-
Notifications
You must be signed in to change notification settings - Fork 61
[WIP] Broaden HTTPS Check #201
base: master
Are you sure you want to change the base?
Conversation
Because: - It is common for end users to use ports other than 443 for HTTPS - Mature systems, like IBM i, like to uppercase values
Forgot to mention that this will resolve #194. |
All checks failed? Ouch. |
"common" – I do not think so; and if it were so, then something more must be change in the class and in some other components too. (e.g. zend-uri, zend-diactoros)
Sounds conclusive.
Right, see the results on Travis: https://travis-ci.org/zendframework/zend-view/jobs/611967352#L439-L447 |
@froschdesign I work with many enterprise agencies, and they have plenty of internal, and even some external applications that they use HTTPS on different ports for. They would be pretty offended to hear that isn't common... This is a deal breaker for them when they try to use Apigility. I'm trying to find a decent way to handle the tests. Thanks for the input, and pointing me to the proper error in Travis. Edited to add a question |
@froschdesign and @jbh — The way we handle it in Diactoros (per the PSR-7 specification) is to omit the port when it corresponds to the default port for the scheme used. So, for HTTP, you omit The IETF says that you can use the port in all cases, but suggests that it should be omitted when it is the default, which is why we went that route for Diactoros. That's all that needs to happen here. |
This repository has been closed and moved to laminas/laminas-view; a new issue has been opened at laminas/laminas-view#1. |
This repository has been moved to laminas/laminas-view. If you feel that this patch is still relevant, please re-open against that repository, and reference this issue. To re-open, we suggest the following workflow:
|
Because:
Provide a narrative description of what you are trying to accomplish:
If you try building an API with HTTPS without using 443, the self links that are built and returned will be HTTP. If you try building an API on IBM i, even using 443, it will still send HTTP, because IBM i will uppercase
ON
andHTTPS
values for the SERVER properties.As stated above, the self links that are generated in API responses will be HTTP instead of HTTPS.
Self links will properly send HTTPS.
master
branch, and submit against that branch.This is difficult to accomplish, as the test I am doing runs on IBM i.
CHANGELOG.md
entry for the fix.TODO