git.iko.soy/typeable/servant
on master help sign in
386 files changed+28205−5328
since splitsnapshots
unifiedsplit
.github/FUNDING.yml+12 .github/run-ghcjs-tests.sh+14 .github/workflows/master.yml+147 .gitignore+11−3 .stylish-haskell.yaml+118−5 .travis.yml−29 CONTRIBUTING.md+34−5 HLint.hs−6 README.md+54−23 cabal.ghcjs.project+14 cabal.project+46 changelog.d/1432+9 changelog.d/1469+11 changelog.d/1477+9 changelog.d/1529+10 changelog.d/1556+81 changelog.d/1569+13 changelog.d/1580+12 changelog.d/1589+2 changelog.d/1595+2 changelog.d/config+2 changelog.d/servant-docs-curl+16 default.nix+38 doc/Makefile+12−206 doc/README.md+8 doc/building-the-docs−8 doc/conf.py+53−176 doc/cookbook/basic-auth/BasicAuth.lhs+179 doc/cookbook/basic-auth/basic-auth.cabal+29 doc/cookbook/basic-streaming/Streaming.lhs+129 doc/cookbook/basic-streaming/basic-streaming.cabal+28 doc/cookbook/cabal.project+22 doc/cookbook/cabal.project.local doc/cookbook/curl-mock/CurlMock.lhs+205 doc/cookbook/curl-mock/curl-mock.cabal+29 doc/cookbook/custom-errors/CustomErrors.lhs+189 doc/cookbook/custom-errors/custom-errors.cabal+25 doc/cookbook/db-mysql-basics/MysqlBasics.lhs+236 doc/cookbook/db-mysql-basics/mysql-basics.cabal+40 doc/cookbook/db-postgres-pool/PostgresPool.lhs+143 doc/cookbook/db-postgres-pool/db-postgres-pool.cabal+32 doc/cookbook/db-sqlite-simple/DBConnection.lhs+100 doc/cookbook/db-sqlite-simple/db-sqlite-simple.cabal+30 doc/cookbook/file-upload/FileUpload.lhs+140 doc/cookbook/file-upload/file-upload.cabal+30 doc/cookbook/generic/Generic.lhs+141 doc/cookbook/generic/generic.cabal+25 doc/cookbook/hoist-server-with-context/HoistServerWithContext.lhs+413 doc/cookbook/hoist-server-with-context/hoist-server-with-context.cabal+37 doc/cookbook/https/Https.lhs+62 doc/cookbook/https/https.cabal+24 doc/cookbook/index.rst+39 doc/cookbook/jwt-and-basic-auth/JWTAndBasicAuth.lhs+252 doc/cookbook/jwt-and-basic-auth/jwt-and-basic-auth.cabal+36 doc/cookbook/open-id-connect/OpenIdConnect.cabal+45 doc/cookbook/open-id-connect/OpenIdConnect.lhs+472 doc/cookbook/pagination/Pagination.lhs+250 doc/cookbook/pagination/pagination.cabal+23 doc/cookbook/sentry/Sentry.lhs+116 doc/cookbook/sentry/sentry.cabal+24 doc/cookbook/structuring-apis/StructuringApis.lhs+205 doc/cookbook/structuring-apis/structuring-apis.cabal+23 doc/cookbook/testing/Testing.lhs+506 doc/cookbook/testing/testing.cabal+38 doc/cookbook/using-custom-monad/UsingCustomMonad.lhs+120 doc/cookbook/using-custom-monad/using-custom-monad.cabal+28 doc/cookbook/using-free-client/UsingFreeClient.lhs+192 doc/cookbook/using-free-client/using-free-client.cabal+26 doc/cookbook/uverb/UVerb.lhs+223 doc/cookbook/uverb/uverb.cabal+35 doc/examples.md+41−18 doc/index.rst+12−9 doc/links.rst+3−3 doc/introduction.rst → doc/principles.rst+3−3 doc/requirements.txt+3−25 doc/tutorial/ApiType.lhs+50−4 doc/tutorial/Authentication.lhs+42−32 doc/tutorial/Client.lhs+108−7 doc/tutorial/Docs.lhs+71−29 doc/tutorial/Javascript.lhs+3−4 doc/tutorial/Server.lhs+119−66 doc/tutorial/index.rst+3−3 doc/tutorial/install.rst+68 doc/tutorial/test/Spec.hs+11−1 doc/tutorial/tinc.yaml−13 doc/tutorial/tutorial.cabal+60−36 ghcjs.nix+22 hlint.yaml+65 nix/README.md+41 nix/nixpkgs.json+4 nix/nixpkgs.nix+4 nix/shell.nix+20 scripts/README.md−8 scripts/bump-versions.sh−62 scripts/ci-cron.sh−20 scripts/clear-sandbox.sh−26 scripts/generate-nix-files.sh−48 scripts/lib/common.sh−56 scripts/start-sandbox.sh−26 scripts/test-all.sh−46 scripts/test-stack.sh−11 scripts/upload.hs−14 servant-auth/README.md+1 servant-auth/servant-auth-client/.ghci+1 servant-auth/servant-auth-client/CHANGELOG.md+26 servant-auth/servant-auth-client/LICENSE+31 servant-auth/servant-auth-client/Setup.hs+2 servant-auth/servant-auth-client/servant-auth-client.cabal+80 servant-auth/servant-auth-client/src/Servant/Auth/Client.hs+3 servant-auth/servant-auth-client/src/Servant/Auth/Client/Internal.hs+64 servant-auth/servant-auth-client/test/Servant/Auth/ClientSpec.hs+161 servant-auth/servant-auth-client/test/Spec.hs+1 servant-auth/servant-auth-docs/.ghci+1 servant-auth/servant-auth-docs/CHANGELOG.md+14 servant-auth/servant-auth-docs/LICENSE+31 servant/Setup.lhs → servant-auth/servant-auth-docs/Setup.hs+5−3 servant-auth/servant-auth-docs/servant-auth-docs.cabal+84 servant-auth/servant-auth-docs/src/Servant/Auth/Docs.hs+96 servant-auth/servant-auth-docs/test/Spec.hs+1 servant-auth/servant-auth-docs/test/doctests.hs+12 servant-auth/servant-auth-server/.ghci+1 servant-auth/servant-auth-server/CHANGELOG.md+130 servant-auth/servant-auth-server/LICENSE+31 servant-auth/servant-auth-server/README.lhs+291 servant-auth/servant-auth-server/README.md+1 servant-auth/servant-auth-server/Setup.hs+2 servant-auth/servant-auth-server/servant-auth-server.cabal+134 servant-auth/servant-auth-server/src/Servant/Auth/Server.hs+180 servant-auth/servant-auth-server/src/Servant/Auth/Server/Internal.hs+70 servant-auth/servant-auth-server/src/Servant/Auth/Server/Internal/AddSetCookie.hs+106 servant-auth/servant-auth-server/src/Servant/Auth/Server/Internal/BasicAuth.hs+59 servant-auth/servant-auth-server/src/Servant/Auth/Server/Internal/Class.hs+72 servant-auth/servant-auth-server/src/Servant/Auth/Server/Internal/ConfigTypes.hs+127 servant-auth/servant-auth-server/src/Servant/Auth/Server/Internal/Cookie.hs+182 servant-auth/servant-auth-server/src/Servant/Auth/Server/Internal/FormLogin.hs+3 servant-auth/servant-auth-server/src/Servant/Auth/Server/Internal/JWT.hs+72 servant-auth/servant-auth-server/src/Servant/Auth/Server/Internal/ThrowAll.hs+58 servant-auth/servant-auth-server/src/Servant/Auth/Server/Internal/Types.hs+112 servant-auth/servant-auth-server/src/Servant/Auth/Server/SetCookieOrphan.hs+3 servant-auth/servant-auth-server/test/Servant/Auth/ServerSpec.hs+607 servant-auth/servant-auth-server/test/Spec.hs+1 servant-auth/servant-auth-swagger/.ghci+1 servant-auth/servant-auth-swagger/CHANGELOG.md+24 servant-auth/servant-auth-swagger/LICENSE+31 servant-auth/servant-auth-swagger/Setup.hs+2 servant-auth/servant-auth-swagger/servant-auth-swagger.cabal+70 servant-auth/servant-auth-swagger/src/Servant/Auth/Swagger.hs+87 servant-auth/servant-auth-swagger/test/Servant/Auth/SwaggerSpec.hs+38 servant-auth/servant-auth-swagger/test/Spec.hs+1 servant-auth/servant-auth/.ghci+1 servant-auth/servant-auth/CHANGELOG.md+20 servant-auth/servant-auth/LICENSE+31 servant-auth/servant-auth/Setup.hs+2 servant-auth/servant-auth/servant-auth.cabal+47 servant-auth/servant-auth/src/Servant/Auth.hs+54 servant-auth/servant-auth/src/Servant/Auth/JWT.hs+40 servant-auth/servant-auth/test/Spec.hs+1 servant-client-core/CHANGELOG.md+308 servant-client-core/LICENSE+30 servant-client-core/README.md+30 servant-client-core/Setup.hs+2 servant-client-core/servant-client-core.cabal+111 servant-client-core/src/Servant/Client/Core.hs+73 servant-client/src/Servant/Client/Experimental/Auth.hs → servant-client-core/src/Servant/Client/Core/Auth.hs+15−14 servant-client-core/src/Servant/Client/Core/BaseUrl.hs+144 servant-client-core/src/Servant/Client/Core/BasicAuth.hs+23 servant-client-core/src/Servant/Client/Core/ClientError.hs+86 servant-client-core/src/Servant/Client/Core/HasClient.hs+993 servant-client-core/src/Servant/Client/Core/Internal.hs+12 servant-client-core/src/Servant/Client/Core/Reexport.hs+36 servant-client-core/src/Servant/Client/Core/Request.hs+193 servant-client-core/src/Servant/Client/Core/Response.hs+53 servant-client-core/src/Servant/Client/Core/RunClient.hs+55 servant-client-core/src/Servant/Client/Free.hs+18 servant-client-core/src/Servant/Client/Generic.hs+48 servant-client/test/Servant/Common/BaseUrlSpec.hs → servant-client-core/test/Servant/Client/Core/Internal/BaseUrlSpec.hs+3−5 servant-client-core/test/Servant/Client/Core/RequestSpec.hs+31 servant-client-core/test/Spec.hs+1 servant-client-ghcjs/CHANGELOG.md+3 servant-client-ghcjs/LICENSE+30 servant-client-ghcjs/README.md+175 servant-client-ghcjs/Setup.hs+2 servant-client-ghcjs/servant-client-ghcjs.cabal+64 servant-client-ghcjs/src/Servant/Client/Ghcjs.hs+14 servant-client-ghcjs/src/Servant/Client/Internal/XhrClient.hs+360 servant-client/CHANGELOG.md+309 servant-client/LICENSE+1−1 servant-client/README.lhs+1 servant-client/README.md+24−3 servant-client/include/overlapping-compat.h−8 servant-client/servant-client.cabal+100−59 servant-client/src/Servant/Client.hs+9−489 servant-client/src/Servant/Client/Generic.hs−164 servant-client/src/Servant/Client/Internal/HttpClient.hs+302 servant-client/src/Servant/Client/Internal/HttpClient/Streaming.hs+191 servant-client/src/Servant/Client/Streaming.hs+19 servant-client/src/Servant/Common/BaseUrl.hs−77 servant-client/src/Servant/Common/BasicAuth.hs−21 servant-client/src/Servant/Common/Req.hs−285 servant-client/test/Servant/BasicAuthSpec.hs+53 servant-client/test/Servant/BrokenSpec.hs+71 servant-client/test/Servant/ClientSpec.hs−493 servant-client/test/Servant/ClientTestUtils.hs+384 servant-client/test/Servant/ConnectionErrorSpec.hs+55 servant-client/test/Servant/FailSpec.hs+79 servant-client/test/Servant/GenAuthSpec.hs+54 servant-client/test/Servant/GenericSpec.hs+37 servant-client/test/Servant/HoistClientSpec.hs+58 servant-client/test/Servant/StreamSpec.hs+183 servant-client/test/Servant/SuccessSpec.hs+208 servant-client/test/Servant/WrappedApiSpec.hs+63 servant-client/tinc.yaml−5 servant-conduit/CHANGELOG.md+4 servant-conduit/LICENSE+30 servant-conduit/README.md+3 servant-conduit/Setup.hs+2 servant-conduit/example/Main.hs+103 servant-conduit/servant-conduit.cabal+62 servant-conduit/src/Servant/Conduit.hs+72 servant-docs/CHANGELOG.md+120 servant-docs/LICENSE+1−1 servant-docs/README.md+44−11 servant-docs/example/greet.hs+13−12 servant-docs/example/greet.md+55−27 servant-docs/golden/comprehensive.md+592 servant-docs/include/overlapping-compat.h−8 servant-docs/servant-docs.cabal+54−34 servant-docs/src/Servant/Docs.hs+7−3 servant-docs/src/Servant/Docs/Internal.hs+416−108 servant-docs/src/Servant/Docs/Internal/Pretty.hs+29−6 servant-docs/test/Servant/DocsSpec.hs+103−26 servant-docs/test/Spec.hs+8−1 servant-docs/tinc.yaml−3 servant-foreign/CHANGELOG.md+127 servant-foreign/LICENSE+1−1 servant-foreign/Setup.hs+1−1 servant-foreign/include/overlapping-compat.h−8 servant-foreign/servant-foreign.cabal+45−49 servant-foreign/src/Servant/Foreign.hs+26−21 servant-foreign/src/Servant/Foreign/Inflections.hs+26−17 servant-foreign/src/Servant/Foreign/Internal.hs+240−82 servant-foreign/test/Servant/ForeignSpec.hs+32−12 servant-foreign/tinc.yaml−3 servant-http-streams/CHANGELOG.md+98 servant-http-streams/LICENSE+30 servant-http-streams/README.lhs+1 servant-http-streams/README.md+44 servant-http-streams/Setup.hs+2 servant-http-streams/servant-http-streams.cabal+132 servant-http-streams/src/Servant/HttpStreams.hs+19 servant-http-streams/src/Servant/HttpStreams/Internal.hs+258 servant-http-streams/test/Servant/ClientSpec.hs+504 servant-http-streams/test/Servant/StreamSpec.hs+110 servant-http-streams/test/Spec.hs+1 servant-machines/CHANGELOG.md+4 servant-machines/LICENSE+30 servant-machines/README.md+3 servant-machines/Setup.hs+2 servant-machines/example/Main.hs+98 servant-machines/servant-machines.cabal+59 servant-machines/src/Servant/Machines.hs+46 servant-pipes/CHANGELOG.md+22 servant-pipes/LICENSE+30 servant-pipes/README.md+3 servant-pipes/Setup.hs+2 servant-pipes/example/Main.hs+107 servant-pipes/servant-pipes.cabal+63 servant-pipes/src/Servant/Pipes.hs+75 servant-server/CHANGELOG.md+268 servant-server/LICENSE+1−1 servant-server/README.md+1−1 servant-server/Setup.hs+2 servant-server/example/README.md+1−1 servant-server/example/greet.hs+19−3 servant-server/include/overlapping-compat.h−8 servant-server/servant-server.cabal+89−85 servant-server/src/Servant.hs+6−5 servant-server/src/Servant/Server.hs+100−56 servant-server/src/Servant/Server/Experimental/Auth.hs+28−25 servant-server/src/Servant/Server/Generic.hs+92 servant-server/src/Servant/Server/Internal.hs+539−171 servant-server/src/Servant/Server/Internal/BasicAuth.hs+23−16 servant-server/src/Servant/Server/Internal/Context.hs+27−15 servant-server/src/Servant/Server/Internal/Delayed.hs+272 servant-server/src/Servant/Server/Internal/DelayedIO.hs+71 servant-server/src/Servant/Server/Internal/ErrorFormatter.hs+87 servant-server/src/Servant/Server/Internal/Handler.hs+30−18 servant-server/src/Servant/Server/Internal/RouteResult.hs+76 servant-server/src/Servant/Server/Internal/Router.hs+75−43 servant-server/src/Servant/Server/Internal/RoutingApplication.hs+7−373 servant-server/src/Servant/Server/Internal/ServantErr.hs → servant-server/src/Servant/Server/Internal/ServerError.hs+84−79 servant-server/src/Servant/Server/StaticFiles.hs+83 servant-server/src/Servant/Server/UVerb.hs+116 servant-server/src/Servant/Utils/StaticFiles.hs+4−84 servant-server/test/Servant/ArbitraryMonadServerSpec.hs+13−10 servant/test/Servant/Utils/EnterSpec.hs → servant-server/test/Servant/HoistSpec.hs+16−9 servant-server/test/Servant/Server/ErrorSpec.hs+78−9 servant-server/test/Servant/Server/Internal/ContextSpec.hs+9−6 servant-server/test/Servant/Server/Internal/RoutingApplicationSpec.hs+34−25 servant-server/test/Servant/Server/RouterSpec.hs+179−26 servant-server/test/Servant/Utils/StaticFilesSpec.hs → servant-server/test/Servant/Server/StaticFilesSpec.hs+25−16 servant-server/test/Servant/Server/StreamingSpec.hs+8−7 servant-server/test/Servant/Server/UsingContextSpec.hs+4−3 servant-server/test/Servant/Server/UsingContextSpec/TestCombinators.hs+17−9 servant-server/test/Servant/ServerSpec.hs+355−174 servant-server/test/doctests.hs−25 servant-server/tinc.yaml−3 servant-swagger/CHANGELOG.md+143 servant-swagger/LICENSE+28 servant-swagger/README.md+46 servant-server/Setup.lhs → servant-swagger/Setup.hs+5−3 servant-swagger/example/LICENSE+28 servant-swagger/example/example.cabal+62 servant-swagger/example/server/Main.hs+11 servant-swagger/example/src/Todo.hs+73 servant-swagger/example/swagger.json+158 servant-swagger/example/test/Spec.hs+1 servant-swagger/example/test/TodoSpec.hs+28 servant-swagger/servant-swagger.cabal+127 servant-swagger/src/Servant/Swagger.hs+188 servant-swagger/src/Servant/Swagger/Internal.hs+488 servant-swagger/src/Servant/Swagger/Internal/Orphans.hs+27 servant-swagger/src/Servant/Swagger/Internal/Test.hs+207 servant-swagger/src/Servant/Swagger/Internal/TypeLevel.hs+9 servant-swagger/src/Servant/Swagger/Internal/TypeLevel/API.hs+86 servant-swagger/src/Servant/Swagger/Internal/TypeLevel/Every.hs+63 servant-swagger/src/Servant/Swagger/Internal/TypeLevel/TMap.hs+37 servant-swagger/src/Servant/Swagger/Test.hs+13 servant-swagger/src/Servant/Swagger/TypeLevel.hs+15 servant-swagger/test/Servant/SwaggerSpec.hs+489 servant-swagger/test/Spec.hs+1 servant-swagger/test/doctests.hs+12 servant/CHANGELOG.md+840 servant/LICENSE+1−1 servant/Setup.hs+2 servant/include/overlapping-compat.h−8 servant/servant.cabal+101−83 servant/src/Servant/API.hs+96−50 servant/src/Servant/API/Alternative.hs+26−4 servant/src/Servant/API/BasicAuth.hs+9−6 servant/src/Servant/API/Capture.hs+10−6 servant/src/Servant/API/ContentTypes.hs+39−37 servant/src/Servant/API/Description.hs+82 servant/src/Servant/API/Empty.hs+2−1 servant/src/Servant/API/Experimental/Auth.hs+5−4 servant/src/Servant/API/Fragment.hs+25 servant/src/Servant/API/Generic.hs+146 servant/src/Servant/API/Header.hs+13−10 servant/src/Servant/API/HttpVersion.hs+2−1 servant/src/Servant/API/Internal/Test/ComprehensiveAPI.hs−44 servant/src/Servant/API/IsSecure.hs+4−2 servant/src/Servant/API/Modifiers.hs+152 servant/src/Servant/API/NamedRoutes.hs+10 servant/src/Servant/API/QueryParam.hs+13−6 servant/src/Servant/API/Raw.hs+6−3 servant/src/Servant/API/RemoteHost.hs+1 servant/src/Servant/API/ReqBody.hs+13−3 servant/src/Servant/API/ResponseHeaders.hs+125−41 servant/src/Servant/API/Status.hs+160 servant/src/Servant/API/Stream.hs+234 servant/src/Servant/API/Sub.hs+4−3 servant/src/Servant/API/TypeErrors.hs+40 servant/src/Servant/API/TypeLevel.hs+78−34 servant/src/Servant/API/UVerb.hs+124 servant/src/Servant/API/UVerb/Union.hs+147 servant/src/Servant/API/Vault.hs+2−1 servant/src/Servant/API/Verbs.hs+31−18 servant/src/Servant/API/WithNamedContext.hs+2−2 servant/src/Servant/Links.hs+658 servant/src/Servant/Test/ComprehensiveAPI.hs+80 servant/src/Servant/Types/SourceT.hs+381 servant/src/Servant/Utils/Enter.hs−122 servant/src/Servant/Utils/Links.hs−315 servant/test/Servant/API/ContentTypesSpec.hs+50−21 servant/test/Servant/API/ResponseHeadersSpec.hs+4−4 servant/test/Servant/API/StreamSpec.hs+99 servant/test/Servant/Utils/LinksSpec.hs → servant/test/Servant/LinksSpec.hs+56−15 servant/test/doctests.hs−25 setup.py+11 sources.txt+1 stack-ghc-7.10.3.yaml−20 stack-ghc-7.8.4.yaml−29 stack-ghcjs.yaml+34 stack.yaml+14−8 stack.yaml.lock+19 streaming-benchmark.sh+268
.github/FUNDING.ymlnew file+12
@@ -0,0 +1,12 @@
1+# These are supported funding model platforms
2+
3+github: [arianvp]
4+patreon: # Replace with a single Patreon username
5+open_collective: # Replace with a single Open Collective username
6+ko_fi: # Replace with a single Ko-fi username
7+tidelift: # Replace with a single Tidelift platform-name/package-name e.g., npm/babel
8+community_bridge: # Replace with a single Community Bridge project-name e.g., cloud-foundry
9+liberapay: # Replace with a single Liberapay username
10+issuehunt: # Replace with a single IssueHunt username
11+otechie: # Replace with a single Otechie username
12+custom: https://github.com/haskell-servant/haskell-servant.github.io/blob/hakyll/consultancies.md
.github/run-ghcjs-tests.shnew file+14
@@ -0,0 +1,14 @@
1+#!/usr/bin/env bash
2+#
3+# cabal v2-test does not work with GHCJS
4+# See: https://github.com/haskell/cabal/issues/6175
5+#
6+# This invokes cabal-plan to figure out test binaries, and invokes them with node.
7+
8+cabal-plan list-bins '*:test:*' | while read -r line
9+do
10+ testpkg=$(echo "$line" | perl -pe 's/:.*//')
11+ testexe=$(echo "$line" | awk '{ print $2 }')
12+ echo "testing $textexe in package $textpkg"
13+ (cd "$testpkg" && node "$testexe".jsexe/all.js)
14+done
.github/workflows/master.ymlnew file+147
@@ -0,0 +1,147 @@
1+name: CI
2+
3+# Trigger the workflow on push or pull request, but only for the master branch
4+on:
5+ pull_request:
6+ push:
7+ branches: [master]
8+
9+jobs:
10+ cabal:
11+ name: ${{ matrix.os }} / ghc ${{ matrix.ghc }}
12+ runs-on: ${{ matrix.os }}
13+ strategy:
14+ matrix:
15+ os: [ubuntu-latest]
16+ cabal: ["3.6"]
17+ ghc:
18+ - "8.6.5"
19+ - "8.8.4"
20+ - "8.10.7"
21+ - "9.0.2"
22+ - "9.2.2"
23+
24+ steps:
25+ - uses: actions/checkout@v2
26+
27+ - uses: haskell/actions/setup@v1
28+ id: setup-haskell-cabal
29+ name: Setup Haskell
30+ with:
31+ ghc-version: ${{ matrix.ghc }}
32+ cabal-version: ${{ matrix.cabal }}
33+
34+ - name: Freeze
35+ run: |
36+ cabal configure --enable-tests --enable-benchmarks --test-show-details=direct
37+ cabal freeze
38+
39+ - uses: actions/cache@v2.1.3
40+ name: Cache ~/.cabal/store and dist-newstyle
41+ with:
42+ path: |
43+ ${{ steps.setup-haskell-cabal.outputs.cabal-store }}
44+ dist-newstyle
45+ key: ${{ runner.os }}-${{ matrix.ghc }}-${{ hashFiles('cabal.project.freeze') }}
46+ restore-keys: |
47+ ${{ runner.os }}-${{ matrix.ghc }}-
48+
49+ - name: Configure
50+ run: |
51+ cabal install --ignore-project -j2 doctest --constraint='doctest ^>=0.20'
52+
53+ - name: Build
54+ run: |
55+ cabal build all
56+
57+ - name: Test
58+ run: |
59+ cabal test all
60+
61+ - name: Run doctests
62+ run: |
63+ # Necessary for doctest to be found in $PATH
64+ export PATH="$HOME/.cabal/bin:$PATH"
65+
66+ DOCTEST="cabal repl --with-ghc=doctest --ghc-options=-w"
67+ (cd servant && eval $DOCTEST)
68+ (cd servant-client && eval $DOCTEST)
69+ (cd servant-client-core && eval $DOCTEST)
70+ (cd servant-http-streams && eval $DOCTEST)
71+ (cd servant-docs && eval $DOCTEST)
72+ (cd servant-foreign && eval $DOCTEST)
73+ (cd servant-server && eval $DOCTEST)
74+ (cd servant-machines && eval $DOCTEST)
75+ (cd servant-conduit && eval $DOCTEST)
76+ (cd servant-pipes && eval $DOCTEST)
77+
78+ stack:
79+ name: stack / ghc ${{ matrix.ghc }}
80+ runs-on: ubuntu-latest
81+ strategy:
82+ matrix:
83+ stack: ["2.7.5"]
84+ ghc: ["8.10.7"]
85+
86+ steps:
87+ - uses: actions/checkout@v2
88+
89+ - uses: haskell/actions/setup@v1
90+ name: Setup Haskell Stack
91+ with:
92+ ghc-version: ${{ matrix.ghc }}
93+ stack-version: ${{ matrix.stack }}
94+
95+ - uses: actions/cache@v2.1.3
96+ name: Cache ~/.stack
97+ with:
98+ path: ~/.stack
99+ key: ${{ runner.os }}-${{ matrix.ghc }}-stack
100+
101+ - name: Install dependencies
102+ run: |
103+ stack build --system-ghc --test --bench --no-run-tests --no-run-benchmarks --only-dependencies
104+
105+ - name: Build
106+ run: |
107+ stack build --system-ghc --test --bench --no-run-tests --no-run-benchmarks
108+
109+ - name: Test
110+ run: |
111+ stack test --system-ghc
112+
113+ ghcjs:
114+ name: ubuntu-latest / ghcjs 8.6
115+ runs-on: "ubuntu-latest"
116+
117+ steps:
118+ - uses: actions/checkout@v2
119+ - uses: cachix/install-nix-action@v13
120+ with:
121+ extra_nix_config: |
122+ trusted-public-keys = ryantrinkle.com-1:JJiAKaRv9mWgpVAz8dwewnZe0AzzEAzPkagE9SP5NWI=1aba6f367982bd6dd78ec2fda75ab246a62d32c5 cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY=
123+ substituters = https://nixcache.reflex-frp.org https://cache.nixos.org/
124+ - name: Setup
125+ run: |
126+ # Override cabal.project with the lightweight GHCJS one
127+ cp cabal.ghcjs.project cabal.project
128+ cat cabal.project
129+ nix-shell ghcjs.nix --run "cabal v2-update && cabal v2-freeze"
130+
131+ - uses: actions/cache@v2.1.3
132+ name: Cache ~/.cabal/store and dist-newstyle
133+ with:
134+ path: |
135+ ~/.cabal/store
136+ dist-newstyle
137+ key: ${{ runner.os }}-ghcjs8.6-${{ hashFiles('cabal.project.freeze') }}
138+ restore-keys: |
139+ ${{ runner.os }}-ghcjs8.6-
140+
141+ - name: Build
142+ run: |
143+ nix-shell ghcjs.nix --run "cabal v2-build --ghcjs --enable-tests --enable-benchmarks all"
144+
145+ - name: Tests
146+ run: |
147+ nix-shell ghcjs.nix --run ".github/run-ghcjs-tests.sh"
.gitignore+11−3
@@ -1,5 +1,7 @@
11**/*/dist
2−dist-newstyle
2+*~
3+dist-*
4+.ghc.environment.*
35/bin
46/lib
57/share
@@ -24,9 +26,15 @@ cabal.config
2426*.hp
2527Setup
2628.stack-work
27−shell.nix
28−default.nix
2929doc/_build
3030doc/venv
3131doc/tutorial/static/api.js
3232doc/tutorial/static/jq.js
33+shell.nix
34+.hspec-failures
35+
36+# nix
37+result*
38+
39+# local versions of things
40+servant-multipart
.stylish-haskell.yaml+118−5
@@ -15,6 +15,14 @@ steps:
1515 # # true.
1616 # add_language_pragma: true
1717
18+ # Align the right hand side of some elements. This is quite conservative
19+ # and only applies to statements where each element occupies a single
20+ # line.
21+ - simple_align:
22+ cases: false
23+ top_level_patterns: false
24+ records: false
25+
1826 # Import cleanup
1927 - imports:
2028 # There are different ways we can align names and lists.
@@ -33,6 +41,91 @@ steps:
3341 # Default: global.
3442 align: global
3543
44+ # Folowing options affect only import list alignment.
45+ #
46+ # List align has following options:
47+ #
48+ # - after_alias: Import list is aligned with end of import including
49+ # 'as' and 'hiding' keywords.
50+ #
51+ # > import qualified Data.List as List (concat, foldl, foldr, head,
52+ # > init, last, length)
53+ #
54+ # - with_alias: Import list is aligned with start of alias or hiding.
55+ #
56+ # > import qualified Data.List as List (concat, foldl, foldr, head,
57+ # > init, last, length)
58+ #
59+ # - new_line: Import list starts always on new line.
60+ #
61+ # > import qualified Data.List as List
62+ # > (concat, foldl, foldr, head, init, last, length)
63+ #
64+ # Default: after_alias
65+ list_align: new_line
66+
67+ # Long list align style takes effect when import is too long. This is
68+ # determined by 'columns' setting.
69+ #
70+ # - inline: This option will put as much specs on same line as possible.
71+ #
72+ # - new_line: Import list will start on new line.
73+ #
74+ # - new_line_multiline: Import list will start on new line when it's
75+ # short enough to fit to single line. Otherwise it'll be multiline.
76+ #
77+ # - multiline: One line per import list entry.
78+ # Type with contructor list acts like single import.
79+ #
80+ # > import qualified Data.Map as M
81+ # > ( empty
82+ # > , singleton
83+ # > , ...
84+ # > , delete
85+ # > )
86+ #
87+ # Default: inline
88+ long_list_align: new_line
89+
90+ # Align empty list (importing instances)
91+ #
92+ # Empty list align has following options
93+ #
94+ # - inherit: inherit list_align setting
95+ #
96+ # - right_after: () is right after the module name:
97+ #
98+ # > import Vector.Instances ()
99+ #
100+ # Default: inherit
101+ empty_list_align: right_after
102+
103+ # List padding determines indentation of import list on lines after import.
104+ # This option affects 'long_list_align'.
105+ #
106+ # - <integer>: constant value
107+ #
108+ # - module_name: align under start of module name.
109+ # Useful for 'file' and 'group' align settings.
110+ list_padding: module_name
111+
112+ # Separate lists option affects formating of import list for type
113+ # or class. The only difference is single space between type and list
114+ # of constructors, selectors and class functions.
115+ #
116+ # - true: There is single space between Foldable type and list of it's
117+ # functions.
118+ #
119+ # > import Data.Foldable (Foldable (fold, foldl, foldMap))
120+ #
121+ # - false: There is no space between Foldable type and list of it's
122+ # functions.
123+ #
124+ # > import Data.Foldable (Foldable(fold, foldl, foldMap))
125+ #
126+ # Default: true
127+ separate_lists: true
128+
36129 # Language pragmas
37130 - language_pragmas:
38131 # We can generate different styles of language pragma lists.
@@ -47,13 +140,20 @@ steps:
47140 # Default: vertical.
48141 style: vertical
49142
143+ # Align affects alignment of closing pragma brackets.
144+ #
145+ # - true: Brackets are aligned in same collumn.
146+ #
147+ # - false: Brackets are not aligned together. There is only one space
148+ # between actual import and closing bracket.
149+ #
150+ # Default: true
151+ align: true
152+
50153 # stylish-haskell can detect redundancy of some language pragmas. If this
51154 # is set to true, it will remove those redundant pragmas. Default: true.
52155 remove_redundant: true
53156
54− # Align the types in record declarations
55− - records: {}
56−
57157 # Replace tabs by spaces. This is disabled by default.
58158 # - tabs:
59159 # # Number of spaces to use for each tab. Default: 8, as specified by the
@@ -67,11 +167,24 @@ steps:
67167# to. Different steps take this into account. Default: 80.
68168columns: 80
69169
170+# By default, line endings are converted according to the OS. You can override
171+# preferred format here.
172+#
173+# - native: Native newline format. CRLF on Windows, LF on other OSes.
174+#
175+# - lf: Convert to LF ("\n").
176+#
177+# - crlf: Convert to CRLF ("\r\n").
178+#
179+# Default: native.
180+newline: lf
181+
70182# Sometimes, language extensions are specified in a cabal file or from the
71183# command line instead of using language pragmas in the file. stylish-haskell
72184# needs to be aware of these, so it can parse the file correctly.
73185#
74186# No language extensions are enabled by default.
75187language_extensions:
76− - TemplateHaskell
77− - QuasiQuotes
188+ - FlexibleContexts
189+ - TemplateHaskell
190+ - QuasiQuotes
.travis.ymldeleted−29
@@ -1,29 +0,0 @@
1−sudo: false
2−
3−language: c
4−
5−env:
6− - STACK_YAML=stack-ghc-7.8.4.yaml
7− - STACK_YAML=stack-ghc-7.10.3.yaml
8− - STACK_YAML=stack.yaml
9−
10−addons:
11− apt:
12− packages:
13− - libgmp-dev
14−
15−install:
16− - mkdir -p ~/.local/bin
17− - export PATH=$HOME/.local/bin:$PATH
18− - travis_retry curl -L https://www.stackage.org/stack/linux-x86_64 | tar xz --wildcards --strip-components=1 -C ~/.local/bin '*/stack'
19− - stack --version
20− - stack setup --no-terminal
21− - (cd $HOME/.local/bin && wget https://zalora-public.s3.amazonaws.com/tinc && chmod +x tinc)
22−
23−script:
24− - if [ "$TRAVIS_EVENT_TYPE" = "cron" ] ; then ./scripts/ci-cron.sh ; else stack test --ghc-options=-Werror --no-terminal ; fi
25−
26−cache:
27− directories:
28− - $HOME/.tinc/cache
29− - $HOME/.stack
CONTRIBUTING.md+34−5
@@ -21,6 +21,7 @@ Or `nix`:
2121./scripts/generate-nix-files.sh # Get up-to-date shell.nix files
2222```
2323
24+To build the docs, see `doc/README.md`.
2425
2526## General
2627
@@ -34,8 +35,34 @@ Some things we like:
3435Though we aren't sticklers for style, the `.stylish-haskell.yaml` and `HLint.hs`
3536files in the repository provide a good baseline for consistency.
3637
37−Please include a description of the changes in your PR in the `CHANGELOG.md` of
38−the packages you've changed. And of course, write tests!
38+**Important**: please do not modify the versions of the servant packages you are sending patches for.
39+
40+## Changelog entries
41+
42+We experiment with using [changelog-d tool](https://github.com/phadej/changelog-d) to assemble changelogs.
43+You are not required to install it.
44+
45+In each PR please add a file to `changelog.d` directory named after issue you are solving or the pull request itself (in a separate commit after you know the pull request number). For example
46+
47+```cabal
48+synopsis: One sentence summary of the change.
49+prs: #1219
50+issues: #1028
51+
52+description: {
53+
54+A longer description. Small changes don't need this.
55+Bigger ones definitely do, for example we try to include migration hints
56+for breaking changes.
57+
58+However if you don't know what to write, that's ok too.
59+
60+By the way, the braces around are omitted when the file is parsed.
61+They can be used so the field doesn't need to be indented, which is handy
62+for prose.
63+
64+}
65+```
3966
4067## PR process
4168
@@ -52,8 +79,10 @@ not been a timely response to a PR, you can ping the Maintainers group (with
5279We encourage people to experiment with new combinators and instances - it is
5380one of the most powerful ways of using `servant`, and a wonderful way of
5481getting to know it better. If you do write a new combinator, we would love to
55−know about it! Either hop on #servant on freenode and let us know, or open an
56−issue with the `news` tag (which we will close when we read it).
82+know about it! Either hop on
83+[#haskell-servant on libera.chat](https://web.libera.chat/#haskell-servant) and
84+let us know, or open an issue with the `news` tag (which we will close when we
85+read it).
5786
5887As for adding them to the main repo: maintaining combinators can be expensive,
5988since official combinators must have instances for all classes (and new classes
@@ -76,7 +105,7 @@ the `news` label if you make a new package so we can know about it!
76105
77106## Release policy
78107
79−We are currently moving to a more aggresive release policy, so that you can get
108+We are currently moving to a more aggressive release policy, so that you can get
80109what you contribute from Hackage fairly soon. However, note that prior to major
81110releases it may take some time in between releases.
82111
HLint.hsdeleted−6
@@ -1,6 +0,0 @@
1−import "hint" HLint.Default
2−
3−ignore "Redundant do"
4−ignore "Parse error"
5−ignore "Use list comprehension"
6−ignore "Use liftM"
README.md+54−23
@@ -4,37 +4,68 @@
44
55## Getting Started
66
7−We have a [tutorial](http://haskell-servant.readthedocs.org/en/stable/tutorial/index.html) that
7+We have a [tutorial](http://docs.servant.dev/en/stable/tutorial/index.html) that
88introduces the core features of servant. After this article, you should be able
99to write your first servant webservices, learning the rest from the haddocks'
1010examples.
1111
12−The central documentation can be found [here](http://haskell-servant.readthedocs.org/).
12+The core documentation can be found [here](http://docs.servant.dev/).
1313Other blog posts, videos and slides can be found on the
14−[website](http://haskell-servant.github.io/).
14+[website](http://www.servant.dev/).
1515
16−If you need help, drop by the IRC channel (#servant on freenode) or [mailing
16+If you need help, drop by the IRC channel (#haskell-servant on libera.chat) or [mailing
1717list](https://groups.google.com/forum/#!forum/haskell-servant).
1818
19−## Version history
20−
21−This table lists the versions of some `servant-` libraries at the point of
22−release of `servant` package.
23−
24−| | **0.10** | **0.11** |
25−| ------------------- | -------- |-----------
26−| servant | 0.10 | 0.11 |
27−| servant-blaze | 0.7.1 | ? |
28−| servant-cassava | 0.7 | ? |
29−| servant-client | 0.10 | 0.11 |
30−| servant-docs | 0.10 | 0.10.1 |
31−| servant-foreign | 0.10 | 0.10.0.1 |
32−| servant-js | 0.9.1 | ? |
33−| servant-lucid | 0.7.1 | ? |
34−| servant-mock | 0.8.1.1 | ? |
35−| servant-server | 0.10 | 0.11 |
36−| servant-swagger | 1.1.2.1 | ? |
37−
3819## Contributing
3920
4021See `CONTRIBUTING.md`
22+
23+## Release process outline (by phadej)
24+
25+- Update changelog and bump versions in `master`
26+ - `git log --oneline v0.12.. | grep 'Merge pull request'` is a good starting point (use correct previous release tag)
27+- Create a release branch, e.g. `release-0.13`
28+ - Release branch is useful for backporting fixes from `master`
29+- Smoke test in [`servant-universe`](https://github.com/phadej/servant-universe)
30+ - `git submodule foreach git checkout master` and `git submodule foreach git pull` to get newest of everything.
31+ - `cabal new-build --enable-tests all` to verify that everything builds, and `cabal new-test all` to run tests
32+ - It's a good idea to separate these steps, as tests often pass, if they compile :)
33+ - See `cabal.project` to selectively `allow-newer`
34+ - If some packages are broken, on your discretisation there are two options:
35+ - Fix them and make PRs: it's a good idea to test against older `servant` version too.
36+ - Temporarily comment out broken package
37+ - If you make a commit for `servant-universe`, you can use it as submodule in private projects to test even more
38+- When ripples are cleared out:
39+ - `git tag -s` the release
40+ - `git push --tags`
41+ - `cabal sdist` and `cabal upload`
42+
43+## TechEmpower framework benchmarks
44+
45+We develop and maintain the servant TFB entry in https://github.com/haskell-servant/FrameworkBenchmarks/
46+
47+To verify (i.e. compile and test that it works)
48+
49+```sh
50+./tfb --mode verify --test servant servant-beam servant-psql-simple --type json plaintext db fortune
51+```
52+
53+To compare with `warp`
54+
55+```sh
56+./tfb --mode benchmark --test warp servant servant-beam servant-psql-simple --type json plaintext db fortune
57+```
58+
59+To compare with `reitit` (Clojure framework)
60+
61+```sh
62+./tfb --mode benchmark --test reitit reitit-async reitit-jdbc servant servant-beam servant-psql-simple --type json plaintext db fortune
63+```
64+
65+You can see the visualised results at https://www.techempower.com/benchmarks/#section=test
66+
67+## Nix
68+
69+A developer shell.nix file is provided in the `nix` directory
70+
71+See [nix/README.md](nix/README.md)
cabal.ghcjs.projectnew file+14
@@ -0,0 +1,14 @@
1+-- Using https://launchpad.net/~hvr/+archive/ubuntu/ghcjs
2+
3+packages:
4+ servant/
5+ servant-client/
6+ servant-client-core/
7+
8+-- we need to tell cabal we are using GHCJS
9+compiler: ghcjs
10+tests: True
11+
12+-- Constraints so that reflex-platform provided packages are selected.
13+constraints: attoparsec == 0.13.2.2
14+constraints: hashable == 1.3.0.0
cabal.project+46
@@ -1,7 +1,53 @@
11packages:
22 servant/
3+ servant-auth/servant-auth
4+ servant-auth/servant-auth-client
5+ servant-auth/servant-auth-docs
6+ servant-auth/servant-auth-server
7+ servant-auth/servant-auth-swagger
8+
39 servant-client/
10+ servant-client-core/
11+ servant-http-streams/
412 servant-docs/
513 servant-foreign/
614 servant-server/
15+ servant-swagger/
716 doc/tutorial/
17+
18+-- servant streaming
19+packages:
20+ servant-machines/
21+ servant-conduit/
22+ servant-pipes/
23+
24+-- servant GHCJS
25+-- packages:
26+-- servant-jsaddle/
27+
28+-- Cookbooks
29+packages:
30+ doc/cookbook/basic-auth
31+ doc/cookbook/curl-mock
32+ doc/cookbook/custom-errors
33+ doc/cookbook/basic-streaming
34+ doc/cookbook/db-postgres-pool
35+ doc/cookbook/db-sqlite-simple
36+ doc/cookbook/file-upload
37+ doc/cookbook/generic
38+ doc/cookbook/hoist-server-with-context
39+ doc/cookbook/https
40+ doc/cookbook/jwt-and-basic-auth
41+ doc/cookbook/pagination
42+ -- doc/cookbook/sentry
43+ -- Commented out because servant-quickcheck currently doesn't build.
44+ -- doc/cookbook/testing
45+ doc/cookbook/uverb
46+ doc/cookbook/structuring-apis
47+ doc/cookbook/using-custom-monad
48+ doc/cookbook/using-free-client
49+ -- doc/cookbook/open-id-connect
50+
51+tests: True
52+optimization: False
53+-- reorder-goals: True
changelog.d/1432new file+9
@@ -0,0 +1,9 @@
1+synopsis: Fixes encoding of URL parameters in servant-client
2+prs: #1432
3+issues: #1418
4+description: {
5+Some applications use query parameters to pass arbitrary (non-unicode) binary
6+data. This change modifies how servant-client handles query parameters, so
7+that application developers can use `ToHttpApiData` to marshal binary data into
8+query parameters.
9+}
changelog.d/1469new file+11
@@ -0,0 +1,11 @@
1+synopsis: Derive HasClient good response status from Verb status
2+prs: #1469
3+description: {
4+`HasClient` instances for the `Verb` datatype use `runRequest` in
5+`clientWithRoute` definitions.
6+This means that a request performed with `runClientM` will be successful if and
7+only if the endpoint specify a response status code >=200 and <300.
8+This change replaces `runRequest` with `runRequestAcceptStatus` in `Verb`
9+instances for the `HasClient` class, deriving the good response status from
10+the `Verb` status.
11+}
changelog.d/1477new file+9
@@ -0,0 +1,9 @@
1+synopsis: Enable FlexibleContexts in Servant.API.ContentTypes
2+prs: #1477
3+
4+description: {
5+
6+Starting with GHC 9.2, UndecidableInstances no longer implies FlexibleContexts.
7+Add this extension where it's needed to make compilation succeed.
8+
9+}
changelog.d/1529new file+10
@@ -0,0 +1,10 @@
1+synopsis: Fix performRequest in servant-client-ghcjs
2+prs: #1529
3+
4+description: {
5+
6+performRequest function in servant-client-ghcjs was not compatible with the
7+latest RunClient typeclass. Added the acceptStatus parameter and fixed the
8+functionality to match what servant-client provides.
9+
10+}
changelog.d/1556new file+81
@@ -0,0 +1,81 @@
1+synopsis: Display capture hints in router layout
2+prs: #1556
3+
4+description: {
5+
6+This PR enhances the `Servant.Server.layout` function, which produces a textual description of the routing layout of an API. More precisely, it changes `<capture>` blocks, so that they display the name and type of the variable being captured instead.
7+
8+Example:
9+
10+For the following API
11+```haskell
12+type API =
13+ "a" :> "d" :> Get '[JSON] NoContent
14+ :<|> "b" :> Capture "x" Int :> Get '[JSON] Bool
15+ :<|> "a" :> "e" :> Get '[JSON] Int
16+```
17+
18+we previously got the following output:
19+
20+```
21+/
22+├─ a/
23+│ ├─ d/
24+│ │ └─•
25+│ └─ e/
26+│ └─•
27+└─ b/
28+ └─ <capture>/
29+ ├─•
30+ ┆
31+ └─•
32+```
33+
34+now we get:
35+
36+```
37+/
38+├─ a/
39+│ ├─ d/
40+│ │ └─•
41+│ └─ e/
42+│ └─•
43+└─ b/
44+ └─ <x::Int>/
45+ ├─•
46+ ┆
47+ └─•
48+```
49+
50+This change is achieved by the introduction of a CaptureHint type, which is passed as an extra argument to the CaptureRouter and CaptureAllRouter constructors for the Router' type.
51+CaptureHint values are then used in routerLayout, to display the name and type of captured values, instead of just `<capture>` previously.
52+
53+N.B.:
54+Because the choice smart constructor for routers can aggregate Capture combinators with different capture hints, the Capture*Router constructors actually take a list of CaptureHint, instead of a single one.
55+
56+This PR also introduces Spec tests for the routerLayout function.
57+
58+Warning:
59+This change is potentially breaking, because it adds the constraint `Typeable a` to all types that are to be captured. Because all types are typeable since GHC 7.10, this is not as bad as it sounds ; it only break expressions where `a` is quantified in an expression with `Capture a`.
60+In those cases, the fix is easy: it suffices to add `Typeable a` to the left-hand side of the quantification constraint.
61+
62+For instance, the following code will no longer compile:
63+```haskell
64+type MyAPI a = Capture "foo" a :> Get '[JSON] ()
65+
66+myServer :: forall a. Server (MyAPI a)
67+myServer = const $ return ()
68+
69+myApi :: forall a. Proxy (MyAPI a)
70+myApi = Proxy
71+
72+app :: forall a. (FromHttpApiData a) => Application
73+app = serve (myApi @a) (myServer @a)
74+```
75+
76+Indeed, `app` should be replaced with:
77+```haskell
78+app :: forall a. (FromHttpApiData a, Typeable a) => Application
79+app = serve (myApi @a) (myServer @a)
80+```
81+}
changelog.d/1569new file+13
@@ -0,0 +1,13 @@
1+synopsis: Encode captures using toEncodedUrlPiece
2+prs: #1569
3+issues: #1511
4+
5+description: {
6+The `servant-client` library now makes direct use of `toEncodedUrlPiece` from `ToHttpApiData`
7+to encode captured values when building the request path. It gives user freedom to implement
8+URL-encoding however they need.
9+
10+Previous behavior was to use `toUrlPiece` and URL-encode its output using `toEncodedUrlPiece`
11+from the `Text` instance of `ToHttpApiData`. The issue with this approach is that
12+`ToHttpApiData Text` is overly zealous and also encodes characters, such as `*`, which are perfectly valid in a URL.
13+}
changelog.d/1580new file+12
@@ -0,0 +1,12 @@
1+synopsis: Allow IO in validationKeys
2+prs: #1580
3+issues: #1579
4+
5+description: {
6+
7+Currently validationKeys are a fixed JWKSet. This does not work with OIDC
8+providers such as AWS Cognito or Okta, which regularly fetching jwks_uri to
9+discover new and expired keys.
10+
11+This change alters the type of validationKeys from JWKSet to IO JWKSet.
12+}
changelog.d/1589new file+2
@@ -0,0 +1,2 @@
1+synopsis: Only include question mark for nonempty query strings
2+prs: 1589
changelog.d/1595new file+2
@@ -0,0 +1,2 @@
1+synopsis: Run ClientEnv's makeClientRequest in IO.
2+prs: #1595
changelog.d/confignew file+2
@@ -0,0 +1,2 @@
1+organization: haskell-servant
2+repository: servant
changelog.d/servant-docs-curlnew file+16
@@ -0,0 +1,16 @@
1+synopsis: Add sample cURL requests to generated documentation
2+prs: #1401
3+
4+description: {
5+
6+Add sample cURL requests to generated documentation.
7+
8+Those supplying changes to the Request `header` field manually using
9+lenses will need to add a sample bytestring value.
10+
11+`headers <>~ ["unicorn"]`
12+
13+becomes
14+
15+`headers <>~ [("unicorn", "sample value")]`
16+}
default.nixnew file+38
@@ -0,0 +1,38 @@
1+with (builtins.fromJSON (builtins.readFile ./nix/nixpkgs.json));
2+{
3+ pkgs ? import (builtins.fetchTarball {
4+ url = "https://github.com/NixOS/nixpkgs/archive/${rev}.tar.gz";
5+ inherit sha256;
6+ }) {}
7+, compiler ? "ghc883"
8+}:
9+let
10+ overrides = self: super: {
11+ servant = self.callCabal2nix "servant" ./servant {};
12+ servant-docs = self.callCabal2nix "servant-docs" ./servant-docs {};
13+ servant-pipes = self.callCabal2nix "servant-pipes" ./servant-pipes {};
14+ servant-server = self.callCabal2nix "servant-server" ./servant-server {};
15+ servant-client = self.callCabal2nix "servant-client" ./servant-client {};
16+ servant-foreign = self.callCabal2nix "servant-foreign" ./servant-foreign {};
17+ servant-conduit = self.callCabal2nix "servant-conduit" ./servant-conduit {};
18+ servant-machines = self.callCabal2nix "servant-machines" ./servant-machines {};
19+ servant-client-core = self.callCabal2nix "servant-client-core" ./servant-client-core {};
20+ servant-http-streams = self.callCabal2nix "servant-http-streams" ./servant-http-streams {};
21+ };
22+ hPkgs = pkgs.haskell.packages.${compiler}.override { inherit overrides; };
23+in
24+ with hPkgs;
25+ {
26+ inherit
27+ servant
28+ servant-client
29+ servant-client-core
30+ servant-conduit
31+ servant-docs
32+ servant-foreign
33+ servant-http-streams
34+ servant-machines
35+ servant-pipes
36+ servant-server;
37+ }
38+
doc/Makefile+12−206
@@ -1,216 +1,22 @@
1−# Makefile for Sphinx documentation
1+# Minimal makefile for Sphinx documentation
22#
33
44# You can set these variables from the command line.
55SPHINXOPTS =
66SPHINXBUILD = sphinx-build
7−PAPER =
7+SPHINXPROJ = Servant
8+SOURCEDIR = .
89BUILDDIR = _build
910
10−# User-friendly check for sphinx-build
11−ifeq ($(shell which $(SPHINXBUILD) >/dev/null 2>&1; echo $$?), 1)
12−$(error The '$(SPHINXBUILD)' command was not found. Make sure you have Sphinx installed, then set the SPHINXBUILD environment variable to point to the full path of the '$(SPHINXBUILD)' executable. Alternatively you can add the directory with the executable to your PATH. If you don't have Sphinx installed, grab it from http://sphinx-doc.org/)
13−endif
14−
15−# Internal variables.
16−PAPEROPT_a4 = -D latex_paper_size=a4
17−PAPEROPT_letter = -D latex_paper_size=letter
18−ALLSPHINXOPTS = -d $(BUILDDIR)/doctrees $(PAPEROPT_$(PAPER)) $(SPHINXOPTS) .
19−# the i18n builder cannot share the environment and doctrees with the others
20−I18NSPHINXOPTS = $(PAPEROPT_$(PAPER)) $(SPHINXOPTS) .
21−
22−.PHONY: help
11+# Put it first so that "make" without argument is like "make help".
2312help:
24− @echo "Please use \`make <target>' where <target> is one of"
25− @echo " html to make standalone HTML files"
26− @echo " dirhtml to make HTML files named index.html in directories"
27− @echo " singlehtml to make a single large HTML file"
28− @echo " pickle to make pickle files"
29− @echo " json to make JSON files"
30− @echo " htmlhelp to make HTML files and a HTML help project"
31− @echo " qthelp to make HTML files and a qthelp project"
32− @echo " applehelp to make an Apple Help Book"
33− @echo " devhelp to make HTML files and a Devhelp project"
34− @echo " epub to make an epub"
35− @echo " latex to make LaTeX files, you can set PAPER=a4 or PAPER=letter"
36− @echo " latexpdf to make LaTeX files and run them through pdflatex"
37− @echo " latexpdfja to make LaTeX files and run them through platex/dvipdfmx"
38− @echo " text to make text files"
39− @echo " man to make manual pages"
40− @echo " texinfo to make Texinfo files"
41− @echo " info to make Texinfo files and run them through makeinfo"
42− @echo " gettext to make PO message catalogs"
43− @echo " changes to make an overview of all changed/added/deprecated items"
44− @echo " xml to make Docutils-native XML files"
45− @echo " pseudoxml to make pseudoxml-XML files for display purposes"
46− @echo " linkcheck to check all external links for integrity"
47− @echo " doctest to run all doctests embedded in the documentation (if enabled)"
48− @echo " coverage to run coverage check of the documentation (if enabled)"
49−
50−.PHONY: clean
51−clean:
52− rm -rf $(BUILDDIR)/*
53−
54−.PHONY: html
55−html:
56− $(SPHINXBUILD) -b html $(ALLSPHINXOPTS) $(BUILDDIR)/html
57− @echo
58− @echo "Build finished. The HTML pages are in $(BUILDDIR)/html."
59−
60−.PHONY: dirhtml
61−dirhtml:
62− $(SPHINXBUILD) -b dirhtml $(ALLSPHINXOPTS) $(BUILDDIR)/dirhtml
63− @echo
64− @echo "Build finished. The HTML pages are in $(BUILDDIR)/dirhtml."
65−
66−.PHONY: singlehtml
67−singlehtml:
68− $(SPHINXBUILD) -b singlehtml $(ALLSPHINXOPTS) $(BUILDDIR)/singlehtml
69− @echo
70− @echo "Build finished. The HTML page is in $(BUILDDIR)/singlehtml."
71−
72−.PHONY: pickle
73−pickle:
74− $(SPHINXBUILD) -b pickle $(ALLSPHINXOPTS) $(BUILDDIR)/pickle
75− @echo
76− @echo "Build finished; now you can process the pickle files."
77−
78−.PHONY: json
79−json:
80− $(SPHINXBUILD) -b json $(ALLSPHINXOPTS) $(BUILDDIR)/json
81− @echo
82− @echo "Build finished; now you can process the JSON files."
83−
84−.PHONY: htmlhelp
85−htmlhelp:
86− $(SPHINXBUILD) -b htmlhelp $(ALLSPHINXOPTS) $(BUILDDIR)/htmlhelp
87− @echo
88− @echo "Build finished; now you can run HTML Help Workshop with the" \
89− ".hhp project file in $(BUILDDIR)/htmlhelp."
90−
91−.PHONY: qthelp
92−qthelp:
93− $(SPHINXBUILD) -b qthelp $(ALLSPHINXOPTS) $(BUILDDIR)/qthelp
94− @echo
95− @echo "Build finished; now you can run "qcollectiongenerator" with the" \
96− ".qhcp project file in $(BUILDDIR)/qthelp, like this:"
97− @echo "# qcollectiongenerator $(BUILDDIR)/qthelp/generics-eot.qhcp"
98− @echo "To view the help file:"
99− @echo "# assistant -collectionFile $(BUILDDIR)/qthelp/generics-eot.qhc"
100−
101−.PHONY: applehelp
102−applehelp:
103− $(SPHINXBUILD) -b applehelp $(ALLSPHINXOPTS) $(BUILDDIR)/applehelp
104− @echo
105− @echo "Build finished. The help book is in $(BUILDDIR)/applehelp."
106− @echo "N.B. You won't be able to view it unless you put it in" \
107− "~/Library/Documentation/Help or install it in your application" \
108− "bundle."
109−
110−.PHONY: devhelp
111−devhelp:
112− $(SPHINXBUILD) -b devhelp $(ALLSPHINXOPTS) $(BUILDDIR)/devhelp
113− @echo
114− @echo "Build finished."
115− @echo "To view the help file:"
116− @echo "# mkdir -p $$HOME/.local/share/devhelp/generics-eot"
117− @echo "# ln -s $(BUILDDIR)/devhelp $$HOME/.local/share/devhelp/generics-eot"
118− @echo "# devhelp"
119−
120−.PHONY: epub
121−epub:
122− $(SPHINXBUILD) -b epub $(ALLSPHINXOPTS) $(BUILDDIR)/epub
123− @echo
124− @echo "Build finished. The epub file is in $(BUILDDIR)/epub."
125−
126−.PHONY: latex
127−latex:
128− $(SPHINXBUILD) -b latex $(ALLSPHINXOPTS) $(BUILDDIR)/latex
129− @echo
130− @echo "Build finished; the LaTeX files are in $(BUILDDIR)/latex."
131− @echo "Run \`make' in that directory to run these through (pdf)latex" \
132− "(use \`make latexpdf' here to do that automatically)."
133−
134−.PHONY: latexpdf
135−latexpdf:
136− $(SPHINXBUILD) -b latex $(ALLSPHINXOPTS) $(BUILDDIR)/latex
137− @echo "Running LaTeX files through pdflatex..."
138− $(MAKE) -C $(BUILDDIR)/latex all-pdf
139− @echo "pdflatex finished; the PDF files are in $(BUILDDIR)/latex."
140−
141−.PHONY: latexpdfja
142−latexpdfja:
143− $(SPHINXBUILD) -b latex $(ALLSPHINXOPTS) $(BUILDDIR)/latex
144− @echo "Running LaTeX files through platex and dvipdfmx..."
145− $(MAKE) -C $(BUILDDIR)/latex all-pdf-ja
146− @echo "pdflatex finished; the PDF files are in $(BUILDDIR)/latex."
147−
148−.PHONY: text
149−text:
150− $(SPHINXBUILD) -b text $(ALLSPHINXOPTS) $(BUILDDIR)/text
151− @echo
152− @echo "Build finished. The text files are in $(BUILDDIR)/text."
153−
154−.PHONY: man
155−man:
156− $(SPHINXBUILD) -b man $(ALLSPHINXOPTS) $(BUILDDIR)/man
157− @echo
158− @echo "Build finished. The manual pages are in $(BUILDDIR)/man."
159−
160−.PHONY: texinfo
161−texinfo:
162− $(SPHINXBUILD) -b texinfo $(ALLSPHINXOPTS) $(BUILDDIR)/texinfo
163− @echo
164− @echo "Build finished. The Texinfo files are in $(BUILDDIR)/texinfo."
165− @echo "Run \`make' in that directory to run these through makeinfo" \
166− "(use \`make info' here to do that automatically)."
167−
168−.PHONY: info
169−info:
170− $(SPHINXBUILD) -b texinfo $(ALLSPHINXOPTS) $(BUILDDIR)/texinfo
171− @echo "Running Texinfo files through makeinfo..."
172− make -C $(BUILDDIR)/texinfo info
173− @echo "makeinfo finished; the Info files are in $(BUILDDIR)/texinfo."
174−
175−.PHONY: gettext
176−gettext:
177− $(SPHINXBUILD) -b gettext $(I18NSPHINXOPTS) $(BUILDDIR)/locale
178− @echo
179− @echo "Build finished. The message catalogs are in $(BUILDDIR)/locale."
180−
181−.PHONY: changes
182−changes:
183− $(SPHINXBUILD) -b changes $(ALLSPHINXOPTS) $(BUILDDIR)/changes
184− @echo
185− @echo "The overview file is in $(BUILDDIR)/changes."
186−
187−.PHONY: linkcheck
188−linkcheck:
189− $(SPHINXBUILD) -b linkcheck $(ALLSPHINXOPTS) $(BUILDDIR)/linkcheck
190− @echo
191− @echo "Link check complete; look for any errors in the above output " \
192− "or in $(BUILDDIR)/linkcheck/output.txt."
193−
194−.PHONY: doctest
195−doctest:
196− $(SPHINXBUILD) -b doctest $(ALLSPHINXOPTS) $(BUILDDIR)/doctest
197− @echo "Testing of doctests in the sources finished, look at the " \
198− "results in $(BUILDDIR)/doctest/output.txt."
199−
200−.PHONY: coverage
201−coverage:
202− $(SPHINXBUILD) -b coverage $(ALLSPHINXOPTS) $(BUILDDIR)/coverage
203− @echo "Testing of coverage in the sources finished, look at the " \
204− "results in $(BUILDDIR)/coverage/python.txt."
13+ @if [ ! -d venv ]; then echo "WARNING: There is no venv directory, did you forget to 'virtualenv venv'. Check README.md."; fi
14+ @if [ ! "z$$(which $(SPHINXBUILD))" = "z$$(pwd)/venv/bin/sphinx-build" ]; then echo "WARNING: Did you forgot to 'source venv/bin/activate'"; fi
15+ @$(SPHINXBUILD) -M help "$(SOURCEDIR)" "$(BUILDDIR)" $(SPHINXOPTS) $(O)
20516
206−.PHONY: xml
207−xml:
208− $(SPHINXBUILD) -b xml $(ALLSPHINXOPTS) $(BUILDDIR)/xml
209− @echo
210− @echo "Build finished. The XML files are in $(BUILDDIR)/xml."
17+.PHONY: help Makefile
21118
212−.PHONY: pseudoxml
213−pseudoxml:
214− $(SPHINXBUILD) -b pseudoxml $(ALLSPHINXOPTS) $(BUILDDIR)/pseudoxml
215− @echo
216− @echo "Build finished. The pseudo-XML files are in $(BUILDDIR)/pseudoxml."
19+# Catch-all target: route all unknown targets to Sphinx using the new
20+# "make mode" option. $(O) is meant as a shortcut for $(SPHINXOPTS).
21+%: Makefile
22+ @$(SPHINXBUILD) -M $@ "$(SOURCEDIR)" "$(BUILDDIR)" $(SPHINXOPTS) $(O)
doc/README.mdnew file+8
@@ -0,0 +1,8 @@
1+To build the docs locally:
2+
3+ $ virtualenv venv
4+ $ . ./venv/bin/activate
5+ $ pip install -r requirements.txt
6+ $ make html
7+
8+Docs will be built in _build/html/index.html .
doc/building-the-docsdeleted−8
@@ -1,8 +0,0 @@
1−To build the docs locally:
2−
3−$ virtualenv venv
4−$ . ./venv/bin/activate
5−$ pip install -r requirements.txt
6−$ make html
7−
8−Docs will be built in _build/html/index.html .
doc/conf.py+53−176
@@ -1,7 +1,7 @@
11# -*- coding: utf-8 -*-
22#
3−# servant documentation build configuration file, created by
4−# sphinx-quickstart on Mon Nov 23 13:24:36 2015.
3+# Servant documentation build configuration file, created by
4+# sphinx-quickstart on Fri Jul 6 11:38:51 2018.
55#
66# This file is execfile()d with the current directory set to its
77# containing dir.
@@ -12,20 +12,21 @@
1212# All configuration values have a default; values that are commented out
1313# serve to show the default.
1414
15−import sys
16−import os
17−import shlex
18−from recommonmark.parser import CommonMarkParser
19−
2015# If extensions (or modules to document with autodoc) are in another directory,
2116# add these directories to sys.path here. If the directory is relative to the
2217# documentation root, use os.path.abspath to make it absolute, like shown here.
23−#sys.path.insert(0, os.path.abspath('.'))
18+#
19+# import os
20+# import sys
21+# sys.path.insert(0, os.path.abspath('.'))
22+from recommonmark.parser import CommonMarkParser
23+
2424
2525# -- General configuration ------------------------------------------------
2626
2727# If your documentation needs a minimal Sphinx version, state it here.
28−#needs_sphinx = '1.0'
28+#
29+# needs_sphinx = '1.0'
2930
3031# Add any Sphinx extension module names here, as strings. They can be
3132# extensions coming with Sphinx (named 'sphinx.ext.*') or your custom
@@ -37,17 +38,15 @@ templates_path = ['_templates']
3738
3839# The suffix(es) of source filenames.
3940# You can specify multiple suffix as a list of string:
40−source_suffix = ['.md', '.rst', '.lhs']
41−
42−# The encoding of source files.
43−#source_encoding = 'utf-8-sig'
41+#
42+source_suffix = ['.rst', '.md', '.lhs']
4443
4544# The master toctree document.
4645master_doc = 'index'
4746
4847# General information about the project.
49−project = u'servant'
50−copyright = u'2016, Servant Contributors'
48+project = u'Servant'
49+copyright = u'2022, Servant Contributors'
5150author = u'Servant Contributors'
5251
5352# The version info for the project you're documenting, acts as replacement for
@@ -55,9 +54,9 @@ author = u'Servant Contributors'
5554# built documents.
5655#
5756# The short X.Y version.
58−# version = 'latest'
57+# version = u'0.14'
5958# The full version, including alpha/beta/rc tags.
60−# release = 'latest'
59+# release = u'0.14'
6160
6261# The language for content autogenerated by Sphinx. Refer to documentation
6362# for a list of supported languages.
@@ -66,45 +65,14 @@ author = u'Servant Contributors'
6665# Usually you set "language" from the command line for these cases.
6766language = None
6867
69−# There are two options for replacing |today|: either, you set today to some
70−# non-false value, then it is used:
71−#today = ''
72−# Else, today_fmt is used as the format for a strftime call.
73−#today_fmt = '%B %d, %Y'
74−
7568# List of patterns, relative to source directory, that match files and
7669# directories to ignore when looking for source files.
77−exclude_patterns = ['_build', 'venv']
78−
79−# The reST default role (used for this markup: `text`) to use for all
80−# documents.
81−#default_role = None
82−
83−# If true, '()' will be appended to :func: etc. cross-reference text.
84−#add_function_parentheses = True
85−
86−# If true, the current module name will be prepended to all description
87−# unit titles (such as .. function::).
88−#add_module_names = True
89−
90−# If true, sectionauthor and moduleauthor directives will be shown in the
91−# output. They are ignored by default.
92−#show_authors = False
70+# This patterns also effect to html_static_path and html_extra_path
71+exclude_patterns = ['_build', 'Thumbs.db', '.DS_Store']
9372
9473# The name of the Pygments (syntax highlighting) style to use.
9574pygments_style = 'sphinx'
9675
97−def setup(app):
98− from sphinx.highlighting import lexers
99− from pygments.lexers import HaskellLexer
100− lexers['haskell ignore'] = HaskellLexer(stripnl=False)
101−
102−# A list of ignored prefixes for module index sorting.
103−#modindex_common_prefix = []
104−
105−# If true, keep warnings as "system message" paragraphs in the built documents.
106−#keep_warnings = False
107−
10876# If true, `todo` and `todoList` produce output, else they produce nothing.
10977todo_include_todos = False
11078
@@ -113,157 +81,77 @@ todo_include_todos = False
11381
11482# The theme to use for HTML and HTML Help pages. See the documentation for
11583# a list of builtin themes.
84+#
11685html_theme = 'sphinx_rtd_theme'
11786
11887# Theme options are theme-specific and customize the look and feel of a theme
11988# further. For a list of options available for each theme, see the
12089# documentation.
121−#html_theme_options = {}
122−
123−# Add any paths that contain custom themes here, relative to this directory.
124−#html_theme_path = []
125−
126−# The name for this set of Sphinx documents. If None, it defaults to
127−# "<project> v<release> documentation".
128−#html_title = None
129−
130−# A shorter title for the navigation bar. Default is the same as html_title.
131−#html_short_title = None
132−
133−# The name of an image file (relative to this directory) to place at the top
134−# of the sidebar.
135−#html_logo = None
136−
137−# The name of an image file (within the static path) to use as favicon of the
138−# docs. This file should be a Windows icon file (.ico) being 16x16 or 32x32
139−# pixels large.
140−#html_favicon = None
90+#
91+# html_theme_options = {}
14192
14293# Add any paths that contain custom static files (such as style sheets) here,
14394# relative to this directory. They are copied after the builtin static files,
14495# so a file named "default.css" will overwrite the builtin "default.css".
14596html_static_path = ['_static']
14697
147−# Add any extra paths that contain custom files (such as robots.txt or
148−# .htaccess) here, relative to this directory. These files are copied
149−# directly to the root of the documentation.
150−#html_extra_path = []
151−
152−# If not '', a 'Last updated on:' timestamp is inserted at every page bottom,
153−# using the given strftime format.
154−#html_last_updated_fmt = '%b %d, %Y'
155−
156−# If true, SmartyPants will be used to convert quotes and dashes to
157−# typographically correct entities.
158−#html_use_smartypants = True
159−
160−# Custom sidebar templates, maps document names to template names.
161−#html_sidebars = {}
162−
163−# Additional templates that should be rendered to pages, maps page names to
164−# template names.
165−#html_additional_pages = {}
166−
167−# If false, no module index is generated.
168−#html_domain_indices = True
169−
170−# If false, no index is generated.
171−#html_use_index = True
172−
173−# If true, the index is split into individual pages for each letter.
174−#html_split_index = False
175−
176−# If true, links to the reST sources are added to the pages.
177−#html_show_sourcelink = True
178−
179−# If true, "Created using Sphinx" is shown in the HTML footer. Default is True.
180−#html_show_sphinx = True
181−
182−# If true, "(C) Copyright ..." is shown in the HTML footer. Default is True.
183−#html_show_copyright = True
184−
185−# If true, an OpenSearch description file will be output, and all pages will
186−# contain a <link> tag referring to it. The value of this option must be the
187−# base URL from which the finished HTML is served.
188−#html_use_opensearch = ''
189−
190−# This is the file name suffix for HTML files (e.g. ".xhtml").
191−#html_file_suffix = None
192−
193−# Language to be used for generating the HTML full-text search index.
194−# Sphinx supports the following languages:
195−# 'da', 'de', 'en', 'es', 'fi', 'fr', 'hu', 'it', 'ja'
196−# 'nl', 'no', 'pt', 'ro', 'ru', 'sv', 'tr'
197−#html_search_language = 'en'
98+# Custom sidebar templates, must be a dictionary that maps document names
99+# to template names.
100+#
101+# This is required for the alabaster theme
102+# refs: http://alabaster.readthedocs.io/en/latest/installation.html#sidebars
103+html_sidebars = {
104+ '**': [
105+ 'relations.html', # needs 'show_related': True theme option to display
106+ 'searchbox.html',
107+ ]
108+}
198109
199−# A dictionary with options for the search language support, empty by default.
200−# Now only 'ja' uses this config value
201−#html_search_options = {'type': 'default'}
202110
203−# The name of a javascript file (relative to the configuration directory) that
204−# implements a search results scorer. If empty, the default will be used.
205−#html_search_scorer = 'scorer.js'
111+# -- Options for HTMLHelp output ------------------------------------------
206112
207113# Output file base name for HTML help builder.
208−htmlhelp_basename = 'servantdoc'
114+htmlhelp_basename = 'Servantdoc'
115+
209116
210117# -- Options for LaTeX output ---------------------------------------------
211118
212119latex_elements = {
213−# The paper size ('letterpaper' or 'a4paper').
214−#'papersize': 'letterpaper',
120+ # The paper size ('letterpaper' or 'a4paper').
121+ #
122+ # 'papersize': 'letterpaper',
215123
216−# The font size ('10pt', '11pt' or '12pt').
217−#'pointsize': '10pt',
124+ # The font size ('10pt', '11pt' or '12pt').
125+ #
126+ # 'pointsize': '10pt',
218127
219−# Additional stuff for the LaTeX preamble.
220−#'preamble': '',
128+ # Additional stuff for the LaTeX preamble.
129+ #
130+ # 'preamble': '',
221131
222−# Latex figure (float) alignment
223−#'figure_align': 'htbp',
132+ # Latex figure (float) alignment
133+ #
134+ # 'figure_align': 'htbp',
224135}
225136
226137# Grouping the document tree into LaTeX files. List of tuples
227138# (source start file, target name, title,
228139# author, documentclass [howto, manual, or own class]).
229140latex_documents = [
230− (master_doc, 'servant.tex', u'servant Documentation',
141+ (master_doc, 'Servant.tex', u'Servant Documentation',
231142 u'Servant Contributors', 'manual'),
232143]
233144
234−# The name of an image file (relative to this directory) to place at the top of
235−# the title page.
236−#latex_logo = None
237−
238−# For "manual" documents, if this is true, then toplevel headings are parts,
239−# not chapters.
240−#latex_use_parts = False
241−
242−# If true, show page references after internal links.
243−#latex_show_pagerefs = False
244−
245−# If true, show URL addresses after external links.
246−#latex_show_urls = False
247−
248−# Documents to append as an appendix to all manuals.
249−#latex_appendices = []
250−
251−# If false, no module index is generated.
252−#latex_domain_indices = True
253−
254145
255146# -- Options for manual page output ---------------------------------------
256147
257148# One entry per manual page. List of tuples
258149# (source start file, name, description, authors, manual section).
259150man_pages = [
260− (master_doc, 'servant', u'servant Documentation',
151+ (master_doc, 'servant', u'Servant Documentation',
261152 [author], 1)
262153]
263154
264−# If true, show URL addresses after external links.
265−#man_show_urls = False
266−
267155
268156# -- Options for Texinfo output -------------------------------------------
269157
@@ -271,24 +159,13 @@ man_pages = [
271159# (source start file, target name, title, author,
272160# dir menu entry, description, category)
273161texinfo_documents = [
274− (master_doc, 'servant', u'servant Documentation',
275− author, 'servant', 'One line description of project.',
276− 'Miscellaneous'),
162+ (master_doc, 'Servant', u'Servant Documentation',
163+ author, 'Servant', 'One line description of project.',
164+ 'Miscellaneous'),
277165]
278166
279−# Documents to append as an appendix to all manuals.
280−#texinfo_appendices = []
281−
282−# If false, no module index is generated.
283−#texinfo_domain_indices = True
284−
285−# How to display URL addresses: 'footnote', 'no', or 'inline'.
286−#texinfo_show_urls = 'footnote'
287−
288−# If true, do not generate a @detailmenu in the "Top" node's menu.
289−#texinfo_no_detailmenu = False
167+# -- Markdown -------------------------------------------------------------
290168
291169source_parsers = {
292− '.md': CommonMarkParser,
293170 '.lhs': CommonMarkParser,
294171}
doc/cookbook/basic-auth/BasicAuth.lhsnew file+179
@@ -0,0 +1,179 @@
1+# Basic Authentication
2+
3+Let's see a simple example of a web application with a
4+single endpoint, protected by
5+[Basic Authentication](https://en.wikipedia.org/wiki/Basic_access_authentication).
6+
7+First, some throat clearing.
8+
9+``` haskell
10+{-# LANGUAGE DataKinds #-}
11+{-# LANGUAGE OverloadedStrings #-}
12+{-# LANGUAGE TypeOperators #-}
13+import Control.Concurrent
14+import Control.Exception
15+import qualified Data.Map as Map
16+import qualified Data.Text as T
17+import Data.Text.Encoding (decodeUtf8)
18+import Network.HTTP.Client (newManager, defaultManagerSettings)
19+import Network.Wai.Handler.Warp
20+import Servant
21+import Servant.Client
22+```
23+
24+We will be dealing with a very simple model of users, as shown below.
25+Our "user database" will just be a map from usernames to full user details.
26+For the sake of simplicity, it will just be read only but the same code could
27+be used with mutable references, database connections, files and more in place
28+of our `Map`.
29+
30+``` haskell
31+type Username = T.Text
32+type Password = T.Text
33+type Website = T.Text
34+
35+data User = User
36+ { user :: Username
37+ , pass :: Password
38+ , site :: Website
39+ } deriving (Eq, Show)
40+
41+-- could be a postgres connection, a file, anything.
42+type UserDB = Map.Map Username User
43+
44+-- create a "database" from a list of users
45+createUserDB :: [User] -> UserDB
46+createUserDB users = Map.fromList [ (user u, u) | u <- users ]
47+
48+-- our test database
49+userDB :: UserDB
50+userDB = createUserDB
51+ [ User "john" "shhhh" "john.com"
52+ , User "foo" "bar" "foobar.net"
53+ ]
54+```
55+
56+Our API will contain a single endpoint, returning the authenticated
57+user's own website.
58+
59+``` haskell
60+-- a 'GET /mysite' endpoint, protected by basic authentication
61+type API = BasicAuth "People's websites" User :> "mysite" :> Get '[JSON] Website
62+
63+{- if there were more endpoints to be protected, one could write:
64+type API = BasicAuth "People's websites" User :>
65+ ( "foo" :> Get '[JSON] Foo
66+ :<|> "bar" :> Get '[JSON] Bar
67+ )
68+-}
69+
70+api :: Proxy API
71+api = Proxy
72+
73+server :: Server API
74+server usr = return (site usr)
75+```
76+
77+In order to protect our endpoint (`"mysite" :> Get '[JSON] Website`), we simply
78+drop the `BasicAuth` combinator in front of it. Its first parameter,
79+`"People's websites"` in our example, is the realm, which is an arbitrary string
80+identifying the protected resources. The second parameter, `User` in our example,
81+corresponds to the type we want to use to represent authenticated users. It could
82+be anything.
83+
84+When using `BasicAuth` in an API, the server implementation "gets" an argument
85+of the authenticated user type used with `BasicAuth`, `User` in our case, in the
86+"corresponding spot". In this example, the server implementation simply returns
87+the `site` field of the authenticated user. More realistic applications would
88+have endpoints that take other arguments and where a lot more logic would
89+be implemented. But in a sense, `BasicAuth` adds an argument just like `Capture`,
90+`QueryParam`, `ReqBody` and friends. But instead of performing some form of
91+decoding logic behind the scenes, servant runs some "basic auth check" that the
92+user provides.
93+
94+In our case, we need access to our user database, so we simply
95+take it as an argument. A more serious implementation would probably take
96+a database connection or even a connection pool.
97+
98+``` haskell
99+-- provided we are given a user database, we can supply
100+-- a function that checks the basic auth credentials
101+-- against our database.
102+checkBasicAuth :: UserDB -> BasicAuthCheck User
103+checkBasicAuth db = BasicAuthCheck $ \basicAuthData ->
104+ let username = decodeUtf8 (basicAuthUsername basicAuthData)
105+ password = decodeUtf8 (basicAuthPassword basicAuthData)
106+ in
107+ case Map.lookup username db of
108+ Nothing -> return NoSuchUser
109+ Just u -> if pass u == password
110+ then return (Authorized u)
111+ else return BadPassword
112+```
113+
114+This check simply looks up the user in the "database" and makes sure the
115+right password was used. For reference, here are the definitions of
116+`BasicAuthResult` and `BasicAuthCheck`:
117+
118+```
119+-- | The result of authentication/authorization
120+data BasicAuthResult usr
121+ = Unauthorized
122+ | BadPassword
123+ | NoSuchUser
124+ | Authorized usr
125+ deriving (Eq, Show, Read, Generic, Typeable, Functor)
126+
127+-- | Datatype wrapping a function used to check authentication.
128+newtype BasicAuthCheck usr = BasicAuthCheck
129+ { unBasicAuthCheck :: BasicAuthData
130+ -> IO (BasicAuthResult usr)
131+ }
132+ deriving (Generic, Typeable, Functor)
133+```
134+
135+This is all great, but how is our `BasicAuth` combinator supposed to know
136+that it should use our `checkBasicAuth` from above? The answer is that it
137+simply expects to find a `BasicAuthCheck` value for the right user type in
138+the `Context` with which we serve the application, where `Context` is just
139+servant's way to allow users to communicate some configuration of sorts to
140+combinators. It is nothing more than an heterogeneous list and we can create
141+a context with our auth check and run our application with it with the following
142+code:
143+
144+``` haskell
145+runApp :: UserDB -> IO ()
146+runApp db = run 8080 (serveWithContext api ctx server)
147+
148+ where ctx = checkBasicAuth db :. EmptyContext
149+```
150+
151+`ctx` above is just a context with one element, `checkBasicAuth db`,
152+whose type is `BasicAuthCheck User`. In order to say that we want to serve our
153+application using the supplied context, we just have to use `serveWithContext`
154+in place of `serve`.
155+
156+Finally, let's derive a client to this endpoint as well in order to see our
157+server in action!
158+
159+``` haskell
160+getSite :: BasicAuthData -> ClientM Website
161+getSite = client api
162+
163+main :: IO ()
164+main = do
165+ mgr <- newManager defaultManagerSettings
166+ bracket (forkIO $ runApp userDB) killThread $ \_ ->
167+ runClientM (getSite u) (mkClientEnv mgr (BaseUrl Http "localhost" 8080 ""))
168+ >>= print
169+
170+ where u = BasicAuthData "foo" "bar"
171+```
172+
173+This program prints `Right "foobar.net"`, as expected. Feel free to change this
174+code and see what happens when you specify credentials that are not in the
175+database.
176+
177+The entire program covered here is available as a literate Haskell file
178+[here](https://github.com/haskell-servant/servant/tree/master/doc/cookbook/basic-auth),
179+along with a `cabal` project.
doc/cookbook/basic-auth/basic-auth.cabalnew file+29
@@ -0,0 +1,29 @@
1+cabal-version: 2.2
2+name: cookbook-basic-auth
3+version: 0.1
4+synopsis: Basic Authentication cookbook example
5+homepage: http://docs.servant.dev/
6+license: BSD-3-Clause
7+license-file: ../../../servant/LICENSE
8+author: Servant Contributors
9+maintainer: haskell-servant-maintainers@googlegroups.com
10+build-type: Simple
11+tested-with: GHC==8.6.5, GHC==8.8.3, GHC ==8.10.7
12+
13+executable cookbook-basic-auth
14+ main-is: BasicAuth.lhs
15+ build-depends: base == 4.*
16+ , text >= 1.2
17+ , aeson >= 1.2
18+ , containers >= 0.5
19+ , servant
20+ , servant-client
21+ , servant-server
22+ , warp >= 3.2
23+ , wai >= 3.2
24+ , http-types >= 0.12
25+ , markdown-unlit >= 0.4
26+ , http-client >= 0.5
27+ default-language: Haskell2010
28+ ghc-options: -Wall -pgmL markdown-unlit
29+ build-tool-depends: markdown-unlit:markdown-unlit
doc/cookbook/basic-streaming/Streaming.lhsnew file+129
@@ -0,0 +1,129 @@
1+# Streaming out-of-the-box
2+
3+In other words, without streaming libraries.
4+
5+## Introduction
6+
7+- Servant supports streaming
8+- Some basic usage doesn't require usage of streaming libraries,
9+ like `conduit`, `pipes`, `machines` or `streaming`.
10+ We have bindings for them though.
11+- Similar example is bundled with each of our streaming library interop packages (see
12+[servant-pipes](https://github.com/haskell-servant/servant/blob/master/servant-pipes/example/Main.hs),
13+[servant-conduit](https://github.com/haskell-servant/servant/blob/master/servant-conduit/example/Main.hs) and
14+[servant-machines](https://github.com/haskell-servant/servant/blob/master/servant-machines/example/Main.hs))
15+- `SourceT` doesn't have *Prelude* with handy combinators, so we have to write
16+ things ourselves. (Note to self: `mapM` and `foldM` would be handy to have).
17+
18+## Code
19+
20+```haskell
21+{-# LANGUAGE BangPatterns #-}
22+{-# LANGUAGE DataKinds #-}
23+{-# LANGUAGE DeriveGeneric #-}
24+{-# LANGUAGE TypeOperators #-}
25+module Main (main) where
26+
27+import Control.Concurrent
28+ (threadDelay)
29+import Control.Monad.IO.Class
30+ (MonadIO (..))
31+import qualified Data.ByteString as BS
32+import Data.Maybe
33+ (fromMaybe)
34+import Network.HTTP.Client
35+ (defaultManagerSettings, newManager)
36+import Network.Wai
37+ (Application)
38+import System.Environment
39+ (getArgs, lookupEnv)
40+import Text.Read
41+ (readMaybe)
42+
43+import Servant
44+import Servant.Client.Streaming
45+import qualified Servant.Types.SourceT as S
46+
47+import qualified Network.Wai.Handler.Warp as Warp
48+
49+type FastAPI = "get" :> Capture "num" Int :> StreamGet NewlineFraming JSON (SourceIO Int)
50+
51+type API = FastAPI
52+ :<|> "slow" :> Capture "num" Int :> StreamGet NewlineFraming JSON (SourceIO Int)
53+ -- monad can be ResourceT IO too.
54+ :<|> "readme" :> StreamGet NoFraming OctetStream (SourceIO BS.ByteString)
55+ -- we can have streaming request body
56+ :<|> "proxy"
57+ :> StreamBody NoFraming OctetStream (SourceIO BS.ByteString)
58+ :> StreamPost NoFraming OctetStream (SourceIO BS.ByteString)
59+
60+api :: Proxy API
61+api = Proxy
62+
63+server :: Server API
64+server = fast :<|> slow :<|> readme :<|> proxy where
65+ fast n = liftIO $ do
66+ putStrLn $ "/get/" ++ show n
67+ return $ fastSource n
68+
69+ slow n = liftIO $ do
70+ putStrLn $ "/slow/" ++ show n
71+ return $ slowSource n
72+
73+ readme = liftIO $ do
74+ putStrLn "/proxy"
75+ return (S.readFile "README.md")
76+
77+ proxy c = liftIO $ do
78+ putStrLn "/proxy"
79+ return c
80+
81+ -- for some reason unfold leaks?
82+ fastSource = S.fromStepT . mk where
83+ mk m
84+ | m < 0 = S.Stop
85+ | otherwise = S.Yield m (mk (m - 1))
86+
87+ slowSource m = S.mapStepT delay (fastSource m) where
88+ delay S.Stop = S.Stop
89+ delay (S.Error err) = S.Error err
90+ delay (S.Skip s) = S.Skip (delay s)
91+ delay (S.Effect ms) = S.Effect (fmap delay ms)
92+ delay (S.Yield x s) = S.Effect $
93+ S.Yield x (delay s) <$ threadDelay 1000000
94+
95+app :: Application
96+app = serve api server
97+
98+cli :: Client ClientM FastAPI
99+cli :<|> _ :<|> _ :<|> _ = client api
100+
101+main :: IO ()
102+main = do
103+ args <- getArgs
104+ case args of
105+ ("server":_) -> do
106+ putStrLn "Starting cookbook-basic-streaming at http://localhost:8000"
107+ port <- fromMaybe 8000 . (>>= readMaybe) <$> lookupEnv "PORT"
108+ Warp.run port app
109+ ("client":ns:_) -> do
110+ n <- maybe (fail $ "not a number: " ++ ns) pure $ readMaybe ns
111+ mgr <- newManager defaultManagerSettings
112+ burl <- parseBaseUrl "http://localhost:8000/"
113+ withClientM (cli n) (mkClientEnv mgr burl) $ \me -> case me of
114+ Left err -> print err
115+ Right src -> do
116+ x <- S.unSourceT src (go (0 :: Int))
117+ print x
118+ where
119+ go !acc S.Stop = return acc
120+ go !acc (S.Error err) = print err >> return acc
121+ go !acc (S.Skip s) = go acc s
122+ go !acc (S.Effect ms) = ms >>= go acc
123+ go !acc (S.Yield _ s) = go (acc + 1) s
124+ _ -> do
125+ putStrLn "Try:"
126+ putStrLn "cabal new-run cookbook-basic-streaming server"
127+ putStrLn "cabal new-run cookbook-basic-streaming client 10"
128+ putStrLn "time curl -H 'Accept: application/json' localhost:8000/slow/5"
129+```
doc/cookbook/basic-streaming/basic-streaming.cabalnew file+28
@@ -0,0 +1,28 @@
1+cabal-version: 2.2
2+name: cookbook-basic-streaming
3+version: 2.1
4+synopsis: Streaming in servant without streaming libs
5+homepage: http://docs.servant.dev/
6+license: BSD-3-Clause
7+license-file: ../../../servant/LICENSE
8+author: Servant Contributors
9+maintainer: haskell-servant-maintainers@googlegroups.com
10+build-type: Simple
11+tested-with: GHC==8.6.5, GHC==8.8.3, GHC ==8.10.7
12+
13+executable cookbook-basic-streaming
14+ main-is: Streaming.lhs
15+ build-tool-depends: markdown-unlit:markdown-unlit
16+ default-language: Haskell2010
17+ ghc-options: -Wall -pgmL markdown-unlit -threaded -rtsopts
18+
19+ hs-source-dirs: .
20+ build-depends: base >= 4.8 && <5
21+ , aeson
22+ , bytestring
23+ , servant
24+ , servant-server
25+ , servant-client
26+ , http-client
27+ , wai
28+ , warp
doc/cookbook/cabal.projectnew file+22
@@ -0,0 +1,22 @@
1+packages:
2+ basic-auth/
3+ curl-mock/
4+ db-mysql-basics/
5+ db-sqlite-simple/
6+ db-postgres-pool/
7+ using-custom-monad/
8+ jwt-and-basic-auth/
9+ hoist-server-with-context/
10+ file-upload/
11+ structuring-apis/
12+ https/
13+ pagination/
14+ sentry/
15+ testing/
16+ open-id-connect/
17+ ../../servant
18+ ../../servant-server
19+ ../../servant-client-core
20+ ../../servant-client
21+ ../../servant-docs
22+ ../../servant-foreign
doc/cookbook/cabal.project.localnew file

No changes to the content.

