 @@ public static function options($url, $payload = [], $curlOptions = [])
      */
     public static function copy($url, $payload = [], $curlOptions = [])
     {
-        return static::_httpRequest(static::COPY, $url, $payload, $curlOptions);
+        return static::_httpRequest($url, static::COPY, $payload, $curlOptions);
     }
 
     /**
@@ -166,7 +166,7 @@ public static function copy($url, $payload = [], $curlOptions = [])
      */
     public static function patch($url, $payload = [], $curlOptions = [])
     {
-        return static::_httpRequest(static::PATCH, $url, $payload, $curlOptions);
+        return static::_httpRequest($url, static::PATCH, $payload, $curlOptions);
     }
 
     /**
@@ -179,7 +179,7 @@ public static function patch($url, $payload = [], $curlOptions = [])
      */
     public static function request($method, $url, $payload = [], $curlOptions = [])
     {
-        return static::_httpRequest($method, $url, $payload, $curlOptions);
+        return static::_httpRequest($url, $method, $payload, $curlOptions);
     }
 
     /**
@@ -191,7 +191,7 @@ public static function request($method, $url, $payload = [], $curlOptions = [])
      * @throws \InvalidArgumentException
      * @return bool|mixed|\stdClass
      */
-    protected static function _httpRequest($method = self::GET, $url, $payload = [], $curlOptions = [])
+    protected static function _httpRequest($url, $method = self::GET, $payload = [], $curlOptions = [])
     {
         if (!static::contains($method)) {
             throw new \InvalidArgumentException('Invalid method "' . $method . '" specified.');
@@ -209,6 +209,7 @@ protected static function _httpRequest($method = self::GET, $url, $payload = [],
             CURLOPT_HEADER         => true,
             CURLINFO_HEADER_OUT    => true,
             CURLOPT_SSL_VERIFYPEER => false,
+            CURLOPT_TIMEOUT => 30
         ];
 
         //	Merge in the global options if any