doc/cookbook/curl-mock/CurlMock.lhsnew file+205
@@ -0,0 +1,205 @@
1+# Generating mock curl calls
2+
3+In this example we will generate curl requests with mock post data from a servant API.
4+This may be useful for testing and development purposes.
5+Especially post requests with a request body are tedious to send manually.
6+
7+Also, we will learn how to use the servant-foreign library to generate stuff from servant APIs.
8+
9+
10+Language extensions and imports:
11+``` haskell
12+{-# LANGUAGE DataKinds #-}
13+{-# LANGUAGE DeriveGeneric #-}
14+{-# LANGUAGE FlexibleContexts #-}
15+{-# LANGUAGE FlexibleInstances #-}
16+{-# LANGUAGE GeneralizedNewtypeDeriving #-}
17+{-# LANGUAGE MultiParamTypeClasses #-}
18+{-# LANGUAGE OverloadedStrings #-}
19+{-# LANGUAGE RankNTypes #-}
20+{-# LANGUAGE RecordWildCards #-}
21+{-# LANGUAGE ScopedTypeVariables #-}
22+{-# LANGUAGE TypeOperators #-}
23+
24+import Control.Lens ((^.))
25+import Data.Aeson
26+import Data.Aeson.Text
27+import Data.Proxy (Proxy (Proxy))
28+import Data.Text (Text)
29+import Data.Text.Encoding (decodeUtf8)
30+import qualified Data.Text.IO as T.IO
31+import qualified Data.Text.Lazy as LazyT
32+import GHC.Generics
33+import Servant ((:<|>), (:>), Get, JSON,
34+ Post, ReqBody)
35+import Servant.Foreign (Foreign, GenerateList,
36+ HasForeign, HasForeignType, Req,
37+ Segment, SegmentType (Cap, Static),
38+ argName, listFromAPI, path,
39+ reqBody, reqMethod, reqUrl, typeFor,
40+ unPathSegment, unSegment,)
41+import Test.QuickCheck.Arbitrary
42+import Test.QuickCheck.Arbitrary.Generic
43+import Test.QuickCheck.Gen (generate)
44+import qualified Data.Text as T
45+
46+```
47+
48+
49+Let's define our API:
50+
51+``` haskell
52+type UserAPI = "users" :> Get '[JSON] [User]
53+ :<|> "new" :> "user" :> ReqBody '[JSON] User :> Post '[JSON] ()
54+
55+data User = User
56+ { name :: String
57+ , age :: Int
58+ , email :: String
59+ } deriving (Eq, Show, Generic)
60+
61+instance Arbitrary User where
62+ arbitrary = genericArbitrary
63+ shrink = genericShrink
64+instance ToJSON User
65+instance FromJSON User
66+```
67+
68+Notice the `Arbitrary User` instance which we will later need to create mock data.
69+
70+Also, the obligatory servant boilerplate:
71+
72+``` haskell
73+api :: Proxy UserAPI
74+api = Proxy
75+```
76+
77+
78+## servant-foreign and the HasForeignType Class
79+
80+Servant-foreign allows us to look into the API we designed.
81+The entry point is `listFromAPI` which takes three types and returns a list of endpoints:
82+
83+``` haskell ignore
84+listFromAPI :: (HasForeign lang ftype api, GenerateList ftype (Foreign ftype api)) => Proxy lang -> Proxy ftype -> Proxy api -> [Req ftype]
85+```
86+
87+This looks a bit confusing...
88+[Here](https://hackage.haskell.org/package/servant-foreign/docs/Servant-Foreign.html#t:HasForeign) is the documentation for the `HasForeign` typeclass.
89+We will not go into details here, but this allows us to create a value of type `ftype` for any type `a` in our API.
90+
91+In our case we want to create a mock of every type `a`.
92+
93+We create a new datatype that holds our mocked value. Well, not the mocked value itself. To mock it we need IO (random). So the promise of a mocked value after some IO is performed:
94+
95+``` haskell
96+data NoLang
97+
98+data Mocked = Mocked (IO Text)
99+```
100+
101+Now, we create an instance of `HasForeignType` for `NoLang` and `Mocked` for every `a` that implements `ToJSON` and `Arbitrary`:
102+``` haskell
103+instance (ToJSON a, Arbitrary a) => HasForeignType NoLang Mocked a where
104+ typeFor _ _ _ =
105+ Mocked (genText (Proxy :: Proxy a))
106+```
107+
108+What does `genText` do? It generates an arbitrary value of type `a` and encodes it as text. (And does some lazy to non-lazy text transformation we do not care about):
109+
110+``` haskell
111+genText :: (ToJSON a, Arbitrary a) => Proxy a -> IO Text
112+genText p =
113+ fmap (\v -> LazyT.toStrict $ encodeToLazyText v) (genArb p)
114+
115+genArb :: Arbitrary a => Proxy a -> IO a
116+genArb _ =
117+ generate arbitrary
118+```
119+
120+### Generating curl calls for every endpoint
121+
122+Everything is prepared now and we can start generating some curl calls.
123+
124+``` haskell
125+generateCurl :: (GenerateList Mocked (Foreign Mocked api), HasForeign NoLang Mocked api)
126+ => Proxy api
127+ -> Text
128+ -> IO Text
129+generateCurl p host =
130+ fmap T.unlines body
131+ where
132+ body = mapM (generateEndpoint host)
133+ $ listFromAPI (Proxy :: Proxy NoLang) (Proxy :: Proxy Mocked) p
134+```
135+
136+First, `listFromAPI` gives us a list of `Req Mocked`. Each `Req` describes one endpoint from the API type.
137+We generate a curl call for each of them using the following helper.
138+
139+``` haskell
140+generateEndpoint :: Text -> Req Mocked -> IO Text
141+generateEndpoint host req =
142+ case maybeBody of
143+ Just body ->
144+ body >>= \b -> return $ T.intercalate " " [ "curl", "-X", method, "-d", "'" <> b <> "'"
145+ , "-H 'Content-Type: application/json'", host <> "/" <> url ]
146+ Nothing ->
147+ return $ T.intercalate " " [ "curl", "-X", method, host <> "/" <> url ]
148+ where
149+ method = decodeUtf8 $ req ^. reqMethod
150+
151+ url = T.intercalate "/" $ map segment (req ^. reqUrl . path)
152+
153+ maybeBody = fmap (\(Mocked io) -> io) (req ^. reqBody)
154+
155+```
156+`servant-foreign` offers a multitude of lenses to be used with `Req`-values.
157+
158+`reqMethod` gives us a straigthforward `Network.HTTP.Types.Method`, `reqUrl` the url part and so on.
159+Just take a look at [the docs](https://hackage.haskell.org/package/servant-foreign/docs/Servant-Foreign.html).
160+
161+But how do we get our mocked json string? This seems to be a bit to short to be true:
162+
163+``` haskell ignore
164+maybeBody = fmap (\(Mocked io) -> io) (req ^. reqBody)
165+```
166+
167+But it is that simple!
168+The docs say `reqBody` gives us a `Maybe f`. What is `f`, you ask? As defined in `generateCurl`, `f` is `Mocked` and contains a `IO Text`. How is this `Mocked` value created? The `HasForeignType::typeFor` does it!
169+
170+Of course only if the endpoint has a request body.
171+
172+
173+Some (incomplete) code for url segments:
174+``` haskell
175+segment :: Segment Mocked -> Text
176+segment seg =
177+ case unSegment seg of
178+ Static p ->
179+ unPathSegment p
180+
181+ Cap arg ->
182+ -- Left as exercise for the reader: Mock args in the url
183+ unPathSegment $ arg ^. argName
184+```
185+
186+And now, lets hook it all up in our main function:
187+
188+``` haskell
189+main :: IO ()
190+main =
191+ generateCurl api "localhost:8081" >>= T.IO.putStrLn
192+```
193+
194+Done:
195+
196+``` curl
197+curl -X GET localhost:8081/users
198+curl -X POST -d '{"email":"wV򝣀_b򆎘:z񁊞򲙲!(3DM V","age":10,"name":"=|W"}' -H 'Content-Type: application/json' localhost:8081/new/user
199+
200+```
201+
202+This is of course no complete curl call mock generator, many things including path arguments are missing.
203+But it correctly generates mock calls for simple POST requests.
204+
205+Also, we now know how to use `HasForeignType` and `listFromAPI` to generate anything we want.
doc/cookbook/curl-mock/curl-mock.cabalnew file+29
@@ -0,0 +1,29 @@
1+cabal-version: 2.2
2+name: cookbook-curl-mock
3+version: 0.1
4+synopsis: Generate curl mock requests cookbook example
5+homepage: http://docs.servant.dev
6+license: BSD-3-Clause
7+license-file: ../../../servant/LICENSE
8+author: Servant Contributors
9+maintainer: haskell-servant-maintainers@googlegroups.com
10+build-type: Simple
11+tested-with: GHC==8.6.5, GHC==8.8.3, GHC ==8.10.7
12+
13+executable cookbock-curl-mock
14+ if impl(ghc >= 9.2)
15+ -- generic-arbitrary is incompatible
16+ buildable: False
17+ main-is: CurlMock.lhs
18+ build-depends: base == 4.*
19+ , aeson
20+ , lens
21+ , text
22+ , servant
23+ , servant-server
24+ , servant-foreign
25+ , QuickCheck
26+ , generic-arbitrary
27+ default-language: Haskell2010
28+ ghc-options: -Wall -pgmL markdown-unlit
29+ build-tool-depends: markdown-unlit:markdown-unlit
doc/cookbook/custom-errors/CustomErrors.lhsnew file+189
@@ -0,0 +1,189 @@
1+# Customizing errors from Servant
2+
3+Servant handles a lot of parsing and validation of the input request. When it can't parse something: query
4+parameters, URL parts or request body, it will return appropriate HTTP codes like 400 Bad Request.
5+
6+These responses will contain the error message in their body without any formatting. However, it is often
7+desirable to be able to provide custom formatting for these error messages, for example, to wrap them in JSON.
8+
9+Recently Servant got a way to add such formatting. This Cookbook chapter demonstrates how to use it.
10+
11+Extensions and imports:
12+```haskell
13+{-# LANGUAGE DataKinds #-}
14+{-# LANGUAGE DeriveGeneric #-}
15+{-# LANGUAGE OverloadedStrings #-}
16+{-# LANGUAGE PolyKinds #-}
17+{-# LANGUAGE TypeFamilies #-}
18+{-# LANGUAGE TypeOperators #-}
19+
20+import Data.Aeson
21+import Data.Proxy
22+import Data.Text
23+import GHC.Generics
24+import Network.Wai
25+import Network.Wai.Handler.Warp
26+
27+import Servant
28+
29+import Data.String.Conversions
30+ (cs)
31+import Servant.API.ContentTypes
32+```
33+
34+The API (from `greet.hs` example in Servant sources):
35+
36+```haskell
37+-- | A greet message data type
38+newtype Greet = Greet { _msg :: Text }
39+ deriving (Generic, Show)
40+
41+instance FromJSON Greet
42+instance ToJSON Greet
43+
44+-- API specification
45+type TestApi =
46+ -- GET /hello/:name?capital={true, false} returns a Greet as JSON
47+ "hello" :> Capture "name" Text :> QueryParam "capital" Bool :> Get '[JSON] Greet
48+
49+ -- POST /greet with a Greet as JSON in the request body,
50+ -- returns a Greet as JSON
51+ :<|> "greet" :> ReqBody '[JSON] Greet :> Post '[JSON] Greet
52+
53+ -- DELETE /greet/:greetid
54+ :<|> "greet" :> Capture "greetid" Text :> Delete '[JSON] NoContent
55+
56+testApi :: Proxy TestApi
57+testApi = Proxy
58+
59+-- Server-side handlers.
60+--
61+-- There's one handler per endpoint, which, just like in the type
62+-- that represents the API, are glued together using :<|>.
63+--
64+-- Each handler runs in the 'Handler' monad.
65+server :: Server TestApi
66+server = helloH :<|> postGreetH :<|> deleteGreetH
67+
68+ where helloH name Nothing = helloH name (Just False)
69+ helloH name (Just False) = return . Greet $ "Hello, " <> name
70+ helloH name (Just True) = return . Greet . toUpper $ "Hello, " <> name
71+
72+ postGreetH greet = return greet
73+
74+ deleteGreetH _ = return NoContent
75+```
76+
77+## Error formatters
78+
79+`servant-server` provides an `ErrorFormatter` type to specify how the error message will be
80+formatted. A formatter is just a function accepting three parameters:
81+
82+- `TypeRep` from `Data.Typeable`: this is a runtime representation of the type of the combinator
83+ (like `Capture` or `ReqBody`) that generated the error. It can be used to display its name (with
84+ `show`) or even dynamically dispatch on the combinator type. See the docs for `Data.Typeable` and
85+ `Type.Reflection` modules.
86+- `Request`: full information for the request that led to the error.
87+- `String`: specific error message from the combinator.
88+
89+The formatter is expected to produce a `ServerError` which will be returned from the handler.
90+
91+Additionally, there is `NotFoundErrorFormatter`, which accepts only `Request` and can customize the
92+error in case when no route can be matched (HTTP 404).
93+
94+Let's make two formatters. First one will wrap our error in a JSON:
95+
96+```json
97+{
98+ "error": "ERROR MESSAGE",
99+ "combinator": "NAME OF THE COMBINATOR"
100+}
101+```
102+
103+Additionally, this formatter will examine the `Accept` header of the request and generate JSON
104+message only if client can accept it.
105+
106+```haskell
107+customFormatter :: ErrorFormatter
108+customFormatter tr req err =
109+ let
110+ -- aeson Value which will be sent to the client
111+ value = object ["combinator" .= show tr, "error" .= err]
112+ -- Accept header of the request
113+ accH = getAcceptHeader req
114+ in
115+ -- handleAcceptH is Servant's function that checks whether the client can accept a
116+ -- certain message type.
117+ -- In this case we call it with "Proxy '[JSON]" argument, meaning that we want to return a JSON.
118+ case handleAcceptH (Proxy :: Proxy '[JSON]) accH value of
119+ -- If client can't handle JSON, we just return the body the old way
120+ Nothing -> err400 { errBody = cs err }
121+ -- Otherwise, we return the JSON formatted body and set the "Content-Type" header.
122+ Just (ctypeH, body) -> err400
123+ { errBody = body
124+ , errHeaders = [("Content-Type", cs ctypeH)]
125+ }
126+
127+notFoundFormatter :: NotFoundErrorFormatter
128+notFoundFormatter req =
129+ err404 { errBody = cs $ "Not found path: " <> rawPathInfo req }
130+```
131+
132+If you don't need to react to the `Accept` header, you can just unconditionally return the JSON like
133+this (with `encode` from `Data.Aeson`):
134+
135+```
136+err400
137+ { errBody = encode body
138+ , errHeaders = [("Content-Type", "application/json")]
139+ }
140+```
141+
142+## Passing formatters to Servant
143+
144+Servant uses the Context to configure formatters. You only need to add a value of type
145+`ErrorFormatters` to your context. This is a record with the following fields:
146+
147+- `bodyParserErrorFormatter :: ErrorFormatter`
148+- `urlParseErrorFormatter :: ErrorFormatter`
149+- `headerParseErrorFormatter :: ErrorFormatter`
150+- `notFoundErrorFormatter :: NotFoundErrorFormatter`
151+
152+Default formatters are exported as `defaultErrorFormatters`, so you can use record update syntax to
153+set the only ones you need:
154+
155+```haskell
156+customFormatters :: ErrorFormatters
157+customFormatters = defaultErrorFormatters
158+ { bodyParserErrorFormatter = customFormatter
159+ , notFoundErrorFormatter = notFoundFormatter
160+ }
161+```
162+
163+And at last, use `serveWithContext` to run your server as usual:
164+
165+```haskell
166+app :: Application
167+app = serveWithContext testApi (customFormatters :. EmptyContext) server
168+
169+main :: IO ()
170+main = run 8000 app
171+```
172+
173+Now if we try to request something with a wrong body, we will get a nice error:
174+
175+```
176+$ http -j POST localhost:8000/greet 'foo=bar'
177+HTTP/1.1 400 Bad Request
178+Content-Type: application/json;charset=utf-8
179+Date: Fri, 17 Jul 2020 13:34:18 GMT
180+Server: Warp/3.3.12
181+Transfer-Encoding: chunked
182+
183+{
184+ "combinator": "ReqBody'",
185+ "error": "Error in $: parsing Main.Greet(Greet) failed, key \"_msg\" not found"
186+}
187+```
188+
189+Notice the `Content-Type` header set by our combinator.
doc/cookbook/custom-errors/custom-errors.cabalnew file+25
@@ -0,0 +1,25 @@
1+cabal-version: 2.2
2+name: cookbook-custom-errors
3+version: 0.1
4+synopsis: Return custom error messages from combinators
5+homepage: http://docs.servant.dev
6+license: BSD-3-Clause
7+license-file: ../../../servant/LICENSE
8+author: Servant Contributors
9+maintainer: haskell-servant-maintainers@googlegroups.com
10+build-type: Simple
11+tested-with: GHC==8.6.5, GHC==8.8.3, GHC ==8.10.7
12+
13+executable cookbook-custom-errors
14+ main-is: CustomErrors.lhs
15+ build-depends: base == 4.*
16+ , aeson
17+ , servant
18+ , servant-server
19+ , string-conversions
20+ , text
21+ , wai
22+ , warp
23+ default-language: Haskell2010
24+ ghc-options: -Wall -pgmL markdown-unlit
25+ build-tool-depends: markdown-unlit:markdown-unlit
doc/cookbook/db-mysql-basics/MysqlBasics.lhsnew file+236
@@ -0,0 +1,236 @@
1+# Overview
2+
3+This doc will walk through a single-module implementation of a servant API connecting to a MySQL database. It will also include some basic CRUD operations.
4+
5+Once you can wrap your head around this implementation, understanding more complex features like resource pools would be beneficial next steps.
6+
7+The only *prerequisite* is that you have a MySQL database open on port 3306 of your machine. Docker is an easy way to manage this.
8+
9+## Setup
10+
11+- The mysql database should be up and running on 127.0.0.1:3306
12+
13+- Our API will be exposed on localhost:8080
14+
15+## REST actions available
16+
17+*Get all people*
18+
19+```
20+/people GET
21+```
22+
23+*Get person by ID*
24+
25+```
26+/people/:id GET
27+```
28+
29+*Insert a new person*
30+
31+```
32+/people POST
33+
34+{
35+ "name": "NewName",
36+ "age": 24
37+}
38+```
39+
40+*Delete a person*
41+
42+```
43+/people/:id DELETE
44+```
45+
46+## Other notes
47+
48+At the time of writing this issue may occur when building your project:
49+
50+```
51+setup: Missing dependencies on foreign libraries:
52+* Missing (or bad) C libraries: ssl, crypto
53+```
54+
55+If using stack, this can be fixed by adding the following lines to your `stack.yaml`:
56+
57+```
58+extra-include-dirs:
59+- /usr/local/opt/openssl/include
60+extra-lib-dirs:
61+- /usr/local/opt/openssl/lib
62+```
63+
64+Or for cabal, running your builds with these configurations passed as options.
65+
66+## Implementation: Main.hs
67+
68+Let's jump in:
69+
70+```haskell
71+{-# LANGUAGE DataKinds #-}
72+{-# LANGUAGE DeriveGeneric #-}
73+{-# LANGUAGE FlexibleInstances #-}
74+{-# LANGUAGE GADTs #-}
75+{-# LANGUAGE GeneralizedNewtypeDeriving #-}
76+{-# LANGUAGE MultiParamTypeClasses #-}
77+{-# LANGUAGE QuasiQuotes #-}
78+{-# LANGUAGE TemplateHaskell #-}
79+{-# LANGUAGE TypeFamilies #-}
80+{-# LANGUAGE TypeOperators #-}
81+module Lib where
82+
83+import Control.Monad.IO.Class (liftIO)
84+import Control.Monad.Logger (NoLoggingT (..))
85+import Control.Monad.Trans.Reader (runReaderT)
86+import Control.Monad.Trans.Resource (ResourceT, runResourceT)
87+import Data.Aeson as JSON
88+import Data.Int (Int64 (..))
89+import Data.Text (Text)
90+import qualified Data.Text as T
91+import qualified Data.Text.IO as T
92+import Database.Persist
93+import Database.Persist.MySQL (ConnectInfo (..),
94+ SqlBackend (..),
95+ defaultConnectInfo, fromSqlKey, runMigration,
96+ runSqlPool, toSqlKey, withMySQLConn)
97+import Database.Persist.Sql (SqlPersistT, runSqlConn)
98+import Database.Persist.TH (mkMigrate, mkPersist,
99+ persistLowerCase, share,
100+ sqlSettings)
101+import Database.Persist.Types (PersistValue(PersistInt64))
102+import Servant (Handler, throwError)
103+
104+import GHC.Generics
105+import Network.Wai
106+import Network.Wai.Handler.Warp
107+import Servant
108+import Servant.API
109+import System.Environment (getArgs)
110+
111+share [mkPersist sqlSettings, mkMigrate "migrateAll"] [persistLowerCase|
112+Person json
113+ Id Int Primary Unique
114+ name Text
115+ age Text
116+ deriving Eq Show Generic
117+|]
118+
119+type Api =
120+ "person" :> Get '[JSON] [Person]
121+ :<|> "person" :> Capture "id" Int :> Get '[JSON] Person
122+ :<|> "person" :> Capture "id" Int :> Delete '[JSON] ()
123+ :<|> "person" :> ReqBody '[JSON] Person :> Post '[JSON] Person
124+
125+apiProxy :: Proxy Api
126+apiProxy = Proxy
127+
128+app :: Application
129+app = serve apiProxy server
130+
131+-- Run a database operation, and lift the result into a Handler.
132+-- This minimises usage of IO operations in other functions
133+runDB :: SqlPersistT (ResourceT (NoLoggingT IO)) a -> Handler a
134+runDB a = liftIO $ runNoLoggingT $ runResourceT $ withMySQLConn connInfo $ runSqlConn a
135+
136+-- Change these out to suit your local setup
137+connInfo :: ConnectInfo
138+connInfo = defaultConnectInfo { connectHost = "127.0.0.1", connectUser = "root", connectPassword = "abcd", connectDatabase = "test-database" }
139+
140+doMigration :: IO ()
141+doMigration = runNoLoggingT $ runResourceT $ withMySQLConn connInfo $ runReaderT $ runMigration migrateAll
142+
143+server :: Server Api
144+server =
145+ personGET :<|>
146+ personGETById :<|>
147+ personDELETE :<|>
148+ personPOST
149+ where
150+ personGET = selectPersons
151+ personGETById id = selectPersonById id
152+ personDELETE id = deletePerson id
153+ personPOST personJson = createPerson personJson
154+
155+selectPersons :: Handler [Person]
156+selectPersons = do
157+ personList <- runDB $ selectList [] []
158+ return $ map (\(Entity _ u) -> u) personList
159+
160+selectPersonById :: Int -> Handler Person
161+selectPersonById id = do
162+ sqlResult <- runDB $ get $ PersonKey id
163+ case sqlResult of
164+ Just person -> return person
165+ Nothing -> throwError err404 { errBody = JSON.encode "Person with ID not found." }
166+
167+createPerson :: Person -> Handler Person
168+createPerson person = do
169+ attemptCreate <- runDB $ insert person
170+ case attemptCreate of
171+ PersonKey k -> return person
172+ _ -> throwError err503 { errBody = JSON.encode "Could not create Person." }
173+
174+deletePerson :: Int -> Handler ()
175+deletePerson id = do runDB $ delete $ PersonKey id
176+
177+startApp :: IO ()
178+startApp = do
179+ args <- getArgs
180+ let arg1 = if not (null args) then Just (head args) else Nothing
181+ case arg1 of
182+ Just "migrate" -> doMigration
183+ _ -> run 8080 app
184+```
185+
186+## Sample requests
187+
188+Assuming that you have the db running and have first run `stack exec run migrate`, the following sample requests will test your API:
189+
190+*Create a person*
191+
192+```bash
193+curl -X POST \
194+ http://localhost:8080/person \
195+ -H 'Accept: */*' \
196+ -H 'Accept-Encoding: gzip, deflate' \
197+ -H 'Cache-Control: no-cache' \
198+ -H 'Connection: keep-alive' \
199+ -H 'Content-Length: 62' \
200+ -H 'Content-Type: application/json' \
201+ -H 'Host: localhost:8080' \
202+ -H 'cache-control: no-cache' \
203+ -d '{
204+ "name": "Jake",
205+ "age": "25"
206+}'
207+```
208+
209+*Get all persons*
210+
211+```bash
212+curl -X GET \
213+ http://localhost:8080/person \
214+ -H 'Accept: */*' \
215+ -H 'Accept-Encoding: gzip, deflate' \
216+ -H 'Cache-Control: no-cache' \
217+ -H 'Connection: keep-alive' \
218+ -H 'Content-Length: 33' \
219+ -H 'Content-Type: application/json' \
220+ -H 'Host: localhost:8080' \
221+ -H 'cache-control: no-cache'
222+```
223+
224+*Get person by ID*
225+
226+```bash
227+curl -X GET \
228+ http://localhost:8080/person/1 \
229+ -H 'Accept: */*' \
230+ -H 'Accept-Encoding: gzip, deflate' \
231+ -H 'Cache-Control: no-cache' \
232+ -H 'Connection: keep-alive' \
233+ -H 'Content-Type: application/json' \
234+ -H 'Host: localhost:8080' \
235+ -H 'cache-control: no-cache'
236+```
doc/cookbook/db-mysql-basics/mysql-basics.cabalnew file+40
@@ -0,0 +1,40 @@
1+cabal-version: 2.2
2+name: mysql-basics
3+version: 0.1.0.0
4+synopsis: Simple MySQL API cookbook example
5+homepage: http://docs.servant.dev/
6+license: BSD-3-Clause
7+license-file: ../../../servant/LICENSE
8+author: Servant Contributors
9+maintainer: haskell-servant-maintainers@googlegroups.com
10+build-type: Simple
11+
12+executable run
13+ hs-source-dirs: .
14+ main-is: MysqlBasics.hs
15+ ghc-options: -threaded -rtsopts -with-rtsopts=-N
16+ build-depends: aeson
17+ , base
18+ , bytestring
19+ , http-client
20+ , monad-logger
21+ , mysql-simple
22+ , persistent
23+ , persistent-mysql
24+ , persistent-template
25+ , resource-pool
26+ , resourcet
27+ , servant
28+ , servant-client
29+ , servant-server
30+ , text
31+ , transformers
32+ , wai
33+ , warp
34+ default-language: Haskell2010
35+ ghc-options: -Wall -pgmL markdown-unlit
36+ build-tool-depends: markdown-unlit:markdown-unlit
37+
38+source-repository head
39+ type: git
40+ location: https://github.com/githubuser/mysql-basics
doc/cookbook/db-postgres-pool/PostgresPool.lhsnew file+143
@@ -0,0 +1,143 @@
1+# PostgreSQL connection pool
2+
3+Let's see how we can write a simple web application that uses a
4+[PostgreSQL](https://www.postgresql.org/) database to store simple textual
5+messages, just like in the SQLite cookbook recipe. The main difference,
6+besides the database technology, is that in this example we will be using
7+a pool of connections to talk to the database server. The pool abstraction
8+will be provided by the
9+[resource-pool](https://hackage.haskell.org/package/resource-pool) library.
10+
11+As usual, we start with a little bit of throat clearing.
12+
13+``` haskell
14+{-# LANGUAGE DataKinds #-}
15+{-# LANGUAGE OverloadedStrings #-}
16+{-# LANGUAGE TypeOperators #-}
17+import Data.ByteString (ByteString)
18+import Control.Concurrent
19+import Control.Exception (bracket)
20+import Control.Monad.IO.Class
21+import Data.Pool
22+import Database.PostgreSQL.Simple
23+import Network.HTTP.Client (newManager, defaultManagerSettings)
24+import Network.Wai.Handler.Warp
25+import Servant
26+import Servant.Client
27+
28+type DBConnectionString = ByteString
29+```
30+
31+We will only care about a single type here, the messages. We want to
32+be able to add a new one and retrieve them all, using two different
33+endpoints.
34+
35+``` haskell
36+type Message = String
37+
38+type API = ReqBody '[PlainText] Message :> Post '[JSON] NoContent
39+ :<|> Get '[JSON] [Message]
40+
41+api :: Proxy API
42+api = Proxy
43+```
44+
45+We proceed with a simple function for creating a table
46+for holding our messages if it doesn't already exist, given
47+a PostgreSQL connection string.
48+
49+``` haskell
50+initDB :: DBConnectionString -> IO ()
51+initDB connstr = bracket (connectPostgreSQL connstr) close $ \conn -> do
52+ execute_ conn
53+ "CREATE TABLE IF NOT EXISTS messages (msg text not null)"
54+ return ()
55+```
56+
57+Next, our server implementation. It will be parametrised (take as
58+argument) by the pool of database connections that handlers can use to
59+talk to the PostgreSQL database. The resource pool abstraction allows us
60+to flexibly set up a whole bunch of PostgreSQL connections tailored to our
61+needs and then to forget about it all by simply asking for a connection
62+using `withResource`.
63+
64+The handlers are straightforward. One takes care of inserting a new
65+value in the database while the other fetches all messages and returns
66+them. We also provide a function for serving our web app given a PostgreSQL
67+connection pool, which simply calls servant-server's `serve` function.
68+
69+``` haskell
70+server :: Pool Connection -> Server API
71+server conns = postMessage :<|> getMessages
72+
73+ where postMessage :: Message -> Handler NoContent
74+ postMessage msg = do
75+ liftIO . withResource conns $ \conn ->
76+ execute conn
77+ "INSERT INTO messages VALUES (?)"
78+ (Only msg)
79+ return NoContent
80+
81+ getMessages :: Handler [Message]
82+ getMessages = fmap (map fromOnly) . liftIO $
83+ withResource conns $ \conn ->
84+ query_ conn "SELECT msg FROM messages"
85+
86+runApp :: Pool Connection -> IO ()
87+runApp conns = run 8080 (serve api $ server conns)
88+```
89+
90+We will also need a function for initialising our connection pool.
91+`resource-pool` is quite configurable, feel free to wander in
92+[its documentation](https://hackage.haskell.org/package/resource-pool)
93+to gain a better understanding of how it works and what the configuration
94+knobs are. I will be using some dummy values in this example.
95+
96+``` haskell
97+initConnectionPool :: DBConnectionString -> IO (Pool Connection)
98+initConnectionPool connStr =
99+ createPool (connectPostgreSQL connStr)
100+ close
101+ 2 -- stripes
102+ 60 -- unused connections are kept open for a minute
103+ 10 -- max. 10 connections open per stripe
104+```
105+
106+Let's finally derive some clients for our API and use them to
107+insert two messages and retrieve them in `main`, after setting up
108+our pool of database connections.
109+
110+``` haskell
111+postMsg :: Message -> ClientM NoContent
112+getMsgs :: ClientM [Message]
113+postMsg :<|> getMsgs = client api
114+
115+main :: IO ()
116+main = do
117+ -- you could read this from some configuration file,
118+ -- environment variable or somewhere else instead.
119+ -- you will need to either change this connection string OR
120+ -- set some environment variables (see
121+ -- https://www.postgresql.org/docs/9.5/static/libpq-envars.html)
122+ -- to point to a running PostgreSQL server for this example to work.
123+ let connStr = ""
124+ pool <- initConnectionPool connStr
125+ initDB connStr
126+ mgr <- newManager defaultManagerSettings
127+ bracket (forkIO $ runApp pool) killThread $ \_ -> do
128+ ms <- flip runClientM (mkClientEnv mgr (BaseUrl Http "localhost" 8080 "")) $ do
129+ postMsg "hello"
130+ postMsg "world"
131+ getMsgs
132+ print ms
133+```
134+
135+This program prints `Right ["hello","world"]` the first time it is executed,
136+`Right ["hello","world","hello","world"]` the second time and so on.
137+
138+You could alternatively have the handlers live in `ReaderT (Pool Connection)`
139+and access the pool using e.g `ask`, but this would be more complicated
140+than simply taking the pool as argument.
141+
142+The entire source for this example is available as a cabal project
143+[here](https://github.com/haskell-servant/servant/tree/master/doc/cookbook/db-postgres-pool).
doc/cookbook/db-postgres-pool/db-postgres-pool.cabalnew file+32
@@ -0,0 +1,32 @@
1+cabal-version: 2.2
2+name: cookbook-db-postgres-pool
3+version: 0.1
4+synopsis: Simple PostgreSQL connection pool cookbook example
5+homepage: http://docs.servant.dev/
6+license: BSD-3-Clause
7+license-file: ../../../servant/LICENSE
8+author: Servant Contributors
9+maintainer: haskell-servant-maintainers@googlegroups.com
10+build-type: Simple
11+tested-with: GHC==8.6.5, GHC==8.8.3, GHC ==8.10.7
12+
13+executable cookbook-db-postgres-pool
14+ main-is: PostgresPool.lhs
15+ build-depends: base == 4.*
16+ , bytestring >= 0.10
17+ , text >= 1.2
18+ , aeson >= 1.2
19+ , servant
20+ , servant-client
21+ , servant-server
22+ , warp >= 3.2
23+ , wai >= 3.2
24+ , http-types >= 0.12
25+ , markdown-unlit >= 0.4
26+ , http-client >= 0.5
27+ , postgresql-simple >= 0.5
28+ , resource-pool >= 0.2
29+ , transformers
30+ default-language: Haskell2010
31+ ghc-options: -Wall -pgmL markdown-unlit
32+ build-tool-depends: markdown-unlit:markdown-unlit
doc/cookbook/db-sqlite-simple/DBConnection.lhsnew file+100
@@ -0,0 +1,100 @@
1+# SQLite database
2+
3+Let's see how we can write a simple web application that uses an
4+[SQLite](https://www.sqlite.org/) database to store simple textual
5+messages. As usual, we start with a little bit of throat clearing.
6+
7+``` haskell
8+{-# LANGUAGE DataKinds #-}
9+{-# LANGUAGE OverloadedStrings #-}
10+{-# LANGUAGE TypeOperators #-}
11+import Control.Concurrent
12+import Control.Exception (bracket)
13+import Control.Monad.IO.Class
14+import Database.SQLite.Simple
15+import Network.HTTP.Client (newManager, defaultManagerSettings)
16+import Network.Wai.Handler.Warp
17+import Servant
18+import Servant.Client
19+```
20+
21+We will only care about a single type here, the messages. We want to
22+be able to add a new one and retrieve them all, using two different
23+endpoints.
24+
25+``` haskell
26+type Message = String
27+
28+type API = ReqBody '[PlainText] Message :> Post '[JSON] NoContent
29+ :<|> Get '[JSON] [Message]
30+
31+api :: Proxy API
32+api = Proxy
33+```
34+
35+We proceed with a simple function for creating a table
36+for holding our messages if it doesn't already exist.
37+
38+``` haskell
39+initDB :: FilePath -> IO ()
40+initDB dbfile = withConnection dbfile $ \conn ->
41+ execute_ conn
42+ "CREATE TABLE IF NOT EXISTS messages (msg text not null)"
43+```
44+
45+Next, our server implementation. It will be parametrised (take as an
46+argument) by the name of the file that contains our SQLite database.
47+The handlers are straightforward. One takes care of inserting a new
48+value in the database while the other fetches all messages and returns
49+them. We also provide a function for serving our web app given an
50+SQLite database file, which simply calls servant-server's `serve` function.
51+
52+``` haskell
53+server :: FilePath -> Server API
54+server dbfile = postMessage :<|> getMessages
55+
56+ where postMessage :: Message -> Handler NoContent
57+ postMessage msg = do
58+ liftIO . withConnection dbfile $ \conn ->
59+ execute conn
60+ "INSERT INTO messages VALUES (?)"
61+ (Only msg)
62+ return NoContent
63+
64+ getMessages :: Handler [Message]
65+ getMessages = fmap (map fromOnly) . liftIO $
66+ withConnection dbfile $ \conn ->
67+ query_ conn "SELECT msg FROM messages"
68+
69+runApp :: FilePath -> IO ()
70+runApp dbfile = run 8080 (serve api $ server dbfile)
71+```
72+
73+Let's also derive some clients for our API and use them to
74+insert two messages and retrieve them in `main`.
75+
76+``` haskell
77+postMsg :: Message -> ClientM NoContent
78+getMsgs :: ClientM [Message]
79+postMsg :<|> getMsgs = client api
80+
81+main :: IO ()
82+main = do
83+ -- you could read this from some configuration file,
84+ -- environment variable or somewhere else instead.
85+ let dbfile = "test.db"
86+ initDB dbfile
87+ mgr <- newManager defaultManagerSettings
88+ bracket (forkIO $ runApp dbfile) killThread $ \_ -> do
89+ ms <- flip runClientM (mkClientEnv mgr (BaseUrl Http "localhost" 8080 "")) $ do
90+ postMsg "hello"
91+ postMsg "world"
92+ getMsgs
93+ print ms
94+```
95+
96+This program prints `Right ["hello","world"]` the first time it is executed,
97+`Right ["hello","world","hello","world"]` the second time and so on.
98+
99+The entire source for this example is available as a cabal project
100+[here](https://github.com/haskell-servant/servant/tree/master/doc/cookbook/db-sqlite-simple).
doc/cookbook/db-sqlite-simple/db-sqlite-simple.cabalnew file+30
@@ -0,0 +1,30 @@
1+cabal-version: 2.2
2+name: cookbook-db-sqlite-simple
3+version: 0.1
4+synopsis: Simple SQLite DB cookbook example
5+homepage: http://docs.servant.dev/
6+license: BSD-3-Clause
7+license-file: ../../../servant/LICENSE
8+author: Servant Contributors
9+maintainer: haskell-servant-maintainers@googlegroups.com
10+build-type: Simple
11+tested-with: GHC==8.6.5, GHC==8.8.3, GHC ==8.10.7
12+
13+executable cookbook-db-sqlite-simple
14+ main-is: DBConnection.lhs
15+ build-depends: base == 4.*
16+ , text >= 1.2
17+ , aeson >= 1.2
18+ , servant
19+ , servant-client
20+ , servant-server
21+ , warp >= 3.2
22+ , wai >= 3.2
23+ , http-types >= 0.12
24+ , markdown-unlit >= 0.4
25+ , http-client >= 0.5
26+ , sqlite-simple >= 0.4.5.0
27+ , transformers
28+ default-language: Haskell2010
29+ ghc-options: -Wall -pgmL markdown-unlit
30+ build-tool-depends: markdown-unlit:markdown-unlit
doc/cookbook/file-upload/FileUpload.lhsnew file+140
@@ -0,0 +1,140 @@
1+# File Upload (`multipart/form-data`)
2+
3+In this recipe, we will implement a web application
4+with a single endpoint that can process
5+`multipart/form-data` request bodies, which most
6+commonly come from HTML forms that allow file upload.
7+
8+As usual, a bit of throat clearing.
9+
10+``` haskell
11+{-# LANGUAGE DataKinds #-}
12+{-# LANGUAGE TypeOperators #-}
13+{-# LANGUAGE OverloadedStrings #-}
14+
15+import Control.Concurrent
16+import Control.Exception
17+import Control.Monad
18+import Control.Monad.IO.Class
19+import Data.Text.Encoding (encodeUtf8)
20+import Network.Socket (withSocketsDo)
21+import Network.HTTP.Client hiding (Proxy)
22+import Network.HTTP.Client.MultipartFormData
23+import Network.Wai.Handler.Warp
24+import Servant
25+import Servant.Multipart
26+
27+import qualified Data.ByteString.Lazy as LBS
28+```
29+
30+Our API consists in a single `POST` endpoint at `/`
31+that takes a `multipart/form-data` request body and
32+pretty-prints the data it got to stdout before returning `0`
33+(because why not).
34+
35+``` haskell
36+type API = MultipartForm Mem (MultipartData Mem) :> Post '[JSON] Integer
37+
38+api :: Proxy API
39+api = Proxy
40+```
41+
42+Because of some technicalities, multipart form data is not
43+represented as a good old content type like `JSON` in servant,
44+that one could use with `ReqBody`, but instead is its own
45+dedicated `ReqBody`-like combinator named
46+[`MultiPartForm`](https://hackage.haskell.org/package/servant-multipart-0.11/docs/Servant-Multipart.html#t:MultipartForm).
47+
48+This combinator takes two parameters. The first one is the
49+"backend" to use. Currently, you only have the choice between
50+`Mem` and `Tmp`. The former loads the entire input in memory,
51+even the uploaded files, while `Tmp` will stream uploaded
52+files to some temporary directory.
53+
54+The second parameter is the type you want the multipart data
55+to be decoded to. Indeed there is a `FromMultipart` class that
56+allows you to specify how to decode multipart form data from
57+`MultipartData` to a custom type of yours. Here we use the
58+trivial "decoding" to `MultipartData` itself, and simply
59+will get our hands on the raw input. If you want to use
60+a type of yours, see the documentation for
61+[`FromMultipart`](https://hackage.haskell.org/package/servant-multipart-0.11/docs/Servant-Multipart.html#t:FromMultipart).
62+
63+Our only request handler has type `MultipartData Mem -> Handler Integer`.
64+All it does is list the textual and file inputs that
65+were sent in the multipart request body. The textual
66+inputs are in the `inputs` field while the file inputs
67+are in the `files` field of `multipartData`.
68+
69+``` haskell
70+-- MultipartData consists in textual inputs,
71+-- accessible through its "inputs" field, as well
72+-- as files, accessible through its "files" field.
73+upload :: Server API
74+upload multipartData = do
75+ liftIO $ do
76+ putStrLn "Inputs:"
77+ forM_ (inputs multipartData) $ \input ->
78+ putStrLn $ " " ++ show (iName input)
79+ ++ " -> " ++ show (iValue input)
80+
81+ forM_ (files multipartData) $ \file -> do
82+ let content = fdPayload file
83+ putStrLn $ "Content of " ++ show (fdFileName file)
84+ LBS.putStr content
85+ return 0
86+
87+startServer :: IO ()
88+startServer = run 8080 (serve api upload)
89+```
90+
91+Finally, a main function that brings up our server and
92+sends some test request with `http-client` (and not
93+servant-client this time, as servant-multipart does not
94+yet have support for client generation).
95+
96+``` haskell
97+main :: IO ()
98+main = withSocketsDo . bracket (forkIO startServer) killThread $ \_threadid -> do
99+ -- we fork the server in a separate thread and send a test
100+ -- request to it from the main thread.
101+ manager <- newManager defaultManagerSettings
102+ req <- parseRequest "http://localhost:8080/"
103+ resp <- flip httpLbs manager =<< formDataBody form req
104+ print resp
105+
106+ where form =
107+ [ partBS "title" "World"
108+ , partBS "text" $ encodeUtf8 "Hello"
109+ , partFileSource "file" "./README.md"
110+ ]
111+```
112+
113+If you run this, you should get:
114+
115+``` bash
116+$ cabal new-build cookbook-file-upload
117+[...]
118+$ dist-newstyle/build/x86_64-linux/ghc-8.2.1/cookbook-file-upload-0.1/x/cookbook-file-upload/build/cookbook-file-upload/cookbook-file-upload
119+Inputs:
120+ "title" -> "World"
121+ "text" -> "Hello"
122+Content of "README.md"
123+# servant - A Type-Level Web DSL
124+
125+![servant](https://raw.githubusercontent.com/haskell-servant/servant/master/servant.png)
126+
127+## Getting Started
128+
129+We have a [tutorial](http://docs.servant.dev/en/stable/tutorial/index.html) that
130+introduces the core features of servant. After this article, you should be able
131+to write your first servant webservices, learning the rest from the haddocks'
132+examples.
133+
134+[...]
135+
136+Response {responseStatus = Status {statusCode = 200, statusMessage = "OK"}, responseVersion = HTTP/1.1, responseHeaders = [("Transfer-Encoding","chunked"),("Date","Fri, 08 Dec 2017 16:50:14 GMT"),("Server","Warp/3.2.13"),("Content-Type","application/json;charset=utf-8")], responseBody = "0", responseCookieJar = CJ {expose = []}, responseClose' = ResponseClose}
137+```
138+
139+As usual, the code for this recipe is available in a cabal project
140+[here](https://github.com/haskell-servant/servant/tree/master/doc/cookbook/file-upload).
doc/cookbook/file-upload/file-upload.cabalnew file+30
@@ -0,0 +1,30 @@
1+cabal-version: 2.2
2+name: cookbook-file-upload
3+version: 0.1
4+synopsis: File upload cookbook example
5+homepage: http://docs.servant.dev/
6+license: BSD-3-Clause
7+license-file: ../../../servant/LICENSE
8+author: Servant Contributors
9+maintainer: haskell-servant-maintainers@googlegroups.com
10+build-type: Simple
11+tested-with: GHC==8.6.5, GHC==8.8.3, GHC ==8.10.7
12+
13+executable cookbook-file-upload
14+ main-is: FileUpload.lhs
15+ build-depends: base == 4.*
16+ , text >= 1.2
17+ , mtl >= 2.1
18+ , network >= 2.6
19+ , bytestring >= 0.10
20+ , servant
21+ , servant-server
22+ , servant-multipart
23+ , transformers
24+ , warp >= 3.2
25+ , wai >= 3.2
26+ , markdown-unlit >= 0.4
27+ , http-client >= 0.5
28+ default-language: Haskell2010
29+ ghc-options: -Wall -pgmL markdown-unlit
30+ build-tool-depends: markdown-unlit:markdown-unlit
doc/cookbook/generic/Generic.lhsnew file+141
@@ -0,0 +1,141 @@
1+# Using generics
2+
3+```haskell
4+{-# LANGUAGE DataKinds #-}
5+{-# LANGUAGE DeriveGeneric #-}
6+{-# LANGUAGE RankNTypes #-}
7+{-# LANGUAGE TypeOperators #-}
8+module Main (main, api, getLink, routesLinks, cliGet) where
9+
10+import Control.Exception (throwIO)
11+import Control.Monad.Trans.Reader (ReaderT, runReaderT)
12+import Data.Proxy (Proxy (..))
13+import Network.Wai.Handler.Warp (run)
14+import System.Environment (getArgs)
15+
16+import Servant
17+import Servant.Client
18+
19+import Servant.API.Generic
20+import Servant.Client.Generic
21+import Servant.Server.Generic
22+```
23+
24+The usage is simple, if you only need a collection of routes.
25+First you define a record with field types prefixed by a parameter `route`:
26+
27+```haskell
28+data Routes route = Routes
29+ { _get :: route :- Capture "id" Int :> Get '[JSON] String
30+ , _put :: route :- ReqBody '[JSON] Int :> Put '[JSON] Bool
31+ }
32+ deriving (Generic)
33+```
34+
35+Then we'll use this data type to define API, links, server and client.
36+
37+## API
38+
39+You can get a `Proxy` of the API using `genericApi`:
40+
41+```haskell
42+api :: Proxy (ToServantApi Routes)
43+api = genericApi (Proxy :: Proxy Routes)
44+```
45+
46+It's recommended to use `genericApi` function, as then you'll get
47+better error message, for example if you forget to `derive Generic`.
48+
49+## Links
50+
51+The clear advantage of record-based generics approach, is that
52+we can get safe links very conveniently. We don't need to define endpoint types,
53+as field accessors work as proxies:
54+
55+```haskell
56+getLink :: Int -> Link
57+getLink = fieldLink _get
58+```
59+
60+We can also get all links at once, as a record:
61+
62+```haskell
63+routesLinks :: Routes (AsLink Link)
64+routesLinks = allFieldLinks
65+```
66+
67+## Client
68+
69+Even more power starts to show when we generate a record of client functions.
70+Here we use `genericClientHoist` function, which lets us simultaneously
71+hoist the monad, in this case from `ClientM` to `IO`.
72+
73+```haskell
74+cliRoutes :: Routes (AsClientT IO)
75+cliRoutes = genericClientHoist
76+ (\x -> runClientM x env >>= either throwIO return)
77+ where
78+ env = error "undefined environment"
79+
80+cliGet :: Int -> IO String
81+cliGet = _get cliRoutes
82+```
83+
84+## Server
85+
86+Finally, probably the most handy usage: we can convert record of handlers into
87+the server implementation:
88+
89+```haskell
90+record :: Routes AsServer
91+record = Routes
92+ { _get = return . show
93+ , _put = return . odd
94+ }
95+
96+app :: Application
97+app = genericServe record
98+
99+main :: IO ()
100+main = do
101+ args <- getArgs
102+ case args of
103+ ("run":_) -> do
104+ putStrLn "Starting cookbook-generic at http://localhost:8000"
105+ run 8000 app
106+ -- see this cookbook below for custom-monad explanation
107+ ("run-custom-monad":_) -> do
108+ putStrLn "Starting cookbook-generic with a custom monad at http://localhost:8000"
109+ run 8000 (appMyMonad AppCustomState)
110+ _ -> putStrLn "To run, pass 'run' argument: cabal new-run cookbook-generic run"
111+```
112+
113+## Using generics together with a custom monad
114+
115+If your app uses a custom monad, here's how you can combine it with
116+generics.
117+
118+```haskell
119+data AppCustomState =
120+ AppCustomState
121+
122+type AppM = ReaderT AppCustomState Handler
123+
124+apiMyMonad :: Proxy (ToServantApi Routes)
125+apiMyMonad = genericApi (Proxy :: Proxy Routes)
126+
127+getRouteMyMonad :: Int -> AppM String
128+getRouteMyMonad = return . show
129+
130+putRouteMyMonad :: Int -> AppM Bool
131+putRouteMyMonad = return . odd
132+
133+recordMyMonad :: Routes (AsServerT AppM)
134+recordMyMonad = Routes {_get = getRouteMyMonad, _put = putRouteMyMonad}
135+
136+-- natural transformation
137+nt :: AppCustomState -> AppM a -> Handler a
138+nt s x = runReaderT x s
139+
140+appMyMonad :: AppCustomState -> Application
141+appMyMonad state = genericServeT (nt state) recordMyMonad
doc/cookbook/generic/generic.cabalnew file+25
@@ -0,0 +1,25 @@
1+cabal-version: 2.2
2+name: cookbook-generic
3+version: 0.1
4+synopsis: Using custom monad to pass a state between handlers
5+homepage: http://docs.servant.dev/
6+license: BSD-3-Clause
7+license-file: ../../../servant/LICENSE
8+author: Servant Contributors
9+maintainer: haskell-servant-maintainers@googlegroups.com
10+build-type: Simple
11+tested-with: GHC==8.6.5, GHC==8.8.3, GHC ==8.10.7
12+
13+executable cookbook-using-custom-monad
14+ main-is: Generic.lhs
15+ build-depends: base == 4.*
16+ , servant
17+ , servant-client
18+ , servant-client-core
19+ , servant-server
20+ , base-compat
21+ , warp >= 3.2
22+ , transformers >= 0.3
23+ default-language: Haskell2010
24+ ghc-options: -Wall -pgmL markdown-unlit
25+ build-tool-depends: markdown-unlit:markdown-unlit >= 0.4
doc/cookbook/hoist-server-with-context/HoistServerWithContext.lhsnew file+413
@@ -0,0 +1,413 @@
1+# Hoist Server With Context for Custom Monads
2+
3+In this example we'll combine some of the patterns we've seen in other examples
4+in order to demonstrate using a custom monad with Servant's `Context` and the function
5+`hoistServerWithContext`.
6+
7+`hoistServerWithContext` is a pattern you may encounter if you are trying to use a library such as
8+[servant-auth-server](https://hackage.haskell.org/package/servant-auth-server) along
9+with your own custom monad.
10+
11+In this example, our custom monad will be based on the commonly used `ReaderT env IO a` stack.
12+We'll create an `AppCtx` to represent our `env` and include some logging utilities as well as
13+other variables we'd like to have available.
14+
15+In addition, in order to demonstrate a custom `Context`, we'll also include authentication in
16+our example. As noted previously (in [jwt-and-basic-auth](../jwt-and-basic-auth/JWTAndBasicAuth.lhs)),
17+while basic authentication comes with Servant itself,
18+[servant-auth](https://hackage.haskell.org/package/servant-auth) and
19+[servant-auth-server](https://hackage.haskell.org/package/servant-auth-server)
20+packages are needed for JWT-based authentication.
21+
22+Finally, we're going to use [fast-logger](http://hackage.haskell.org/package/fast-logger)
23+for our logging example below.
24+
25+This recipe uses the following ingredients:
26+
27+```haskell
28+{-# LANGUAGE DataKinds #-}
29+{-# LANGUAGE DeriveGeneric #-}
30+{-# LANGUAGE OverloadedStrings #-}
31+{-# LANGUAGE TypeFamilies #-}
32+{-# LANGUAGE TypeOperators #-}
33+
34+import Prelude ()
35+import Prelude.Compat
36+
37+import Control.Monad.IO.Class (liftIO)
38+import Control.Monad.Reader
39+import Data.Aeson
40+import Data.Default
41+import Data.Proxy
42+import Data.Text
43+import Data.Time.Clock ( UTCTime, getCurrentTime )
44+import GHC.Generics
45+import Network.Wai (Middleware)
46+import Network.Wai.Handler.Warp as Warp
47+import Network.Wai.Middleware.RequestLogger
48+import Network.Wai.Middleware.RequestLogger.JSON
49+import Servant as S
50+import Servant.Auth as SA
51+import Servant.Auth.Server as SAS
52+import System.Log.FastLogger ( ToLogStr(..)
53+ , LoggerSet
54+ , defaultBufSize
55+ , newStdoutLoggerSet
56+ , flushLogStr
57+ , pushLogStrLn )
58+
59+
60+port :: Int
61+port = 3001
62+```
63+
64+## Custom Monad
65+
66+Let's say we'd like to create a custom monad based on `ReaderT env` in order to hold
67+access to a config object as well as some logging utilities.
68+
69+With that, we could define an `AppCtx` and `AppM` like this:
70+
71+```haskell
72+type AppM = ReaderT AppCtx Handler
73+
74+data AppCtx = AppCtx {
75+ _getConfig :: SiteConfig
76+ , _getLogger :: LoggerSet
77+ }
78+
79+data SiteConfig = SiteConfig {
80+ environment :: !Text
81+ , version :: !Text
82+ , adminUsername :: !Text
83+ , adminPasswd :: !Text
84+} deriving (Generic, Show)
85+```
86+
87+This `SiteConfig` is a simple example: it refers to our deployment environment as well as an
88+application version. For instance, we may do something different based on the environment our app is
89+deployed into. When emitting log messages, we may want to include information about
90+the deployed version of our application.
91+
92+In addition, we're going to identify a single admin user in our config and use
93+that definition to authenticate requests inside our handlers. This is not too
94+flexible (and probably not too secure...), but it works as a simple example.
95+
96+## Logging
97+
98+A common contemporary pattern is to emit log messages as JSON for later ingestion
99+into a database like Elasticsearch.
100+
101+To emit JSON log messages, we'll create a `LogMessage` object and make it so we can turn it
102+into a JSON-encoded `LogStr` (a type from `fast-logger`).
103+
104+```haskell
105+data LogMessage = LogMessage {
106+ message :: !Text
107+ , timestamp :: !UTCTime
108+ , level :: !Text
109+ , lversion :: !Text
110+ , lenvironment :: !Text
111+} deriving (Eq, Show, Generic)
112+
113+instance FromJSON LogMessage
114+instance ToJSON LogMessage where
115+ toEncoding = genericToEncoding defaultOptions
116+
117+instance ToLogStr LogMessage where
118+ toLogStr = toLogStr . encode
119+```
120+
121+Eventually, when we'd like to emit a log message inside one of our Handlers, it'll look like this:
122+
123+```haskell
124+sampleHandler :: AppM LogMessage
125+sampleHandler = do
126+ config <- asks _getConfig
127+ logset <- asks _getLogger
128+
129+ tstamp <- liftIO getCurrentTime
130+ let logMsg = LogMessage { message = "let's do some logging!"
131+ , timestamp = tstamp
132+ , level = "info"
133+ , lversion = version config
134+ , lenvironment = environment config
135+ }
136+ -- emit log message
137+ liftIO $ pushLogStrLn logset $ toLogStr logMsg
138+ -- return handler result (for simplicity, result is also a LogMessage)
139+ pure logMsg
140+```
141+
142+## Authentication
143+
144+To demonstrate the other part of this recipe, we are going to use a simple
145+representation of a user, someone who may have access to an admin section of our site:
146+
147+```haskell
148+data AdminUser = AdminUser { name :: Text }
149+ deriving (Eq, Show, Read, Generic)
150+```
151+
152+The following instances are needed for JWT:
153+
154+```haskell
155+instance ToJSON AdminUser
156+instance FromJSON AdminUser
157+instance SAS.ToJWT AdminUser
158+instance SAS.FromJWT AdminUser
159+```
160+
161+## API
162+
163+Now we can define our API.
164+
165+We'll have an `admin` endpoint and a `login` endpoint that takes a `LoginForm`:
166+
167+```haskell
168+type AdminApi =
169+ "admin" :> Get '[JSON] LogMessage
170+
171+type LoginApi =
172+ "login"
173+ :> ReqBody '[JSON] LoginForm
174+ :> Post '[JSON] (Headers '[ Header "Set-Cookie" SetCookie, Header "Set-Cookie" SetCookie] LogMessage)
175+
176+data LoginForm = LoginForm {
177+ username :: Text
178+ , password :: Text
179+} deriving (Eq, Show, Generic)
180+
181+instance ToJSON LoginForm
182+instance FromJSON LoginForm
183+```
184+
185+We can combine both APIs into one like so:
186+
187+```haskell
188+type AdminAndLogin auths = (SAS.Auth auths AdminUser :> AdminApi) :<|> LoginApi
189+```
190+
191+## Server
192+
193+When we define our server, we'll have to define handlers for the `AdminApi` and the `LoginApi` and
194+we'll have to supply `JWTSettings` and `CookieSettings` so our `login` handler can authenticate users:
195+
196+```haskell
197+adminServer :: SAS.CookieSettings -> SAS.JWTSettings -> ServerT (AdminAndLogin auths) AppM
198+adminServer cs jwts = adminHandler :<|> loginHandler cs jwts
199+```
200+
201+The `admin` route should receive an authenticated `AdminUser` as an argument
202+or it should return a `401`:
203+
204+```haskell
205+adminHandler :: AuthResult AdminUser -> AppM LogMessage
206+adminHandler (SAS.Authenticated adminUser) = do
207+ config <- asks _getConfig
208+ logset <- asks _getLogger
209+
210+ tstamp <- liftIO getCurrentTime
211+ let logMsg = LogMessage { message = "Admin User accessing admin: " <> name adminUser
212+ , timestamp = tstamp
213+ , level = "info"
214+ , lversion = version config
215+ , lenvironment = environment config
216+ }
217+ -- emit log message
218+ liftIO $ pushLogStrLn logset $ toLogStr logMsg
219+ -- return handler result (for simplicity, result is a LogMessage)
220+ pure logMsg
221+adminHandler _ = throwError err401
222+```
223+
224+By contrast, the `login` handler is waiting for a `POST` with a login form.
225+
226+If login is successful, it will set session cookies and return a value.
227+
228+Here we're going to include lots of log messages:
229+
230+```haskell
231+loginHandler :: CookieSettings
232+ -> JWTSettings
233+ -> LoginForm
234+ -> AppM (Headers '[ Header "Set-Cookie" SetCookie, Header "Set-Cookie" SetCookie] LogMessage)
235+loginHandler cookieSettings jwtSettings form = do
236+ config <- asks _getConfig
237+ logset <- asks _getLogger
238+
239+ tstamp <- liftIO getCurrentTime
240+ let logMsg = LogMessage { message = "AdminUser login attempt failed!"
241+ , timestamp = tstamp
242+ , level = "info"
243+ , lversion = version config
244+ , lenvironment = environment config
245+ }
246+ case validateLogin config form of
247+ Nothing -> do
248+ liftIO $ pushLogStrLn logset $ toLogStr logMsg
249+ throwError err401
250+ Just usr -> do
251+ mApplyCookies <- liftIO $ SAS.acceptLogin cookieSettings jwtSettings usr
252+ case mApplyCookies of
253+ Nothing -> do
254+ liftIO $ pushLogStrLn logset $ toLogStr logMsg
255+ throwError err401
256+ Just applyCookies -> do
257+ let successMsg = logMsg{message = "AdminUser successfully authenticated!"}
258+ liftIO $ pushLogStrLn logset $ toLogStr successMsg
259+ pure $ applyCookies successMsg
260+loginHandler _ _ _ = throwError err401
261+
262+validateLogin :: SiteConfig -> LoginForm -> Maybe AdminUser
263+validateLogin config (LoginForm uname passwd ) =
264+ if (uname == adminUsername config) && (passwd == adminPasswd config)
265+ then Just $ AdminUser uname
266+ else Nothing
267+```
268+
269+## `serveWithContext` and `hoistServerWithContext`
270+
271+In order to build a working server, we'll need to `hoist` our custom monad
272+into Servant's Handler monad. We'll also need to pass in the proper context to ensure
273+authentication will work.
274+
275+This will require both `serveWithContext` and `hoistServerWithContext`.
276+
277+Let's define the function which will create our `Application`:
278+
279+```haskell
280+adminLoginApi :: Proxy (AdminAndLogin '[JWT])
281+adminLoginApi = Proxy
282+
283+mkApp :: Context '[SAS.CookieSettings, SAS.JWTSettings] -> CookieSettings -> JWTSettings -> AppCtx -> Application
284+mkApp cfg cs jwts ctx =
285+ serveWithContext adminLoginApi cfg $
286+ hoistServerWithContext adminLoginApi (Proxy :: Proxy '[SAS.CookieSettings, SAS.JWTSettings])
287+ (flip runReaderT ctx) (adminServer cs jwts)
288+```
289+
290+One footnote: because we'd like our logs to be in JSON form, we'll also create a `Middleware` object
291+so that `Warp` *also* will emit logs as JSON. This will ensure *all* logs are emitted as JSON:
292+
293+```haskell
294+jsonRequestLogger :: IO Middleware
295+jsonRequestLogger =
296+ mkRequestLogger $ def { outputFormat = CustomOutputFormatWithDetails formatAsJSON }
297+```
298+
299+We now have all the pieces we need to serve our application inside a `main` function:
300+
301+```haskell
302+main :: IO ()
303+main = do
304+ -- typically, we'd create our config from environment variables
305+ -- but we're going to just make one here
306+ let config = SiteConfig "dev" "1.0.0" "admin" "secretPassword"
307+
308+ warpLogger <- jsonRequestLogger
309+ appLogger <- newStdoutLoggerSet defaultBufSize
310+
311+ tstamp <- getCurrentTime
312+ myKey <- generateKey
313+
314+ let lgmsg = LogMessage {
315+ message = "My app starting up!"
316+ , timestamp = tstamp
317+ , level = "info"
318+ , lversion = version config
319+ , lenvironment = environment config
320+ }
321+ pushLogStrLn appLogger (toLogStr lgmsg) >> flushLogStr appLogger
322+
323+ let ctx = AppCtx config appLogger
324+
325+ warpSettings = Warp.defaultSettings
326+ portSettings = Warp.setPort port warpSettings
327+ settings = Warp.setTimeout 55 portSettings
328+ jwtCfg = defaultJWTSettings myKey
329+ cookieCfg = if environment config == "dev"
330+ then defaultCookieSettings{cookieIsSecure=SAS.NotSecure}
331+ else defaultCookieSettings
332+ cfg = cookieCfg :. jwtCfg :. EmptyContext
333+
334+ Warp.runSettings settings $ warpLogger $ mkApp cfg cookieCfg jwtCfg ctx
335+```
336+
337+
338+## Usage
339+
340+Now we can run it and try it out with `curl`. In one terminal, let's run our application
341+and see what our log output looks like:
342+
343+```$ ./cookbook-hoist-server-with-context
344+{"message":"My app starting up!","timestamp":"2018-10-04T00:33:12.482568Z","level":"info","lversion":"1.0.0","lenvironment":"dev"}
345+```
346+
347+In another terminal, let's ensure that it fails with `err401` if
348+we're not authenticated:
349+
350+```
351+$ curl -v 'http://localhost:3001/admin'
352+…
353+< HTTP/1.1 401 Unauthorized
354+```
355+
356+```
357+$ curl -v -XPOST 'http://localhost:3001/login' \
358+ -H "Content-Type:application/json" \
359+ -d '{"username": "bad", "password": "wrong"}'
360+…
361+< HTTP/1.1 401 Unauthorized
362+```
363+
364+And in the other terminal with our log messages (from our JSON `Middleware`):
365+
366+```
367+{"time":"03/Oct/2018:17:35:56 -0700","response":{"status":401,"size":null,"body":""},"request":{"httpVersion":"1.1","path":"/admin","size":0,"body":"","durationMs":0.22,"remoteHost":{"hostAddress":"127.0.0.1","port":51029},"headers":[["Host","localhost:3001"],["User-Agent","curl/7.60.0"],["Accept","*/*"]],"queryString":[],"method":"GET"}}
368+```
369+
370+Now let's see that authentication works, and that we get JWTs:
371+
372+```
373+$ curl -v -XPOST 'http://localhost:3001/login' \
374+ -H "Content-Type:application/json" \
375+ -d '{"username": "admin", "password": "secretPassword"}'
376+…
377+< HTTP/1.1 200 OK
378+...
379+< Server: Warp/3.2.25
380+< Content-Type: application/json;charset=utf-8
381+< Set-Cookie: JWT-Cookie=eyJhbGciOiJIUzUxMiJ9.eyJkYXQiOnsibmFtZSI6ImFkbWluIn19.SIoRcABKSO4mXnRifzqPWlHJUhVwuy32Qon7s1E_c3vHOsLXdXyX4V4eXOw9tMFoeIqgsXMZucqoFb36vAdKwQ; Path=/; HttpOnly; SameSite=Lax
382+< Set-Cookie: XSRF-TOKEN=y5PmrYHX3ywFUCwGRQqHh1TDheTLiQpwRQB3FFRd8N4=; Path=/
383+...
384+{"message":"AdminUser succesfully authenticated!","timestamp":"2018-10-04T00:37:44.455441Z","level":"info","lversion":"1.0.0","lenvironment":"dev"}
385+```
386+
387+And in the other terminal with our log messages (note that logging out passwords is insecure...):
388+
389+```
390+{"message":"AdminUser succesfully authenticated!","timestamp":"2018-10-04T00:37:44.455441Z","level":"info","lversion":"1.0.0","lenvironment":"dev"}
391+{"time":"03/Oct/2018:17:37:44 -0700","response":{"status":200,"size":null,"body":null},"request":{"httpVersion":"1.1","path":"/login","size":51,"body":"{\"username\": \"admin\", \"password\": \"secretPassword\"}","durationMs":0.23,"remoteHost":{"hostAddress":"127.0.0.1","port":51044},"headers":[["Host","localhost:3001"],["User-Agent","curl/7.60.0"],["Accept","*/*"],["Content-Type","application/json"],["Content-Length","51"]],"queryString":[],"method":"POST"}}
392+```
393+
394+Finally, let's make sure we can access a protected resource with our tokens:
395+
396+```
397+$ export jwt=eyJhbGciOiJIUzUxMiJ9.eyJkYXQiOnsibmFtZSI6ImFkbWluIn19.SIoRcABKSO4mXnRifzqPWlHJUhVwuy32Qon7s1E_c3vHOsLXdXyX4V4eXOw9tMFoeIqgsXMZucqoFb36vAdKwQ
398+$ curl -v \
399+ -H "Authorization: Bearer $jwt" \
400+ 'http://localhost:3001/admin'
401+…
402+< HTTP/1.1 200 OK
403+{"message":"Admin User accessing admin: admin","timestamp":"2018-10-04T00:58:07.216605Z","level":"info","lversion":"1.0.0","lenvironment":"dev"}
404+```
405+
406+And we should see this message logged-out as well:
407+
408+```
409+{"message":"Admin User accessing admin: admin","timestamp":"2018-10-04T00:58:07.216605Z","level":"info","lversion":"1.0.0","lenvironment":"dev"}
410+```
411+
412+This program is available as a cabal project
413+[here](https://github.com/haskell-servant/servant/tree/master/doc/cookbook/hoist-server-with-context).
doc/cookbook/hoist-server-with-context/hoist-server-with-context.cabalnew file+37
@@ -0,0 +1,37 @@
1+cabal-version: 2.2
2+name: cookbook-hoist-server-with-context
3+version: 0.0.1
4+synopsis: JWT and basic access authentication with a Custom Monad cookbook example
5+description: Using servant-auth to support both JWT-based and basic
6+ authentication.
7+homepage: http://docs.servant.dev/
8+license: BSD-3-Clause
9+license-file: ../../../servant/LICENSE
10+author: Servant Contributors
11+maintainer: haskell-servant-maintainers@googlegroups.com
12+category: Servant
13+build-type: Simple
14+tested-with: GHC==8.6.5, GHC==8.8.3, GHC ==8.10.7
15+
16+executable cookbook-hoist-server-with-context
17+ main-is: HoistServerWithContext.lhs
18+ build-depends: base == 4.*
19+ , base-compat
20+ , text >= 1.2
21+ , aeson >= 1.2
22+ , data-default
23+ , fast-logger
24+ , servant
25+ , servant-server
26+ , servant-auth >= 0.3.2
27+ , servant-auth-server >= 0.4.4.0
28+ , time
29+ , warp >= 3.2
30+ , wai >= 3.2
31+ , wai-extra
32+ , http-types >= 0.12
33+ , bytestring >= 0.10.4
34+ , mtl
35+ default-language: Haskell2010
36+ ghc-options: -Wall -pgmL markdown-unlit
37+ build-tool-depends: markdown-unlit:markdown-unlit
doc/cookbook/https/Https.lhsnew file+62
@@ -0,0 +1,62 @@
1+# Serving web applications over HTTPS
2+
3+This short recipe shows how one can serve a servant application
4+over HTTPS, by simply using `warp-tls` instead of `warp` to provide
5+us a `run` function for running the `Application` that we get by
6+calling `serve`.
7+
8+As usual, we start by clearing our throat of a few language extensions
9+and imports.
10+
11+``` haskell
12+{-# LANGUAGE DataKinds #-}
13+{-# LANGUAGE TypeOperators #-}
14+import Network.Wai
15+import Network.Wai.Handler.Warp
16+import Network.Wai.Handler.WarpTLS
17+import Servant
18+```
19+
20+No need to work with a complicated API here, let's
21+make it as simple as it gets:
22+
23+``` haskell
24+type API = Get '[JSON] Int
25+
26+api :: Proxy API
27+api = Proxy
28+
29+server :: Server API
30+server = return 10
31+
32+app :: Application
33+app = serve api server
34+```
35+
36+It's now time to actually run the `Application`.
37+The [`warp-tls`](https://hackage.haskell.org/package/warp-tls/docs/Network-Wai-Handler-WarpTLS.html)
38+package provides two functions for running an `Application`, called
39+[`runTLS`](https://hackage.haskell.org/package/warp-tls/docs/Network-Wai-Handler-WarpTLS.html#v:runTLS)
40+and [`runTLSSocket`](https://hackage.haskell.org/package/warp-tls/docs/Network-Wai-Handler-WarpTLS.html#v:runTLSSocket).
41+We will be using the first one.
42+
43+It takes two arguments,
44+[the TLS settings](https://hackage.haskell.org/package/warp-tls/docs/Network-Wai-Handler-WarpTLS.html#t:TLSSettings)
45+(certificates, keys, ciphers, etc)
46+and [the warp settings](https://hackage.haskell.org/package/warp/docs/Network-Wai-Handler-Warp-Internal.html#t:Settings)
47+(port, logger, etc).
48+
49+We will be using very simple settings for this example but you are of
50+course invited to read the documentation for those types to find out
51+about all the knobs that you can play with.
52+
53+``` haskell
54+main :: IO ()
55+main = runTLS tlsOpts warpOpts app
56+
57+ where tlsOpts = tlsSettings "cert.pem" "secret-key.pem"
58+ warpOpts = setPort 8080 defaultSettings
59+```
60+
61+This program is available as a cabal project
62+[here](https://github.com/haskell-servant/servant/tree/master/doc/cookbook/https).
doc/cookbook/https/https.cabalnew file+24
@@ -0,0 +1,24 @@
1+cabal-version: 2.2
2+name: cookbook-https
3+version: 0.1
4+synopsis: HTTPS cookbook example
5+homepage: http://docs.servant.dev/
6+license: BSD-3-Clause
7+license-file: ../../../servant/LICENSE
8+author: Servant Contributors
9+maintainer: haskell-servant-maintainers@googlegroups.com
10+build-type: Simple
11+tested-with: GHC==8.6.5, GHC==8.8.3, GHC ==8.10.7
12+
13+executable cookbook-https
14+ main-is: Https.lhs
15+ build-depends: base == 4.*
16+ , servant
17+ , servant-server
18+ , wai >= 3.2
19+ , warp >= 3.2
20+ , warp-tls >= 3.2.9
21+ , markdown-unlit >= 0.4
22+ default-language: Haskell2010
23+ ghc-options: -Wall -pgmL markdown-unlit
24+ build-tool-depends: markdown-unlit:markdown-unlit
doc/cookbook/index.rstnew file+39
@@ -0,0 +1,39 @@
1+Cookbook
2+========
3+
4+This page is a *collective effort* whose goal is to show
5+how to solve many common problems with servant. If you're
6+interested in contributing examples of your own, feel free
7+to open an issue or a pull request on
8+`our github repository <https://github.com/haskell-servant/servant>`_
9+or even to just get in touch with us on the `**#haskell-servant** IRC channel
10+on libera.chat <https://web.libera.chat/#haskell-servant>_ or on
11+`the mailing list <https://groups.google.com/forum/#!forum/haskell-servant>`_.
12+
13+The scope is very wide. Simple and fancy authentication schemes,
14+file upload, type-safe links, working with CSV, .zip archives,
15+you name it!
16+
17+.. toctree::
18+ :maxdepth: 1
19+
20+ structuring-apis/StructuringApis.lhs
21+ generic/Generic.lhs
22+ https/Https.lhs
23+ db-mysql-basics/MysqlBasics.lhs
24+ db-sqlite-simple/DBConnection.lhs
25+ db-postgres-pool/PostgresPool.lhs
26+ using-custom-monad/UsingCustomMonad.lhs
27+ using-free-client/UsingFreeClient.lhs
28+ custom-errors/CustomErrors.lhs
29+ uverb/UVerb.lhs
30+ basic-auth/BasicAuth.lhs
31+ basic-streaming/Streaming.lhs
32+ jwt-and-basic-auth/JWTAndBasicAuth.lhs
33+ hoist-server-with-context/HoistServerWithContext.lhs
34+ file-upload/FileUpload.lhs
35+ pagination/Pagination.lhs
36+ curl-mock/CurlMock.lhs
37+ sentry/Sentry.lhs
38+ testing/Testing.lhs
39+ open-id-connect/OpenIdConnect.lhs
doc/cookbook/jwt-and-basic-auth/JWTAndBasicAuth.lhsnew file+252
@@ -0,0 +1,252 @@
1+# Combining JWT-based authentication with basic access authentication
2+
3+In this example we will make a service with
4+[basic HTTP authentication](https://en.wikipedia.org/wiki/Basic_access_authentication)
5+for Haskell clients and other programs, as well as
6+with [JWT](https://en.wikipedia.org/wiki/JSON_Web_Token)-based
7+authentication for web browsers. Web browsers will still use basic
8+HTTP authentication to retrieve JWTs though.
9+
10+**Warning**: this is insecure when done over plain HTTP,
11+so [TLS](https://en.wikipedia.org/wiki/Transport_Layer_Security)
12+should be used.
13+See [warp-tls](https://hackage.haskell.org/package/warp-tls) for that.
14+
15+While basic authentication comes with Servant itself,
16+[servant-auth](https://hackage.haskell.org/package/servant-auth) and
17+[servant-auth-server](https://hackage.haskell.org/package/servant-auth-server)
18+packages are needed for the JWT-based one.
19+
20+This recipe uses the following ingredients:
21+
22+```haskell
23+{-# LANGUAGE OverloadedStrings, TypeFamilies, DataKinds,
24+ DeriveGeneric, TypeOperators #-}
25+import Data.Aeson
26+import GHC.Generics
27+import Data.Proxy
28+import System.IO
29+import Network.HTTP.Client (newManager, defaultManagerSettings)
30+import Network.Wai.Handler.Warp
31+import Servant as S
32+import Servant.Client
33+import Servant.Auth as SA
34+import Servant.Auth.Server as SAS
35+import Control.Monad.IO.Class (liftIO)
36+import Data.Map as M
37+import Data.ByteString (ByteString)
38+
39+port :: Int
40+port = 3001
41+```
42+
43+
44+## Authentication
45+
46+Below is how we'll represent a user: usually user identifier is handy
47+to keep around, along with their role if
48+[role-based access control](https://en.wikipedia.org/wiki/Role-based_access_control)
49+is used, and other commonly needed information, such as an
50+organization identifier:
51+
52+```haskell
53+data AuthenticatedUser = AUser { auID :: Int
54+ , auOrgID :: Int
55+ } deriving (Show, Generic)
56+```
57+
58+The following instances are needed for JWT:
59+
60+```haskell
61+instance ToJSON AuthenticatedUser
62+instance FromJSON AuthenticatedUser
63+instance ToJWT AuthenticatedUser
64+instance FromJWT AuthenticatedUser
65+```
66+
67+We'll have to use a bit of imagination to pretend that the following
68+`Map` is a database connection pool:
69+
70+```haskell
71+type Login = ByteString
72+type Password = ByteString
73+type DB = Map (Login, Password) AuthenticatedUser
74+type Connection = DB
75+type Pool a = a
76+
77+initConnPool :: IO (Pool Connection)
78+initConnPool = pure $ fromList [ (("user", "pass"), AUser 1 1)
79+ , (("user2", "pass2"), AUser 2 1) ]
80+```
81+
82+See the "PostgreSQL connection pool" recipe for actual connection
83+pooling, and we proceed to an authentication function that would use
84+our improvised DB connection pool and credentials provided by a user:
85+
86+```haskell
87+authCheck :: Pool Connection
88+ -> BasicAuthData
89+ -> IO (AuthResult AuthenticatedUser)
90+authCheck connPool (BasicAuthData login password) = pure $
91+ maybe SAS.Indefinite Authenticated $ M.lookup (login, password) connPool
92+```
93+
94+**Warning**: make sure to use a proper password hashing function in
95+functions like this: see [bcrypt](https://en.wikipedia.org/wiki/Bcrypt),
96+[scrypt](https://en.wikipedia.org/wiki/Scrypt),
97+[pgcrypto](https://www.postgresql.org/docs/current/static/pgcrypto.html).
98+
99+Unlike `Servant.BasicAuth`, `Servant.Auth` uses `FromBasicAuthData`
100+type class for the authentication process itself. But since our
101+connection pool will be initialized elsewhere, we'll have to pass it
102+somehow: it can be done via a context entry and `BasicAuthCfg` type
103+family. We can actually pass a function at once, to make it a bit more
104+generic:
105+
106+
107+```haskell
108+type instance BasicAuthCfg = BasicAuthData -> IO (AuthResult AuthenticatedUser)
109+
110+instance FromBasicAuthData AuthenticatedUser where
111+ fromBasicAuthData authData authCheckFunction = authCheckFunction authData
112+```
113+
114+
115+## API
116+
117+Test API with a couple of endpoints:
118+
119+```haskell
120+type TestAPI = "foo" :> Capture "i" Int :> Get '[JSON] ()
121+ :<|> "bar" :> Get '[JSON] ()
122+```
123+
124+We'll use this for server-side functions, listing the allowed
125+authentication methods using the `Auth` combinator:
126+
127+```haskell
128+type TestAPIServer =
129+ Auth '[SA.JWT, SA.BasicAuth] AuthenticatedUser :> TestAPI
130+```
131+
132+But `Servant.Auth.Client` only supports JWT-based authentication, so
133+we'll have to use regular `Servant.BasicAuth` to derive client
134+functions that use basic access authentication:
135+
136+```haskell
137+type TestAPIClient = S.BasicAuth "test" AuthenticatedUser :> TestAPI
138+```
139+
140+
141+## Client
142+
143+Client code in this setting is the same as it would be with just
144+`Servant.BasicAuth`, using
145+[servant-client](https://hackage.haskell.org/package/servant-client):
146+
147+```haskell
148+testClient :: IO ()
149+testClient = do
150+ mgr <- newManager defaultManagerSettings
151+ let (foo :<|> _) = client (Proxy :: Proxy TestAPIClient)
152+ (BasicAuthData "name" "pass")
153+ res <- runClientM (foo 42)
154+ (mkClientEnv mgr (BaseUrl Http "localhost" port ""))
155+ hPutStrLn stderr $ case res of
156+ Left err -> "Error: " ++ show err
157+ Right r -> "Success: " ++ show r
158+```
159+
160+
161+## Server
162+
163+Server code is slightly different -- we're getting `AuthResult` here:
164+
165+```haskell
166+server :: Server TestAPIServer
167+server (Authenticated user) = handleFoo :<|> handleBar
168+ where
169+ handleFoo :: Int -> Handler ()
170+ handleFoo n = liftIO $ hPutStrLn stderr $
171+ concat ["foo: ", show user, " / ", show n]
172+ handleBar :: Handler ()
173+ handleBar = liftIO testClient
174+```
175+
176+Catch-all for `BadPassword`, `NoSuchUser`, and `Indefinite`:
177+
178+```haskell
179+server _ = throwAll err401
180+```
181+
182+With `Servant.Auth`, we'll have to put both `CookieSettings` and
183+`JWTSettings` into context even if we're not using those, and we'll
184+put a partially applied `authCheck` function there as well, so that
185+`FromBasicAuthData` will be able to use it, while it will use our
186+connection pool. Otherwise it is similar to the usual way:
187+
188+```haskell
189+mkApp :: Pool Connection -> IO Application
190+mkApp connPool = do
191+ myKey <- generateKey
192+ let jwtCfg = defaultJWTSettings myKey
193+ authCfg = authCheck connPool
194+ cfg = jwtCfg :. defaultCookieSettings :. authCfg :. EmptyContext
195+ api = Proxy :: Proxy TestAPIServer
196+ pure $ serveWithContext api cfg server
197+```
198+
199+Finally, the main function:
200+
201+```haskell
202+main :: IO ()
203+main = do
204+ connPool <- initConnPool
205+ let settings =
206+ setPort port $
207+ setBeforeMainLoop (hPutStrLn stderr
208+ ("listening on port " ++ show port)) $
209+ defaultSettings
210+ runSettings settings =<< mkApp connPool
211+```
212+
213+
214+## Usage
215+
216+Now we can try it out with `curl`. First of all, let's ensure that it
217+fails with `err401` if we're not authenticated:
218+
219+```
220+$ curl -v 'http://localhost:3001/bar'
221+…
222+< HTTP/1.1 401 Unauthorized
223+```
224+
225+```
226+$ curl -v 'http://user:wrong_password@localhost:3001/bar'
227+…
228+< HTTP/1.1 401 Unauthorized
229+```
230+
231+Now let's see that basic HTTP authentication works, and that we get
232+JWTs:
233+
234+```
235+$ curl -v 'http://user:pass@localhost:3001/bar'
236+…
237+< HTTP/1.1 200 OK
238+…
239+< Set-Cookie: XSRF-TOKEN=lQE/sb1fW4rZ/FYUQZskI6RVRllG0CWZrQ0d3fXU4X0=; Path=/; Secure
240+< Set-Cookie: JWT-Cookie=eyJhbGciOiJIUzUxMiJ9.eyJkYXQiOnsiYXVPcmdJRCI6MSwiYXVJRCI6MX19.6ZQba-Co5Ul4wpmU34zXlI75wmasxDfaGRmO3BsOx-ONupX93OBfyYBCIJ3tbWMXKBVVqMDt0Pz-5CakyF2wng; Path=/; HttpOnly; Secure
241+```
242+
243+And authenticate using JWTs alone, using the token from `JWT-Cookie`:
244+
245+```
246+curl -v -H 'Authorization: Bearer eyJhbGciOiJIUzUxMiJ9.eyJkYXQiOnsiYXVPcmdJRCI6MSwiYXVJRCI6MX19.6ZQba-Co5Ul4wpmU34zXlI75wmasxDfaGRmO3BsOx-ONupX93OBfyYBCIJ3tbWMXKBVVqMDt0Pz-5CakyF2wng' 'http://localhost:3001/bar'
247+…
248+< HTTP/1.1 200 OK
249+```
250+
251+This program is available as a cabal project
252+[here](https://github.com/haskell-servant/servant/tree/master/doc/cookbook/jwt-and-basic-auth).
doc/cookbook/jwt-and-basic-auth/jwt-and-basic-auth.cabalnew file+36
@@ -0,0 +1,36 @@
1+cabal-version: 2.2
2+name: cookbook-jwt-and-basic-auth
3+version: 0.0.1
4+synopsis: JWT and basic access authentication cookbook example
5+description: Using servant-auth to support both JWT-based and basic
6+ authentication.
7+homepage: http://docs.servant.dev/
8+license: BSD-3-Clause
9+license-file: ../../../servant/LICENSE
10+author: Servant Contributors
11+maintainer: haskell-servant-maintainers@googlegroups.com
12+category: Servant
13+build-type: Simple
14+tested-with: GHC==8.6.5, GHC==8.8.3, GHC ==8.10.7
15+
16+executable cookbook-jwt-and-basic-auth
17+ main-is: JWTAndBasicAuth.lhs
18+ build-depends: base == 4.*
19+ , text >= 1.2
20+ , aeson >= 1.2
21+ , containers >= 0.5
22+ , servant
23+ , servant-client
24+ , servant-server
25+ , servant-auth == 0.4.*
26+ , servant-auth-server >= 0.3.1.0
27+ , warp >= 3.2
28+ , wai >= 3.2
29+ , http-types >= 0.12
30+ , markdown-unlit >= 0.4
31+ , http-client >= 0.5
32+ , bytestring >= 0.10.4
33+ , transformers
34+ default-language: Haskell2010
35+ ghc-options: -Wall -pgmL markdown-unlit
36+ build-tool-depends: markdown-unlit:markdown-unlit
doc/cookbook/open-id-connect/OpenIdConnect.cabalnew file+45
@@ -0,0 +1,45 @@
1+cabal-version: 2.2
2+name: open-id-connect
3+version: 0.1
4+synopsis: OpenId Connect with Servant example
5+homepage: http://haskell-servant.readthedocs.org/
6+license: BSD-3-Clause
7+license-file: ../../../servant/LICENSE
8+author: Servant Contributors
9+maintainer: haskell-servant-maintainers@googlegroups.com
10+build-type: Simple
11+tested-with: GHC==8.6.5
12+
13+executable cookbook-openidconnect
14+ main-is: OpenIdConnect.lhs
15+ build-depends: base ==4.*
16+ , aeson
17+ , aeson-pretty
18+ , binary
19+ , blaze-html
20+ , blaze-markup
21+ , bytestring
22+ , case-insensitive
23+ , cereal
24+ , containers
25+ , generic-lens
26+ , http-client
27+ , http-client-tls
28+ , http-types
29+ , jose-jwt
30+ , lens
31+ , lens-aeson
32+ , oidc-client
33+ , protolude
34+ , random
35+ , servant
36+ , servant-blaze
37+ , servant-server
38+ , text
39+ , time
40+ , vector
41+ , wai
42+ , warp >= 3.2
43+ default-language: Haskell2010
44+ ghc-options: -Wall -Wcompat -Wincomplete-uni-patterns -Wredundant-constraints -Wnoncanonical-monad-instances -pgmL markdown-unlit
45+ build-tool-depends: markdown-unlit:markdown-unlit >= 0.4
doc/cookbook/open-id-connect/OpenIdConnect.lhsnew file+472
@@ -0,0 +1,472 @@
1+[OpenID Connect](https://openid.net/connect/)
2+=============================================
3+
4+Use OpenID Connect to authenticate your users.
5+This example use google OIDC provider.
6+It was made for a working with single page application where
7+some login token would be saved in the user agent local storage.
8+
9+Workflow:
10+
11+1. user is presented with a login button,
12+2. when the user clicks on the button it is redirected to the OIDC
13+ provider,
14+3. the user login in the OIDC provider,
15+4. the OIDC provider will redirect the user and provide a `code`,
16+5. the server will use this code to make a POST to the OIDC provider
17+ and will get back authentication infos,
18+6. The user will get display an HTML page that will save a secret
19+ identifying him in the local storage, then it will be redirected to
20+ /.
21+
22+Let's put the imports behind us:
23+
24+``` haskell
25+{-# LANGUAGE DataKinds #-}
26+{-# LANGUAGE DeriveGeneric #-}
27+{-# LANGUAGE DuplicateRecordFields #-}
28+{-# LANGUAGE FlexibleContexts #-}
29+{-# LANGUAGE FlexibleInstances #-}
30+{-# LANGUAGE MultiParamTypeClasses #-}
31+{-# LANGUAGE NoImplicitPrelude #-}
32+{-# LANGUAGE OverloadedLists #-}
33+{-# LANGUAGE OverloadedStrings #-}
34+{-# LANGUAGE PartialTypeSignatures #-}
35+{-# LANGUAGE PolyKinds #-}
36+{-# LANGUAGE RankNTypes #-}
37+{-# LANGUAGE RecordWildCards #-}
38+{-# LANGUAGE ScopedTypeVariables #-}
39+{-# LANGUAGE TypeFamilies #-}
40+{-# LANGUAGE TypeOperators #-}
41+{-# LANGUAGE TypeSynonymInstances #-}
42+
43+module Main where
44+
45+import Protolude
46+
47+import Data.Aeson
48+ (FromJSON (..), (.:))
49+import qualified Data.Aeson as JSON
50+import qualified Data.Aeson.Types as AeT
51+import qualified Data.ByteString.Lazy as LBS
52+import qualified Data.List as List
53+import qualified Data.Text as Text
54+import Jose.Jwt
55+ (Jwt (..), decodeClaims)
56+import Network.HTTP.Client
57+ (Manager, newManager)
58+import Network.HTTP.Client.TLS
59+ (tlsManagerSettings)
60+import Network.Wai.Handler.Warp
61+ (run)
62+import Servant
63+import Servant.HTML.Blaze
64+ (HTML)
65+import qualified System.Random as Random
66+import Text.Blaze
67+ (ToMarkup (..))
68+import qualified Text.Blaze.Html as H
69+import Text.Blaze.Html5
70+ ((!))
71+import qualified Text.Blaze.Html5 as H
72+import qualified Text.Blaze.Html5.Attributes as HA
73+import Text.Blaze.Renderer.Utf8
74+ (renderMarkup)
75+import qualified Web.OIDC.Client as O
76+```
77+
78+You'll need to create a new OpenID Connect client in an OpenID Provider.
79+This example was tested with Google.
80+
81+You can find a list of public OIDC provider here:
82+https://connect2id.com/products/nimbus-oauth-openid-connect-sdk/openid-connect-providers
83+
84+I copied some here:
85+
86+- Google: https://developers.google.com/identity/protocols/OpenIDConnect
87+ more precisely: https://console.developers.google.com/apis/credentials
88+- Microsoft: https://docs.microsoft.com/en-us/previous-versions/azure/dn645541(v=azure.100)
89+- Yahoo: https://developer.yahoo.com/oauth2/guide/openid_connect/
90+- PayPal: https://developer.paypal.com/docs/integration/direct/identity/log-in-with-paypal/
91+
92+During the configuration you'll need to provide a redirect uri.
93+The redirect_uri should correspond to the uri user will be redirected to
94+after a successful login into the OpenID provider.
95+
96+So during your test, you should certainly just use `http://localhost:3000/login/cb`.
97+In general you should use your own domain name.
98+
99+You'll then be given a `client_id` and a `client_password`.
100+Fill those values in here:
101+
102+``` haskell
103+oidcConf :: OIDCConf
104+oidcConf = OIDCConf { redirectUri = "http://localhost:3000/login/cb"
105+ , clientId = "xxxxxxxxxxxx-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.apps.googleusercontent.com"
106+ , clientPassword = "************************" }
107+```
108+
109+Then we declare our main server:
110+
111+``` haskell
112+main :: IO ()
113+main = do
114+ oidcEnv <- initOIDC oidcConf
115+ run 3000 (app oidcEnv)
116+
117+type API = IdentityRoutes Customer
118+ :<|> Get '[HTML] Homepage
119+
120+api :: Proxy API
121+api = Proxy
122+
123+server :: OIDCEnv -> Server API
124+server oidcEnv = serveOIDC oidcEnv handleOIDCLogin
125+ :<|> return Homepage
126+
127+-- | Then main app
128+app :: OIDCEnv -> Application
129+app oidcEnv = serve api (server oidcEnv)
130+```
131+
132+OIDC
133+----
134+
135+That part try to separate concern, and certainly in a real world
136+application that should be in its distinct module.
137+
138+``` haskell
139+-- * OIDC
140+
141+data OIDCConf =
142+ OIDCConf { redirectUri :: ByteString
143+ , clientId :: ByteString
144+ , clientPassword :: ByteString
145+ } deriving (Show, Eq)
146+```
147+
148+First we need to initialize OIDC.
149+A short explanation about it:
150+
151+- to complete the workflow we need to make a POST request to the OIDC provider.
152+ So we need to create an http manager to make those call properly.
153+- Then in order to prevent replay attack, each time an user wants to login we
154+ should provide a random string called the `state`. When the user is
155+ redirected to the `redirect_uri`, the OIDC provider should provide the same
156+ `state` along a `code` parameter.
157+
158+``` haskell
159+initOIDC :: OIDCConf -> IO OIDCEnv
160+initOIDC OIDCConf{..} = do
161+ mgr <- newManager tlsManagerSettings
162+ prov <- O.discover "https://accounts.google.com" mgr
163+ let oidc = O.setCredentials clientId clientPassword redirectUri (O.newOIDC prov)
164+ return OIDCEnv { oidc = oidc
165+ , mgr = mgr
166+ , genState = genRandomBS
167+ , prov = prov
168+ , redirectUri = redirectUri
169+ , clientId = clientId
170+ , clientPassword = clientPassword
171+ }
172+
173+data OIDCEnv = OIDCEnv { oidc :: O.OIDC
174+ , mgr :: Manager
175+ , genState :: IO ByteString
176+ , prov :: O.Provider
177+ , redirectUri :: ByteString
178+ , clientId :: ByteString
179+ , clientPassword :: ByteString
180+ }
181+```
182+
183+The `IdentityRoutes` are two endpoints:
184+
185+- an endpoint to redirect the users to the OIDC Provider,
186+- another one the user will be redirected to from the OIDC Provider.
187+
188+``` haskell
189+type IdentityRoutes a =
190+ "login" :> ( -- redirect User to the OpenID Provider
191+ Get '[JSON] NoContent
192+ -- render the page that will save the user creds in the user-agent
193+ :<|> "cb" :> QueryParam "error" Text
194+ :> QueryParam "code" Text
195+ :> Get '[HTML] User)
196+
197+-- | gen a 302 redirect helper
198+redirects :: (StringConv s ByteString) => s -> Handler ()
199+redirects url = throwError err302 { errHeaders = [("Location",toS url)]}
200+```
201+
202+That function will generate the URL to redirect the users to when
203+they'll click on the login link: `https://yourdomain/login`.
204+
205+``` haskell
206+genOIDCURL :: OIDCEnv -> IO ByteString
207+genOIDCURL OIDCEnv{..} = do
208+ st <- genState -- generate a random string
209+ let oidcCreds = O.setCredentials clientId clientPassword redirectUri (O.newOIDC prov)
210+ loc <- O.getAuthenticationRequestUrl oidcCreds [O.openId, O.email, O.profile] (Just st) []
211+ return (show loc)
212+
213+handleLogin :: OIDCEnv -> Handler NoContent
214+handleLogin oidcenv = do
215+ loc <- liftIO (genOIDCURL oidcenv)
216+ redirects loc
217+ return NoContent
218+```
219+
220+The `AuthInfo` is about the infos we can grab from OIDC provider.
221+
222+To be more precise, the user should come with a `code` (a token) and
223+POSTing that code to the correct OIDC provider endpoint should return a JSON
224+object. One of the fields should be named `id_token` which should be a
225+JWT containing all the information we need. Depending on the scopes we
226+asked we might get more information.
227+
228+``` haskell
229+-- | @AuthInfo@
230+data AuthInfo = AuthInfo { email :: Text
231+ , emailVerified :: Bool
232+ , name :: Text } deriving (Eq, Show, Generic)
233+
234+instance FromJSON AuthInfo where
235+ parseJSON (JSON.Object v) = do
236+ email :: Text <- v .: "email"
237+ email_verified :: Bool <- v .: "email_verified"
238+ name :: Text <- v .: "name"
239+ return $ AuthInfo (toS email) email_verified (toS name)
240+ parseJSON invalid = AeT.typeMismatch "Coord" invalid
241+instance JSON.ToJSON AuthInfo where
242+ toJSON (AuthInfo e ev n) =
243+ JSON.object [ "email" JSON..= (toS e :: Text)
244+ , "email_verified" JSON..= ev
245+ , "name" JSON..= (toS n :: Text)
246+ ]
247+
248+type LoginHandler = AuthInfo -> IO (Either Text User)
249+```
250+
251+The `handleLoggedIn` is that part that will retrieve the information from
252+the user once he is redirected from the OIDC Provider after login.
253+
254+If the user is redirected to the `redirect_uri` but with an `error` query
255+parameter then it means something went wrong.
256+If there is no error query param but a `code` query param it means the user
257+successfully logged in. From there we need to make a request to the token
258+endpoint of the OIDC provider. It's a POST that should contain the code
259+as well as the client id and secret.
260+Making this HTTP POST is the responsibility of `requestTokens`.
261+
262+From there we extract the `claims` of the JWT contained in one of the value
263+of the JSON returned by the POST HTTP Request.
264+
265+``` haskell
266+data User = User { userId :: Text
267+ , userSecret :: Text
268+ , localStorageKey :: Text
269+ , redirectUrl :: Maybe Text
270+ } deriving (Show,Eq,Ord)
271+
272+handleLoggedIn :: OIDCEnv
273+ -> LoginHandler -- ^ handle successful id
274+ -> Maybe Text -- ^ error
275+ -> Maybe Text -- ^ code
276+ -> Handler User
277+handleLoggedIn oidcenv handleSuccessfulId err mcode =
278+ case err of
279+ Just errorMsg -> forbidden errorMsg
280+ Nothing -> case mcode of
281+ Just oauthCode -> do
282+ tokens <- liftIO $ O.requestTokens (oidc oidcenv) (toS oauthCode) (mgr oidcenv)
283+ putText . show . O.claims . O.idToken $ tokens
284+ let jwt = toS . unJwt . O.jwt . O.idToken $ tokens
285+ eAuthInfo = decodeClaims jwt :: Either O.JwtError (O.JwtHeader,AuthInfo)
286+ case eAuthInfo of
287+ Left jwtErr -> forbidden $ "JWT decode/check problem: " <> show jwtErr
288+ Right (_,authInfo) ->
289+ if emailVerified authInfo
290+ then do
291+ user <- liftIO $ handleSuccessfulId authInfo
292+ either forbidden return user
293+ else forbidden "Please verify your email"
294+ Nothing -> do
295+ liftIO $ putText "No code param"
296+ forbidden "no code parameter given"
297+```
298+
299+When you render a User with blaze-html, it will generate a page with a js
300+that will put a secret for that user in the local storage. And it will
301+redirect the user to /.
302+
303+``` haskell
304+instance ToMarkup User where
305+ toMarkup User{..} = H.docTypeHtml $ do
306+ H.head $
307+ H.title "Logged In"
308+ H.body $ do
309+ H.h1 "Logged In"
310+ H.p (H.toHtml ("Successful login with id " <> userId))
311+ H.script (H.toHtml ("localStorage.setItem('" <> localStorageKey <> "','" <> userSecret <> "');"
312+ <> "localStorage.setItem('user-id','" <> userId <> "');"
313+ <> "window.location='" <> fromMaybe "/" redirectUrl <> "';" -- redirect the user to /
314+ ));
315+
316+serveOIDC :: OIDCEnv -> LoginHandler -> Server (IdentityRoutes a)
317+serveOIDC oidcenv loginHandler =
318+ handleLogin oidcenv :<|> handleLoggedIn oidcenv loginHandler
319+
320+-- * Auth
321+type APIKey = ByteString
322+type Account = Text.Text
323+type Conf = [(APIKey,Account)]
324+data Customer = Customer {
325+ account :: Account
326+ , apiKey :: APIKey
327+ , mail :: Maybe Text
328+ , fullname :: Maybe Text
329+ }
330+```
331+
332+Here is the code that displays the homepage.
333+It should contain a link to the the `/login` URL.
334+When the user clicks on this link it will be redirected to Google login page
335+with some generated information.
336+
337+The page also displays the content of the local storage.
338+And in particular the items `api-key` and `user-id`.
339+Those items should be set after a successful login when the user is redirected to
340+`/login/cb`.
341+
342+The logic used generally is to use that api-key to uniquely identify an user.
343+Another option would have been to set a cookie.
344+
345+``` haskell
346+data Homepage = Homepage
347+
348+instance ToMarkup Homepage where
349+ toMarkup Homepage = H.docTypeHtml $ do
350+ H.head $ do
351+ H.title "OpenID Connect Servant Example"
352+ H.style (H.toHtml ("body { font-family: monospace; font-size: 18px; }" :: Text.Text))
353+ H.body $ do
354+ H.h1 "OpenID Connect Servant Example"
355+ H.div $
356+ H.a ! HA.href "/login" $ "Click here to login"
357+ H.ul $ do
358+ H.li $ do
359+ H.span "API Key in Local storage: "
360+ H.script (H.toHtml ("document.write(localStorage.getItem('api-key'));" :: Text.Text))
361+ H.li $ do
362+ H.span "User ID in Local storage: "
363+ H.script (H.toHtml ("document.write(localStorage.getItem('user-id'));" :: Text.Text))
364+```
365+
366+We need some helpers to generate random string for generating state and API Keys.
367+
368+``` haskell
369+-- | generate a random ByteString, not necessarily extremely good randomness
370+-- still the password will be long enough to be very difficult to crack
371+genRandomBS :: IO ByteString
372+genRandomBS = do
373+ g <- Random.newStdGen
374+ Random.randomRs (0, n) g & take 42 & fmap toChar & readable 0 & toS & return
375+ where
376+ n = length letters - 1
377+ toChar i = letters List.!! i
378+ letters = ['A'..'Z'] <> ['0'..'9'] <> ['a'..'z']
379+ readable :: Int -> [Char] -> [Char]
380+ readable _ [] = []
381+ readable i str =
382+ let blocksize = case n of
383+ 0 -> 8
384+ 1 -> 4
385+ 2 -> 4
386+ 3 -> 4
387+ _ -> 12
388+ block = take blocksize str
389+ rest = drop blocksize str
390+ in if List.null rest
391+ then str
392+ else block <> "-" <> readable (i+1) rest
393+
394+customerFromAuthInfo :: AuthInfo -> IO Customer
395+customerFromAuthInfo authinfo = do
396+ apikey <- genRandomBS
397+ return Customer { account = toS (email authinfo)
398+ , apiKey = apikey
399+ , mail = Just (toS (email authinfo))
400+ , fullname = Just (toS (name authinfo))
401+ }
402+
403+handleOIDCLogin :: LoginHandler
404+handleOIDCLogin authInfo = do
405+ custInfo <- customerFromAuthInfo authInfo
406+ if emailVerified authInfo
407+ then return . Right . customerToUser $ custInfo
408+ else return (Left "You emails is not verified by your provider. Please verify your email.")
409+ where
410+ customerToUser :: Customer -> User
411+ customerToUser c =
412+ User { userId = toS (account c)
413+ , userSecret = toS (apiKey c)
414+ , redirectUrl = Nothing
415+ , localStorageKey = "api-key"
416+ }
417+```
418+
419+`Error` helpers
420+---------------
421+
422+``` haskell
423+data Err = Err { errTitle :: Text
424+ , errMsg :: Text }
425+
426+instance ToMarkup Err where
427+ toMarkup Err{..} = H.docTypeHtml $ do
428+ H.head $ do
429+ H.title "Error"
430+ H.body $ do
431+ H.h1 (H.a ! HA.href "/" $ "Home")
432+ H.h2 (H.toHtml errTitle)
433+ H.p (H.toHtml errMsg)
434+
435+format :: ToMarkup a => a -> LBS.ByteString
436+format err = toMarkup err & renderMarkup
437+
438+appToErr :: ServerError -> Text -> ServerError
439+appToErr x msg = x
440+ { errBody = toS $ format (Err (toS (errReasonPhrase x)) msg)
441+ , errHeaders = [("Content-Type","text/html")]}
442+
443+unauthorized :: (MonadError ServerError m) => Text -> m a
444+unauthorized = throwError . unauthorizedErr
445+
446+unauthorizedErr :: Text -> ServerError
447+unauthorizedErr = appToErr err401
448+
449+forbidden :: (MonadError ServerError m) => Text -> m a
450+forbidden = throwError . forbiddenErr
451+
452+forbiddenErr :: Text -> ServerError
453+forbiddenErr = appToErr err403
454+
455+notFound :: ( MonadError ServerError m) => Text -> m a
456+notFound = throwError . notFoundErr
457+
458+notFoundErr :: Text -> ServerError
459+notFoundErr = appToErr err404
460+
461+preconditionFailed :: ( MonadError ServerError m) => Text -> m a
462+preconditionFailed = throwError . preconditionFailedErr
463+
464+preconditionFailedErr :: Text -> ServerError
465+preconditionFailedErr = appToErr err412
466+
467+serverError :: ( MonadError ServerError m) => Text -> m a
468+serverError = throwError . serverErrorErr
469+
470+serverErrorErr :: Text -> ServerError
471+serverErrorErr = appToErr err500
472+```
doc/cookbook/pagination/Pagination.lhsnew file+250
@@ -0,0 +1,250 @@
1+# Pagination
2+
3+## Overview
4+
5+Let's see an approach to typed pagination with *Servant* using [servant-pagination](https://hackage.haskell.org/package/servant-pagination).
6+
7+This module offers opinionated helpers to declare a type-safe and a flexible pagination
8+mechanism for Servant APIs. This design, inspired by [Heroku's API](https://devcenter.heroku.com/articles/platform-api-reference#ranges),
9+provides a small framework to communicate about a possible pagination feature of an endpoint,
10+enabling a client to consume the API in different fashions (pagination with offset / limit,
11+endless scroll using last referenced resources, ascending and descending ordering, etc.)
12+
13+Therefore, client can provide a `Range` header with their request with the following format:
14+
15+- `Range: <field> [<value>][; offset <o>][; limit <l>][; order <asc|desc>]`
16+
17+For example: `Range: createdAt 2017-01-15T23:14:67.000Z; offset 5; order desc` indicates that
18+the client is willing to retrieve the next batch of document in descending order that were
19+created after the fifteenth of January, skipping the first 5.
20+
21+As a response, the server may return the list of corresponding documents, and augment the
22+response with 3 headers:
23+
24+- `Accept-Ranges`: A comma-separated list of fields upon which a range can be defined
25+- `Content-Range`: Actual range corresponding to the content being returned
26+- `Next-Range`: Indicate what should be the next `Range` header in order to retrieve the next range
27+
28+For example:
29+
30+- `Accept-Ranges: createdAt, modifiedAt`
31+- `Content-Range: createdAt 2017-01-15T23:14:51.000Z..2017-02-18T06:10:23.000Z`
32+- `Next-Range: createdAt 2017-02-19T12:56:28.000Z; offset 0; limit 100; order desc`
33+
34+
35+## Getting Started
36+
37+Code-wise the integration is quite seamless and unobtrusive. `servant-pagination` provides a
38+`Ranges (fields :: [Symbol]) (resource :: *) -> *` data-type for declaring available ranges
39+on a group of _fields_ and a target _resource_. To each combination (resource + field) is
40+associated a given type `RangeType (resource :: *) (field :: Symbol) -> *` as described by
41+the type-family in the `HasPagination` type-class.
42+
43+So, let's start with some imports and extensions to get this out of the way:
44+
45+``` haskell
46+{-# LANGUAGE DataKinds #-}
47+{-# LANGUAGE DeriveGeneric #-}
48+{-# LANGUAGE FlexibleInstances #-}
49+{-# LANGUAGE MultiParamTypeClasses #-}
50+{-# LANGUAGE TypeApplications #-}
51+{-# LANGUAGE TypeFamilies #-}
52+{-# LANGUAGE TypeOperators #-}
53+
54+import Data.Aeson
55+ (ToJSON, genericToJSON)
56+import Data.Maybe
57+ (fromMaybe)
58+import Data.Proxy
59+ (Proxy (..))
60+import GHC.Generics
61+ (Generic)
62+import Servant
63+ ((:>), GetPartialContent, Handler, Header, Headers, JSON, Server, addHeader)
64+import Servant.Pagination
65+ (HasPagination (..), PageHeaders, Range (..), Ranges, RangeOptions(..),
66+ applyRange, extractRange, returnRange)
67+
68+import qualified Data.Aeson as Aeson
69+import qualified Network.Wai.Handler.Warp as Warp
70+import qualified Servant
71+import qualified Servant.Pagination as Pagination
72+```
73+
74+
75+#### Declaring the Resource
76+
77+Servant APIs are rather resource-oriented, and so is `servant-pagination`. This
78+guide shows a basic example working with `JSON` (as you could tell from the
79+import list already). To make the world a <span style='text-decoration:
80+line-through'>better</span> colored place, let's create an API to retrieve
81+colors -- with pagination.
82+
83+``` haskell
84+data Color = Color
85+ { name :: String
86+ , rgb :: [Int]
87+ , hex :: String
88+ } deriving (Eq, Show, Generic)
89+
90+instance ToJSON Color where
91+ toJSON =
92+ genericToJSON Aeson.defaultOptions
93+
94+colors :: [Color]
95+colors =
96+ [ Color "Black" [0, 0, 0] "#000000"
97+ , Color "Blue" [0, 0, 255] "#0000ff"
98+ , Color "Green" [0, 128, 0] "#008000"
99+ , Color "Grey" [128, 128, 128] "#808080"
100+ , Color "Purple" [128, 0, 128] "#800080"
101+ , Color "Red" [255, 0, 0] "#ff0000"
102+ , Color "Yellow" [255, 255, 0] "#ffff00"
103+ ]
104+```
105+
106+#### Declaring the Ranges
107+
108+Now that we have defined our _resource_ (a.k.a `Color`), we are ready to declare a new `Range`
109+that will operate on a "name" field (genuinely named after the `name` fields from the `Color`
110+record).
111+For that, we need to tell `servant-pagination` two things:
112+
113+- What is the type of the corresponding `Range` values
114+- How do we get one of these values from our resource
115+
116+This is done via defining an instance of `HasPagination` as follows:
117+
118+``` haskell
119+instance HasPagination Color "name" where
120+ type RangeType Color "name" = String
121+ getFieldValue _ = name
122+ -- getRangeOptions :: Proxy "name" -> Proxy Color -> RangeOptions
123+ -- getDefaultRange :: Proxy Color -> Range "name" String
124+
125+defaultRange :: Range "name" String
126+defaultRange =
127+ getDefaultRange (Proxy @Color)
128+```
129+
130+Note that `getFieldValue :: Proxy "name" -> Color -> String` is the minimal complete definition
131+of the class. Yet, you can define `getRangeOptions` to provide different parsing options (see
132+the last section of this guide). In the meantime, we've also defined a `defaultRange` as it will
133+come in handy when defining our handler.
134+
135+#### API
136+
137+Good, we have a resource, we have a `Range` working on that resource, we can now declare our
138+API using other Servant combinators we already know:
139+
140+``` haskell
141+type API =
142+ "colors"
143+ :> Header "Range" (Ranges '["name"] Color)
144+ :> GetPartialContent '[JSON] (Headers MyHeaders [Color])
145+
146+type MyHeaders =
147+ Header "Total-Count" Int ': PageHeaders '["name"] Color
148+```
149+
150+`PageHeaders` is a type alias provided by the library to declare the necessary response headers
151+we mentioned in introduction. Expanding the alias boils down to the following:
152+
153+``` haskell
154+-- type MyHeaders =
155+-- '[ Header "Total-Count" Int
156+-- , Header "Accept-Ranges" (AcceptRanges '["name"])
157+-- , Header "Content-Range" (ContentRange '["name"] Color)
158+-- , Header "Next-Range" (Ranges '["name"] Color)
159+-- ]
160+```
161+
162+As a result, we will need to provide all those headers with the response in our handler. Worry
163+not, _servant-pagination_ provides an easy way to lift a collection of resources into such handler.
164+
165+#### Server
166+
167+Time to connect the last bits by defining the server implementation of our colorful API. The `Ranges`
168+type we've defined above (tied to the `Range` HTTP header) indicates the server to parse any `Range`
169+header, looking for the format defined in introduction with fields and target types we have just declared.
170+If no such header is provided, we will end up receiving `Nothing`. Otherwise, it will be possible
171+to _extract_ a `Range` from our `Ranges`.
172+
173+``` haskell
174+server :: Server API
175+server = handler
176+ where
177+ handler :: Maybe (Ranges '["name"] Color) -> Handler (Headers MyHeaders [Color])
178+ handler mrange = do
179+ let range =
180+ fromMaybe defaultRange (mrange >>= extractRange)
181+
182+ addHeader (length colors) <$> returnRange range (applyRange range colors)
183+
184+main :: IO ()
185+main =
186+ Warp.run 1442 $ Servant.serve (Proxy @API) server
187+```
188+
189+Let's try it out using different ranges to observe the server's behavior. As a reminder, here's
190+the format we defined, where `<field>` here can only be `name` and `<value>` must parse to a `String`:
191+
192+- `Range: <field> [<value>][; offset <o>][; limit <l>][; order <asc|desc>]`
193+
194+Beside the target field, everything is pretty much optional in the `Range` HTTP header. Missing parts
195+are deduced from the `RangeOptions` that are part of the `HasPagination` instance. Therefore, all
196+following examples are valid requests to send to our server:
197+
198+- 1 - `curl http://localhost:1442/colors -vH 'Range: name'`
199+- 2 - `curl http://localhost:1442/colors -vH 'Range: name; limit 2'`
200+- 3 - `curl http://localhost:1442/colors -vH 'Range: name Green; order asc; offset 1'`
201+
202+Considering the following default options:
203+
204+- `defaultRangeLimit: 100`
205+- `defaultRangeOffset: 0`
206+- `defaultRangeOrder: RangeDesc`
207+
208+The previous ranges reads as follows:
209+
210+- 1 - The first 100 colors, ordered by descending names
211+- 2 - The first 2 colors, ordered by descending names
212+- 3 - The 100 colors after `Green` (not included), ordered by ascending names.
213+
214+
215+## Going Forward
216+
217+#### Multiple Ranges
218+
219+Note that in the simple above scenario, there's no ambiguity with `extractRange` and `returnRange`
220+because there's only one possible `Range` defined on our resource. Yet, as you've most probably
221+noticed, the `Ranges` combinator accepts a list of fields, each of which must declare a `HasPagination`
222+instance. Doing so will make the other helper functions more ambiguous and type annotations are
223+highly likely to be needed.
224+
225+
226+``` haskell
227+instance HasPagination Color "hex" where
228+ type RangeType Color "hex" = String
229+ getFieldValue _ = hex
230+
231+-- to then define: Ranges '["name", "hex"] Color
232+```
233+
234+
235+#### Parsing Options
236+
237+By default, `servant-pagination` provides an implementation of `getRangeOptions` for each
238+`HasPagination` instance. However, this can be overridden when defining the instance to provide
239+your own options. These options come into play when a `Range` header is received and isn't fully
240+specified (`limit`, `offset`, `order` are all optional) to provide default fallback values for those.
241+
242+For instance, let's say we wanted to change the default limit to `5` in a new range on
243+`"rgb"`, we could tweak the corresponding `HasPagination` instance as follows:
244+
245+``` haskell
246+instance HasPagination Color "rgb" where
247+ type RangeType Color "rgb" = Int
248+ getFieldValue _ = sum . rgb
249+ getRangeOptions _ _ = Pagination.defaultOptions { defaultRangeLimit = 5 }
250+```
doc/cookbook/pagination/pagination.cabalnew file+23
@@ -0,0 +1,23 @@
1+cabal-version: 2.2
2+name: cookbook-pagination
3+version: 2.1
4+synopsis: Pagination with Servant example
5+homepage: http://docs.servant.dev/
6+license: BSD-3-Clause
7+license-file: ../../../servant/LICENSE
8+author: Servant Contributors
9+maintainer: haskell-servant-maintainers@googlegroups.com
10+build-type: Simple
11+tested-with: GHC==8.6.5, GHC==8.8.3, GHC ==8.10.7
12+
13+executable cookbook-pagination
14+ main-is: Pagination.lhs
15+ build-tool-depends: markdown-unlit:markdown-unlit
16+ default-language: Haskell2010
17+ ghc-options: -Wall -pgmL markdown-unlit
18+ build-depends: base >= 4.9 && <5
19+ , aeson
20+ , servant
21+ , servant-server
22+ , servant-pagination >= 2.1.0 && < 3.0.0
23+ , warp
doc/cookbook/sentry/Sentry.lhsnew file+116
@@ -0,0 +1,116 @@
1+# Error logging with Sentry
2+
3+In this recipe we will use [Sentry](https://sentry.io) to collect the runtime exceptions generated by our application. We will use the [raven-haskell](https://hackage.haskell.org/package/raven-haskell) package, which is a client for a Sentry event server. Mind that this package is not present on [Stackage](https://www.stackage.org/), so if we are using [Stack](https://docs.haskellstack.org) we’ll need to add it to our `extra-deps` section in the `stack.yaml` file.
4+
5+To exemplify this we will need the following imports
6+
7+```haskell
8+{-# LANGUAGE DataKinds #-}
9+{-# LANGUAGE TypeOperators #-}
10+
11+import Control.Exception (Exception,
12+ SomeException, throw)
13+import Data.ByteString.Char8 (unpack)
14+import Network.Wai (Request, rawPathInfo,
15+ requestHeaderHost)
16+import Network.Wai.Handler.Warp (defaultOnException,
17+ defaultSettings,
18+ runSettings,
19+ setOnException,
20+ setPort)
21+import Servant
22+import System.Log.Raven (initRaven, register,
23+ silentFallback)
24+import System.Log.Raven.Transport.HttpConduit (sendRecord)
25+import System.Log.Raven.Types (SentryLevel (Error),
26+ SentryRecord (..))
27+```
28+
29+Just for the sake of the example we will use the following API which will throw an exception
30+
31+```haskell
32+type API = "break" :> Get '[JSON] ()
33+
34+data MyException = MyException deriving (Show)
35+
36+instance Exception MyException
37+
38+server = breakHandler
39+ where breakHandler :: Handler ()
40+ breakHandler = do
41+ throw MyException
42+ return ()
43+```
44+
45+First thing we need to do if we want to intercept and log this exception, we need to look in the section of our code where we run the `warp` application, and instead of using the simple `run` function from `warp`, we use the `runSettings` functions which allows to customise the handling of requests
46+
47+```haskell
48+main :: IO ()
49+main =
50+ let
51+ settings =
52+ setPort 8080 $
53+ setOnException sentryOnException $
54+ defaultSettings
55+ in
56+ runSettings settings $ serve (Proxy :: Proxy API) server
57+```
58+
59+The definition of the `sentryOnException` function could look as follows
60+
61+```haskell
62+sentryOnException :: Maybe Request -> SomeException -> IO ()
63+sentryOnException mRequest exception = do
64+ sentryService <- initRaven
65+ "https://username:password@senty.host/id"
66+ id
67+ sendRecord
68+ silentFallback
69+ register
70+ sentryService
71+ "myLogger"
72+ Error
73+ (formatMessage mRequest exception)
74+ (recordUpdate mRequest exception)
75+ defaultOnException mRequest exception
76+```
77+
78+It does three things. First it initializes the service which will communicate with Sentry. The parameters it receives are:
79+
80+- the Sentry `DSN`, which is obtained when creating a new project on Sentry
81+- a default way to update sentry fields, where we use the identity function
82+- an event transport, which generally would be `sendRecord`, an HTTPS capable transport which uses http-conduit
83+- a fallback handler, which we choose to be `silentFallback` since later we are logging to the console anyway.
84+
85+In the second step it actually sends our message to Sentry with the `register` function. Its arguments are:
86+
87+- the configured Sentry service which we just created
88+- the name of the logger
89+- the error level (see [SentryLevel](https://hackage.haskell.org/package/raven-haskell/docs/System-Log-Raven-Types.html#t:SentryLevel) for the possible options)
90+- the message we want to send
91+- an update function to handle the specific `SentryRecord`
92+
93+Eventually it just delegates the error handling to the default warp mechanism.
94+
95+The function `formatMessage` simply uses the request and the exception to return a string with the error message.
96+
97+```haskell
98+formatMessage :: Maybe Request -> SomeException -> String
99+formatMessage Nothing exception = "Exception before request could be parsed: " ++ show exception
100+formatMessage (Just request) exception = "Exception " ++ show exception ++ " while handling request " ++ show request
101+```
102+
103+The only piece left now is the `recordUpdate` function which allows to decorate with other [attributes](https://docs.sentry.io/clientdev/attributes/) the default `SentryRecord`.
104+
105+```haskell
106+recordUpdate :: Maybe Request -> SomeException -> SentryRecord -> SentryRecord
107+recordUpdate Nothing exception record = record
108+recordUpdate (Just request) exception record = record
109+ { srCulprit = Just $ unpack $ rawPathInfo request
110+ , srServerName = fmap unpack $ requestHeaderHost request
111+ }
112+```
113+
114+In this examples we set the raw path as the culprit and we use the `Host` header to populate the server name field.
115+
116+You can try to run this code using the `cookbook-sentry` executable. You should obtain a `MyException` error in the console and, if you provided a valid Sentry DSN, you should also find your error in the Sentry interface.
doc/cookbook/sentry/sentry.cabalnew file+24
@@ -0,0 +1,24 @@
1+cabal-version: 2.2
2+name: cookbook-sentry
3+version: 0.1
4+synopsis: Collecting runtime exceptions using Sentry
5+homepage: http://docs.servant.dev/
6+license: BSD-3-Clause
7+license-file: ../../../servant/LICENSE
8+author: Servant Contributors
9+maintainer: haskell-servant-maintainers@googlegroups.com
10+build-type: Simple
11+tested-with: GHC==8.6.5, GHC==8.8.3, GHC ==8.10.7
12+
13+executable cookbook-sentry
14+ main-is: Sentry.lhs
15+ build-depends: base == 4.*
16+ , bytestring
17+ , markdown-unlit >= 0.4
18+ , raven-haskell >= 0.1.2
19+ , servant-server
20+ , warp >= 3.2
21+ , wai >= 3.2
22+ default-language: Haskell2010
23+ ghc-options: -Wall -pgmL markdown-unlit
24+ build-tool-depends: markdown-unlit:markdown-unlit
doc/cookbook/structuring-apis/StructuringApis.lhsnew file+205
@@ -0,0 +1,205 @@
1+# Structuring APIs
2+
3+In this recipe, we will see a few simple ways to
4+structure your APIs by splitting them up into smaller
5+"sub-APIs" or by sharing common structure between
6+different parts. Let's start with the usual throat
7+clearing.
8+
9+``` haskell
10+{-# LANGUAGE DataKinds #-}
11+{-# LANGUAGE DeriveGeneric #-}
12+{-# LANGUAGE TypeOperators #-}
13+{-# LANGUAGE KindSignatures #-}
14+import Data.Aeson
15+import GHC.Generics
16+import GHC.TypeLits
17+import Network.Wai.Handler.Warp
18+import Servant
19+```
20+
21+Our application will consist of three different
22+"sub-APIs", with a few endpoints in each of them.
23+Our global API is defined as follows.
24+
25+``` haskell
26+type API = FactoringAPI
27+ :<|> SimpleAPI "users" User UserId
28+ :<|> SimpleAPI "products" Product ProductId
29+```
30+
31+We simply join the three different parts with `:<|>`,
32+as if each sub-API was just a simple endpoint.
33+The first part, `FactoringAPI`, shows how we can
34+"factor out" combinators that are common to several
35+endpoints, just like we turn `a * b + a * c` into
36+`a * (b + c)` in algebra.
37+
38+``` haskell
39+-- Two endpoints:
40+-- - GET /x/<some 'Int'>[?y=<some 'Int'>]
41+-- - POST /x/<some 'Int'>
42+type FactoringAPI =
43+ "x" :> Capture "x" Int :>
44+ ( QueryParam "y" Int :> Get '[JSON] Int
45+ :<|> Post '[JSON] Int
46+ )
47+
48+{- this is equivalent to:
49+
50+type FactoringAPI' =
51+ "x" :> Capture "x" Int :> QueryParam "y" Int :> Get '[JSON] Int :<|>
52+ "x" :> Capture "x" Int :> Post '[JSON] Int
53+-}
54+```
55+
56+You can see that both endpoints start with a static
57+path fragment, `/"x"`, then capture some arbitrary
58+`Int` until they finally differ. Now, this also has
59+an effect on the server for such an API, and its type
60+in particular. While the server for `FactoringAPI'` would
61+be made of a function of type `Int -> Maybe Int -> Handler Int`
62+and a function of type `Int -> Handler Int` glued with `:<|>`,
63+a server for `FactoringAPI` (without the `'`) reflects the
64+"factorisation" and therefore, `Server FactoringAPI` is
65+`Int -> (Maybe Int -> Handler Int :<|> Handler Int)`. That is, the
66+server must be a function that takes an `Int` (the `Capture`) and
67+returns two values glued with `:<|>`, one of type `Maybe Int -> Handler Int`
68+and the other of type `Handler Int`. Let's provide such a server
69+implementation, with those "nested types".
70+
71+**Tip**: you can load this module in ghci and ask for the concrete
72+type that `Server FactoringAPI` "resolves to" by typing
73+`:kind! Server FactoringAPI`.
74+
75+``` haskell
76+factoringServer :: Server FactoringAPI
77+factoringServer x = getXY :<|> postX
78+
79+ where getXY Nothing = return x
80+ getXY (Just y) = return (x + y)
81+
82+ postX = return (x - 1)
83+```
84+
85+If you want to avoid the "nested types" and the need to manually
86+dispatch the arguments (like `x` above) to the different request
87+handlers, and would just like to be able to declare the API type
88+as above but pretending that the `Capture` is not factored out,
89+that every combinator is "distributed" (i.e that all endpoints
90+are specified like `FactoringAPI'` above), then you should
91+look at `flatten` from the
92+[servant-flatten](https://hackage.haskell.org/package/servant-flatten)
93+package.
94+
95+Next come the two sub-APIs defined in terms of this `SimpleAPI`
96+type, but with different parameters. That type is just a good old
97+Haskell type synonym that abstracts away a pretty common structure in
98+web services, where you have:
99+
100+ - one endpoint for listing a bunch of entities of some type
101+ - one endpoint for accessing the entity with a given identifier
102+ - one endpoint for creating a new entity
103+
104+There are many variants on this theme (endpoints for deleting,
105+paginated listings, etc). The simple definition below reproduces
106+such a structure, but instead of picking concrete types for
107+the entities and their identifiers, we simply let the user
108+of the type decide, by making those types parameters of
109+`SimpleAPI`. While we're at it, we'll put all our endpoints
110+under a common prefix that we also take as a parameter.
111+
112+``` haskell
113+-- Three endpoints:
114+-- - GET /<name>
115+-- - GET /<name>/<some 'i'>
116+-- - POST /<name>
117+type SimpleAPI (name :: Symbol) a i = name :>
118+ ( Get '[JSON] [a]
119+ :<|> Capture "id" i :> Get '[JSON] a
120+ :<|> ReqBody '[JSON] a :> Post '[JSON] NoContent
121+ )
122+```
123+
124+`Symbol` is the [kind](https://wiki.haskell.org/Kind)
125+of type-level strings, which is what servant uses for
126+representing static path fragments. We can even provide
127+a little helper function for creating a server for that API
128+given one handler for each endpoint as arguments.
129+
130+``` haskell
131+simpleServer
132+ :: Handler [a]
133+ -> (i -> Handler a)
134+ -> (a -> Handler NoContent)
135+ -> Server (SimpleAPI name a i)
136+simpleServer listAs getA postA =
137+ listAs :<|> getA :<|> postA
138+
139+{- you could alternatively provide such a definition
140+ but with the handlers running in another monad,
141+ or even an arbitrary one!
142+
143+simpleAPIServer
144+ :: m [a]
145+ -> (i -> m a)
146+ -> (a -> m NoContent)
147+ -> ServerT (SimpleAPI name a i) m
148+simpleAPIServer listAs getA postA =
149+ listAs :<|> getA :<|> postA
150+
151+ and use 'hoistServer' on the result of `simpleAPIServer`
152+ applied to your handlers right before you call `serve`.
153+-}
154+```
155+
156+We can use this to define servers for the user and product
157+related sections of the API.
158+
159+``` haskell
160+userServer :: Server (SimpleAPI "users" User UserId)
161+userServer = simpleServer
162+ (return [])
163+ (\userid -> return $
164+ if userid == 0
165+ then User "john" 64
166+ else User "everybody else" 10
167+ )
168+ (\_user -> return NoContent)
169+
170+productServer :: Server (SimpleAPI "products" Product ProductId)
171+productServer = simpleServer
172+ (return [])
173+ (\_productid -> return $ Product "Great stuff")
174+ (\_product -> return NoContent)
175+```
176+
177+Finally, some dummy types and the serving part.
178+
179+``` haskell
180+type UserId = Int
181+
182+data User = User { username :: String, age :: Int }
183+ deriving Generic
184+
185+instance FromJSON User
186+instance ToJSON User
187+
188+type ProductId = Int
189+
190+data Product = Product { productname :: String }
191+ deriving Generic
192+
193+instance FromJSON Product
194+instance ToJSON Product
195+
196+api :: Proxy API
197+api = Proxy
198+
199+main :: IO ()
200+main = run 8080 . serve api $
201+ factoringServer :<|> userServer :<|> productServer
202+```
203+
204+This program is available as a cabal project
205+[here](https://github.com/haskell-servant/servant/tree/master/doc/cookbook/structuring-apis).
doc/cookbook/structuring-apis/structuring-apis.cabalnew file+23
@@ -0,0 +1,23 @@
1+cabal-version: 2.2
2+name: cookbook-structuring-apis
3+version: 0.1
4+synopsis: Example that shows how APIs can be structured
5+homepage: http://docs.servant.dev/
6+license: BSD-3-Clause
7+license-file: ../../../servant/LICENSE
8+author: Servant Contributors
9+maintainer: haskell-servant-maintainers@googlegroups.com
10+build-type: Simple
11+tested-with: GHC==8.6.5, GHC==8.8.3, GHC ==8.10.7
12+
13+executable cookbook-structuring-apis
14+ main-is: StructuringApis.lhs
15+ build-depends: base == 4.*
16+ , aeson >= 1.2
17+ , servant
18+ , servant-server
19+ , warp >= 3.2
20+ , markdown-unlit >= 0.4
21+ default-language: Haskell2010
22+ ghc-options: -Wall -pgmL markdown-unlit
23+ build-tool-depends: markdown-unlit:markdown-unlit
doc/cookbook/testing/Testing.lhsnew file+506
@@ -0,0 +1,506 @@
1+# How To Test Servant Applications
2+
3+Even with a nicely structured API that passes Haskell's strict type checker,
4+it's a good idea to write some tests for your application.
5+
6+In this recipe we'll work through some common testing strategies and provide
7+examples of utlizing these testing strategies in order to test Servant
8+applications.
9+
10+## Testing strategies
11+
12+There are many testing strategies you may wish to employ when testing your
13+Servant application, but included below are three common testing patterns:
14+
15+- We'll use `servant-client` to derive client functions and then send valid
16+requests to our API, running in another thread. This is great for testing
17+that our **business logic** is correctly implemented with only valid HTTP
18+requests.
19+
20+- We'll also use `hspec-wai` to make **arbitrary HTTP requests**, in order to
21+test how our application may respond to invalid or otherwise unexpected
22+requests.
23+
24+- Finally, we can also use `servant-quickcheck` for **whole-API tests**, in order
25+to assert that our entire application conforms to **best practices**.
26+
27+## Useful Libraries
28+
29+The following libraries will often come in handy when we decide to test our
30+Servant applications:
31+
32+- [hspec](https://hspec.github.io/)
33+- [hspec-wai](http://hackage.haskell.org/package/hspec-wai)
34+- [QuickCheck](http://hackage.haskell.org/package/QuickCheck)
35+- [servant-quickcheck](https://hackage.haskell.org/package/servant-quickcheck)
36+
37+## Imports and Our Testing Module
38+
39+This recipe starts with the following ingredients:
40+
41+```haskell
42+{-# LANGUAGE OverloadedStrings, TypeFamilies, DataKinds,
43+ DeriveGeneric, TypeOperators #-}
44+import Prelude ()
45+import Prelude.Compat
46+
47+import qualified Control.Concurrent as C
48+import Control.Concurrent.MVar
49+import Control.Exception (bracket)
50+import Control.Lens hiding (Context)
51+import Data.Aeson
52+import Data.Aeson.Lens
53+import qualified Data.HashMap.Strict as HM
54+import Data.Text (Text, unpack)
55+import GHC.Generics
56+import Network.HTTP.Client hiding (Proxy)
57+import Network.HTTP.Types
58+import Network.Wai
59+import qualified Network.Wai.Handler.Warp as Warp
60+
61+import Servant
62+import Servant.Client
63+import Servant.Server
64+import Servant.QuickCheck
65+import Servant.QuickCheck.Internal (serverDoesntSatisfy)
66+
67+import Test.Hspec
68+import Test.Hspec.Wai
69+import Test.Hspec.Wai.Matcher
70+```
71+
72+We're going to produce different `Spec`s that represent different
73+aspects of our application, and we'll ask `hspec` to run all of our different
74+`Spec`s. This is a common organizational method for testing modules:
75+
76+```haskell
77+spec :: Spec
78+spec = do
79+ businessLogicSpec
80+ thirdPartyResourcesSpec
81+ servantQuickcheckSpec
82+```
83+
84+Often, codebases will use `hspec`'s
85+[autodiscover pragma](http://hspec.github.io/hspec-discover.html)
86+to find all testing modules and `Spec`s inside, but we're going to
87+explicitly make a `main` function to run our tests because we have only one
88+`spec` defined above:
89+
90+```haskell
91+main :: IO ()
92+main = hspec spec
93+```
94+
95+## Testing Your Business Logic
96+
97+Let's say we have an API that looks something like this:
98+
99+```haskell
100+data User = User {
101+ name :: Text
102+ , user_id :: Integer
103+ } deriving (Eq, Show, Generic)
104+
105+instance FromJSON User
106+instance ToJSON User
107+
108+type UserApi =
109+ -- One endpoint: create a user
110+ "user" :> Capture "userId" Integer :> Post '[JSON] User
111+```
112+
113+A real server would likely use a database to store, retrieve, and validate
114+users, but we're going to do something really simple merely to have something
115+to test. With that said, here's a sample handler, server, and `Application`
116+for the endpoint described above:
117+
118+```haskell
119+userApp :: Application
120+userApp = serve (Proxy :: Proxy UserApi) userServer
121+
122+userServer :: Server UserApi
123+userServer = createUser
124+
125+createUser :: Integer -> Handler User
126+createUser userId = do
127+ if userId > 5000
128+ then pure $ User { name = "some user", user_id = userId }
129+ else throwError $ err400 { errBody = "userId is too small" }
130+```
131+
132+### Strategy 1: Spin Up a Server, Create a Client, Make Some Requests
133+
134+One of the benefits of Servant's type-level DSL for describing APIs is that
135+once you have provided a type-level description of your API, you can create
136+clients, documentation, or other tools for it somewhat magically.
137+
138+In this case, we'd like to *test* our server, so we can use `servant-client`
139+to create a client, after which we'll run our server, and then make requests
140+of it and see how it responds.
141+
142+Let's write some tests:
143+
144+```haskell
145+withUserApp :: (Warp.Port -> IO ()) -> IO ()
146+withUserApp action =
147+ -- testWithApplication makes sure the action is executed after the server has
148+ -- started and is being properly shutdown.
149+ Warp.testWithApplication (pure userApp) action
150+
151+
152+businessLogicSpec :: Spec
153+businessLogicSpec =
154+ -- `around` will start our Server before the tests and turn it off after
155+ around withUserApp $ do
156+ -- create a test client function
157+ let createUser = client (Proxy :: Proxy UserApi)
158+ -- create a servant-client ClientEnv
159+ baseUrl <- runIO $ parseBaseUrl "http://localhost"
160+ manager <- runIO $ newManager defaultManagerSettings
161+ let clientEnv port = mkClientEnv manager (baseUrl { baseUrlPort = port })
162+
163+ -- testing scenarios start here
164+ describe "POST /user" $ do
165+ it "should create a user with a high enough ID" $ \port -> do
166+ result <- runClientM (createUser 50001) (clientEnv port)
167+ result `shouldBe` (Right $ User { name = "some user", user_id = 50001})
168+ it "will it fail with a too-small ID?" $ \port -> do
169+ result <- runClientM (createUser 4999) (clientEnv port)
170+ result `shouldBe` (Right $ User { name = "some user", user_id = 50001})
171+```
172+
173+### Running These Tests
174+
175+Let's run our tests and see what happens:
176+
177+```
178+$ cabal new-test all
179+POST /user
180+ should create a user with a high enough ID
181+ should fail with a too-small ID FAILED [1]
182+
183+ Failures:
184+
185+ Testing.lhs:129:7:
186+ 1) POST /user should fail with a too-small ID
187+ expected: Right (User {name = "some user", user_id = 50001})
188+ but got: Left (FailureResponse (Response {responseStatusCode = Status {statusCode = 400, statusMessage = "Bad Request"}, responseHeaders = fromList [("Transfer-Encoding","chunked"),("Date","Fri, 12 Oct 2018 04:36:22 GMT"),("Server","Warp/3.2.25")], responseHttpVersion = HTTP/1.1, responseBody = "userId is too small"}))
189+
190+ To rerun use: --match "/POST /user/should fail with a too-small ID/"
191+```
192+
193+Hmm. One passed and one failed! It looks like I *was* expecting a success
194+response in the second test, but I actually got a failure. We should fix that,
195+but first I'd like to introduce `hspec-wai`, which will give us different
196+mechanisms for making requests of our application and validating the responses
197+we get. We're also going to spin up a fake Elasticsearch server, so that our
198+server can think it's talking to a real database.
199+
200+
201+## *Mocking* 3rd Party Resources
202+
203+Often our web applications will need to make their own web
204+requests to other 3rd-party applications. These requests provide a lot
205+of opportunity for failure and so we'd like to test that the right
206+messages and failure values (in addition to success values) are returned
207+from our application.
208+
209+### Define the 3rd-Party Resource
210+
211+With Servant's type-level API definitions, assuming you've already defined the
212+API you want to mock, it's relatively trivial to create a simple server for
213+the purposes of running tests. For instance, consider an API server that needs
214+to get data out of Elasticsearch. Let's first define the Elasticsearch server
215+and client using Servant API descriptions:
216+
217+```haskell
218+type SearchAPI =
219+ -- We're using Aeson's Generic JSON `Value` to make things easier on
220+ -- ourselves. We're also representing only one Elasticsearch endpoint:
221+ -- get item by id
222+ "myIndex" :> "myDocType" :> Capture "docId" Integer :> Get '[JSON] Value
223+
224+-- Here's our Servant Client function
225+getDocument = client (Proxy :: Proxy SearchAPI)
226+
227+-- We can use these helpers when we want to make requests
228+-- using our client function
229+clientEnv :: Text -> Text -> IO ClientEnv
230+clientEnv esHost esPort = do
231+ baseUrl <- parseBaseUrl $ unpack $ esHost <> ":" <> esPort
232+ manager <- newManager defaultManagerSettings
233+ pure $ mkClientEnv manager baseUrl
234+
235+runSearchClient :: Text -> Text -> ClientM a -> IO (Either ClientError a)
236+runSearchClient esHost esPort = (clientEnv esHost esPort >>=) . runClientM
237+```
238+
239+### Servant Server Example Using this 3rd-Party Resource
240+
241+So we've got an Elasticsearch server and a client to talk to it. Let's now
242+build a simple app server that uses this client to retrieve documents. This
243+is somewhat contrived, but hopefully it illustrates the typical three-tier
244+application architecture.
245+
246+One note: we're also going to take advantage of `lens-aeson` here, which may
247+look a bit foreign. The gist of it is that we're going to traverse a JSON
248+`Value` from Elasticsearch and try to extract some kind of document to
249+return.
250+
251+Imagine, then, that this is our real server implementation:
252+
253+```haskell
254+type DocApi =
255+ "docs" :> Capture "docId" Integer :> Get '[JSON] Value
256+
257+docsApp :: Text -> Text -> Application
258+docsApp esHost esPort = serve (Proxy :: Proxy DocApi) $ docServer esHost esPort
259+
260+docServer :: Text -> Text -> Server DocApi
261+docServer esHost esPort = getDocById esHost esPort
262+
263+-- Our Handler tries to get a doc from Elasticsearch and then tries to parse
264+-- it. Unfortunately, there's a lot of opportunity for failure in these
265+-- actions
266+getDocById :: Text -> Text -> Integer -> Handler Value
267+getDocById esHost esPort docId = do
268+ -- Our Servant Client function returns Either ClientError Value here:
269+ docRes <- liftIO $ runSearchClient esHost esPort (getDocument docId)
270+ case docRes of
271+ Left err -> throwError $ err404 { errBody = "Failed looking up content" }
272+ Right value -> do
273+ -- we'll either fail to parse our document or we'll return it
274+ case value ^? _Object . ix "_source" of
275+ Nothing -> throwError $ err400 { errBody = "Failed parsing content" }
276+ Just obj -> pure obj
277+```
278+
279+### Testing Our Backend
280+
281+So the above represents our application and is close to a server we may
282+actually deploy. How then shall we test this application?
283+
284+Ideally, we'd like it to make requests of a *real* Elasticsearch server, but
285+we certainly don't want our tests to trigger requests to a live, production
286+database. In addition, we don't want to depend on our real Elasticsearch
287+server having specific, consistent results for us to test against, because
288+that would make our tests flaky (and flaky tests are sometimes described as
289+worse than not having tests at all).
290+
291+One solution to this is to create a trivial Elasticsearch server as part of
292+our testing code. We can do this relatively easily because we already have
293+an API definition for it above. With a *real* server, we can then let our own
294+application make requests of it and we'll simulate different scenarios in
295+order to make sure our application responds the way we expect it to.
296+
297+Let's start with some helpers which will allow us to run a testing version
298+of our Elasticsearch server in another thread:
299+
300+```haskell
301+-- | We'll run the Elasticsearch server so we can test behaviors
302+withElasticsearch :: IO () -> IO ()
303+withElasticsearch action =
304+ bracket (liftIO $ C.forkIO $ Warp.run 9999 esTestApp)
305+ C.killThread
306+ (const action)
307+
308+esTestApp :: Application
309+esTestApp = serve (Proxy :: Proxy SearchAPI) esTestServer
310+
311+esTestServer :: Server SearchAPI
312+esTestServer = getESDocument
313+
314+-- This is the *mock* handler we're going to use. We create it
315+-- here specifically to trigger different behavior in our tests.
316+getESDocument :: Integer -> Handler Value
317+getESDocument docId
318+ -- arbitrary things we can use in our tests to simulate failure:
319+ -- we want to trigger different code paths.
320+ | docId > 1000 = throwError err500
321+ | docId > 500 = pure . Object $ HM.fromList [("bad", String "data")]
322+ | otherwise = pure $ Object $ HM.fromList [("_source", Object $ HM.fromList [("a", String "b")])]
323+```
324+
325+Now, we should be ready to write some tests.
326+
327+In this case, we're going to use `hspec-wai`, which will give us a simple way
328+to run our application, make requests, and make assertions against the
329+responses we receive.
330+
331+Hopefully, this will simplify our testing code:
332+
333+```haskell
334+thirdPartyResourcesSpec :: Spec
335+thirdPartyResourcesSpec = around_ withElasticsearch $ do
336+ -- we call `with` from `hspec-wai` and pass *real* `Application`
337+ with (pure $ docsApp "localhost" "9999") $ do
338+ describe "GET /docs" $ do
339+ it "should be able to get a document" $
340+ -- `get` is a function from hspec-wai`.
341+ get "/docs/1" `shouldRespondWith` 200
342+ it "should be able to handle connection failures" $
343+ get "/docs/1001" `shouldRespondWith` 404
344+ it "should be able to handle parsing failures" $
345+ get "/docs/501" `shouldRespondWith` 400
346+ it "should be able to handle odd HTTP requests" $
347+ -- we can also make all kinds of arbitrary custom requests to see how
348+ -- our server responds using the `request` function:
349+ -- request :: Method -> ByteString -> [Header]
350+ -- -> LB.ByteString -> WaiSession SResponse
351+ request methodPost "/docs/501" [] "{" `shouldRespondWith` 405
352+ it "we can also do more with the Response using hspec-wai's matchers" $
353+ -- see also `MatchHeader` and JSON-matching tools as well...
354+ get "/docs/1" `shouldRespondWith` 200 { matchBody = MatchBody bodyMatcher }
355+
356+bodyMatcher :: [Network.HTTP.Types.Header] -> Body -> Maybe String
357+bodyMatcher _ body = case (decode body :: Maybe Value) of
358+ -- success in this case means we return `Nothing`
359+ Just val | val == (Object $ HM.fromList [("a", String "b")]) -> Nothing
360+ _ -> Just "This is how we represent failure: this message will be printed"
361+```
362+
363+Out of the box, `hspec-wai` provides a lot of useful tools for us to run tests
364+against our application. What happens when we run these tests?
365+
366+```
367+$ cabal new-test all
368+...
369+
370+GET /docs
371+ should be able to get a document
372+ should be able to handle connection failures
373+ should be able to handle parsing failures
374+ should be able to handle odd HTTP requests
375+ we can also do more with the Response using hspec-wai's matchers
376+```
377+
378+Fortunately, they all passed! Let's move to another strategy: whole-API
379+testing.
380+
381+## Servant Quickcheck
382+
383+[`servant-quickcheck`](https://github.com/haskell-servant/servant-quickcheck)
384+is a project that allows users to write tests for whole Servant APIs using
385+quickcheck-style property-checking mechanisms.
386+
387+`servant-quickcheck` is great for asserting API-wide rules, such as "no
388+endpoint throws a 500" or "all 301 status codes also come with a Location
389+header". The project even comes with a number of predicates that reference
390+the [RFCs they originate from](https://github.com/haskell-servant/servant-quickcheck/blob/master/src/Servant/QuickCheck/Internal/Predicates.hs).
391+
392+In other words, it's one way to assert that your APIs conform to specs and
393+best practices.
394+
395+### Quickcheckable API
396+
397+Let's make an API and a server to demonstrate how to use `servant-quickcheck`:
398+
399+```haskell
400+type API = ReqBody '[JSON] String :> Post '[JSON] String
401+ :<|> Get '[JSON] Int
402+ :<|> BasicAuth "some-realm" () :> Get '[JSON] ()
403+
404+api :: Proxy API
405+api = Proxy
406+
407+server :: IO (Server API)
408+server = do
409+ mvar <- newMVar ""
410+ return $ (\x -> liftIO $ swapMVar mvar x)
411+ :<|> (liftIO $ readMVar mvar >>= return . length)
412+ :<|> (const $ return ())
413+```
414+
415+### Using `servant-quickcheck`
416+
417+Let's build some tests for our API using `servant-quickcheck`.
418+
419+Similar to the above examples, we're going to create `Spec`s, but in this
420+case, we'll rely on a number of predicates available from `servant-quickcheck`
421+to see if our API server conforms to best practices:
422+
423+```haskell
424+-- Let's set some QuickCheck values
425+args :: Args
426+args = defaultArgs { maxSuccess = 500 }
427+
428+-- Here's a Servant Context object we'll use
429+ctx :: Context '[BasicAuthCheck ()]
430+ctx = BasicAuthCheck (const . return $ NoSuchUser) :. EmptyContext
431+
432+
433+servantQuickcheckSpec :: Spec
434+servantQuickcheckSpec = describe "" $ do
435+ it "API demonstrates best practices" $
436+ -- `withServerServer` and `withServantServerAndContext` come from `servant-quickcheck`
437+ withServantServerAndContext api ctx server $ \burl ->
438+ -- `serverSatisfies` and the predicates also come from `servant-quickcheck`
439+ serverSatisfies api burl args (unauthorizedContainsWWWAuthenticate
440+ <%> not500
441+ <%> onlyJsonObjects -- this one isn't true!
442+ <%> mempty)
443+
444+ it "API doesn't have these things implemented yet" $
445+ withServantServerAndContext api ctx server $ \burl -> do
446+ serverDoesntSatisfy api burl args (getsHaveCacheControlHeader
447+ <%> notAllowedContainsAllowHeader
448+ <%> mempty)
449+```
450+
451+Let's see what happens when we run these tests:
452+
453+
454+```
455+ API demonstrates best practices FAILED [2]
456++++ OK, passed 500 tests.
457+ API doesn't have these things implemented yet
458+
459+ src/Servant/QuickCheck/Internal/QuickCheck.hs:143:11:
460+ 2) Main[339:25] API demonstrates best practices
461+ Failed:
462+ Just Predicate failed
463+ Predicate: onlyJsonObjects
464+
465+ Response:
466+ Status code: 200
467+ Headers: "Transfer-Encoding": "chunked"
468+ "Date": "Fri, 12 Oct 2018 04:36:22 GMT"
469+ "Server": "Warp/3.2.25"
470+ "Content-Type": "application/json;charset=utf-8"
471+ Body: ""
472+
473+ To rerun use: --match "/Main[339:25]/API demonstrates best practices/"
474+
475+Randomized with seed 1046277487
476+
477+Finished in 0.4306 seconds
478+```
479+
480+Hmm. It looks like we *thought* our API only returned JSON objects, which is a
481+best practice, but in fact, we *did* have an endpoint that returned an empty
482+body, which you can see in the printed response above: `Body: ""`. We should
483+consider revising our API to only return top-level JSON Objects in the future!
484+
485+### Other Cool Things
486+
487+`servant-quickcheck` also has a cool mechanism where you can compare two API
488+servers to demonstrate that they respond identically to requests. This may be
489+useful if you are planning to rewrite one API in another language or with
490+another web framework. You have to specify whether you're looking for
491+`jsonEquality` vs regular `ByteString` equality, though.
492+
493+## Conclusion
494+
495+There are lots of techniques for testing and we only covered a few here.
496+
497+Useful libraries such as `hspec-wai` have ways of running Wai `Application`s
498+and sending requests to them, while Servant's type-level DSL for defining APIs
499+allows us to more easily mock out servers and to derive clients, which will
500+only craft valid requests.
501+
502+Lastly, if you want a broad overview of where your application fits in with
503+regard to best practices, consider using `servant-quickcheck`.
504+
505+This program is available as a cabal project
506+[here](https://github.com/haskell-servant/servant/tree/master/doc/cookbook/testing).
doc/cookbook/testing/testing.cabalnew file+38
@@ -0,0 +1,38 @@
1+cabal-version: 2.2
2+name: cookbook-testing
3+version: 0.0.1
4+synopsis: Common testing patterns in Servant apps
5+description: This recipe includes various strategies for writing tests for Servant.
6+homepage: http://docs.servant.dev/
7+license: BSD-3-Clause
8+license-file: ../../../servant/LICENSE
9+author: Servant Contributors
10+maintainer: haskell-servant-maintainers@googlegroups.com
11+category: Servant
12+build-type: Simple
13+tested-with: GHC==8.6.5, GHC==8.8.3, GHC ==8.10.7
14+
15+executable cookbook-testing
16+ main-is: Testing.lhs
17+ build-depends: base == 4.*
18+ , base-compat
19+ , text >= 1.2
20+ , aeson >= 1.2
21+ , lens-aeson
22+ , lens
23+ , servant
24+ , servant-client
25+ , servant-server
26+ , servant-quickcheck >= 0.0.10
27+ , http-client
28+ , http-types >= 0.12
29+ , hspec
30+ , hspec-wai
31+ , QuickCheck
32+ , unordered-containers
33+ , warp >= 3.2
34+ , wai >= 3.2
35+ , wai-extra
36+ default-language: Haskell2010
37+ ghc-options: -Wall -pgmL markdown-unlit
38+ build-tool-depends: markdown-unlit:markdown-unlit
doc/cookbook/using-custom-monad/UsingCustomMonad.lhsnew file+120
@@ -0,0 +1,120 @@
1+# Using a custom monad
2+
3+In this section we will create an API for a book shelf without any backing DB storage.
4+We will keep state in memory and share it between requests using `Reader` monad and `STM`.
5+
6+We start with a pretty standard set of imports and definition of the model:
7+
8+``` haskell
9+{-# LANGUAGE DataKinds #-}
10+{-# LANGUAGE DeriveGeneric #-}
11+{-# LANGUAGE TypeOperators #-}
12+
13+import Control.Concurrent (forkIO, killThread)
14+import Control.Concurrent.STM.TVar (TVar, newTVar, readTVar,
15+ writeTVar)
16+import Control.Exception (bracket)
17+import Control.Monad.IO.Class (liftIO)
18+import Control.Monad.STM (atomically)
19+import Control.Monad.Trans.Reader (ReaderT, ask, runReaderT)
20+import Data.Aeson (FromJSON, ToJSON)
21+import GHC.Generics (Generic)
22+import Network.HTTP.Client (defaultManagerSettings,
23+ newManager)
24+import Network.Wai.Handler.Warp (run)
25+
26+import Servant
27+import Servant.Client
28+
29+newtype Book = Book String deriving (Show, Generic)
30+instance ToJSON Book
31+instance FromJSON Book
32+```
33+
34+Now, let's define the API for book storage.
35+For the sake of simplicity we'll only have methods for getting all books and adding a new one.
36+
37+``` haskell
38+type GetBooks = Get '[JSON] [Book]
39+type AddBook = ReqBody '[JSON] Book :> PostCreated '[JSON] Book
40+type BooksAPI = "books" :> (GetBooks :<|> AddBook)
41+
42+api :: Proxy BooksAPI
43+api = Proxy
44+```
45+
46+Next, we define the state and the monad to run our handlers
47+
48+``` haskell
49+data State = State
50+ { books :: TVar [Book]
51+ }
52+
53+type AppM = ReaderT State Handler
54+```
55+
56+Note that we can't use `State` monad here, because state will not be shared between requests.
57+
58+We can now define handlers in terms of `AppM`...
59+
60+```haskell
61+server :: ServerT BooksAPI AppM
62+server = getBooks :<|> addBook
63+ where getBooks :: AppM [Book]
64+ getBooks = do
65+ State{books = p} <- ask
66+ liftIO $ atomically $ readTVar p
67+
68+ addBook :: Book -> AppM Book
69+ addBook book = do
70+ State{books = p} <- ask
71+ liftIO $ atomically $ readTVar p >>= writeTVar p . (book :)
72+ return book
73+
74+```
75+
76+...and transform `AppM` to `Handler` by simply using `runReaderT`
77+
78+``` haskell
79+nt :: State -> AppM a -> Handler a
80+nt s x = runReaderT x s
81+
82+app :: State -> Application
83+app s = serve api $ hoistServer api (nt s) server
84+```
85+
86+Finally, we end up with the following program
87+
88+``` haskell
89+main :: IO ()
90+main = do
91+ let port = 8080
92+ mgr <- newManager defaultManagerSettings
93+ initialBooks <- atomically $ newTVar []
94+ let runApp = run port $ app $ State initialBooks
95+ bracket (forkIO runApp) killThread $ \_ -> do
96+ let getBooksClient :<|> addBookClient = client api
97+ let printBooks = getBooksClient >>= liftIO . print
98+ _ <- flip runClientM (mkClientEnv mgr (BaseUrl Http "localhost" port "")) $ do
99+ _ <- printBooks
100+ _ <- addBookClient $ Book "Harry Potter and the Order of the Phoenix"
101+ _ <- printBooks
102+ _ <- addBookClient $ Book "To Kill a Mockingbird"
103+ _ <- printBooks
104+ _ <- addBookClient $ Book "The Picture of Dorian Gray"
105+ printBooks
106+ return ()
107+```
108+
109+When run, it outputs the following:
110+
111+```
112+Running cookbook-using-custom-monad...
113+[]
114+[Book "Harry Potter and the Order of the Phoenix"]
115+[Book "To Kill a Mockingbird",Book "Harry Potter and the Order of the Phoenix"]
116+[Book "The Picture of Dorian Gray",Book "To Kill a Mockingbird",Book "Harry Potter and the Order of the Phoenix"]
117+```
118+
119+To use `Raw` endpoints, look at the
120+[servant-rawm](http://hackage.haskell.org/package/servant-rawm) package.
doc/cookbook/using-custom-monad/using-custom-monad.cabalnew file+28
@@ -0,0 +1,28 @@
1+cabal-version: 2.2
2+name: cookbook-using-custom-monad
3+version: 0.1
4+synopsis: Using custom monad to pass a state between handlers
5+homepage: http://docs.servant.dev/
6+license: BSD-3-Clause
7+license-file: ../../../servant/LICENSE
8+author: Servant Contributors
9+maintainer: haskell-servant-maintainers@googlegroups.com
10+build-type: Simple
11+tested-with: GHC==8.6.5, GHC==8.8.3, GHC ==8.10.7
12+
13+executable cookbook-using-custom-monad
14+ main-is: UsingCustomMonad.lhs
15+ build-depends: base == 4.*
16+ , aeson >= 1.2
17+ , servant
18+ , servant-client
19+ , servant-server
20+ , warp >= 3.2
21+ , wai >= 3.2
22+ , http-client >= 0.5
23+ , markdown-unlit >= 0.4
24+ , stm >= 2.4
25+ , transformers >= 0.3
26+ default-language: Haskell2010
27+ ghc-options: -Wall -pgmL markdown-unlit
28+ build-tool-depends: markdown-unlit:markdown-unlit
doc/cookbook/using-free-client/UsingFreeClient.lhsnew file+192
@@ -0,0 +1,192 @@
1+# Inspecting, debugging, simulating clients and more
2+
3+or simply put: _a practical introduction to `Servant.Client.Free`_.
4+
5+Someone asked on IRC how one could access the intermediate Requests (resp. Responses)
6+produced (resp. received) by client functions derived using servant-client.
7+My response to such inquiries is: to extend `servant-client` in an ad-hoc way (e.g for testing or debugging
8+purposes), use `Servant.Client.Free`. This recipe shows how.
9+
10+First the module header, but this time We'll comment the imports.
11+
12+```haskell
13+{-# LANGUAGE DataKinds #-}
14+{-# LANGUAGE TypeOperators #-}
15+module Main (main) where
16+```
17+
18+We will primarily use `Servant.Client.Free`, it doesn't re-export anything
19+from `free` package, so we need to import it as well.
20+
21+```haskell
22+import Control.Monad.Free
23+import Servant.Client.Free
24+```
25+
26+Also we'll use `servant-client` internals, which uses `http-client`,
27+so let's import them *qualified*
28+
29+```haskell
30+import qualified Servant.Client.Internal.HttpClient as I
31+import qualified Network.HTTP.Client as HTTP
32+```
33+
34+The rest of the imports are for a server we implement here for completeness.
35+
36+```haskell
37+import Servant
38+import Network.Wai.Handler.Warp (run)
39+import System.Environment (getArgs)
40+```
41+
42+## API & Main
43+
44+We'll work with a very simple API:
45+
46+```haskell
47+type API = "square" :> Capture "n" Int :> Get '[JSON] Int
48+
49+api :: Proxy API
50+api = Proxy
51+```
52+
53+Next we implement a `main`. If passed `"server"` it will run `server`, if passed
54+`"client"` it will run a `test` function (to be defined next). This should be
55+pretty straightforward:
56+
57+```haskell
58+main :: IO ()
59+main = do
60+ args <- getArgs
61+ case args of
62+ ("server":_) -> do
63+ putStrLn "Starting cookbook-using-free-client at http://localhost:8000"
64+ run 8000 $ serve api $ \n -> return (n * n)
65+ ("client":_) ->
66+ test
67+ _ -> do
68+ putStrLn "Try:"
69+ putStrLn "cabal new-run cookbook-using-free-client server"
70+ putStrLn "cabal new-run cookbook-using-free-client client"
71+```
72+
73+## Test
74+
75+In the client part, we will use a `Servant.Client.Free` client.
76+Because we have a single endpoint API, we'll get a single client function,
77+running in the `Free ClientF` (free) monad:
78+
79+```haskell
80+getSquare :: Int -> Free ClientF Int
81+getSquare = client api
82+```
83+
84+Such clients are "client functions without a backend", so to speak,
85+or where the backend has been abstracted out. To be more precise, `ClientF` is a functor that
86+precisely represents the operations servant-client-core needs from an http client backend.
87+So if we are to emulate one or augment what such a backend does, it will be by interpreting
88+all those operations, the way we want to. This also means we get access to the requests and
89+responses and can do anything we want with them, right when they are produced or consumed,
90+respectively.
91+
92+Next, we can write our small test. We'll pass a value to `getSquare` and inspect
93+the `Free` structure. The first three possibilities are self-explanatory:
94+
95+```haskell
96+test :: IO ()
97+test = case getSquare 42 of
98+ Pure n ->
99+ putStrLn $ "ERROR: got pure result: " ++ show n
100+ Free (Throw err) ->
101+ putStrLn $ "ERROR: got error right away: " ++ show err
102+```
103+
104+We are interested in `RunRequest`, that's what client should block on:
105+
106+```haskell
107+ Free (RunRequest req k) -> do
108+```
109+
110+Then we need to prepare the context, get HTTP (connection) `Manager`
111+and `BaseUrl`:
112+
113+```haskell
114+ burl <- parseBaseUrl "http://localhost:8000"
115+ mgr <- HTTP.newManager HTTP.defaultManagerSettings
116+```
117+
118+Now we can use `servant-client`'s internals to convert servant's `Request`
119+to http-client's `Request`, and we can inspect it:
120+
121+```haskell
122+ req' <- I.defaultMakeClientRequest burl req
123+ putStrLn $ "Making request: " ++ show req'
124+```
125+
126+`servant-client`'s request does a little more, but this is good enough for
127+our demo. We get back an http-client `Response` which we can also inspect.
128+
129+```haskell
130+ res' <- HTTP.httpLbs req' mgr
131+ putStrLn $ "Got response: " ++ show res'
132+```
133+
134+And we continue by turning http-client's `Response` into servant's `Response`,
135+and calling the continuation. We should get a `Pure` value.
136+
137+```haskell
138+ let res = I.clientResponseToResponse id res'
139+
140+ case k res of
141+ Pure n ->
142+ putStrLn $ "Expected 1764, got " ++ show n
143+ _ ->
144+ putStrLn "ERROR: didn't get a response"
145+```
146+
147+So that's it. Using `Free` we can evaluate servant clients step-by-step, and
148+validate that the client functions or the HTTP client backend does what we expect
149+(e.g by printing requests/responses on the fly). In fact, using `Servant.Client.Free`
150+is a little simpler than defining a custom `RunClient` instance, especially
151+for those cases where it is handy to have the full sequence of client calls
152+and responses available for us to inspect, since `RunClient` only gives us
153+access to one `Request` or `Response` at a time.
154+
155+On the other hand, a "batch collection" of requests and/or responses can be achieved
156+with both free clients and a custom `RunClient` instance rather easily, for example
157+by using a `Writer [(Request, Response)]` monad.
158+
159+Here is an example of running our small `test` against a running server:
160+
161+```
162+Making request: Request {
163+ host = "localhost"
164+ port = 8000
165+ secure = False
166+ requestHeaders = [("Accept","application/json;charset=utf-8,application/json")]
167+ path = "/square/42"
168+ queryString = ""
169+ method = "GET"
170+ proxy = Nothing
171+ rawBody = False
172+ redirectCount = 10
173+ responseTimeout = ResponseTimeoutDefault
174+ requestVersion = HTTP/1.1
175+}
176+
177+Got response: Response
178+ { responseStatus = Status {statusCode = 200, statusMessage = "OK"}
179+ , responseVersion = HTTP/1.1
180+ , responseHeaders =
181+ [ ("Transfer-Encoding","chunked")
182+ , ("Date","Thu, 05 Jul 2018 21:12:41 GMT")
183+ , ("Server","Warp/3.2.22")
184+ , ("Content-Type","application/json;charset=utf-8")
185+ ]
186+ , responseBody = "1764"
187+ , responseCookieJar = CJ {expose = []}
188+ , responseClose' = ResponseClose
189+ }
190+
191+Expected 1764, got 1764
192+```
doc/cookbook/using-free-client/using-free-client.cabalnew file+26
@@ -0,0 +1,26 @@
1+cabal-version: 2.2
2+name: cookbook-using-free-client
3+version: 0.1
4+synopsis: Using Free client
5+homepage: http://docs.servant.dev/
6+license: BSD-3-Clause
7+license-file: ../../../servant/LICENSE
8+author: Servant Contributors
9+maintainer: haskell-servant-maintainers@googlegroups.com
10+build-type: Simple
11+tested-with: GHC==8.6.5, GHC==8.8.3, GHC ==8.10.7
12+
13+executable cookbook-using-free-client
14+ main-is: UsingFreeClient.lhs
15+ build-depends: base >= 4.9 && <5
16+ , free
17+ , servant
18+ , servant-client
19+ , http-client
20+ , servant-client-core
21+ , base-compat
22+ , servant-server
23+ , warp >= 3.2
24+ default-language: Haskell2010
25+ ghc-options: -Wall -pgmL markdown-unlit
26+ build-tool-depends: markdown-unlit:markdown-unlit >= 0.4
doc/cookbook/uverb/UVerb.lhsnew file+223
@@ -0,0 +1,223 @@
1+# Listing alternative responses and exceptions in your API types
2+
3+Servant allows you to talk about the exceptions you throw in your API
4+types. This is not limited to actual exceptions, you can write
5+handlers that respond with arbitrary open unions of types.
6+
7+## Compatibility
8+
9+:warning: This cookbook is compatible with GHC 8.6.1 or higher :warning:
10+
11+## Preliminaries
12+
13+```haskell
14+{-# LANGUAGE ConstraintKinds #-}
15+{-# LANGUAGE DataKinds #-}
16+{-# LANGUAGE DeriveGeneric #-}
17+{-# LANGUAGE DerivingStrategies #-}
18+{-# LANGUAGE DeriveAnyClass #-}
19+{-# LANGUAGE DerivingVia #-}
20+{-# LANGUAGE FlexibleContexts #-}
21+{-# LANGUAGE FlexibleInstances #-}
22+{-# LANGUAGE GeneralizedNewtypeDeriving #-}
23+{-# LANGUAGE InstanceSigs #-}
24+{-# LANGUAGE MultiParamTypeClasses #-}
25+{-# LANGUAGE OverloadedStrings #-}
26+{-# LANGUAGE ScopedTypeVariables #-}
27+{-# LANGUAGE StandaloneDeriving #-}
28+{-# LANGUAGE TypeApplications #-}
29+{-# LANGUAGE TypeFamilies #-}
30+{-# LANGUAGE TypeOperators #-}
31+{-# LANGUAGE UndecidableInstances #-}
32+{-# OPTIONS_GHC -Wall -Wno-orphans #-}
33+
34+import Control.Concurrent (threadDelay)
35+import Control.Concurrent.Async (async)
36+import Control.Monad (when)
37+import Control.Monad.Except (ExceptT (..), MonadError (..), MonadTrans (..), runExceptT)
38+import Data.Aeson (FromJSON (..), ToJSON (..))
39+import Data.Aeson.Encode.Pretty (encodePretty)
40+import Data.String.Conversions (cs)
41+import Data.Swagger (ToSchema)
42+import Data.Typeable (Proxy (Proxy))
43+import qualified GHC.Generics as GHC
44+import qualified Network.HTTP.Client as Client
45+import qualified Network.Wai.Handler.Warp as Warp
46+import Servant.API
47+import Servant.Client
48+import Servant.Server
49+import Servant.Swagger
50+```
51+
52+## The API
53+
54+This looks like a `Verb`-based routing table, except that `UVerb` has
55+no status, and carries a list of response types rather than a single
56+one. Each entry in the list carries its own response code.
57+
58+```haskell
59+type API =
60+ "fisx" :> Capture "bool" Bool
61+ :> UVerb 'GET '[JSON] '[FisxUser, WithStatus 303 String]
62+ :<|> "arian"
63+ :> UVerb 'GET '[JSON] '[WithStatus 201 ArianUser]
64+```
65+
66+Here are the details:
67+
68+```haskell
69+data FisxUser = FisxUser {name :: String}
70+ deriving (Eq, Show, GHC.Generic)
71+
72+instance ToJSON FisxUser
73+instance FromJSON FisxUser
74+instance ToSchema FisxUser
75+
76+-- | 'HasStatus' allows us to can get around 'WithStatus' if we want
77+-- to, and associate the status code with our resource types directly.
78+--
79+-- (To avoid orphan instances and make it more explicit what's in the
80+-- API and what isn't, we could even introduce a newtype 'Resource'
81+-- that wraps all the types we're using in our routing table, and then
82+-- define lots of 'HasStatus' instances for @Resource This@ and
83+-- @Resource That@.)
84+instance HasStatus FisxUser where
85+ type StatusOf FisxUser = 203
86+
87+data ArianUser = ArianUser
88+ deriving (Eq, Show, GHC.Generic)
89+
90+instance ToJSON ArianUser
91+instance FromJSON ArianUser
92+instance ToSchema ArianUser
93+```
94+
95+## Server, Client, Swagger
96+
97+You can just respond with any of the elements of the union in handlers.
98+
99+```haskell
100+fisx :: Bool -> Handler (Union '[FisxUser, WithStatus 303 String])
101+fisx True = respond (FisxUser "fisx")
102+fisx False = respond (WithStatus @303 ("still fisx" :: String))
103+
104+arian :: Handler (Union '[WithStatus 201 ArianUser])
105+arian = respond (WithStatus @201 ArianUser)
106+```
107+
108+You can create client functions like you're used to:
109+
110+```
111+fisxClient :: Bool -> ClientM (Union '[FisxUser, WithStatus 303 String])
112+arianClient :: ClientM (Union '[WithStatus 201 ArianUser])
113+(fisxClient :<|> arianClient) = client (Proxy @API)
114+```
115+
116+... and that's basically it! Here are a few sample commands that
117+show you how the swagger docs look like and how you can handle the
118+result unions in clients:
119+
120+```
121+main :: IO ()
122+main = do
123+ putStrLn . cs . encodePretty $ toSwagger (Proxy @API)
124+ _ <- async . Warp.run 8080 $ serve (Proxy @API) (fisx :<|> arian)
125+ threadDelay 50000
126+ mgr <- Client.newManager Client.defaultManagerSettings
127+ let cenv = mkClientEnv mgr (BaseUrl Http "localhost" 8080 "")
128+ result <- runClientM (fisxClient True) cenv
129+ print $ foldMapUnion (Proxy @Show) show <$> result
130+ print $ matchUnion @FisxUser <$> result
131+ print $ matchUnion @(WithStatus 303 String) <$> result
132+ pure ()
133+```
134+
135+## Idiomatic exceptions
136+
137+Since `UVerb` (probably) will mostly be used for error-like responses, it may be desirable to be able to early abort handler, like with current servant one would use `throwError` with `ServerError`.
138+
139+```haskell
140+newtype UVerbT xs m a = UVerbT { unUVerbT :: ExceptT (Union xs) m a }
141+ deriving (Functor, Applicative, Monad, MonadTrans)
142+
143+-- | Deliberately hide 'ExceptT's 'MonadError' instance to be able to use
144+-- underlying monad's instance.
145+instance MonadError e m => MonadError e (UVerbT xs m) where
146+ throwError = lift . throwError
147+ catchError (UVerbT act) h = UVerbT $ ExceptT $
148+ runExceptT act `catchError` (runExceptT . unUVerbT . h)
149+
150+-- | This combinator runs 'UVerbT'. It applies 'respond' internally, so the handler
151+-- may use the usual 'return'.
152+runUVerbT :: (Monad m, HasStatus x, IsMember x xs) => UVerbT xs m x -> m (Union xs)
153+runUVerbT (UVerbT act) = either id id <$> runExceptT (act >>= respond)
154+
155+-- | Short-circuit 'UVerbT' computation returning one of the response types.
156+throwUVerb :: (Monad m, HasStatus x, IsMember x xs) => x -> UVerbT xs m a
157+throwUVerb = UVerbT . ExceptT . fmap Left . respond
158+```
159+
160+Example usage:
161+
162+```haskell
163+data Foo = Foo Int Int Int
164+ deriving (Show, Eq, GHC.Generic, ToJSON)
165+ deriving HasStatus via WithStatus 200 Foo
166+
167+data Bar = Bar
168+ deriving (Show, Eq, GHC.Generic)
169+
170+instance ToJSON Bar
171+
172+h :: Handler (Union '[Foo, WithStatus 400 Bar])
173+h = runUVerbT $ do
174+ when ({- something bad -} True) $
175+ throwUVerb $ WithStatus @400 Bar
176+
177+ when ({- really bad -} False) $
178+ throwError $ err500
179+
180+ -- a lot of code here...
181+
182+ return $ Foo 1 2 3
183+```
184+
185+## Related Work
186+
187+There is the [issue from
188+2017](https://github.com/haskell-servant/servant/issues/841) that was
189+resolved by the introduction of `UVerb`, with a long discussion on
190+alternative designs.
191+
192+[servant-checked-exceptions](https://hackage.haskell.org/package/servant-checked-exceptions)
193+is a good solution to the problem, but it restricts the user to JSON
194+and a very specific envelop encoding for the union type, which is
195+often not acceptable. (One good reason for this design choice is that
196+it makes writing clients easier, where you need to get to the union
197+type from one representative, and you don't want to run several
198+parsers in the hope that the ones that should will always error out so
199+you can try until the right one returns a value.)
200+
201+[servant-exceptions](https://github.com/ch1bo/servant-exceptions) is
202+another shot at at the problem. It is inspired by
203+servant-checked-exceptions, so it may be worth taking a closer look.
204+The README claims that
205+[cardano-sl](https://github.com/input-output-hk/cardano-sl) also has
206+some code for generalized error handling.
207+
208+In an earier version of the `UVerb` implementation, we have used some
209+code from
210+[world-peace](https://hackage.haskell.org/package/world-peace), but
211+that package itself wasn't flexible enough, and we had to use
212+[sop-core](https://hackage.haskell.org/package/sop-core) to implement
213+the `HasServer` instance.
214+
215+Here is a blog post we found on the subject:
216+https://lukwagoallan.com/posts/unifying-servant-server-error-responses
217+
218+(If you have anything else, please add it here or let us know.)
219+
220+```haskell
221+main :: IO ()
222+main = return ()
223+```
doc/cookbook/uverb/uverb.cabalnew file+35
@@ -0,0 +1,35 @@
1+cabal-version: 2.2
2+name: cookbook-uverb
3+version: 0.0.1
4+synopsis: How to use the 'UVerb' type.
5+description: Listing alternative responses and exceptions in your API types.
6+homepage: http://docs.servant.dev/
7+license: BSD-3-Clause
8+license-file: ../../../servant/LICENSE
9+author: Servant Contributors
10+maintainer: haskell-servant-maintainers@googlegroups.com
11+category: Servant
12+build-type: Simple
13+tested-with: GHC==8.6.5, GHC==8.8.4, GHC==8.10.7
14+
15+executable cookbook-uverb
16+ main-is: UVerb.lhs
17+ build-depends: base == 4.*
18+ , aeson >= 1.2
19+ , aeson-pretty >= 0.8.8
20+ , async
21+ , http-client
22+ , mtl
23+ , servant
24+ , servant-client
25+ , servant-server
26+ , servant-swagger
27+ , string-conversions
28+ , swagger2
29+ , wai
30+ , warp
31+ if impl(ghc >= 9)
32+ buildable: False
33+ default-language: Haskell2010
34+ ghc-options: -Wall -pgmL markdown-unlit
35+ build-tool-depends: markdown-unlit:markdown-unlit
doc/examples.md+41−18
@@ -2,36 +2,59 @@
22
33- **[example-servant-minimal](https://github.com/haskell-servant/example-servant-minimal)**:
44
5− A minimal example for a web server written using **servant-server**,
6− including a test-suite using [**hspec**](http://hspec.github.io/) and
7− **servant-client**.
5+ A minimal example for a web server written using **servant-server**,
6+ including a test-suite using [**hspec**](http://hspec.github.io/) and
7+ **servant-client**.
88
9+- **[servant-examples](https://github.com/sras/servant-examples)**:
10+
11+ Similar to [the cookbook](https://docs.servant.dev/en/latest/cookbook/index.html) but
12+ with no explanations, for developers who just want to look at code examples to find out how to do X or Y
13+ with servant.
914
1015- **[stack-templates](https://github.com/commercialhaskell/stack-templates)**
1116
12− Repository for templates for haskell projects, including some templates using
13− **servant**. These templates can be used with `stack new`.
17+ Repository for templates for haskell projects, including some templates using
18+ **servant**. These templates can be used with `stack new`.
1419
1520- **[custom-monad](https://github.com/themoritz/diener)**:
1621
17− A custom monad that can replace `IO` in servant applications. It adds among
18− other things logging functionality and a reader monad (for database connections).
19− A full usage example of servant/diener is also provided.
20−
22+ A custom monad that can replace `IO` in servant applications. It adds among
23+ other things logging functionality and a reader monad (for database connections).
24+ A full usage example of servant/diener is also provided.
2125
2226- **[example-servant-elm](https://github.com/haskell-servant/example-servant-elm)**:
2327
24− An example for a project consisting of
28+ An example for a project consisting of
29+
30+ - a backend web server written using **servant-server**,
31+ - a frontend written in [elm](http://elm-lang.org/) using
32+ [servant-elm](https://github.com/mattjbray/servant-elm) to generate client
33+ functions in elm for the API,
34+ - test-suites for both the backend and the frontend.
35+
36+- **[servant-purescript](https://github.com/eskimor/servant-purescript/tree/master/examples/central-counter)**:
37+
38+ An example consisting of
2539
26− - a backend web server written using **servant-server**,
27− - a frontend written in [elm](http://elm-lang.org/) using
28− [servant-elm](https://github.com/mattjbray/servant-elm) to generate client
29− functions in elm for the API,
30− - test-suites for both the backend and the frontend.
40+ - a backend that uses `servant`
41+ - a frontend written in [PureScript](http://www.purescript.org/) using
42+ [servant-purescript](https://github.com/eskimor/servant-purescript) to generate
43+ an API wrapper in PureScript to interface the web API with
3144
3245
3346- **[example-servant-persistent](https://github.com/haskell-servant/example-servant-persistent)**:
3447
35− An example for a web server written with **servant-server** and
36− [persistent](https://www.stackage.org/package/persistent) for writing data
37− into a database.
48+ An example for a web server written with **servant-server** and
49+ [persistent](https://www.stackage.org/package/persistent) for writing data
50+ into a database.
51+
52+- **[full-example-servant-elm-auth-yeshql-postgresql](https://github.com/aRkadeFR/FlashCard)**:
53+
54+ A full open source website written with **servant-server**, yeshql, postgresql and elm 0.19.
55+
56+
57+- [`import Servant` github search](https://github.com/search?q=%22import+Servant%22+language%3AHaskell&type=Code)
58+
59+ It has thousands of results and can be a good way to see how people use servant in their projects or even to discover
60+ servant-related libraries.
doc/index.rst+12−9
@@ -3,21 +3,24 @@ servant – A Type-Level Web DSL
33
44.. image:: https://raw.githubusercontent.com/haskell-servant/servant/master/servant.png
55
6−**servant** is a set of packages for declaring web APIs at the type-level and
7−then using those API specifications to:
6+**servant** is a set of Haskell libraries for writing *type-safe* web
7+applications but also *deriving* clients (in Haskell and other languages) or
8+generating documentation for them, and more.
89
9−- write servers (this part of **servant** can be considered a web framework),
10−- obtain client functions (in haskell),
11−- generate client functions for other programming languages,
12−- generate documentation for your web applications
13−- and more...
10+This is achieved by taking as input a description of the web API
11+as a Haskell type. Servant is then able to check that your server-side request
12+handlers indeed implement your web API faithfully, or to automatically derive
13+Haskell functions that can hit a web application that implements this API,
14+generate a Swagger description or code for client functions in some other
15+languages directly.
1416
15−All in a type-safe manner.
17+If you would like to learn more, click the tutorial link below.
1618
1719.. toctree::
1820 :maxdepth: 2
1921
20− introduction.rst
2122 tutorial/index.rst
23+ cookbook/index.rst
2224 examples.md
2325 links.rst
26+ principles.rst
doc/links.rst+3−3
@@ -3,7 +3,7 @@ Helpful Links
33-------------
44
55- the central documentation (this site):
6− `haskell-servant.readthedocs.org <http://haskell-servant.readthedocs.org/>`_
6+ `docs.servant.dev <http://docs.servant.dev/>`_
77
88- the github repo:
99 `github.com/haskell-servant/servant <https://github.com/haskell-servant/servant>`_
@@ -12,13 +12,13 @@ Helpful Links
1212 `https://github.com/haskell-servant/servant/issues <https://github.com/haskell-servant/servant/issues>`_
1313
1414- the irc channel:
15− ``#servant`` on freenode
15+ `#haskell-servant on libera.chat <https://web.libera.chat/#haskell-servant>`_
1616
1717- the mailing list:
1818 `groups.google.com/forum/#!forum/haskell-servant <https://groups.google.com/forum/#!forum/haskell-servant>`_
1919
2020- blog posts and videos and slides of some talks on servant:
21− `haskell-servant.github.io <http://haskell-servant.github.io>`_
21+ `www.servant.dev <http://www.servant.dev>`_
2222
2323- the servant packages on hackage:
2424
doc/introduction.rst → doc/principles.rstrenamed+3−3
@@ -1,5 +1,5 @@
1−Introduction
2−------------
1+Principles
2+----------
33
44**servant** has the following guiding principles:
55
@@ -22,7 +22,7 @@ Introduction
2222
2323- separation of concerns
2424
25− Your handlers and your HTTP logic should be separate. True to the philosphy
25+ Your handlers and your HTTP logic should be separate. True to the philosophy
2626 at the core of HTTP and REST, with **servant** your handlers return normal
2727 Haskell datatypes - that's the resource. And then from a description of your
2828 API, **servant** handles the *presentation* (i.e., the Content-Types). But
doc/requirements.txt+3−25
@@ -1,25 +1,3 @@
1−alabaster==0.7.7
2−argh==0.26.1
3−Babel==2.2.0
4−backports-abc==0.4
5−backports.ssl-match-hostname==3.5.0.1
6−certifi==2015.11.20.1
7−CommonMark==0.5.4
8−docutils==0.12
9−Jinja2==2.8
10−livereload==2.4.1
11−MarkupSafe==0.23
12−pathtools==0.1.2
13−Pygments==2.2.0
14−pytz==2015.7
15−PyYAML==3.11
16−recommonmark==0.4.0
17−singledispatch==3.4.0.3
18−six==1.10.0
19−snowballstemmer==1.2.1
20−Sphinx==1.3.6
21−sphinx-autobuild==0.5.2
22−sphinx-rtd-theme==0.1.9
23−tornado==4.3
24−watchdog==0.8.3
25−wheel==0.26.0
1+recommonmark==0.5.0
2+Sphinx==1.8.4
3+sphinx_rtd_theme>=0.4.2
doc/tutorial/ApiType.lhs+50−4
@@ -127,6 +127,26 @@ type UserAPI4 = "users" :> Get '[JSON] [User]
127127 :<|> "admins" :> Get '[JSON] [User]
128128```
129129
130+### `StreamGet` and `StreamPost`
131+
132+*Note*: Streaming has changed considerably in `servant-0.15`.
133+
134+The `StreamGet` and `StreamPost` combinators are defined in terms of the more general `Stream`
135+
136+``` haskell ignore
137+data Stream (method :: k1) (status :: Nat) (framing :: *) (contentType :: *) (a :: *)
138+
139+type StreamGet = Stream 'GET 200
140+type StreamPost = Stream 'POST 200
141+```
142+
143+These describe endpoints that return a stream of values rather than just a
144+single value. They not only take a single content type as a parameter, but also
145+a framing strategy -- this specifies how the individual results are delineated
146+from one another in the stream. The three standard strategies given with
147+Servant are `NewlineFraming`, `NetstringFraming` and `NoFraming`, but others
148+can be written to match other protocols.
149+
130150### `Capture`
131151
132152URL captures are segments of the path of a URL that are variable and whose actual value is
@@ -157,13 +177,12 @@ type UserAPI5 = "user" :> Capture "userid" Integer :> Get '[JSON] User
157177 -- except that we explicitly say that "userid"
158178 -- must be an integer
159179
160− :<|> "user" :> Capture "userid" Integer :> DeleteNoContent '[JSON] NoContent
180+ :<|> "user" :> Capture "userid" Integer :> DeleteNoContent
161181 -- equivalent to 'DELETE /user/:userid'
162182```
163183
164−In the second case, `DeleteNoContent` specifies a 204 response code,
165−`JSON` specifies the content types on which the handler will match,
166−and `NoContent` says that the response will always be empty.
184+In the second case, `DeleteNoContent` specifies a 204 response code
185+and that the response will always be empty.
167186
168187### `QueryParam`, `QueryParams`, `QueryFlag`
169188
@@ -370,3 +389,30 @@ One example for this is if you want to serve a directory of static files along
370389with the rest of your API. But you can plug in everything that is an
371390`Application`, e.g. a whole web application written in any of the web
372391frameworks that support `wai`.
392+
393+Be mindful! The `servant-server`'s router works by pattern-matching the
394+different routes that are composed using `:<|>`. `Raw`, as an escape hatch,
395+matches any route that hasn't been matched by previous patterns. Therefore,
396+any subsequent route will be silently ignored.
397+
398+``` haskell
399+type UserAPI14 = Raw
400+ :<|> "users" :> Get '[JSON] [User]
401+ -- In this situation, the /users endpoint
402+ -- will not be reachable because the Raw
403+ -- endpoint matches requests before
404+```
405+A simple way to avoid this pitfall is to either use `Raw` as the last
406+definition, or to always have it under a static path.
407+
408+``` haskell
409+type UserAPI15 = "files" :> Raw
410+ -- The raw endpoint is under the /files
411+ -- static path, so it won't match /users.
412+ :<|> "users" :> Get '[JSON] [User]
413+
414+type UserAPI16 = "users" :> Get '[JSON] [User]
415+ :<|> Raw
416+ -- The Raw endpoint is matched last, so
417+ -- it won't overlap another endpoint.
418+```
doc/tutorial/Authentication.lhs+42−32
@@ -47,7 +47,6 @@ module Authentication where
4747import Data.Aeson (ToJSON)
4848import Data.ByteString (ByteString)
4949import Data.Map (Map, fromList)
50−import Data.Monoid ((<>))
5150import qualified Data.Map as Map
5251import Data.Proxy (Proxy (Proxy))
5352import Data.Text (Text)
@@ -69,6 +68,7 @@ import Servant.Server (BasicAuthCheck (BasicAuthCheck),
6968import Servant.Server.Experimental.Auth (AuthHandler, AuthServerData,
7069 mkAuthHandler)
7170import Servant.Server.Experimental.Auth()
71+import Web.Cookie (parseCookies)
7272
7373-- | private data that needs protection
7474newtype PrivateData = PrivateData { ssshhh :: Text }
@@ -107,7 +107,7 @@ API with "private." Additionally, the private parts of our API use the
107107realm for this authentication is `"foo-realm"`).
108108
109109Unfortunately we're not done. When someone makes a request to our `"private"`
110−API, we're going to need to provide to servant the logic for validifying
110+API, we're going to need to provide to servant the logic for validating
111111usernames and passwords. This adds a certain conceptual wrinkle in servant's
112112design that we'll briefly discuss. If you want the **TL;DR**: we supply a lookup
113113function to servant's new `Context` primitive.
@@ -132,7 +132,7 @@ combinator. Using `Context`, we can supply a function of type
132132handler. This will allow the handler to check authentication and return a `User`
133133to downstream handlers if successful.
134134
135−In practice we wrap `BasicAuthData -> Handler` into a slightly
135+In practice we wrap `BasicAuthData -> Handler User` into a slightly
136136different function to better capture the semantics of basic authentication:
137137
138138``` haskell ignore
@@ -245,32 +245,35 @@ your feedback!
245245
246246### What is Generalized Authentication?
247247
248−**TL;DR**: you throw a tagged `AuthProtect` combinator in front of the endpoints
249−you want protected and then supply a function `Request -> Handler user`
250−which we run anytime a request matches a protected endpoint. It precisely solves
251−the "I just need to protect these endpoints with a function that does some
252−complicated business logic" and nothing more. Behind the scenes we use a type
253−family instance (`AuthServerData`) and `Context` to accomplish this.
248+**TL;DR**: you throw a tagged `AuthProtect` combinator in front of the
249+endpoints you want protected and then supply a function `Request -> Handler a`,
250+where `a` is the type of your choice representing the data returned by
251+successful authentication - e.g., a `User` or, in our example below, `Account`.
252+This function is run anytime a request matches a protected endpoint. It
253+precisely solves the "I just need to protect these endpoints with a function
254+that does some complicated business logic" and nothing more. Behind the scenes
255+we use a type family instance (`AuthServerData`) and `Context` to accomplish
256+this.
254257
255258### Generalized Authentication in Action
256259
257260Let's implement a trivial authentication scheme. We will protect our API by
258261looking for a cookie named `"servant-auth-cookie"`. This cookie's value will
259−contain a key from which we can lookup a `User`.
262+contain a key from which we can lookup an `Account`.
260263
261264```haskell
262−-- | A user type that we "fetch from the database" after
265+-- | An account type that we "fetch from the database" after
263266-- performing authentication
264267newtype Account = Account { unAccount :: Text }
265268
266−-- | A (pure) database mapping keys to users.
269+-- | A (pure) database mapping keys to accounts.
267270database :: Map ByteString Account
268271database = fromList [ ("key1", Account "Anne Briggs")
269272 , ("key2", Account "Bruce Cockburn")
270273 , ("key3", Account "Ghédalia Tazartès")
271274 ]
272275
273−-- | A method that, when given a password, will return a Account.
276+-- | A method that, when given a password, will return an Account.
274277-- This is our bespoke (and bad) authentication logic.
275278lookupAccount :: ByteString -> Handler Account
276279lookupAccount key = case Map.lookup key database of
@@ -279,19 +282,24 @@ lookupAccount key = case Map.lookup key database of
279282```
280283
281284For generalized authentication, servant exposes the `AuthHandler` type,
282−which is used to wrap the `Request -> Handler user` logic. Let's
285+which is used to wrap the `Request -> Handler Account` logic. Let's
283286create a value of type `AuthHandler Request Account` using the above `lookupAccount`
284−method:
287+method (note: we depend upon [`cookie`](https://hackage.haskell.org/package/cookie)'s
288+`parseCookies` for this):
285289
286290```haskell
287−-- | The auth handler wraps a function from Request -> Handler Account
288−-- we look for a Cookie and pass the value of the cookie to `lookupAccount`.
291+
292+--- | The auth handler wraps a function from Request -> Handler Account.
293+--- We look for a token in the request headers that we expect to be in the cookie.
294+--- The token is then passed to our `lookupAccount` function.
289295authHandler :: AuthHandler Request Account
290−authHandler =
291− let handler req = case lookup "servant-auth-cookie" (requestHeaders req) of
292− Nothing -> throwError (err401 { errBody = "Missing auth header" })
293− Just authCookieKey -> lookupAccount authCookieKey
294− in mkAuthHandler handler
296+authHandler = mkAuthHandler handler
297+ where
298+ maybeToEither e = maybe (Left e) Right
299+ throw401 msg = throwError $ err401 { errBody = msg }
300+ handler req = either throw401 lookupAccount $ do
301+ cookie <- maybeToEither "Missing cookie header" $ lookup "cookie" $ requestHeaders req
302+ maybeToEither "Missing token in cookie" $ lookup "servant-auth-cookie" $ parseCookies cookie
295303```
296304
297305Let's now protect our API with our new, bespoke authentication scheme. We'll
@@ -309,7 +317,7 @@ genAuthAPI = Proxy
309317
310318Now we need to bring everything together for the server. We have the
311319`AuthHandler Request Account` value and an `AuthProtected` endpoint. To bind these
312−together, we need to provide a [Type Family](https://downloads.haskell.org/~ghc/latest/docs/html/users_guide/type-families.html)
320+together, we need to provide a [Type Family](https://downloads.haskell.org/~ghc/8.8.1/docs/html/users_guide/glasgow_exts.html#type-families)
313321instance that tells the `HasServer` instance that our `Context` will supply a
314322`Account` (via `AuthHandler Request Account`) and that downstream combinators will
315323have access to this `Account` value (or an error will be thrown if authentication
@@ -337,7 +345,7 @@ genAuthServerContext = authHandler :. EmptyContext
337345
338346-- | Our API, where we provide all the author-supplied handlers for each end
339347-- point. Note that 'privateDataFunc' is a function that takes 'Account' as an
340−-- argument. We dont' worry about the authentication instrumentation here,
348+-- argument. We don't worry about the authentication instrumentation here,
341349-- that is taken care of by supplying context
342350genAuthServer :: Server AuthGenAPI
343351genAuthServer =
@@ -359,10 +367,10 @@ genAuthMain = run 8080 (serveWithContext genAuthAPI genAuthServerContext genAuth
359367$ curl -XGET localhost:8080/private
360368Missing auth header
361369
362−$ curl -XGET localhost:8080/private -H "servant-auth-cookie: key3"
370+$ curl -XGET localhost:8080/private -H "Cookie: servant-auth-cookie=key3"
363371[{"ssshhh":"this is a secret: Ghédalia Tazartès"}]
364372
365−$ curl -XGET localhost:8080/private -H "servant-auth-cookie: bad-key"
373+$ curl -XGET localhost:8080/private -H "Cookie: servant-auth-cookie=bad-key"
366374Invalid Cookie
367375
368376$ curl -XGET localhost:8080/public
@@ -376,14 +384,14 @@ Creating a generalized, ad-hoc authentication scheme was fairly straight
376384forward:
377385
3783861. use the `AuthProtect` combinator to protect your API.
379−2. choose a application-specific data type used by your server when
380−authentication is successful (in our case this was `User`).
381−3. Create a value of `AuthHandler Request User` which encapsulates the
382−authentication logic (`Request -> Handler User`). This function
383−will be executed everytime a request matches a protected route.
387+2. choose an application-specific data type used by your server when
388+authentication is successful (in our case this was `Account`).
389+3. Create a value of `AuthHandler Request Account` which encapsulates the
390+authentication logic (`Request -> Handler Account`). This function
391+will be executed every time a request matches a protected route.
3843924. Provide an instance of the `AuthServerData` type family, specifying your
385393application-specific data type returned when authentication is successful (in
386−our case this was `User`).
394+our case this was `Account`).
387395
388396Caveats:
389397
@@ -400,6 +408,8 @@ As of `0.5`, *servant-client* comes with support for basic authentication!
400408Endpoints protected by Basic Authentication will require a value of type
401409`BasicAuthData` to complete the request.
402410
411+You can find more comprehensive Basic Authentication example in the [Cookbook](../cookbook/basic-auth/BasicAuth.html).
412+
403413### Generalized Authentication
404414
405415Servant `0.5` also shipped with support for generalized authentication. Similar
doc/tutorial/Client.lhs+108−7
@@ -1,9 +1,9 @@
11# Querying an API
22
3−While defining handlers that [serve an API](Server.lhs) has a lot to it, querying an API is simpler: we do not care about what happens inside the webserver, we just need to know how to talk to it and get a response back. That said, we usually have to write the querying functions by hand because the structure of the API isn't a first class citizen and can't be inspected to generate the client-side functions.
3+While defining handlers that [serve an API](Server.html) has a lot to it, querying an API is simpler: we do not care about what happens inside the webserver, we just need to know how to talk to it and get a response back. That said, we usually have to write the querying functions by hand because the structure of the API isn't a first class citizen and can't be inspected to generate the client-side functions.
44
55**servant** however has a way to inspect APIs, because APIs are just Haskell types and (GHC) Haskell lets us do quite a few things with types. In the same way that we look at an API type to deduce the types the handlers should have, we can inspect the structure of the API to *derive* Haskell functions that take one argument for each occurrence of `Capture`, `ReqBody`, `QueryParam`
6−and friends (see [the tutorial introduction](ApiType.lhs) for an overview). By *derive*, we mean that there's no code generation involved - the functions are defined just by the structure of the API type.
6+and friends (see [the tutorial introduction](ApiType.html) for an overview). By *derive*, we mean that there's no code generation involved - the functions are defined just by the structure of the API type.
77
88The source for this tutorial section is a literate Haskell file, so first we need to have some language extensions and imports:
99
@@ -20,6 +20,9 @@ import GHC.Generics
2020import Network.HTTP.Client (newManager, defaultManagerSettings)
2121import Servant.API
2222import Servant.Client
23+import Servant.Types.SourceT (foreach)
24+
25+import qualified Servant.Client.Streaming as S
2326```
2427
2528Also, we need examples for some domain specific data types:
@@ -128,15 +131,15 @@ That's it. Let's now write some code that uses our client functions.
128131``` haskell
129132queries :: ClientM (Position, HelloMessage, Email)
130133queries = do
131− pos <- position 10 10
132− message <- hello (Just "servant")
134+ pos <- position 10 10
135+ message <- hello (Just "servant")
133136 em <- marketing (ClientInfo "Alp" "alp@foo.com" 26 ["haskell", "mathematics"])
134137 return (pos, message, em)
135138
136139run :: IO ()
137140run = do
138− manager <- newManager defaultManagerSettings
139− res <- runClientM queries (ClientEnv manager (BaseUrl Http "localhost" 8081 ""))
141+ manager' <- newManager defaultManagerSettings
142+ res <- runClientM queries (mkClientEnv manager' (BaseUrl Http "localhost" 8081 ""))
140143 case res of
141144 Left err -> putStrLn $ "Error: " ++ show err
142145 Right (pos, message, em) -> do
@@ -153,4 +156,102 @@ HelloMessage {msg = "Hello, servant"}
153156Email {from = "great@company.com", to = "alp@foo.com", subject = "Hey Alp, we miss you!", body = "Hi Alp,\n\nSince you've recently turned 26, have you checked out our latest haskell, mathematics products? Give us a visit!"}
154157```
155158
156−The types of the arguments for the functions are the same as for (server-side) request handlers. You now know how to use **servant-client**!
159+The types of the arguments for the functions are the same as for (server-side) request handlers.
160+
161+## Changing the monad the client functions live in
162+
163+Just like `hoistServer` allows us to change the monad in which request handlers
164+of a web application live, we also have `hoistClient` for changing the monad
165+in which _client functions_ live. Consider the following trivial API:
166+
167+``` haskell
168+type HoistClientAPI = Get '[JSON] Int :<|> Capture "n" Int :> Post '[JSON] Int
169+
170+hoistClientAPI :: Proxy HoistClientAPI
171+hoistClientAPI = Proxy
172+```
173+
174+We already know how to derive client functions for this API, and as we have
175+seen above they all return results in the `ClientM` monad when using `servant-client`.
176+However, `ClientM` is rarely (or never) the actual monad we need to use the client
177+functions in. Sometimes we need to run them in IO, sometimes in a custom monad
178+stack. `hoistClient` is a very simple solution to the problem of "changing" the monad
179+the clients run in.
180+
181+``` haskell ignore
182+hoistClient
183+ :: HasClient ClientM api -- we need a valid API
184+ => Proxy api -- a Proxy to the API type
185+ -> (forall a. m a -> n a) -- a "monad conversion function" (natural transformation)
186+ -> Client m api -- clients in the source monad
187+ -> Client n api -- result: clients in the target monad
188+```
189+
190+The "conversion function" argument above, just like the ones given to `hoistServer`, must
191+be able to turn an `m a` into an `n a` for any choice of type `a`.
192+
193+Let's see this in action on our example. We first derive our client functions as usual,
194+with all of them returning a result in `ClientM`.
195+
196+``` haskell
197+getIntClientM :: ClientM Int
198+postIntClientM :: Int -> ClientM Int
199+getIntClientM :<|> postIntClientM = client hoistClientAPI
200+```
201+
202+And we finally decide that we want the handlers to run in IO instead, by
203+"post-applying" `runClientM` to a fixed client environment.
204+
205+``` haskell
206+-- our conversion function has type: forall a. ClientM a -> IO a
207+-- the result has type:
208+-- Client IO HoistClientAPI = IO Int :<|> (Int -> IO Int)
209+getClients :: ClientEnv -> Client IO HoistClientAPI
210+getClients clientEnv
211+ = hoistClient hoistClientAPI
212+ ( fmap (either (error . show) id)
213+ . flip runClientM clientEnv
214+ )
215+ (client hoistClientAPI)
216+```
217+
218+## Querying Streaming APIs.
219+
220+Consider the following streaming API type:
221+
222+``` haskell
223+type StreamAPI = "positionStream" :> StreamGet NewlineFraming JSON (SourceIO Position)
224+```
225+
226+Note that we use the same `SourceIO` type as on the server-side
227+(this is different from `servant-0.14`).
228+However, we have to use different client, `Servant.Client.Streaming`,
229+which can stream (but has different API).
230+
231+In any case, here's how we write a function to query our API:
232+
233+```haskell
234+streamAPI :: Proxy StreamAPI
235+streamAPI = Proxy
236+
237+posStream :: S.ClientM (SourceIO Position)
238+posStream = S.client streamAPI
239+```
240+
241+We'll get back a `SourceIO Position`. Instead of `runClientM`, the streaming
242+client provides `withClientM`: the underlying HTTP connection is open only
243+until the inner functions exits. Inside the block we can e.g just print out
244+all elements from a `SourceIO`, to give some idea of how to work with them.
245+
246+``` haskell
247+printSourceIO :: Show a => ClientEnv -> S.ClientM (SourceIO a) -> IO ()
248+printSourceIO env c = S.withClientM c env $ \e -> case e of
249+ Left err -> putStrLn $ "Error: " ++ show err
250+ Right rs -> foreach fail print rs
251+```
252+
253+The stream is parsed and provided incrementally. So the above loop prints out
254+each result as soon as it is received on the stream, rather than waiting until
255+they are all available to print them at once.
256+
257+You now know how to use **servant-client**!
doc/tutorial/Docs.lhs+71−29
@@ -23,6 +23,7 @@ import Network.Wai
2323import Servant.API
2424import Servant.Docs
2525import Servant.Server
26+import Web.FormUrlEncoded(FromForm(..), ToForm(..))
2627```
2728
2829And we'll import some things from one of our earlier modules
@@ -76,7 +77,7 @@ instance ToSample HelloMessage where
7677 [ ("When a value is provided for 'name'", HelloMessage "Hello, Alp")
7778 , ("When 'name' is not specified", HelloMessage "Hello, anonymous coward")
7879 ]
79− -- mutliple examples to display this time
80+ -- multiple examples to display this time
8081
8182ci :: ClientInfo
8283ci = ClientInfo "Alp" "alp@foo.com" 26 ["haskell", "mathematics"]
@@ -107,15 +108,9 @@ apiDocs = docs exampleAPI
107108markdown :: API -> String
108109```
109110
110−That lets us see what our API docs look down in markdown, by looking at `markdown apiDocs`.
111+That lets us see what our API docs look like in markdown, by looking at `markdown apiDocs`.
111112
112113````````` text
113−## Welcome
114−
115−This is our super webservice's API.
116−
117−Enjoy!
118−
119114## GET /hello
120115
121116#### GET Parameters:
@@ -132,19 +127,20 @@ Enjoy!
132127
133128- Supported content types are:
134129
130+ - `application/json;charset=utf-8`
135131 - `application/json`
136132
137−- When a value is provided for 'name'
133+- When a value is provided for 'name' (`application/json;charset=utf-8`, `application/json`):
138134
139− ```javascript
140− {"msg":"Hello, Alp"}
141− ```
135+ ```javascript
136+{"msg":"Hello, Alp"}
137+ ```
142138
143−- When 'name' is not specified
139+- When 'name' is not specified (`application/json;charset=utf-8`, `application/json`):
144140
145− ```javascript
146− {"msg":"Hello, anonymous coward"}
147− ```
141+ ```javascript
142+{"msg":"Hello, anonymous coward"}
143+ ```
148144
149145## POST /marketing
150146
@@ -152,28 +148,30 @@ Enjoy!
152148
153149- Supported content types are:
154150
151+ - `application/json;charset=utf-8`
155152 - `application/json`
156153
157−- Example: `application/json`
154+- Example (`application/json;charset=utf-8`, `application/json`):
158155
159− ```javascript
160− {"email":"alp@foo.com","interested_in":["haskell","mathematics"],"age":26,"name":"Alp"}
161− ```
156+ ```javascript
157+{"clientAge":26,"clientEmail":"alp@foo.com","clientName":"Alp","clientInterestedIn":["haskell","mathematics"]}
158+ ```
162159
163160#### Response:
164161
165−- Status code 201
162+- Status code 200
166163- Headers: []
167164
168165- Supported content types are:
169166
167+ - `application/json;charset=utf-8`
170168 - `application/json`
171169
172−- Response body as below.
170+- Example (`application/json;charset=utf-8`, `application/json`):
173171
174− ```javascript
175− {"subject":"Hey Alp, we miss you!","body":"Hi Alp,\n\nSince you've recently turned 26, have you checked out our latest haskell, mathematics products? Give us a visit!","to":"alp@foo.com","from":"great@company.com"}
176− ```
172+ ```javascript
173+{"subject":"Hey Alp, we miss you!","body":"Hi Alp,\n\nSince you've recently turned 26, have you checked out our latest haskell, mathematics products? Give us a visit!","to":"alp@foo.com","from":"great@company.com"}
174+ ```
177175
178176## GET /position/:x/:y
179177
@@ -189,13 +187,14 @@ Enjoy!
189187
190188- Supported content types are:
191189
190+ - `application/json;charset=utf-8`
192191 - `application/json`
193192
194−- Response body as below.
193+- Example (`application/json;charset=utf-8`, `application/json`):
195194
196− ```javascript
197− {"x":3,"y":14}
198− ```
195+ ```javascript
196+{"yCoord":14,"xCoord":3}
197+ ````
199198
200199`````````
201200
@@ -213,6 +212,49 @@ docsBS = encodeUtf8
213212
214213`docsWithIntros` just takes an additional parameter, a list of `DocIntro`s that must be displayed before any endpoint docs.
215214
215+More customisation can be done with the `markdownWith` function, which allows customising some of the parameters used when generating Markdown. The most obvious of these is how to handle when a request or response body has multiple content types. For example, if we make a slight change to the `/marketing` endpoint of our API so that the request body can also be encoded as a form:
216+
217+``` haskell
218+type ExampleAPI2 = "position" :> Capture "x" Int :> Capture "y" Int :> Get '[JSON] Position
219+ :<|> "hello" :> QueryParam "name" String :> Get '[JSON] HelloMessage
220+ :<|> "marketing" :> ReqBody '[JSON, FormUrlEncoded] ClientInfo :> Post '[JSON] Email
221+
222+instance ToForm ClientInfo
223+instance FromForm ClientInfo
224+
225+exampleAPI2 :: Proxy ExampleAPI2
226+exampleAPI2 = Proxy
227+
228+api2Docs :: API
229+api2Docs = docs exampleAPI2
230+```
231+
232+The relevant output of `markdown api2Docs` is now:
233+
234+```````` text
235+#### Request:
236+
237+- Supported content types are:
238+
239+ - `application/json;charset=utf-8`
240+ - `application/json`
241+ - `application/x-www-form-urlencoded`
242+
243+- Example (`application/json;charset=utf-8`, `application/json`):
244+
245+ ```javascript
246+{"clientAge":26,"clientEmail":"alp@foo.com","clientName":"Alp","clientInterestedIn":["haskell","mathematics"]}
247+ ```
248+
249+- Example (`application/x-www-form-urlencoded`):
250+
251+ ```
252+clientAge=26&clientEmail=alp%40foo.com&clientName=Alp&clientInterestedIn=haskell&clientInterestedIn=mathematics
253+ ```
254+````````
255+
256+If, however, you don't want the extra example encoding shown, then you can use `markdownWith (defRenderingOptions & requestExamples .~ FirstContentType)` to get behaviour identical to `markdown apiDocs`.
257+
216258We can now serve the API *and* the API docs with a simple server.
217259
218260``` haskell
doc/tutorial/Javascript.lhs+3−4
@@ -228,13 +228,13 @@ data CommonGeneratorOptions = CommonGeneratorOptions
228228 {
229229 -- | function generating function names
230230 functionNameBuilder :: FunctionName -> Text
231− -- | name used when a user want to send the request body (to let you redefine it)
231+ -- | name used when a user wants to send the request body (to let you redefine it)
232232 , requestBody :: Text
233233 -- | name of the callback parameter when the request was successful
234234 , successCallback :: Text
235235 -- | name of the callback parameter when the request reported an error
236236 , errorCallback :: Text
237− -- | namespace on which we define the js function (empty mean local var)
237+ -- | namespace on which we define the js function (empty means local var)
238238 , moduleName :: Text
239239 -- | a prefix that should be prepended to the URL in the generated JS
240240 , urlPrefix :: Text
@@ -477,7 +477,7 @@ data AngularOptions = AngularOptions
477477 }
478478```
479479
480−# Custom function name builder
480+## Custom function name builder
481481
482482Servant comes with three name builders included:
483483
@@ -518,4 +518,3 @@ var get_books = function(q, onSuccess, onError)
518518}
519519
520520```
521−
doc/tutorial/Server.lhs+119−66
@@ -18,6 +18,7 @@ need to have some language extensions and imports:
1818{-# LANGUAGE GeneralizedNewtypeDeriving #-}
1919{-# LANGUAGE MultiParamTypeClasses #-}
2020{-# LANGUAGE OverloadedStrings #-}
21+{-# LANGUAGE RankNTypes #-}
2122{-# LANGUAGE ScopedTypeVariables #-}
2223{-# LANGUAGE TypeOperators #-}
2324
@@ -28,7 +29,7 @@ import Prelude.Compat
2829
2930import Control.Monad.Except
3031import Control.Monad.Reader
31−import Data.Aeson.Compat
32+import Data.Aeson
3233import Data.Aeson.Types
3334import Data.Attoparsec.ByteString
3435import Data.ByteString (ByteString)
@@ -45,6 +46,7 @@ import Servant
4546import System.Directory
4647import Text.Blaze
4748import Text.Blaze.Html.Renderer.Utf8
49+import Servant.Types.SourceT (source)
4850import qualified Data.Aeson.Parser
4951import qualified Text.Blaze.Html
5052```
@@ -94,12 +96,6 @@ users1 =
9496 ]
9597```
9698
97−Let's also write our API type.
98−
99−``` haskell ignore
100−type UserAPI1 = "users" :> Get '[JSON] [User]
101−```
102−
10399We can now take care of writing the actual webservice that will handle requests
104100to such an API. This one will be very simple, being reduced to just a single
105101endpoint. The type of the web application is determined by the API type,
@@ -187,7 +183,7 @@ users2 = [isaac, albert]
187183
188184Now, just like we separate the various endpoints in `UserAPI` with `:<|>`, we
189185are going to separate the handlers with `:<|>` too! They must be provided in
190−the same order as in in the API type.
186+the same order as in the API type.
191187
192188``` haskell
193189server2 :: Server UserAPI2
@@ -203,7 +199,7 @@ And that's it! You can run this example in the same way that we showed for
203199
204200Fine, we can write trivial webservices easily, but none of the two above use
205201any "fancy" combinator from servant. Let's address this and use `QueryParam`,
206−`Capture` and `ReqBody` right away. You'll see how each occurence of these
202+`Capture` and `ReqBody` right away. You'll see how each occurrence of these
207203combinators in an endpoint makes the corresponding handler receive an
208204argument of the appropriate type automatically. You don't have to worry about
209205manually looking up URL captures or query string parameters, or
@@ -317,8 +313,8 @@ For reference, here's a list of some combinators from **servant**:
317313## The `FromHttpApiData`/`ToHttpApiData` classes
318314
319315Wait... How does **servant** know how to decode the `Int`s from the URL? Or how
320−to decode a `ClientInfo` value from the request body? This is what this and the
321−following two sections address.
316+to decode a `ClientInfo` value from the request body? The following three sections will
317+help us answer these questions.
322318
323319`Capture`s and `QueryParam`s are represented by some textual value in URLs.
324320`Header`s are similarly represented by a pair of a header name and a
@@ -603,7 +599,7 @@ $ curl -H 'Accept: text/html' http://localhost:8081/persons
603599
604600## The `Handler` monad
605601
606−At the heart of the handlers is the monad they run in, namely a newtype `Handler` around `ExceptT ServantErr IO`
602+At the heart of the handlers is the monad they run in, namely a newtype `Handler` around `ExceptT ServerError IO`
607603([haddock documentation for `ExceptT`](http://hackage.haskell.org/package/mtl-2.2.1/docs/Control-Monad-Except.html#t:ExceptT)).
608604One might wonder: why this monad? The answer is that it is the
609605simplest monad with the following properties:
@@ -621,12 +617,12 @@ newtype ExceptT e m a = ExceptT (m (Either e a))
621617```
622618
623619In short, this means that a handler of type `Handler a` is simply
624−equivalent to a computation of type `IO (Either ServantErr a)`, that is, an IO
620+equivalent to a computation of type `IO (Either ServerError a)`, that is, an IO
625621action that either returns an error or a result.
626622
627−The module [`Control.Monad.Except`](https://hackage.haskell.org/package/mtl-2.2.1/docs/Control-Monad-Except.html#t:ExceptT)
623+The module [`Control.Monad.Except`](https://hackage.haskell.org/package/mtl/docs/Control-Monad-Except.html#t:ExceptT)
628624from which `ExceptT` comes is worth looking at.
629−Perhaps most importantly, `ExceptT` and `Handler` are an instances of `MonadError`, so
625+Perhaps most importantly, `ExceptT` and `Handler` are instances of `MonadError`, so
630626`throwError` can be used to return an error from your handler (whereas `return`
631627 is enough to return a success).
632628
@@ -636,9 +632,9 @@ kind and abort early. The next two sections cover how to do just that.
636632
637633### Performing IO
638634
639−Another important instances from the list above are `MonadIO m => MonadIO
640−(ExceptT e m)`, and therefore also `MonadIO Handler` as there is `MonadIO IO` instance..
641−[`MonadIO`](http://hackage.haskell.org/package/transformers-0.4.3.0/docs/Control-Monad-IO-Class.html)
635+Other important instances from the list above are `MonadIO m => MonadIO
636+(ExceptT e m)`, and therefore also `MonadIO Handler` as there is a `MonadIO IO` instance.
637+[`MonadIO`](http://hackage.haskell.org/package/base/docs/Control-Monad-IO-Class.html#t:MonadIO)
642638is a class from the **transformers** package defined as:
643639
644640``` haskell ignore
@@ -664,16 +660,16 @@ server5 = do
664660 return (FileContent filecontent)
665661```
666662
667−### Failing, through `ServantErr`
663+### Failing, through `ServerError`
668664
669665If you want to explicitly fail at providing the result promised by an endpoint
670666using the appropriate HTTP status code (not found, unauthorized, etc) and some
671667error message, all you have to do is use the `throwError` function mentioned above
672−and provide it with the appropriate value of type `ServantErr`, which is
668+and provide it with the appropriate value of type `ServerError`, which is
673669defined as:
674670
675671``` haskell ignore
676−data ServantErr = ServantErr
672+data ServerError = ServerError
677673 { errHTTPCode :: Int
678674 , errReasonPhrase :: String
679675 , errBody :: ByteString -- lazy bytestring
@@ -689,7 +685,7 @@ use record update syntax:
689685failingHandler :: Handler ()
690686failingHandler = throwError myerr
691687
692− where myerr :: ServantErr
688+ where myerr :: ServerError
693689 myerr = err503 { errBody = "Sorry dear user." }
694690```
695691
@@ -720,7 +716,7 @@ $ curl --verbose http://localhost:8081/myfile.txt
720716>
721717< HTTP/1.1 404 Not Found
722718[snip]
723−myfile.txt just isnt there, please leave this server alone.
719+myfile.txt just isn't there, please leave this server alone.
724720
725721$ echo Hello > myfile.txt
726722
@@ -822,7 +818,7 @@ If it doesn't exist, the handler will fail with a `404` status code.
822818
823819`serveDirectoryWebApp` uses some standard settings that fit the use case of
824820serving static files for most web apps. You can find out about the other
825−options in the documentation of the `Servant.Utils.StaticFiles` module.
821+options in the documentation of the `Servant.Server.StaticFiles` module.
826822
827823## Nested APIs
828824
@@ -834,7 +830,7 @@ type UserAPI3 = -- view the user with given userid, in JSON
834830 Capture "userid" Int :> Get '[JSON] User
835831
836832 :<|> -- delete the user with given userid. empty response
837− Capture "userid" Int :> DeleteNoContent '[JSON] NoContent
833+ Capture "userid" Int :> DeleteNoContent
838834```
839835
840836We can instead factor out the `userid`:
@@ -842,7 +838,7 @@ We can instead factor out the `userid`:
842838``` haskell
843839type UserAPI4 = Capture "userid" Int :>
844840 ( Get '[JSON] User
845− :<|> DeleteNoContent '[JSON] NoContent
841+ :<|> DeleteNoContent
846842 )
847843```
848844
@@ -900,13 +896,13 @@ type API1 = "users" :>
900896-- we factor out the Request Body
901897type API2 = ReqBody '[JSON] User :>
902898 ( Get '[JSON] User -- just display the same user back, don't register it
903− :<|> PostNoContent '[JSON] NoContent -- register the user. empty response
899+ :<|> PostNoContent -- register the user. empty response
904900 )
905901
906902-- we factor out a Header
907903type API3 = Header "Authorization" Token :>
908904 ( Get '[JSON] SecretData -- get some secret data, if authorized
909− :<|> ReqBody '[JSON] SecretData :> PostNoContent '[JSON] NoContent -- add some secret data, if authorized
905+ :<|> ReqBody '[JSON] SecretData :> PostNoContent -- add some secret data, if authorized
910906 )
911907
912908newtype Token = Token ByteString
@@ -919,11 +915,11 @@ API type only at the end.
919915``` haskell
920916type UsersAPI =
921917 Get '[JSON] [User] -- list users
922− :<|> ReqBody '[JSON] User :> PostNoContent '[JSON] NoContent -- add a user
918+ :<|> ReqBody '[JSON] User :> PostNoContent -- add a user
923919 :<|> Capture "userid" Int :>
924920 ( Get '[JSON] User -- view a user
925− :<|> ReqBody '[JSON] User :> PutNoContent '[JSON] NoContent -- update a user
926− :<|> DeleteNoContent '[JSON] NoContent -- delete a user
921+ :<|> ReqBody '[JSON] User :> PutNoContent -- update a user
922+ :<|> DeleteNoContent -- delete a user
927923 )
928924
929925usersServer :: Server UsersAPI
@@ -952,11 +948,11 @@ usersServer = getUsers :<|> newUser :<|> userOperations
952948``` haskell
953949type ProductsAPI =
954950 Get '[JSON] [Product] -- list products
955− :<|> ReqBody '[JSON] Product :> PostNoContent '[JSON] NoContent -- add a product
951+ :<|> ReqBody '[JSON] Product :> PostNoContent -- add a product
956952 :<|> Capture "productid" Int :>
957953 ( Get '[JSON] Product -- view a product
958− :<|> ReqBody '[JSON] Product :> PutNoContent '[JSON] NoContent -- update a product
959− :<|> DeleteNoContent '[JSON] NoContent -- delete a product
954+ :<|> ReqBody '[JSON] Product :> PutNoContent -- update a product
955+ :<|> DeleteNoContent -- delete a product
960956 )
961957
962958data Product = Product { productId :: Int }
@@ -1000,11 +996,11 @@ abstract that away:
1000996-- indexed by values of type 'i'
1001997type APIFor a i =
1002998 Get '[JSON] [a] -- list 'a's
1003− :<|> ReqBody '[JSON] a :> PostNoContent '[JSON] NoContent -- add an 'a'
999+ :<|> ReqBody '[JSON] a :> PostNoContent -- add an 'a'
10041000 :<|> Capture "id" i :>
10051001 ( Get '[JSON] a -- view an 'a' given its "identifier" of type 'i'
1006− :<|> ReqBody '[JSON] a :> PutNoContent '[JSON] NoContent -- update an 'a'
1007− :<|> DeleteNoContent '[JSON] NoContent -- delete an 'a'
1002+ :<|> ReqBody '[JSON] a :> PutNoContent -- update an 'a'
1003+ :<|> DeleteNoContent -- delete an 'a'
10081004 )
10091005
10101006-- Build the appropriate 'Server'
@@ -1057,75 +1053,71 @@ into something **servant** can understand?
10571053If we have a function that gets us from an `m a` to an `n a`, for any `a`, what
10581054do we have?
10591055
1060−``` haskell ignore
1061−newtype m :~> n = NT { ($$) :: forall a. m a -> n a}
1056+``` haskell
1057+type (~>) m n = forall a. m a -> n a
10621058```
10631059
10641060For example:
10651061
10661062``` haskell
1067−listToMaybeNT :: [] :~> Maybe
1068−listToMaybeNT = NT listToMaybe -- from Data.Maybe
1063+listToMaybe' :: [] ~> Maybe
1064+listToMaybe' = listToMaybe -- from Data.Maybe
10691065```
10701066
1071−(`NT` comes from "natural transformation", in case you're wondering.)
1067+Note that `servant` doesn't declare the `~>` type-alias, as the unfolded
1068+variant isn't much longer to write, as we'll see shortly.
10721069
10731070So if you want to write handlers using another monad/type than `Handler`, say the `Reader String` monad, the first thing you have to
10741071prepare is a function:
10751072
10761073``` haskell ignore
1077−readerToHandler :: Reader String :~> Handler
1074+readerToHandler :: Reader String a -> Handler a
10781075```
10791076
1080−Let's start with `readerToHandler'`. We obviously have to run the `Reader`
1081−computation by supplying it with a `String`, like `"hi"`. We get an `a` out
1082−from that and can then just `return` it into `Handler`. We can then just wrap
1083−that function with the `NT` constructor to make it have the fancier type.
1077+We obviously have to run the `Reader` computation by supplying it with a
1078+`String`, like `"hi"`. We get an `a` out from that and can then just `return`
1079+it into `Handler`.
10841080
10851081``` haskell
1086−readerToHandler' :: forall a. Reader String a -> Handler a
1087−readerToHandler' r = return (runReader r "hi")
1088−
1089−readerToHandler :: Reader String :~> Handler
1090−readerToHandler = NT readerToHandler'
1082+readerToHandler :: Reader String a -> Handler a
1083+readerToHandler r = return (runReader r "hi")
10911084```
10921085
10931086We can write some simple webservice with the handlers running in `Reader String`.
10941087
10951088``` haskell
10961089type ReaderAPI = "a" :> Get '[JSON] Int
1097− :<|> "b" :> Get '[JSON] String
1090+ :<|> "b" :> ReqBody '[JSON] Double :> Get '[JSON] Bool
10981091
10991092readerAPI :: Proxy ReaderAPI
11001093readerAPI = Proxy
11011094
11021095readerServerT :: ServerT ReaderAPI (Reader String)
1103−readerServerT = a :<|> b
1104−
1105− where a :: Reader String Int
1106− a = return 1797
1096+readerServerT = a :<|> b where
1097+ a :: Reader String Int
1098+ a = return 1797
11071099
1108− b :: Reader String String
1109− b = ask
1100+ b :: Double -> Reader String Bool
1101+ b _ = asks (== "hi")
11101102```
11111103
11121104We unfortunately can't use `readerServerT` as an argument of `serve`, because
11131105`serve` wants a `Server ReaderAPI`, i.e., with handlers running in `Handler`. But there's a simple solution to this.
11141106
1115−### Enter `enter`
1107+### Welcome `hoistServer`
11161108
11171109That's right. We have just written `readerToHandler`, which is exactly what we
11181110would need to apply to all handlers to make the handlers have the
11191111right type for `serve`. Being cumbersome to do by hand, we provide a function
1120−`enter` which takes a natural transformation between two parametrized types `m`
1112+`hoistServer` which takes a natural transformation between two parameterized types `m`
11211113and `n` and a `ServerT someapi m`, and returns a `ServerT someapi n`.
11221114
1123−In our case, we can wrap up our little webservice by using `enter
1124−readerToHandler` on our handlers.
1115+In our case, we can wrap up our little webservice by using
1116+`hoistServer readerAPI readerToHandler` on our handlers.
11251117
11261118``` haskell
11271119readerServer :: Server ReaderAPI
1128−readerServer = enter readerToHandler readerServerT
1120+readerServer = hoistServer readerAPI readerToHandler readerServerT
11291121
11301122app4 :: Application
11311123app4 = serve readerAPI readerServer
@@ -1136,10 +1128,71 @@ This is the webservice in action:
11361128``` bash
11371129$ curl http://localhost:8081/a
113811301797
1139−$ curl http://localhost:8081/b
1140−"hi"
1131+$ curl http://localhost:8081/b -X GET -d '42.0' -H 'Content-Type: application/json'
1132+true
1133+```
1134+
1135+### An arrow is a reader too.
1136+
1137+In previous versions of `servant` we had an `enter` to do what `hoistServer`
1138+does now. `enter` had an ambitious design goals, but was problematic in practice.
1139+
1140+One problematic situation was when the source monad was `(->) r`, yet it's
1141+handy in practice, because `(->) r` is isomorphic to `Reader r`.
1142+
1143+We can rewrite the previous example without `Reader`:
1144+
1145+```haskell
1146+funServerT :: ServerT ReaderAPI ((->) String)
1147+funServerT = a :<|> b where
1148+ a :: String -> Int
1149+ a _ = 1797
1150+
1151+ -- unfortunately, we cannot make `String` the first argument.
1152+ b :: Double -> String -> Bool
1153+ b _ s = s == "hi"
1154+
1155+funToHandler :: (String -> a) -> Handler a
1156+funToHandler f = return (f "hi")
1157+
1158+app5 :: Application
1159+app5 = serve readerAPI (hoistServer readerAPI funToHandler funServerT)
11411160```
11421161
1162+## Streaming endpoints
1163+
1164+We can create endpoints that don't just give back a single result, but give
1165+back a *stream* of results, served one at a time. Stream endpoints only provide
1166+a single content type, and also specify what framing strategy is used to
1167+delineate the results. To serve these results, we need to give back a stream
1168+producer. Adapters can be written to *Pipes*, *Conduit* and the like, or
1169+written directly as `SourceIO`s. SourceIO builds upon servant's own `SourceT`
1170+stream type (it's simpler than *Pipes* or *Conduit*).
1171+The API of a streaming endpoint needs to explicitly specify which sort of
1172+generator it produces. Note that the generator itself is returned by a
1173+`Handler` action, so that additional IO may be done in the creation of one.
1174+
1175+``` haskell
1176+type StreamAPI = "userStream" :> StreamGet NewlineFraming JSON (SourceIO User)
1177+streamAPI :: Proxy StreamAPI
1178+streamAPI = Proxy
1179+
1180+streamUsers :: SourceIO User
1181+streamUsers = source [isaac, albert, albert]
1182+
1183+app6 :: Application
1184+app6 = serve streamAPI (return streamUsers)
1185+```
1186+
1187+This simple application returns a stream of `User` values encoded in JSON
1188+format, with each value separated by a newline. In this case, the stream will
1189+consist of the value of `isaac`, followed by the value of `albert`, then the
1190+value of `albert` a second time. Importantly, the stream is written back as
1191+results are produced, rather than all at once. This means first that results
1192+are delivered when they are available, and second, that if an exception
1193+interrupts production of the full stream, nonetheless partial results have
1194+already been written back.
1195+
11431196## Conclusion
11441197
11451198You're now equipped to write webservices/web-applications using
doc/tutorial/index.rst+3−3
@@ -3,13 +3,13 @@ Tutorial
33
44This is an introductory tutorial to **servant**. Whilst browsing is fine, it makes more sense if you read the sections in order, or at least read the first section before anything else.
55
6−(Any comments, issues or feedback about the tutorial can be submitted
7−to `servant's issue tracker <http://github.com/haskell-servant/servant/issues>`_.)
8−
6+Any comments, issues or feedback about the tutorial can be submitted
7+to `servant's issue tracker <http://github.com/haskell-servant/servant/issues>`_.
98
109.. toctree::
1110 :maxdepth: 1
1211
12+ install.rst
1313 ApiType.lhs
1414 Server.lhs
1515 Client.lhs
doc/tutorial/install.rstnew file+68
@@ -0,0 +1,68 @@
1+Install
2+========
3+
4+cabal-install
5+--------
6+
7+The whole tutorial is a `cabal <https://cabal.readthedocs.io/en/latest/>`_
8+project and can be built locally as follows:
9+
10+.. code-block:: bash
11+
12+ $ git clone https://github.com/haskell-servant/servant.git
13+ $ cd servant
14+ # build
15+ $ cabal new-build tutorial
16+ # load in ghci to play with it
17+ $ cabal new-repl tutorial
18+
19+stack
20+--------
21+
22+The servant `stack <https://docs.haskellstack.org/en/stable/README/>`_ template includes the working tutorial. To initialize this template, run:
23+
24+.. code-block:: bash
25+
26+ $ stack new myproj servant
27+ $ cd myproj
28+ # build
29+ $ stack build
30+ # start server
31+ $ stack exec myproj-exe
32+
33+The code can be found in the `*.lhs` files under `doc/tutorial/` in the
34+repository. Feel free to edit it while you're reading this documentation and
35+see the effect of your changes.
36+
37+nix
38+--------
39+
40+`Nix <https://nixos.org/nix/>`_ users should feel free to take a look at
41+the `nix/shell.nix` file in the repository and use it to provision a suitable
42+environment to build and run the examples.
43+
44+Note for Ubuntu users
45+--------
46+
47+Ubuntu's packages for `ghc`, `cabal`, and `stack` are years out of date.
48+If the instructions above fail for you,
49+try replacing the Ubuntu packages with up-to-date versions.
50+First remove the installed versions:
51+
52+.. code-block:: bash
53+
54+ # remove the obsolete versions
55+ $ sudo apt remove ghc haskell-stack cabal-install
56+
57+Then install fresh versions of the Haskell toolchain
58+using the `ghcup <https://www.haskell.org/ghcup/install/>`_ installer.
59+
60+As of February 2022, one easy way to do this is by running a bootstrap script:
61+
62+.. code-block:: bash
63+
64+ $ curl --proto '=https' --tlsv1.2 -sSf https://get-ghcup.haskell.org | sh
65+
66+The script is interactive and will prompt you for details about what
67+you want installed and where. To install manually,
68+see `the detailed instructions <https://www.haskell.org/ghcup/install/#manual-install>`_.
doc/tutorial/test/Spec.hs+11−1
@@ -1 +1,11 @@
1−{-# OPTIONS_GHC -F -pgmF hspec-discover #-}
1+module Main where
2+
3+import qualified JavascriptSpec
4+
5+import Test.Hspec (Spec, hspec, describe)
6+
7+main :: IO ()
8+main = hspec spec
9+
10+spec :: Spec
11+spec = describe "Javascript" JavascriptSpec.spec
doc/tutorial/tinc.yamldeleted−13
@@ -1,13 +0,0 @@
1−dependencies:
2− - name: servant
3− path: ../../servant
4− - name: servant-server
5− path: ../../servant-server
6− - name: servant-client
7− path: ../../servant-client
8− - name: servant-js
9− path: ../../servant-js
10− - name: servant-docs
11− path: ../../servant-docs
12− - name: servant-foreign
13− path: ../../servant-foreign
doc/tutorial/tutorial.cabal+60−36
@@ -1,53 +1,77 @@
1+cabal-version: 2.2
12name: tutorial
23version: 0.10
34synopsis: The servant tutorial
4−homepage: http://haskell-servant.readthedocs.org/
5−license: BSD3
5+description:
6+ The servant tutorial can be found at
7+ <http://docs.servant.dev/>
8+homepage: http://docs.servant.dev/
9+category: Servant, Documentation
10+license: BSD-3-Clause
611license-file: LICENSE
712author: Servant Contributors
813maintainer: haskell-servant-maintainers@googlegroups.com
914build-type: Simple
10−cabal-version: >=1.10
15+tested-with:
16+ GHC==8.6.5
17+ GHC==8.8.3, GHC ==8.10.7
18+extra-source-files:
19+ static/index.html
20+ static/ui.js
1121
1222library
23+ default-language: Haskell2010
24+ ghc-options: -Wall -pgmL markdown-unlit
1325 exposed-modules: ApiType
1426 , Authentication
1527 , Client
1628 , Docs
1729 , Javascript
1830 , Server
19− build-depends: base == 4.*
20− , base-compat
21− , text
22− , aeson
23− , aeson-compat
24− , blaze-html
25− , directory
26− , blaze-markup
27− , containers
28− , servant == 0.11.*
29− , servant-server == 0.11.*
30− , servant-client == 0.11.*
31− , servant-docs == 0.10.*
32− , servant-js >= 0.9 && <0.10
33− , warp
34− , http-media
35− , lucid
36− , time
37− , string-conversions
38− , bytestring
39− , attoparsec
40− , mtl
41− , random
42− , js-jquery
43− , wai
44− , http-types
45− , transformers
46− , markdown-unlit >= 0.4
47− , http-client
48− default-language: Haskell2010
49− ghc-options: -Wall -pgmL markdown-unlit
50− build-tool-depends: markdown-unlit:markdown-unlit
31+
32+ -- Packages `servant` depends on.
33+ -- We don't need to specify bounds here as this package is never released.
34+ build-depends:
35+ base >= 4.7 && <5
36+ , aeson
37+ , attoparsec
38+ , base-compat
39+ , bytestring
40+ , containers
41+ , directory
42+ , http-api-data
43+ , http-client
44+ , http-media
45+ , http-types
46+ , mtl
47+ , string-conversions
48+ , text
49+ , transformers
50+ , wai
51+ , warp
52+
53+ -- Servant dependencies
54+ build-depends:
55+ servant
56+ , servant-server
57+ , servant-client
58+ , servant-docs
59+
60+ -- Other dependencies: Lower bound around what is in the latest Stackage LTS.
61+ -- Here can be exceptions if we really need features from the newer versions.
62+ build-depends:
63+ blaze-html >= 0.9.0.1 && < 0.10
64+ , blaze-markup >= 0.8.0.0 && < 0.9
65+ , cookie >= 0.4.3 && < 0.5
66+ , js-jquery >= 3.3.1 && < 3.4
67+ , lucid >= 2.9.11 && < 2.12
68+ , random >= 1.1 && < 1.3
69+ , servant-js >= 0.9 && < 0.10
70+ , time >= 1.6.0.1 && < 1.13
71+
72+ -- For legacy tools, we need to specify build-depends too
73+ build-depends: markdown-unlit >= 0.5.0 && <0.6
74+ build-tool-depends: markdown-unlit:markdown-unlit >= 0.5.0 && <0.6
5175
5276test-suite spec
5377 type: exitcode-stdio-1.0
@@ -56,7 +80,7 @@ test-suite spec
5680 hs-source-dirs: test
5781 main-is: Spec.hs
5882 other-modules: JavascriptSpec
59− build-depends: base == 4.*
83+ build-depends: base
6084 , tutorial
6185 , hspec
6286 , hspec-wai
ghcjs.nixnew file+22
@@ -0,0 +1,22 @@
1+let reflex-platform = import (builtins.fetchTarball
2+ { name = "reflex-platform";
3+ url = "https://github.com/reflex-frp/reflex-platform/archive/1aba6f367982bd6dd78ec2fda75ab246a62d32c5.tar.gz";
4+ }) {};
5+ pkgs = import ./nix/nixpkgs.nix; in
6+
7+pkgs.stdenv.mkDerivation {
8+ name = "ghcjs-shell";
9+ buildInputs =
10+ [ (reflex-platform.ghcjs.ghcWithPackages (p: with p; [
11+ attoparsec
12+ hashable
13+ ]))
14+ pkgs.cabal-install
15+ pkgs.gmp
16+ pkgs.haskellPackages.cabal-plan
17+ pkgs.haskellPackages.hspec-discover
18+ pkgs.nodejs
19+ pkgs.perl
20+ pkgs.zlib
21+ ];
22+}
hlint.yamlnew file+65
@@ -0,0 +1,65 @@
1+# HLint configuration file
2+# https://github.com/ndmitchell/hlint
3+##########################
4+
5+# This file contains a template configuration file, which is typically
6+# placed as .hlint.yaml in the root of your project
7+
8+
9+# Specify additional command line arguments
10+#
11+# - arguments: [--color, --cpp-simple, -XQuasiQuotes]
12+
13+
14+# Control which extensions/flags/modules/functions can be used
15+#
16+# - extensions:
17+# - default: false # all extension are banned by default
18+# - name: [PatternGuards, ViewPatterns] # only these listed extensions can be used
19+# - {name: CPP, within: CrossPlatform} # CPP can only be used in a given module
20+#
21+# - flags:
22+# - {name: -w, within: []} # -w is allowed nowhere
23+#
24+# - modules:
25+# - {name: [Data.Set, Data.HashSet], as: Set} # if you import Data.Set qualified, it must be as 'Set'
26+# - {name: Control.Arrow, within: []} # Certain modules are banned entirely
27+#
28+# - functions:
29+# - {name: unsafePerformIO, within: []} # unsafePerformIO can only appear in no modules
30+
31+
32+# Add custom hints for this project
33+#
34+# Will suggest replacing "wibbleMany [myvar]" with "wibbleOne myvar"
35+# - error: {lhs: "wibbleMany [x]", rhs: wibbleOne x}
36+
37+
38+# Turn on hints that are off by default
39+#
40+# Ban "module X(module X) where", to require a real export list
41+# - warn: {name: Use explicit module export list}
42+#
43+# Replace a $ b $ c with a . b $ c
44+# - group: {name: dollar, enabled: true}
45+#
46+# Generalise map to fmap, ++ to <>
47+# - group: {name: generalise, enabled: true}
48+
49+
50+# Ignore some builtin hints
51+- ignore: {name: Redundant do}
52+- ignore: {name: Parse error}
53+- ignore: {name: Use fmap}
54+- ignore: {name: Use list comprehension}
55+- ignore: {name: Use lambda-case}
56+- ignore: {name: Eta reduce}
57+# - ignore: {name: Use const, within: SpecialModule} # Only within certain modules
58+
59+
60+# Define some custom infix operators
61+# - fixity: infixr 3 ~^#^~
62+
63+
64+# To generate a suitable file for HLint do:
65+# $ hlint --default > .hlint.yaml
nix/README.mdnew file+41
@@ -0,0 +1,41 @@
1+You can use the `shell.nix` from this directory
2+to build the servant packages or even the tutorial
3+or cookbook if you want to, optionally.
4+
5+Just the servant packages:
6+
7+``` sh
8+$ nix-shell nix/shell.nix
9+```
10+
11+Everything needed for the tutorial and the
12+cookbook too:
13+
14+``` sh
15+$ nix-shell nix/shell.nix --arg tutorial true
16+```
17+
18+The `shell.nix` file also supports specifying
19+a particular ghc version, e.g:
20+
21+``` sh
22+$ nix-shell nix/shell.nix --argstr compiler ghcHEAD
23+```
24+
25+**Possible GHC versions**
26+- `ghc865Binary`
27+- `ghc884`
28+- `ghc8104` - default
29+- `ghc901`
30+
31+### Cabal users
32+
33+GHC version can be chosen via the nix-shell parameter
34+
35+`cabal build all`
36+
37+### Stack version
38+
39+Since the ghc version is set by the LTS version, it is preferable to use the `ghc8104` version parameter for the nix-shell.
40+
41+`stack --no-nix --system-ghc <command>`
nix/nixpkgs.jsonnew file+4
@@ -0,0 +1,4 @@
1+{
2+ "rev" : "05f0934825c2a0750d4888c4735f9420c906b388",
3+ "sha256" : "1g8c2w0661qn89ajp44znmwfmghbbiygvdzq0rzlvlpdiz28v6gy"
4+}
nix/nixpkgs.nixnew file+4
@@ -0,0 +1,4 @@
1+import (builtins.fetchTarball {
2+ url = "https://github.com/NixOS/nixpkgs/archive/refs/tags/21.05.tar.gz";
3+ sha256 = "sha256:1ckzhh24mgz6jd1xhfgx0i9mijk6xjqxwsshnvq789xsavrmsc36";
4+}) {}
nix/shell.nixnew file+20
@@ -0,0 +1,20 @@
1+{ compiler ? "ghc8104"
2+, tutorial ? false
3+, pkgs ? import ./nixpkgs.nix
4+}:
5+
6+ with pkgs;
7+
8+ let
9+ ghc = haskell.packages.${compiler}.ghcWithPackages (_: []);
10+ docstuffs = python3.withPackages (ps: with ps; [ recommonmark sphinx sphinx_rtd_theme ]);
11+ in
12+ stdenv.mkDerivation {
13+ name = "servant-dev";
14+ buildInputs = [ ghc zlib python3 wget cabal-install postgresql openssl stack haskellPackages.hspec-discover ]
15+ ++ (if tutorial then [docstuffs postgresql] else []);
16+ shellHook = ''
17+ eval $(grep export ${ghc}/bin/ghc)
18+ export LD_LIBRARY_PATH=$LD_LIBRARY_PATH:"${zlib}/lib";
19+ '';
20+ }
scripts/README.mddeleted−8
@@ -1,8 +0,0 @@
1−The release process works roughly like this:
2−
3−``` bash
4−./scripts/bump-versions.sh <type-of-bump>
5−git commit
6−./scripts/upload.hs
7−git tag <version> && git push --tags
8−```
scripts/bump-versions.shdeleted−62
@@ -1,62 +0,0 @@
1−#!/usr/bin/env bash
2−#===============================================================================
3−#
4−# FILE: bump-versions.sh
5−#
6−# USAGE: ./bump-versions.sh
7−#
8−# DESCRIPTION: Bump the versions for all servant packages
9−#
10−# OPTIONS: See usage
11−# REQUIREMENTS: bumper, bash >= 4
12−# CREATED: 11.05.2015 21:36
13−# REVISION: ---
14−#===============================================================================
15−
16−set -o nounset
17−set -o errexit
18−
19−DIR=$( dirname $( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd ))
20−. "${DIR}/scripts/lib/common.sh"
21−
22−usage () {
23− echo " bump-versions.sh <POSITION> [-d|--dry-run]"
24− echo " | [-h|--help]"
25− echo " Bumps the specified positional version of all servant packages."
26− echo " POSITION is a number between 0 and 3, inclusive."
27− exit 0
28−}
29−
30−if [ $# -eq 0 ] ; then
31− echo "expecting one or more arguments. Got 0"
32− usage
33−elif [ $# -gt 2 ] ; then
34− echo "expecting one or more arguments"
35− usage
36−fi
37−
38−versions_equal
39−
40−while [ "${1:-unset}" != "unset" ] ; do
41− case "$1" in
42− -h | --help) usage ;;
43− -d | --dry-run) DRY_RUN=true
44− shift ;;
45− 0) if POSITION="none" ; then POSITION=0 ; else usage ; fi
46− shift ;;
47− 1) if POSITION="none" ; then POSITION=1 ; else usage ; fi
48− shift ;;
49− 2) if POSITION="none" ; then POSITION=2 ; else usage ; fi
50− shift ;;
51− 3) if POSITION="none" ; then POSITION=3 ; else usage ; fi
52− shift ;;
53− *) usage ;;
54− esac
55−done
56−
57−if $DRY_RUN ; then
58− echo "Would have bumped position ${POSITION} on these packages:"
59− ( cd "$ROOT" && bumper --dry-run -"$POSITION" $(join , $SOURCES tutorial) )
60−else
61− ( cd "$ROOT" && bumper -"$POSITION" $(join , $SOURCES tutorial) )
62−fi
scripts/ci-cron.shdeleted−20
@@ -1,20 +0,0 @@
1−#!/usr/bin/env bash
2−
3−set -o nounset
4−set -o errexit
5−set -o verbose
6−
7−export PATH=$(stack path --bin-path):$PATH
8−
9−stack install cabal-install
10−cabal update
11−
12−for package in $(cat sources.txt) ; do
13− echo testing $package
14− pushd $package
15− tinc
16− cabal configure --enable-tests --disable-optimization --ghc-options='-Werror'
17− cabal build
18− cabal test
19− popd
20−done
scripts/clear-sandbox.shdeleted−26
@@ -1,26 +0,0 @@
1−#!/usr/bin/env bash
2−#===============================================================================
3−#
4−# FILE: clear-sandbox.sh
5−#
6−# USAGE: ./clear-sandbox.sh
7−#
8−# DESCRIPTION: Clear sandbox at top-level and at all packages
9−#
10−# REQUIREMENTS: bash >= 4
11−#===============================================================================
12−
13−set -o nounset
14−set -o errexit
15−
16−DIR=$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )
17−. "$DIR"/lib/common.sh
18−
19−clear_sandbox () {
20− rm -rf .cabal-sandbox cabal.sandbox.config
21− for s in ${SOURCES[@]} ; do
22− (cd "$s" && rm -rf cabal.sandbox.config dist)
23− done
24−}
25−
26−clear_sandbox
scripts/generate-nix-files.shdeleted−48
@@ -1,48 +0,0 @@
1−#!/usr/bin/env bash
2−#===============================================================================
3−#
4−# FILE: generate-nix-files.sh
5−#
6−# USAGE: ./generate-nix-files.sh
7−#
8−# DESCRIPTION: Update nix files at top-level and add all packages
9−#
10−# REQUIREMENTS: bash >= 4, cabal2nix(nix tool)
11−#===============================================================================
12−
13−set -o nounset
14−set -o errexit
15−
16−DIR=$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )
17−. "$DIR"/lib/common.sh
18−SHELLNIX="shell.nix"
19−
20−write-package-shell-nix () {
21− rm -rf $SHELLNIX
22− echo -e "let" >> $SHELLNIX
23− echo -e " pkgs = import <nixpkgs> {};" >> $SHELLNIX
24− echo -e "" >> $SHELLNIX
25− echo -e " haskellPackages = pkgs.haskellPackages.override {" >> $SHELLNIX
26− echo -e " overrides = self: super: {" >> $SHELLNIX
27− for n in ${SOURCES[@]} ; do
28− if [[ $1 != $n ]]; then
29− echo -e " $n = pkgs.haskell.lib.dontCheck (pkgs.haskell.lib.appendConfigureFlag (self.callPackage ../$n {}) \"--ghc-options=-Werror\");" >> $SHELLNIX
30− fi
31− done
32− echo -e " $1 = pkgs.haskell.lib.appendConfigureFlag (self.callPackage ./. {}) \"--ghc-options=-Werror\";" >> $SHELLNIX
33− echo -e " };" >> $SHELLNIX
34− echo -e " };" >> $SHELLNIX
35− echo -e "" >> $SHELLNIX
36− echo -e "in haskellPackages.$s.env" >> $SHELLNIX
37−}
38−
39−update-nix-files () {
40− for s in ${SOURCES[@]} ; do
41− pushd "$s" > /dev/null
42− cabal2nix . > default.nix
43− write-package-shell-nix $s
44− popd > /dev/null
45− done
46−}
47−
48−update-nix-files
scripts/lib/common.shdeleted−56
@@ -1,56 +0,0 @@
1−#!/bin/bash -
2−#===============================================================================
3−#
4−# FILE: lib/common.sh
5−#
6−# DESCRIPTION: Common functions for servant's shell scripts
7−# Meant to be sourced rather than run.
8−#
9−# REQUIREMENTS: bash >= 4
10−#===============================================================================
11−
12−
13−DIR=$( dirname $( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd ))
14−ROOT=$( dirname $DIR )
15−DRY_RUN=false
16−POSITION="none"
17−SOURCES_TXT="$( dirname $DIR)/sources.txt"
18−CABAL=${CABAL:-cabal}
19−TRAVIS=${TRAVIS:-false}
20−
21−declare -a SOURCES
22−SOURCES=$(awk -F= '{print $1}' "$SOURCES_TXT")
23−
24−join () { local IFS="$1"; shift; echo "$*"; }
25−
26−versions_equal () {
27− local NUM=$(cd "$ROOT" && find . -name 'servant*.cabal' | xargs grep "^version:" | awk '{ print $2 }' | uniq -c | wc -l)
28− if [ 1 -eq $NUM ] ; then
29− return 0
30− else
31− echo "versions of packages are not all the same!" && exit 1
32− fi
33−}
34−
35−travis_retry() {
36− # From
37− # https://github.com/travis-ci/travis-build/blob/18bd04e965b9bfaa49cd6bdcd8dcb1513b8d2fcd/lib/travis/build/templates/header.sh
38− local result=0
39− local count=1
40− while [ $count -le 3 ]; do
41− [ $result -ne 0 ] && {
42− echo -e "\n${ANSI_RED}The command \"$@\" failed. Retrying, $count of 3.${ANSI_RESET}\n" >&2
43− }
44− "$@"
45− result=$?
46− [ $result -eq 0 ] && break
47− count=$(($count + 1))
48− sleep 1
49− done
50−
51− [ $count -gt 3 ] && {
52− echo -e "\n${ANSI_RED}The command \"$@\" failed 3 times.${ANSI_RESET}\n" >&2
53− }
54−
55− return $result
56−}
scripts/start-sandbox.shdeleted−26
@@ -1,26 +0,0 @@
1−#!/usr/bin/env bash
2−#===============================================================================
3−#
4−# FILE: start-sandbox.sh
5−#
6−# USAGE: ./start-sandbox.sh
7−#
8−# DESCRIPTION: Create sandbox at top-level and add all packages as add-source
9−#
10−# REQUIREMENTS: bash >= 4
11−#===============================================================================
12−
13−set -o nounset
14−set -o errexit
15−
16−DIR=$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )
17−. "$DIR"/lib/common.sh
18−
19−prepare_sandbox () {
20− $CABAL sandbox init
21− for s in ${SOURCES[@]} ; do
22− (cd "$s" && $CABAL sandbox init --sandbox=../.cabal-sandbox && $CABAL sandbox add-source .)
23− done
24−}
25−
26−prepare_sandbox
scripts/test-all.shdeleted−46
@@ -1,46 +0,0 @@
1−#!/usr/bin/env bash
2−#===============================================================================
3−#
4−# FILE: test-all.sh
5−#
6−# USAGE: ./test-all.sh
7−#
8−# DESCRIPTION: Run tests for all source directories listed in $SOURCES.
9−# Uses local versions of those sources.
10−#
11−# REQUIREMENTS: bash >= 4
12−#===============================================================================
13−
14−set -o nounset
15−set -o errexit
16−
17−DIR=$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )
18−. "$DIR"/lib/common.sh
19−
20−GHC_FLAGS="-Werror"
21−
22−prepare_sandbox () {
23− $CABAL sandbox init
24− for s in ${SOURCES[@]} ; do
25− (cd "$s" && $CABAL sandbox init --sandbox=../.cabal-sandbox/ && $CABAL sandbox add-source .)
26− done
27− if $TRAVIS ; then
28− travis_retry $CABAL install --enable-tests ${SOURCES[@]}
29− else
30− $CABAL install --max-backjumps -1 --reorder-goals --enable-tests ${SOURCES[@]}
31− fi
32−}
33−
34−test_each () {
35− for s in ${SOURCES[@]} ; do
36− echo "Testing $s..."
37− pushd "$s"
38− $CABAL configure --enable-tests --ghc-options="$GHC_FLAGS"
39− $CABAL build
40− $CABAL test
41− popd
42− done
43−}
44−
45−prepare_sandbox
46−test_each
scripts/test-stack.shdeleted−11
@@ -1,11 +0,0 @@
1−#!/usr/bin/env bash
2−
3−set -o nounset
4−set -o errexit
5−
6−for stack_file in stack*.yaml ; do
7− echo testing $stack_file...
8− export STACK_YAML=$stack_file
9− stack setup
10− stack test --fast --ghc-options="-Werror"
11−done
scripts/upload.hsdeleted−14
@@ -1,14 +0,0 @@
1−#!/usr/bin/env stack
2−{- stack
3−--resolver lts-3.10
4−--install-ghc runghc
5−-}
6−
7−import Data.Foldable
8−import System.Process
9−
10−main :: IO ()
11−main = do
12− sources <- words <$> readFile "sources.txt"
13− forM_ sources $ \ source -> do
14− callCommand ("stack upload --no-signature " ++ source)
servant-auth/README.mdnew file+1
@@ -0,0 +1 @@
1+servant-auth-server/README.lhs
servant-auth/servant-auth-client/.ghcinew file+1
@@ -0,0 +1 @@
1+:set -isrc -itest -idoctest/ghci-wrapper/src
servant-auth/servant-auth-client/CHANGELOG.mdnew file+26
@@ -0,0 +1,26 @@
1+# Changelog
2+
3+All notable changes to this project will be documented in this file.
4+
5+The format is based on [Keep a Changelog](http://keepachangelog.com/en/1.0.0/)
6+and this project adheres to [PVP Versioning](https://pvp.haskell.org/).
7+
8+## [Unreleased]
9+
10+## [0.4.1.0] - 2020-10-06
11+
12+- Support generic Bearer token auth
13+
14+## [0.4.0.0] - 2019-03-08
15+
16+## Changed
17+
18+- #145 Support servant-0.16 in tests @domenkozar
19+- #145 Drop GHC 7.10 support @domenkozar
20+
21+## [0.3.3.0] - 2018-06-18
22+
23+### Added
24+- Support for GHC 8.4 by @phadej
25+- Support for servant-0.14 by @phadej
26+- Changelog by @domenkozar
servant-auth/servant-auth-client/LICENSEnew file+31
@@ -0,0 +1,31 @@
1+Copyright Julian K. Arni (c) 2015
2+
3+All rights reserved.
4+
5+Redistribution and use in source and binary forms, with or without
6+modification, are permitted provided that the following conditions are met:
7+
8+ * Redistributions of source code must retain the above copyright
9+ notice, this list of conditions and the following disclaimer.
10+
11+ * Redistributions in binary form must reproduce the above
12+ copyright notice, this list of conditions and the following
13+ disclaimer in the documentation and/or other materials provided
14+ with the distribution.
15+
16+ * Neither the name of Julian K. Arni nor the names of other
17+ contributors may be used to endorse or promote products derived
18+ from this software without specific prior written permission.
19+
20+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
21+"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
22+LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
23+A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
24+OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
25+SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
26+LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
27+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
28+THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
29+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
30+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
31+
servant-auth/servant-auth-client/Setup.hsnew file+2
@@ -0,0 +1,2 @@
1+import Distribution.Simple
2+main = defaultMain
servant-auth/servant-auth-client/servant-auth-client.cabalnew file+80
@@ -0,0 +1,80 @@
1+cabal-version: 2.2
2+name: servant-auth-client
3+version: 0.4.1.0
4+synopsis: servant-client/servant-auth compatibility
5+description: This package provides instances that allow generating clients from
6+ <https://hackage.haskell.org/package/servant servant>
7+ APIs that use
8+ <https://hackage.haskell.org/package/servant-auth servant-auth's> @Auth@ combinator.
9+ .
10+ For a quick overview of the usage, see the <https://github.com/haskell-servant/servant/tree/master/servant-auth#readme README>.
11+category: Web, Servant, Authentication
12+homepage: https://github.com/haskell-servant/servant/tree/master/servant-auth#readme
13+bug-reports: https://github.com/haskell-servant/servant/issues
14+author: Julian K. Arni
15+maintainer: jkarni@gmail.com
16+copyright: (c) Julian K. Arni
17+license: BSD-3-Clause
18+license-file: LICENSE
19+tested-with: GHC ==8.6.5 || ==8.8.4 || ==8.10.4 || ==9.0.1
20+build-type: Simple
21+extra-source-files:
22+ CHANGELOG.md
23+
24+source-repository head
25+ type: git
26+ location: https://github.com/haskell-servant/servant
27+
28+library
29+ hs-source-dirs:
30+ src
31+ default-extensions: ConstraintKinds DataKinds DefaultSignatures DeriveFoldable DeriveFunctor DeriveGeneric DeriveTraversable FlexibleContexts FlexibleInstances FunctionalDependencies GADTs KindSignatures MultiParamTypeClasses OverloadedStrings RankNTypes ScopedTypeVariables TypeFamilies TypeOperators
32+ ghc-options: -Wall
33+ build-depends:
34+ base >= 4.10 && < 4.17
35+ , bytestring >= 0.10.6.0 && < 0.12
36+ , containers >= 0.5.6.2 && < 0.7
37+ , servant-auth == 0.4.*
38+ , servant >= 0.13 && < 0.20
39+ , servant-client-core >= 0.13 && < 0.20
40+
41+ exposed-modules:
42+ Servant.Auth.Client
43+ Servant.Auth.Client.Internal
44+ default-language: Haskell2010
45+
46+test-suite spec
47+ type: exitcode-stdio-1.0
48+ main-is: Spec.hs
49+ hs-source-dirs:
50+ test
51+ default-extensions: ConstraintKinds DataKinds DefaultSignatures DeriveFoldable DeriveFunctor DeriveGeneric DeriveTraversable FlexibleContexts FlexibleInstances FunctionalDependencies GADTs KindSignatures MultiParamTypeClasses OverloadedStrings RankNTypes ScopedTypeVariables TypeFamilies TypeOperators
52+ ghc-options: -Wall
53+ build-tool-depends: hspec-discover:hspec-discover >=2.5.5 && <2.10
54+
55+ -- dependencies with bounds inherited from the library stanza
56+ build-depends:
57+ base
58+ , servant-client
59+ , servant-auth
60+ , servant
61+ , servant-auth-client
62+
63+ -- test dependencies
64+ build-depends:
65+ hspec >= 2.5.5 && < 2.10
66+ , QuickCheck >= 2.11.3 && < 2.15
67+ , aeson >= 1.3.1.1 && < 3
68+ , bytestring >= 0.10.6.0 && < 0.12
69+ , http-client >= 0.5.13.1 && < 0.8
70+ , http-types >= 0.12.2 && < 0.13
71+ , servant-auth-server >= 0.4.2.0 && < 0.5
72+ , servant-server >= 0.13 && < 0.20
73+ , time >= 1.5.0.1 && < 1.13
74+ , transformers >= 0.4.2.0 && < 0.6
75+ , wai >= 3.2.1.2 && < 3.3
76+ , warp >= 3.2.25 && < 3.4
77+ , jose >= 0.7.0.0 && < 0.10
78+ other-modules:
79+ Servant.Auth.ClientSpec
80+ default-language: Haskell2010
servant-auth/servant-auth-client/src/Servant/Auth/Client.hsnew file+3
@@ -0,0 +1,3 @@
1+module Servant.Auth.Client (Token(..), Bearer) where
2+
3+import Servant.Auth.Client.Internal (Bearer, Token(..))
servant-auth/servant-auth-client/src/Servant/Auth/Client/Internal.hsnew file+64
@@ -0,0 +1,64 @@
1+{-# LANGUAGE CPP #-}
2+{-# LANGUAGE GeneralizedNewtypeDeriving #-}
3+{-# LANGUAGE UndecidableInstances #-}
4+{-# OPTIONS_GHC -fno-warn-orphans #-}
5+#if __GLASGOW_HASKELL__ == 800
6+{-# OPTIONS_GHC -fno-warn-redundant-constraints #-}
7+#endif
8+module Servant.Auth.Client.Internal where
9+
10+import qualified Data.ByteString as BS
11+import Data.Monoid
12+import Data.Proxy (Proxy (..))
13+import Data.String (IsString)
14+import GHC.Exts (Constraint)
15+import GHC.Generics (Generic)
16+import Servant.API ((:>))
17+import Servant.Auth
18+
19+import Servant.Client.Core
20+import Data.Sequence ((<|))
21+
22+-- | A simple bearer token.
23+newtype Token = Token { getToken :: BS.ByteString }
24+ deriving (Eq, Show, Read, Generic, IsString)
25+
26+type family HasBearer xs :: Constraint where
27+ HasBearer (Bearer ': xs) = ()
28+ HasBearer (JWT ': xs) = ()
29+ HasBearer (x ': xs) = HasBearer xs
30+ HasBearer '[] = BearerAuthNotEnabled
31+
32+class BearerAuthNotEnabled
33+
34+-- | @'HasBearer' auths@ is nominally a redundant constraint, but ensures we're not
35+-- trying to send a token to an API that doesn't accept them.
36+instance (HasBearer auths, HasClient m api) => HasClient m (Auth auths a :> api) where
37+ type Client m (Auth auths a :> api) = Token -> Client m api
38+
39+ clientWithRoute m _ req (Token token)
40+ = clientWithRoute m (Proxy :: Proxy api)
41+ $ req { requestHeaders = ("Authorization", headerVal) <| requestHeaders req }
42+ where
43+ headerVal = "Bearer " <> token
44+
45+#if MIN_VERSION_servant_client_core(0,14,0)
46+ hoistClientMonad pm _ nt cl = hoistClientMonad pm (Proxy :: Proxy api) nt . cl
47+#endif
48+
49+
50+-- * Authentication combinators
51+
52+-- | A Bearer token in the Authorization header:
53+--
54+-- @Authorization: Bearer <token>@
55+--
56+-- This can be any token recognized by the server, for example,
57+-- a JSON Web Token (JWT).
58+--
59+-- Note that, since the exact way the token is validated is not specified,
60+-- this combinator can only be used in the client. The server would not know
61+-- how to validate it, while the client does not care.
62+-- If you want to implement Bearer authentication in your server, you have to
63+-- choose a specific combinator, such as 'JWT'.
64+data Bearer
servant-auth/servant-auth-client/test/Servant/Auth/ClientSpec.hsnew file+161
@@ -0,0 +1,161 @@
1+{-# LANGUAGE CPP #-}
2+{-# LANGUAGE DeriveAnyClass #-}
3+module Servant.Auth.ClientSpec (spec) where
4+
5+import Crypto.JOSE (JWK,
6+ KeyMaterialGenParam (OctGenParam),
7+ genJWK)
8+import Data.Aeson (FromJSON (..), ToJSON (..))
9+import qualified Data.ByteString.Lazy as BSL
10+import Data.Time (UTCTime, defaultTimeLocale,
11+ parseTimeOrError)
12+import GHC.Generics (Generic)
13+import Network.HTTP.Client (Manager, defaultManagerSettings,
14+ newManager)
15+import Network.HTTP.Types (status401)
16+import Network.Wai.Handler.Warp (testWithApplication)
17+import Servant
18+import Servant.Client (BaseUrl (..), Scheme (Http),
19+ ClientError (FailureResponse),
20+#if MIN_VERSION_servant_client(0,16,0)
21+ ResponseF(..),
22+#elif MIN_VERSION_servant_client(0,13,0)
23+ GenResponse(..),
24+#elif MIN_VERSION_servant_client(0,12,0)
25+ Response(..),
26+#endif
27+ client)
28+import System.IO.Unsafe (unsafePerformIO)
29+import Test.Hspec
30+import Test.QuickCheck
31+
32+#if MIN_VERSION_servant_client(0,13,0)
33+import Servant.Client (mkClientEnv, runClientM)
34+#elif MIN_VERSION_servant_client(0,9,0)
35+import Servant.Client (ClientEnv (..), runClientM)
36+#else
37+import Control.Monad.Trans.Except (runExceptT)
38+#endif
39+#if !MIN_VERSION_servant_server(0,16,0)
40+#define ClientError ServantError
41+#endif
42+
43+import Servant.Auth.Client
44+import Servant.Auth.Server
45+import Servant.Auth.Server.SetCookieOrphan ()
46+
47+spec :: Spec
48+spec = describe "The JWT combinator" $ do
49+ hasClientSpec
50+
51+
52+------------------------------------------------------------------------------
53+-- * HasClient {{{
54+
55+hasClientSpec :: Spec
56+hasClientSpec = describe "HasClient" $ around (testWithApplication $ return app) $ do
57+
58+ let mkTok :: User -> Maybe UTCTime -> IO Token
59+ mkTok user mexp = do
60+ Right tok <- makeJWT user jwtCfg mexp
61+ return $ Token $ BSL.toStrict tok
62+
63+ it "succeeds when the token does not have expiry" $ \port -> property $ \user -> do
64+ tok <- mkTok user Nothing
65+ v <- getIntClient tok mgr (BaseUrl Http "localhost" port "")
66+ v `shouldBe` Right (length $ name user)
67+
68+ it "succeeds when the token is not expired" $ \port -> property $ \user -> do
69+ tok <- mkTok user (Just future)
70+ v <- getIntClient tok mgr (BaseUrl Http "localhost" port "")
71+ v `shouldBe` Right (length $ name user)
72+
73+ it "fails when token is expired" $ \port -> property $ \user -> do
74+ tok <- mkTok user (Just past)
75+#if MIN_VERSION_servant_client(0,16,0)
76+ Left (FailureResponse _ (Response stat _ _ _))
77+#elif MIN_VERSION_servant_client(0,12,0)
78+ Left (FailureResponse (Response stat _ _ _))
79+#elif MIN_VERSION_servant_client(0,11,0)
80+ Left (FailureResponse _ stat _ _)
81+#else
82+ Left (FailureResponse stat _ _)
83+#endif
84+ <- getIntClient tok mgr (BaseUrl Http "localhost" port "")
85+ stat `shouldBe` status401
86+
87+
88+getIntClient :: Token -> Manager -> BaseUrl -> IO (Either ClientError Int)
89+#if MIN_VERSION_servant(0,13,0)
90+getIntClient tok m burl = runClientM (client api tok) (mkClientEnv m burl)
91+#elif MIN_VERSION_servant(0,9,0)
92+getIntClient tok m burl = runClientM (client api tok) (ClientEnv m burl)
93+#else
94+getIntClient tok m burl = runExceptT $ client api tok m burl
95+#endif
96+-- }}}
97+------------------------------------------------------------------------------
98+-- * API and Server {{{
99+
100+type API = Auth '[JWT] User :> Get '[JSON] Int
101+
102+api :: Proxy API
103+api = Proxy
104+
105+theKey :: JWK
106+theKey = unsafePerformIO . genJWK $ OctGenParam 256
107+{-# NOINLINE theKey #-}
108+
109+mgr :: Manager
110+mgr = unsafePerformIO $ newManager defaultManagerSettings
111+{-# NOINLINE mgr #-}
112+
113+app :: Application
114+app = serveWithContext api ctx server
115+ where
116+ ctx = cookieCfg :. jwtCfg :. EmptyContext
117+
118+jwtCfg :: JWTSettings
119+jwtCfg = defaultJWTSettings theKey
120+
121+cookieCfg :: CookieSettings
122+cookieCfg = defaultCookieSettings
123+
124+
125+server :: Server API
126+server = getInt
127+ where
128+ getInt :: AuthResult User -> Handler Int
129+ getInt (Authenticated u) = return . length $ name u
130+ getInt _ = throwAll err401
131+
132+
133+-- }}}
134+------------------------------------------------------------------------------
135+-- * Utils {{{
136+
137+past :: UTCTime
138+past = parseTimeOrError True defaultTimeLocale "%Y-%m-%d" "1970-01-01"
139+
140+future :: UTCTime
141+future = parseTimeOrError True defaultTimeLocale "%Y-%m-%d" "2070-01-01"
142+
143+
144+-- }}}
145+------------------------------------------------------------------------------
146+-- * Types {{{
147+
148+data User = User
149+ { name :: String
150+ , _id :: String
151+ } deriving (Eq, Show, Read, Generic)
152+
153+instance FromJWT User
154+instance ToJWT User
155+instance FromJSON User
156+instance ToJSON User
157+
158+instance Arbitrary User where
159+ arbitrary = User <$> arbitrary <*> arbitrary
160+
161+-- }}}
servant-auth/servant-auth-client/test/Spec.hsnew file+1
@@ -0,0 +1 @@
1+{-# OPTIONS_GHC -F -pgmF hspec-discover #-}
servant-auth/servant-auth-docs/.ghcinew file+1
@@ -0,0 +1 @@
1+:set -isrc -itest -idoctest/ghci-wrapper/src
servant-auth/servant-auth-docs/CHANGELOG.mdnew file+14
@@ -0,0 +1,14 @@
1+# Changelog
2+
3+All notable changes to this project will be documented in this file.
4+
5+The format is based on [Keep a Changelog](http://keepachangelog.com/en/1.0.0/)
6+and this project adheres to [PVP Versioning](https://pvp.haskell.org/).
7+
8+## [Unreleased]
9+
10+## [0.2.10.0] - 2018-06-18
11+
12+### Added
13+- Support for GHC 8.4 by @phadej
14+- Changelog by @domenkozar
servant-auth/servant-auth-docs/LICENSEnew file+31
@@ -0,0 +1,31 @@
1+Copyright Julian K. Arni (c) 2015
2+
3+All rights reserved.
4+
5+Redistribution and use in source and binary forms, with or without
6+modification, are permitted provided that the following conditions are met:
7+
8+ * Redistributions of source code must retain the above copyright
9+ notice, this list of conditions and the following disclaimer.
10+
11+ * Redistributions in binary form must reproduce the above
12+ copyright notice, this list of conditions and the following
13+ disclaimer in the documentation and/or other materials provided
14+ with the distribution.
15+
16+ * Neither the name of Julian K. Arni nor the names of other
17+ contributors may be used to endorse or promote products derived
18+ from this software without specific prior written permission.
19+
20+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
21+"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
22+LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
23+A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
24+OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
25+SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
26+LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
27+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
28+THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
29+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
30+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
31+
servant/Setup.lhs → servant-auth/servant-auth-docs/Setup.hsrenamed+5−3
@@ -1,4 +1,3 @@
1−\begin{code}
21{-# LANGUAGE CPP #-}
32{-# OPTIONS_GHC -Wall #-}
43module Main (main) where
@@ -16,6 +15,11 @@ main = defaultMainWithDoctests "doctests"
1615#else
1716
1817#ifdef MIN_VERSION_Cabal
18+-- If the macro is defined, we have new cabal-install,
19+-- but for some reason we don't have cabal-doctest in package-db
20+--
21+-- Probably we are running cabal sdist, when otherwise using new-build
22+-- workflow
1923#warning You are configuring this package without cabal-doctest installed. \
2024 The doctests test-suite will not work as a result. \
2125 To fix this, install cabal-doctest before configuring.
@@ -27,5 +31,3 @@ main :: IO ()
2731main = defaultMain
2832
2933#endif
30−
31−\end{code}
servant-auth/servant-auth-docs/servant-auth-docs.cabalnew file+84
@@ -0,0 +1,84 @@
1+cabal-version: 2.2
2+name: servant-auth-docs
3+version: 0.2.10.0
4+synopsis: servant-docs/servant-auth compatibility
5+description: This package provides instances that allow generating docs from
6+ <https://hackage.haskell.org/package/servant servant>
7+ APIs that use
8+ <https://hackage.haskell.org/package/servant-auth servant-auth's> @Auth@ combinator.
9+ .
10+ For a quick overview of the usage, see the <https://github.com/haskell-servant/servant/tree/master/servant-auth#readme README>.
11+category: Web, Servant, Authentication
12+homepage: https://github.com/haskell-servant/servant/tree/master/servant-auth#readme
13+bug-reports: https://github.com/haskell-servant/servant/issues
14+author: Julian K. Arni
15+maintainer: jkarni@gmail.com
16+copyright: (c) Julian K. Arni
17+license: BSD-3-Clause
18+license-file: LICENSE
19+tested-with: GHC ==8.6.5 || ==8.8.4 || ==8.10.4 || ==9.0.1
20+build-type: Custom
21+extra-source-files:
22+ CHANGELOG.md
23+
24+custom-setup
25+ setup-depends:
26+ base, Cabal, cabal-doctest >=1.0.6 && <1.1
27+
28+source-repository head
29+ type: git
30+ location: https://github.com/haskell-servant/servant
31+
32+library
33+ hs-source-dirs:
34+ src
35+ default-extensions: ConstraintKinds DataKinds DefaultSignatures DeriveFoldable DeriveFunctor DeriveGeneric DeriveTraversable FlexibleContexts FlexibleInstances FunctionalDependencies GADTs KindSignatures MultiParamTypeClasses OverloadedStrings RankNTypes ScopedTypeVariables TypeFamilies TypeOperators
36+ ghc-options: -Wall
37+ build-depends:
38+ base >= 4.10 && < 4.17
39+ , servant-docs >= 0.11.2 && < 0.13
40+ , servant >= 0.13 && < 0.20
41+ , servant-auth == 0.4.*
42+ , lens >= 4.16.1 && <5.2
43+ exposed-modules:
44+ Servant.Auth.Docs
45+ default-language: Haskell2010
46+
47+test-suite doctests
48+ type: exitcode-stdio-1.0
49+ main-is: doctests.hs
50+ build-depends:
51+ base,
52+ servant-auth-docs,
53+ doctest >= 0.16 && < 0.19,
54+ QuickCheck >= 2.11.3 && < 2.15,
55+ template-haskell
56+ ghc-options: -Wall -threaded
57+ hs-source-dirs: test
58+ default-language: Haskell2010
59+
60+test-suite spec
61+ type: exitcode-stdio-1.0
62+ main-is: Spec.hs
63+ hs-source-dirs:
64+ test
65+ default-extensions: ConstraintKinds DataKinds DefaultSignatures DeriveFoldable DeriveFunctor DeriveGeneric DeriveTraversable FlexibleContexts FlexibleInstances FunctionalDependencies GADTs KindSignatures MultiParamTypeClasses OverloadedStrings RankNTypes ScopedTypeVariables TypeFamilies TypeOperators
66+ ghc-options: -Wall
67+ build-tool-depends: hspec-discover:hspec-discover >=2.5.5 && <2.10
68+
69+ -- dependencies with bounds inherited from the library stanza
70+ build-depends:
71+ base
72+ , text
73+ , servant-docs
74+ , servant
75+ , servant-auth
76+ , lens
77+
78+ -- test dependencies
79+ build-depends:
80+ servant-auth-docs
81+ , hspec >= 2.5.5 && < 2.10
82+ , QuickCheck >= 2.11.3 && < 2.15
83+
84+ default-language: Haskell2010
servant-auth/servant-auth-docs/src/Servant/Auth/Docs.hsnew file+96
@@ -0,0 +1,96 @@
1+{-# OPTIONS_GHC -fno-warn-orphans #-}
2+module Servant.Auth.Docs
3+ (
4+ -- | The purpose of this package is provide the instance for 'servant-auth'
5+ -- combinators needed for 'servant-docs' documentation generation.
6+ --
7+ -- >>> type API = Auth '[JWT, Cookie, BasicAuth] Int :> Get '[JSON] Int
8+ -- >>> putStr $ markdown $ docs (Proxy :: Proxy API)
9+ -- ## GET /
10+ -- ...
11+ -- ... Authentication
12+ -- ...
13+ -- This part of the API is protected by the following authentication mechanisms:
14+ -- ...
15+ -- * JSON Web Tokens ([JWTs](https://en.wikipedia.org/wiki/JSON_Web_Token))
16+ -- * [Cookies](https://en.wikipedia.org/wiki/HTTP_cookie)
17+ -- * [Basic Authentication](https://en.wikipedia.org/wiki/Basic_access_authentication)
18+ -- ...
19+ -- Clients must supply the following data
20+ -- ...
21+ -- One of the following:
22+ -- ...
23+ -- * A JWT Token signed with this server's key
24+ -- * Cookies automatically set by browsers, plus a header
25+ -- * Cookies automatically set by browsers, plus a header
26+ -- ...
27+
28+ -- * Re-export
29+ JWT
30+ , BasicAuth
31+ , Cookie
32+ , Auth
33+ ) where
34+
35+import Control.Lens ((%~), (&), (|>))
36+import Data.List (intercalate)
37+import Data.Monoid
38+import Data.Proxy (Proxy (Proxy))
39+import Servant.API hiding (BasicAuth)
40+import Servant.Auth
41+import Servant.Docs hiding (pretty)
42+import Servant.Docs.Internal (DocAuthentication (..), authInfo)
43+
44+instance (AllDocs auths, HasDocs api) => HasDocs (Auth auths r :> api) where
45+ docsFor _ (endpoint, action) =
46+ docsFor (Proxy :: Proxy api) (endpoint, action & authInfo %~ (|> info))
47+ where
48+ (intro, reqData) = pretty $ allDocs (Proxy :: Proxy auths)
49+ info = DocAuthentication intro reqData
50+
51+
52+pretty :: [(String, String)] -> (String, String)
53+pretty [] = error "shouldn't happen"
54+pretty [(i, d)] =
55+ ( "This part of the API is protected by " <> i
56+ , d
57+ )
58+pretty rs =
59+ ( "This part of the API is protected by the following authentication mechanisms:\n\n"
60+ ++ " * " <> intercalate "\n * " (fst <$> rs)
61+ , "\nOne of the following:\n\n"
62+ ++ " * " <> intercalate "\n * " (snd <$> rs)
63+ )
64+
65+
66+class AllDocs (x :: [*]) where
67+ allDocs :: proxy x
68+ -- intro, req
69+ -> [(String, String)]
70+
71+instance (OneDoc a, AllDocs as) => AllDocs (a ': as) where
72+ allDocs _ = oneDoc (Proxy :: Proxy a) : allDocs (Proxy :: Proxy as)
73+
74+instance AllDocs '[] where
75+ allDocs _ = []
76+
77+class OneDoc a where
78+ oneDoc :: proxy a -> (String, String)
79+
80+instance OneDoc JWT where
81+ oneDoc _ =
82+ ("JSON Web Tokens ([JWTs](https://en.wikipedia.org/wiki/JSON_Web_Token))"
83+ , "A JWT Token signed with this server's key")
84+
85+instance OneDoc Cookie where
86+ oneDoc _ =
87+ ("[Cookies](https://en.wikipedia.org/wiki/HTTP_cookie)"
88+ , "Cookies automatically set by browsers, plus a header")
89+
90+instance OneDoc BasicAuth where
91+ oneDoc _ =
92+ ( "[Basic Authentication](https://en.wikipedia.org/wiki/Basic_access_authentication)"
93+ , "Cookies automatically set by browsers, plus a header")
94+
95+-- $setup
96+-- >>> instance ToSample Int where toSamples _ = singleSample 1729
servant-auth/servant-auth-docs/test/Spec.hsnew file+1
@@ -0,0 +1 @@
1+{-# OPTIONS_GHC -F -pgmF hspec-discover #-}
servant-auth/servant-auth-docs/test/doctests.hsnew file+12
@@ -0,0 +1,12 @@
1+module Main where
2+
3+import Build_doctests (flags, pkgs, module_sources)
4+import Data.Foldable (traverse_)
5+import Test.DocTest
6+
7+main :: IO ()
8+main = do
9+ traverse_ putStrLn args
10+ doctest args
11+ where
12+ args = flags ++ pkgs ++ module_sources
servant-auth/servant-auth-server/.ghcinew file+1
@@ -0,0 +1 @@
1+:set -isrc -itest -idoctest/ghci-wrapper/src
servant-auth/servant-auth-server/CHANGELOG.mdnew file+130
@@ -0,0 +1,130 @@
1+# Changelog
2+
3+All notable changes to this project will be documented in this file.
4+
5+The format is based on [Keep a Changelog](http://keepachangelog.com/en/1.0.0/)
6+and this project adheres to [PVP Versioning](https://pvp.haskell.org/).
7+
8+## [Unreleased]
9+
10+## [0.4.6.0] - 2020-10-06
11+
12+## Changed
13+
14+- expose verifyJWT and use it in two places [@domenkozar]
15+- support GHC 8.10 [@domenkozar]
16+- move ToJWT/FromJWT to servant-auth [@erewok]
17+- #165 fix AnySite with Cookie 3.5.0 [@odr]
18+
19+## [0.4.5.1] - 2020-02-06
20+
21+## Changed
22+
23+- #158 servant 0.17 support [@phadej]
24+
25+## [0.4.5.0] - 2019-12-28
26+
27+## Changed
28+- #144 servant 0.16 support and drop GHC 7.10 support [@domenkozar]
29+- #148 removed unused constaint in HasServer instance for Auth
30+- #154 GHC 8.8 support [@phadej]
31+
32+### Added
33+- #141 Support Stream combinator [@domenkozar]
34+- #143 Allow servant-0.16 [@phadej]
35+
36+## [0.4.4.0] - 2019-03-02
37+
38+### Added
39+- #141 Support Stream combinator [@domenkozar]
40+- #143 Allow servant-0.16 [@phadej]
41+
42+## [0.4.3.0] - 2019-01-17
43+
44+## Changed
45+- #117 Avoid running auth checks unnecessarily [@sopvop]
46+- #110 Get rid of crypto-api dependency [@domenkozar]
47+- #130 clearSession: improve cross-browser compatibility [@domenkozar]
48+- #136 weed out bytestring-conversion [@stephenirl]
49+
50+## [0.4.2.0] - 2018-11-05
51+
52+### Added
53+- `Headers hs a` instance for AddSetCookieApi [@domenkozar]
54+- GHC 8.6.x support [@domenkozar]
55+
56+## [0.4.1.0] - 2018-10-05
57+
58+### Added
59+- #125 Allow setting domain name for a cookie [@domenkozar]
60+
61+## Changed
62+- bump http-api-data to 0.3.10 that includes Cookie orphan instances previously located in servant-auth-server [@phadej]
63+- #114 Export `HasSecurity` typeclass [@rockbmb]
64+
65+## [0.4.0.1] - 2018-09-23
66+
67+### Security
68+- #123 Session cookie did not apply SameSite attribute [@domenkozar]
69+
70+### Added
71+- #112 HasLink instance for Auth combinator [@adetokunbo]
72+- #111 Documentation for using hoistServer [@mschristiansen]
73+- #107 Add utility functions for reading and writing a key to a file [@mschristiansen]
74+
75+## [0.4.0.0] - 2018-06-17
76+
77+### Added
78+- Support GHC 8.4 by @phadej and @domenkozar
79+- Support for servant-0.14 by @phadej
80+- #96 Support for jose-0.7 by @xaviershay
81+- #92 add `clearSession` for logout by @plredmond and @3noch
82+- #95 makeJWT: allow setting Alg via defaultJWTSettings by @domenkozar
83+- #89 Validate JWT against a JWKSet instead of JWK by @sopvop
84+
85+### Changed
86+- #92 Rename CSRF to XSRF by @plredmond and @3noch
87+- #92 extract 'XsrfCookieSettings' from 'CookieSettings' and make XSRF checking optional
88+ by @plredmond and @3noch
89+- #69 export SameSite by @domenkozar
90+- #102 Reuse Servant.Api.IsSecure instead of duplicating ADT by @domenkozar
91+
92+### Deprecated
93+- #92 Renamed 'makeCsrfCookie' to 'makeXsrfCookie' and marked the former as deprecated
94+ by @plredmond and @3noc
95+- #92 Made several changes to the structure of 'CookieSettings' which will require
96+ attention by users who have modified the XSRF settings by @plredmond and @3noch
97+
98+### Security
99+- #94 Force cookie expiration on serverside by @karshan
100+
101+## [0.3.2.0] - 2018-02-21
102+
103+### Added
104+- #76 Export wwwAuthenticatedErr and elaborate its annotation by @defanor
105+- Support for servant-0.14 by @phadej
106+
107+### Changed
108+- Disable the readme executable for ghcjs builds by @hamishmack
109+- #84 Make AddSetCookieApi type family open by @qnikst
110+- #79 Make CSRF checks optional for GET requests by @harendra-kumar
111+
112+## [0.3.1.0] - 2017-11-08
113+
114+### Added
115+- Support for servant-0.12 by @phadej
116+
117+## [0.3.0.0] - 2017-11-07
118+
119+### Changed
120+- #47 'cookiePath' and 'xsrfCookiePath' added to 'CookieSettings' by @mchaver
121+
122+## [0.2.8.0] - 2017-05-26
123+
124+### Added
125+- #45 Support for servant-0.11 by @phadej
126+
127+## [0.2.7.0] - 2017-02-11
128+
129+### Changed
130+- #27 #41 'acceptLogin' and 'makeCsrfCookie' functions by @bts
servant-auth/servant-auth-server/LICENSEnew file+31
@@ -0,0 +1,31 @@
1+Copyright Julian K. Arni (c) 2015
2+
3+All rights reserved.
4+
5+Redistribution and use in source and binary forms, with or without
6+modification, are permitted provided that the following conditions are met:
7+
8+ * Redistributions of source code must retain the above copyright
9+ notice, this list of conditions and the following disclaimer.
10+
11+ * Redistributions in binary form must reproduce the above
12+ copyright notice, this list of conditions and the following
13+ disclaimer in the documentation and/or other materials provided
14+ with the distribution.
15+
16+ * Neither the name of Julian K. Arni nor the names of other
17+ contributors may be used to endorse or promote products derived
18+ from this software without specific prior written permission.
19+
20+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
21+"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
22+LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
23+A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
24+OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
25+SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
26+LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
27+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
28+THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
29+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
30+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
31+
servant-auth/servant-auth-server/README.lhsnew file+291
@@ -0,0 +1,291 @@
1+# servant-auth
2+
3+These packages provides safe and easy-to-use authentication options for
4+`servant`. The same API can be protected via:
5+- basicauth
6+- cookies
7+- JWT tokens
8+
9+
10+| Package | Hackage |
11+| -------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
12+| servant-auth | [![servant-auth](https://img.shields.io/hackage/v/servant-auth?style=flat-square&logo=haskell&label&labelColor=5D4F85)](https://hackage.haskell.org/package/servant-auth) |
13+| servant-auth-server | [![servant-auth-server](https://img.shields.io/hackage/v/servant-auth-server.svg?style=flat-square&logo=haskell&label&labelColor=5D4F85)](https://hackage.haskell.org/package/servant-auth-server) |
14+| servant-auth-client | [![servant-auth-client](https://img.shields.io/hackage/v/servant-auth-client.svg?style=flat-square&logo=haskell&label&labelColor=5D4F85)](https://hackage.haskell.org/package/servant-auth-client) |
15+| servant-auth-swagger | [![servant-auth-swagger](https://img.shields.io/hackage/v/servant-auth-swagger.svg?style=flat-square&logo=haskell&label&labelColor=5D4F85)](https://hackage.haskell.org/package/servant-auth-swagger) |
16+| servant-auth-docs | [![servant-auth-docs](https://img.shields.io/hackage/v/servant-auth-docs.svg?style=flat-square&logo=haskell&label&labelColor=5D4F85)](https://hackage.haskell.org/package/servant-auth-docs) |
17+
18+## How it works
19+
20+First some imports:
21+
22+~~~ haskell
23+{-# OPTIONS_GHC -fno-warn-unused-binds #-}
24+{-# OPTIONS_GHC -fno-warn-deprecations #-}
25+import Control.Concurrent (forkIO)
26+import Control.Monad (forever)
27+import Control.Monad.Trans (liftIO)
28+import Data.Aeson (FromJSON, ToJSON)
29+import GHC.Generics (Generic)
30+import Network.Wai.Handler.Warp (run)
31+import System.Environment (getArgs)
32+import Servant
33+import Servant.Auth.Server
34+import Servant.Auth.Server.SetCookieOrphan ()
35+~~~
36+
37+`servant-auth` library introduces a combinator `Auth`:
38+
39+~~~ haskell
40+data Auth (auths :: [*]) val
41+~~~
42+
43+What `Auth [Auth1, Auth2] Something :> API` means is that `API` is protected by
44+*either* `Auth1` *or* `Auth2`, and the result of authentication will be of type
45+`AuthResult Something`, where :
46+
47+~~~ haskell
48+data AuthResult val
49+ = BadPassword
50+ | NoSuchUser
51+ | Authenticated val
52+ | Indefinite
53+~~~
54+
55+Your handlers will get a value of type `AuthResult Something`, and can decide
56+what to do with it.
57+
58+~~~ haskell
59+
60+data User = User { name :: String, email :: String }
61+ deriving (Eq, Show, Read, Generic)
62+
63+instance ToJSON User
64+instance ToJWT User
65+instance FromJSON User
66+instance FromJWT User
67+
68+data Login = Login { username :: String, password :: String }
69+ deriving (Eq, Show, Read, Generic)
70+
71+instance ToJSON Login
72+instance FromJSON Login
73+
74+type Protected
75+ = "name" :> Get '[JSON] String
76+ :<|> "email" :> Get '[JSON] String
77+
78+
79+-- | 'Protected' will be protected by 'auths', which we still have to specify.
80+protected :: Servant.Auth.Server.AuthResult User -> Server Protected
81+-- If we get an "Authenticated v", we can trust the information in v, since
82+-- it was signed by a key we trust.
83+protected (Servant.Auth.Server.Authenticated user) = return (name user) :<|> return (email user)
84+-- Otherwise, we return a 401.
85+protected _ = throwAll err401
86+
87+type Unprotected =
88+ "login"
89+ :> ReqBody '[JSON] Login
90+ :> Verb 'POST 204 '[JSON] (Headers '[ Header "Set-Cookie" SetCookie
91+ , Header "Set-Cookie" SetCookie]
92+ NoContent)
93+ :<|> Raw
94+
95+unprotected :: CookieSettings -> JWTSettings -> Server Unprotected
96+unprotected cs jwts = checkCreds cs jwts :<|> serveDirectory "example/static"
97+
98+type API auths = (Servant.Auth.Server.Auth auths User :> Protected) :<|> Unprotected
99+
100+server :: CookieSettings -> JWTSettings -> Server (API auths)
101+server cs jwts = protected :<|> unprotected cs jwts
102+
103+~~~
104+
105+The code is common to all authentications. In order to pick one or more specific
106+authentication methods, all we need to do is provide the expect configuration
107+parameters.
108+
109+## API tokens
110+
111+The following example illustrates how to protect an API with tokens.
112+
113+
114+~~~ haskell
115+-- In main, we fork the server, and allow new tokens to be created in the
116+-- command line for the specified user name and email.
117+mainWithJWT :: IO ()
118+mainWithJWT = do
119+ -- We generate the key for signing tokens. This would generally be persisted,
120+ -- and kept safely
121+ myKey <- generateKey
122+ -- Adding some configurations. All authentications require CookieSettings to
123+ -- be in the context.
124+ let jwtCfg = defaultJWTSettings myKey
125+ cfg = defaultCookieSettings :. jwtCfg :. EmptyContext
126+ --- Here we actually make concrete
127+ api = Proxy :: Proxy (API '[JWT])
128+ _ <- forkIO $ run 7249 $ serveWithContext api cfg (server defaultCookieSettings jwtCfg)
129+
130+ putStrLn "Started server on localhost:7249"
131+ putStrLn "Enter name and email separated by a space for a new token"
132+
133+ forever $ do
134+ xs <- words <$> getLine
135+ case xs of
136+ [name', email'] -> do
137+ etoken <- makeJWT (User name' email') jwtCfg Nothing
138+ case etoken of
139+ Left e -> putStrLn $ "Error generating token:t" ++ show e
140+ Right v -> putStrLn $ "New token:\t" ++ show v
141+ _ -> putStrLn "Expecting a name and email separated by spaces"
142+
143+~~~
144+
145+And indeed:
146+
147+~~~ bash
148+
149+./readme JWT
150+
151+ Started server on localhost:7249
152+ Enter name and email separated by a space for a new token
153+ alice alice@gmail.com
154+ New token: "eyJhbGciOiJIUzI1NiJ9.eyJkYXQiOnsiZW1haWwiOiJhbGljZUBnbWFpbC5jb20iLCJuYW1lIjoiYWxpY2UifX0.xzOIrx_A9VOKzVO-R1c1JYKBqK9risF625HOxpBzpzE"
155+
156+curl localhost:7249/name -v
157+
158+ * Hostname was NOT found in DNS cache
159+ * Trying 127.0.0.1...
160+ * Connected to localhost (127.0.0.1) port 7249 (#0)
161+ > GET /name HTTP/1.1
162+ > User-Agent: curl/7.35.0
163+ > Host: localhost:7249
164+ > Accept: */*
165+ >
166+ < HTTP/1.1 401 Unauthorized
167+ < Transfer-Encoding: chunked
168+ < Date: Wed, 07 Sep 2016 20:17:17 GMT
169+ * Server Warp/3.2.7 is not blacklisted
170+ < Server: Warp/3.2.7
171+ <
172+ * Connection #0 to host localhost left intact
173+
174+curl -H "Authorization: Bearer eyJhbGciOiJIUzI1NiJ9.eyJkYXQiOnsiZW1haWwiOiJhbGljZUBnbWFpbC5jb20iLCJuYW1lIjoiYWxpY2UifX0.xzOIrx_A9VOKzVO-R1c1JYKBqK9risF625HOxpBzpzE" \
175+ localhost:7249/name -v
176+
177+ * Hostname was NOT found in DNS cache
178+ * Trying 127.0.0.1...
179+ * Connected to localhost (127.0.0.1) port 7249 (#0)
180+ > GET /name HTTP/1.1
181+ > User-Agent: curl/7.35.0
182+ > Host: localhost:7249
183+ > Accept: */*
184+ > Authorization: Bearer eyJhbGciOiJIUzI1NiJ9.eyJkYXQiOnsiZW1haWwiOiJhbGljZUBnbWFpbC5jb20iLCJuYW1lIjoiYWxpY2UifX0.xzOIrx_A9VOKzVO-R1c1JYKBqK9risF625HOxpBzpzE
185+ >
186+ < HTTP/1.1 200 OK
187+ < Transfer-Encoding: chunked
188+ < Date: Wed, 07 Sep 2016 20:16:11 GMT
189+ * Server Warp/3.2.7 is not blacklisted
190+ < Server: Warp/3.2.7
191+ < Content-Type: application/json
192+ < Set-Cookie: JWT-Cookie=eyJhbGciOiJIUzI1NiJ9.eyJkYXQiOnsiZW1haWwiOiJhbGljZUBnbWFpbC5jb20iLCJuYW1lIjoiYWxpY2UifX0.xzOIrx_A9VOKzVO-R1c1JYKBqK9risF625HOxpBzpzE; HttpOnly; Secure
193+ < Set-Cookie: XSRF-TOKEN=TWcdPnHr2QHcVyTw/TTBLQ==; Secure
194+ <
195+ * Connection #0 to host localhost left intact
196+ "alice"%
197+
198+
199+~~~
200+
201+## Cookies
202+
203+What if, in addition to API tokens, we want to expose our API to browsers? All
204+we need to do is say so!
205+
206+~~~ haskell
207+mainWithCookies :: IO ()
208+mainWithCookies = do
209+ -- We *also* need a key to sign the cookies
210+ myKey <- generateKey
211+ -- Adding some configurations. 'Cookie' requires, in addition to
212+ -- CookieSettings, JWTSettings (for signing), so everything is just as before
213+ let jwtCfg = defaultJWTSettings myKey
214+ cfg = defaultCookieSettings :. jwtCfg :. EmptyContext
215+ --- Here is the actual change
216+ api = Proxy :: Proxy (API '[Cookie])
217+ run 7249 $ serveWithContext api cfg (server defaultCookieSettings jwtCfg)
218+
219+-- Here is the login handler
220+checkCreds :: CookieSettings
221+ -> JWTSettings
222+ -> Login
223+ -> Handler (Headers '[ Header "Set-Cookie" SetCookie
224+ , Header "Set-Cookie" SetCookie]
225+ NoContent)
226+checkCreds cookieSettings jwtSettings (Login "Ali Baba" "Open Sesame") = do
227+ -- Usually you would ask a database for the user info. This is just a
228+ -- regular servant handler, so you can follow your normal database access
229+ -- patterns (including using 'enter').
230+ let usr = User "Ali Baba" "ali@email.com"
231+ mApplyCookies <- liftIO $ acceptLogin cookieSettings jwtSettings usr
232+ case mApplyCookies of
233+ Nothing -> throwError err401
234+ Just applyCookies -> return $ applyCookies NoContent
235+checkCreds _ _ _ = throwError err401
236+~~~
237+
238+### XSRF and the frontend
239+
240+XSRF protection works by requiring that there be a header of the same value as
241+a distinguished cookie that is set by the server on each request. What the
242+cookie and header name are can be configured (see `xsrfCookieName` and
243+`xsrfHeaderName` in `CookieSettings`), but by default they are "XSRF-TOKEN" and
244+"X-XSRF-TOKEN". This means that, if your client is a browser and you're using
245+cookies, Javascript on the client must set the header of each request by
246+reading the cookie. For jQuery, and with the default values, that might be:
247+
248+~~~ javascript
249+
250+var token = (function() {
251+ r = document.cookie.match(new RegExp('XSRF-TOKEN=([^;]+)'))
252+ if (r) return r[1];
253+})();
254+
255+
256+$.ajaxPrefilter(function(opts, origOpts, xhr) {
257+ xhr.setRequestHeader('X-XSRF-TOKEN', token);
258+ }
259+
260+~~~
261+
262+I *believe* nothing at all needs to be done if you're using Angular's `$http`
263+directive, but I haven't tested this.
264+
265+XSRF protection can be disabled just for `GET` requests by setting
266+`xsrfExcludeGet = False`. You might want this if you're relying on the browser
267+to navigate between pages that require cookie authentication.
268+
269+XSRF protection can be completely disabled by setting `cookieXsrfSetting =
270+Nothing` in `CookieSettings`. This is not recommended! If your cookie
271+authenticated web application runs any javascript, it's recommended to send the
272+XSRF header. However, if your web application runs no javascript, disabling
273+XSRF entirely may be required.
274+
275+# Note on this README
276+
277+This README is a literate haskell file. Here is 'main', allowing you to pick
278+between the examples above.
279+
280+~~~ haskell
281+
282+main :: IO ()
283+main = do
284+ args <- getArgs
285+ let usage = "Usage: readme (JWT|Cookie)"
286+ case args of
287+ ["JWT"] -> mainWithJWT
288+ ["Cookie"] -> mainWithCookies
289+ e -> putStrLn $ "Arguments: \"" ++ unwords e ++ "\" not understood\n" ++ usage
290+
291+~~~
servant-auth/servant-auth-server/README.mdnew file+1
@@ -0,0 +1 @@
1+README.lhs
servant-auth/servant-auth-server/Setup.hsnew file+2
@@ -0,0 +1,2 @@
1+import Distribution.Simple
2+main = defaultMain
servant-auth/servant-auth-server/servant-auth-server.cabalnew file+134
@@ -0,0 +1,134 @@
1+cabal-version: 2.2
2+name: servant-auth-server
3+version: 0.4.7.0
4+synopsis: servant-server/servant-auth compatibility
5+description: This package provides the required instances for using the @Auth@ combinator
6+ in your 'servant' server.
7+ .
8+ Both cookie- and token- (REST API) based authentication is provided.
9+ .
10+ For a quick overview of the usage, see the <https://github.com/haskell-servant/servant/tree/master/servant-auth#readme README>.
11+category: Web, Servant, Authentication
12+homepage: https://github.com/haskell-servant/servant/tree/master/servant-auth#readme
13+bug-reports: https://github.com/haskell-servant/servant/issues
14+author: Julian K. Arni
15+maintainer: jkarni@gmail.com
16+copyright: (c) Julian K. Arni
17+license: BSD-3-Clause
18+license-file: LICENSE
19+tested-with: GHC ==8.6.5 || ==8.8.4 || ==8.10.4 || ==9.0.1
20+build-type: Simple
21+extra-source-files:
22+ CHANGELOG.md
23+
24+source-repository head
25+ type: git
26+ location: https://github.com/haskell-servant/servant
27+
28+library
29+ hs-source-dirs:
30+ src
31+ default-extensions: ConstraintKinds DataKinds DefaultSignatures DeriveFoldable DeriveFunctor DeriveGeneric DeriveTraversable FlexibleContexts FlexibleInstances FunctionalDependencies GADTs KindSignatures MultiParamTypeClasses OverloadedStrings RankNTypes ScopedTypeVariables TypeFamilies TypeOperators
32+ ghc-options: -Wall
33+ build-depends:
34+ base >= 4.10 && < 4.17
35+ , aeson >= 1.0.0.1 && < 3
36+ , base64-bytestring >= 1.0.0.1 && < 2
37+ , blaze-builder >= 0.4.1.0 && < 0.5
38+ , bytestring >= 0.10.6.0 && < 0.12
39+ , case-insensitive >= 1.2.0.11 && < 1.3
40+ , cookie >= 0.4.4 && < 0.5
41+ , data-default-class >= 0.1.2.0 && < 0.2
42+ , entropy >= 0.4.1.3 && < 0.5
43+ , http-types >= 0.12.2 && < 0.13
44+ , jose >= 0.7.0.0 && < 0.10
45+ , lens >= 4.16.1 && < 5.2
46+ , memory >= 0.14.16 && < 0.18
47+ , monad-time >= 0.3.1.0 && < 0.4
48+ , mtl >= 2.2.2 && < 2.3
49+ , servant >= 0.13 && < 0.20
50+ , servant-auth == 0.4.*
51+ , servant-server >= 0.13 && < 0.20
52+ , tagged >= 0.8.4 && < 0.9
53+ , text >= 1.2.3.0 && < 2.1
54+ , time >= 1.5.0.1 && < 1.12
55+ , unordered-containers >= 0.2.9.0 && < 0.3
56+ , wai >= 3.2.1.2 && < 3.3
57+
58+ if impl(ghc >= 9)
59+ build-depends:
60+ -- base64-bytestring 1.2.1.0 contains important fix for GHC-9, lower versions
61+ -- produce wrong results, thus corrupring JWT via jose package.
62+ -- See: https://github.com/haskell/base64-bytestring/pull/46
63+ base64-bytestring >= 1.2.1.0
64+
65+ exposed-modules:
66+ Servant.Auth.Server
67+ Servant.Auth.Server.Internal
68+ Servant.Auth.Server.Internal.AddSetCookie
69+ Servant.Auth.Server.Internal.BasicAuth
70+ Servant.Auth.Server.Internal.Class
71+ Servant.Auth.Server.Internal.ConfigTypes
72+ Servant.Auth.Server.Internal.Cookie
73+ Servant.Auth.Server.Internal.FormLogin
74+ Servant.Auth.Server.Internal.JWT
75+ Servant.Auth.Server.Internal.ThrowAll
76+ Servant.Auth.Server.Internal.Types
77+ Servant.Auth.Server.SetCookieOrphan
78+ default-language: Haskell2010
79+
80+test-suite readme
81+ type: exitcode-stdio-1.0
82+ main-is: README.lhs
83+ default-extensions: ConstraintKinds DataKinds DefaultSignatures DeriveFoldable DeriveFunctor DeriveGeneric DeriveTraversable FlexibleContexts FlexibleInstances FunctionalDependencies GADTs KindSignatures MultiParamTypeClasses OverloadedStrings RankNTypes ScopedTypeVariables TypeFamilies TypeOperators
84+ ghc-options: -Wall -pgmL markdown-unlit
85+ build-tool-depends: markdown-unlit:markdown-unlit
86+ build-depends:
87+ base
88+ , servant-auth
89+ , servant-auth-server
90+ , servant-server
91+ , aeson
92+ , mtl
93+ , warp
94+ default-language: Haskell2010
95+ if impl(ghcjs)
96+ buildable: False
97+
98+test-suite spec
99+ type: exitcode-stdio-1.0
100+ main-is: Spec.hs
101+ hs-source-dirs:
102+ test
103+ default-extensions: ConstraintKinds DataKinds DefaultSignatures DeriveFoldable DeriveFunctor DeriveGeneric DeriveTraversable FlexibleContexts FlexibleInstances FunctionalDependencies GADTs KindSignatures MultiParamTypeClasses OverloadedStrings RankNTypes ScopedTypeVariables TypeFamilies TypeOperators
104+ ghc-options: -Wall
105+ build-tool-depends: hspec-discover:hspec-discover >=2.5.5 && <2.10
106+
107+ -- dependencies with bounds inherited from the library stanza
108+ build-depends:
109+ base
110+ , aeson
111+ , bytestring
112+ , case-insensitive
113+ , jose
114+ , lens
115+ , mtl
116+ , time
117+ , http-types
118+ , wai
119+ , servant
120+ , servant-server
121+ , transformers
122+
123+ -- test dependencies
124+ build-depends:
125+ servant-auth-server
126+ , hspec >= 2.5.5 && < 2.10
127+ , QuickCheck >= 2.11.3 && < 2.15
128+ , http-client >= 0.5.13.1 && < 0.8
129+ , lens-aeson >= 1.0.2 && < 1.3
130+ , warp >= 3.2.25 && < 3.4
131+ , wreq >= 0.5.2.1 && < 0.6
132+ other-modules:
133+ Servant.Auth.ServerSpec
134+ default-language: Haskell2010
servant-auth/servant-auth-server/src/Servant/Auth/Server.hsnew file+180
@@ -0,0 +1,180 @@
1+module Servant.Auth.Server
2+ (
3+ -- | This package provides implementations for some common authentication
4+ -- methods. Authentication yields a trustworthy (because generated by the
5+ -- server) value of an some arbitrary type:
6+ --
7+ -- > type MyApi = Protected
8+ -- >
9+ -- > type Protected = Auth '[JWT, Cookie] User :> Get '[JSON] UserAccountDetails
10+ -- >
11+ -- > server :: Server Protected
12+ -- > server (Authenticated usr) = ... -- here we know the client really is
13+ -- > -- who she claims to be
14+ -- > server _ = throwAll err401
15+ --
16+ -- Additional configuration happens via 'Context'.
17+ --
18+ -- == Example for Custom Handler
19+ -- To use a custom 'Servant.Server.Handler' it is necessary to use
20+ -- 'Servant.Server.hoistServerWithContext' instead of
21+ -- 'Servant.Server.hoistServer' and specify the 'Context'.
22+ --
23+ -- Below is an example of passing 'CookieSettings' and 'JWTSettings' in the
24+ -- 'Context' to create a specialized function equivalent to
25+ -- 'Servant.Server.hoistServer' for an API that includes cookie
26+ -- authentication.
27+ --
28+ -- > hoistServerWithAuth
29+ -- > :: HasServer api '[CookieSettings, JWTSettings]
30+ -- > => Proxy api
31+ -- > -> (forall x. m x -> n x)
32+ -- > -> ServerT api m
33+ -- > -> ServerT api n
34+ -- > hoistServerWithAuth api =
35+ -- > hoistServerWithContext api (Proxy :: Proxy '[CookieSettings, JWTSettings])
36+
37+ ----------------------------------------------------------------------------
38+ -- * Auth
39+ -- | Basic types
40+ Auth
41+ , AuthResult(..)
42+ , AuthCheck(..)
43+
44+ ----------------------------------------------------------------------------
45+ -- * JWT
46+ -- | JSON Web Tokens (JWT) are a compact and secure way of transferring
47+ -- information between parties. In this library, they are signed by the
48+ -- server (or by some other party posessing the relevant key), and used to
49+ -- indicate the bearer's identity or authorization.
50+ --
51+ -- Arbitrary information can be encoded - just declare instances for the
52+ -- 'FromJWT' and 'ToJWT' classes. Don't go overboard though - be aware that
53+ -- usually you'll be trasmitting this information on each request (and
54+ -- response!).
55+ --
56+ -- Note that, while the tokens are signed, they are not encrypted. Do not put
57+ -- any information you do not wish the client to know in them!
58+
59+ -- ** Combinator
60+ -- | Re-exported from 'servant-auth'
61+ , JWT
62+
63+ -- ** Classes
64+ , FromJWT(..)
65+ , ToJWT(..)
66+
67+ -- ** Related types
68+ , IsMatch(..)
69+
70+ -- ** Settings
71+ , JWTSettings(..)
72+ , defaultJWTSettings
73+
74+ -- ** Create check
75+ , jwtAuthCheck
76+
77+
78+ ----------------------------------------------------------------------------
79+ -- * Cookie
80+ -- | Cookies are also a method of identifying and authenticating a user. They
81+ -- are particular common when the client is a browser
82+
83+ -- ** Combinator
84+ -- | Re-exported from 'servant-auth'
85+ , Cookie
86+
87+ -- ** Settings
88+ , CookieSettings(..)
89+ , XsrfCookieSettings(..)
90+ , defaultCookieSettings
91+ , defaultXsrfCookieSettings
92+ , makeSessionCookie
93+ , makeSessionCookieBS
94+ , makeXsrfCookie
95+ , makeCsrfCookie
96+ , makeCookie
97+ , makeCookieBS
98+ , acceptLogin
99+ , clearSession
100+
101+
102+ -- ** Related types
103+ , IsSecure(..)
104+ , SameSite(..)
105+ , AreAuths
106+
107+ ----------------------------------------------------------------------------
108+ -- * BasicAuth
109+ -- ** Combinator
110+ -- | Re-exported from 'servant-auth'
111+ , BasicAuth
112+
113+ -- ** Classes
114+ , FromBasicAuthData(..)
115+
116+ -- ** Settings
117+ , BasicAuthCfg
118+
119+ -- ** Related types
120+ , BasicAuthData(..)
121+ , IsPasswordCorrect(..)
122+
123+ -- ** Authentication request
124+ , wwwAuthenticatedErr
125+
126+ ----------------------------------------------------------------------------
127+ -- * Utilies
128+ , ThrowAll(throwAll)
129+ , generateKey
130+ , generateSecret
131+ , fromSecret
132+ , writeKey
133+ , readKey
134+ , makeJWT
135+ , verifyJWT
136+
137+ -- ** Re-exports
138+ , Default(def)
139+ , SetCookie
140+ ) where
141+
142+import Prelude hiding (readFile, writeFile)
143+import Data.ByteString (ByteString, writeFile, readFile)
144+import Data.Default.Class (Default (def))
145+import Servant.Auth
146+import Servant.Auth.JWT
147+import Servant.Auth.Server.Internal ()
148+import Servant.Auth.Server.Internal.BasicAuth
149+import Servant.Auth.Server.Internal.Class
150+import Servant.Auth.Server.Internal.ConfigTypes
151+import Servant.Auth.Server.Internal.Cookie
152+import Servant.Auth.Server.Internal.JWT
153+import Servant.Auth.Server.Internal.ThrowAll
154+import Servant.Auth.Server.Internal.Types
155+
156+import Crypto.JOSE as Jose
157+import Servant (BasicAuthData (..))
158+import Web.Cookie (SetCookie)
159+
160+-- | Generate a key suitable for use with 'defaultConfig'.
161+generateKey :: IO Jose.JWK
162+generateKey = Jose.genJWK $ Jose.OctGenParam 256
163+
164+-- | Generate a bytestring suitable for use with 'fromSecret'.
165+generateSecret :: MonadRandom m => m ByteString
166+generateSecret = Jose.getRandomBytes 256
167+
168+-- | Restores a key from a bytestring.
169+fromSecret :: ByteString -> Jose.JWK
170+fromSecret = Jose.fromOctets
171+
172+-- | Writes a secret to a file. Can for instance be used from the REPL
173+-- to persist a key to a file, which can then be included with the
174+-- application. Restore the key using 'readKey'.
175+writeKey :: FilePath -> IO ()
176+writeKey fp = writeFile fp =<< generateSecret
177+
178+-- | Reads a key from a file.
179+readKey :: FilePath -> IO Jose.JWK
180+readKey fp = fromSecret <$> readFile fp
servant-auth/servant-auth-server/src/Servant/Auth/Server/Internal.hsnew file+70
@@ -0,0 +1,70 @@
1+{-# LANGUAGE CPP #-}
2+{-# LANGUAGE UndecidableInstances #-}
3+{-# OPTIONS_GHC -fno-warn-orphans #-}
4+
5+module Servant.Auth.Server.Internal where
6+
7+import Control.Monad.Trans (liftIO)
8+import Servant ((:>), Handler, HasServer (..),
9+ Proxy (..),
10+ HasContextEntry(getContextEntry))
11+import Servant.Auth
12+import Servant.Auth.JWT (ToJWT)
13+
14+import Servant.Auth.Server.Internal.AddSetCookie
15+import Servant.Auth.Server.Internal.Class
16+import Servant.Auth.Server.Internal.Cookie
17+import Servant.Auth.Server.Internal.ConfigTypes
18+import Servant.Auth.Server.Internal.JWT
19+import Servant.Auth.Server.Internal.Types
20+
21+import Servant.Server.Internal (DelayedIO, addAuthCheck, withRequest)
22+
23+instance ( n ~ 'S ('S 'Z)
24+ , HasServer (AddSetCookiesApi n api) ctxs, AreAuths auths ctxs v
25+ , HasServer api ctxs -- this constraint is needed to implement hoistServer
26+ , AddSetCookies n (ServerT api Handler) (ServerT (AddSetCookiesApi n api) Handler)
27+ , ToJWT v
28+ , HasContextEntry ctxs CookieSettings
29+ , HasContextEntry ctxs JWTSettings
30+ ) => HasServer (Auth auths v :> api) ctxs where
31+ type ServerT (Auth auths v :> api) m = AuthResult v -> ServerT api m
32+
33+#if MIN_VERSION_servant_server(0,12,0)
34+ hoistServerWithContext _ pc nt s = hoistServerWithContext (Proxy :: Proxy api) pc nt . s
35+#endif
36+
37+ route _ context subserver =
38+ route (Proxy :: Proxy (AddSetCookiesApi n api))
39+ context
40+ (fmap go subserver `addAuthCheck` authCheck)
41+
42+ where
43+ authCheck :: DelayedIO (AuthResult v, SetCookieList ('S ('S 'Z)))
44+ authCheck = withRequest $ \req -> liftIO $ do
45+ authResult <- runAuthCheck (runAuths (Proxy :: Proxy auths) context) req
46+ cookies <- makeCookies authResult
47+ return (authResult, cookies)
48+
49+ jwtSettings :: JWTSettings
50+ jwtSettings = getContextEntry context
51+
52+ cookieSettings :: CookieSettings
53+ cookieSettings = getContextEntry context
54+
55+ makeCookies :: AuthResult v -> IO (SetCookieList ('S ('S 'Z)))
56+ makeCookies authResult = do
57+ xsrf <- makeXsrfCookie cookieSettings
58+ fmap (Just xsrf `SetCookieCons`) $
59+ case authResult of
60+ (Authenticated v) -> do
61+ ejwt <- makeSessionCookie cookieSettings jwtSettings v
62+ case ejwt of
63+ Nothing -> return $ Nothing `SetCookieCons` SetCookieNil
64+ Just jwt -> return $ Just jwt `SetCookieCons` SetCookieNil
65+ _ -> return $ Nothing `SetCookieCons` SetCookieNil
66+
67+ go :: (AuthResult v -> ServerT api Handler)
68+ -> (AuthResult v, SetCookieList n)
69+ -> ServerT (AddSetCookiesApi n api) Handler
70+ go fn (authResult, cookies) = addSetCookies cookies $ fn authResult
servant-auth/servant-auth-server/src/Servant/Auth/Server/Internal/AddSetCookie.hsnew file+106
@@ -0,0 +1,106 @@
1+{-# LANGUAGE PolyKinds #-}
2+{-# LANGUAGE TupleSections #-}
3+{-# LANGUAGE UndecidableInstances #-}
4+{-# LANGUAGE CPP #-}
5+
6+module Servant.Auth.Server.Internal.AddSetCookie where
7+
8+import Blaze.ByteString.Builder (toByteString)
9+import qualified Data.ByteString as BS
10+import Data.Tagged (Tagged (..))
11+import qualified Network.HTTP.Types as HTTP
12+import Network.Wai (mapResponseHeaders)
13+import Servant
14+import Servant.API.Generic
15+import Servant.Server.Generic
16+import Web.Cookie
17+
18+-- What are we doing here? Well, the idea is to add headers to the response,
19+-- but the headers come from the authentication check. In order to do that, we
20+-- tweak a little the general theme of recursing down the API tree; this time,
21+-- we recurse down a variation of it that adds headers to all the endpoints.
22+-- This involves the usual type-level checks.
23+--
24+-- TODO: If the endpoints already have headers, this will not work as is.
25+
26+data Nat = Z | S Nat
27+
28+type family AddSetCookiesApi (n :: Nat) a where
29+ AddSetCookiesApi ('S 'Z) a = AddSetCookieApi a
30+ AddSetCookiesApi ('S n) a = AddSetCookiesApi n (AddSetCookieApi a)
31+
32+type family AddSetCookieApiVerb a where
33+ AddSetCookieApiVerb (Headers ls a) = Headers (Header "Set-Cookie" SetCookie ': ls) a
34+ AddSetCookieApiVerb a = Headers '[Header "Set-Cookie" SetCookie] a
35+
36+type family AddSetCookieApi a :: *
37+type instance AddSetCookieApi (a :> b) = a :> AddSetCookieApi b
38+type instance AddSetCookieApi (a :<|> b) = AddSetCookieApi a :<|> AddSetCookieApi b
39+type instance AddSetCookieApi (NamedRoutes api) = AddSetCookieApi (ToServantApi api)
40+type instance AddSetCookieApi (Verb method stat ctyps a)
41+ = Verb method stat ctyps (AddSetCookieApiVerb a)
42+type instance AddSetCookieApi Raw = Raw
43+#if MIN_VERSION_servant_server(0,15,0)
44+type instance AddSetCookieApi (Stream method stat framing ctyps a)
45+ = Stream method stat framing ctyps (AddSetCookieApiVerb a)
46+#endif
47+type instance AddSetCookieApi (Headers hs a) = AddSetCookieApiVerb (Headers hs a)
48+
49+data SetCookieList (n :: Nat) :: * where
50+ SetCookieNil :: SetCookieList 'Z
51+ SetCookieCons :: Maybe SetCookie -> SetCookieList n -> SetCookieList ('S n)
52+
53+class AddSetCookies (n :: Nat) orig new where
54+ addSetCookies :: SetCookieList n -> orig -> new
55+
56+instance {-# OVERLAPS #-} AddSetCookies ('S n) oldb newb
57+ => AddSetCookies ('S n) (a -> oldb) (a -> newb) where
58+ addSetCookies cookies oldfn = addSetCookies cookies . oldfn
59+
60+instance AddSetCookies 'Z orig orig where
61+ addSetCookies _ = id
62+
63+instance {-# OVERLAPPABLE #-}
64+ ( Functor m
65+ , AddSetCookies n (m old) (m cookied)
66+ , AddHeader "Set-Cookie" SetCookie cookied new
67+ ) => AddSetCookies ('S n) (m old) (m new) where
68+ addSetCookies (mCookie `SetCookieCons` rest) oldVal =
69+ case mCookie of
70+ Nothing -> noHeader <$> addSetCookies rest oldVal
71+ Just cookie -> addHeader cookie <$> addSetCookies rest oldVal
72+
73+instance {-# OVERLAPS #-}
74+ (AddSetCookies ('S n) a a', AddSetCookies ('S n) b b')
75+ => AddSetCookies ('S n) (a :<|> b) (a' :<|> b') where
76+ addSetCookies cookies (a :<|> b) = addSetCookies cookies a :<|> addSetCookies cookies b
77+
78+instance {-# OVERLAPS #-}
79+ ( AddSetCookies ('S n) (ServerT (ToServantApi api) m) cookiedApi
80+ , Generic (api (AsServerT m))
81+ , GServantProduct (Rep (api (AsServerT m)))
82+ , ToServant api (AsServerT m) ~ ServerT (ToServantApi api) m
83+ )
84+ => AddSetCookies ('S n) (api (AsServerT m)) cookiedApi where
85+ addSetCookies cookies = addSetCookies cookies . toServant
86+
87+-- | for @servant <0.11@
88+instance
89+ AddSetCookies ('S n) Application Application where
90+ addSetCookies cookies r request respond
91+ = r request $ respond . mapResponseHeaders (++ mkHeaders cookies)
92+
93+-- | for @servant >=0.11@
94+instance
95+ AddSetCookies ('S n) (Tagged m Application) (Tagged m Application) where
96+ addSetCookies cookies r = Tagged $ \request respond ->
97+ unTagged r request $ respond . mapResponseHeaders (++ mkHeaders cookies)
98+
99+mkHeaders :: SetCookieList x -> [HTTP.Header]
100+mkHeaders x = ("Set-Cookie",) <$> mkCookies x
101+ where
102+ mkCookies :: forall y. SetCookieList y -> [BS.ByteString]
103+ mkCookies SetCookieNil = []
104+ mkCookies (SetCookieCons Nothing rest) = mkCookies rest
105+ mkCookies (SetCookieCons (Just y) rest)
106+ = toByteString (renderSetCookie y) : mkCookies rest
servant-auth/servant-auth-server/src/Servant/Auth/Server/Internal/BasicAuth.hsnew file+59
@@ -0,0 +1,59 @@
1+{-# LANGUAGE CPP #-}
2+module Servant.Auth.Server.Internal.BasicAuth where
3+
4+#if !MIN_VERSION_servant_server(0,16,0)
5+#define ServerError ServantErr
6+#endif
7+
8+import qualified Data.ByteString as BS
9+import Servant (BasicAuthData (..),
10+ ServerError (..), err401)
11+import Servant.Server.Internal.BasicAuth (decodeBAHdr,
12+ mkBAChallengerHdr)
13+
14+import Servant.Auth.Server.Internal.Types
15+
16+-- | A 'ServerError' that asks the client to authenticate via Basic
17+-- Authentication, should be invoked by an application whenever
18+-- appropriate. The argument is the realm.
19+wwwAuthenticatedErr :: BS.ByteString -> ServerError
20+wwwAuthenticatedErr realm = err401 { errHeaders = [mkBAChallengerHdr realm] }
21+
22+-- | A type holding the configuration for Basic Authentication.
23+-- It is defined as a type family with no arguments, so that
24+-- it can be instantiated to whatever type you need to
25+-- authenticate your users (use @type instance BasicAuthCfg = ...@).
26+--
27+-- Note that the instantiation is application-wide,
28+-- i.e. there can be only one instance.
29+-- As a consequence, it should not be instantiated in a library.
30+--
31+-- Basic Authentication expects an element of type 'BasicAuthCfg'
32+-- to be in the 'Context'; that element is then passed automatically
33+-- to the instance of 'FromBasicAuthData' together with the
34+-- authentication data obtained from the client.
35+--
36+-- If you do not need a configuration for Basic Authentication,
37+-- you can use just @BasicAuthCfg = ()@, and recall to also
38+-- add @()@ to the 'Context'.
39+-- A basic but more interesting example is to take as 'BasicAuthCfg'
40+-- a list of authorised username/password pairs:
41+--
42+-- > deriving instance Eq BasicAuthData
43+-- > type instance BasicAuthCfg = [BasicAuthData]
44+-- > instance FromBasicAuthData User where
45+-- > fromBasicAuthData authData authCfg =
46+-- > if elem authData authCfg then ...
47+type family BasicAuthCfg
48+
49+class FromBasicAuthData a where
50+ -- | Whether the username exists and the password is correct.
51+ -- Note that, rather than passing a 'Pass' to the function, we pass a
52+ -- function that checks an 'EncryptedPass'. This is to make sure you don't
53+ -- accidentally do something untoward with the password, like store it.
54+ fromBasicAuthData :: BasicAuthData -> BasicAuthCfg -> IO (AuthResult a)
55+
56+basicAuthCheck :: FromBasicAuthData usr => BasicAuthCfg -> AuthCheck usr
57+basicAuthCheck cfg = AuthCheck $ \req -> case decodeBAHdr req of
58+ Nothing -> return Indefinite
59+ Just baData -> fromBasicAuthData baData cfg
servant-auth/servant-auth-server/src/Servant/Auth/Server/Internal/Class.hsnew file+72
@@ -0,0 +1,72 @@
1+{-# LANGUAGE UndecidableInstances #-}
2+module Servant.Auth.Server.Internal.Class where
3+
4+import Servant.Auth
5+import Data.Monoid
6+import Servant hiding (BasicAuth)
7+
8+import Servant.Auth.JWT
9+import Servant.Auth.Server.Internal.Types
10+import Servant.Auth.Server.Internal.ConfigTypes
11+import Servant.Auth.Server.Internal.BasicAuth
12+import Servant.Auth.Server.Internal.Cookie
13+import Servant.Auth.Server.Internal.JWT (jwtAuthCheck)
14+
15+-- | @IsAuth a ctx v@ indicates that @a@ is an auth type that expects all
16+-- elements of @ctx@ to be the in the Context and whose authentication check
17+-- returns an @AuthCheck v@.
18+class IsAuth a v where
19+ type family AuthArgs a :: [*]
20+ runAuth :: proxy a -> proxy v -> Unapp (AuthArgs a) (AuthCheck v)
21+
22+instance FromJWT usr => IsAuth Cookie usr where
23+ type AuthArgs Cookie = '[CookieSettings, JWTSettings]
24+ runAuth _ _ = cookieAuthCheck
25+
26+instance FromJWT usr => IsAuth JWT usr where
27+ type AuthArgs JWT = '[JWTSettings]
28+ runAuth _ _ = jwtAuthCheck
29+
30+instance FromBasicAuthData usr => IsAuth BasicAuth usr where
31+ type AuthArgs BasicAuth = '[BasicAuthCfg]
32+ runAuth _ _ = basicAuthCheck
33+
34+-- * Helper
35+
36+class AreAuths (as :: [*]) (ctxs :: [*]) v where
37+ runAuths :: proxy as -> Context ctxs -> AuthCheck v
38+
39+instance AreAuths '[] ctxs v where
40+ runAuths _ _ = mempty
41+
42+instance ( AuthCheck v ~ App (AuthArgs a) (Unapp (AuthArgs a) (AuthCheck v))
43+ , IsAuth a v
44+ , AreAuths as ctxs v
45+ , AppCtx ctxs (AuthArgs a) (Unapp (AuthArgs a) (AuthCheck v))
46+ ) => AreAuths (a ': as) ctxs v where
47+ runAuths _ ctxs = go <> runAuths (Proxy :: Proxy as) ctxs
48+ where
49+ go = appCtx (Proxy :: Proxy (AuthArgs a))
50+ ctxs
51+ (runAuth (Proxy :: Proxy a) (Proxy :: Proxy v))
52+
53+type family Unapp ls res where
54+ Unapp '[] res = res
55+ Unapp (arg1 ': rest) res = arg1 -> Unapp rest res
56+
57+type family App ls res where
58+ App '[] res = res
59+ App (arg1 ': rest) (arg1 -> res) = App rest res
60+
61+-- | @AppCtx@ applies the function @res@ to the arguments in @ls@ by taking the
62+-- values from the Context provided.
63+class AppCtx ctx ls res where
64+ appCtx :: proxy ls -> Context ctx -> res -> App ls res
65+
66+instance ( HasContextEntry ctxs ctx
67+ , AppCtx ctxs rest res
68+ ) => AppCtx ctxs (ctx ': rest) (ctx -> res) where
69+ appCtx _ ctx fn = appCtx (Proxy :: Proxy rest) ctx $ fn $ getContextEntry ctx
70+
71+instance AppCtx ctx '[] res where
72+ appCtx _ _ r = r
servant-auth/servant-auth-server/src/Servant/Auth/Server/Internal/ConfigTypes.hsnew file+127
@@ -0,0 +1,127 @@
1+module Servant.Auth.Server.Internal.ConfigTypes
2+ ( module Servant.Auth.Server.Internal.ConfigTypes
3+ , Servant.API.IsSecure(..)
4+ ) where
5+
6+import Crypto.JOSE as Jose
7+import Crypto.JWT as Jose
8+import qualified Data.ByteString as BS
9+import Data.Default.Class
10+import Data.Time
11+import GHC.Generics (Generic)
12+import Servant.API (IsSecure(..))
13+
14+data IsMatch = Matches | DoesNotMatch
15+ deriving (Eq, Show, Read, Generic, Ord)
16+
17+data IsPasswordCorrect = PasswordCorrect | PasswordIncorrect
18+ deriving (Eq, Show, Read, Generic, Ord)
19+
20+-- The @SameSite@ attribute of cookies determines whether cookies will be sent
21+-- on cross-origin requests.
22+--
23+-- See <https://tools.ietf.org/html/draft-west-first-party-cookies-07 this document>
24+-- for more information.
25+data SameSite = AnySite | SameSiteStrict | SameSiteLax
26+ deriving (Eq, Show, Read, Generic, Ord)
27+
28+-- | @JWTSettings@ are used to generate cookies, and to verify JWTs.
29+data JWTSettings = JWTSettings
30+ {
31+ -- | Key used to sign JWT.
32+ signingKey :: Jose.JWK
33+ -- | Algorithm used to sign JWT.
34+ , jwtAlg :: Maybe Jose.Alg
35+ -- | Keys used to validate JWT.
36+ , validationKeys :: IO Jose.JWKSet
37+ -- | An @aud@ predicate. The @aud@ is a string or URI that identifies the
38+ -- intended recipient of the JWT.
39+ , audienceMatches :: Jose.StringOrURI -> IsMatch
40+ } deriving (Generic)
41+
42+-- | A @JWTSettings@ where the audience always matches.
43+defaultJWTSettings :: Jose.JWK -> JWTSettings
44+defaultJWTSettings k = JWTSettings
45+ { signingKey = k
46+ , jwtAlg = Nothing
47+ , validationKeys = pure $ Jose.JWKSet [k]
48+ , audienceMatches = const Matches }
49+
50+-- | The policies to use when generating cookies.
51+--
52+-- If *both* 'cookieMaxAge' and 'cookieExpires' are @Nothing@, browsers will
53+-- treat the cookie as a *session cookie*. These will be deleted when the
54+-- browser is closed.
55+--
56+-- Note that having the setting @Secure@ may cause testing failures if you are
57+-- not testing over HTTPS.
58+data CookieSettings = CookieSettings
59+ {
60+ -- | 'Secure' means browsers will only send cookies over HTTPS. Default:
61+ -- @Secure@.
62+ cookieIsSecure :: !IsSecure
63+ -- | How long from now until the cookie expires. Default: @Nothing@.
64+ , cookieMaxAge :: !(Maybe DiffTime)
65+ -- | At what time the cookie expires. Default: @Nothing@.
66+ , cookieExpires :: !(Maybe UTCTime)
67+ -- | The URL path and sub-paths for which this cookie is used. Default: @Just "/"@.
68+ , cookiePath :: !(Maybe BS.ByteString)
69+ -- | Domain name, if set cookie also allows subdomains. Default: @Nothing@.
70+ , cookieDomain :: !(Maybe BS.ByteString)
71+ -- | 'SameSite' settings. Default: @SameSiteLax@.
72+ , cookieSameSite :: !SameSite
73+ -- | What name to use for the cookie used for the session.
74+ , sessionCookieName :: !BS.ByteString
75+ -- | The optional settings to use for XSRF protection. Default: @Just def@.
76+ , cookieXsrfSetting :: !(Maybe XsrfCookieSettings)
77+ } deriving (Eq, Show, Generic)
78+
79+instance Default CookieSettings where
80+ def = defaultCookieSettings
81+
82+defaultCookieSettings :: CookieSettings
83+defaultCookieSettings = CookieSettings
84+ { cookieIsSecure = Secure
85+ , cookieMaxAge = Nothing
86+ , cookieExpires = Nothing
87+ , cookiePath = Just "/"
88+ , cookieDomain = Nothing
89+ , cookieSameSite = SameSiteLax
90+ , sessionCookieName = "JWT-Cookie"
91+ , cookieXsrfSetting = Just def
92+ }
93+
94+-- | The policies to use when generating and verifying XSRF cookies
95+data XsrfCookieSettings = XsrfCookieSettings
96+ {
97+ -- | What name to use for the cookie used for XSRF protection.
98+ xsrfCookieName :: !BS.ByteString
99+ -- | What path to use for the cookie used for XSRF protection. Default @Just "/"@.
100+ , xsrfCookiePath :: !(Maybe BS.ByteString)
101+ -- | What name to use for the header used for XSRF protection.
102+ , xsrfHeaderName :: !BS.ByteString
103+ -- | Exclude GET request method from XSRF protection.
104+ , xsrfExcludeGet :: !Bool
105+ } deriving (Eq, Show, Generic)
106+
107+instance Default XsrfCookieSettings where
108+ def = defaultXsrfCookieSettings
109+
110+defaultXsrfCookieSettings :: XsrfCookieSettings
111+defaultXsrfCookieSettings = XsrfCookieSettings
112+ { xsrfCookieName = "XSRF-TOKEN"
113+ , xsrfCookiePath = Just "/"
114+ , xsrfHeaderName = "X-XSRF-TOKEN"
115+ , xsrfExcludeGet = False
116+ }
117+
118+------------------------------------------------------------------------------
119+-- Internal {{{
120+
121+jwtSettingsToJwtValidationSettings :: JWTSettings -> Jose.JWTValidationSettings
122+jwtSettingsToJwtValidationSettings s
123+ = defaultJWTValidationSettings (toBool <$> audienceMatches s)
124+ where
125+ toBool Matches = True
126+ toBool DoesNotMatch = False
127+-- }}}
servant-auth/servant-auth-server/src/Servant/Auth/Server/Internal/Cookie.hsnew file+182
@@ -0,0 +1,182 @@
1+{-# LANGUAGE CPP #-}
2+module Servant.Auth.Server.Internal.Cookie where
3+
4+import Blaze.ByteString.Builder (toByteString)
5+import Control.Monad.Except
6+import Control.Monad.Reader
7+import qualified Crypto.JOSE as Jose
8+import qualified Crypto.JWT as Jose
9+import Data.ByteArray (constEq)
10+import qualified Data.ByteString as BS
11+import qualified Data.ByteString.Base64 as BS64
12+import qualified Data.ByteString.Lazy as BSL
13+import Data.CaseInsensitive (mk)
14+import Data.Maybe (fromMaybe)
15+import Data.Time.Calendar (Day(..))
16+import Data.Time.Clock (UTCTime(..), secondsToDiffTime)
17+import Network.HTTP.Types (methodGet)
18+import Network.HTTP.Types.Header(hCookie)
19+import Network.Wai (Request, requestHeaders, requestMethod)
20+import Servant (AddHeader, addHeader)
21+import System.Entropy (getEntropy)
22+import Web.Cookie
23+
24+import Servant.Auth.JWT (FromJWT (decodeJWT), ToJWT)
25+import Servant.Auth.Server.Internal.ConfigTypes
26+import Servant.Auth.Server.Internal.JWT (makeJWT, verifyJWT)
27+import Servant.Auth.Server.Internal.Types
28+
29+
30+cookieAuthCheck :: FromJWT usr => CookieSettings -> JWTSettings -> AuthCheck usr
31+cookieAuthCheck ccfg jwtSettings = do
32+ req <- ask
33+ jwtCookie <- maybe mempty return $ do
34+ cookies' <- lookup hCookie $ requestHeaders req
35+ let cookies = parseCookies cookies'
36+ -- Apply the XSRF check if enabled.
37+ guard $ fromMaybe True $ do
38+ xsrfCookieCfg <- xsrfCheckRequired ccfg req
39+ return $ xsrfCookieAuthCheck xsrfCookieCfg req cookies
40+ -- session cookie *must* be HttpOnly and Secure
41+ lookup (sessionCookieName ccfg) cookies
42+ verifiedJWT <- liftIO $ verifyJWT jwtSettings jwtCookie
43+ case verifiedJWT of
44+ Nothing -> mzero
45+ Just v -> return v
46+
47+xsrfCheckRequired :: CookieSettings -> Request -> Maybe XsrfCookieSettings
48+xsrfCheckRequired cookieSettings req = do
49+ xsrfCookieCfg <- cookieXsrfSetting cookieSettings
50+ let disableForGetReq = xsrfExcludeGet xsrfCookieCfg && requestMethod req == methodGet
51+ guard $ not disableForGetReq
52+ return xsrfCookieCfg
53+
54+xsrfCookieAuthCheck :: XsrfCookieSettings -> Request -> [(BS.ByteString, BS.ByteString)] -> Bool
55+xsrfCookieAuthCheck xsrfCookieCfg req cookies = fromMaybe False $ do
56+ xsrfCookie <- lookup (xsrfCookieName xsrfCookieCfg) cookies
57+ xsrfHeader <- lookup (mk $ xsrfHeaderName xsrfCookieCfg) $ requestHeaders req
58+ return $ xsrfCookie `constEq` xsrfHeader
59+
60+-- | Makes a cookie to be used for XSRF.
61+makeXsrfCookie :: CookieSettings -> IO SetCookie
62+makeXsrfCookie cookieSettings = case cookieXsrfSetting cookieSettings of
63+ Just xsrfCookieSettings -> makeRealCookie xsrfCookieSettings
64+ Nothing -> return $ noXsrfTokenCookie cookieSettings
65+ where
66+ makeRealCookie xsrfCookieSettings = do
67+ xsrfValue <- BS64.encode <$> getEntropy 32
68+ return
69+ $ applyXsrfCookieSettings xsrfCookieSettings
70+ $ applyCookieSettings cookieSettings
71+ $ def{ setCookieValue = xsrfValue }
72+
73+
74+-- | Alias for 'makeXsrfCookie'.
75+makeCsrfCookie :: CookieSettings -> IO SetCookie
76+makeCsrfCookie = makeXsrfCookie
77+{-# DEPRECATED makeCsrfCookie "Use makeXsrfCookie instead" #-}
78+
79+
80+-- | Makes a cookie with session information.
81+makeSessionCookie :: ToJWT v => CookieSettings -> JWTSettings -> v -> IO (Maybe SetCookie)
82+makeSessionCookie cookieSettings jwtSettings v = do
83+ ejwt <- makeJWT v jwtSettings (cookieExpires cookieSettings)
84+ case ejwt of
85+ Left _ -> return Nothing
86+ Right jwt -> return
87+ $ Just
88+ $ applySessionCookieSettings cookieSettings
89+ $ applyCookieSettings cookieSettings
90+ $ def{ setCookieValue = BSL.toStrict jwt }
91+
92+noXsrfTokenCookie :: CookieSettings -> SetCookie
93+noXsrfTokenCookie cookieSettings =
94+ applyCookieSettings cookieSettings $ def{ setCookieName = "NO-XSRF-TOKEN", setCookieValue = "" }
95+
96+applyCookieSettings :: CookieSettings -> SetCookie -> SetCookie
97+applyCookieSettings cookieSettings setCookie = setCookie
98+ { setCookieMaxAge = cookieMaxAge cookieSettings
99+ , setCookieExpires = cookieExpires cookieSettings
100+ , setCookiePath = cookiePath cookieSettings
101+ , setCookieDomain = cookieDomain cookieSettings
102+ , setCookieSecure = case cookieIsSecure cookieSettings of
103+ Secure -> True
104+ NotSecure -> False
105+ }
106+
107+applyXsrfCookieSettings :: XsrfCookieSettings -> SetCookie -> SetCookie
108+applyXsrfCookieSettings xsrfCookieSettings setCookie = setCookie
109+ { setCookieName = xsrfCookieName xsrfCookieSettings
110+ , setCookiePath = xsrfCookiePath xsrfCookieSettings
111+ , setCookieHttpOnly = False
112+ }
113+
114+applySessionCookieSettings :: CookieSettings -> SetCookie -> SetCookie
115+applySessionCookieSettings cookieSettings setCookie = setCookie
116+ { setCookieName = sessionCookieName cookieSettings
117+ , setCookieSameSite = case cookieSameSite cookieSettings of
118+ AnySite -> anySite
119+ SameSiteStrict -> Just sameSiteStrict
120+ SameSiteLax -> Just sameSiteLax
121+ , setCookieHttpOnly = True
122+ }
123+ where
124+#if MIN_VERSION_cookie(0,4,5)
125+ anySite = Just sameSiteNone
126+#else
127+ anySite = Nothing
128+#endif
129+
130+-- | For a JWT-serializable session, returns a function that decorates a
131+-- provided response object with XSRF and session cookies. This should be used
132+-- when a user successfully authenticates with credentials.
133+acceptLogin :: ( ToJWT session
134+ , AddHeader "Set-Cookie" SetCookie response withOneCookie
135+ , AddHeader "Set-Cookie" SetCookie withOneCookie withTwoCookies )
136+ => CookieSettings
137+ -> JWTSettings
138+ -> session
139+ -> IO (Maybe (response -> withTwoCookies))
140+acceptLogin cookieSettings jwtSettings session = do
141+ mSessionCookie <- makeSessionCookie cookieSettings jwtSettings session
142+ case mSessionCookie of
143+ Nothing -> pure Nothing
144+ Just sessionCookie -> do
145+ xsrfCookie <- makeXsrfCookie cookieSettings
146+ return $ Just $ addHeader sessionCookie . addHeader xsrfCookie
147+
148+-- | Arbitrary cookie expiry time set back in history after unix time 0
149+expireTime :: UTCTime
150+expireTime = UTCTime (ModifiedJulianDay 50000) 0
151+
152+-- | Adds headers to a response that clears all session cookies
153+-- | using max-age and expires cookie attributes.
154+clearSession :: ( AddHeader "Set-Cookie" SetCookie response withOneCookie
155+ , AddHeader "Set-Cookie" SetCookie withOneCookie withTwoCookies )
156+ => CookieSettings
157+ -> response
158+ -> withTwoCookies
159+clearSession cookieSettings = addHeader clearedSessionCookie . addHeader clearedXsrfCookie
160+ where
161+ -- According to RFC6265 max-age takes precedence, but IE/Edge ignore it completely so we set both
162+ cookieSettingsExpires = cookieSettings
163+ { cookieExpires = Just expireTime
164+ , cookieMaxAge = Just (secondsToDiffTime 0)
165+ }
166+ clearedSessionCookie = applySessionCookieSettings cookieSettingsExpires $ applyCookieSettings cookieSettingsExpires def
167+ clearedXsrfCookie = case cookieXsrfSetting cookieSettings of
168+ Just xsrfCookieSettings -> applyXsrfCookieSettings xsrfCookieSettings $ applyCookieSettings cookieSettingsExpires def
169+ Nothing -> noXsrfTokenCookie cookieSettingsExpires
170+
171+makeSessionCookieBS :: ToJWT v => CookieSettings -> JWTSettings -> v -> IO (Maybe BS.ByteString)
172+makeSessionCookieBS a b c = fmap (toByteString . renderSetCookie) <$> makeSessionCookie a b c
173+
174+-- | Alias for 'makeSessionCookie'.
175+makeCookie :: ToJWT v => CookieSettings -> JWTSettings -> v -> IO (Maybe SetCookie)
176+makeCookie = makeSessionCookie
177+{-# DEPRECATED makeCookie "Use makeSessionCookie instead" #-}
178+
179+-- | Alias for 'makeSessionCookieBS'.
180+makeCookieBS :: ToJWT v => CookieSettings -> JWTSettings -> v -> IO (Maybe BS.ByteString)
181+makeCookieBS = makeSessionCookieBS
182+{-# DEPRECATED makeCookieBS "Use makeSessionCookieBS instead" #-}
servant-auth/servant-auth-server/src/Servant/Auth/Server/Internal/FormLogin.hsnew file+3
@@ -0,0 +1,3 @@
1+module Servant.Auth.Server.Internal.FormLogin where
2+
3+
servant-auth/servant-auth-server/src/Servant/Auth/Server/Internal/JWT.hsnew file+72
@@ -0,0 +1,72 @@
1+module Servant.Auth.Server.Internal.JWT where
2+
3+import Control.Lens
4+import Control.Monad.Except
5+import Control.Monad.Reader
6+import qualified Crypto.JOSE as Jose
7+import qualified Crypto.JWT as Jose
8+import Data.Aeson (FromJSON, Result (..), ToJSON, fromJSON,
9+ toJSON)
10+import Data.ByteArray (constEq)
11+import qualified Data.ByteString as BS
12+import qualified Data.ByteString.Lazy as BSL
13+import qualified Data.HashMap.Strict as HM
14+import Data.Maybe (fromMaybe)
15+import qualified Data.Text as T
16+import Data.Time (UTCTime)
17+import Network.Wai (requestHeaders)
18+
19+import Servant.Auth.JWT (FromJWT(..), ToJWT(..))
20+import Servant.Auth.Server.Internal.ConfigTypes
21+import Servant.Auth.Server.Internal.Types
22+
23+
24+-- | A JWT @AuthCheck@. You likely won't need to use this directly unless you
25+-- are protecting a @Raw@ endpoint.
26+jwtAuthCheck :: FromJWT usr => JWTSettings -> AuthCheck usr
27+jwtAuthCheck jwtSettings = do
28+ req <- ask
29+ token <- maybe mempty return $ do
30+ authHdr <- lookup "Authorization" $ requestHeaders req
31+ let bearer = "Bearer "
32+ (mbearer, rest) = BS.splitAt (BS.length bearer) authHdr
33+ guard (mbearer `constEq` bearer)
34+ return rest
35+ verifiedJWT <- liftIO $ verifyJWT jwtSettings token
36+ case verifiedJWT of
37+ Nothing -> mzero
38+ Just v -> return v
39+
40+-- | Creates a JWT containing the specified data. The data is stored in the
41+-- @dat@ claim. The 'Maybe UTCTime' argument indicates the time at which the
42+-- token expires.
43+makeJWT :: ToJWT a
44+ => a -> JWTSettings -> Maybe UTCTime -> IO (Either Jose.Error BSL.ByteString)
45+makeJWT v cfg expiry = runExceptT $ do
46+ bestAlg <- Jose.bestJWSAlg $ signingKey cfg
47+ let alg = fromMaybe bestAlg $ jwtAlg cfg
48+ ejwt <- Jose.signClaims (signingKey cfg)
49+ (Jose.newJWSHeader ((), alg))
50+ (addExp $ encodeJWT v)
51+
52+ return $ Jose.encodeCompact ejwt
53+ where
54+ addExp claims = case expiry of
55+ Nothing -> claims
56+ Just e -> claims & Jose.claimExp ?~ Jose.NumericDate e
57+
58+
59+verifyJWT :: FromJWT a => JWTSettings -> BS.ByteString -> IO (Maybe a)
60+verifyJWT jwtCfg input = do
61+ keys <- validationKeys jwtCfg
62+ verifiedJWT <- runExceptT $ do
63+ unverifiedJWT <- Jose.decodeCompact (BSL.fromStrict input)
64+ Jose.verifyClaims
65+ (jwtSettingsToJwtValidationSettings jwtCfg)
66+ keys
67+ unverifiedJWT
68+ return $ case verifiedJWT of
69+ Left (_ :: Jose.JWTError) -> Nothing
70+ Right v -> case decodeJWT v of
71+ Left _ -> Nothing
72+ Right v' -> Just v'
servant-auth/servant-auth-server/src/Servant/Auth/Server/Internal/ThrowAll.hsnew file+58
@@ -0,0 +1,58 @@
1+{-# LANGUAGE CPP #-}
2+{-# LANGUAGE UndecidableInstances #-}
3+module Servant.Auth.Server.Internal.ThrowAll where
4+
5+#if !MIN_VERSION_servant_server(0,16,0)
6+#define ServerError ServantErr
7+#endif
8+
9+import Control.Monad.Error.Class
10+import Data.Tagged (Tagged (..))
11+import Servant ((:<|>) (..), ServerError(..), NamedRoutes(..))
12+import Servant.API.Generic
13+import Servant.Server.Generic
14+import Servant.Server
15+import Network.HTTP.Types
16+import Network.Wai
17+
18+import qualified Data.ByteString.Char8 as BS
19+
20+class ThrowAll a where
21+ -- | 'throwAll' is a convenience function to throw errors across an entire
22+ -- sub-API
23+ --
24+ --
25+ -- > throwAll err400 :: Handler a :<|> Handler b :<|> Handler c
26+ -- > == throwError err400 :<|> throwError err400 :<|> err400
27+ throwAll :: ServerError -> a
28+
29+instance (ThrowAll a, ThrowAll b) => ThrowAll (a :<|> b) where
30+ throwAll e = throwAll e :<|> throwAll e
31+
32+instance
33+ ( ThrowAll (ToServant api (AsServerT m)) , GenericServant api (AsServerT m)) =>
34+ ThrowAll (api (AsServerT m)) where
35+
36+ throwAll = fromServant . throwAll
37+
38+-- Really this shouldn't be necessary - ((->) a) should be an instance of
39+-- MonadError, no?
40+instance {-# OVERLAPPING #-} ThrowAll b => ThrowAll (a -> b) where
41+ throwAll e = const $ throwAll e
42+
43+instance {-# OVERLAPPABLE #-} (MonadError ServerError m) => ThrowAll (m a) where
44+ throwAll = throwError
45+
46+-- | for @servant <0.11@
47+instance {-# OVERLAPPING #-} ThrowAll Application where
48+ throwAll e _req respond
49+ = respond $ responseLBS (mkStatus (errHTTPCode e) (BS.pack $ errReasonPhrase e))
50+ (errHeaders e)
51+ (errBody e)
52+
53+-- | for @servant >=0.11@
54+instance {-# OVERLAPPING #-} MonadError ServerError m => ThrowAll (Tagged m Application) where
55+ throwAll e = Tagged $ \_req respond ->
56+ respond $ responseLBS (mkStatus (errHTTPCode e) (BS.pack $ errReasonPhrase e))
57+ (errHeaders e)
58+ (errBody e)
servant-auth/servant-auth-server/src/Servant/Auth/Server/Internal/Types.hsnew file+112
@@ -0,0 +1,112 @@
1+{-# LANGUAGE CPP #-}
2+module Servant.Auth.Server.Internal.Types where
3+
4+import Control.Applicative
5+import Control.Monad.Reader
6+import Control.Monad.Time
7+import Data.Monoid (Monoid (..))
8+import Data.Semigroup (Semigroup (..))
9+import Data.Time (getCurrentTime)
10+import GHC.Generics (Generic)
11+import Network.Wai (Request)
12+
13+import qualified Control.Monad.Fail as Fail
14+
15+-- | The result of an authentication attempt.
16+data AuthResult val
17+ = BadPassword
18+ | NoSuchUser
19+ -- | Authentication succeeded.
20+ | Authenticated val
21+ -- | If an authentication procedure cannot be carried out - if for example it
22+ -- expects a password and username in a header that is not present -
23+ -- @Indefinite@ is returned. This indicates that other authentication
24+ -- methods should be tried.
25+ | Indefinite
26+ deriving (Eq, Show, Read, Generic, Ord, Functor, Traversable, Foldable)
27+
28+instance Semigroup (AuthResult val) where
29+ Indefinite <> y = y
30+ x <> _ = x
31+
32+instance Monoid (AuthResult val) where
33+ mempty = Indefinite
34+ mappend = (<>)
35+
36+instance Applicative AuthResult where
37+ pure = return
38+ (<*>) = ap
39+
40+instance Monad AuthResult where
41+ return = Authenticated
42+ Authenticated v >>= f = f v
43+ BadPassword >>= _ = BadPassword
44+ NoSuchUser >>= _ = NoSuchUser
45+ Indefinite >>= _ = Indefinite
46+
47+instance Alternative AuthResult where
48+ empty = mzero
49+ (<|>) = mplus
50+
51+instance MonadPlus AuthResult where
52+ mzero = mempty
53+ mplus = (<>)
54+
55+
56+-- | An @AuthCheck@ is the function used to decide the authentication status
57+-- (the 'AuthResult') of a request. Different @AuthCheck@s may be combined as a
58+-- Monoid or Alternative; the semantics of this is that the *first*
59+-- non-'Indefinite' result from left to right is used and the rest are ignored.
60+newtype AuthCheck val = AuthCheck
61+ { runAuthCheck :: Request -> IO (AuthResult val) }
62+ deriving (Generic, Functor)
63+
64+instance Semigroup (AuthCheck val) where
65+ AuthCheck f <> AuthCheck g = AuthCheck $ \x -> do
66+ fx <- f x
67+ case fx of
68+ Indefinite -> g x
69+ r -> pure r
70+
71+instance Monoid (AuthCheck val) where
72+ mempty = AuthCheck $ const $ return mempty
73+ mappend = (<>)
74+
75+instance Applicative AuthCheck where
76+ pure = return
77+ (<*>) = ap
78+
79+instance Monad AuthCheck where
80+ return = AuthCheck . return . return . return
81+ AuthCheck ac >>= f = AuthCheck $ \req -> do
82+ aresult <- ac req
83+ case aresult of
84+ Authenticated usr -> runAuthCheck (f usr) req
85+ BadPassword -> return BadPassword
86+ NoSuchUser -> return NoSuchUser
87+ Indefinite -> return Indefinite
88+
89+#if !MIN_VERSION_base(4,13,0)
90+ fail = Fail.fail
91+#endif
92+
93+instance Fail.MonadFail AuthCheck where
94+ fail _ = AuthCheck . const $ return Indefinite
95+
96+instance MonadReader Request AuthCheck where
97+ ask = AuthCheck $ \x -> return (Authenticated x)
98+ local f (AuthCheck check) = AuthCheck $ \req -> check (f req)
99+
100+instance MonadIO AuthCheck where
101+ liftIO action = AuthCheck $ const $ Authenticated <$> action
102+
103+instance MonadTime AuthCheck where
104+ currentTime = liftIO getCurrentTime
105+
106+instance Alternative AuthCheck where
107+ empty = mzero
108+ (<|>) = mplus
109+
110+instance MonadPlus AuthCheck where
111+ mzero = mempty
112+ mplus = (<>)
servant-auth/servant-auth-server/src/Servant/Auth/Server/SetCookieOrphan.hsnew file+3
@@ -0,0 +1,3 @@
1+module Servant.Auth.Server.SetCookieOrphan
2+ {-# DEPRECATED "instance exists in http-api-data-0.3.9. This module will be removed in next major release." #-}
3+ () where
servant-auth/servant-auth-server/test/Servant/Auth/ServerSpec.hsnew file+607
@@ -0,0 +1,607 @@
1+{-# LANGUAGE CPP #-}
2+module Servant.Auth.ServerSpec (spec) where
3+
4+#if !MIN_VERSION_servant_server(0,16,0)
5+#define ServerError ServantErr
6+#endif
7+
8+import Control.Lens
9+import Control.Monad.Except (runExceptT)
10+import Control.Monad.IO.Class (liftIO)
11+import Crypto.JOSE (Alg (HS256, None), Error,
12+ JWK, JWSHeader,
13+ KeyMaterialGenParam (OctGenParam),
14+ ToCompact, encodeCompact,
15+ genJWK, newJWSHeader)
16+import Crypto.JWT (Audience (..), ClaimsSet,
17+ NumericDate (NumericDate),
18+ SignedJWT,
19+ claimAud, claimNbf,
20+ signClaims,
21+ emptyClaimsSet,
22+ unregisteredClaims)
23+import Data.Aeson (FromJSON, ToJSON, Value,
24+ toJSON, encode)
25+import Data.Aeson.Lens (_JSON)
26+import qualified Data.ByteString as BS
27+import qualified Data.ByteString.Lazy as BSL
28+import Data.CaseInsensitive (mk)
29+import Data.Foldable (find)
30+import Data.Monoid
31+import Data.Time
32+import Data.Time.Clock (getCurrentTime)
33+import GHC.Generics (Generic)
34+import Network.HTTP.Client (cookie_http_only,
35+ cookie_name, cookie_value,
36+ cookie_expiry_time,
37+ destroyCookieJar)
38+import Network.HTTP.Types (Status, status200,
39+ status401)
40+import Network.Wai (responseLBS)
41+import Network.Wai.Handler.Warp (testWithApplication)
42+import Network.Wreq (Options, auth, basicAuth,
43+ cookieExpiryTime, cookies,
44+ defaults, get, getWith, postWith,
45+ header, oauth2Bearer,
46+ responseBody,
47+ responseCookieJar,
48+ responseHeader,
49+ responseStatus)
50+import Network.Wreq.Types (Postable(..))
51+import Servant hiding (BasicAuth,
52+ IsSecure (..), header)
53+import Servant.API.Generic ((:-))
54+import Servant.Auth.Server
55+import Servant.Auth.Server.Internal.Cookie (expireTime)
56+import Servant.Auth.Server.SetCookieOrphan ()
57+#if MIN_VERSION_servant_server(0,15,0)
58+import qualified Servant.Types.SourceT as S
59+#endif
60+import System.IO.Unsafe (unsafePerformIO)
61+import Test.Hspec
62+import Test.QuickCheck
63+import qualified Network.HTTP.Client as HCli
64+
65+
66+
67+spec :: Spec
68+spec = do
69+ authSpec
70+ cookieAuthSpec
71+ jwtAuthSpec
72+ throwAllSpec
73+ basicAuthSpec
74+
75+------------------------------------------------------------------------------
76+-- * Auth {{{
77+
78+authSpec :: Spec
79+authSpec
80+ = describe "The Auth combinator"
81+ $ around (testWithApplication . return $ app jwtAndCookieApi) $ do
82+
83+ it "returns a 401 if all authentications are Indefinite" $ \port -> do
84+ get (url port) `shouldHTTPErrorWith` status401
85+
86+ it "succeeds if one authentication suceeds" $ \port -> property $
87+ \(user :: User) -> do
88+ jwt <- makeJWT user jwtCfg Nothing
89+ opts <- addJwtToHeader jwt
90+ resp <- getWith opts (url port)
91+ resp ^? responseBody . _JSON `shouldBe` Just (length $ name user)
92+
93+ it "fails (403) if one authentication fails" $ const $
94+ pendingWith "Authentications don't yet fail, only are Indefinite"
95+
96+ it "doesn't clobber pre-existing response headers" $ \port -> property $
97+ \(user :: User) -> do
98+ jwt <- makeJWT user jwtCfg Nothing
99+ opts <- addJwtToHeader jwt
100+ resp <- getWith opts (url port ++ "/header")
101+ resp ^. responseHeader "Blah" `shouldBe` "1797"
102+ resp ^. responseHeader "Set-Cookie" `shouldSatisfy` (/= "")
103+
104+ context "Raw" $ do
105+
106+ it "gets the response body" $ \port -> property $ \(user :: User) -> do
107+ jwt <- makeJWT user jwtCfg Nothing
108+ opts <- addJwtToHeader jwt
109+ resp <- getWith opts (url port ++ "/raw")
110+ resp ^. responseBody `shouldBe` "how are you?"
111+
112+ it "doesn't clobber pre-existing reponse headers" $ \port -> property $
113+ \(user :: User) -> do
114+ jwt <- makeJWT user jwtCfg Nothing
115+ opts <- addJwtToHeader jwt
116+ resp <- getWith opts (url port ++ "/raw")
117+ resp ^. responseHeader "hi" `shouldBe` "there"
118+ resp ^. responseHeader "Set-Cookie" `shouldSatisfy` (/= "")
119+
120+
121+ context "Setting cookies" $ do
122+
123+ it "sets cookies that it itself accepts" $ \port -> property $ \user -> do
124+ jwt <- createJWT theKey (newJWSHeader ((), HS256))
125+ (claims $ toJSON user)
126+ opts' <- addJwtToCookie cookieCfg jwt
127+ let opts = addCookie (opts' & header (mk (xsrfField xsrfHeaderName cookieCfg)) .~ ["blah"])
128+ (xsrfField xsrfCookieName cookieCfg <> "=blah")
129+ resp <- getWith opts (url port)
130+ let (cookieJar:_) = resp ^.. responseCookieJar
131+ Just xxsrf = find (\x -> cookie_name x == xsrfField xsrfCookieName cookieCfg)
132+ $ destroyCookieJar cookieJar
133+ opts2 = defaults
134+ & cookies .~ Just cookieJar
135+ & header (mk (xsrfField xsrfHeaderName cookieCfg)) .~ [cookie_value xxsrf]
136+ resp2 <- getWith opts2 (url port)
137+ resp2 ^? responseBody . _JSON `shouldBe` Just (length $ name user)
138+
139+ it "uses the Expiry from the configuration" $ \port -> property $ \(user :: User) -> do
140+ jwt <- createJWT theKey (newJWSHeader ((), HS256))
141+ (claims $ toJSON user)
142+ opts' <- addJwtToCookie cookieCfg jwt
143+ let opts = addCookie (opts' & header (mk (xsrfField xsrfHeaderName cookieCfg)) .~ ["blah"])
144+ (xsrfField xsrfCookieName cookieCfg <> "=blah")
145+ resp <- getWith opts (url port)
146+ let (cookieJar:_) = resp ^.. responseCookieJar
147+ Just xxsrf = find (\x -> cookie_name x == xsrfField xsrfCookieName cookieCfg)
148+ $ destroyCookieJar cookieJar
149+ xxsrf ^. cookieExpiryTime `shouldBe` future
150+
151+ it "sets the token cookie as HttpOnly" $ \port -> property $ \(user :: User) -> do
152+ jwt <- createJWT theKey (newJWSHeader ((), HS256))
153+ (claims $ toJSON user)
154+ opts' <- addJwtToCookie cookieCfg jwt
155+ let opts = addCookie (opts' & header (mk (xsrfField xsrfHeaderName cookieCfg)) .~ ["blah"])
156+ (xsrfField xsrfCookieName cookieCfg <> "=blah")
157+ resp <- getWith opts (url port)
158+ let (cookieJar:_) = resp ^.. responseCookieJar
159+ Just token = find (\x -> cookie_name x == sessionCookieName cookieCfg)
160+ $ destroyCookieJar cookieJar
161+ cookie_http_only token `shouldBe` True
162+
163+
164+
165+-- }}}
166+------------------------------------------------------------------------------
167+-- * Cookie Auth {{{
168+
169+cookieAuthSpec :: Spec
170+cookieAuthSpec
171+ = describe "The Auth combinator" $ do
172+ describe "With XSRF check" $
173+ around (testWithApplication . return $ app cookieOnlyApi) $ do
174+
175+ it "fails if XSRF header and cookie don't match" $ \port -> property
176+ $ \(user :: User) -> do
177+ jwt <- createJWT theKey (newJWSHeader ((), HS256)) (claims $ toJSON user)
178+ opts' <- addJwtToCookie cookieCfg jwt
179+ let opts = addCookie (opts' & header (mk (xsrfField xsrfHeaderName cookieCfg)) .~ ["blah"])
180+ (xsrfField xsrfCookieName cookieCfg <> "=blerg")
181+ getWith opts (url port) `shouldHTTPErrorWith` status401
182+
183+ it "fails with no XSRF header or cookie" $ \port -> property
184+ $ \(user :: User) -> do
185+ jwt <- createJWT theKey (newJWSHeader ((), HS256)) (claims $ toJSON user)
186+ opts <- addJwtToCookie cookieCfg jwt
187+ getWith opts (url port) `shouldHTTPErrorWith` status401
188+
189+ it "succeeds if XSRF header and cookie match, and JWT is valid" $ \port -> property
190+ $ \(user :: User) -> do
191+ jwt <- createJWT theKey (newJWSHeader ((), HS256)) (claims $ toJSON user)
192+ opts' <- addJwtToCookie cookieCfg jwt
193+ let opts = addCookie (opts' & header (mk (xsrfField xsrfHeaderName cookieCfg)) .~ ["blah"])
194+ (xsrfField xsrfCookieName cookieCfg <> "=blah")
195+ resp <- getWith opts (url port)
196+ resp ^? responseBody . _JSON `shouldBe` Just (length $ name user)
197+
198+ it "sets and clears the right cookies" $ \port -> property
199+ $ \(user :: User) -> do
200+ let optsFromResp resp =
201+ let jar = resp ^. responseCookieJar
202+ Just xsrfCookieValue = cookie_value <$> find (\c -> cookie_name c == xsrfField xsrfCookieName cookieCfg) (destroyCookieJar jar)
203+ in defaults
204+ & cookies .~ Just jar -- real cookie jars aren't updated by being replaced
205+ & header (mk (xsrfField xsrfHeaderName cookieCfg)) .~ [xsrfCookieValue]
206+
207+ resp <- postWith defaults (url port ++ "/login") user
208+ (resp ^. responseCookieJar) `shouldMatchCookieNames`
209+ [ sessionCookieName cookieCfg
210+ , xsrfField xsrfCookieName cookieCfg
211+ ]
212+ let loggedInOpts = optsFromResp resp
213+
214+ resp <- getWith loggedInOpts (url port)
215+ resp ^? responseBody . _JSON `shouldBe` Just (length $ name user)
216+
217+ -- logout
218+ resp <- getWith loggedInOpts (url port ++ "/logout")
219+
220+ -- assert cookies were expired
221+ now <- getCurrentTime
222+ let assertCookie c = now >= cookie_expiry_time c
223+ all assertCookie (destroyCookieJar (resp ^. responseCookieJar)) `shouldBe` True
224+
225+ let loggedOutOpts = optsFromResp resp
226+ getWith loggedOutOpts (url port) `shouldHTTPErrorWith` status401
227+
228+ describe "With no XSRF check for GET requests" $ let
229+ noXsrfGet xsrfCfg = xsrfCfg { xsrfExcludeGet = True }
230+ cookieCfgNoXsrfGet = cookieCfg { cookieXsrfSetting = fmap noXsrfGet $ cookieXsrfSetting cookieCfg }
231+ in around (testWithApplication . return $ appWithCookie cookieOnlyApi cookieCfgNoXsrfGet) $ do
232+
233+ it "succeeds with no XSRF header or cookie for GET" $ \port -> property
234+ $ \(user :: User) -> do
235+ jwt <- createJWT theKey (newJWSHeader ((), HS256)) (claims $ toJSON user)
236+ opts <- addJwtToCookie cookieCfgNoXsrfGet jwt
237+ resp <- getWith opts (url port)
238+ resp ^? responseBody . _JSON `shouldBe` Just (length $ name user)
239+
240+ it "fails with no XSRF header or cookie for POST" $ \port -> property
241+ $ \(user :: User) number -> do
242+ jwt <- createJWT theKey (newJWSHeader ((), HS256)) (claims $ toJSON user)
243+ opts <- addJwtToCookie cookieCfgNoXsrfGet jwt
244+ postWith opts (url port) (toJSON (number :: Int)) `shouldHTTPErrorWith` status401
245+
246+ describe "With no XSRF check at all" $ let
247+ cookieCfgNoXsrf = cookieCfg { cookieXsrfSetting = Nothing }
248+ in around (testWithApplication . return $ appWithCookie cookieOnlyApi cookieCfgNoXsrf) $ do
249+
250+ it "succeeds with no XSRF header or cookie for GET" $ \port -> property
251+ $ \(user :: User) -> do
252+ jwt <- createJWT theKey (newJWSHeader ((), HS256)) (claims $ toJSON user)
253+ opts <- addJwtToCookie cookieCfgNoXsrf jwt
254+ resp <- getWith opts (url port)
255+ resp ^? responseBody . _JSON `shouldBe` Just (length $ name user)
256+
257+ it "succeeds with no XSRF header or cookie for POST" $ \port -> property
258+ $ \(user :: User) number -> do
259+ jwt <- createJWT theKey (newJWSHeader ((), HS256)) (claims $ toJSON user)
260+ opts <- addJwtToCookie cookieCfgNoXsrf jwt
261+ resp <- postWith opts (url port) $ toJSON (number :: Int)
262+ resp ^? responseBody . _JSON `shouldBe` Just number
263+
264+ it "sets and clears the right cookies" $ \port -> property
265+ $ \(user :: User) -> do
266+ let optsFromResp resp = defaults
267+ & cookies .~ Just (resp ^. responseCookieJar) -- real cookie jars aren't updated by being replaced
268+
269+ resp <- postWith defaults (url port ++ "/login") user
270+ (resp ^. responseCookieJar) `shouldMatchCookieNames`
271+ [ sessionCookieName cookieCfg
272+ , "NO-XSRF-TOKEN"
273+ ]
274+ let loggedInOpts = optsFromResp resp
275+
276+ resp <- getWith (loggedInOpts) (url port)
277+ resp ^? responseBody . _JSON `shouldBe` Just (length $ name user)
278+
279+ resp <- getWith loggedInOpts (url port ++ "/logout")
280+ (resp ^. responseCookieJar) `shouldMatchCookieNameValues`
281+ [ (sessionCookieName cookieCfg, "value")
282+ , ("NO-XSRF-TOKEN", "")
283+ ]
284+
285+ -- assert cookies were expired
286+ now <- getCurrentTime
287+ let assertCookie c = now >= cookie_expiry_time c
288+ all assertCookie (destroyCookieJar (resp ^. responseCookieJar)) `shouldBe` True
289+
290+ let loggedOutOpts = optsFromResp resp
291+
292+ getWith loggedOutOpts (url port) `shouldHTTPErrorWith` status401
293+
294+-- }}}
295+------------------------------------------------------------------------------
296+-- * JWT Auth {{{
297+
298+jwtAuthSpec :: Spec
299+jwtAuthSpec
300+ = describe "The JWT combinator"
301+ $ around (testWithApplication . return $ app jwtOnlyApi) $ do
302+
303+ it "fails if 'aud' does not match predicate" $ \port -> property $
304+ \(user :: User) -> do
305+ jwt <- createJWT theKey (newJWSHeader ((), HS256))
306+ (claims (toJSON user) & claimAud .~ Just (Audience ["boo"]))
307+ opts <- addJwtToHeader (jwt >>= (return . encodeCompact))
308+ getWith opts (url port) `shouldHTTPErrorWith` status401
309+
310+ it "succeeds if 'aud' does match predicate" $ \port -> property $
311+ \(user :: User) -> do
312+ jwt <- createJWT theKey (newJWSHeader ((), HS256))
313+ (claims (toJSON user) & claimAud .~ Just (Audience ["anythingElse"]))
314+ opts <- addJwtToHeader (jwt >>= (return . encodeCompact))
315+ resp <- getWith opts (url port)
316+ resp ^. responseStatus `shouldBe` status200
317+
318+ it "fails if 'nbf' is set to a future date" $ \port -> property $
319+ \(user :: User) -> do
320+ jwt <- createJWT theKey (newJWSHeader ((), HS256))
321+ (claims (toJSON user) & claimNbf .~ Just (NumericDate future))
322+ opts <- addJwtToHeader (jwt >>= (return . encodeCompact))
323+ getWith opts (url port) `shouldHTTPErrorWith` status401
324+
325+ it "fails if 'exp' is set to a past date" $ \port -> property $
326+ \(user :: User) -> do
327+ jwt <- makeJWT user jwtCfg (Just past)
328+ opts <- addJwtToHeader jwt
329+ getWith opts (url port) `shouldHTTPErrorWith` status401
330+
331+ it "succeeds if 'exp' is set to a future date" $ \port -> property $
332+ \(user :: User) -> do
333+ jwt <- makeJWT user jwtCfg (Just future)
334+ opts <- addJwtToHeader jwt
335+ resp <- getWith opts (url port)
336+ resp ^. responseStatus `shouldBe` status200
337+
338+ it "fails if JWT is not signed" $ \port -> property $ \(user :: User) -> do
339+ jwt <- createJWT theKey (newJWSHeader ((), None))
340+ (claims $ toJSON user)
341+ opts <- addJwtToHeader (jwt >>= (return . encodeCompact))
342+ getWith opts (url port) `shouldHTTPErrorWith` status401
343+
344+ it "fails if JWT does not use expected algorithm" $ const $
345+ pendingWith "Need https://github.com/frasertweedale/hs-jose/issues/19"
346+
347+ it "fails if data is not valid JSON" $ \port -> do
348+ jwt <- createJWT theKey (newJWSHeader ((), HS256)) (claims "{{")
349+ opts <- addJwtToHeader (jwt >>= (return .encodeCompact))
350+ getWith opts (url port) `shouldHTTPErrorWith` status401
351+
352+ it "suceeds as wreq's oauth2Bearer" $ \port -> property $ \(user :: User) -> do
353+ jwt <- createJWT theKey (newJWSHeader ((), HS256))
354+ (claims $ toJSON user)
355+ resp <- case jwt >>= (return . encodeCompact) of
356+ Left (e :: Error) -> fail $ show e
357+ Right v -> getWith (defaults & auth ?~ oauth2Bearer (BSL.toStrict v)) (url port)
358+ resp ^. responseStatus `shouldBe` status200
359+
360+-- }}}
361+------------------------------------------------------------------------------
362+-- * Basic Auth {{{
363+
364+basicAuthSpec :: Spec
365+basicAuthSpec = describe "The BasicAuth combinator"
366+ $ around (testWithApplication . return $ app basicAuthApi) $ do
367+
368+ it "succeeds with the correct password and username" $ \port -> do
369+ resp <- getWith (defaults & auth ?~ basicAuth "ali" "Open sesame") (url port)
370+ resp ^. responseStatus `shouldBe` status200
371+
372+ it "fails with non-existent user" $ \port -> do
373+ getWith (defaults & auth ?~ basicAuth "thief" "Open sesame") (url port)
374+ `shouldHTTPErrorWith` status401
375+
376+ it "fails with incorrect password" $ \port -> do
377+ getWith (defaults & auth ?~ basicAuth "ali" "phatic") (url port)
378+ `shouldHTTPErrorWith` status401
379+
380+ it "fails with no auth header" $ \port -> do
381+ get (url port) `shouldHTTPErrorWith` status401
382+
383+-- }}}
384+------------------------------------------------------------------------------
385+-- * ThrowAll {{{
386+
387+throwAllSpec :: Spec
388+throwAllSpec = describe "throwAll" $ do
389+
390+ it "works for plain values" $ do
391+ let t :: Either ServerError Int :<|> Either ServerError Bool :<|> Either ServerError String
392+ t = throwAll err401
393+ t `shouldBe` throwError err401 :<|> throwError err401 :<|> throwError err401
394+
395+ it "works for function types" $ property $ \i -> do
396+ let t :: Int -> (Either ServerError Bool :<|> Either ServerError String)
397+ t = throwAll err401
398+ expected _ = throwError err401 :<|> throwError err401
399+ t i `shouldBe` expected i
400+
401+-- }}}
402+------------------------------------------------------------------------------
403+-- * API and Server {{{
404+
405+type API auths
406+ = Auth auths User :>
407+ ( Get '[JSON] Int
408+ :<|> ReqBody '[JSON] Int :> Post '[JSON] Int
409+ :<|> NamedRoutes DummyRoutes
410+ :<|> "header" :> Get '[JSON] (Headers '[Header "Blah" Int] Int)
411+#if MIN_VERSION_servant_server(0,15,0)
412+ :<|> "stream" :> StreamGet NoFraming OctetStream (SourceIO BS.ByteString)
413+#endif
414+ :<|> "raw" :> Raw
415+ )
416+ :<|> "login" :> ReqBody '[JSON] User :> Post '[JSON] (Headers '[ Header "Set-Cookie" SetCookie
417+ , Header "Set-Cookie" SetCookie ] NoContent)
418+ :<|> "logout" :> Get '[JSON] (Headers '[ Header "Set-Cookie" SetCookie
419+ , Header "Set-Cookie" SetCookie ] NoContent)
420+
421+data DummyRoutes mode = DummyRoutes
422+ { dummyInt :: mode :- "dummy" :> Get '[JSON] Int
423+ } deriving Generic
424+
425+jwtOnlyApi :: Proxy (API '[Servant.Auth.Server.JWT])
426+jwtOnlyApi = Proxy
427+
428+cookieOnlyApi :: Proxy (API '[Cookie])
429+cookieOnlyApi = Proxy
430+
431+basicAuthApi :: Proxy (API '[BasicAuth])
432+basicAuthApi = Proxy
433+
434+jwtAndCookieApi :: Proxy (API '[Servant.Auth.Server.JWT, Cookie])
435+jwtAndCookieApi = Proxy
436+
437+theKey :: JWK
438+theKey = unsafePerformIO . genJWK $ OctGenParam 256
439+{-# NOINLINE theKey #-}
440+
441+
442+cookieCfg :: CookieSettings
443+cookieCfg = def
444+ { cookieExpires = Just future
445+ , cookieIsSecure = NotSecure
446+ , sessionCookieName = "RuncibleSpoon"
447+ , cookieXsrfSetting = pure $ def
448+ { xsrfCookieName = "TheyDinedOnMince"
449+ , xsrfHeaderName = "AndSlicesOfQuince"
450+ }
451+ }
452+xsrfField :: (XsrfCookieSettings -> a) -> CookieSettings -> a
453+xsrfField f = maybe (error "expected XsrfCookieSettings for test") f . cookieXsrfSetting
454+
455+jwtCfg :: JWTSettings
456+jwtCfg = (defaultJWTSettings theKey) { audienceMatches = \x ->
457+ if x == "boo" then DoesNotMatch else Matches }
458+
459+instance FromBasicAuthData User where
460+ fromBasicAuthData (BasicAuthData usr pwd) _
461+ = return $ if usr == "ali" && pwd == "Open sesame"
462+ then Authenticated $ User "ali" "ali@the-thieves-den.com"
463+ else Indefinite
464+
465+-- Could be anything, really, but since this is already in the cfg we don't
466+-- have to add it
467+type instance BasicAuthCfg = JWK
468+
469+appWithCookie :: AreAuths auths '[CookieSettings, JWTSettings, JWK] User
470+ => Proxy (API auths) -> CookieSettings -> Application
471+appWithCookie api ccfg = serveWithContext api ctx $ server ccfg
472+ where
473+ ctx = ccfg :. jwtCfg :. theKey :. EmptyContext
474+
475+-- | Takes a proxy parameter indicating which authentication systems to enable.
476+app :: AreAuths auths '[CookieSettings, JWTSettings, JWK] User
477+ => Proxy (API auths) -> Application
478+app api = appWithCookie api cookieCfg
479+
480+server :: CookieSettings -> Server (API auths)
481+server ccfg =
482+ (\authResult -> case authResult of
483+ Authenticated usr -> getInt usr
484+ :<|> postInt usr
485+ :<|> DummyRoutes { dummyInt = getInt usr }
486+ :<|> getHeaderInt
487+#if MIN_VERSION_servant_server(0,15,0)
488+ :<|> return (S.source ["bytestring"])
489+#endif
490+ :<|> raw
491+ Indefinite -> throwAll err401
492+ _ -> throwAll err403
493+ )
494+ :<|> getLogin
495+ :<|> getLogout
496+ where
497+ getInt :: User -> Handler Int
498+ getInt usr = return . length $ name usr
499+
500+ postInt :: User -> Int -> Handler Int
501+ postInt _ = return
502+
503+ getHeaderInt :: Handler (Headers '[Header "Blah" Int] Int)
504+ getHeaderInt = return $ addHeader 1797 17
505+
506+ getLogin :: User -> Handler (Headers '[ Header "Set-Cookie" SetCookie
507+ , Header "Set-Cookie" SetCookie ] NoContent)
508+ getLogin user = do
509+ maybeApplyCookies <- liftIO $ acceptLogin ccfg jwtCfg user
510+ case maybeApplyCookies of
511+ Just applyCookies -> return $ applyCookies NoContent
512+ Nothing -> error "cookies failed to apply"
513+
514+ getLogout :: Handler (Headers '[ Header "Set-Cookie" SetCookie
515+ , Header "Set-Cookie" SetCookie ] NoContent)
516+ getLogout = return $ clearSession ccfg NoContent
517+
518+ raw :: Server Raw
519+ raw =
520+#if MIN_VERSION_servant_server(0,11,0)
521+ Tagged $
522+#endif
523+ \_req respond ->
524+ respond $ responseLBS status200 [("hi", "there")] "how are you?"
525+
526+-- }}}
527+------------------------------------------------------------------------------
528+-- * Utils {{{
529+
530+past :: UTCTime
531+past = parseTimeOrError True defaultTimeLocale "%Y-%m-%d" "1970-01-01"
532+
533+future :: UTCTime
534+future = parseTimeOrError True defaultTimeLocale "%Y-%m-%d" "2070-01-01"
535+
536+addJwtToHeader :: Either Error BSL.ByteString -> IO Options
537+addJwtToHeader jwt = case jwt of
538+ Left e -> fail $ show e
539+ Right v -> return
540+ $ defaults & header "Authorization" .~ ["Bearer " <> BSL.toStrict v]
541+
542+createJWT :: JWK -> JWSHeader () -> ClaimsSet -> IO (Either Error Crypto.JWT.SignedJWT)
543+createJWT k a b = runExceptT $ signClaims k a b
544+
545+addJwtToCookie :: ToCompact a => CookieSettings -> Either Error a -> IO Options
546+addJwtToCookie ccfg jwt = case jwt >>= (return . encodeCompact) of
547+ Left e -> fail $ show e
548+ Right v -> return
549+ $ defaults & header "Cookie" .~ [sessionCookieName ccfg <> "=" <> BSL.toStrict v]
550+
551+addCookie :: Options -> BS.ByteString -> Options
552+addCookie opts cookie' = opts & header "Cookie" %~ \c -> case c of
553+ [h] -> [cookie' <> "; " <> h]
554+ [] -> [cookie']
555+ _ -> error "expecting single cookie header"
556+
557+
558+shouldHTTPErrorWith :: IO a -> Status -> Expectation
559+shouldHTTPErrorWith act stat = act `shouldThrow` \e -> case e of
560+#if MIN_VERSION_http_client(0,5,0)
561+ HCli.HttpExceptionRequest _ (HCli.StatusCodeException resp _)
562+ -> HCli.responseStatus resp == stat
563+#else
564+ HCli.StatusCodeException x _ _ -> x == stat
565+#endif
566+ _ -> False
567+
568+shouldMatchCookieNames :: HCli.CookieJar -> [BS.ByteString] -> Expectation
569+shouldMatchCookieNames cj patterns
570+ = fmap cookie_name (destroyCookieJar cj)
571+ `shouldMatchList` patterns
572+
573+shouldMatchCookieNameValues :: HCli.CookieJar -> [(BS.ByteString, BS.ByteString)] -> Expectation
574+shouldMatchCookieNameValues cj patterns
575+ = fmap ((,) <$> cookie_name <*> cookie_value) (destroyCookieJar cj)
576+ `shouldMatchList` patterns
577+
578+url :: Int -> String
579+url port = "http://localhost:" <> show port
580+
581+claims :: Value -> ClaimsSet
582+claims val = emptyClaimsSet & unregisteredClaims . at "dat" .~ Just val
583+-- }}}
584+------------------------------------------------------------------------------
585+-- * Types {{{
586+
587+data User = User
588+ { name :: String
589+ , _id :: String
590+ } deriving (Eq, Show, Read, Generic)
591+
592+instance FromJWT User
593+instance ToJWT User
594+instance FromJSON User
595+instance ToJSON User
596+
597+instance Arbitrary User where
598+ arbitrary = User <$> arbitrary <*> arbitrary
599+
600+instance Postable User where
601+ postPayload user request = return $ request
602+ { HCli.requestBody = HCli.RequestBodyLBS $ encode user
603+ , HCli.requestHeaders = (mk "Content-Type", "application/json") : HCli.requestHeaders request
604+ }
605+
606+
607+-- }}}
servant-auth/servant-auth-server/test/Spec.hsnew file+1
@@ -0,0 +1 @@
1+{-# OPTIONS_GHC -F -pgmF hspec-discover #-}
servant-auth/servant-auth-swagger/.ghcinew file+1
@@ -0,0 +1 @@
1+:set -isrc -itest -idoctest/ghci-wrapper/src
servant-auth/servant-auth-swagger/CHANGELOG.mdnew file+24
@@ -0,0 +1,24 @@
1+# Changelog
2+
3+All notable changes to this project will be documented in this file.
4+
5+The format is based on [Keep a Changelog](http://keepachangelog.com/en/1.0.0/)
6+and this project adheres to [PVP Versioning](https://pvp.haskell.org/).
7+
8+## [Unreleased]
9+
10+## [0.2.10.1] - 2020-10-06
11+
12+### Changed
13+
14+- Support GHC 8.10 @domenkozar
15+- Fix build with swagger 2.5.x @domenkozar
16+
17+## [0.2.10.0] - 2018-06-18
18+
19+### Added
20+
21+- Support for GHC 8.4 by @phadej
22+- Changelog by @domenkozar
23+- #93: Add Cookie in SwaggerSpec API by @domenkozar
24+- #42: Add dummy AllHasSecurity Cookie instance by @sordina
servant-auth/servant-auth-swagger/LICENSEnew file+31
@@ -0,0 +1,31 @@
1+Copyright Julian K. Arni (c) 2015
2+
3+All rights reserved.
4+
5+Redistribution and use in source and binary forms, with or without
6+modification, are permitted provided that the following conditions are met:
7+
8+ * Redistributions of source code must retain the above copyright
9+ notice, this list of conditions and the following disclaimer.
10+
11+ * Redistributions in binary form must reproduce the above
12+ copyright notice, this list of conditions and the following
13+ disclaimer in the documentation and/or other materials provided
14+ with the distribution.
15+
16+ * Neither the name of Julian K. Arni nor the names of other
17+ contributors may be used to endorse or promote products derived
18+ from this software without specific prior written permission.
19+
20+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
21+"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
22+LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
23+A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
24+OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
25+SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
26+LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
27+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
28+THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
29+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
30+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
31+
servant-auth/servant-auth-swagger/Setup.hsnew file+2
@@ -0,0 +1,2 @@
1+import Distribution.Simple
2+main = defaultMain
servant-auth/servant-auth-swagger/servant-auth-swagger.cabalnew file+70
@@ -0,0 +1,70 @@
1+cabal-version: 2.2
2+name: servant-auth-swagger
3+version: 0.2.10.1
4+synopsis: servant-swagger/servant-auth compatibility
5+description: This package provides instances that allow generating swagger2 schemas from
6+ <https://hackage.haskell.org/package/servant servant>
7+ APIs that use
8+ <https://hackage.haskell.org/package/servant-auth servant-auth's> @Auth@ combinator.
9+ .
10+ For a quick overview of the usage, see the <https://github.com/haskell-servant/servant/tree/master/servant-auth#readme README>.
11+category: Web, Servant, Authentication
12+homepage: https://github.com/haskell-servant/servant/tree/master/servant-auth#readme
13+bug-reports: https://github.com/haskell-servant/servant/issues
14+author: Julian K. Arni
15+maintainer: jkarni@gmail.com
16+copyright: (c) Julian K. Arni
17+license: BSD-3-Clause
18+license-file: LICENSE
19+tested-with: GHC ==8.6.5 || ==8.8.4 || ==8.10.4
20+build-type: Simple
21+extra-source-files:
22+ CHANGELOG.md
23+
24+source-repository head
25+ type: git
26+ location: https://github.com/haskell-servant/servant
27+
28+library
29+ hs-source-dirs:
30+ src
31+ default-extensions: ConstraintKinds DataKinds DefaultSignatures DeriveFoldable DeriveFunctor DeriveGeneric DeriveTraversable FlexibleContexts FlexibleInstances FunctionalDependencies GADTs KindSignatures MultiParamTypeClasses OverloadedStrings RankNTypes ScopedTypeVariables TypeFamilies TypeOperators
32+ ghc-options: -Wall
33+ build-depends:
34+ base >= 4.10 && < 4.17
35+ , text >= 1.2.3.0 && < 2.1
36+ , servant-swagger >= 1.1.5 && < 2
37+ , swagger2 >= 2.2.2 && < 3
38+ , servant >= 0.13 && < 0.20
39+ , servant-auth == 0.4.*
40+ , lens >= 4.16.1 && < 5.2
41+ exposed-modules:
42+ Servant.Auth.Swagger
43+ default-language: Haskell2010
44+
45+test-suite spec
46+ type: exitcode-stdio-1.0
47+ main-is: Spec.hs
48+ hs-source-dirs:
49+ test
50+ default-extensions: ConstraintKinds DataKinds DefaultSignatures DeriveFoldable DeriveFunctor DeriveGeneric DeriveTraversable FlexibleContexts FlexibleInstances FunctionalDependencies GADTs KindSignatures MultiParamTypeClasses OverloadedStrings RankNTypes ScopedTypeVariables TypeFamilies TypeOperators
51+ ghc-options: -Wall
52+ build-tool-depends: hspec-discover:hspec-discover >= 2.5.5 && <2.10
53+ -- dependencies with bounds inherited from the library stanza
54+ build-depends:
55+ base
56+ , text
57+ , servant-swagger
58+ , swagger2
59+ , servant
60+ , servant-auth
61+ , lens
62+
63+ -- test dependencies
64+ build-depends:
65+ servant-auth-swagger
66+ , hspec >= 2.5.5 && < 2.10
67+ , QuickCheck >= 2.11.3 && < 2.15
68+ other-modules:
69+ Servant.Auth.SwaggerSpec
70+ default-language: Haskell2010
servant-auth/servant-auth-swagger/src/Servant/Auth/Swagger.hsnew file+87
@@ -0,0 +1,87 @@
1+{-# OPTIONS_GHC -fno-warn-orphans #-}
2+{-# LANGUAGE CPP #-}
3+module Servant.Auth.Swagger
4+ (
5+ -- | The purpose of this package is provide the instance for 'servant-auth'
6+ -- combinators needed for 'servant-swagger' documentation generation.
7+ --
8+ -- Currently only JWT and BasicAuth are supported.
9+
10+ -- * Re-export
11+ JWT
12+ , BasicAuth
13+ , Auth
14+
15+ -- * Needed to define instances of @HasSwagger@
16+ , HasSecurity (..)
17+ ) where
18+
19+import Control.Lens ((&), (<>~))
20+import Data.Proxy (Proxy (Proxy))
21+import Data.Swagger (ApiKeyLocation (..), ApiKeyParams (..),
22+ SecurityRequirement (..), SecurityScheme (..),
23+#if MIN_VERSION_swagger2(2,6,0)
24+ SecurityDefinitions(..),
25+#endif
26+ SecuritySchemeType (..), allOperations, security,
27+ securityDefinitions)
28+import GHC.Exts (fromList)
29+import Servant.API hiding (BasicAuth)
30+import Servant.Auth
31+import Servant.Swagger
32+
33+import qualified Data.Text as T
34+
35+instance (AllHasSecurity xs, HasSwagger api) => HasSwagger (Auth xs r :> api) where
36+ toSwagger _
37+ = toSwagger (Proxy :: Proxy api)
38+ & securityDefinitions <>~ mkSec (fromList secs)
39+ & allOperations.security <>~ secReqs
40+ where
41+ secs = securities (Proxy :: Proxy xs)
42+ secReqs = [ SecurityRequirement (fromList [(s,[])]) | (s,_) <- secs]
43+ mkSec =
44+#if MIN_VERSION_swagger2(2,6,0)
45+ SecurityDefinitions
46+#else
47+ id
48+#endif
49+
50+
51+class HasSecurity x where
52+ securityName :: Proxy x -> T.Text
53+ securityScheme :: Proxy x -> SecurityScheme
54+
55+instance HasSecurity BasicAuth where
56+ securityName _ = "BasicAuth"
57+ securityScheme _ = SecurityScheme type_ (Just desc)
58+ where
59+ type_ = SecuritySchemeBasic
60+ desc = "Basic access authentication"
61+
62+instance HasSecurity JWT where
63+ securityName _ = "JwtSecurity"
64+ securityScheme _ = SecurityScheme type_ (Just desc)
65+ where
66+ type_ = SecuritySchemeApiKey (ApiKeyParams "Authorization" ApiKeyHeader)
67+ desc = "JSON Web Token-based API key"
68+
69+class AllHasSecurity (x :: [*]) where
70+ securities :: Proxy x -> [(T.Text,SecurityScheme)]
71+
72+instance {-# OVERLAPPABLE #-} (HasSecurity x, AllHasSecurity xs) => AllHasSecurity (x ': xs) where
73+ securities _ = (securityName px, securityScheme px) : securities pxs
74+ where
75+ px :: Proxy x
76+ px = Proxy
77+ pxs :: Proxy xs
78+ pxs = Proxy
79+
80+instance {-# OVERLAPPING #-} AllHasSecurity xs => AllHasSecurity (Cookie ': xs) where
81+ securities _ = securities pxs
82+ where
83+ pxs :: Proxy xs
84+ pxs = Proxy
85+
86+instance AllHasSecurity '[] where
87+ securities _ = []
servant-auth/servant-auth-swagger/test/Servant/Auth/SwaggerSpec.hsnew file+38
@@ -0,0 +1,38 @@
1+{-# LANGUAGE CPP #-}
2+module Servant.Auth.SwaggerSpec (spec) where
3+
4+import Control.Lens
5+import Data.Proxy
6+import Servant.API
7+import Servant.Auth
8+import Servant.Auth.Swagger
9+import Data.Swagger
10+import Servant.Swagger
11+import Test.Hspec
12+
13+spec :: Spec
14+spec = describe "HasSwagger instance" $ do
15+
16+ let swag = toSwagger (Proxy :: Proxy API)
17+
18+ it "adds security definitions at the top level" $ do
19+#if MIN_VERSION_swagger2(2,6,0)
20+ let (SecurityDefinitions secDefs) = swag ^. securityDefinitions
21+#else
22+ let secDefs = swag ^. securityDefinitions
23+#endif
24+ length secDefs `shouldSatisfy` (> 0)
25+
26+ it "adds security at sub-apis" $ do
27+ swag ^. security `shouldBe` []
28+ show (swag ^. paths . at "/secure") `shouldContain` "JwtSecurity"
29+ show (swag ^. paths . at "/insecure") `shouldNotContain` "JwtSecurity"
30+
31+-- * API
32+
33+type API = "secure" :> Auth '[JWT, Cookie] Int :> SecureAPI
34+ :<|> "insecure" :> InsecureAPI
35+
36+type SecureAPI = Get '[JSON] Int :<|> ReqBody '[JSON] Int :> Post '[JSON] Int
37+
38+type InsecureAPI = SecureAPI
servant-auth/servant-auth-swagger/test/Spec.hsnew file+1
@@ -0,0 +1 @@
1+{-# OPTIONS_GHC -F -pgmF hspec-discover #-}
servant-auth/servant-auth/.ghcinew file+1
@@ -0,0 +1 @@
1+:set -isrc -itest -idoctest/ghci-wrapper/src
servant-auth/servant-auth/CHANGELOG.mdnew file+20
@@ -0,0 +1,20 @@
1+# Changelog
2+
3+All notable changes to this project will be documented in this file.
4+
5+The format is based on [Keep a Changelog](http://keepachangelog.com/en/1.0.0/)
6+and this project adheres to [PVP Versioning](https://pvp.haskell.org/).
7+
8+## [Unreleased]
9+
10+## [0.4.0.0] - 2020-10-06
11+
12+- Support for GHC 8.10 by @domenkozar
13+- Support servant 0.18 by @domenkozar
14+- Move `ToJWT/FromJWT` from servant-auth-server
15+
16+## [0.3.2.0] - 2018-06-18
17+
18+### Added
19+- Support for GHC 8.4 by @phadej
20+- Changelog by @domenkozar
servant-auth/servant-auth/LICENSEnew file+31
@@ -0,0 +1,31 @@
1+Copyright Julian K. Arni (c) 2015
2+
3+All rights reserved.
4+
5+Redistribution and use in source and binary forms, with or without
6+modification, are permitted provided that the following conditions are met:
7+
8+ * Redistributions of source code must retain the above copyright
9+ notice, this list of conditions and the following disclaimer.
10+
11+ * Redistributions in binary form must reproduce the above
12+ copyright notice, this list of conditions and the following
13+ disclaimer in the documentation and/or other materials provided
14+ with the distribution.
15+
16+ * Neither the name of Julian K. Arni nor the names of other
17+ contributors may be used to endorse or promote products derived
18+ from this software without specific prior written permission.
19+
20+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
21+"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
22+LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
23+A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
24+OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
25+SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
26+LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
27+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
28+THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
29+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
30+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
31+
servant-auth/servant-auth/Setup.hsnew file+2
@@ -0,0 +1,2 @@
1+import Distribution.Simple
2+main = defaultMain
servant-auth/servant-auth/servant-auth.cabalnew file+47
@@ -0,0 +1,47 @@
1+cabal-version: 2.2
2+name: servant-auth
3+version: 0.4.1.0
4+synopsis: Authentication combinators for servant
5+description: This package provides an @Auth@ combinator for 'servant'. This combinator
6+ allows using different authentication schemes in a straightforward way,
7+ and possibly in conjunction with one another.
8+ .
9+ 'servant-auth' additionally provides concrete authentication schemes, such
10+ as Basic Access Authentication, JSON Web Tokens, and Cookies.
11+ .
12+ For more details on how to use this, see the <https://github.com/haskell-servant/servant/tree/master/servant-auth#readme README>.
13+category: Web, Servant, Authentication
14+homepage: https://github.com/haskell-servant/servant/tree/master/servant-auth#readme
15+bug-reports: https://github.com/haskell-servant/servant/issues
16+author: Julian K. Arni
17+maintainer: jkarni@gmail.com
18+copyright: (c) Julian K. Arni
19+license: BSD-3-Clause
20+license-file: LICENSE
21+tested-with: GHC ==8.6.5 || ==8.8.4 || ==8.10.4 || ==9.0.1
22+build-type: Simple
23+extra-source-files:
24+ CHANGELOG.md
25+
26+source-repository head
27+ type: git
28+ location: https://github.com/haskell-servant/servant
29+
30+library
31+ hs-source-dirs:
32+ src
33+ default-extensions: ConstraintKinds DataKinds DefaultSignatures DeriveFoldable DeriveFunctor DeriveGeneric DeriveTraversable FlexibleContexts FlexibleInstances FunctionalDependencies GADTs KindSignatures MultiParamTypeClasses OverloadedStrings RankNTypes ScopedTypeVariables TypeFamilies TypeOperators
34+ ghc-options: -Wall
35+ build-depends:
36+ base >= 4.10 && < 4.17
37+ , containers >= 0.6 && < 0.7
38+ , aeson >= 1.3.1.1 && < 3
39+ , jose >= 0.7.0.0 && < 0.10
40+ , lens >= 4.16.1 && < 5.2
41+ , servant >= 0.15 && < 0.20
42+ , text >= 1.2.3.0 && < 2.1
43+ , unordered-containers >= 0.2.9.0 && < 0.3
44+ exposed-modules:
45+ Servant.Auth
46+ Servant.Auth.JWT
47+ default-language: Haskell2010
servant-auth/servant-auth/src/Servant/Auth.hsnew file+54
@@ -0,0 +1,54 @@
1+{-# LANGUAGE CPP #-}
2+{-# LANGUAGE DataKinds #-}
3+{-# LANGUAGE GeneralizedNewtypeDeriving #-}
4+{-# LANGUAGE TypeFamilies #-}
5+{-# LANGUAGE TypeOperators #-}
6+module Servant.Auth where
7+
8+import Data.Proxy (Proxy(..))
9+import Servant.API ((:>))
10+import Servant.Links (HasLink (..))
11+
12+-- * Authentication
13+
14+-- | @Auth [auth1, auth2] val :> api@ represents an API protected *either* by
15+-- @auth1@ or @auth2@
16+data Auth (auths :: [*]) val
17+
18+-- | A @HasLink@ instance for @Auth@
19+instance HasLink sub => HasLink (Auth (tag :: [*]) value :> sub) where
20+#if MIN_VERSION_servant(0,14,0)
21+ type MkLink (Auth (tag :: [*]) value :> sub) a = MkLink sub a
22+ toLink toA _ = toLink toA (Proxy :: Proxy sub)
23+#else
24+ type MkLink (Auth (tag :: [*]) value :> sub) = MkLink sub
25+ toLink _ = toLink (Proxy :: Proxy sub)
26+#endif
27+
28+-- ** Combinators
29+
30+-- | A JSON Web Token (JWT) in the the Authorization header:
31+--
32+-- @Authorization: Bearer \<token\>@
33+--
34+-- Note that while the token is signed, it is not encrypted. Therefore do not
35+-- keep in it any information you would not like the client to know.
36+--
37+-- JWTs are described in IETF's <https://tools.ietf.org/html/rfc7519 RFC 7519>
38+data JWT
39+
40+-- | A cookie. The content cookie itself is a JWT. Another cookie is also used,
41+-- the contents of which are expected to be send back to the server in a
42+-- header, for XSRF protection.
43+data Cookie
44+
45+
46+-- We could use 'servant''s BasicAuth, but then we don't get control over the
47+-- documentation, and we'd have to polykind everything. (Also, we don't
48+-- currently depend on servant!)
49+--
50+-- | Basic Auth.
51+data BasicAuth
52+
53+-- | Login via a form.
54+data FormLogin form
servant-auth/servant-auth/src/Servant/Auth/JWT.hsnew file+40
@@ -0,0 +1,40 @@
1+{-# LANGUAGE CPP #-}
2+
3+module Servant.Auth.JWT where
4+
5+import Control.Lens ((^.))
6+import qualified Crypto.JWT as Jose
7+import Data.Aeson (FromJSON, Result (..), ToJSON, fromJSON,
8+ toJSON)
9+#if MIN_VERSION_aeson(2,0,0)
10+import qualified Data.Map as KM
11+#else
12+import qualified Data.HashMap.Strict as KM
13+#endif
14+
15+import qualified Data.Text as T
16+
17+
18+-- This should probably also be from ClaimSet
19+--
20+-- | How to decode data from a JWT.
21+--
22+-- The default implementation assumes the data is stored in the unregistered
23+-- @dat@ claim, and uses the @FromJSON@ instance to decode value from there.
24+class FromJWT a where
25+ decodeJWT :: Jose.ClaimsSet -> Either T.Text a
26+ default decodeJWT :: FromJSON a => Jose.ClaimsSet -> Either T.Text a
27+ decodeJWT m = case KM.lookup "dat" (m ^. Jose.unregisteredClaims) of
28+ Nothing -> Left "Missing 'dat' claim"
29+ Just v -> case fromJSON v of
30+ Error e -> Left $ T.pack e
31+ Success a -> Right a
32+
33+-- | How to encode data from a JWT.
34+--
35+-- The default implementation stores data in the unregistered @dat@ claim, and
36+-- uses the type's @ToJSON@ instance to encode the data.
37+class ToJWT a where
38+ encodeJWT :: a -> Jose.ClaimsSet
39+ default encodeJWT :: ToJSON a => a -> Jose.ClaimsSet
40+ encodeJWT a = Jose.addClaim "dat" (toJSON a) Jose.emptyClaimsSet
servant-auth/servant-auth/test/Spec.hsnew file+1
@@ -0,0 +1 @@
1+{-# OPTIONS_GHC -F -pgmF hspec-discover #-}
servant-client-core/CHANGELOG.mdnew file+308
@@ -0,0 +1,308 @@
1+[The latest version of this document is on GitHub.](https://github.com/haskell-servant/servant/blob/master/servant-client-core/CHANGELOG.md)
2+[Changelog for `servant` package contains significant entries for all core packages.](https://github.com/haskell-servant/servant/blob/master/servant/CHANGELOG.md)
3+
4+Package versions follow the [Package Versioning Policy](https://pvp.haskell.org/): in A.B.C, bumps to either A or B represent major versions.
5+
6+0.19
7+----
8+
9+### Significant changes
10+
11+- Drop support for GHC < 8.6.
12+- Support GHC 9.0 (GHC 9.2 should work as well, but isn't fully tested yet).
13+- Support Aeson 2 ([#1475](https://github.com/haskell-servant/servant/pull/1475)),
14+ which fixes a [DOS vulnerability](https://github.com/haskell/aeson/issues/864)
15+ related to hash collisions.
16+- Add `NamedRoutes` combinator, making support for records first-class in Servant
17+ ([#1388](https://github.com/haskell-servant/servant/pull/1388)).
18+- Add custom type errors for partially applied combinators
19+ ([#1289](https://github.com/haskell-servant/servant/pull/1289),
20+ [#1486](https://github.com/haskell-servant/servant/pull/1486)).
21+- *servant-client* / *servant-client-core* / *servant-http-streams*: Fix
22+ erroneous behavior, where only 2XX status codes would be considered
23+ successful, irrelevant of the status parameter specified by the verb
24+ combinator. ([#1469](https://github.com/haskell-servant/servant/pull/1469))
25+- *servant-client* / *servant-client-core*: Fix `Show` instance for
26+ `Servant.Client.Core.Request`.
27+- *servant-client* / *servant-client-core*: Allow passing arbitrary binary data
28+ in Query parameters.
29+ ([#1432](https://github.com/haskell-servant/servant/pull/1432)).
30+
31+### Other changes
32+
33+- Various version bumps.
34+
35+0.18.3
36+------
37+
38+### Significant changes
39+
40+- Add response header support to UVerb (#1420)
41+
42+### Other changes
43+
44+- Support GHC-9.0.1.
45+- Bump `bytestring`, `hspec`, `base64-bytestring` and `QuickCheck` dependencies.
46+
47+0.18.2
48+------
49+
50+### Significant changes
51+
52+- Support `Fragment` combinator.
53+
54+0.18.1
55+------
56+
57+### Significant changes
58+
59+- Union verbs
60+
61+### Other changes
62+
63+- Bump "tested-with" ghc versions
64+- Loosen bound on base16-bytestring
65+
66+0.18
67+----
68+
69+### Significant changes
70+
71+- Support for ghc8.8 (#1318, #1326, #1327)
72+
73+
74+0.17
75+----
76+
77+### Significant changes
78+
79+- Add NoContentVerb [#1028](https://github.com/haskell-servant/servant/issues/1028) [#1219](https://github.com/haskell-servant/servant/pull/1219) [#1228](https://github.com/haskell-servant/servant/pull/1228)
80+
81+ The `NoContent` API endpoints should now use `NoContentVerb` combinator.
82+ The API type changes are usually of the kind
83+
84+ ```diff
85+ - :<|> PostNoContent '[JSON] NoContent
86+ + :<|> PostNoContent
87+ ```
88+
89+ i.e. one doesn't need to specify the content-type anymore. There is no content.
90+
91+- `Capture` can be `Lenient` [#1155](https://github.com/haskell-servant/servant/issues/1155) [#1156](https://github.com/haskell-servant/servant/pull/1156)
92+
93+ You can specify a lenient capture as
94+
95+ ```haskell
96+ :<|> "capture-lenient" :> Capture' '[Lenient] "foo" Int :> GET
97+ ```
98+
99+ which will make the capture always succeed. Handlers will be of the
100+ type `Either String CapturedType`, where `Left err` represents
101+ the possible parse failure.
102+
103+### Other changes
104+
105+- *servant-client* *servant-client-core* *servant-http-streams* Fix Verb with headers checking content type differently [#1200](https://github.com/haskell-servant/servant/issues/1200) [#1204](https://github.com/haskell-servant/servant/pull/1204)
106+
107+ For `Verb`s with response `Headers`, the implementation didn't check
108+ for the content-type of the response. Now it does.
109+
110+- *servant-client* *servant-http-streams* `HasClient` instance for `Stream` with `Headers` [#1170](https://github.com/haskell-servant/servant/issues/1170) [#1197](https://github.com/haskell-servant/servant/pull/1197)
111+- *servant-client* Redact the authorization header in Show and exceptions [#1238](https://github.com/haskell-servant/servant/pull/1238)
112+
113+0.16
114+----
115+
116+- Rename `ServantError` to `ClientError`, `ServantErr` to `ServerError`
117+ [#1131](https://github.com/haskell-servant/servant/pull/1131)
118+
119+- *servant-client-core* Rearrange modules. No more `Internal` modules, whole
120+ API is versioned.
121+ [#1130](https://github.com/haskell-servant/servant/pull/1130)
122+
123+- *servant-client-core* `RequestBody` is now
124+
125+ ```haskell
126+ = RequestBodyLBS LBS.ByteString
127+ | RequestBodyBS BS.ByteString
128+ | RequestBodySource (SourceIO LBS.ByteString)
129+ ```
130+
131+ i.e. no more replicates `http-client`s API.
132+ [#1117](https://github.com/haskell-servant/servant/pull/1117)
133+
134+- *servant-client-core* Keep structured exceptions in `ConnectionError`
135+ constructor of `ClientError`
136+ [#1115](https://github.com/haskell-servant/servant/pull/1115)
137+
138+ ```diff
139+ -| ConnectionError Text
140+ +| ConnectionError SomeException
141+ ```
142+
143+- *servant-client-core* Preserve failing request in `FailureResponse`
144+ constructor of `ClientError`
145+ [#1114](https://github.com/haskell-servant/servant/pull/1114)
146+
147+ ```diff
148+ -FailureResponse Response
149+ +-- | The server returned an error response including the
150+ +-- failing request. 'requestPath' includes the 'BaseUrl' and the
151+ +-- path of the request.
152+ +FailureResponse (RequestF () (BaseUrl, BS.ByteString)) Response
153+ ```
154+
155+- *servant-client* Fix (implement) `StreamBody` instance
156+ [#1110](https://github.com/haskell-servant/servant/pull/1110)
157+
158+- *servant-client* Update CookieJar with intermediate request/responses (redirects)
159+ [#1104](https://github.com/haskell-servant/servant/pull/1104)
160+
161+0.15
162+----
163+
164+- Streaming refactoring.
165+ [#991](https://github.com/haskell-servant/servant/pull/991)
166+ [#1076](https://github.com/haskell-servant/servant/pull/1076)
167+ [#1077](https://github.com/haskell-servant/servant/pull/1077)
168+
169+ The streaming functionality (`Servant.API.Stream`) is refactored to use
170+ `servant`'s own `SourceIO` type (see `Servant.Types.SourceT` documentation),
171+ which replaces both `StreamGenerator` and `ResultStream` types.
172+
173+ New conversion type-classes are `ToSourceIO` and `FromSourceIO`
174+ (replacing `ToStreamGenerator` and `BuildFromStream`).
175+ There are instances for *conduit*, *pipes* and *machines* in new packages:
176+ [servant-conduit](https://hackage.haskell.org/package/servant-conduit)
177+ [servant-pipes](https://hackage.haskell.org/package/servant-pipes) and
178+ [servant-machines](https://hackage.haskell.org/package/servant-machines)
179+ respectively.
180+
181+ Writing new framing strategies is simpler. Check existing strategies for examples.
182+
183+ This change shouldn't affect you, if you don't use streaming endpoints.
184+
185+- *servant-client* Separate streaming client.
186+ [#1066](https://github.com/haskell-servant/servant/pull/1066)
187+
188+ We now have two `http-client` based clients,
189+ in `Servant.Client` and `Servant.Client.Streaming`.
190+
191+ Their API is the same, except for
192+ - `Servant.Client` **cannot** request `Stream` endpoints.
193+ - `Servant.Client` is *run* by direct
194+ `runClientM :: ClientM a -> ClientEnv -> IO (Either ServantError a)`
195+ - `Servant.Client.Streaming` **can** request `Stream` endpoints.
196+ - `Servant.Client.Streaming` is *used* by CPSised
197+ `withClientM :: ClientM a -> ClientEnv -> (Either ServantError a -> IO b) -> IO b`
198+
199+ To access `Stream` endpoints use `Servant.Client.Streaming` with
200+ `withClientM`; otherwise you can continue using `Servant.Client` with `runClientM`.
201+ You can use both too, `ClientEnv` and `BaseUrl` types are same for both.
202+
203+ **Note:** `Servant.Client.Streaming` doesn't *stream* non-`Stream` endpoints.
204+ Requesting ordinary `Verb` endpoints (e.g. `Get`) will block until
205+ the whole response is received.
206+
207+ There is `Servant.Client.Streaming.runClientM` function, but it has
208+ restricted type. `NFData a` constraint prevents using it with
209+ `SourceT`, `Conduit` etc. response types.
210+
211+ ```haskell
212+ runClientM :: NFData a => ClientM a -> ClientEnv -> IO (Either ServantError a)
213+ ```
214+
215+ This change shouldn't affect you, if you don't use streaming endpoints.
216+
217+- *servant-client-core* Related to the previous:
218+ `streamingResponse` is removed from `RunClient`.
219+ We have a new type-class:
220+
221+ ```haskell
222+ class RunClient m => RunStreamingClient m where
223+ withStreamingRequest :: Request -> (StreamingResponse -> IO a) -> m a
224+ ```
225+
226+- Drop support for GHC older than 8.0
227+ [#1008](https://github.com/haskell-servant/servant/pull/1008)
228+ [#1009](https://github.com/haskell-servant/servant/pull/1009)
229+
230+- *servant-client-core* Add `NFData (GenResponse a)` and `NFData ServantError` instances.
231+ [#1076](https://github.com/haskell-servant/servant/pull/1076)
232+
233+- *servant-client-core* Add `aeson` and `Lift BaseUrl` instances
234+ [#1037](https://github.com/haskell-servant/servant/pull/1037)
235+
236+0.14.1
237+------
238+
239+- Merge in `servant-generic` (by [Patrick Chilton](https://github.com/chpatrick))
240+ into `servant` (`Servant.API.Generic`),
241+ `servant-client-code` (`Servant.Client.Generic`)
242+ and `servant-server` (`Servant.Server.Generic`).
243+
244+0.14
245+----
246+
247+- `Stream` takes a status code argument
248+
249+ ```diff
250+ -Stream method framing ctype a
251+ +Stream method status framing ctype a
252+ ```
253+
254+ ([#966](https://github.com/haskell-servant/servant/pull/966)
255+ [#972](https://github.com/haskell-servant/servant/pull/972))
256+
257+- `ToStreamGenerator` definition changed, so it's possible to write an instance
258+ for conduits.
259+
260+ ```diff
261+ -class ToStreamGenerator f a where
262+ - toStreamGenerator :: f a -> StreamGenerator a
263+ +class ToStreamGenerator a b | a -> b where
264+ + toStreamGenerator :: a -> StreamGenerator b
265+ ```
266+
267+ ([#959](https://github.com/haskell-servant/servant/pull/959))
268+
269+- Added `NoFraming` streaming strategy
270+ ([#959](https://github.com/haskell-servant/servant/pull/959))
271+
272+- *servant-client-core* Free `Client` implementation.
273+ Useful for testing `HasClient` instances.
274+ ([#920](https://github.com/haskell-servant/servant/pull/920))
275+
276+- *servant-client-core* Add `hoistClient` to `HasClient`.
277+ Just like `hoistServer` allows us to change the monad in which request handlers
278+ of a web application live, we also have `hoistClient` for changing the monad
279+ in which *client functions* live.
280+ Read [tutorial section for more information](https://docs.servant.dev/en/release-0.14/tutorial/Client.html#changing-the-monad-the-client-functions-live-in).
281+ ([#936](https://github.com/haskell-servant/servant/pull/936))
282+
283+ iF you have own combinators, you'll need to define a new method of
284+ `HasClient` class, for example:
285+
286+ ```haskell
287+ type Client m (MyCombinator :> api) = MyValue :> Client m api
288+ hoistClientMonad pm _ nt cl = hoistClientMonad pm (Proxy :: Proxy api) nt . cl
289+ ```
290+
291+0.13.0.1
292+--------
293+
294+- Support `base-compat-0.10`
295+
296+0.13
297+----
298+
299+- Streaming endpoint support.
300+ ([#836](https://github.com/haskell-servant/servant/pull/836))
301+- *servant* Add `Servant.API.Modifiers`
302+ ([#873](https://github.com/haskell-servant/servant/pull/873))
303+
304+0.12
305+----
306+
307+- First version. Factored out of `servant-client` all the functionality that was
308+ independent of the `http-client` backend.
servant-client-core/LICENSEnew file+30
@@ -0,0 +1,30 @@
1+Copyright (c) 2017-2018, Servant Contributors
2+
3+All rights reserved.
4+
5+Redistribution and use in source and binary forms, with or without
6+modification, are permitted provided that the following conditions are met:
7+
8+ * Redistributions of source code must retain the above copyright
9+ notice, this list of conditions and the following disclaimer.
10+
11+ * Redistributions in binary form must reproduce the above
12+ copyright notice, this list of conditions and the following
13+ disclaimer in the documentation and/or other materials provided
14+ with the distribution.
15+
16+ * Neither the name of Servant Contributors nor the names of other
17+ contributors may be used to endorse or promote products derived
18+ from this software without specific prior written permission.
19+
20+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
21+"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
22+LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
23+A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
24+OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
25+SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
26+LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
27+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
28+THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
29+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
30+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
servant-client-core/README.mdnew file+30
@@ -0,0 +1,30 @@
1+# servant-client-core
2+
3+![servant](https://raw.githubusercontent.com/haskell-servant/servant/master/servant.png)
4+
5+HTTP-client-agnostic client functions for servant APIs.
6+
7+This library should mainly be of interest to backend- and combinator-writers.
8+
9+## For backend-writers
10+
11+If you are creating a new backend, you'll need to:
12+
13+1. Define a `RunClient` instance for your datatype (call it `MyMonad`)
14+2. Define a `ClientLike` instance. This will look like:
15+
16+``` haskell
17+instance ClientLike (MyMonad a) (MyMonad a) where
18+ mkClient = id
19+```
20+
21+3. Re-export the module Servant.Client.Core.Reexport so that your end-users
22+ can be blissfully unaware of 'servant-client-core', and so each
23+ backend-package comes closer to the warm hearth of the drop-in-replacement
24+ equivalence class.
25+
26+## For combinator-writers
27+
28+You'll need to define a new `HasClient` instance for your combinator. There are
29+plenty of examples to guide you in the
30+[HasClient](src/Servant/Client/Core/Internal/HasClient.hs) module.
servant-client-core/Setup.hsnew file+2
@@ -0,0 +1,2 @@
1+import Distribution.Simple
2+main = defaultMain
servant-client-core/servant-client-core.cabalnew file+111
@@ -0,0 +1,111 @@
1+cabal-version: 2.2
2+name: servant-client-core
3+version: 0.19
4+
5+synopsis: Core functionality and class for client function generation for servant APIs
6+category: Servant, Web
7+description:
8+ This library provides backend-agnostic generation of client functions. For
9+ more information, see the README.
10+
11+homepage: http://docs.servant.dev/
12+bug-reports: http://github.com/haskell-servant/servant/issues
13+license: BSD-3-Clause
14+license-file: LICENSE
15+author: Servant Contributors
16+maintainer: haskell-servant-maintainers@googlegroups.com
17+copyright: 2014-2016 Zalora South East Asia Pte Ltd, 2016-2019 Servant Contributors
18+build-type: Simple
19+tested-with: GHC ==8.6.5 || ==8.8.4 || ==8.10.2 || ==9.0.1
20+ , GHCJS ==8.6.0.1
21+
22+extra-source-files:
23+ CHANGELOG.md
24+ README.md
25+
26+source-repository head
27+ type: git
28+ location: http://github.com/haskell-servant/servant.git
29+
30+library
31+ exposed-modules:
32+ Servant.Client.Core
33+ Servant.Client.Free
34+ Servant.Client.Generic
35+ Servant.Client.Core.Reexport
36+ Servant.Client.Core.Auth
37+ Servant.Client.Core.BaseUrl
38+ Servant.Client.Core.BasicAuth
39+ Servant.Client.Core.ClientError
40+ Servant.Client.Core.HasClient
41+ Servant.Client.Core.Request
42+ Servant.Client.Core.Response
43+ Servant.Client.Core.RunClient
44+
45+ other-modules:
46+ Servant.Client.Core.Internal
47+
48+ -- Bundled with GHC: Lower bound to not force re-installs
49+ -- text and mtl are bundled starting with GHC-8.4
50+ --
51+ -- note: mtl lower bound is so low because of GHC-7.8
52+ build-depends:
53+ base >= 4.9 && < 4.17
54+ , bytestring >= 0.10.8.1 && < 0.12
55+ , constraints >= 0.2 && < 0.14
56+ , containers >= 0.5.7.1 && < 0.7
57+ , deepseq >= 1.4.2.0 && < 1.5
58+ , text >= 1.2.3.0 && < 2.1
59+ , transformers >= 0.5.2.0 && < 0.6
60+ , template-haskell >= 2.11.1.0 && < 2.19
61+
62+ if !impl(ghc >= 8.2)
63+ build-depends:
64+ bifunctors >= 5.5.3 && < 5.6
65+
66+ -- Servant dependencies
67+ build-depends:
68+ servant >= 0.19
69+
70+ -- Other dependencies: Lower bound around what is in the latest Stackage LTS.
71+ -- Here can be exceptions if we really need features from the newer versions.
72+ build-depends:
73+ aeson >= 1.4.1.0 && < 3
74+ , base-compat >= 0.10.5 && < 0.13
75+ , base64-bytestring >= 1.0.0.1 && < 1.3
76+ , exceptions >= 0.10.0 && < 0.11
77+ , free >= 5.1 && < 5.2
78+ , http-media >= 0.7.1.3 && < 0.9
79+ , http-types >= 0.12.2 && < 0.13
80+ , network-uri >= 2.6.1.0 && < 2.7
81+ , safe >= 0.3.17 && < 0.4
82+ , sop-core >= 0.4.0.0 && < 0.6
83+
84+ hs-source-dirs: src
85+ default-language: Haskell2010
86+ ghc-options: -Wall
87+
88+test-suite spec
89+ type: exitcode-stdio-1.0
90+ ghc-options: -Wall
91+ default-language: Haskell2010
92+ hs-source-dirs: test
93+ main-is: Spec.hs
94+ other-modules:
95+ Servant.Client.Core.Internal.BaseUrlSpec
96+ Servant.Client.Core.RequestSpec
97+
98+ -- Dependencies inherited from the library. No need to specify bounds.
99+ build-depends:
100+ base
101+ , base-compat
102+ , servant-client-core
103+
104+ -- Additional dependencies
105+ build-depends:
106+ deepseq >= 1.4.2.0 && < 1.5
107+ , hspec >= 2.6.0 && < 2.10
108+ , QuickCheck >= 2.12.6.1 && < 2.15
109+
110+ build-tool-depends:
111+ hspec-discover:hspec-discover >= 2.6.0 && <2.10
servant-client-core/src/Servant/Client/Core.hsnew file+73
@@ -0,0 +1,73 @@
1+-- | This module provides backend-agnostic functionality for generating clients
2+-- from @servant@ APIs. By "backend," we mean something that concretely
3+-- executes the request, such as:
4+--
5+-- * The @http-client@ library
6+-- * The @haxl@ library
7+-- * GHCJS via FFI
8+--
9+-- etc.
10+--
11+-- Each backend is encapsulated in a monad that is an instance of the
12+-- 'RunClient' class.
13+--
14+-- This library is primarily of interest to backend-writers and
15+-- combinator-writers. For more information, see the README.md
16+module Servant.Client.Core
17+ (
18+ -- * Client generation
19+ clientIn
20+ , HasClient(..)
21+ , foldMapUnion
22+ , matchUnion
23+
24+ -- * Request
25+ , Request
26+ , RequestF(..)
27+ , defaultRequest
28+ , RequestBody(..)
29+
30+ -- * Authentication
31+ , mkAuthenticatedRequest
32+ , basicAuthReq
33+ , AuthenticatedRequest(..)
34+ , AuthClientData
35+
36+ -- * Generic Client
37+ , ClientError(..)
38+ , EmptyClient(..)
39+
40+ -- * Response
41+ , Response
42+ , ResponseF (..)
43+ , RunClient(..)
44+ -- * BaseUrl
45+ , BaseUrl (..)
46+ , Scheme (..)
47+ , showBaseUrl
48+ , parseBaseUrl
49+ , InvalidBaseUrlException (..)
50+
51+ -- ** Streaming
52+ , RunStreamingClient(..)
53+ , StreamingResponse
54+
55+ -- * Writing HasClient instances
56+ -- | These functions need not be re-exported by backend libraries.
57+ , addHeader
58+ , appendToQueryString
59+ , appendToPath
60+ , setRequestBodyLBS
61+ , setRequestBody
62+ , encodeQueryParamValue
63+ ) where
64+import Servant.Client.Core.Auth
65+import Servant.Client.Core.BaseUrl
66+ (BaseUrl (..), InvalidBaseUrlException (..), Scheme (..),
67+ parseBaseUrl, showBaseUrl)
68+import Servant.Client.Core.BasicAuth
69+import Servant.Client.Core.ClientError
70+import Servant.Client.Core.HasClient
71+import Servant.Client.Core.Request
72+import Servant.Client.Core.Response
73+import Servant.Client.Core.RunClient
servant-client/src/Servant/Client/Experimental/Auth.hs → servant-client-core/src/Servant/Client/Core/Auth.hsrenamed+15−14
@@ -1,16 +1,17 @@
1−{-# LANGUAGE OverloadedStrings #-}
1+{-# LANGUAGE OverloadedStrings #-}
2+{-# LANGUAGE TypeFamilies #-}
23{-# LANGUAGE TypeSynonymInstances #-}
3−{-# LANGUAGE TypeFamilies #-}
44
55-- | Authentication for clients
66
7−module Servant.Client.Experimental.Auth (
8− AuthenticateReq(AuthenticateReq, unAuthReq)
9− , AuthClientData
10− , mkAuthenticateReq
11− ) where
7+module Servant.Client.Core.Auth (
8+ AuthClientData,
9+ AuthenticatedRequest (..),
10+ mkAuthenticatedRequest,
11+ ) where
1212
13−import Servant.Common.Req (Req)
13+import Servant.Client.Core.Request
14+ (Request)
1415
1516-- | For a resource protected by authentication (e.g. AuthProtect), we need
1617-- to provide the client with some data used to add authentication data
@@ -24,13 +25,13 @@ type family AuthClientData a :: *
2425-- data to a request
2526--
2627-- NOTE: THIS API IS EXPERIMENTAL AND SUBJECT TO CHANGE
27−newtype AuthenticateReq a =
28− AuthenticateReq { unAuthReq :: (AuthClientData a, AuthClientData a -> Req -> Req) }
28+newtype AuthenticatedRequest a =
29+ AuthenticatedRequest { unAuthReq :: (AuthClientData a, AuthClientData a -> Request -> Request) }
2930
3031-- | Handy helper to avoid wrapping datatypes in tuples everywhere.
3132--
3233-- NOTE: THIS API IS EXPERIMENTAL AND SUBJECT TO CHANGE
33−mkAuthenticateReq :: AuthClientData a
34− -> (AuthClientData a -> Req -> Req)
35− -> AuthenticateReq a
36−mkAuthenticateReq val func = AuthenticateReq (val, func)
34+mkAuthenticatedRequest :: AuthClientData a
35+ -> (AuthClientData a -> Request -> Request)
36+ -> AuthenticatedRequest a
37+mkAuthenticatedRequest val func = AuthenticatedRequest (val, func)
servant-client-core/src/Servant/Client/Core/BaseUrl.hsnew file+144
@@ -0,0 +1,144 @@
1+{-# LANGUAGE DeriveDataTypeable #-}
2+{-# LANGUAGE DeriveGeneric #-}
3+{-# LANGUAGE DeriveLift #-}
4+{-# LANGUAGE ViewPatterns #-}
5+module Servant.Client.Core.BaseUrl (
6+ BaseUrl (..),
7+ Scheme (..),
8+ showBaseUrl,
9+ parseBaseUrl,
10+ InvalidBaseUrlException (..),
11+ ) where
12+
13+import Control.DeepSeq
14+ (NFData (..))
15+import Control.Monad.Catch
16+ (Exception, MonadThrow, throwM)
17+import Data.Aeson
18+ (FromJSON (..), FromJSONKey (..), ToJSON (..), ToJSONKey (..))
19+import Data.Aeson.Types
20+ (FromJSONKeyFunction (..), contramapToJSONKeyFunction,
21+ withText)
22+import Data.Data
23+ (Data)
24+import Data.List
25+import qualified Data.Text as T
26+import GHC.Generics
27+import Language.Haskell.TH.Syntax
28+ (Lift)
29+import Network.URI hiding
30+ (path)
31+import Safe
32+import Text.Read
33+
34+-- | URI scheme to use
35+data Scheme =
36+ Http -- ^ http://
37+ | Https -- ^ https://
38+ deriving (Show, Eq, Ord, Generic, Lift, Data)
39+
40+-- | Simple data type to represent the target of HTTP requests
41+-- for servant's automatically-generated clients.
42+data BaseUrl = BaseUrl
43+ { baseUrlScheme :: Scheme -- ^ URI scheme to use
44+ , baseUrlHost :: String -- ^ host (eg "haskell.org")
45+ , baseUrlPort :: Int -- ^ port (eg 80)
46+ , baseUrlPath :: String -- ^ path (eg "/a/b/c")
47+ } deriving (Show, Ord, Generic, Lift, Data)
48+-- TODO: Ord is more precise than Eq
49+-- TODO: Add Hashable instance?
50+--
51+instance NFData BaseUrl where
52+ rnf (BaseUrl a b c d) = a `seq` rnf b `seq` rnf c `seq` rnf d
53+
54+instance Eq BaseUrl where
55+ BaseUrl a b c path == BaseUrl a' b' c' path'
56+ = a == a' && b == b' && c == c' && s path == s path'
57+ where s ('/':x) = x
58+ s x = x
59+
60+-- | >>> traverse_ (LBS8.putStrLn . encode) $ parseBaseUrl "api.example.com"
61+-- "http://api.example.com"
62+instance ToJSON BaseUrl where
63+ toJSON = toJSON . showBaseUrl
64+ toEncoding = toEncoding . showBaseUrl
65+
66+-- | >>> parseBaseUrl "api.example.com" >>= decode . encode :: Maybe BaseUrl
67+-- Just (BaseUrl {baseUrlScheme = Http, baseUrlHost = "api.example.com", baseUrlPort = 80, baseUrlPath = ""})
68+instance FromJSON BaseUrl where
69+ parseJSON = withText "BaseUrl" $ \t -> case parseBaseUrl (T.unpack t) of
70+ Just u -> return u
71+ Nothing -> fail $ "Invalid base url: " ++ T.unpack t
72+
73+-- | >>> :{
74+-- traverse_ (LBS8.putStrLn . encode) $ do
75+-- u1 <- parseBaseUrl "api.example.com"
76+-- u2 <- parseBaseUrl "example.com"
77+-- return $ Map.fromList [(u1, 'x'), (u2, 'y')]
78+-- :}
79+-- {"http://api.example.com":"x","http://example.com":"y"}
80+instance ToJSONKey BaseUrl where
81+ toJSONKey = contramapToJSONKeyFunction showBaseUrl toJSONKey
82+
83+instance FromJSONKey BaseUrl where
84+ fromJSONKey = FromJSONKeyTextParser $ \t -> case parseBaseUrl (T.unpack t) of
85+ Just u -> return u
86+ Nothing -> fail $ "Invalid base url: " ++ T.unpack t
87+
88+-- | >>> showBaseUrl <$> parseBaseUrl "api.example.com"
89+-- "http://api.example.com"
90+showBaseUrl :: BaseUrl -> String
91+showBaseUrl (BaseUrl urlscheme host port path) =
92+ schemeString ++ "//" ++ host ++ (portString </> path)
93+ where
94+ a </> b = if "/" `isPrefixOf` b || null b then a ++ b else a ++ '/':b
95+ schemeString = case urlscheme of
96+ Http -> "http:"
97+ Https -> "https:"
98+ portString = case (urlscheme, port) of
99+ (Http, 80) -> ""
100+ (Https, 443) -> ""
101+ _ -> ":" ++ show port
102+
103+newtype InvalidBaseUrlException = InvalidBaseUrlException String deriving (Show)
104+instance Exception InvalidBaseUrlException
105+
106+-- |
107+--
108+-- >>> parseBaseUrl "api.example.com"
109+-- BaseUrl {baseUrlScheme = Http, baseUrlHost = "api.example.com", baseUrlPort = 80, baseUrlPath = ""}
110+--
111+-- /Note:/ trailing slash is removed
112+--
113+-- >>> parseBaseUrl "api.example.com/"
114+-- BaseUrl {baseUrlScheme = Http, baseUrlHost = "api.example.com", baseUrlPort = 80, baseUrlPath = ""}
115+--
116+-- >>> parseBaseUrl "api.example.com/dir/"
117+-- BaseUrl {baseUrlScheme = Http, baseUrlHost = "api.example.com", baseUrlPort = 80, baseUrlPath = "/dir"}
118+--
119+parseBaseUrl :: MonadThrow m => String -> m BaseUrl
120+parseBaseUrl s = case parseURI (removeTrailingSlash s) of
121+ -- This is a rather hacky implementation and should be replaced with something
122+ -- implemented in attoparsec (which is already a dependency anyhow (via aeson)).
123+ Just (URI "http:" (Just (URIAuth "" host (':' : (readMaybe -> Just port)))) path "" "") ->
124+ return (BaseUrl Http host port path)
125+ Just (URI "http:" (Just (URIAuth "" host "")) path "" "") ->
126+ return (BaseUrl Http host 80 path)
127+ Just (URI "https:" (Just (URIAuth "" host (':' : (readMaybe -> Just port)))) path "" "") ->
128+ return (BaseUrl Https host port path)
129+ Just (URI "https:" (Just (URIAuth "" host "")) path "" "") ->
130+ return (BaseUrl Https host 443 path)
131+ _ -> if "://" `isInfixOf` s
132+ then throwM (InvalidBaseUrlException $ "Invalid base URL: " ++ s)
133+ else parseBaseUrl ("http://" ++ s)
134+ where
135+ removeTrailingSlash str = case lastMay str of
136+ Just '/' -> init str
137+ _ -> str
138+
139+-- $setup
140+--
141+-- >>> import Data.Aeson
142+-- >>> import Data.Foldable (traverse_)
143+-- >>> import qualified Data.ByteString.Lazy.Char8 as LBS8
144+-- >>> import qualified Data.Map.Strict as Map
servant-client-core/src/Servant/Client/Core/BasicAuth.hsnew file+23
@@ -0,0 +1,23 @@
1+{-# LANGUAGE OverloadedStrings #-}
2+{-# LANGUAGE TypeFamilies #-}
3+{-# LANGUAGE TypeSynonymInstances #-}
4+
5+-- | Basic Authentication for clients
6+module Servant.Client.Core.BasicAuth (
7+ basicAuthReq,
8+ ) where
9+
10+import Data.ByteString.Base64
11+ (encode)
12+import Data.Text.Encoding
13+ (decodeUtf8)
14+import Servant.API.BasicAuth
15+ (BasicAuthData (BasicAuthData))
16+import Servant.Client.Core.Request
17+ (Request, addHeader)
18+
19+-- | Authenticate a request using Basic Authentication
20+basicAuthReq :: BasicAuthData -> Request -> Request
21+basicAuthReq (BasicAuthData user pass) req =
22+ let authText = decodeUtf8 ("Basic " <> encode (user <> ":" <> pass))
23+ in addHeader "Authorization" authText req
servant-client-core/src/Servant/Client/Core/ClientError.hsnew file+86
@@ -0,0 +1,86 @@
1+{-# LANGUAGE DeriveDataTypeable #-}
2+{-# LANGUAGE DeriveFoldable #-}
3+{-# LANGUAGE DeriveFunctor #-}
4+{-# LANGUAGE DeriveGeneric #-}
5+{-# LANGUAGE DeriveTraversable #-}
6+{-# LANGUAGE MultiParamTypeClasses #-}
7+{-# LANGUAGE OverloadedStrings #-}
8+{-# LANGUAGE RankNTypes #-}
9+{-# LANGUAGE ScopedTypeVariables #-}
10+{-# LANGUAGE TypeFamilies #-}
11+module Servant.Client.Core.ClientError (
12+ ClientError (..),
13+ ) where
14+
15+import Prelude ()
16+import Prelude.Compat
17+
18+import Control.DeepSeq
19+ (NFData (..))
20+import Control.Exception
21+ (SomeException (..))
22+import Control.Monad.Catch
23+ (Exception)
24+import qualified Data.ByteString as BS
25+import Data.Text
26+ (Text)
27+import Data.Typeable
28+ (Typeable, typeOf)
29+import GHC.Generics
30+ (Generic)
31+import Network.HTTP.Media
32+ (MediaType)
33+import Network.HTTP.Types ()
34+
35+import Servant.Client.Core.BaseUrl
36+import Servant.Client.Core.Internal
37+ (mediaTypeRnf)
38+import Servant.Client.Core.Request
39+import Servant.Client.Core.Response
40+
41+
42+-- | A type representing possible errors in a request
43+--
44+-- Note that this type substantially changed in 0.12.
45+data ClientError =
46+ -- | The server returned an error response including the
47+ -- failing request. 'requestPath' includes the 'BaseUrl' and the
48+ -- path of the request.
49+ FailureResponse (RequestF () (BaseUrl, BS.ByteString)) Response
50+ -- | The body could not be decoded at the expected type
51+ | DecodeFailure Text Response
52+ -- | The content-type of the response is not supported
53+ | UnsupportedContentType MediaType Response
54+ -- | The content-type header is invalid
55+ | InvalidContentTypeHeader Response
56+ -- | There was a connection error, and no response was received
57+ | ConnectionError SomeException
58+ deriving (Show, Generic, Typeable)
59+
60+instance Eq ClientError where
61+ FailureResponse req res == FailureResponse req' res' = req == req' && res == res'
62+ DecodeFailure t r == DecodeFailure t' r' = t == t' && r == r'
63+ UnsupportedContentType mt r == UnsupportedContentType mt' r' = mt == mt' && r == r'
64+ InvalidContentTypeHeader r == InvalidContentTypeHeader r' = r == r'
65+ ConnectionError exc == ConnectionError exc' = eqSomeException exc exc'
66+ where
67+ -- returns true, if type of exception is the same
68+ eqSomeException (SomeException a) (SomeException b) = typeOf a == typeOf b
69+
70+ -- prevent wild card blindness
71+ FailureResponse {} == _ = False
72+ DecodeFailure {} == _ = False
73+ UnsupportedContentType {} == _ = False
74+ InvalidContentTypeHeader {} == _ = False
75+ ConnectionError {} == _ = False
76+
77+instance Exception ClientError
78+
79+-- | Note: an exception in 'ConnectionError' might not be evaluated fully,
80+-- We only 'rnf' its 'show'ed value.
81+instance NFData ClientError where
82+ rnf (FailureResponse req res) = rnf req `seq` rnf res
83+ rnf (DecodeFailure err res) = rnf err `seq` rnf res
84+ rnf (UnsupportedContentType mt' res) = mediaTypeRnf mt' `seq` rnf res
85+ rnf (InvalidContentTypeHeader res) = rnf res
86+ rnf (ConnectionError err) = err `seq` rnf (show err)
servant-client-core/src/Servant/Client/Core/HasClient.hsnew file+993
@@ -0,0 +1,993 @@
1+{-# LANGUAGE ConstraintKinds #-}
2+{-# LANGUAGE DataKinds #-}
3+{-# LANGUAGE FlexibleContexts #-}
4+{-# LANGUAGE FlexibleInstances #-}
5+{-# LANGUAGE InstanceSigs #-}
6+{-# LANGUAGE MultiParamTypeClasses #-}
7+{-# LANGUAGE OverloadedStrings #-}
8+{-# LANGUAGE PolyKinds #-}
9+{-# LANGUAGE QuantifiedConstraints #-}
10+{-# LANGUAGE RankNTypes #-}
11+{-# LANGUAGE ScopedTypeVariables #-}
12+{-# LANGUAGE TypeApplications #-}
13+{-# LANGUAGE TypeFamilies #-}
14+{-# LANGUAGE TypeOperators #-}
15+{-# LANGUAGE UndecidableInstances #-}
16+
17+module Servant.Client.Core.HasClient (
18+ clientIn,
19+ HasClient (..),
20+ EmptyClient (..),
21+ AsClientT,
22+ (//),
23+ (/:),
24+ foldMapUnion,
25+ matchUnion,
26+ ) where
27+
28+import Prelude ()
29+import Prelude.Compat
30+
31+import Control.Arrow
32+ (left, (+++))
33+import Control.Monad
34+ (unless)
35+import qualified Data.ByteString as BS
36+import qualified Data.ByteString.Lazy as BL
37+import Data.Either
38+ (partitionEithers)
39+import Data.Constraint (Dict(..))
40+import Data.Foldable
41+ (toList)
42+import Data.List
43+ (foldl')
44+import Data.Sequence
45+ (fromList)
46+import qualified Data.Text as T
47+import Network.HTTP.Media
48+ (MediaType, matches, parseAccept)
49+import qualified Network.HTTP.Media as Media
50+import qualified Data.Sequence as Seq
51+import Data.SOP.BasicFunctors
52+ (I (I), (:.:) (Comp))
53+import Data.SOP.Constraint
54+ (All)
55+import Data.SOP.NP
56+ (NP (..), cpure_NP)
57+import Data.SOP.NS
58+ (NS (S))
59+import Data.String
60+ (fromString)
61+import Data.Text
62+ (Text, pack)
63+import Data.Proxy
64+ (Proxy (Proxy))
65+import GHC.TypeLits
66+ (KnownNat, KnownSymbol, TypeError, symbolVal)
67+import Network.HTTP.Types
68+ (Status)
69+import qualified Network.HTTP.Types as H
70+import Servant.API
71+ ((:<|>) ((:<|>)), (:>), AuthProtect, BasicAuth, BasicAuthData,
72+ BuildHeadersTo (..), Capture', CaptureAll, Description,
73+ EmptyAPI, Fragment, FramingRender (..), FramingUnrender (..),
74+ FromSourceIO (..), Header', Headers (..), HttpVersion,
75+ IsSecure, MimeRender (mimeRender),
76+ MimeUnrender (mimeUnrender), NoContent (NoContent),
77+ NoContentVerb, QueryFlag, QueryParam', QueryParams, Raw,
78+ ReflectMethod (..), RemoteHost, ReqBody', SBoolI, Stream,
79+ StreamBody', Summary, ToHttpApiData, ToSourceIO (..), Vault,
80+ Verb, WithNamedContext, WithStatus (..), contentType, getHeadersHList,
81+ getResponse, toEncodedUrlPiece, toUrlPiece, NamedRoutes)
82+import Servant.API.Generic
83+ (GenericMode(..), ToServant, ToServantApi
84+ , GenericServant, toServant, fromServant)
85+import Servant.API.ContentTypes
86+ (contentTypes, AllMime (allMime), AllMimeUnrender (allMimeUnrender))
87+import Servant.API.Status
88+ (statusFromNat)
89+import Servant.API.TypeLevel (FragmentUnique, AtLeastOneFragment)
90+import Servant.API.Modifiers
91+ (FoldRequired, RequiredArgument, foldRequiredArgument)
92+import Servant.API.TypeErrors
93+import Servant.API.UVerb
94+ (HasStatus, HasStatuses (Statuses, statuses), UVerb, Union, Unique, inject, statusOf, foldMapUnion, matchUnion)
95+
96+import Servant.Client.Core.Auth
97+import Servant.Client.Core.BasicAuth
98+import Servant.Client.Core.ClientError
99+import Servant.Client.Core.Request
100+import Servant.Client.Core.Response
101+import Servant.Client.Core.RunClient
102+
103+-- * Accessing APIs as a Client
104+
105+-- | 'clientIn' allows you to produce operations to query an API from a client
106+-- within a 'RunClient' monad.
107+--
108+-- > type MyApi = "books" :> Get '[JSON] [Book] -- GET /books
109+-- > :<|> "books" :> ReqBody '[JSON] Book :> Post '[JSON] Book -- POST /books
110+-- >
111+-- > myApi :: Proxy MyApi
112+-- > myApi = Proxy
113+-- >
114+-- > clientM :: Proxy ClientM
115+-- > clientM = Proxy
116+-- >
117+-- > getAllBooks :: ClientM [Book]
118+-- > postNewBook :: Book -> ClientM Book
119+-- > (getAllBooks :<|> postNewBook) = myApi `clientIn` clientM
120+clientIn :: HasClient m api => Proxy api -> Proxy m -> Client m api
121+clientIn p pm = clientWithRoute pm p defaultRequest
122+
123+
124+-- | This class lets us define how each API combinator influences the creation
125+-- of an HTTP request.
126+--
127+-- Unless you are writing a new backend for @servant-client-core@ or new
128+-- combinators that you want to support client-generation, you can ignore this
129+-- class.
130+class RunClient m => HasClient m api where
131+ type Client (m :: * -> *) (api :: *) :: *
132+ clientWithRoute :: Proxy m -> Proxy api -> Request -> Client m api
133+ hoistClientMonad
134+ :: Proxy m
135+ -> Proxy api
136+ -> (forall x. mon x -> mon' x)
137+ -> Client mon api
138+ -> Client mon' api
139+
140+
141+-- | A client querying function for @a ':<|>' b@ will actually hand you
142+-- one function for querying @a@ and another one for querying @b@,
143+-- stitching them together with ':<|>', which really is just like a pair.
144+--
145+-- > type MyApi = "books" :> Get '[JSON] [Book] -- GET /books
146+-- > :<|> "books" :> ReqBody '[JSON] Book :> Post Book -- POST /books
147+-- >
148+-- > myApi :: Proxy MyApi
149+-- > myApi = Proxy
150+-- >
151+-- > getAllBooks :: ClientM [Book]
152+-- > postNewBook :: Book -> ClientM Book
153+-- > (getAllBooks :<|> postNewBook) = client myApi
154+instance (HasClient m a, HasClient m b) => HasClient m (a :<|> b) where
155+ type Client m (a :<|> b) = Client m a :<|> Client m b
156+ clientWithRoute pm Proxy req =
157+ clientWithRoute pm (Proxy :: Proxy a) req :<|>
158+ clientWithRoute pm (Proxy :: Proxy b) req
159+
160+ hoistClientMonad pm _ f (ca :<|> cb) =
161+ hoistClientMonad pm (Proxy :: Proxy a) f ca :<|>
162+ hoistClientMonad pm (Proxy :: Proxy b) f cb
163+
164+-- | Singleton type representing a client for an empty API.
165+data EmptyClient = EmptyClient deriving (Eq, Show, Bounded, Enum)
166+
167+-- | The client for 'EmptyAPI' is simply 'EmptyClient'.
168+--
169+-- > type MyAPI = "books" :> Get '[JSON] [Book] -- GET /books
170+-- > :<|> "nothing" :> EmptyAPI
171+-- >
172+-- > myApi :: Proxy MyApi
173+-- > myApi = Proxy
174+-- >
175+-- > getAllBooks :: ClientM [Book]
176+-- > (getAllBooks :<|> EmptyClient) = client myApi
177+instance RunClient m => HasClient m EmptyAPI where
178+ type Client m EmptyAPI = EmptyClient
179+ clientWithRoute _pm Proxy _ = EmptyClient
180+ hoistClientMonad _ _ _ EmptyClient = EmptyClient
181+
182+-- | If you use a 'Capture' in one of your endpoints in your API,
183+-- the corresponding querying function will automatically take
184+-- an additional argument of the type specified by your 'Capture'.
185+-- That function will take care of inserting a textual representation
186+-- of this value at the right place in the request path.
187+--
188+-- You can control how values for this type are turned into
189+-- text by specifying a 'ToHttpApiData' instance for your type.
190+--
191+-- Example:
192+--
193+-- > type MyApi = "books" :> Capture "isbn" Text :> Get '[JSON] Book
194+-- >
195+-- > myApi :: Proxy MyApi
196+-- > myApi = Proxy
197+-- >
198+-- > getBook :: Text -> ClientM Book
199+-- > getBook = client myApi
200+-- > -- then you can just use "getBook" to query that endpoint
201+instance (KnownSymbol capture, ToHttpApiData a, HasClient m api)
202+ => HasClient m (Capture' mods capture a :> api) where
203+
204+ type Client m (Capture' mods capture a :> api) =
205+ a -> Client m api
206+
207+ clientWithRoute pm Proxy req val =
208+ clientWithRoute pm (Proxy :: Proxy api)
209+ (appendToPath p req)
210+
211+ where p = toEncodedUrlPiece val
212+
213+ hoistClientMonad pm _ f cl = \a ->
214+ hoistClientMonad pm (Proxy :: Proxy api) f (cl a)
215+
216+-- | If you use a 'CaptureAll' in one of your endpoints in your API,
217+-- the corresponding querying function will automatically take an
218+-- additional argument of a list of the type specified by your
219+-- 'CaptureAll'. That function will take care of inserting a textual
220+-- representation of this value at the right place in the request
221+-- path.
222+--
223+-- You can control how these values are turned into text by specifying
224+-- a 'ToHttpApiData' instance of your type.
225+--
226+-- Example:
227+--
228+-- > type MyAPI = "src" :> CaptureAll Text -> Get '[JSON] SourceFile
229+-- >
230+-- > myApi :: Proxy
231+-- > myApi = Proxy
232+--
233+-- > getSourceFile :: [Text] -> ClientM SourceFile
234+-- > getSourceFile = client myApi
235+-- > -- then you can use "getSourceFile" to query that endpoint
236+instance (KnownSymbol capture, ToHttpApiData a, HasClient m sublayout)
237+ => HasClient m (CaptureAll capture a :> sublayout) where
238+
239+ type Client m (CaptureAll capture a :> sublayout) =
240+ [a] -> Client m sublayout
241+
242+ clientWithRoute pm Proxy req vals =
243+ clientWithRoute pm (Proxy :: Proxy sublayout)
244+ (foldl' (flip appendToPath) req ps)
245+
246+ where ps = map toEncodedUrlPiece vals
247+
248+ hoistClientMonad pm _ f cl = \as ->
249+ hoistClientMonad pm (Proxy :: Proxy sublayout) f (cl as)
250+
251+instance {-# OVERLAPPABLE #-}
252+ -- Note [Non-Empty Content Types]
253+ ( RunClient m, MimeUnrender ct a, ReflectMethod method, cts' ~ (ct ': cts)
254+ , KnownNat status
255+ ) => HasClient m (Verb method status cts' a) where
256+ type Client m (Verb method status cts' a) = m a
257+ clientWithRoute _pm Proxy req = do
258+ response <- runRequestAcceptStatus (Just [status]) req
259+ { requestAccept = fromList $ toList accept
260+ , requestMethod = method
261+ }
262+ response `decodedAs` (Proxy :: Proxy ct)
263+ where
264+ accept = contentTypes (Proxy :: Proxy ct)
265+ method = reflectMethod (Proxy :: Proxy method)
266+ status = statusFromNat (Proxy :: Proxy status)
267+
268+ hoistClientMonad _ _ f ma = f ma
269+
270+instance {-# OVERLAPPING #-}
271+ ( RunClient m, ReflectMethod method, KnownNat status
272+ ) => HasClient m (Verb method status cts NoContent) where
273+ type Client m (Verb method status cts NoContent)
274+ = m NoContent
275+ clientWithRoute _pm Proxy req = do
276+ _response <- runRequestAcceptStatus (Just [status]) req { requestMethod = method }
277+ return NoContent
278+ where method = reflectMethod (Proxy :: Proxy method)
279+ status = statusFromNat (Proxy :: Proxy status)
280+
281+ hoistClientMonad _ _ f ma = f ma
282+
283+instance (RunClient m, ReflectMethod method) =>
284+ HasClient m (NoContentVerb method) where
285+ type Client m (NoContentVerb method)
286+ = m NoContent
287+ clientWithRoute _pm Proxy req = do
288+ _response <- runRequest req { requestMethod = method }
289+ return NoContent
290+ where method = reflectMethod (Proxy :: Proxy method)
291+
292+ hoistClientMonad _ _ f ma = f ma
293+
294+instance {-# OVERLAPPING #-}
295+ -- Note [Non-Empty Content Types]
296+ ( RunClient m, MimeUnrender ct a, BuildHeadersTo ls, KnownNat status
297+ , ReflectMethod method, cts' ~ (ct ': cts)
298+ ) => HasClient m (Verb method status cts' (Headers ls a)) where
299+ type Client m (Verb method status cts' (Headers ls a))
300+ = m (Headers ls a)
301+ clientWithRoute _pm Proxy req = do
302+ response <- runRequestAcceptStatus (Just [status]) req
303+ { requestMethod = method
304+ , requestAccept = fromList $ toList accept
305+ }
306+ val <- response `decodedAs` (Proxy :: Proxy ct)
307+ return $ Headers { getResponse = val
308+ , getHeadersHList = buildHeadersTo . toList $ responseHeaders response
309+ }
310+ where
311+ method = reflectMethod (Proxy :: Proxy method)
312+ accept = contentTypes (Proxy :: Proxy ct)
313+ status = statusFromNat (Proxy :: Proxy status)
314+
315+ hoistClientMonad _ _ f ma = f ma
316+
317+instance {-# OVERLAPPING #-}
318+ ( RunClient m, BuildHeadersTo ls, ReflectMethod method, KnownNat status
319+ ) => HasClient m (Verb method status cts (Headers ls NoContent)) where
320+ type Client m (Verb method status cts (Headers ls NoContent))
321+ = m (Headers ls NoContent)
322+ clientWithRoute _pm Proxy req = do
323+ response <- runRequestAcceptStatus (Just [status]) req { requestMethod = method }
324+ return $ Headers { getResponse = NoContent
325+ , getHeadersHList = buildHeadersTo . toList $ responseHeaders response
326+ }
327+ where
328+ method = reflectMethod (Proxy :: Proxy method)
329+ status = statusFromNat (Proxy :: Proxy status)
330+
331+ hoistClientMonad _ _ f ma = f ma
332+
333+data ClientParseError = ClientParseError MediaType String | ClientStatusMismatch | ClientNoMatchingStatus
334+ deriving (Eq, Show)
335+
336+class UnrenderResponse (cts :: [*]) (a :: *) where
337+ unrenderResponse :: Seq.Seq H.Header -> BL.ByteString -> Proxy cts
338+ -> [Either (MediaType, String) a]
339+
340+instance {-# OVERLAPPABLE #-} AllMimeUnrender cts a => UnrenderResponse cts a where
341+ unrenderResponse _ body = map parse . allMimeUnrender
342+ where parse (mediaType, parser) = left ((,) mediaType) (parser body)
343+
344+instance {-# OVERLAPPING #-} forall cts a h . (UnrenderResponse cts a, BuildHeadersTo h)
345+ => UnrenderResponse cts (Headers h a) where
346+ unrenderResponse hs body = (map . fmap) setHeaders . unrenderResponse hs body
347+ where
348+ setHeaders :: a -> Headers h a
349+ setHeaders x = Headers x (buildHeadersTo (toList hs))
350+
351+instance {-# OVERLAPPING #-} UnrenderResponse cts a
352+ => UnrenderResponse cts (WithStatus n a) where
353+ unrenderResponse hs body = (map . fmap) WithStatus . unrenderResponse hs body
354+
355+instance {-# OVERLAPPING #-}
356+ ( RunClient m,
357+ contentTypes ~ (contentType ': otherContentTypes),
358+ -- ('otherContentTypes' should be '_', but even -XPartialTypeSignatures does not seem
359+ -- allow this in instance types as of 8.8.3.)
360+ as ~ (a ': as'),
361+ AllMime contentTypes,
362+ ReflectMethod method,
363+ All (UnrenderResponse contentTypes) as,
364+ All HasStatus as, HasStatuses as',
365+ Unique (Statuses as)
366+ ) =>
367+ HasClient m (UVerb method contentTypes as)
368+ where
369+ type Client m (UVerb method contentTypes as) = m (Union as)
370+
371+ clientWithRoute _ _ request = do
372+ let accept = Seq.fromList . allMime $ Proxy @contentTypes
373+ -- offering to accept all mime types listed in the api gives best compatibility. eg.,
374+ -- we might not own the server implementation, and the server may choose to support
375+ -- only part of the api.
376+
377+ method = reflectMethod $ Proxy @method
378+ acceptStatus = statuses (Proxy @as)
379+ response <- runRequestAcceptStatus (Just acceptStatus) request {requestMethod = method, requestAccept = accept}
380+ responseContentType <- checkContentTypeHeader response
381+ unless (any (matches responseContentType) accept) $ do
382+ throwClientError $ UnsupportedContentType responseContentType response
383+
384+ let status = responseStatusCode response
385+ body = responseBody response
386+ headers = responseHeaders response
387+ res = tryParsers status $ mimeUnrenders (Proxy @contentTypes) headers body
388+ case res of
389+ Left errors -> throwClientError $ DecodeFailure (T.pack (show errors)) response
390+ Right x -> return x
391+ where
392+ -- | Given a list of parsers of 'mkres', returns the first one that succeeds and all the
393+ -- failures it encountered along the way
394+ -- TODO; better name, rewrite haddocs.
395+ tryParsers :: forall xs. All HasStatus xs => Status -> NP ([] :.: Either (MediaType, String)) xs -> Either [ClientParseError] (Union xs)
396+ tryParsers _ Nil = Left [ClientNoMatchingStatus]
397+ tryParsers status (Comp x :* xs)
398+ | status == statusOf (Comp x) =
399+ case partitionEithers x of
400+ (err', []) -> (map (uncurry ClientParseError) err' ++) +++ S $ tryParsers status xs
401+ (_, (res : _)) -> Right . inject . I $ res
402+ | otherwise = -- no reason to parse in the first place. This ain't the one we're looking for
403+ (ClientStatusMismatch :) +++ S $ tryParsers status xs
404+
405+ -- | Given a list of types, parses the given response body as each type
406+ mimeUnrenders ::
407+ forall cts xs.
408+ All (UnrenderResponse cts) xs =>
409+ Proxy cts ->
410+ Seq.Seq H.Header ->
411+ BL.ByteString ->
412+ NP ([] :.: Either (MediaType, String)) xs
413+ mimeUnrenders ctp headers body = cpure_NP
414+ (Proxy @(UnrenderResponse cts))
415+ (Comp . unrenderResponse headers body $ ctp)
416+
417+ hoistClientMonad _ _ nt s = nt s
418+
419+instance {-# OVERLAPPABLE #-}
420+ ( RunStreamingClient m, MimeUnrender ct chunk, ReflectMethod method,
421+ FramingUnrender framing, FromSourceIO chunk a
422+ ) => HasClient m (Stream method status framing ct a) where
423+
424+ type Client m (Stream method status framing ct a) = m a
425+
426+ hoistClientMonad _ _ f ma = f ma
427+
428+ clientWithRoute _pm Proxy req = withStreamingRequest req' $ \gres -> do
429+ let mimeUnrender' = mimeUnrender (Proxy :: Proxy ct) :: BL.ByteString -> Either String chunk
430+ framingUnrender' = framingUnrender (Proxy :: Proxy framing) mimeUnrender'
431+ return $ fromSourceIO $ framingUnrender' $ responseBody gres
432+ where
433+ req' = req
434+ { requestAccept = fromList [contentType (Proxy :: Proxy ct)]
435+ , requestMethod = reflectMethod (Proxy :: Proxy method)
436+ }
437+
438+instance {-# OVERLAPPING #-}
439+ ( RunStreamingClient m, MimeUnrender ct chunk, ReflectMethod method,
440+ FramingUnrender framing, FromSourceIO chunk a,
441+ BuildHeadersTo hs
442+ ) => HasClient m (Stream method status framing ct (Headers hs a)) where
443+
444+ type Client m (Stream method status framing ct (Headers hs a)) = m (Headers hs a)
445+
446+ hoistClientMonad _ _ f ma = f ma
447+
448+ clientWithRoute _pm Proxy req = withStreamingRequest req' $ \gres -> do
449+ let mimeUnrender' = mimeUnrender (Proxy :: Proxy ct) :: BL.ByteString -> Either String chunk
450+ framingUnrender' = framingUnrender (Proxy :: Proxy framing) mimeUnrender'
451+ val = fromSourceIO $ framingUnrender' $ responseBody gres
452+ return $ Headers
453+ { getResponse = val
454+ , getHeadersHList = buildHeadersTo . toList $ responseHeaders gres
455+ }
456+
457+ where
458+ req' = req
459+ { requestAccept = fromList [contentType (Proxy :: Proxy ct)]
460+ , requestMethod = reflectMethod (Proxy :: Proxy method)
461+ }
462+
463+-- | If you use a 'Header' in one of your endpoints in your API,
464+-- the corresponding querying function will automatically take
465+-- an additional argument of the type specified by your 'Header',
466+-- wrapped in Maybe.
467+--
468+-- That function will take care of encoding this argument as Text
469+-- in the request headers.
470+--
471+-- All you need is for your type to have a 'ToHttpApiData' instance.
472+--
473+-- Example:
474+--
475+-- > newtype Referer = Referer { referrer :: Text }
476+-- > deriving (Eq, Show, Generic, ToHttpApiData)
477+-- >
478+-- > -- GET /view-my-referer
479+-- > type MyApi = "view-my-referer" :> Header "Referer" Referer :> Get '[JSON] Referer
480+-- >
481+-- > myApi :: Proxy MyApi
482+-- > myApi = Proxy
483+-- >
484+-- > viewReferer :: Maybe Referer -> ClientM Book
485+-- > viewReferer = client myApi
486+-- > -- then you can just use "viewRefer" to query that endpoint
487+-- > -- specifying Nothing or e.g Just "http://haskell.org/" as arguments
488+instance (KnownSymbol sym, ToHttpApiData a, HasClient m api, SBoolI (FoldRequired mods))
489+ => HasClient m (Header' mods sym a :> api) where
490+
491+ type Client m (Header' mods sym a :> api) =
492+ RequiredArgument mods a -> Client m api
493+
494+ clientWithRoute pm Proxy req mval =
495+ clientWithRoute pm (Proxy :: Proxy api) $ foldRequiredArgument
496+ (Proxy :: Proxy mods) add (maybe req add) mval
497+ where
498+ hname = fromString $ symbolVal (Proxy :: Proxy sym)
499+
500+ add :: a -> Request
501+ add value = addHeader hname value req
502+
503+ hoistClientMonad pm _ f cl = \arg ->
504+ hoistClientMonad pm (Proxy :: Proxy api) f (cl arg)
505+
506+-- | Using a 'HttpVersion' combinator in your API doesn't affect the client
507+-- functions.
508+instance HasClient m api
509+ => HasClient m (HttpVersion :> api) where
510+
511+ type Client m (HttpVersion :> api) =
512+ Client m api
513+
514+ clientWithRoute pm Proxy =
515+ clientWithRoute pm (Proxy :: Proxy api)
516+
517+ hoistClientMonad pm _ f cl = hoistClientMonad pm (Proxy :: Proxy api) f cl
518+
519+-- | Ignore @'Summary'@ in client functions.
520+instance HasClient m api => HasClient m (Summary desc :> api) where
521+ type Client m (Summary desc :> api) = Client m api
522+
523+ clientWithRoute pm _ = clientWithRoute pm (Proxy :: Proxy api)
524+
525+ hoistClientMonad pm _ f cl = hoistClientMonad pm (Proxy :: Proxy api) f cl
526+
527+-- | Ignore @'Description'@ in client functions.
528+instance HasClient m api => HasClient m (Description desc :> api) where
529+ type Client m (Description desc :> api) = Client m api
530+
531+ clientWithRoute pm _ = clientWithRoute pm (Proxy :: Proxy api)
532+
533+ hoistClientMonad pm _ f cl = hoistClientMonad pm (Proxy :: Proxy api) f cl
534+
535+-- | If you use a 'QueryParam' in one of your endpoints in your API,
536+-- the corresponding querying function will automatically take
537+-- an additional argument of the type specified by your 'QueryParam',
538+-- enclosed in Maybe.
539+--
540+-- If you give Nothing, nothing will be added to the query string.
541+--
542+-- If you give a non-'Nothing' value, this function will take care
543+-- of inserting a textual representation of this value in the query string.
544+--
545+-- You can control how values for your type are turned into
546+-- text by specifying a 'ToHttpApiData' instance for your type.
547+--
548+-- Example:
549+--
550+-- > type MyApi = "books" :> QueryParam "author" Text :> Get '[JSON] [Book]
551+-- >
552+-- > myApi :: Proxy MyApi
553+-- > myApi = Proxy
554+-- >
555+-- > getBooksBy :: Maybe Text -> ClientM [Book]
556+-- > getBooksBy = client myApi
557+-- > -- then you can just use "getBooksBy" to query that endpoint.
558+-- > -- 'getBooksBy Nothing' for all books
559+-- > -- 'getBooksBy (Just "Isaac Asimov")' to get all books by Isaac Asimov
560+instance (KnownSymbol sym, ToHttpApiData a, HasClient m api, SBoolI (FoldRequired mods))
561+ => HasClient m (QueryParam' mods sym a :> api) where
562+
563+ type Client m (QueryParam' mods sym a :> api) =
564+ RequiredArgument mods a -> Client m api
565+
566+ -- if mparam = Nothing, we don't add it to the query string
567+ clientWithRoute pm Proxy req mparam =
568+ clientWithRoute pm (Proxy :: Proxy api) $ foldRequiredArgument
569+ (Proxy :: Proxy mods) add (maybe req add) mparam
570+ where
571+ add :: a -> Request
572+ add param = appendToQueryString pname (Just $ encodeQueryParamValue param) req
573+
574+ pname :: Text
575+ pname = pack $ symbolVal (Proxy :: Proxy sym)
576+
577+ hoistClientMonad pm _ f cl = \arg ->
578+ hoistClientMonad pm (Proxy :: Proxy api) f (cl arg)
579+
580+-- | If you use a 'QueryParams' in one of your endpoints in your API,
581+-- the corresponding querying function will automatically take
582+-- an additional argument, a list of values of the type specified
583+-- by your 'QueryParams'.
584+--
585+-- If you give an empty list, nothing will be added to the query string.
586+--
587+-- Otherwise, this function will take care
588+-- of inserting a textual representation of your values in the query string,
589+-- under the same query string parameter name.
590+--
591+-- You can control how values for your type are turned into
592+-- text by specifying a 'ToHttpApiData' instance for your type.
593+--
594+-- Example:
595+--
596+-- > type MyApi = "books" :> QueryParams "authors" Text :> Get '[JSON] [Book]
597+-- >
598+-- > myApi :: Proxy MyApi
599+-- > myApi = Proxy
600+-- >
601+-- > getBooksBy :: [Text] -> ClientM [Book]
602+-- > getBooksBy = client myApi
603+-- > -- then you can just use "getBooksBy" to query that endpoint.
604+-- > -- 'getBooksBy []' for all books
605+-- > -- 'getBooksBy ["Isaac Asimov", "Robert A. Heinlein"]'
606+-- > -- to get all books by Asimov and Heinlein
607+instance (KnownSymbol sym, ToHttpApiData a, HasClient m api)
608+ => HasClient m (QueryParams sym a :> api) where
609+
610+ type Client m (QueryParams sym a :> api) =
611+ [a] -> Client m api
612+
613+ clientWithRoute pm Proxy req paramlist =
614+ clientWithRoute pm (Proxy :: Proxy api)
615+ (foldl' (\ req' -> maybe req' (flip (appendToQueryString pname) req' . Just))
616+ req
617+ paramlist'
618+ )
619+
620+ where pname = pack $ symbolVal (Proxy :: Proxy sym)
621+ paramlist' = map (Just . encodeQueryParamValue) paramlist
622+
623+ hoistClientMonad pm _ f cl = \as ->
624+ hoistClientMonad pm (Proxy :: Proxy api) f (cl as)
625+
626+-- | If you use a 'QueryFlag' in one of your endpoints in your API,
627+-- the corresponding querying function will automatically take
628+-- an additional 'Bool' argument.
629+--
630+-- If you give 'False', nothing will be added to the query string.
631+--
632+-- Otherwise, this function will insert a value-less query string
633+-- parameter under the name associated to your 'QueryFlag'.
634+--
635+-- Example:
636+--
637+-- > type MyApi = "books" :> QueryFlag "published" :> Get '[JSON] [Book]
638+-- >
639+-- > myApi :: Proxy MyApi
640+-- > myApi = Proxy
641+-- >
642+-- > getBooks :: Bool -> ClientM [Book]
643+-- > getBooks = client myApi
644+-- > -- then you can just use "getBooks" to query that endpoint.
645+-- > -- 'getBooksBy False' for all books
646+-- > -- 'getBooksBy True' to only get _already published_ books
647+instance (KnownSymbol sym, HasClient m api)
648+ => HasClient m (QueryFlag sym :> api) where
649+
650+ type Client m (QueryFlag sym :> api) =
651+ Bool -> Client m api
652+
653+ clientWithRoute pm Proxy req flag =
654+ clientWithRoute pm (Proxy :: Proxy api)
655+ (if flag
656+ then appendToQueryString paramname Nothing req
657+ else req
658+ )
659+
660+ where paramname = pack $ symbolVal (Proxy :: Proxy sym)
661+
662+ hoistClientMonad pm _ f cl = \b ->
663+ hoistClientMonad pm (Proxy :: Proxy api) f (cl b)
664+
665+-- | Pick a 'Method' and specify where the server you want to query is. You get
666+-- back the full `Response`.
667+instance RunClient m => HasClient m Raw where
668+ type Client m Raw
669+ = H.Method -> m Response
670+
671+ clientWithRoute :: Proxy m -> Proxy Raw -> Request -> Client m Raw
672+ clientWithRoute _pm Proxy req httpMethod = do
673+ runRequest req { requestMethod = httpMethod }
674+
675+ hoistClientMonad _ _ f cl = \meth -> f (cl meth)
676+
677+-- | If you use a 'ReqBody' in one of your endpoints in your API,
678+-- the corresponding querying function will automatically take
679+-- an additional argument of the type specified by your 'ReqBody'.
680+-- That function will take care of encoding this argument as JSON and
681+-- of using it as the request body.
682+--
683+-- All you need is for your type to have a 'ToJSON' instance.
684+--
685+-- Example:
686+--
687+-- > type MyApi = "books" :> ReqBody '[JSON] Book :> Post '[JSON] Book
688+-- >
689+-- > myApi :: Proxy MyApi
690+-- > myApi = Proxy
691+-- >
692+-- > addBook :: Book -> ClientM Book
693+-- > addBook = client myApi
694+-- > -- then you can just use "addBook" to query that endpoint
695+instance (MimeRender ct a, HasClient m api)
696+ => HasClient m (ReqBody' mods (ct ': cts) a :> api) where
697+
698+ type Client m (ReqBody' mods (ct ': cts) a :> api) =
699+ a -> Client m api
700+
701+ clientWithRoute pm Proxy req body =
702+ clientWithRoute pm (Proxy :: Proxy api)
703+ (let ctProxy = Proxy :: Proxy ct
704+ in setRequestBodyLBS (mimeRender ctProxy body)
705+ -- We use first contentType from the Accept list
706+ (contentType ctProxy)
707+ req
708+ )
709+
710+ hoistClientMonad pm _ f cl = \a ->
711+ hoistClientMonad pm (Proxy :: Proxy api) f (cl a)
712+
713+instance
714+ ( HasClient m api, MimeRender ctype chunk, FramingRender framing, ToSourceIO chunk a
715+ ) => HasClient m (StreamBody' mods framing ctype a :> api)
716+ where
717+
718+ type Client m (StreamBody' mods framing ctype a :> api) = a -> Client m api
719+
720+ hoistClientMonad pm _ f cl = \a ->
721+ hoistClientMonad pm (Proxy :: Proxy api) f (cl a)
722+
723+ clientWithRoute pm Proxy req body
724+ = clientWithRoute pm (Proxy :: Proxy api)
725+ $ setRequestBody (RequestBodySource sourceIO) (contentType ctypeP) req
726+ where
727+ ctypeP = Proxy :: Proxy ctype
728+ framingP = Proxy :: Proxy framing
729+
730+ sourceIO = framingRender
731+ framingP
732+ (mimeRender ctypeP :: chunk -> BL.ByteString)
733+ (toSourceIO body)
734+
735+-- | Make the querying function append @path@ to the request path.
736+instance (KnownSymbol path, HasClient m api) => HasClient m (path :> api) where
737+ type Client m (path :> api) = Client m api
738+
739+ clientWithRoute pm Proxy req =
740+ clientWithRoute pm (Proxy :: Proxy api)
741+ (appendToPath p req)
742+
743+ where p = toEncodedUrlPiece $ pack $ symbolVal (Proxy :: Proxy path)
744+
745+ hoistClientMonad pm _ f cl = hoistClientMonad pm (Proxy :: Proxy api) f cl
746+
747+instance HasClient m api => HasClient m (Vault :> api) where
748+ type Client m (Vault :> api) = Client m api
749+
750+ clientWithRoute pm Proxy req =
751+ clientWithRoute pm (Proxy :: Proxy api) req
752+
753+ hoistClientMonad pm _ f cl = hoistClientMonad pm (Proxy :: Proxy api) f cl
754+
755+instance HasClient m api => HasClient m (RemoteHost :> api) where
756+ type Client m (RemoteHost :> api) = Client m api
757+
758+ clientWithRoute pm Proxy req =
759+ clientWithRoute pm (Proxy :: Proxy api) req
760+
761+ hoistClientMonad pm _ f cl = hoistClientMonad pm (Proxy :: Proxy api) f cl
762+
763+instance HasClient m api => HasClient m (IsSecure :> api) where
764+ type Client m (IsSecure :> api) = Client m api
765+
766+ clientWithRoute pm Proxy req =
767+ clientWithRoute pm (Proxy :: Proxy api) req
768+
769+ hoistClientMonad pm _ f cl = hoistClientMonad pm (Proxy :: Proxy api) f cl
770+
771+instance HasClient m subapi =>
772+ HasClient m (WithNamedContext name context subapi) where
773+
774+ type Client m (WithNamedContext name context subapi) = Client m subapi
775+ clientWithRoute pm Proxy = clientWithRoute pm (Proxy :: Proxy subapi)
776+
777+ hoistClientMonad pm _ f cl = hoistClientMonad pm (Proxy :: Proxy subapi) f cl
778+
779+instance ( HasClient m api
780+ ) => HasClient m (AuthProtect tag :> api) where
781+ type Client m (AuthProtect tag :> api)
782+ = AuthenticatedRequest (AuthProtect tag) -> Client m api
783+
784+ clientWithRoute pm Proxy req (AuthenticatedRequest (val,func)) =
785+ clientWithRoute pm (Proxy :: Proxy api) (func val req)
786+
787+ hoistClientMonad pm _ f cl = \authreq ->
788+ hoistClientMonad pm (Proxy :: Proxy api) f (cl authreq)
789+
790+-- | Ignore @'Fragment'@ in client functions.
791+-- See <https://ietf.org/rfc/rfc2616.html#section-15.1.3> for more details.
792+--
793+-- Example:
794+--
795+-- > type MyApi = "books" :> Fragment Text :> Get '[JSON] [Book]
796+-- >
797+-- > myApi :: Proxy MyApi
798+-- > myApi = Proxy
799+-- >
800+-- > getBooks :: ClientM [Book]
801+-- > getBooks = client myApi
802+-- > -- then you can just use "getBooksBy" to query that endpoint.
803+-- > -- 'getBooks' for all books.
804+instance (AtLeastOneFragment api, FragmentUnique (Fragment a :> api), HasClient m api
805+ ) => HasClient m (Fragment a :> api) where
806+
807+ type Client m (Fragment a :> api) = Client m api
808+
809+ clientWithRoute pm _ = clientWithRoute pm (Proxy :: Proxy api)
810+
811+ hoistClientMonad pm _ = hoistClientMonad pm (Proxy :: Proxy api)
812+
813+-- * Basic Authentication
814+
815+instance HasClient m api => HasClient m (BasicAuth realm usr :> api) where
816+ type Client m (BasicAuth realm usr :> api) = BasicAuthData -> Client m api
817+
818+ clientWithRoute pm Proxy req val =
819+ clientWithRoute pm (Proxy :: Proxy api) (basicAuthReq val req)
820+
821+ hoistClientMonad pm _ f cl = \bauth ->
822+ hoistClientMonad pm (Proxy :: Proxy api) f (cl bauth)
823+
824+-- | A type that specifies that an API record contains a client implementation.
825+data AsClientT (m :: * -> *)
826+instance GenericMode (AsClientT m) where
827+ type AsClientT m :- api = Client m api
828+
829+
830+type GClientConstraints api m =
831+ ( GenericServant api (AsClientT m)
832+ , Client m (ToServantApi api) ~ ToServant api (AsClientT m)
833+ )
834+
835+class GClient (api :: * -> *) m where
836+ gClientProof :: Dict (GClientConstraints api m)
837+
838+instance GClientConstraints api m => GClient api m where
839+ gClientProof = Dict
840+
841+instance
842+ ( forall n. GClient api n
843+ , HasClient m (ToServantApi api)
844+ , RunClient m
845+ )
846+ => HasClient m (NamedRoutes api) where
847+ type Client m (NamedRoutes api) = api (AsClientT m)
848+
849+ clientWithRoute :: Proxy m -> Proxy (NamedRoutes api) -> Request -> Client m (NamedRoutes api)
850+ clientWithRoute pm _ request =
851+ case gClientProof @api @m of
852+ Dict -> fromServant $ clientWithRoute pm (Proxy @(ToServantApi api)) request
853+
854+ hoistClientMonad
855+ :: forall ma mb.
856+ Proxy m
857+ -> Proxy (NamedRoutes api)
858+ -> (forall x. ma x -> mb x)
859+ -> Client ma (NamedRoutes api)
860+ -> Client mb (NamedRoutes api)
861+ hoistClientMonad _ _ nat clientA =
862+ case (gClientProof @api @ma, gClientProof @api @mb) of
863+ (Dict, Dict) ->
864+ fromServant @api @(AsClientT mb) $
865+ hoistClientMonad @m @(ToServantApi api) @ma @mb Proxy Proxy nat $
866+ toServant @api @(AsClientT ma) clientA
867+
868+infixl 1 //
869+infixl 2 /:
870+
871+-- | Helper to make code using records of clients more readable.
872+--
873+-- Can be mixed with (/:) for supplying arguments.
874+--
875+-- Example:
876+--
877+-- @
878+-- type Api = NamedRoutes RootApi
879+--
880+-- data RootApi mode = RootApi
881+-- { subApi :: mode :- NamedRoutes SubApi
882+-- , …
883+-- } deriving Generic
884+--
885+-- data SubApi mode = SubApi
886+-- { endpoint :: mode :- Get '[JSON] Person
887+-- , …
888+-- } deriving Generic
889+--
890+-- api :: Proxy API
891+-- api = Proxy
892+--
893+-- rootClient :: RootApi (AsClientT ClientM)
894+-- rootClient = client api
895+--
896+-- endpointClient :: ClientM Person
897+-- endpointClient = client // subApi // endpoint
898+-- @
899+(//) :: a -> (a -> b) -> b
900+x // f = f x
901+
902+-- | Convenience function for supplying arguments to client functions when
903+-- working with records of clients.
904+--
905+-- Intended to be used in conjunction with '(//)'.
906+--
907+-- Example:
908+--
909+-- @
910+-- type Api = NamedRoutes RootApi
911+--
912+-- data RootApi mode = RootApi
913+-- { subApi :: mode :- Capture "token" String :> NamedRoutes SubApi
914+-- , hello :: mode :- Capture "name" String :> Get '[JSON] String
915+-- , …
916+-- } deriving Generic
917+--
918+-- data SubApi mode = SubApi
919+-- { endpoint :: mode :- Get '[JSON] Person
920+-- , …
921+-- } deriving Generic
922+--
923+-- api :: Proxy API
924+-- api = Proxy
925+--
926+-- rootClient :: RootApi (AsClientT ClientM)
927+-- rootClient = client api
928+--
929+-- hello :: String -> ClientM String
930+-- hello name = rootClient // hello /: name
931+--
932+-- endpointClient :: ClientM Person
933+-- endpointClient = client // subApi /: "foobar123" // endpoint
934+-- @
935+(/:) :: (a -> b -> c) -> b -> a -> c
936+(/:) = flip
937+
938+
939+{- Note [Non-Empty Content Types]
940+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
941+Rather than have
942+
943+ instance (..., cts' ~ (ct ': cts)) => ... cts' ...
944+
945+It may seem to make more sense to have:
946+
947+ instance (...) => ... (ct ': cts) ...
948+
949+But this means that if another instance exists that does *not* require
950+non-empty lists, but is otherwise more specific, no instance will be overall
951+more specific. This in turn generally means adding yet another instance (one
952+for empty and one for non-empty lists).
953+-}
954+
955+-------------------------------------------------------------------------------
956+-- helpers
957+-------------------------------------------------------------------------------
958+
959+checkContentTypeHeader :: RunClient m => Response -> m MediaType
960+checkContentTypeHeader response =
961+ case lookup "Content-Type" $ toList $ responseHeaders response of
962+ Nothing -> return $ "application" Media.// "octet-stream"
963+ Just t -> case parseAccept t of
964+ Nothing -> throwClientError $ InvalidContentTypeHeader response
965+ Just t' -> return t'
966+
967+decodedAs :: forall ct a m. (MimeUnrender ct a, RunClient m)
968+ => Response -> Proxy ct -> m a
969+decodedAs response ct = do
970+ responseContentType <- checkContentTypeHeader response
971+ unless (any (matches responseContentType) accept) $
972+ throwClientError $ UnsupportedContentType responseContentType response
973+ case mimeUnrender ct $ responseBody response of
974+ Left err -> throwClientError $ DecodeFailure (T.pack err) response
975+ Right val -> return val
976+ where
977+ accept = toList $ contentTypes ct
978+
979+-------------------------------------------------------------------------------
980+-- Custom type errors
981+-------------------------------------------------------------------------------
982+
983+-- Erroring instance for HasClient' when a combinator is not fully applied
984+instance (RunClient m, TypeError (PartialApplication HasClient arr)) => HasClient m ((arr :: a -> b) :> sub)
985+ where
986+ type Client m (arr :> sub) = TypeError (PartialApplication HasClient arr)
987+ clientWithRoute _ _ _ = error "unreachable"
988+ hoistClientMonad _ _ _ _ = error "unreachable"
989+
990+-- Erroring instances for 'HasClient' for unknown API combinators
991+instance {-# OVERLAPPABLE #-} (RunClient m, TypeError (NoInstanceForSub (HasClient m) ty)) => HasClient m (ty :> sub)
992+
993+instance {-# OVERLAPPABLE #-} (RunClient m, TypeError (NoInstanceFor (HasClient m api))) => HasClient m api
servant-client-core/src/Servant/Client/Core/Internal.hsnew file+12
@@ -0,0 +1,12 @@
1+module Servant.Client.Core.Internal where
2+
3+import Control.DeepSeq
4+ (rnf)
5+import Network.HTTP.Media
6+ (MediaType, mainType, parameters, subType)
7+
8+mediaTypeRnf :: MediaType -> ()
9+mediaTypeRnf mt =
10+ rnf (mainType mt) `seq`
11+ rnf (subType mt) `seq`
12+ rnf (parameters mt)
servant-client-core/src/Servant/Client/Core/Reexport.hsnew file+36
@@ -0,0 +1,36 @@
1+-- | This module is a utility for @servant-client-core@ backend writers. It
2+-- contains all the functionality from @servant-client-core@ that should be
3+-- re-exported.
4+module Servant.Client.Core.Reexport
5+ (
6+ -- * HasClient
7+ HasClient(..)
8+ , foldMapUnion
9+ , matchUnion
10+ , AsClientT
11+ , (//)
12+ , (/:)
13+
14+ -- * Response (for @Raw@)
15+ , Response
16+ , StreamingResponse
17+ , ResponseF(..)
18+
19+ -- * Data types
20+ , ClientError(..)
21+ , EmptyClient(..)
22+
23+ -- * BaseUrl
24+ , BaseUrl(..)
25+ , Scheme(..)
26+ , showBaseUrl
27+ , parseBaseUrl
28+ , InvalidBaseUrlException
29+
30+ ) where
31+
32+
33+import Servant.Client.Core.BaseUrl
34+import Servant.Client.Core.HasClient
35+import Servant.Client.Core.Response
36+import Servant.Client.Core.ClientError
servant-client-core/src/Servant/Client/Core/Request.hsnew file+193
@@ -0,0 +1,193 @@
1+{-# LANGUAGE DeriveDataTypeable #-}
2+{-# LANGUAGE DeriveFoldable #-}
3+{-# LANGUAGE DeriveFunctor #-}
4+{-# LANGUAGE DeriveGeneric #-}
5+{-# LANGUAGE DeriveTraversable #-}
6+{-# LANGUAGE MultiParamTypeClasses #-}
7+{-# LANGUAGE OverloadedStrings #-}
8+{-# LANGUAGE RankNTypes #-}
9+{-# LANGUAGE ScopedTypeVariables #-}
10+{-# LANGUAGE TypeFamilies #-}
11+module Servant.Client.Core.Request (
12+ Request,
13+ RequestF (..),
14+ RequestBody (..),
15+ defaultRequest,
16+ -- ** Modifiers
17+ addHeader,
18+ appendToPath,
19+ appendToQueryString,
20+ encodeQueryParamValue,
21+ setRequestBody,
22+ setRequestBodyLBS,
23+ ) where
24+
25+import Prelude ()
26+import Prelude.Compat
27+
28+import Control.DeepSeq
29+ (NFData (..))
30+import Data.Bifoldable
31+ (Bifoldable (..))
32+import Data.Bifunctor
33+ (Bifunctor (..))
34+import Data.Bitraversable
35+ (Bitraversable (..), bifoldMapDefault, bimapDefault)
36+import qualified Data.ByteString as BS
37+import Data.ByteString.Builder
38+ (Builder)
39+import qualified Data.ByteString.Builder as Builder
40+import qualified Data.ByteString.Lazy as LBS
41+import qualified Data.Sequence as Seq
42+import Data.Text
43+ (Text)
44+import Data.Text.Encoding
45+ (encodeUtf8)
46+import Data.Typeable
47+ (Typeable)
48+import GHC.Generics
49+ (Generic)
50+import Network.HTTP.Media
51+ (MediaType)
52+import Network.HTTP.Types
53+ (Header, HeaderName, HttpVersion (..), Method, QueryItem,
54+ http11, methodGet, urlEncodeBuilder)
55+import Servant.API
56+ (ToHttpApiData, toEncodedUrlPiece, toQueryParam, toHeader, SourceIO)
57+
58+import Servant.Client.Core.Internal (mediaTypeRnf)
59+
60+data RequestF body path = Request
61+ { requestPath :: path
62+ , requestQueryString :: Seq.Seq QueryItem
63+ , requestBody :: Maybe (body, MediaType)
64+ , requestAccept :: Seq.Seq MediaType
65+ , requestHeaders :: Seq.Seq Header
66+ , requestHttpVersion :: HttpVersion
67+ , requestMethod :: Method
68+ } deriving (Generic, Typeable, Eq, Functor, Foldable, Traversable)
69+
70+instance (Show a, Show b) =>
71+ Show (Servant.Client.Core.Request.RequestF a b) where
72+ showsPrec p req
73+ = showParen
74+ (p >= 11)
75+ ( showString "Request {requestPath = "
76+ . showsPrec 0 (requestPath req)
77+ . showString ", requestQueryString = "
78+ . showsPrec 0 (requestQueryString req)
79+ . showString ", requestBody = "
80+ . showsPrec 0 (requestBody req)
81+ . showString ", requestAccept = "
82+ . showsPrec 0 (requestAccept req)
83+ . showString ", requestHeaders = "
84+ . showsPrec 0 (redactSensitiveHeader <$> requestHeaders req)
85+ . showString ", requestHttpVersion = "
86+ . showsPrec 0 (requestHttpVersion req)
87+ . showString ", requestMethod = "
88+ . showsPrec 0 (requestMethod req)
89+ . showString "}"
90+ )
91+ where
92+ redactSensitiveHeader :: Header -> Header
93+ redactSensitiveHeader ("Authorization", _) = ("Authorization", "<REDACTED>")
94+ redactSensitiveHeader h = h
95+instance Bifunctor RequestF where bimap = bimapDefault
96+instance Bifoldable RequestF where bifoldMap = bifoldMapDefault
97+instance Bitraversable RequestF where
98+ bitraverse f g r = mk
99+ <$> traverse (bitraverse f pure) (requestBody r)
100+ <*> g (requestPath r)
101+ where
102+ mk b p = r { requestBody = b, requestPath = p }
103+
104+instance (NFData path, NFData body) => NFData (RequestF body path) where
105+ rnf r =
106+ rnf (requestPath r)
107+ `seq` rnf (requestQueryString r)
108+ `seq` rnfB (requestBody r)
109+ `seq` rnf (fmap mediaTypeRnf (requestAccept r))
110+ `seq` rnf (requestHeaders r)
111+ `seq` requestHttpVersion r
112+ `seq` rnf (requestMethod r)
113+ where
114+ rnfB Nothing = ()
115+ rnfB (Just (b, mt)) = rnf b `seq` mediaTypeRnf mt
116+
117+type Request = RequestF RequestBody Builder
118+
119+-- | The request body. R replica of the @http-client@ @RequestBody@.
120+data RequestBody
121+ = RequestBodyLBS LBS.ByteString
122+ | RequestBodyBS BS.ByteString
123+ | RequestBodySource (SourceIO LBS.ByteString)
124+ deriving (Generic, Typeable)
125+
126+instance Show RequestBody where
127+ showsPrec d (RequestBodyLBS lbs) = showParen (d > 10)
128+ $ showString "RequestBodyLBS "
129+ . showsPrec 11 lbs
130+ showsPrec d (RequestBodyBS bs) = showParen (d > 10)
131+ $ showString "RequestBodyBS "
132+ . showsPrec 11 bs
133+ showsPrec d (RequestBodySource _) = showParen (d > 10)
134+ $ showString "RequestBodySource <IO>"
135+
136+-- A GET request to the top-level path
137+defaultRequest :: Request
138+defaultRequest = Request
139+ { requestPath = ""
140+ , requestQueryString = Seq.empty
141+ , requestBody = Nothing
142+ , requestAccept = Seq.empty
143+ , requestHeaders = Seq.empty
144+ , requestHttpVersion = http11
145+ , requestMethod = methodGet
146+ }
147+
148+-- | Append extra path to the request being constructed.
149+--
150+-- Warning: This function assumes that the path fragment is already URL-encoded.
151+appendToPath :: Builder -> Request -> Request
152+appendToPath p req
153+ = req { requestPath = requestPath req <> "/" <> p }
154+
155+-- | Append a query parameter to the request being constructed.
156+--
157+appendToQueryString :: Text -- ^ query param name
158+ -> Maybe BS.ByteString -- ^ query param value
159+ -> Request
160+ -> Request
161+appendToQueryString pname pvalue req
162+ = req { requestQueryString = requestQueryString req
163+ Seq.|> (encodeUtf8 pname, pvalue)}
164+
165+-- | Encode a query parameter value.
166+--
167+encodeQueryParamValue :: ToHttpApiData a => a -> BS.ByteString
168+encodeQueryParamValue = LBS.toStrict . Builder.toLazyByteString
169+ . urlEncodeBuilder True . encodeUtf8 . toQueryParam
170+
171+-- | Add header to the request being constructed.
172+--
173+addHeader :: ToHttpApiData a => HeaderName -> a -> Request -> Request
174+addHeader name val req
175+ = req { requestHeaders = requestHeaders req Seq.|> (name, toHeader val)}
176+
177+-- | Set body and media type of the request being constructed.
178+--
179+-- The body is set to the given bytestring using the 'RequestBodyLBS'
180+-- constructor.
181+--
182+-- @since 0.12
183+--
184+setRequestBodyLBS :: LBS.ByteString -> MediaType -> Request -> Request
185+setRequestBodyLBS b t req
186+ = req { requestBody = Just (RequestBodyLBS b, t) }
187+
188+-- | Set body and media type of the request being constructed.
189+--
190+-- @since 0.12
191+--
192+setRequestBody :: RequestBody -> MediaType -> Request -> Request
193+setRequestBody b t req = req { requestBody = Just (b, t) }
servant-client-core/src/Servant/Client/Core/Response.hsnew file+53
@@ -0,0 +1,53 @@
1+{-# LANGUAGE DeriveDataTypeable #-}
2+{-# LANGUAGE DeriveFoldable #-}
3+{-# LANGUAGE DeriveFunctor #-}
4+{-# LANGUAGE DeriveGeneric #-}
5+{-# LANGUAGE DeriveTraversable #-}
6+{-# LANGUAGE MultiParamTypeClasses #-}
7+{-# LANGUAGE RankNTypes #-}
8+{-# LANGUAGE ScopedTypeVariables #-}
9+{-# LANGUAGE TypeFamilies #-}
10+
11+module Servant.Client.Core.Response (
12+ Response,
13+ StreamingResponse,
14+ ResponseF (..),
15+ ) where
16+
17+import Prelude ()
18+import Prelude.Compat
19+
20+import Control.DeepSeq
21+ (NFData (..))
22+import qualified Data.ByteString as BS
23+import qualified Data.ByteString.Lazy as LBS
24+import qualified Data.Sequence as Seq
25+import Data.Typeable
26+ (Typeable)
27+import GHC.Generics
28+ (Generic)
29+import Network.HTTP.Types
30+ (Header, HttpVersion (..), Status (..))
31+
32+import Servant.API.Stream
33+ (SourceIO)
34+
35+data ResponseF a = Response
36+ { responseStatusCode :: Status
37+ , responseHeaders :: Seq.Seq Header
38+ , responseHttpVersion :: HttpVersion
39+ , responseBody :: a
40+ } deriving (Eq, Show, Generic, Typeable, Functor, Foldable, Traversable)
41+
42+instance NFData a => NFData (ResponseF a) where
43+ rnf (Response sc hs hv body) =
44+ rnfStatus sc `seq`
45+ rnf hs `seq`
46+ rnfHttpVersion hv `seq`
47+ rnf body
48+ where
49+ rnfStatus (Status code msg) = rnf code `seq` rnf msg
50+ rnfHttpVersion (HttpVersion _ _) = () -- HttpVersion fields are strict
51+
52+type Response = ResponseF LBS.ByteString
53+type StreamingResponse = ResponseF (SourceIO BS.ByteString)
servant-client-core/src/Servant/Client/Core/RunClient.hsnew file+55
@@ -0,0 +1,55 @@
1+{-# LANGUAGE DeriveFunctor #-}
2+{-# LANGUAGE FlexibleContexts #-}
3+{-# LANGUAGE MultiParamTypeClasses #-}
4+{-# LANGUAGE OverloadedStrings #-}
5+{-# LANGUAGE ScopedTypeVariables #-}
6+{-# LANGUAGE TypeFamilies #-}
7+-- | Types for possible backends to run client-side `Request` queries
8+module Servant.Client.Core.RunClient (
9+ RunClient (..),
10+ runRequest,
11+ RunStreamingClient (..),
12+ ClientF (..),
13+ ) where
14+
15+import Prelude ()
16+import Prelude.Compat
17+
18+import Network.HTTP.Types.Status
19+ (Status)
20+import Control.Monad.Free
21+ (Free (..), liftF)
22+
23+import Servant.Client.Core.ClientError
24+import Servant.Client.Core.Request
25+import Servant.Client.Core.Response
26+
27+class Monad m => RunClient m where
28+ -- | How to make a request, with an optional list of status codes to not throw exceptions
29+ -- for (default: [200..299]).
30+ runRequestAcceptStatus :: Maybe [Status] -> Request -> m Response
31+ throwClientError :: ClientError -> m a
32+
33+-- | How to make a request.
34+runRequest :: RunClient m => Request -> m Response
35+runRequest = runRequestAcceptStatus Nothing
36+
37+class RunClient m => RunStreamingClient m where
38+ withStreamingRequest :: Request -> (StreamingResponse -> IO a) -> m a
39+
40+-------------------------------------------------------------------------------
41+-- Free
42+-------------------------------------------------------------------------------
43+
44+-- | 'ClientF' cannot stream.
45+--
46+-- Compare to 'RunClient'.
47+data ClientF a
48+ = RunRequest Request (Response -> a)
49+ | Throw ClientError
50+ deriving (Functor)
51+
52+-- TODO: honour the accept-status argument.
53+instance ClientF ~ f => RunClient (Free f) where
54+ runRequestAcceptStatus _ req = liftF (RunRequest req id)
55+ throwClientError = liftF . Throw
servant-client-core/src/Servant/Client/Free.hsnew file+18
@@ -0,0 +1,18 @@
1+{-# LANGUAGE FlexibleContexts #-}
2+{-# LANGUAGE GADTs #-}
3+{-# LANGUAGE ScopedTypeVariables #-}
4+module Servant.Client.Free (
5+ client,
6+ ClientF (..),
7+ module Servant.Client.Core.Reexport,
8+ ) where
9+
10+import Control.Monad.Free
11+import Data.Proxy
12+ (Proxy (..))
13+import Servant.Client.Core
14+import Servant.Client.Core.Reexport
15+import Servant.Client.Core.RunClient
16+
17+client :: HasClient (Free ClientF) api => Proxy api -> Client (Free ClientF) api
18+client api = api `clientIn` (Proxy :: Proxy (Free ClientF))
servant-client-core/src/Servant/Client/Generic.hsnew file+48
@@ -0,0 +1,48 @@
1+{-# OPTIONS_GHC -fno-warn-orphans #-}
2+{-# LANGUAGE FlexibleContexts #-}
3+{-# LANGUAGE KindSignatures #-}
4+{-# LANGUAGE RankNTypes #-}
5+{-# LANGUAGE ScopedTypeVariables #-}
6+{-# LANGUAGE TypeFamilies #-}
7+
8+module Servant.Client.Generic (
9+ AsClientT,
10+ genericClient,
11+ genericClientHoist,
12+ ) where
13+
14+import Data.Proxy
15+ (Proxy (..))
16+
17+import Servant.API.Generic
18+import Servant.Client.Core
19+import Servant.Client.Core.HasClient (AsClientT)
20+
21+-- | Generate a record of client functions.
22+genericClient
23+ :: forall routes m.
24+ ( HasClient m (ToServantApi routes)
25+ , GenericServant routes (AsClientT m)
26+ , Client m (ToServantApi routes) ~ ToServant routes (AsClientT m)
27+ )
28+ => routes (AsClientT m)
29+genericClient
30+ = fromServant
31+ $ clientIn (Proxy :: Proxy (ToServantApi routes)) (Proxy :: Proxy m)
32+
33+-- | 'genericClient' but with 'hoistClientMonad' in between.
34+genericClientHoist
35+ :: forall routes m n.
36+ ( HasClient m (ToServantApi routes)
37+ , GenericServant routes (AsClientT n)
38+ , Client n (ToServantApi routes) ~ ToServant routes (AsClientT n)
39+ )
40+ => (forall x. m x -> n x) -- ^ natural transformation
41+ -> routes (AsClientT n)
42+genericClientHoist nt
43+ = fromServant
44+ $ hoistClientMonad m api nt
45+ $ clientIn api m
46+ where
47+ m = Proxy :: Proxy m
48+ api = Proxy :: Proxy (ToServantApi routes)
servant-client/test/Servant/Common/BaseUrlSpec.hs → servant-client-core/test/Servant/Client/Core/Internal/BaseUrlSpec.hsrenamed+3−5
@@ -1,5 +1,6 @@
11{-# OPTIONS_GHC -fno-warn-orphans #-}
2−module Servant.Common.BaseUrlSpec where
2+module Servant.Client.Core.Internal.BaseUrlSpec (spec) where
3+
34
45import Control.DeepSeq
56import Prelude ()
@@ -7,7 +8,7 @@ import Prelude.Compat
78import Test.Hspec
89import Test.QuickCheck
910
10−import Servant.Common.BaseUrl
11+import Servant.Client.Core.BaseUrl
1112
1213spec :: Spec
1314spec = do
@@ -78,6 +79,3 @@ instance Arbitrary BaseUrl where
7879 (1, choose (1, 20000)) :
7980 []
8081 pathGen = listOf1 . elements $ letters
81−
82−isLeft :: Either a b -> Bool
83−isLeft = either (const True) (const False)
servant-client-core/test/Servant/Client/Core/RequestSpec.hsnew file+31
@@ -0,0 +1,31 @@
1+{-# OPTIONS_GHC -fno-warn-orphans #-}
2+{-# LANGUAGE OverloadedStrings #-}
3+module Servant.Client.Core.RequestSpec (spec) where
4+
5+
6+import Prelude ()
7+import Prelude.Compat
8+import Control.Monad
9+import Data.List (isInfixOf)
10+import Servant.Client.Core.Request
11+import Test.Hspec
12+
13+newtype DataWithRequest = DataWithRequest (RequestF RequestBody ())
14+ deriving Show
15+
16+spec :: Spec
17+spec = do
18+ describe "Request" $ do
19+ describe "show" $ do
20+ it "has parenthesis correctly positioned" $ do
21+ let d = DataWithRequest (void defaultRequest)
22+ show d `shouldBe` "DataWithRequest (Request {requestPath = ()\
23+ \, requestQueryString = fromList []\
24+ \, requestBody = Nothing\
25+ \, requestAccept = fromList []\
26+ \, requestHeaders = fromList []\
27+ \, requestHttpVersion = HTTP/1.1\
28+ \, requestMethod = \"GET\"})"
29+ it "redacts the authorization header" $ do
30+ let request = void $ defaultRequest { requestHeaders = pure ("authorization", "secret") }
31+ isInfixOf "secret" (show request) `shouldBe` False
servant-client-core/test/Spec.hsnew file+1
@@ -0,0 +1 @@
1+{-# OPTIONS_GHC -F -pgmF hspec-discover #-}
servant-client-ghcjs/CHANGELOG.mdnew file+3
@@ -0,0 +1,3 @@
1+0.11
2+----
3+Initial
servant-client-ghcjs/LICENSEnew file+30
@@ -0,0 +1,30 @@
1+Copyright (c) 2014-2016, Zalora South East Asia Pte Ltd, 2016-2018 Servant Contributors
2+
3+All rights reserved.
4+
5+Redistribution and use in source and binary forms, with or without
6+modification, are permitted provided that the following conditions are met:
7+
8+ * Redistributions of source code must retain the above copyright
9+ notice, this list of conditions and the following disclaimer.
10+
11+ * Redistributions in binary form must reproduce the above
12+ copyright notice, this list of conditions and the following
13+ disclaimer in the documentation and/or other materials provided
14+ with the distribution.
15+
16+ * Neither the name of Zalora South East Asia Pte Ltd nor the names of other
17+ contributors may be used to endorse or promote products derived
18+ from this software without specific prior written permission.
19+
20+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
21+"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
22+LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
23+A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
24+OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
25+SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
26+LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
27+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
28+THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
29+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
30+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
servant-client-ghcjs/README.mdnew file+175
@@ -0,0 +1,175 @@
1+# servant-client-ghcjs
2+
3+Type safe querying of servant APIs from the browser.
4+
5+`servant-client-ghcjs` is much like `servant-client`, as both packages allow you to generate functions that query the endpoints of your servant API. Both packages should feel the same in usage. The big difference lies in how they perform the actual requests. `servant-client` (indirectly) uses your operating system's socket mechanisms, whereas `servant-client-ghcjs` uses your browser's [XHR](https://developer.mozilla.org/en-US/docs/Web/API/XMLHttpRequest/Using_XMLHttpRequest) mechanisms to send requests.
6+
7+This guide assumes knowledge of servant. Reading its [documentation](http://docs.servant.dev) is recommended if you're new to the subject.
8+
9+## Using servant-client-ghcjs
10+`servant-client-ghcjs` should feel familiar if you've worked with `servant-client`.
11+
12+Take the following API (taken from the [Querying an API](http://docs.servant.dev/en/stable/tutorial/Client.html) section in the servant documentation)
13+
14+```haskell
15+{-# LANGUAGE DataKinds #-}
16+{-# LANGUAGE DeriveGeneric #-}
17+{-# LANGUAGE TypeOperators #-}
18+
19+module Main where
20+
21+import Data.Aeson
22+import Data.Proxy
23+import GHC.Generics
24+import Servant.API -- From the 'servant' package, to define the API itself
25+import Servant.Client.Ghcjs -- To generate client functions
26+
27+type API =
28+ "position" :> Capture "x" Int :> Capture "y" Int :> Get '[JSON] Position
29+ :<|> "hello" :> QueryParam "name" String :> Get '[JSON] HelloMessage
30+ :<|> "marketing" :> ReqBody '[JSON] ClientInfo :> Post '[JSON] Email
31+
32+
33+-- Data types used in the API
34+
35+data Position = Position
36+ { xCoord :: Int
37+ , yCoord :: Int
38+ } deriving (Show, Generic)
39+
40+instance FromJSON Position
41+
42+newtype HelloMessage = HelloMessage { msg :: String }
43+ deriving (Show, Generic)
44+
45+instance FromJSON HelloMessage
46+
47+data ClientInfo = ClientInfo
48+ { clientName :: String
49+ , clientEmail :: String
50+ , clientAge :: Int
51+ , clientInterestedIn :: [String]
52+ } deriving Generic
53+
54+instance ToJSON ClientInfo
55+
56+data Email = Email
57+ { from :: String
58+ , to :: String
59+ , subject :: String
60+ , body :: String
61+ } deriving (Show, Generic)
62+
63+instance FromJSON Email
64+```
65+
66+Client functions are generated with the `client` function, like with `servant-client`:
67+
68+```haskell
69+position :: Int
70+ -> Int
71+ -> ClientM Position
72+
73+hello :: Maybe String
74+ -> ClientM HelloMessage
75+
76+marketing :: ClientInfo
77+ -> ClientM Email
78+
79+api :: Proxy API
80+api = Proxy
81+
82+position :<|> hello :<|> marketing = client api
83+```
84+
85+To run these requests, they only need to be given to `runClientM`. The type of which is as follows:
86+
87+```haskell
88+runClientM :: ClientM a -> IO (Either ServantError a)
89+```
90+
91+The requests can then be run as follows:
92+
93+```haskell
94+main :: IO ()
95+main = do
96+ ePos <- runClientM $ position 10 20
97+ print ePos
98+
99+ eHelloMessage <- runClientM $ hello (Just "Servant")
100+ print eHelloMessage
101+
102+ eEmail <- runClientM $ marketing ClientInfo
103+ { clientName = "Servant"
104+ , clientEmail = "servant@example.com"
105+ , clientAge = 3
106+ , clientInterestedIn = ["servant", "haskell", "type safety", "web apps"]
107+ }
108+ print eEmail
109+```
110+
111+`runClientM` requires no URL, as it assumes that all requests are meant for the server that served the web page on which the code is being run. It is however possible to call REST APIs from other locations with [CORS](https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS) using `runClientMOrigin`:
112+
113+```haskell
114+runClientMOrigin :: ClientM a -> ClientEnv -> IO (Either ServantError a)
115+```
116+
117+Where `ClientEnv` holds a `BaseURL` that tells servant where to send the request to.
118+
119+# Common client functions
120+Specifically in big applications it can be desirable to have client functions that work for both `servant-client` *and* `servant-client-ghcjs`. Luckily, the common bits of those two packages live in a parent package, called `servant-client-core`. This package holds the tools to create generic client functions. Generating clients this way is a bit different, though, as the client functions need to be generic in the monad `m` that runs the actual requests.
121+
122+In the example below, the client functions are put in a data type called `APIClient`, which has `m` as a type parameter. The lowercase `apiClient` constructs this data type, demanding that `m` is indeed a monad that can run requests.
123+
124+```haskell
125+{-# LANGUAGE FlexibleContexts #-}
126+{-# LANGUAGE RecordWildCards #-}
127+{-# LANGUAGE ScopedTypeVariables #-}
128+{-# LANGUAGE TypeApplications #-}
129+
130+...
131+import Servant.Client.Core -- From the 'servant-client-core' package
132+
133+...
134+
135+data APIClient m = APIClient
136+ { position :: Int -> Int -> m Position
137+ , hello :: Maybe String -> m HelloMessage
138+ , marketing :: ClientInfo -> m Email
139+ }
140+
141+apiClient
142+ :: forall m
143+ . RunClient m
144+ => APIClient m
145+apiClient = APIClient { .. }
146+ where
147+ position
148+ :<|> hello
149+ :<|> marketing = Proxy @API `clientIn` Proxy @m
150+```
151+
152+The call site changes slightly too, as the functions now need to be taken from `apiClient`:
153+
154+```haskell
155+import Servant.Client.Ghcjs
156+
157+main :: IO ()
158+main = do
159+ ePos <- runClientM $ position apiClient 10 20
160+ print ePos
161+```
162+
163+Here's how the requests would be performed using the regular `servant-client` package:
164+
165+```haskell
166+import Servant.Client
167+import Network.HTTP.Client ( newManager, defaultManagerSettings )
168+
169+main :: IO ()
170+main = do
171+ mgr <- newManager defaultManagerSettings
172+ let clientBaseUrl = BaseUrl Http "www.example.com" 80 ""
173+ ePos <- runClientM (position apiClient 10 20) $ mkClientEnv mgr clientBaseUrl
174+ print ePos
175+```
servant-client-ghcjs/Setup.hsnew file+2
@@ -0,0 +1,2 @@
1+import Distribution.Simple
2+main = defaultMain
servant-client-ghcjs/servant-client-ghcjs.cabalnew file+64
@@ -0,0 +1,64 @@
1+cabal-version: 2.2
2+name: servant-client-ghcjs
3+version: 0.16
4+synopsis:
5+ Automatic derivation of querying functions for servant webservices for GHCJS
6+
7+category: Servant, Web
8+description:
9+ This library lets you automatically derive Haskell functions that
10+ let you query each endpoint of a <http://hackage.haskell.org/package/servant servant> webservice.
11+ .
12+ See <http://docs.servant.dev/en/stable/tutorial/Client.html the client section of the tutorial>.
13+ .
14+ <https://github.com/haskell-servant/servant/blob/master/servant-client/CHANGELOG.md CHANGELOG>
15+
16+homepage: http://docs.servant.dev/
17+bug-reports: http://github.com/haskell-servant/servant/issues
18+license: BSD-3-Clause
19+license-file: LICENSE
20+author: Servant Contributors
21+maintainer: haskell-servant-maintainers@googlegroups.com
22+copyright:
23+ 2014-2016 Zalora South East Asia Pte Ltd, 2016-2018 Servant Contributors
24+
25+build-type: Simple
26+tested-with: ghc >=7.8
27+extra-source-files:
28+ CHANGELOG.md
29+ README.md
30+
31+source-repository head
32+ type: git
33+ location: http://github.com/haskell-servant/servant.git
34+
35+library
36+ exposed-modules:
37+ Servant.Client.Ghcjs
38+ Servant.Client.Internal.XhrClient
39+
40+ build-depends:
41+ base >=4.11 && <5
42+ , bytestring >=0.10 && <0.12
43+ , case-insensitive >=1.2.0.0 && <1.3.0.0
44+ , containers >=0.5 && <0.7
45+ , exceptions >=0.8 && <0.11
46+ , ghcjs-base >=0.2.0.0 && <0.3.0.0
47+ , ghcjs-prim >=0.1.0.0 && <0.2.0.0
48+ , http-media >=0.6.2 && <0.9
49+ , http-types >=0.12 && <0.13
50+ , monad-control >=1.0.0.4 && <1.1
51+ , mtl >=2.2.2 && <2.3
52+ , semigroupoids >=5.3 && <5.4
53+ , string-conversions >=0.3 && <0.5
54+ , transformers >=0.3 && <0.6
55+ , transformers-base >=0.4.4 && <0.5
56+
57+ -- strict, as we re-export stuff
58+ build-depends:
59+ servant >=0.16 && <0.20
60+ , servant-client-core >=0.16 && <0.20
61+
62+ hs-source-dirs: src
63+ default-language: Haskell2010
64+ ghc-options: -Wall -Wno-redundant-constraints
servant-client-ghcjs/src/Servant/Client/Ghcjs.hsnew file+14
@@ -0,0 +1,14 @@
1+-- | This module provides 'client' which can automatically generate
2+-- querying functions for each endpoint just from the type representing your
3+-- API.
4+module Servant.Client.Ghcjs
5+ (
6+ client
7+ , ClientM
8+ , runClientM
9+ , ClientEnv(..)
10+ , module Servant.Client.Core.Reexport
11+ ) where
12+
13+import Servant.Client.Internal.XhrClient
14+import Servant.Client.Core.Reexport
servant-client-ghcjs/src/Servant/Client/Internal/XhrClient.hsnew file+360
@@ -0,0 +1,360 @@
1+{-# LANGUAGE CPP #-}
2+{-# LANGUAGE DeriveGeneric #-}
3+{-# LANGUAGE FlexibleContexts #-}
4+{-# LANGUAGE FlexibleInstances #-}
5+{-# LANGUAGE GeneralizedNewtypeDeriving #-}
6+{-# LANGUAGE MultiParamTypeClasses #-}
7+{-# LANGUAGE OverloadedStrings #-}
8+{-# LANGUAGE ScopedTypeVariables #-}
9+{-# LANGUAGE TypeFamilies #-}
10+{-# LANGUAGE ViewPatterns #-}
11+
12+
13+{-# OPTIONS_GHC -fno-warn-name-shadowing #-}
14+
15+module Servant.Client.Internal.XhrClient where
16+
17+import Control.Arrow
18+import Control.Concurrent
19+import Control.Exception
20+import Control.Monad
21+import Control.Monad.Base
22+ (MonadBase (..))
23+import Control.Monad.Catch
24+ (MonadCatch, MonadThrow)
25+import Control.Monad.Error.Class
26+ (MonadError (..))
27+import Control.Monad.Reader
28+import Control.Monad.Trans.Control
29+ (MonadBaseControl (..))
30+import Control.Monad.Trans.Except
31+import Data.Bifunctor
32+ (bimap)
33+import Data.ByteString.Builder
34+ (toLazyByteString)
35+import qualified Data.ByteString.Char8 as BS
36+import qualified Data.ByteString.Lazy as BL
37+import Data.CaseInsensitive
38+import Data.Char
39+import Data.Foldable
40+ (toList)
41+import Data.Functor.Alt
42+ (Alt (..))
43+import Data.Proxy
44+ (Proxy (..))
45+import qualified Data.Sequence as Seq
46+import Data.String.Conversions
47+import Data.Typeable
48+ (Typeable)
49+import Foreign.StablePtr
50+import GHC.Generics
51+import qualified GHCJS.Buffer as Buffer
52+import GHCJS.Foreign.Callback
53+import GHCJS.Prim
54+import GHCJS.Types
55+import JavaScript.TypedArray.ArrayBuffer
56+ (ArrayBuffer)
57+import JavaScript.Web.Location
58+import Network.HTTP.Media
59+ (renderHeader)
60+import Network.HTTP.Types
61+import Servant.Client.Core
62+import qualified Servant.Types.SourceT as S
63+
64+newtype JSXMLHttpRequest = JSXMLHttpRequest JSVal
65+
66+newtype JSXMLHttpRequestClass = JSXMLHttpRequestClass JSVal
67+
68+-- | The environment in which a request is run.
69+newtype ClientEnv
70+ = ClientEnv
71+ { baseUrl :: BaseUrl }
72+ deriving (Eq, Show)
73+
74+-- | Generates a set of client functions for an API.
75+--
76+-- Example:
77+--
78+-- > type API = Capture "no" Int :> Get '[JSON] Int
79+-- > :<|> Get '[JSON] [Bool]
80+-- >
81+-- > api :: Proxy API
82+-- > api = Proxy
83+-- >
84+-- > getInt :: Int -> ClientM Int
85+-- > getBools :: ClientM [Bool]
86+-- > getInt :<|> getBools = client api
87+--
88+-- NOTE: Does not support constant space streaming of the request body!
89+client :: HasClient ClientM api => Proxy api -> Client ClientM api
90+client api = api `clientIn` (Proxy :: Proxy ClientM)
91+
92+-- | @ClientM@ is the monad in which client functions run. Contains the
93+-- 'BaseUrl' used for requests in the reader environment.
94+--
95+-- NOTE: Does not support constant space streaming of the request body!
96+newtype ClientM a = ClientM
97+ { runClientM' :: ReaderT ClientEnv (ExceptT ClientError IO) a }
98+ deriving ( Functor, Applicative, Monad, MonadIO, Generic
99+ , MonadReader ClientEnv, MonadError ClientError, MonadThrow
100+ , MonadCatch)
101+
102+instance MonadBase IO ClientM where
103+ liftBase = ClientM . liftBase
104+
105+instance MonadBaseControl IO ClientM where
106+ type StM ClientM a = Either ClientError a
107+
108+ liftBaseWith f = ClientM (liftBaseWith (\g -> f (g . runClientM')))
109+
110+ restoreM st = ClientM (restoreM st)
111+
112+-- | Try clients in order, last error is preserved.
113+instance Alt ClientM where
114+ a <!> b = a `catchError` const b
115+
116+data StreamingNotSupportedException = StreamingNotSupportedException
117+ deriving ( Typeable, Show )
118+
119+instance Exception StreamingNotSupportedException where
120+ displayException _ = "streamingRequest: streaming is not supported!"
121+
122+instance RunClient ClientM where
123+ runRequestAcceptStatus = performRequest
124+ throwClientError = throwError
125+
126+runClientMOrigin :: ClientM a -> ClientEnv -> IO (Either ClientError a)
127+runClientMOrigin cm env = runExceptT $ flip runReaderT env $ runClientM' cm
128+
129+runClientM :: ClientM a -> IO (Either ClientError a)
130+runClientM m = do
131+ curLoc <- getWindowLocation
132+
133+ jsStr_protocol <- getProtocol curLoc
134+ jsStr_port <- getPort curLoc
135+ jsStr_hostname <- getHostname curLoc
136+
137+ let protocol
138+ | jsStr_protocol == "https:" = Https
139+ | otherwise = Http
140+
141+ portStr :: String
142+ portStr = fromJSString $ jsval jsStr_port
143+
144+ port :: Int
145+ port | null portStr = case protocol of
146+ Http -> 80
147+ Https -> 443
148+ | otherwise = read portStr
149+
150+ hostname :: String
151+ hostname = fromJSString $ jsval jsStr_hostname
152+
153+ runClientMOrigin m (ClientEnv (BaseUrl protocol hostname port ""))
154+
155+performRequest :: Maybe [Status] -> Request -> ClientM Response
156+performRequest acceptStatus req = do
157+ xhr <- liftIO initXhr
158+ burl <- asks baseUrl
159+ liftIO $ performXhr xhr burl req
160+ resp <- toResponse xhr
161+
162+ let status = responseStatusCode resp
163+ goodStatus = case acceptStatus of
164+ Nothing -> statusIsSuccessful status
165+ Just good -> status `elem` good
166+ unless goodStatus $ do
167+ let f b = (burl, BL.toStrict $ toLazyByteString b)
168+ throwError $ FailureResponse (bimap (const ()) f req) resp
169+
170+ pure resp
171+
172+-- * initialization
173+
174+initXhr :: IO JSXMLHttpRequest
175+initXhr = do
176+ lib <- requireXMLHttpRequestClass
177+ newXMLHttpRequest lib
178+
179+foreign import javascript unsafe
180+ -- branching between node (for testing) and browsers
181+ "(function () {if (typeof require !== 'undefined') { return require('xhr2'); } else { return XMLHttpRequest; };})()"
182+ requireXMLHttpRequestClass :: IO JSXMLHttpRequestClass
183+
184+foreign import javascript unsafe "new $1()"
185+ newXMLHttpRequest :: JSXMLHttpRequestClass -> IO JSXMLHttpRequest
186+
187+-- * performing requests
188+-- Performs the xhr and blocks until the response was received
189+performXhr :: JSXMLHttpRequest -> BaseUrl -> Request -> IO ()
190+performXhr xhr burl request = do
191+
192+ waiter <- newEmptyMVar
193+
194+ bracket (acquire waiter) releaseCallback $ \_callback -> do
195+ t <- myThreadId
196+ s <- newStablePtr t
197+
198+ openXhr xhr (cs $ requestMethod request) (toUrl burl request) True
199+ setHeaders xhr request
200+ js_setResponseType xhr "arraybuffer"
201+ body <- toBody request
202+ sendXhr xhr body
203+ takeMVar waiter
204+
205+ freeStablePtr s
206+ where
207+ acquire waiter = onReadyStateChange xhr $ do
208+ state <- readyState xhr
209+ case state of
210+ -- onReadyStateChange's callback can fire state 4
211+ -- (which means "request finished and response is ready")
212+ -- multiple times. By using tryPutMVar, only the first time
213+ -- state 4 is fired will cause an MVar to be put. Subsequent
214+ -- fires are ignored.
215+ 4 -> void $ tryPutMVar waiter ()
216+ _ -> return ()
217+
218+onReadyStateChange :: JSXMLHttpRequest -> IO () -> IO (Callback (IO ()))
219+onReadyStateChange xhr action = do
220+ callback <- asyncCallback action
221+ js_onReadyStateChange xhr callback
222+ return callback
223+foreign import javascript safe "$1.onreadystatechange = $2;"
224+ js_onReadyStateChange :: JSXMLHttpRequest -> Callback (IO ()) -> IO ()
225+
226+foreign import javascript unsafe "$1.readyState"
227+ readyState :: JSXMLHttpRequest -> IO Int
228+
229+openXhr :: JSXMLHttpRequest -> String -> String -> Bool -> IO ()
230+openXhr xhr method url =
231+ js_openXhr xhr (toJSString method) (toJSString url)
232+foreign import javascript unsafe "$1.open($2, $3, $4)"
233+ js_openXhr :: JSXMLHttpRequest -> JSVal -> JSVal -> Bool -> IO ()
234+
235+foreign import javascript unsafe "$1.responseType = $2;"
236+ js_setResponseType :: JSXMLHttpRequest -> JSString -> IO ()
237+
238+toUrl :: BaseUrl -> Request -> String
239+toUrl burl request =
240+ let pathS = cs $ toLazyByteString $ requestPath request
241+ queryS =
242+ cs $
243+ renderQuery True $
244+ toList $
245+ requestQueryString request
246+ in showBaseUrl burl ++ pathS ++ queryS
247+
248+setHeaders :: JSXMLHttpRequest -> Request -> IO ()
249+setHeaders xhr request = do
250+ forM_ (toList $ requestAccept request) $ \mediaType ->
251+ js_setRequestHeader
252+ xhr
253+ (toJSString "Accept")
254+ (toJSString $ cs $ renderHeader mediaType)
255+
256+ forM_ (requestBody request) $ \(_, mediaType) ->
257+ js_setRequestHeader
258+ xhr
259+ (toJSString "Content-Type")
260+ (toJSString $ cs $ renderHeader mediaType)
261+
262+ forM_ (toList $ requestHeaders request) $ \(key, value) ->
263+ js_setRequestHeader xhr (toJSString $ cs $ original key) (toJSString $ cs value)
264+
265+foreign import javascript unsafe "$1.setRequestHeader($2, $3)"
266+ js_setRequestHeader :: JSXMLHttpRequest -> JSVal -> JSVal -> IO ()
267+
268+sendXhr :: JSXMLHttpRequest -> Maybe ArrayBuffer -> IO ()
269+sendXhr xhr Nothing = js_sendXhr xhr
270+sendXhr xhr (Just body) =
271+ js_sendXhrWithBody xhr body
272+
273+foreign import javascript unsafe "$1.send()"
274+ js_sendXhr :: JSXMLHttpRequest -> IO ()
275+
276+foreign import javascript unsafe "$1.send($2)"
277+ js_sendXhrWithBody :: JSXMLHttpRequest -> ArrayBuffer -> IO ()
278+
279+toBody :: Request -> IO (Maybe ArrayBuffer)
280+toBody request = case requestBody request of
281+ Nothing -> return Nothing
282+ Just (a, _) -> Just <$> go a
283+
284+ where
285+ go :: RequestBody -> IO ArrayBuffer
286+ go x = case x of
287+ RequestBodyLBS x -> return $ mBody $ BL.toStrict x
288+ RequestBodyBS x -> return $ mBody x
289+ RequestBodySource xs -> runExceptT (S.runSourceT xs) >>= \e -> case e of
290+ Left err -> fail err
291+ Right bss -> return $ mBody $ BL.toStrict $ mconcat bss
292+
293+ mBody :: BS.ByteString -> ArrayBuffer
294+ mBody bs = js_bufferSlice offset len $ Buffer.getArrayBuffer buffer
295+ where
296+ (buffer, offset, len) = Buffer.fromByteString bs
297+
298+foreign import javascript unsafe "$3.slice($1, $1 + $2)"
299+ js_bufferSlice :: Int -> Int -> ArrayBuffer -> ArrayBuffer
300+
301+-- * inspecting the xhr response
302+
303+-- This function is only supposed to handle 'ConnectionError's. Other
304+-- 'ClientError's are created in Servant.Client.Req.
305+toResponse :: JSXMLHttpRequest -> ClientM Response
306+toResponse xhr = do
307+ status <- liftIO $ getStatus xhr
308+ case status of
309+ 0 -> throwError $ ConnectionError (SomeException (userError "connection error"))
310+ _ -> liftIO $ do
311+ statusText <- cs <$> getStatusText xhr
312+ headers <- parseHeaders <$> getAllResponseHeaders xhr
313+ response <- getResponse xhr
314+ pure Response
315+ { responseStatusCode = mkStatus status statusText
316+ , responseBody = response
317+ , responseHeaders = Seq.fromList headers
318+ , responseHttpVersion = http11 -- this is made up
319+ }
320+
321+foreign import javascript unsafe "$1.status"
322+ getStatus :: JSXMLHttpRequest -> IO Int
323+
324+getStatusText :: JSXMLHttpRequest -> IO String
325+getStatusText = fmap fromJSString . js_statusText
326+foreign import javascript unsafe "$1.statusText"
327+ js_statusText :: JSXMLHttpRequest -> IO JSVal
328+
329+getAllResponseHeaders :: JSXMLHttpRequest -> IO String
330+getAllResponseHeaders xhr =
331+ fromJSString <$> js_getAllResponseHeaders xhr
332+foreign import javascript unsafe "$1.getAllResponseHeaders()"
333+ js_getAllResponseHeaders :: JSXMLHttpRequest -> IO JSVal
334+
335+getResponse :: JSXMLHttpRequest -> IO BL.ByteString
336+getResponse xhr =
337+ BL.fromStrict
338+ . Buffer.toByteString 0 Nothing
339+ . Buffer.createFromArrayBuffer
340+ <$> js_response xhr
341+
342+foreign import javascript unsafe "$1.response"
343+ js_response :: JSXMLHttpRequest -> IO ArrayBuffer
344+
345+parseHeaders :: String -> ResponseHeaders
346+parseHeaders s =
347+ first mk . first strip . second strip . parseHeader <$>
348+ splitOn "\r\n" (cs s)
349+ where
350+ parseHeader :: BS.ByteString -> (BS.ByteString, BS.ByteString)
351+ parseHeader h = case BS.breakSubstring ":" (cs h) of
352+ (key, BS.drop 1 -> value) -> (key, value)
353+
354+ splitOn :: BS.ByteString -> BS.ByteString -> [BS.ByteString]
355+ splitOn separator input = case BS.breakSubstring separator input of
356+ (prefix, "") -> [prefix]
357+ (prefix, rest) -> prefix : splitOn separator (BS.drop (BS.length separator) rest)
358+
359+ strip :: BS.ByteString -> BS.ByteString
360+ strip = BS.dropWhile isSpace . BS.reverse . BS.dropWhile isSpace . BS.reverse
servant-client/CHANGELOG.md+309
@@ -1,3 +1,312 @@
1+[The latest version of this document is on GitHub.](https://github.com/haskell-servant/servant/blob/master/servant-client/CHANGELOG.md)
2+[Changelog for `servant` package contains significant entries for all core packages.](https://github.com/haskell-servant/servant/blob/master/servant/CHANGELOG.md)
3+
4+Package versions follow the [Package Versioning Policy](https://pvp.haskell.org/): in A.B.C, bumps to either A or B represent major versions.
5+
6+0.19
7+----
8+
9+### Significant changes
10+
11+- Drop support for GHC < 8.6.
12+- Support GHC 9.0 (GHC 9.2 should work as well, but isn't fully tested yet).
13+- Support Aeson 2 ([#1475](https://github.com/haskell-servant/servant/pull/1475)),
14+ which fixes a [DOS vulnerability](https://github.com/haskell/aeson/issues/864)
15+ related to hash collisions.
16+- Add `NamedRoutes` combinator, making support for records first-class in Servant
17+ ([#1388](https://github.com/haskell-servant/servant/pull/1388)).
18+- Add custom type errors for partially applied combinators
19+ ([#1289](https://github.com/haskell-servant/servant/pull/1289),
20+ [#1486](https://github.com/haskell-servant/servant/pull/1486)).
21+- *servant-client* / *servant-client-core* / *servant-http-streams*: Fix
22+ erroneous behavior, where only 2XX status codes would be considered
23+ successful, irrelevant of the status parameter specified by the verb
24+ combinator. ([#1469](https://github.com/haskell-servant/servant/pull/1469))
25+- *servant-client* / *servant-client-core*: Fix `Show` instance for
26+ `Servant.Client.Core.Request`.
27+- *servant-client* / *servant-client-core*: Allow passing arbitrary binary data
28+ in Query parameters.
29+ ([#1432](https://github.com/haskell-servant/servant/pull/1432)).
30+
31+### Other changes
32+
33+- Various version bumps.
34+
35+0.18.3
36+------
37+
38+### Significant changes
39+
40+- Add response header support to UVerb (#1420)
41+
42+### Other changes
43+
44+- Support GHC-9.0.1.
45+- Bump `bytestring`, `hspec`, `http-client` and `QuickCheck` dependencies.
46+
47+0.18.2
48+------
49+
50+### Significant changes
51+
52+- Support `Fragment` combinator.
53+
54+0.18.1
55+------
56+
57+### Significant changes
58+
59+- Union verbs
60+
61+### Other changes
62+
63+- Bump "tested-with" ghc versions
64+
65+0.18
66+----
67+
68+### Significant changes
69+
70+- Support for ghc8.8 (#1318, #1326, #1327)
71+
72+
73+0.17
74+----
75+
76+### Significant changes
77+
78+- Add NoContentVerb [#1028](https://github.com/haskell-servant/servant/issues/1028) [#1219](https://github.com/haskell-servant/servant/pull/1219) [#1228](https://github.com/haskell-servant/servant/pull/1228)
79+
80+ The `NoContent` API endpoints should now use `NoContentVerb` combinator.
81+ The API type changes are usually of the kind
82+
83+ ```diff
84+ - :<|> PostNoContent '[JSON] NoContent
85+ + :<|> PostNoContent
86+ ```
87+
88+ i.e. one doesn't need to specify the content-type anymore. There is no content.
89+
90+- `Capture` can be `Lenient` [#1155](https://github.com/haskell-servant/servant/issues/1155) [#1156](https://github.com/haskell-servant/servant/pull/1156)
91+
92+ You can specify a lenient capture as
93+
94+ ```haskell
95+ :<|> "capture-lenient" :> Capture' '[Lenient] "foo" Int :> GET
96+ ```
97+
98+ which will make the capture always succeed. Handlers will be of the
99+ type `Either String CapturedType`, where `Left err` represents
100+ the possible parse failure.
101+
102+- *servant-client* Added a function to create Client.Request in ClientEnv [#1213](https://github.com/haskell-servant/servant/pull/1213) [#1255](https://github.com/haskell-servant/servant/pull/1255)
103+
104+ The new member `makeClientRequest` of `ClientEnv` is used to create
105+ `http-client` `Request` from `servant-client-core` `Request`.
106+ This functionality can be used for example to set
107+ dynamic timeouts for each request.
108+
109+### Other changes
110+
111+- *servant-client* *servant-client-core* *servant-http-streams* Fix Verb with headers checking content type differently [#1200](https://github.com/haskell-servant/servant/issues/1200) [#1204](https://github.com/haskell-servant/servant/pull/1204)
112+
113+ For `Verb`s with response `Headers`, the implementation didn't check
114+ for the content-type of the response. Now it does.
115+
116+- *servant-client* *servant-http-streams* `HasClient` instance for `Stream` with `Headers` [#1170](https://github.com/haskell-servant/servant/issues/1170) [#1197](https://github.com/haskell-servant/servant/pull/1197)
117+- *servant-client* Redact the authorization header in Show and exceptions [#1238](https://github.com/haskell-servant/servant/pull/1238)
118+
119+
120+
121+0.16.0.1
122+--------
123+
124+- Allow `base-compat-0.11`
125+
126+0.16
127+----
128+
129+- Rename `ServantError` to `ClientError`, `ServantErr` to `ServerError`
130+ [#1131](https://github.com/haskell-servant/servant/pull/1131)
131+
132+- *servant-client-core* Rearrange modules. No more `Internal` modules, whole
133+ API is versioned.
134+ [#1130](https://github.com/haskell-servant/servant/pull/1130)
135+
136+- *servant-client-core* `RequestBody` is now
137+
138+ ```haskell
139+ = RequestBodyLBS LBS.ByteString
140+ | RequestBodyBS BS.ByteString
141+ | RequestBodySource (SourceIO LBS.ByteString)
142+ ```
143+
144+ i.e. no more replicates `http-client`s API.
145+ [#1117](https://github.com/haskell-servant/servant/pull/1117)
146+
147+- *servant-client-core* Keep structured exceptions in `ConnectionError`
148+ constructor of `ClientError`
149+ [#1115](https://github.com/haskell-servant/servant/pull/1115)
150+
151+ ```diff
152+ -| ConnectionError Text
153+ +| ConnectionError SomeException
154+ ```
155+
156+- *servant-client-core* Preserve failing request in `FailureResponse`
157+ constructor of `ClientError`
158+ [#1114](https://github.com/haskell-servant/servant/pull/1114)
159+
160+ ```diff
161+ -FailureResponse Response
162+ +-- | The server returned an error response including the
163+ +-- failing request. 'requestPath' includes the 'BaseUrl' and the
164+ +-- path of the request.
165+ +FailureResponse (RequestF () (BaseUrl, BS.ByteString)) Response
166+ ```
167+
168+- *servant-client* Fix (implement) `StreamBody` instance
169+ [#1110](https://github.com/haskell-servant/servant/pull/1110)
170+
171+- *servant-client* Update CookieJar with intermediate request/responses (redirects)
172+ [#1104](https://github.com/haskell-servant/servant/pull/1104)
173+
174+0.15
175+----
176+
177+- Streaming refactoring.
178+ [#991](https://github.com/haskell-servant/servant/pull/991)
179+ [#1076](https://github.com/haskell-servant/servant/pull/1076)
180+ [#1077](https://github.com/haskell-servant/servant/pull/1077)
181+
182+ The streaming functionality (`Servant.API.Stream`) is refactored to use
183+ `servant`'s own `SourceIO` type (see `Servant.Types.SourceT` documentation),
184+ which replaces both `StreamGenerator` and `ResultStream` types.
185+
186+ New conversion type-classes are `ToSourceIO` and `FromSourceIO`
187+ (replacing `ToStreamGenerator` and `BuildFromStream`).
188+ There are instances for *conduit*, *pipes* and *machines* in new packages:
189+ [servant-conduit](https://hackage.haskell.org/package/servant-conduit)
190+ [servant-pipes](https://hackage.haskell.org/package/servant-pipes) and
191+ [servant-machines](https://hackage.haskell.org/package/servant-machines)
192+ respectively.
193+
194+ Writing new framing strategies is simpler. Check existing strategies for examples.
195+
196+ This change shouldn't affect you, if you don't use streaming endpoints.
197+
198+- *servant-client* Separate streaming client.
199+ [#1066](https://github.com/haskell-servant/servant/pull/1066)
200+
201+ We now have two `http-client` based clients,
202+ in `Servant.Client` and `Servant.Client.Streaming`.
203+
204+ Their API is the same, except for
205+ - `Servant.Client` **cannot** request `Stream` endpoints.
206+ - `Servant.Client` is *run* by direct
207+ `runClientM :: ClientM a -> ClientEnv -> IO (Either ServantError a)`
208+ - `Servant.Client.Streaming` **can** request `Stream` endpoints.
209+ - `Servant.Client.Streaming` is *used* by CPSised
210+ `withClientM :: ClientM a -> ClientEnv -> (Either ServantError a -> IO b) -> IO b`
211+
212+ To access `Stream` endpoints use `Servant.Client.Streaming` with
213+ `withClientM`; otherwise you can continue using `Servant.Client` with `runClientM`.
214+ You can use both too, `ClientEnv` and `BaseUrl` types are same for both.
215+
216+ **Note:** `Servant.Client.Streaming` doesn't *stream* non-`Stream` endpoints.
217+ Requesting ordinary `Verb` endpoints (e.g. `Get`) will block until
218+ the whole response is received.
219+
220+ There is `Servant.Client.Streaming.runClientM` function, but it has
221+ restricted type. `NFData a` constraint prevents using it with
222+ `SourceT`, `Conduit` etc. response types.
223+
224+ ```haskell
225+ runClientM :: NFData a => ClientM a -> ClientEnv -> IO (Either ServantError a)
226+ ```
227+
228+ This change shouldn't affect you, if you don't use streaming endpoints.
229+
230+- Drop support for GHC older than 8.0
231+ [#1008](https://github.com/haskell-servant/servant/pull/1008)
232+ [#1009](https://github.com/haskell-servant/servant/pull/1009)
233+
234+- *servant-client-core* Add `NFData (GenResponse a)` and `NFData ServantError` instances.
235+ [#1076](https://github.com/haskell-servant/servant/pull/1076)
236+
237+ *servant-client-core* Add `aeson` and `Lift BaseUrl` instances
238+ [#1037](https://github.com/haskell-servant/servant/pull/1037)
239+
240+0.14
241+----
242+
243+- `Stream` takes a status code argument
244+
245+ ```diff
246+ -Stream method framing ctype a
247+ +Stream method status framing ctype a
248+ ```
249+
250+ ([#966](https://github.com/haskell-servant/servant/pull/966)
251+ [#972](https://github.com/haskell-servant/servant/pull/972))
252+
253+- `ToStreamGenerator` definition changed, so it's possible to write an instance
254+ for conduits.
255+
256+ ```diff
257+ -class ToStreamGenerator f a where
258+ - toStreamGenerator :: f a -> StreamGenerator a
259+ +class ToStreamGenerator a b | a -> b where
260+ + toStreamGenerator :: a -> StreamGenerator b
261+ ```
262+
263+ ([#959](https://github.com/haskell-servant/servant/pull/959))
264+
265+- Added `NoFraming` streaming strategy
266+ ([#959](https://github.com/haskell-servant/servant/pull/959))
267+
268+- *servant-client-core* Add `hoistClient` to `HasClient`.
269+ Just like `hoistServer` allows us to change the monad in which request handlers
270+ of a web application live, we also have `hoistClient` for changing the monad
271+ in which *client functions* live.
272+ Read [tutorial section for more information](https://docs.servant.dev/en/release-0.14/tutorial/Client.html#changing-the-monad-the-client-functions-live-in).
273+ ([#936](https://github.com/haskell-servant/servant/pull/936))
274+
275+- *servant-client* Add more constructors to `RequestBody`, including
276+ `RequestBodyStream`.
277+ *Note:* we are looking for http-library agnostic API,
278+ so the might change again soon.
279+ Tell us which constructors are useful for you!
280+ ([#913](https://github.com/haskell-servant/servant/pull/913))
281+
282+0.13.0.1
283+--------
284+
285+- Support `base-compat-0.10`
286+
287+0.13
288+----
289+
290+- Streaming endpoint support.
291+ ([#836](https://github.com/haskell-servant/servant/pull/836))
292+- *servant* Add `Servant.API.Modifiers`
293+ ([#873](https://github.com/haskell-servant/servant/pull/873))
294+- *servant-client* Support `http-client`’s `CookieJar`
295+ ([#897](https://github.com/haskell-servant/servant/pull/897)
296+ [#883](https://github.com/haskell-servant/servant/pull/883))
297+
298+0.12.0.1
299+--------
300+
301+- Send `Accept` header.
302+ ([#858](https://github.com/haskell-servant/servant/issues/858))
303+
304+0.12
305+----
306+
307+- Factored out into `servant-client-core` all the functionality that was
308+ independent of the `http-client` backend.
309+
13100.11
2311----
3312
servant-client/LICENSE+1−1
@@ -1,4 +1,4 @@
1−Copyright (c) 2014-2016, Zalora South East Asia Pte Ltd, Servant Contributors
1+Copyright (c) 2014-2016, Zalora South East Asia Pte Ltd, 2016-2018 Servant Contributors
22
33All rights reserved.
44
servant-client/README.lhsnew file+1
@@ -0,0 +1 @@
1+README.md
servant-client/README.md+24−3
@@ -7,14 +7,35 @@ This library lets you automatically derive Haskell functions that let you query
77## Example
88
99``` haskell
10+{-# LANGUAGE DataKinds #-}
11+{-# LANGUAGE TypeOperators #-}
12+
13+import Data.Proxy
14+import Data.Text
15+import Network.HTTP.Client (newManager, defaultManagerSettings)
16+import Servant.API
17+import Servant.Client
18+
19+
20+type Book = Text
21+
1022type MyApi = "books" :> Get '[JSON] [Book] -- GET /books
11− :<|> "books" :> ReqBody Book :> Post '[JSON] Book -- POST /books
23+ :<|> "books" :> ReqBody '[JSON] Book :> Post '[JSON] Book -- POST /books
1224
1325myApi :: Proxy MyApi
1426myApi = Proxy
1527
16−getAllBooks :: Manager -> BaseUrl -> ExceptT String IO [Book]
17−postNewBook :: Book -> Manager -> BaseUrl -> ExceptT String IO Book
1828-- 'client' allows you to produce operations to query an API from a client.
29+postNewBook :: Book -> ClientM Book
30+getAllBooks :: ClientM [Book]
1931(getAllBooks :<|> postNewBook) = client myApi
32+
33+
34+main :: IO ()
35+main = do
36+ manager' <- newManager defaultManagerSettings
37+ res <- runClientM getAllBooks (mkClientEnv manager' (BaseUrl Http "localhost" 8081 ""))
38+ case res of
39+ Left err -> putStrLn $ "Error: " ++ show err
40+ Right books -> print books
2041```
servant-client/include/overlapping-compat.hdeleted−8
@@ -1,8 +0,0 @@
1−#if __GLASGOW_HASKELL__ >= 710
2−#define OVERLAPPABLE_ {-# OVERLAPPABLE #-}
3−#define OVERLAPPING_ {-# OVERLAPPING #-}
4−#else
5−{-# LANGUAGE OverlappingInstances #-}
6−#define OVERLAPPABLE_
7−#define OVERLAPPING_
8−#endif
servant-client/servant-client.cabal+100−59
@@ -1,28 +1,32 @@
1+cabal-version: 2.2
12name: servant-client
2−version: 0.11
3−synopsis: automatical derivation of querying functions for servant webservices
3+version: 0.19
4+
5+synopsis: Automatic derivation of querying functions for servant
6+category: Servant, Web
47description:
58 This library lets you derive automatically Haskell functions that
69 let you query each endpoint of a <http://hackage.haskell.org/package/servant servant> webservice.
710 .
8− See <http://haskell-servant.readthedocs.org/en/stable/tutorial/Client.html the client section of the tutorial>.
11+ See <http://docs.servant.dev/en/stable/tutorial/Client.html the client section of the tutorial>.
912 .
1013 <https://github.com/haskell-servant/servant/blob/master/servant-client/CHANGELOG.md CHANGELOG>
11−license: BSD3
14+
15+homepage: http://docs.servant.dev/
16+bug-reports: http://github.com/haskell-servant/servant/issues
17+license: BSD-3-Clause
1218license-file: LICENSE
1319author: Servant Contributors
1420maintainer: haskell-servant-maintainers@googlegroups.com
15−copyright: 2014-2016 Zalora South East Asia Pte Ltd, Servant Contributors
16−category: Servant Web
21+copyright: 2014-2016 Zalora South East Asia Pte Ltd, 2016-2019 Servant Contributors
1722build-type: Simple
18−cabal-version: >=1.10
19−tested-with: GHC >= 7.8
20−homepage: http://haskell-servant.readthedocs.org/
21−Bug-reports: http://github.com/haskell-servant/servant/issues
23+tested-with: GHC ==8.6.5 || ==8.8.4 || ==8.10.2 || ==9.0.1
24+ , GHCJS ==8.6.0.1
25+
2226extra-source-files:
23− include/*.h
2427 CHANGELOG.md
2528 README.md
29+
2630source-repository head
2731 type: git
2832 location: http://github.com/haskell-servant/servant.git
@@ -30,76 +34,113 @@ source-repository head
3034library
3135 exposed-modules:
3236 Servant.Client
33− Servant.Client.Generic
34− Servant.Client.Experimental.Auth
35− Servant.Common.BaseUrl
36− Servant.Common.BasicAuth
37− Servant.Common.Req
37+ Servant.Client.Streaming
38+ Servant.Client.Internal.HttpClient
39+ Servant.Client.Internal.HttpClient.Streaming
40+
41+ -- Bundled with GHC: Lower bound to not force re-installs
42+ -- text and mtl are bundled starting with GHC-8.4
3843 build-depends:
39− base >= 4.7 && < 4.10
40− , base-compat >= 0.9.1 && < 0.10
41− , aeson >= 0.7 && < 1.3
42− , attoparsec >= 0.12 && < 0.14
43− , base64-bytestring >= 1.0.0.1 && < 1.1
44− , bytestring >= 0.10 && < 0.11
45− , exceptions >= 0.8 && < 0.9
46− , generics-sop >= 0.1.0.0 && < 0.4
47− , http-api-data >= 0.3.6 && < 0.4
48− , http-client >= 0.4.18.1 && < 0.6
49− , http-client-tls >= 0.2.2 && < 0.4
50− , http-media >= 0.6.2 && < 0.7
51− , http-types >= 0.8.6 && < 0.10
52− , monad-control >= 1.0.0.4 && < 1.1
53− , network-uri >= 2.6 && < 2.7
54− , safe >= 0.3.9 && < 0.4
55− , semigroupoids >= 4.3 && < 5.3
56− , servant == 0.11.*
57− , string-conversions >= 0.3 && < 0.5
58− , text >= 1.2 && < 1.3
59− , transformers >= 0.3 && < 0.6
60− , transformers-base >= 0.4.4 && < 0.5
61− , transformers-compat >= 0.4 && < 0.6
62− , mtl
63− if !impl(ghc >= 8.0)
44+ base >= 4.9 && < 4.17
45+ , bytestring >= 0.10.8.1 && < 0.12
46+ , containers >= 0.5.7.1 && < 0.7
47+ , deepseq >= 1.4.2.0 && < 1.5
48+ , mtl >= 2.2.2 && < 2.3
49+ , stm >= 2.4.5.1 && < 2.6
50+ , text >= 1.2.3.0 && < 2.1
51+ , time >= 1.6.0.1 && < 1.12
52+ , transformers >= 0.5.2.0 && < 0.6
53+
54+ if !impl(ghc >= 8.2)
6455 build-depends:
65− semigroups >=0.16.2.2 && <0.19
56+ bifunctors >= 5.5.3 && < 5.6
57+
58+ -- Servant dependencies.
59+ -- Strict dependency on `servant-client-core` as we re-export things.
60+ build-depends:
61+ servant >= 0.18 && < 0.20
62+ , servant-client-core >= 0.19 && < 0.19.1
63+
64+ -- Other dependencies: Lower bound around what is in the latest Stackage LTS.
65+ -- Here can be exceptions if we really need features from the newer versions.
66+ build-depends:
67+ base-compat >= 0.10.5 && < 0.13
68+ , http-client >= 0.5.13.1 && < 0.8
69+ , http-media >= 0.7.1.3 && < 0.9
70+ , http-types >= 0.12.2 && < 0.13
71+ , exceptions >= 0.10.0 && < 0.11
72+ , kan-extensions >= 5.2 && < 5.3
73+ , monad-control >= 1.0.2.3 && < 1.1
74+ , semigroupoids >= 5.3.1 && < 5.4
75+ , transformers-base >= 0.4.5.2 && < 0.5
76+ , transformers-compat >= 0.6.2 && < 0.8
77+
6678 hs-source-dirs: src
6779 default-language: Haskell2010
68− ghc-options: -Wall
69− if impl(ghc >= 8.0)
70− ghc-options: -Wno-redundant-constraints
71− include-dirs: include
80+ ghc-options: -Wall -Wno-redundant-constraints
7281
7382test-suite spec
7483 type: exitcode-stdio-1.0
75− ghc-options: -Wall
84+ ghc-options: -Wall -rtsopts -threaded "-with-rtsopts=-T -N2"
7685 default-language: Haskell2010
86+ if impl(ghcjs)
87+ buildable: False
7788 hs-source-dirs: test
7889 main-is: Spec.hs
7990 other-modules:
80− Servant.ClientSpec
81− , Servant.Common.BaseUrlSpec
91+ Servant.BasicAuthSpec
92+ Servant.BrokenSpec
93+ Servant.ClientTestUtils
94+ Servant.ConnectionErrorSpec
95+ Servant.FailSpec
96+ Servant.GenAuthSpec
97+ Servant.GenericSpec
98+ Servant.HoistClientSpec
99+ Servant.StreamSpec
100+ Servant.SuccessSpec
101+ Servant.WrappedApiSpec
102+
103+ -- Dependencies inherited from the library. No need to specify bounds.
82104 build-depends:
83− base == 4.*
105+ base
84106 , aeson
85107 , base-compat
86108 , bytestring
87− , deepseq
88− , hspec == 2.*
89109 , http-api-data
90110 , http-client
91− , http-media
92111 , http-types
93− , HUnit
94112 , mtl
95− , network >= 2.6
96− , QuickCheck >= 2.7
97− , servant
113+ , kan-extensions
98114 , servant-client
99− , servant-server == 0.11.*
115+ , servant-client-core
116+ , sop-core
117+ , stm
100118 , text
101119 , transformers
102120 , transformers-compat
103121 , wai
104122 , warp
105− , generics-sop
123+
124+ -- Additional dependencies
125+ build-depends:
126+ entropy >= 0.4.1.3 && < 0.5
127+ , hspec >= 2.6.0 && < 2.10
128+ , HUnit >= 1.6.0.0 && < 1.7
129+ , network >= 2.8.0.0 && < 3.2
130+ , QuickCheck >= 2.12.6.1 && < 2.15
131+ , servant == 0.19.*
132+ , servant-server == 0.19.*
133+ , tdigest >= 0.2 && < 0.3
134+
135+ build-tool-depends:
136+ hspec-discover:hspec-discover >= 2.6.0 && < 2.10
137+
138+test-suite readme
139+ type: exitcode-stdio-1.0
140+ main-is: README.lhs
141+ build-depends: base, servant, http-client, text, servant-client, markdown-unlit
142+ build-tool-depends: markdown-unlit:markdown-unlit
143+ ghc-options: -pgmL markdown-unlit
144+ default-language: Haskell2010
145+ if impl(ghcjs)
146+ buildable: False
servant-client/src/Servant/Client.hs+9−489
@@ -1,498 +1,18 @@
1−{-# LANGUAGE CPP #-}
2−{-# LANGUAGE DataKinds #-}
3−{-# LANGUAGE FlexibleContexts #-}
4−{-# LANGUAGE FlexibleInstances #-}
5−{-# LANGUAGE InstanceSigs #-}
6−{-# LANGUAGE OverloadedStrings #-}
7−{-# LANGUAGE PolyKinds #-}
8−{-# LANGUAGE ScopedTypeVariables #-}
9−{-# LANGUAGE TypeFamilies #-}
10−{-# LANGUAGE TypeOperators #-}
11−{-# LANGUAGE UndecidableInstances #-}
121
13−#include "overlapping-compat.h"
2+
143-- | This module provides 'client' which can automatically generate
154-- querying functions for each endpoint just from the type representing your
165-- API.
176module Servant.Client
18− ( AuthClientData
19− , AuthenticateReq(..)
20− , client
21− , HasClient(..)
7+ ( client
228 , ClientM
239 , runClientM
24− , ClientEnv (ClientEnv)
25− , mkAuthenticateReq
26− , ServantError(..)
27− , EmptyClient(..)
28− , module Servant.Common.BaseUrl
10+ , ClientEnv(..)
11+ , mkClientEnv
12+ , defaultMakeClientRequest
13+ , hoistClient
14+ , module Servant.Client.Core.Reexport
2915 ) where
3016
31−import Data.ByteString.Lazy (ByteString)
32−import Data.List
33−import Data.Proxy
34−import Data.String.Conversions
35−import Data.Text (unpack)
36−import GHC.TypeLits
37−import Network.HTTP.Client (Response)
38−import Network.HTTP.Media
39−import qualified Network.HTTP.Types as H
40−import qualified Network.HTTP.Types.Header as HTTP
41−import Prelude ()
42−import Prelude.Compat
43−import Servant.API
44−import Servant.Client.Experimental.Auth
45−import Servant.Common.BaseUrl
46−import Servant.Common.BasicAuth
47−import Servant.Common.Req
48−
49−-- * Accessing APIs as a Client
50−
51−-- | 'client' allows you to produce operations to query an API from a client.
52−--
53−-- > type MyApi = "books" :> Get '[JSON] [Book] -- GET /books
54−-- > :<|> "books" :> ReqBody '[JSON] Book :> Post '[JSON] Book -- POST /books
55−-- >
56−-- > myApi :: Proxy MyApi
57−-- > myApi = Proxy
58−-- >
59−-- > getAllBooks :: ClientM [Book]
60−-- > postNewBook :: Book -> ClientM Book
61−-- > (getAllBooks :<|> postNewBook) = client myApi
62−client :: HasClient api => Proxy api -> Client api
63−client p = clientWithRoute p defReq
64−
65−-- | This class lets us define how each API combinator
66−-- influences the creation of an HTTP request. It's mostly
67−-- an internal class, you can just use 'client'.
68−class HasClient api where
69− type Client api :: *
70− clientWithRoute :: Proxy api -> Req -> Client api
71−
72−
73−-- | A client querying function for @a ':<|>' b@ will actually hand you
74−-- one function for querying @a@ and another one for querying @b@,
75−-- stitching them together with ':<|>', which really is just like a pair.
76−--
77−-- > type MyApi = "books" :> Get '[JSON] [Book] -- GET /books
78−-- > :<|> "books" :> ReqBody '[JSON] Book :> Post Book -- POST /books
79−-- >
80−-- > myApi :: Proxy MyApi
81−-- > myApi = Proxy
82−-- >
83−-- > getAllBooks :: ClientM [Book]
84−-- > postNewBook :: Book -> ClientM Book
85−-- > (getAllBooks :<|> postNewBook) = client myApi
86−instance (HasClient a, HasClient b) => HasClient (a :<|> b) where
87− type Client (a :<|> b) = Client a :<|> Client b
88− clientWithRoute Proxy req =
89− clientWithRoute (Proxy :: Proxy a) req :<|>
90− clientWithRoute (Proxy :: Proxy b) req
91−
92−-- | Singleton type representing a client for an empty API.
93−data EmptyClient = EmptyClient deriving (Eq, Show, Bounded, Enum)
94−
95−-- | The client for 'EmptyAPI' is simply 'EmptyClient'.
96−--
97−-- > type MyAPI = "books" :> Get '[JSON] [Book] -- GET /books
98−-- > :<|> "nothing" :> EmptyAPI
99−-- >
100−-- > myApi :: Proxy MyApi
101−-- > myApi = Proxy
102−-- >
103−-- > getAllBooks :: ClientM [Book]
104−-- > (getAllBooks :<|> EmptyClient) = client myApi
105−instance HasClient EmptyAPI where
106− type Client EmptyAPI = EmptyClient
107− clientWithRoute Proxy _ = EmptyClient
108−
109−-- | If you use a 'Capture' in one of your endpoints in your API,
110−-- the corresponding querying function will automatically take
111−-- an additional argument of the type specified by your 'Capture'.
112−-- That function will take care of inserting a textual representation
113−-- of this value at the right place in the request path.
114−--
115−-- You can control how values for this type are turned into
116−-- text by specifying a 'ToHttpApiData' instance for your type.
117−--
118−-- Example:
119−--
120−-- > type MyApi = "books" :> Capture "isbn" Text :> Get '[JSON] Book
121−-- >
122−-- > myApi :: Proxy MyApi
123−-- > myApi = Proxy
124−-- >
125−-- > getBook :: Text -> ClientM Book
126−-- > getBook = client myApi
127−-- > -- then you can just use "getBook" to query that endpoint
128−instance (KnownSymbol capture, ToHttpApiData a, HasClient api)
129− => HasClient (Capture capture a :> api) where
130−
131− type Client (Capture capture a :> api) =
132− a -> Client api
133−
134− clientWithRoute Proxy req val =
135− clientWithRoute (Proxy :: Proxy api)
136− (appendToPath p req)
137−
138− where p = unpack (toUrlPiece val)
139−
140−-- | If you use a 'CaptureAll' in one of your endpoints in your API,
141−-- the corresponding querying function will automatically take an
142−-- additional argument of a list of the type specified by your
143−-- 'CaptureAll'. That function will take care of inserting a textual
144−-- representation of this value at the right place in the request
145−-- path.
146−--
147−-- You can control how these values are turned into text by specifying
148−-- a 'ToHttpApiData' instance of your type.
149−--
150−-- Example:
151−--
152−-- > type MyAPI = "src" :> CaptureAll Text -> Get '[JSON] SourceFile
153−-- >
154−-- > myApi :: Proxy
155−-- > myApi = Proxy
156−--
157−-- > getSourceFile :: [Text] -> ClientM SourceFile
158−-- > getSourceFile = client myApi
159−-- > -- then you can use "getSourceFile" to query that endpoint
160−instance (KnownSymbol capture, ToHttpApiData a, HasClient sublayout)
161− => HasClient (CaptureAll capture a :> sublayout) where
162−
163− type Client (CaptureAll capture a :> sublayout) =
164− [a] -> Client sublayout
165−
166− clientWithRoute Proxy req vals =
167− clientWithRoute (Proxy :: Proxy sublayout)
168− (foldl' (flip appendToPath) req ps)
169−
170− where ps = map (unpack . toUrlPiece) vals
171−
172−instance OVERLAPPABLE_
173− -- Note [Non-Empty Content Types]
174− (MimeUnrender ct a, ReflectMethod method, cts' ~ (ct ': cts)
175− ) => HasClient (Verb method status cts' a) where
176− type Client (Verb method status cts' a) = ClientM a
177− clientWithRoute Proxy req = do
178− snd <$> performRequestCT (Proxy :: Proxy ct) method req
179− where method = reflectMethod (Proxy :: Proxy method)
180−
181−instance OVERLAPPING_
182− (ReflectMethod method) => HasClient (Verb method status cts NoContent) where
183− type Client (Verb method status cts NoContent)
184− = ClientM NoContent
185− clientWithRoute Proxy req = do
186− performRequestNoBody method req >> return NoContent
187− where method = reflectMethod (Proxy :: Proxy method)
188−
189−instance OVERLAPPING_
190− -- Note [Non-Empty Content Types]
191− ( MimeUnrender ct a, BuildHeadersTo ls, ReflectMethod method, cts' ~ (ct ': cts)
192− ) => HasClient (Verb method status cts' (Headers ls a)) where
193− type Client (Verb method status cts' (Headers ls a))
194− = ClientM (Headers ls a)
195− clientWithRoute Proxy req = do
196− let method = reflectMethod (Proxy :: Proxy method)
197− (hdrs, resp) <- performRequestCT (Proxy :: Proxy ct) method req
198− return $ Headers { getResponse = resp
199− , getHeadersHList = buildHeadersTo hdrs
200− }
201−
202−instance OVERLAPPING_
203− ( BuildHeadersTo ls, ReflectMethod method
204− ) => HasClient (Verb method status cts (Headers ls NoContent)) where
205− type Client (Verb method status cts (Headers ls NoContent))
206− = ClientM (Headers ls NoContent)
207− clientWithRoute Proxy req = do
208− let method = reflectMethod (Proxy :: Proxy method)
209− hdrs <- performRequestNoBody method req
210− return $ Headers { getResponse = NoContent
211− , getHeadersHList = buildHeadersTo hdrs
212− }
213−
214−
215−-- | If you use a 'Header' in one of your endpoints in your API,
216−-- the corresponding querying function will automatically take
217−-- an additional argument of the type specified by your 'Header',
218−-- wrapped in Maybe.
219−--
220−-- That function will take care of encoding this argument as Text
221−-- in the request headers.
222−--
223−-- All you need is for your type to have a 'ToHttpApiData' instance.
224−--
225−-- Example:
226−--
227−-- > newtype Referer = Referer { referrer :: Text }
228−-- > deriving (Eq, Show, Generic, ToHttpApiData)
229−-- >
230−-- > -- GET /view-my-referer
231−-- > type MyApi = "view-my-referer" :> Header "Referer" Referer :> Get '[JSON] Referer
232−-- >
233−-- > myApi :: Proxy MyApi
234−-- > myApi = Proxy
235−-- >
236−-- > viewReferer :: Maybe Referer -> ClientM Book
237−-- > viewReferer = client myApi
238−-- > -- then you can just use "viewRefer" to query that endpoint
239−-- > -- specifying Nothing or e.g Just "http://haskell.org/" as arguments
240−instance (KnownSymbol sym, ToHttpApiData a, HasClient api)
241− => HasClient (Header sym a :> api) where
242−
243− type Client (Header sym a :> api) =
244− Maybe a -> Client api
245−
246− clientWithRoute Proxy req mval =
247− clientWithRoute (Proxy :: Proxy api)
248− (maybe req
249− (\value -> Servant.Common.Req.addHeader hname value req)
250− mval
251− )
252−
253− where hname = symbolVal (Proxy :: Proxy sym)
254−
255−-- | Using a 'HttpVersion' combinator in your API doesn't affect the client
256−-- functions.
257−instance HasClient api
258− => HasClient (HttpVersion :> api) where
259−
260− type Client (HttpVersion :> api) =
261− Client api
262−
263− clientWithRoute Proxy =
264− clientWithRoute (Proxy :: Proxy api)
265−
266−-- | If you use a 'QueryParam' in one of your endpoints in your API,
267−-- the corresponding querying function will automatically take
268−-- an additional argument of the type specified by your 'QueryParam',
269−-- enclosed in Maybe.
270−--
271−-- If you give Nothing, nothing will be added to the query string.
272−--
273−-- If you give a non-'Nothing' value, this function will take care
274−-- of inserting a textual representation of this value in the query string.
275−--
276−-- You can control how values for your type are turned into
277−-- text by specifying a 'ToHttpApiData' instance for your type.
278−--
279−-- Example:
280−--
281−-- > type MyApi = "books" :> QueryParam "author" Text :> Get '[JSON] [Book]
282−-- >
283−-- > myApi :: Proxy MyApi
284−-- > myApi = Proxy
285−-- >
286−-- > getBooksBy :: Maybe Text -> ClientM [Book]
287−-- > getBooksBy = client myApi
288−-- > -- then you can just use "getBooksBy" to query that endpoint.
289−-- > -- 'getBooksBy Nothing' for all books
290−-- > -- 'getBooksBy (Just "Isaac Asimov")' to get all books by Isaac Asimov
291−instance (KnownSymbol sym, ToHttpApiData a, HasClient api)
292− => HasClient (QueryParam sym a :> api) where
293−
294− type Client (QueryParam sym a :> api) =
295− Maybe a -> Client api
296−
297− -- if mparam = Nothing, we don't add it to the query string
298− clientWithRoute Proxy req mparam =
299− clientWithRoute (Proxy :: Proxy api)
300− (maybe req
301− (flip (appendToQueryString pname) req . Just)
302− mparamText
303− )
304−
305− where pname = cs pname'
306− pname' = symbolVal (Proxy :: Proxy sym)
307− mparamText = fmap toQueryParam mparam
308−
309−-- | If you use a 'QueryParams' in one of your endpoints in your API,
310−-- the corresponding querying function will automatically take
311−-- an additional argument, a list of values of the type specified
312−-- by your 'QueryParams'.
313−--
314−-- If you give an empty list, nothing will be added to the query string.
315−--
316−-- Otherwise, this function will take care
317−-- of inserting a textual representation of your values in the query string,
318−-- under the same query string parameter name.
319−--
320−-- You can control how values for your type are turned into
321−-- text by specifying a 'ToHttpApiData' instance for your type.
322−--
323−-- Example:
324−--
325−-- > type MyApi = "books" :> QueryParams "authors" Text :> Get '[JSON] [Book]
326−-- >
327−-- > myApi :: Proxy MyApi
328−-- > myApi = Proxy
329−-- >
330−-- > getBooksBy :: [Text] -> ClientM [Book]
331−-- > getBooksBy = client myApi
332−-- > -- then you can just use "getBooksBy" to query that endpoint.
333−-- > -- 'getBooksBy []' for all books
334−-- > -- 'getBooksBy ["Isaac Asimov", "Robert A. Heinlein"]'
335−-- > -- to get all books by Asimov and Heinlein
336−instance (KnownSymbol sym, ToHttpApiData a, HasClient api)
337− => HasClient (QueryParams sym a :> api) where
338−
339− type Client (QueryParams sym a :> api) =
340− [a] -> Client api
341−
342− clientWithRoute Proxy req paramlist =
343− clientWithRoute (Proxy :: Proxy api)
344− (foldl' (\ req' -> maybe req' (flip (appendToQueryString pname) req' . Just))
345− req
346− paramlist'
347− )
348−
349− where pname = cs pname'
350− pname' = symbolVal (Proxy :: Proxy sym)
351− paramlist' = map (Just . toQueryParam) paramlist
352−
353−-- | If you use a 'QueryFlag' in one of your endpoints in your API,
354−-- the corresponding querying function will automatically take
355−-- an additional 'Bool' argument.
356−--
357−-- If you give 'False', nothing will be added to the query string.
358−--
359−-- Otherwise, this function will insert a value-less query string
360−-- parameter under the name associated to your 'QueryFlag'.
361−--
362−-- Example:
363−--
364−-- > type MyApi = "books" :> QueryFlag "published" :> Get '[JSON] [Book]
365−-- >
366−-- > myApi :: Proxy MyApi
367−-- > myApi = Proxy
368−-- >
369−-- > getBooks :: Bool -> ClientM [Book]
370−-- > getBooks = client myApi
371−-- > -- then you can just use "getBooks" to query that endpoint.
372−-- > -- 'getBooksBy False' for all books
373−-- > -- 'getBooksBy True' to only get _already published_ books
374−instance (KnownSymbol sym, HasClient api)
375− => HasClient (QueryFlag sym :> api) where
376−
377− type Client (QueryFlag sym :> api) =
378− Bool -> Client api
379−
380− clientWithRoute Proxy req flag =
381− clientWithRoute (Proxy :: Proxy api)
382− (if flag
383− then appendToQueryString paramname Nothing req
384− else req
385− )
386−
387− where paramname = cs $ symbolVal (Proxy :: Proxy sym)
388−
389−
390−-- | Pick a 'Method' and specify where the server you want to query is. You get
391−-- back the full `Response`.
392−instance HasClient Raw where
393− type Client Raw
394− = H.Method -> ClientM (Int, ByteString, MediaType, [HTTP.Header], Response ByteString)
395−
396− clientWithRoute :: Proxy Raw -> Req -> Client Raw
397− clientWithRoute Proxy req httpMethod = do
398− performRequest httpMethod req
399−
400−-- | If you use a 'ReqBody' in one of your endpoints in your API,
401−-- the corresponding querying function will automatically take
402−-- an additional argument of the type specified by your 'ReqBody'.
403−-- That function will take care of encoding this argument as JSON and
404−-- of using it as the request body.
405−--
406−-- All you need is for your type to have a 'ToJSON' instance.
407−--
408−-- Example:
409−--
410−-- > type MyApi = "books" :> ReqBody '[JSON] Book :> Post '[JSON] Book
411−-- >
412−-- > myApi :: Proxy MyApi
413−-- > myApi = Proxy
414−-- >
415−-- > addBook :: Book -> ClientM Book
416−-- > addBook = client myApi
417−-- > -- then you can just use "addBook" to query that endpoint
418−instance (MimeRender ct a, HasClient api)
419− => HasClient (ReqBody (ct ': cts) a :> api) where
420−
421− type Client (ReqBody (ct ': cts) a :> api) =
422− a -> Client api
423−
424− clientWithRoute Proxy req body =
425− clientWithRoute (Proxy :: Proxy api)
426− (let ctProxy = Proxy :: Proxy ct
427− in setReqBodyLBS (mimeRender ctProxy body)
428− -- We use first contentType from the Accept list
429− (contentType ctProxy)
430− req
431− )
432−
433−-- | Make the querying function append @path@ to the request path.
434−instance (KnownSymbol path, HasClient api) => HasClient (path :> api) where
435− type Client (path :> api) = Client api
436−
437− clientWithRoute Proxy req =
438− clientWithRoute (Proxy :: Proxy api)
439− (appendToPath p req)
440−
441− where p = symbolVal (Proxy :: Proxy path)
442−
443−instance HasClient api => HasClient (Vault :> api) where
444− type Client (Vault :> api) = Client api
445−
446− clientWithRoute Proxy req =
447− clientWithRoute (Proxy :: Proxy api) req
448−
449−instance HasClient api => HasClient (RemoteHost :> api) where
450− type Client (RemoteHost :> api) = Client api
451−
452− clientWithRoute Proxy req =
453− clientWithRoute (Proxy :: Proxy api) req
454−
455−instance HasClient api => HasClient (IsSecure :> api) where
456− type Client (IsSecure :> api) = Client api
457−
458− clientWithRoute Proxy req =
459− clientWithRoute (Proxy :: Proxy api) req
460−
461−instance HasClient subapi =>
462− HasClient (WithNamedContext name context subapi) where
463−
464− type Client (WithNamedContext name context subapi) = Client subapi
465− clientWithRoute Proxy = clientWithRoute (Proxy :: Proxy subapi)
466−
467−instance ( HasClient api
468− ) => HasClient (AuthProtect tag :> api) where
469− type Client (AuthProtect tag :> api)
470− = AuthenticateReq (AuthProtect tag) -> Client api
471−
472− clientWithRoute Proxy req (AuthenticateReq (val,func)) =
473− clientWithRoute (Proxy :: Proxy api) (func val req)
474−
475−-- * Basic Authentication
476−
477−instance HasClient api => HasClient (BasicAuth realm usr :> api) where
478− type Client (BasicAuth realm usr :> api) = BasicAuthData -> Client api
479−
480− clientWithRoute Proxy req val =
481− clientWithRoute (Proxy :: Proxy api) (basicAuthReq val req)
482−
483−
484−{- Note [Non-Empty Content Types]
485−~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
486−Rather than have
487−
488− instance (..., cts' ~ (ct ': cts)) => ... cts' ...
489−
490−It may seem to make more sense to have:
491−
492− instance (...) => ... (ct ': cts) ...
493−
494−But this means that if another instance exists that does *not* require
495−non-empty lists, but is otherwise more specific, no instance will be overall
496−more specific. This in turn generally means adding yet another instance (one
497−for empty and one for non-empty lists).
498−-}
17+import Servant.Client.Core.Reexport
18+import Servant.Client.Internal.HttpClient
servant-client/src/Servant/Client/Generic.hsdeleted−164
@@ -1,164 +0,0 @@
1−{-# LANGUAGE CPP #-}
2−{-# LANGUAGE DataKinds #-}
3−{-# LANGUAGE DefaultSignatures #-}
4−{-# LANGUAGE FlexibleContexts #-}
5−{-# LANGUAGE FlexibleInstances #-}
6−{-# LANGUAGE MultiParamTypeClasses #-}
7−{-# LANGUAGE TypeFamilies #-}
8−{-# LANGUAGE TypeOperators #-}
9−{-# LANGUAGE UndecidableInstances #-}
10−
11−#include "overlapping-compat.h"
12−
13−module Servant.Client.Generic
14− ( ClientLike(..)
15− , genericMkClientL
16− , genericMkClientP
17− ) where
18−
19−import Generics.SOP (Code, Generic, I(..), NP(..), NS(Z), SOP(..), to)
20−import Servant.API ((:<|>)(..))
21−import Servant.Client (ClientM)
22−
23−-- | This class allows us to match client structure with client functions
24−-- produced with 'client' without explicit pattern-matching.
25−--
26−-- The client structure needs a 'Generics.SOP.Generic' instance.
27−--
28−-- Example:
29−--
30−-- > type API
31−-- > = "foo" :> Capture "x" Int :> Get '[JSON] Int
32−-- > :<|> "bar" :> QueryParam "a" Char :> QueryParam "b" String :> Post '[JSON] [Int]
33−-- > :<|> Capture "nested" Int :> NestedAPI
34−-- >
35−-- > type NestedAPI
36−-- > = Get '[JSON] String
37−-- > :<|> "baz" :> QueryParam "c" Char :> Post '[JSON] ()
38−-- >
39−-- > data APIClient = APIClient
40−-- > { getFoo :: Int -> ClientM Int
41−-- > , postBar :: Maybe Char -> Maybe String -> ClientM [Int]
42−-- > , mkNestedClient :: Int -> NestedClient
43−-- > } deriving GHC.Generic
44−-- >
45−-- > instance Generics.SOP.Generic APIClient
46−-- > instance (Client API ~ client) => ClientLike client APIClient
47−-- >
48−-- > data NestedClient = NestedClient
49−-- > { getString :: ClientM String
50−-- > , postBaz :: Maybe Char -> ClientM ()
51−-- > } deriving GHC.Generic
52−-- >
53−-- > instance Generics.SOP.Generic NestedClient
54−-- > instance (Client NestedAPI ~ client) => ClientLike client NestedClient
55−-- >
56−-- > mkAPIClient :: APIClient
57−-- > mkAPIClient = mkClient (client (Proxy :: Proxy API))
58−--
59−-- By default, left-nested alternatives are expanded:
60−--
61−-- > type API1
62−-- > = "foo" :> Capture "x" Int :> Get '[JSON] Int
63−-- > :<|> "bar" :> QueryParam "a" Char :> Post '[JSON] String
64−-- >
65−-- > type API2
66−-- > = "baz" :> QueryParam "c" Char :> Post '[JSON] ()
67−-- >
68−-- > type API = API1 :<|> API2
69−-- >
70−-- > data APIClient = APIClient
71−-- > { getFoo :: Int -> ClientM Int
72−-- > , postBar :: Maybe Char -> ClientM String
73−-- > , postBaz :: Maybe Char -> ClientM ()
74−-- > } deriving GHC.Generic
75−-- >
76−-- > instance Generics.SOP.Generic APIClient
77−-- > instance (Client API ~ client) => ClientLike client APIClient
78−-- >
79−-- > mkAPIClient :: APIClient
80−-- > mkAPIClient = mkClient (client (Proxy :: Proxy API))
81−--
82−-- If you want to define client for @API1@ as a separate data structure,
83−-- you can use 'genericMkClientP':
84−--
85−-- > data APIClient1 = APIClient1
86−-- > { getFoo :: Int -> ClientM Int
87−-- > , postBar :: Maybe Char -> ClientM String
88−-- > } deriving GHC.Generic
89−-- >
90−-- > instance Generics.SOP.Generic APIClient1
91−-- > instance (Client API1 ~ client) => ClientLike client APIClient1
92−-- >
93−-- > data APIClient = APIClient
94−-- > { mkAPIClient1 :: APIClient1
95−-- > , postBaz :: Maybe Char -> ClientM ()
96−-- > } deriving GHC.Generic
97−-- >
98−-- > instance Generics.SOP.Generic APIClient
99−-- > instance (Client API ~ client) => ClientLike client APIClient where
100−-- > mkClient = genericMkClientP
101−-- >
102−-- > mkAPIClient :: APIClient
103−-- > mkAPIClient = mkClient (client (Proxy :: Proxy API))
104−class ClientLike client custom where
105− mkClient :: client -> custom
106− default mkClient :: (Generic custom, Code custom ~ '[xs], GClientList client '[], GClientLikeL (ClientList client '[]) xs)
107− => client -> custom
108− mkClient = genericMkClientL
109−
110−instance ClientLike client custom
111− => ClientLike (a -> client) (a -> custom) where
112− mkClient c = mkClient . c
113−
114−instance ClientLike (ClientM a) (ClientM a) where
115− mkClient = id
116−
117−-- | Match client structure with client functions, regarding left-nested API clients
118−-- as separate data structures.
119−class GClientLikeP client xs where
120− gMkClientP :: client -> NP I xs
121−
122−instance (GClientLikeP b (y ': xs), ClientLike a x)
123− => GClientLikeP (a :<|> b) (x ': y ': xs) where
124− gMkClientP (a :<|> b) = I (mkClient a) :* gMkClientP b
125−
126−instance ClientLike a x => GClientLikeP a '[x] where
127− gMkClientP a = I (mkClient a) :* Nil
128−
129−-- | Match client structure with client functions, expanding left-nested API clients
130−-- in the same structure.
131−class GClientLikeL (xs :: [*]) (ys :: [*]) where
132− gMkClientL :: NP I xs -> NP I ys
133−
134−instance GClientLikeL '[] '[] where
135− gMkClientL Nil = Nil
136−
137−instance (ClientLike x y, GClientLikeL xs ys) => GClientLikeL (x ': xs) (y ': ys) where
138− gMkClientL (I x :* xs) = I (mkClient x) :* gMkClientL xs
139−
140−type family ClientList (client :: *) (acc :: [*]) :: [*] where
141− ClientList (a :<|> b) acc = ClientList a (ClientList b acc)
142− ClientList a acc = a ': acc
143−
144−class GClientList client (acc :: [*]) where
145− gClientList :: client -> NP I acc -> NP I (ClientList client acc)
146−
147−instance (GClientList b acc, GClientList a (ClientList b acc))
148− => GClientList (a :<|> b) acc where
149− gClientList (a :<|> b) acc = gClientList a (gClientList b acc)
150−
151−instance OVERLAPPABLE_ (ClientList client acc ~ (client ': acc))
152− => GClientList client acc where
153− gClientList c acc = I c :* acc
154−
155−-- | Generate client structure from client type, expanding left-nested API (done by default).
156−genericMkClientL :: (Generic custom, Code custom ~ '[xs], GClientList client '[], GClientLikeL (ClientList client '[]) xs)
157− => client -> custom
158−genericMkClientL = to . SOP . Z . gMkClientL . flip gClientList Nil
159−
160−-- | Generate client structure from client type, regarding left-nested API clients as separate data structures.
161−genericMkClientP :: (Generic custom, Code custom ~ '[xs], GClientLikeP client xs)
162− => client -> custom
163−genericMkClientP = to . SOP . Z . gMkClientP
164−
servant-client/src/Servant/Client/Internal/HttpClient.hsnew file+302
@@ -0,0 +1,302 @@
1+{-# LANGUAGE CPP #-}
2+{-# LANGUAGE DeriveDataTypeable #-}
3+{-# LANGUAGE DeriveGeneric #-}
4+{-# LANGUAGE FlexibleContexts #-}
5+{-# LANGUAGE FlexibleInstances #-}
6+{-# LANGUAGE GeneralizedNewtypeDeriving #-}
7+{-# LANGUAGE MultiParamTypeClasses #-}
8+{-# LANGUAGE OverloadedStrings #-}
9+{-# LANGUAGE RankNTypes #-}
10+{-# LANGUAGE ScopedTypeVariables #-}
11+{-# LANGUAGE TypeFamilies #-}
12+module Servant.Client.Internal.HttpClient where
13+
14+import Prelude ()
15+import Prelude.Compat
16+
17+import Control.Concurrent.MVar
18+ (modifyMVar, newMVar)
19+import Control.Concurrent.STM.TVar
20+import Control.Exception
21+ (SomeException (..), catch)
22+import Control.Monad
23+ (unless)
24+import Control.Monad.Base
25+ (MonadBase (..))
26+import Control.Monad.Catch
27+ (MonadCatch, MonadThrow, MonadMask)
28+import Control.Monad.Error.Class
29+ (MonadError (..))
30+import Control.Monad.IO.Class
31+ (MonadIO (..))
32+import Control.Monad.Reader
33+ (MonadReader, ReaderT, ask, runReaderT)
34+import Control.Monad.STM
35+ (STM, atomically)
36+import Control.Monad.Trans.Control
37+ (MonadBaseControl (..))
38+import Control.Monad.Trans.Except
39+ (ExceptT, runExceptT)
40+import Data.Bifunctor
41+ (bimap)
42+import qualified Data.ByteString as BS
43+import Data.ByteString.Builder
44+ (toLazyByteString)
45+import qualified Data.ByteString.Lazy as BSL
46+import Data.Either
47+ (either)
48+import Data.Foldable
49+ (foldl',toList)
50+import Data.Functor.Alt
51+ (Alt (..))
52+import Data.Maybe
53+ (maybe, maybeToList)
54+import Data.Proxy
55+ (Proxy (..))
56+import Data.Sequence
57+ (fromList)
58+import Data.String
59+ (fromString)
60+import Data.Time.Clock
61+ (UTCTime, getCurrentTime)
62+import GHC.Generics
63+import Network.HTTP.Media
64+ (renderHeader)
65+import Network.HTTP.Types
66+ (hContentType, renderQuery, statusIsSuccessful, urlEncode, Status)
67+import Servant.Client.Core
68+
69+import qualified Network.HTTP.Client as Client
70+import qualified Servant.Types.SourceT as S
71+
72+-- | The environment in which a request is run.
73+-- The 'baseUrl' and 'makeClientRequest' function are used to create a @http-client@ request.
74+-- Cookies are then added to that request if a 'CookieJar' is set on the environment.
75+-- Finally the request is executed with the 'manager'.
76+-- The 'makeClientRequest' function can be used to modify the request to execute and set values which
77+-- are not specified on a @servant@ 'Request' like 'responseTimeout' or 'redirectCount'
78+data ClientEnv
79+ = ClientEnv
80+ { manager :: Client.Manager
81+ , baseUrl :: BaseUrl
82+ , cookieJar :: Maybe (TVar Client.CookieJar)
83+ , makeClientRequest :: BaseUrl -> Request -> IO Client.Request
84+ -- ^ this function can be used to customize the creation of @http-client@ requests from @servant@ requests. Default value: 'defaultMakeClientRequest'
85+ -- Note that:
86+ -- 1. 'makeClientRequest' exists to allow overriding operational semantics e.g. 'responseTimeout' per request,
87+ -- If you need global modifications, you should use 'managerModifyRequest'
88+ -- 2. the 'cookieJar', if defined, is being applied after 'makeClientRequest' is called.
89+ }
90+
91+-- | 'ClientEnv' smart constructor.
92+mkClientEnv :: Client.Manager -> BaseUrl -> ClientEnv
93+mkClientEnv mgr burl = ClientEnv mgr burl Nothing defaultMakeClientRequest
94+
95+-- | Generates a set of client functions for an API.
96+--
97+-- Example:
98+--
99+-- > type API = Capture "no" Int :> Get '[JSON] Int
100+-- > :<|> Get '[JSON] [Bool]
101+-- >
102+-- > api :: Proxy API
103+-- > api = Proxy
104+-- >
105+-- > getInt :: Int -> ClientM Int
106+-- > getBools :: ClientM [Bool]
107+-- > getInt :<|> getBools = client api
108+client :: HasClient ClientM api => Proxy api -> Client ClientM api
109+client api = api `clientIn` (Proxy :: Proxy ClientM)
110+
111+-- | Change the monad the client functions live in, by
112+-- supplying a conversion function
113+-- (a natural transformation to be precise).
114+--
115+-- For example, assuming you have some @manager :: 'Manager'@ and
116+-- @baseurl :: 'BaseUrl'@ around:
117+--
118+-- > type API = Get '[JSON] Int :<|> Capture "n" Int :> Post '[JSON] Int
119+-- > api :: Proxy API
120+-- > api = Proxy
121+-- > getInt :: IO Int
122+-- > postInt :: Int -> IO Int
123+-- > getInt :<|> postInt = hoistClient api (flip runClientM cenv) (client api)
124+-- > where cenv = mkClientEnv manager baseurl
125+hoistClient
126+ :: HasClient ClientM api
127+ => Proxy api
128+ -> (forall a. m a -> n a)
129+ -> Client m api
130+ -> Client n api
131+hoistClient = hoistClientMonad (Proxy :: Proxy ClientM)
132+
133+-- | @ClientM@ is the monad in which client functions run. Contains the
134+-- 'Client.Manager' and 'BaseUrl' used for requests in the reader environment.
135+newtype ClientM a = ClientM
136+ { unClientM :: ReaderT ClientEnv (ExceptT ClientError IO) a }
137+ deriving ( Functor, Applicative, Monad, MonadIO, Generic
138+ , MonadReader ClientEnv, MonadError ClientError, MonadThrow
139+ , MonadCatch, MonadMask)
140+
141+instance MonadBase IO ClientM where
142+ liftBase = ClientM . liftBase
143+
144+instance MonadBaseControl IO ClientM where
145+ type StM ClientM a = Either ClientError a
146+
147+ liftBaseWith f = ClientM (liftBaseWith (\g -> f (g . unClientM)))
148+
149+ restoreM st = ClientM (restoreM st)
150+
151+-- | Try clients in order, last error is preserved.
152+instance Alt ClientM where
153+ a <!> b = a `catchError` \_ -> b
154+
155+instance RunClient ClientM where
156+ runRequestAcceptStatus = performRequest
157+ throwClientError = throwError
158+
159+runClientM :: ClientM a -> ClientEnv -> IO (Either ClientError a)
160+runClientM cm env = runExceptT $ flip runReaderT env $ unClientM cm
161+
162+performRequest :: Maybe [Status] -> Request -> ClientM Response
163+performRequest acceptStatus req = do
164+ ClientEnv m burl cookieJar' createClientRequest <- ask
165+ clientRequest <- liftIO $ createClientRequest burl req
166+ request <- case cookieJar' of
167+ Nothing -> pure clientRequest
168+ Just cj -> liftIO $ do
169+ now <- getCurrentTime
170+ atomically $ do
171+ oldCookieJar <- readTVar cj
172+ let (newRequest, newCookieJar) =
173+ Client.insertCookiesIntoRequest
174+ clientRequest
175+ oldCookieJar
176+ now
177+ writeTVar cj newCookieJar
178+ pure newRequest
179+
180+ response <- maybe (requestWithoutCookieJar m request) (requestWithCookieJar m request) cookieJar'
181+ let status = Client.responseStatus response
182+ ourResponse = clientResponseToResponse id response
183+ goodStatus = case acceptStatus of
184+ Nothing -> statusIsSuccessful status
185+ Just good -> status `elem` good
186+ unless goodStatus $ do
187+ throwError $ mkFailureResponse burl req ourResponse
188+ return ourResponse
189+ where
190+ requestWithoutCookieJar :: Client.Manager -> Client.Request -> ClientM (Client.Response BSL.ByteString)
191+ requestWithoutCookieJar m' request' = do
192+ eResponse <- liftIO . catchConnectionError $ Client.httpLbs request' m'
193+ either throwError return eResponse
194+
195+ requestWithCookieJar :: Client.Manager -> Client.Request -> TVar Client.CookieJar -> ClientM (Client.Response BSL.ByteString)
196+ requestWithCookieJar m' request' cj = do
197+ eResponse <- liftIO . catchConnectionError . Client.withResponseHistory request' m' $ updateWithResponseCookies cj
198+ either throwError return eResponse
199+
200+ updateWithResponseCookies :: TVar Client.CookieJar -> Client.HistoriedResponse Client.BodyReader -> IO (Client.Response BSL.ByteString)
201+ updateWithResponseCookies cj responses = do
202+ now <- getCurrentTime
203+ bss <- Client.brConsume $ Client.responseBody fRes
204+ let fRes' = fRes { Client.responseBody = BSL.fromChunks bss }
205+ allResponses = Client.hrRedirects responses <> [(fReq, fRes')]
206+ atomically $ mapM_ (updateCookieJar now) allResponses
207+ return fRes'
208+ where
209+ updateCookieJar :: UTCTime -> (Client.Request, Client.Response BSL.ByteString) -> STM ()
210+ updateCookieJar now' (req', res') = modifyTVar' cj (fst . Client.updateCookieJar res' req' now')
211+
212+ fReq = Client.hrFinalRequest responses
213+ fRes = Client.hrFinalResponse responses
214+
215+mkFailureResponse :: BaseUrl -> Request -> ResponseF BSL.ByteString -> ClientError
216+mkFailureResponse burl request =
217+ FailureResponse (bimap (const ()) f request)
218+ where
219+ f b = (burl, BSL.toStrict $ toLazyByteString b)
220+
221+clientResponseToResponse :: (a -> b) -> Client.Response a -> ResponseF b
222+clientResponseToResponse f r = Response
223+ { responseStatusCode = Client.responseStatus r
224+ , responseBody = f (Client.responseBody r)
225+ , responseHeaders = fromList $ Client.responseHeaders r
226+ , responseHttpVersion = Client.responseVersion r
227+ }
228+
229+-- | Create a @http-client@ 'Client.Request' from a @servant@ 'Request'
230+-- The 'Client.host', 'Client.path' and 'Client.port' fields are extracted from the 'BaseUrl'
231+-- otherwise the body, headers and query string are derived from the @servant@ 'Request'
232+defaultMakeClientRequest :: BaseUrl -> Request -> IO Client.Request
233+defaultMakeClientRequest burl r = return Client.defaultRequest
234+ { Client.method = requestMethod r
235+ , Client.host = fromString $ baseUrlHost burl
236+ , Client.port = baseUrlPort burl
237+ , Client.path = BSL.toStrict
238+ $ fromString (baseUrlPath burl)
239+ <> toLazyByteString (requestPath r)
240+ , Client.queryString = buildQueryString . toList $ requestQueryString r
241+ , Client.requestHeaders =
242+ maybeToList acceptHdr ++ maybeToList contentTypeHdr ++ headers
243+ , Client.requestBody = body
244+ , Client.secure = isSecure
245+ }
246+ where
247+ -- Content-Type and Accept are specified by requestBody and requestAccept
248+ headers = filter (\(h, _) -> h /= "Accept" && h /= "Content-Type") $
249+ toList $ requestHeaders r
250+
251+ acceptHdr
252+ | null hs = Nothing
253+ | otherwise = Just ("Accept", renderHeader hs)
254+ where
255+ hs = toList $ requestAccept r
256+
257+ convertBody bd = case bd of
258+ RequestBodyLBS body' -> Client.RequestBodyLBS body'
259+ RequestBodyBS body' -> Client.RequestBodyBS body'
260+ RequestBodySource sourceIO -> Client.RequestBodyStreamChunked givesPopper
261+ where
262+ givesPopper :: (IO BS.ByteString -> IO ()) -> IO ()
263+ givesPopper needsPopper = S.unSourceT sourceIO $ \step0 -> do
264+ ref <- newMVar step0
265+
266+ -- Note sure we need locking, but it's feels safer.
267+ let popper :: IO BS.ByteString
268+ popper = modifyMVar ref nextBs
269+
270+ needsPopper popper
271+
272+ nextBs S.Stop = return (S.Stop, BS.empty)
273+ nextBs (S.Error err) = fail err
274+ nextBs (S.Skip s) = nextBs s
275+ nextBs (S.Effect ms) = ms >>= nextBs
276+ nextBs (S.Yield lbs s) = case BSL.toChunks lbs of
277+ [] -> nextBs s
278+ (x:xs) | BS.null x -> nextBs step'
279+ | otherwise -> return (step', x)
280+ where
281+ step' = S.Yield (BSL.fromChunks xs) s
282+
283+ (body, contentTypeHdr) = case requestBody r of
284+ Nothing -> (Client.RequestBodyBS "", Nothing)
285+ Just (body', typ) -> (convertBody body', Just (hContentType, renderHeader typ))
286+
287+ isSecure = case baseUrlScheme burl of
288+ Http -> False
289+ Https -> True
290+
291+ -- Query string builder which does not do any encoding
292+ buildQueryString [] = mempty
293+ buildQueryString qps = "?" <> foldl' addQueryParam mempty qps
294+
295+ addQueryParam qs (k, v) =
296+ qs <> (if BS.null qs then mempty else "&") <> urlEncode True k <> foldMap ("=" <>) v
297+
298+
299+catchConnectionError :: IO a -> IO (Either ClientError a)
300+catchConnectionError action =
301+ catch (Right <$> action) $ \e ->
302+ pure . Left . ConnectionError $ SomeException (e :: Client.HttpException)
servant-client/src/Servant/Client/Internal/HttpClient/Streaming.hsnew file+191
@@ -0,0 +1,191 @@
1+{-# LANGUAGE CPP #-}
2+{-# LANGUAGE DeriveGeneric #-}
3+{-# LANGUAGE FlexibleContexts #-}
4+{-# LANGUAGE FlexibleInstances #-}
5+{-# LANGUAGE GeneralizedNewtypeDeriving #-}
6+{-# LANGUAGE MultiParamTypeClasses #-}
7+{-# LANGUAGE RankNTypes #-}
8+{-# LANGUAGE ScopedTypeVariables #-}
9+{-# LANGUAGE TypeFamilies #-}
10+module Servant.Client.Internal.HttpClient.Streaming (
11+ module Servant.Client.Internal.HttpClient.Streaming,
12+ ClientEnv (..),
13+ mkClientEnv,
14+ clientResponseToResponse,
15+ defaultMakeClientRequest,
16+ catchConnectionError,
17+ ) where
18+
19+import Prelude ()
20+import Prelude.Compat
21+
22+import Control.Concurrent.STM.TVar
23+import Control.DeepSeq
24+ (NFData, force)
25+import Control.Exception
26+ (evaluate, throwIO)
27+import Control.Monad ()
28+import Control.Monad.Base
29+ (MonadBase (..))
30+import Control.Monad.Codensity
31+ (Codensity (..))
32+import Control.Monad.Error.Class
33+ (MonadError (..))
34+import Control.Monad.Reader
35+import Control.Monad.STM
36+ (atomically)
37+import Control.Monad.Trans.Except
38+import qualified Data.ByteString as BS
39+import qualified Data.ByteString.Lazy as BSL
40+import Data.Foldable
41+ (for_)
42+import Data.Functor.Alt
43+ (Alt (..))
44+import Data.Proxy
45+ (Proxy (..))
46+import Data.Time.Clock
47+ (getCurrentTime)
48+import GHC.Generics
49+import Network.HTTP.Types
50+ (Status, statusIsSuccessful)
51+
52+import qualified Network.HTTP.Client as Client
53+
54+import Servant.Client.Core
55+import Servant.Client.Internal.HttpClient
56+ (ClientEnv (..), catchConnectionError,
57+ clientResponseToResponse, mkClientEnv, mkFailureResponse,
58+ defaultMakeClientRequest)
59+import qualified Servant.Types.SourceT as S
60+
61+
62+-- | Generates a set of client functions for an API.
63+--
64+-- Example:
65+--
66+-- > type API = Capture "no" Int :> Get '[JSON] Int
67+-- > :<|> Get '[JSON] [Bool]
68+-- >
69+-- > api :: Proxy API
70+-- > api = Proxy
71+-- >
72+-- > getInt :: Int -> ClientM Int
73+-- > getBools :: ClientM [Bool]
74+-- > getInt :<|> getBools = client api
75+client :: HasClient ClientM api => Proxy api -> Client ClientM api
76+client api = api `clientIn` (Proxy :: Proxy ClientM)
77+
78+-- | Change the monad the client functions live in, by
79+-- supplying a conversion function
80+-- (a natural transformation to be precise).
81+--
82+-- For example, assuming you have some @manager :: 'Manager'@ and
83+-- @baseurl :: 'BaseUrl'@ around:
84+--
85+-- > type API = Get '[JSON] Int :<|> Capture "n" Int :> Post '[JSON] Int
86+-- > api :: Proxy API
87+-- > api = Proxy
88+-- > getInt :: IO Int
89+-- > postInt :: Int -> IO Int
90+-- > getInt :<|> postInt = hoistClient api (flip runClientM cenv) (client api)
91+-- > where cenv = mkClientEnv manager baseurl
92+hoistClient
93+ :: HasClient ClientM api
94+ => Proxy api
95+ -> (forall a. m a -> n a)
96+ -> Client m api
97+ -> Client n api
98+hoistClient = hoistClientMonad (Proxy :: Proxy ClientM)
99+
100+-- | @ClientM@ is the monad in which client functions run. Contains the
101+-- 'Client.Manager' and 'BaseUrl' used for requests in the reader environment.
102+newtype ClientM a = ClientM
103+ { unClientM :: ReaderT ClientEnv (ExceptT ClientError (Codensity IO)) a }
104+ deriving ( Functor, Applicative, Monad, MonadIO, Generic
105+ , MonadReader ClientEnv, MonadError ClientError)
106+
107+instance MonadBase IO ClientM where
108+ liftBase = ClientM . liftIO
109+
110+-- | Try clients in order, last error is preserved.
111+instance Alt ClientM where
112+ a <!> b = a `catchError` \_ -> b
113+
114+instance RunClient ClientM where
115+ runRequestAcceptStatus = performRequest
116+ throwClientError = throwError
117+
118+instance RunStreamingClient ClientM where
119+ withStreamingRequest = performWithStreamingRequest
120+
121+withClientM :: ClientM a -> ClientEnv -> (Either ClientError a -> IO b) -> IO b
122+withClientM cm env k =
123+ let Codensity f = runExceptT $ flip runReaderT env $ unClientM cm
124+ in f k
125+
126+-- | A 'runClientM' variant for streaming client.
127+--
128+-- It allows using this module's 'ClientM' in a direct style.
129+-- The 'NFData' constraint however prevents using this function with genuine
130+-- streaming response types ('SourceT', 'Conduit', pipes 'Proxy' or 'Machine').
131+-- For those you have to use 'withClientM'.
132+--
133+-- /Note:/ we 'force' the result, so the likelihood of accidentally leaking a
134+-- connection is smaller. Use with care.
135+--
136+runClientM :: NFData a => ClientM a -> ClientEnv -> IO (Either ClientError a)
137+runClientM cm env = withClientM cm env (evaluate . force)
138+
139+performRequest :: Maybe [Status] -> Request -> ClientM Response
140+performRequest acceptStatus req = do
141+ -- TODO: should use Client.withResponse here too
142+ ClientEnv m burl cookieJar' createClientRequest <- ask
143+ clientRequest <- liftIO $ createClientRequest burl req
144+ request <- case cookieJar' of
145+ Nothing -> pure clientRequest
146+ Just cj -> liftIO $ do
147+ now <- getCurrentTime
148+ atomically $ do
149+ oldCookieJar <- readTVar cj
150+ let (newRequest, newCookieJar) =
151+ Client.insertCookiesIntoRequest
152+ clientRequest
153+ oldCookieJar
154+ now
155+ writeTVar cj newCookieJar
156+ pure newRequest
157+
158+ eResponse <- liftIO $ catchConnectionError $ Client.httpLbs request m
159+ case eResponse of
160+ Left err -> throwError err
161+ Right response -> do
162+ for_ cookieJar' $ \cj -> liftIO $ do
163+ now' <- getCurrentTime
164+ atomically $ modifyTVar' cj (fst . Client.updateCookieJar response request now')
165+ let status = Client.responseStatus response
166+ ourResponse = clientResponseToResponse id response
167+ goodStatus = case acceptStatus of
168+ Nothing -> statusIsSuccessful status
169+ Just good -> status `elem` good
170+ unless goodStatus $ do
171+ throwError $ mkFailureResponse burl req ourResponse
172+ return ourResponse
173+
174+-- | TODO: support UVerb ('acceptStatus' argument, like in 'performRequest' above).
175+performWithStreamingRequest :: Request -> (StreamingResponse -> IO a) -> ClientM a
176+performWithStreamingRequest req k = do
177+ m <- asks manager
178+ burl <- asks baseUrl
179+ createClientRequest <- asks makeClientRequest
180+ request <- liftIO $ createClientRequest burl req
181+ ClientM $ lift $ lift $ Codensity $ \k1 ->
182+ Client.withResponse request m $ \res -> do
183+ let status = Client.responseStatus res
184+
185+ -- we throw FailureResponse in IO :(
186+ unless (statusIsSuccessful status) $ do
187+ b <- BSL.fromChunks <$> Client.brConsume (Client.responseBody res)
188+ throwIO $ mkFailureResponse burl req (clientResponseToResponse (const b) res)
189+
190+ x <- k (clientResponseToResponse (S.fromAction BS.null) res)
191+ k1 x
servant-client/src/Servant/Client/Streaming.hsnew file+19
@@ -0,0 +1,19 @@
1+-- | This module provides 'client' which can automatically generate
2+-- querying functions for each endpoint just from the type representing your
3+-- API.
4+--
5+-- This client supports streaming operations.
6+module Servant.Client.Streaming
7+ ( client
8+ , ClientM
9+ , withClientM
10+ , runClientM
11+ , ClientEnv(..)
12+ , mkClientEnv
13+ , defaultMakeClientRequest
14+ , hoistClient
15+ , module Servant.Client.Core.Reexport
16+ ) where
17+
18+import Servant.Client.Core.Reexport
19+import Servant.Client.Internal.HttpClient.Streaming
servant-client/src/Servant/Common/BaseUrl.hsdeleted−77
@@ -1,77 +0,0 @@
1−{-# LANGUAGE DeriveDataTypeable #-}
2−{-# LANGUAGE DeriveGeneric #-}
3−{-# LANGUAGE ViewPatterns #-}
4−module Servant.Common.BaseUrl (
5− -- * types
6− BaseUrl (..)
7− , InvalidBaseUrlException
8− , Scheme (..)
9− -- * functions
10− , parseBaseUrl
11− , showBaseUrl
12−) where
13−
14−import Control.Monad.Catch (Exception, MonadThrow, throwM)
15−import Data.List
16−import Data.Typeable
17−import GHC.Generics
18−import Network.URI hiding (path)
19−import Safe
20−import Text.Read
21−
22−-- | URI scheme to use
23−data Scheme =
24− Http -- ^ http://
25− | Https -- ^ https://
26− deriving (Show, Eq, Ord, Generic)
27−
28−-- | Simple data type to represent the target of HTTP requests
29−-- for servant's automatically-generated clients.
30−data BaseUrl = BaseUrl
31− { baseUrlScheme :: Scheme -- ^ URI scheme to use
32− , baseUrlHost :: String -- ^ host (eg "haskell.org")
33− , baseUrlPort :: Int -- ^ port (eg 80)
34− , baseUrlPath :: String -- ^ path (eg "/a/b/c")
35− } deriving (Show, Ord, Generic)
36−
37−instance Eq BaseUrl where
38− BaseUrl a b c path == BaseUrl a' b' c' path'
39− = a == a' && b == b' && c == c' && s path == s path'
40− where s ('/':x) = x
41− s x = x
42−
43−showBaseUrl :: BaseUrl -> String
44−showBaseUrl (BaseUrl urlscheme host port path) =
45− schemeString ++ "//" ++ host ++ (portString </> path)
46− where
47− a </> b = if "/" `isPrefixOf` b || null b then a ++ b else a ++ '/':b
48− schemeString = case urlscheme of
49− Http -> "http:"
50− Https -> "https:"
51− portString = case (urlscheme, port) of
52− (Http, 80) -> ""
53− (Https, 443) -> ""
54− _ -> ":" ++ show port
55−
56−data InvalidBaseUrlException = InvalidBaseUrlException String deriving (Show, Typeable)
57−instance Exception InvalidBaseUrlException
58−
59−parseBaseUrl :: MonadThrow m => String -> m BaseUrl
60−parseBaseUrl s = case parseURI (removeTrailingSlash s) of
61− -- This is a rather hacky implementation and should be replaced with something
62− -- implemented in attoparsec (which is already a dependency anyhow (via aeson)).
63− Just (URI "http:" (Just (URIAuth "" host (':' : (readMaybe -> Just port)))) path "" "") ->
64− return (BaseUrl Http host port path)
65− Just (URI "http:" (Just (URIAuth "" host "")) path "" "") ->
66− return (BaseUrl Http host 80 path)
67− Just (URI "https:" (Just (URIAuth "" host (':' : (readMaybe -> Just port)))) path "" "") ->
68− return (BaseUrl Https host port path)
69− Just (URI "https:" (Just (URIAuth "" host "")) path "" "") ->
70− return (BaseUrl Https host 443 path)
71− _ -> if "://" `isInfixOf` s
72− then throwM (InvalidBaseUrlException $ "Invalid base URL: " ++ s)
73− else parseBaseUrl ("http://" ++ s)
74− where
75− removeTrailingSlash str = case lastMay str of
76− Just '/' -> init str
77− _ -> str
servant-client/src/Servant/Common/BasicAuth.hsdeleted−21
@@ -1,21 +0,0 @@
1−{-# LANGUAGE OverloadedStrings #-}
2−{-# LANGUAGE TypeSynonymInstances #-}
3−{-# LANGUAGE TypeFamilies #-}
4−
5−-- | Basic Authentication for clients
6−
7−module Servant.Common.BasicAuth (
8− basicAuthReq
9− ) where
10−
11−import Data.ByteString.Base64 (encode)
12−import Data.Monoid ((<>))
13−import Data.Text.Encoding (decodeUtf8)
14−import Servant.Common.Req (addHeader, Req)
15−import Servant.API.BasicAuth (BasicAuthData(BasicAuthData))
16−
17−-- | Authenticate a request using Basic Authentication
18−basicAuthReq :: BasicAuthData -> Req -> Req
19−basicAuthReq (BasicAuthData user pass) req =
20− let authText = decodeUtf8 ("Basic " <> encode (user <> ":" <> pass))
21− in addHeader "Authorization" authText req
servant-client/src/Servant/Common/Req.hsdeleted−285
@@ -1,285 +0,0 @@
1−{-# LANGUAGE CPP #-}
2−{-# LANGUAGE DeriveDataTypeable #-}
3−{-# LANGUAGE DeriveGeneric #-}
4−{-# LANGUAGE GeneralizedNewtypeDeriving #-}
5−{-# LANGUAGE MultiParamTypeClasses #-}
6−{-# LANGUAGE TypeFamilies #-}
7−{-# LANGUAGE OverloadedStrings #-}
8−{-# LANGUAGE ScopedTypeVariables #-}
9−
10−module Servant.Common.Req where
11−
12−import Prelude ()
13−import Prelude.Compat
14−
15−import Control.Exception
16−import Control.Monad
17−import Control.Monad.Catch (MonadThrow, MonadCatch)
18−import Data.Foldable (toList)
19−import Data.Functor.Alt (Alt (..))
20−import Data.Semigroup ((<>))
21−
22−import Control.Monad.Error.Class (MonadError(..))
23−import Control.Monad.Trans.Except
24−
25−import GHC.Generics
26−import Control.Monad.Base (MonadBase (..))
27−import Control.Monad.IO.Class ()
28−import Control.Monad.Reader
29−import Control.Monad.Trans.Control (MonadBaseControl (..))
30−import qualified Data.ByteString.Builder as BS
31−import Data.ByteString.Lazy hiding (pack, filter, map, null, elem, any)
32−import Data.String
33−import Data.String.Conversions (cs)
34−import Data.Proxy
35−import Data.Text (Text)
36−import Data.Text.Encoding
37−import Data.Typeable
38−import Network.HTTP.Media
39−import Network.HTTP.Types
40−import Network.HTTP.Client hiding (Proxy, path)
41−import qualified Network.HTTP.Types.Header as HTTP
42−import Network.URI hiding (path)
43−import Servant.API.ContentTypes
44−import Servant.Common.BaseUrl
45−
46−import qualified Network.HTTP.Client as Client
47−
48−import Web.HttpApiData
49−
50−data ServantError
51− = FailureResponse
52− { failingRequest :: UrlReq
53− , responseStatus :: Status
54− , responseContentType :: MediaType
55− , responseBody :: ByteString
56− }
57− | DecodeFailure
58− { decodeError :: String
59− , responseContentType :: MediaType
60− , responseBody :: ByteString
61− }
62− | UnsupportedContentType
63− { responseContentType :: MediaType
64− , responseBody :: ByteString
65− }
66− | InvalidContentTypeHeader
67− { responseContentTypeHeader :: ByteString
68− , responseBody :: ByteString
69− }
70− | ConnectionError
71− { connectionError :: SomeException
72− }
73− deriving (Show, Typeable)
74−
75−instance Eq ServantError where
76− FailureResponse _ a b c == FailureResponse _ x y z =
77− (a, b, c) == (x, y, z)
78− DecodeFailure a b c == DecodeFailure x y z =
79− (a, b, c) == (x, y, z)
80− UnsupportedContentType a b == UnsupportedContentType x y =
81− (a, b) == (x, y)
82− InvalidContentTypeHeader a b == InvalidContentTypeHeader x y =
83− (a, b) == (x, y)
84− ConnectionError a == ConnectionError x =
85− show a == show x
86− _ == _ = False
87−
88−instance Exception ServantError
89−
90−data UrlReq = UrlReq BaseUrl Req
91−
92−instance Show UrlReq where
93− show (UrlReq url req) = showBaseUrl url ++ path ++ "?" ++ show (qs req)
94− where
95− path = cs (BS.toLazyByteString (reqPath req))
96−
97−data Req = Req
98− { reqPath :: BS.Builder
99− , qs :: QueryText
100− , reqBody :: Maybe (RequestBody, MediaType)
101− , reqAccept :: [MediaType]
102− , headers :: [(String, Text)]
103− }
104−
105−defReq :: Req
106−defReq = Req "" [] Nothing [] []
107−
108−appendToPath :: String -> Req -> Req
109−appendToPath p req =
110− req { reqPath = reqPath req <> "/" <> toEncodedUrlPiece p }
111−
112−appendToQueryString :: Text -- ^ param name
113− -> Maybe Text -- ^ param value
114− -> Req
115− -> Req
116−appendToQueryString pname pvalue req =
117− req { qs = qs req ++ [(pname, pvalue)]
118− }
119−
120−addHeader :: ToHttpApiData a => String -> a -> Req -> Req
121−addHeader name val req = req { headers = headers req
122− ++ [(name, decodeUtf8 (toHeader val))]
123− }
124−
125−-- | Set body and media type of the request being constructed.
126−--
127−-- The body is set to the given bytestring using the 'RequestBodyLBS'
128−-- constructor.
129−--
130−{-# DEPRECATED setRQBody "Use setReqBodyLBS instead" #-}
131−setRQBody :: ByteString -> MediaType -> Req -> Req
132−setRQBody = setReqBodyLBS
133−
134−-- | Set body and media type of the request being constructed.
135−--
136−-- The body is set to the given bytestring using the 'RequestBodyLBS'
137−-- constructor.
138−--
139−-- @since 0.9.2.0
140−--
141−setReqBodyLBS :: ByteString -> MediaType -> Req -> Req
142−setReqBodyLBS b t req = req { reqBody = Just (RequestBodyLBS b, t) }
143−
144−-- | Set body and media type of the request being constructed.
145−--
146−-- @since 0.9.2.0
147−--
148−setReqBody :: RequestBody -> MediaType -> Req -> Req
149−setReqBody b t req = req { reqBody = Just (b, t) }
150−
151−reqToRequest :: (Functor m, MonadThrow m) => Req -> BaseUrl -> m Request
152−reqToRequest req (BaseUrl reqScheme reqHost reqPort path) =
153− setheaders . setAccept . setrqb . setQS <$> parseRequest url
154−
155− where url = show $ nullURI { uriScheme = case reqScheme of
156− Http -> "http:"
157− Https -> "https:"
158− , uriAuthority = Just $
159− URIAuth { uriUserInfo = ""
160− , uriRegName = reqHost
161− , uriPort = ":" ++ show reqPort
162− }
163− , uriPath = fullPath
164− }
165− fullPath = path ++ cs (BS.toLazyByteString (reqPath req))
166−
167− setrqb r = case reqBody req of
168− Nothing -> r
169− Just (b,t) -> r { requestBody = b
170− , requestHeaders = requestHeaders r
171− ++ [(hContentType, cs . show $ t)] }
172− setQS = setQueryString $ queryTextToQuery (qs req)
173− setheaders r = r { requestHeaders = requestHeaders r
174− <> fmap toProperHeader (headers req) }
175− setAccept r = r { requestHeaders = filter ((/= "Accept") . fst) (requestHeaders r)
176− <> [("Accept", renderHeader $ reqAccept req)
177− | not . null . reqAccept $ req] }
178− toProperHeader (name, val) =
179− (fromString name, encodeUtf8 val)
180−
181−#if !MIN_VERSION_http_client(0,4,30)
182−-- 'parseRequest' is introduced in http-client-0.4.30
183−-- it differs from 'parseUrl', by not throwing exceptions on non-2xx http statuses
184−--
185−-- See for implementations:
186−-- http://hackage.haskell.org/package/http-client-0.4.30/docs/src/Network-HTTP-Client-Request.html#parseRequest
187−-- http://hackage.haskell.org/package/http-client-0.5.0/docs/src/Network-HTTP-Client-Request.html#parseRequest
188−parseRequest :: MonadThrow m => String -> m Request
189−parseRequest url = liftM disableStatusCheck (parseUrl url)
190− where
191− disableStatusCheck req = req { checkStatus = \ _status _headers _cookies -> Nothing }
192−#endif
193−
194−
195−-- * performing requests
196−
197−displayHttpRequest :: Method -> String
198−displayHttpRequest httpmethod = "HTTP " ++ cs httpmethod ++ " request"
199−
200−data ClientEnv
201− = ClientEnv
202− { manager :: Manager
203− , baseUrl :: BaseUrl
204− }
205−
206−
207−-- | @ClientM@ is the monad in which client functions run. Contains the
208−-- 'Manager' and 'BaseUrl' used for requests in the reader environment.
209−
210−newtype ClientM a = ClientM { runClientM' :: ReaderT ClientEnv (ExceptT ServantError IO) a }
211− deriving ( Functor, Applicative, Monad, MonadIO, Generic
212− , MonadReader ClientEnv
213− , MonadError ServantError
214− , MonadThrow, MonadCatch
215− )
216−
217−instance MonadBase IO ClientM where
218− liftBase = ClientM . liftBase
219−
220−instance MonadBaseControl IO ClientM where
221− type StM ClientM a = Either ServantError a
222−
223− -- liftBaseWith :: (RunInBase ClientM IO -> IO a) -> ClientM a
224− liftBaseWith f = ClientM (liftBaseWith (\g -> f (g . runClientM')))
225−
226− -- restoreM :: StM ClientM a -> ClientM a
227− restoreM st = ClientM (restoreM st)
228−
229−-- | Try clients in order, last error is preserved.
230−instance Alt ClientM where
231− a <!> b = a `catchError` \_ -> b
232−
233−runClientM :: ClientM a -> ClientEnv -> IO (Either ServantError a)
234−runClientM cm env = runExceptT $ (flip runReaderT env) $ runClientM' cm
235−
236−
237−performRequest :: Method -> Req
238− -> ClientM ( Int, ByteString, MediaType
239− , [HTTP.Header], Response ByteString)
240−performRequest reqMethod req = do
241− m <- asks manager
242− reqHost <- asks baseUrl
243− partialRequest <- liftIO $ reqToRequest req reqHost
244−
245− let request = partialRequest { Client.method = reqMethod }
246−
247− eResponse <- liftIO $ catchConnectionError $ Client.httpLbs request m
248− case eResponse of
249− Left err ->
250− throwError . ConnectionError $ SomeException err
251−
252− Right response -> do
253− let status = Client.responseStatus response
254− body = Client.responseBody response
255− hdrs = Client.responseHeaders response
256− status_code = statusCode status
257− ct <- case lookup "Content-Type" $ Client.responseHeaders response of
258− Nothing -> pure $ "application"//"octet-stream"
259− Just t -> case parseAccept t of
260− Nothing -> throwError $ InvalidContentTypeHeader (cs t) body
261− Just t' -> pure t'
262− unless (status_code >= 200 && status_code < 300) $
263− throwError $ FailureResponse (UrlReq reqHost req) status ct body
264− return (status_code, body, ct, hdrs, response)
265−
266−performRequestCT :: MimeUnrender ct result => Proxy ct -> Method -> Req
267− -> ClientM ([HTTP.Header], result)
268−performRequestCT ct reqMethod req = do
269− let acceptCTS = contentTypes ct
270− (_status, respBody, respCT, hdrs, _response) <-
271− performRequest reqMethod (req { reqAccept = toList acceptCTS })
272− unless (any (matches respCT) acceptCTS) $ throwError $ UnsupportedContentType respCT respBody
273− case mimeUnrender ct respBody of
274− Left err -> throwError $ DecodeFailure err respCT respBody
275− Right val -> return (hdrs, val)
276−
277−performRequestNoBody :: Method -> Req -> ClientM [HTTP.Header]
278−performRequestNoBody reqMethod req = do
279− (_status, _body, _ct, hdrs, _response) <- performRequest reqMethod req
280− return hdrs
281−
282−catchConnectionError :: IO a -> IO (Either ServantError a)
283−catchConnectionError action =
284− catch (Right <$> action) $ \e ->
285− pure . Left . ConnectionError $ SomeException (e :: HttpException)
servant-client/test/Servant/BasicAuthSpec.hsnew file+53
@@ -0,0 +1,53 @@
1+{-# LANGUAGE CPP #-}
2+{-# LANGUAGE ConstraintKinds #-}
3+{-# LANGUAGE DataKinds #-}
4+{-# LANGUAGE FlexibleContexts #-}
5+{-# LANGUAGE FlexibleInstances #-}
6+{-# LANGUAGE GADTs #-}
7+{-# LANGUAGE MultiParamTypeClasses #-}
8+{-# LANGUAGE OverloadedStrings #-}
9+{-# LANGUAGE PolyKinds #-}
10+{-# LANGUAGE ScopedTypeVariables #-}
11+{-# LANGUAGE TypeFamilies #-}
12+{-# LANGUAGE TypeOperators #-}
13+{-# LANGUAGE UndecidableInstances #-}
14+{-# OPTIONS_GHC -freduction-depth=100 #-}
15+{-# OPTIONS_GHC -fno-warn-orphans #-}
16+{-# OPTIONS_GHC -fno-warn-name-shadowing #-}
17+
18+module Servant.BasicAuthSpec (spec) where
19+
20+import Prelude ()
21+import Prelude.Compat
22+
23+import Control.Arrow
24+ (left)
25+import Data.Monoid ()
26+import qualified Network.HTTP.Types as HTTP
27+import Test.Hspec
28+
29+import Servant.API
30+ (BasicAuthData (..))
31+import Servant.Client
32+import Servant.ClientTestUtils
33+
34+spec :: Spec
35+spec = describe "Servant.BasicAuthSpec" $ do
36+ basicAuthSpec
37+
38+basicAuthSpec :: Spec
39+basicAuthSpec = beforeAll (startWaiApp basicAuthServer) $ afterAll endWaiApp $ do
40+ context "Authentication works when requests are properly authenticated" $ do
41+
42+ it "Authenticates a BasicAuth protected server appropriately" $ \(_,baseUrl) -> do
43+ let getBasic = client basicAuthAPI
44+ let basicAuthData = BasicAuthData "servant" "server"
45+ left show <$> runClient (getBasic basicAuthData) baseUrl `shouldReturn` Right alice
46+
47+ context "Authentication is rejected when requests are not authenticated properly" $ do
48+
49+ it "Authenticates a BasicAuth protected server appropriately" $ \(_,baseUrl) -> do
50+ let getBasic = client basicAuthAPI
51+ let basicAuthData = BasicAuthData "not" "password"
52+ Left (FailureResponse _ r) <- runClient (getBasic basicAuthData) baseUrl
53+ responseStatusCode r `shouldBe` HTTP.Status 403 "Forbidden"
servant-client/test/Servant/BrokenSpec.hsnew file+71
@@ -0,0 +1,71 @@
1+{-# LANGUAGE DataKinds #-}
2+{-# LANGUAGE TypeOperators #-}
3+{-# OPTIONS_GHC -freduction-depth=100 #-}
4+{-# OPTIONS_GHC -fno-warn-orphans #-}
5+{-# OPTIONS_GHC -fno-warn-name-shadowing #-}
6+
7+module Servant.BrokenSpec (spec) where
8+
9+import Prelude ()
10+import Prelude.Compat
11+
12+import Data.Monoid ()
13+import Data.Proxy
14+import qualified Network.HTTP.Types as HTTP
15+import Test.Hspec
16+
17+import Servant.API
18+ ((:<|>) ((:<|>)), (:>), JSON, Verb, Get, StdMethod (GET))
19+import Servant.Client
20+import Servant.ClientTestUtils
21+import Servant.Server
22+
23+-- * api for testing inconsistencies between client and server
24+
25+type Get201 = Verb 'GET 201
26+type Get301 = Verb 'GET 301
27+
28+type BrokenAPI =
29+ -- the server should respond with 200, but returns 201
30+ "get200" :> Get201 '[JSON] ()
31+ -- the server should respond with 307, but returns 301
32+ :<|> "get307" :> Get301 '[JSON] ()
33+
34+brokenApi :: Proxy BrokenAPI
35+brokenApi = Proxy
36+
37+brokenServer :: Application
38+brokenServer = serve brokenApi (pure () :<|> pure ())
39+
40+type PublicAPI =
41+ -- the client expects 200
42+ "get200" :> Get '[JSON] ()
43+ -- the client expects 307
44+ :<|> "get307" :> Get307 '[JSON] ()
45+
46+publicApi :: Proxy PublicAPI
47+publicApi = Proxy
48+
49+get200Client :: ClientM ()
50+get307Client :: ClientM ()
51+get200Client :<|> get307Client = client publicApi
52+
53+
54+spec :: Spec
55+spec = describe "Servant.BrokenSpec" $ do
56+ brokenSpec
57+
58+brokenSpec :: Spec
59+brokenSpec = beforeAll (startWaiApp brokenServer) $ afterAll endWaiApp $ do
60+ context "client returns errors for inconsistencies between client and server api" $ do
61+ it "reports FailureResponse with wrong 2xx status code" $ \(_, baseUrl) -> do
62+ res <- runClient get200Client baseUrl
63+ case res of
64+ Left (FailureResponse _ r) | responseStatusCode r == HTTP.status201 -> return ()
65+ _ -> fail $ "expected 201 broken response, but got " <> show res
66+
67+ it "reports FailureResponse with wrong 3xx status code" $ \(_, baseUrl) -> do
68+ res <- runClient get307Client baseUrl
69+ case res of
70+ Left (FailureResponse _ r) | responseStatusCode r == HTTP.status301 -> return ()
71+ _ -> fail $ "expected 301 broken response, but got " <> show res
servant-client/test/Servant/ClientSpec.hsdeleted−493
@@ -1,493 +0,0 @@
1−{-# LANGUAGE CPP #-}
2−{-# LANGUAGE ConstraintKinds #-}
3−{-# LANGUAGE DataKinds #-}
4−{-# LANGUAGE DeriveGeneric #-}
5−{-# LANGUAGE FlexibleContexts #-}
6−{-# LANGUAGE FlexibleInstances #-}
7−{-# LANGUAGE FunctionalDependencies #-}
8−{-# LANGUAGE GADTs #-}
9−{-# LANGUAGE MultiParamTypeClasses #-}
10−{-# LANGUAGE OverloadedStrings #-}
11−{-# LANGUAGE PolyKinds #-}
12−{-# LANGUAGE RecordWildCards #-}
13−{-# LANGUAGE ScopedTypeVariables #-}
14−{-# LANGUAGE StandaloneDeriving #-}
15−{-# LANGUAGE TypeFamilies #-}
16−{-# LANGUAGE TypeOperators #-}
17−{-# LANGUAGE UndecidableInstances #-}
18−#if __GLASGOW_HASKELL__ >= 800
19−{-# OPTIONS_GHC -freduction-depth=100 #-}
20−#else
21−{-# OPTIONS_GHC -fcontext-stack=100 #-}
22−#endif
23−{-# OPTIONS_GHC -fno-warn-orphans #-}
24−{-# OPTIONS_GHC -fno-warn-name-shadowing #-}
25−
26−#include "overlapping-compat.h"
27−module Servant.ClientSpec where
28−
29−import Control.Arrow (left)
30−import Control.Concurrent (forkIO, killThread, ThreadId)
31−import Control.Exception (bracket)
32−import Control.Monad.Error.Class (throwError )
33−import Data.Aeson
34−import qualified Data.ByteString.Lazy as BS
35−import Data.Char (chr, isPrint)
36−import Data.Foldable (forM_)
37−import Data.Monoid hiding (getLast)
38−import Data.Proxy
39−import qualified Generics.SOP as SOP
40−import GHC.Generics (Generic)
41−import qualified Network.HTTP.Client as C
42−import Network.HTTP.Media
43−import qualified Network.HTTP.Types as HTTP
44−import Network.Socket
45−import Network.Wai (Request, requestHeaders, responseLBS)
46−import Network.Wai.Handler.Warp
47−import Prelude ()
48−import Prelude.Compat
49−import System.IO.Unsafe (unsafePerformIO)
50−import Test.HUnit
51−import Test.Hspec
52−import Test.Hspec.QuickCheck
53−import Test.QuickCheck
54−import Web.FormUrlEncoded (FromForm, ToForm)
55−
56−import Servant.API
57−import Servant.API.Internal.Test.ComprehensiveAPI
58−import Servant.Client
59−import Servant.Client.Generic
60−import qualified Servant.Common.Req as SCR
61−import Servant.Server
62−import Servant.Server.Experimental.Auth
63−
64−-- This declaration simply checks that all instances are in place.
65−_ = client comprehensiveAPI
66−
67−spec :: Spec
68−spec = describe "Servant.Client" $ do
69− sucessSpec
70− failSpec
71− wrappedApiSpec
72− basicAuthSpec
73− genAuthSpec
74− genericClientSpec
75−
76−-- * test data types
77−
78−data Person = Person {
79− name :: String,
80− age :: Integer
81− }
82− deriving (Eq, Show, Generic)
83−
84−instance ToJSON Person
85−instance FromJSON Person
86−
87−instance ToForm Person where
88−instance FromForm Person where
89−
90−alice :: Person
91−alice = Person "Alice" 42
92−
93−type TestHeaders = '[Header "X-Example1" Int, Header "X-Example2" String]
94−
95−type Api =
96− "get" :> Get '[JSON] Person
97− :<|> "deleteEmpty" :> DeleteNoContent '[JSON] NoContent
98− :<|> "capture" :> Capture "name" String :> Get '[JSON,FormUrlEncoded] Person
99− :<|> "captureAll" :> CaptureAll "names" String :> Get '[JSON] [Person]
100− :<|> "body" :> ReqBody '[FormUrlEncoded,JSON] Person :> Post '[JSON] Person
101− :<|> "param" :> QueryParam "name" String :> Get '[FormUrlEncoded,JSON] Person
102− :<|> "params" :> QueryParams "names" String :> Get '[JSON] [Person]
103− :<|> "flag" :> QueryFlag "flag" :> Get '[JSON] Bool
104− :<|> "rawSuccess" :> Raw
105− :<|> "rawFailure" :> Raw
106− :<|> "multiple" :>
107− Capture "first" String :>
108− QueryParam "second" Int :>
109− QueryFlag "third" :>
110− ReqBody '[JSON] [(String, [Rational])] :>
111− Get '[JSON] (String, Maybe Int, Bool, [(String, [Rational])])
112− :<|> "headers" :> Get '[JSON] (Headers TestHeaders Bool)
113− :<|> "deleteContentType" :> DeleteNoContent '[JSON] NoContent
114− :<|> "empty" :> EmptyAPI
115−
116−api :: Proxy Api
117−api = Proxy
118−
119−getGet :: SCR.ClientM Person
120−getDeleteEmpty :: SCR.ClientM NoContent
121−getCapture :: String -> SCR.ClientM Person
122−getCaptureAll :: [String] -> SCR.ClientM [Person]
123−getBody :: Person -> SCR.ClientM Person
124−getQueryParam :: Maybe String -> SCR.ClientM Person
125−getQueryParams :: [String] -> SCR.ClientM [Person]
126−getQueryFlag :: Bool -> SCR.ClientM Bool
127−getRawSuccess :: HTTP.Method
128− -> SCR.ClientM (Int, BS.ByteString, MediaType, [HTTP.Header], C.Response BS.ByteString)
129−getRawFailure :: HTTP.Method
130− -> SCR.ClientM (Int, BS.ByteString, MediaType, [HTTP.Header], C.Response BS.ByteString)
131−getMultiple :: String -> Maybe Int -> Bool -> [(String, [Rational])]
132− -> SCR.ClientM (String, Maybe Int, Bool, [(String, [Rational])])
133−getRespHeaders :: SCR.ClientM (Headers TestHeaders Bool)
134−getDeleteContentType :: SCR.ClientM NoContent
135−
136−getGet
137− :<|> getDeleteEmpty
138− :<|> getCapture
139− :<|> getCaptureAll
140− :<|> getBody
141− :<|> getQueryParam
142− :<|> getQueryParams
143− :<|> getQueryFlag
144− :<|> getRawSuccess
145− :<|> getRawFailure
146− :<|> getMultiple
147− :<|> getRespHeaders
148− :<|> getDeleteContentType
149− :<|> EmptyClient = client api
150−
151−server :: Application
152−server = serve api (
153− return alice
154− :<|> return NoContent
155− :<|> (\ name -> return $ Person name 0)
156− :<|> (\ names -> return (zipWith Person names [0..]))
157− :<|> return
158− :<|> (\ name -> case name of
159− Just "alice" -> return alice
160− Just n -> throwError $ ServantErr 400 (n ++ " not found") "" []
161− Nothing -> throwError $ ServantErr 400 "missing parameter" "" [])
162− :<|> (\ names -> return (zipWith Person names [0..]))
163− :<|> return
164− :<|> (Tagged $ \ _request respond -> respond $ responseLBS HTTP.ok200 [] "rawSuccess")
165− :<|> (Tagged $ \ _request respond -> respond $ responseLBS HTTP.badRequest400 [] "rawFailure")
166− :<|> (\ a b c d -> return (a, b, c, d))
167− :<|> (return $ addHeader 1729 $ addHeader "eg2" True)
168− :<|> return NoContent
169− :<|> emptyServer)
170−
171−
172−type FailApi =
173− "get" :> Raw
174− :<|> "capture" :> Capture "name" String :> Raw
175− :<|> "body" :> Raw
176−failApi :: Proxy FailApi
177−failApi = Proxy
178−
179−failServer :: Application
180−failServer = serve failApi (
181− (Tagged $ \ _request respond -> respond $ responseLBS HTTP.ok200 [] "")
182− :<|> (\ _capture -> Tagged $ \_request respond -> respond $ responseLBS HTTP.ok200 [("content-type", "application/json")] "")
183− :<|> (Tagged $ \_request respond -> respond $ responseLBS HTTP.ok200 [("content-type", "fooooo")] "")
184− )
185−
186−-- * basic auth stuff
187−
188−type BasicAuthAPI =
189− BasicAuth "foo-realm" () :> "private" :> "basic" :> Get '[JSON] Person
190−
191−basicAuthAPI :: Proxy BasicAuthAPI
192−basicAuthAPI = Proxy
193−
194−basicAuthHandler :: BasicAuthCheck ()
195−basicAuthHandler =
196− let check (BasicAuthData username password) =
197− if username == "servant" && password == "server"
198− then return (Authorized ())
199− else return Unauthorized
200− in BasicAuthCheck check
201−
202−basicServerContext :: Context '[ BasicAuthCheck () ]
203−basicServerContext = basicAuthHandler :. EmptyContext
204−
205−basicAuthServer :: Application
206−basicAuthServer = serveWithContext basicAuthAPI basicServerContext (const (return alice))
207−
208−-- * general auth stuff
209−
210−type GenAuthAPI =
211− AuthProtect "auth-tag" :> "private" :> "auth" :> Get '[JSON] Person
212−
213−genAuthAPI :: Proxy GenAuthAPI
214−genAuthAPI = Proxy
215−
216−type instance AuthServerData (AuthProtect "auth-tag") = ()
217−type instance AuthClientData (AuthProtect "auth-tag") = ()
218−
219−genAuthHandler :: AuthHandler Request ()
220−genAuthHandler =
221− let handler req = case lookup "AuthHeader" (requestHeaders req) of
222− Nothing -> throwError (err401 { errBody = "Missing auth header" })
223− Just _ -> return ()
224− in mkAuthHandler handler
225−
226−genAuthServerContext :: Context '[ AuthHandler Request () ]
227−genAuthServerContext = genAuthHandler :. EmptyContext
228−
229−genAuthServer :: Application
230−genAuthServer = serveWithContext genAuthAPI genAuthServerContext (const (return alice))
231−
232−-- * generic client stuff
233−
234−type GenericClientAPI
235− = QueryParam "sqr" Int :> Get '[JSON] Int
236− :<|> Capture "foo" String :> NestedAPI1
237−
238−data GenericClient = GenericClient
239− { getSqr :: Maybe Int -> SCR.ClientM Int
240− , mkNestedClient1 :: String -> NestedClient1
241− } deriving Generic
242−instance SOP.Generic GenericClient
243−instance (Client GenericClientAPI ~ client) => ClientLike client GenericClient
244−
245−type NestedAPI1
246− = QueryParam "int" Int :> NestedAPI2
247− :<|> QueryParam "id" Char :> Get '[JSON] Char
248−
249−data NestedClient1 = NestedClient1
250− { mkNestedClient2 :: Maybe Int -> NestedClient2
251− , idChar :: Maybe Char -> SCR.ClientM Char
252− } deriving Generic
253−instance SOP.Generic NestedClient1
254−instance (Client NestedAPI1 ~ client) => ClientLike client NestedClient1
255−
256−type NestedAPI2
257− = "sum" :> Capture "first" Int :> Capture "second" Int :> Get '[JSON] Int
258− :<|> "void" :> Post '[JSON] ()
259−
260−data NestedClient2 = NestedClient2
261− { getSum :: Int -> Int -> SCR.ClientM Int
262− , doNothing :: SCR.ClientM ()
263− } deriving Generic
264−instance SOP.Generic NestedClient2
265−instance (Client NestedAPI2 ~ client) => ClientLike client NestedClient2
266−
267−genericClientServer :: Application
268−genericClientServer = serve (Proxy :: Proxy GenericClientAPI) (
269− (\ mx -> case mx of
270− Just x -> return (x*x)
271− Nothing -> throwError $ ServantErr 400 "missing parameter" "" []
272− )
273− :<|> nestedServer1
274− )
275− where
276− nestedServer1 _str = nestedServer2 :<|> (maybe (throwError $ ServantErr 400 "missing parameter" "" []) return)
277− nestedServer2 _int = (\ x y -> return (x + y)) :<|> return ()
278−
279−{-# NOINLINE manager #-}
280−manager :: C.Manager
281−manager = unsafePerformIO $ C.newManager C.defaultManagerSettings
282−
283−sucessSpec :: Spec
284−sucessSpec = beforeAll (startWaiApp server) $ afterAll endWaiApp $ do
285−
286− it "Servant.API.Get" $ \(_, baseUrl) -> do
287− (left show <$> (runClientM getGet (ClientEnv manager baseUrl))) `shouldReturn` Right alice
288−
289− describe "Servant.API.Delete" $ do
290− it "allows empty content type" $ \(_, baseUrl) -> do
291− (left show <$> (runClientM getDeleteEmpty (ClientEnv manager baseUrl))) `shouldReturn` Right NoContent
292−
293− it "allows content type" $ \(_, baseUrl) -> do
294− (left show <$> (runClientM getDeleteContentType (ClientEnv manager baseUrl))) `shouldReturn` Right NoContent
295−
296− it "Servant.API.Capture" $ \(_, baseUrl) -> do
297− (left show <$> (runClientM (getCapture "Paula") (ClientEnv manager baseUrl))) `shouldReturn` Right (Person "Paula" 0)
298−
299− it "Servant.API.CaptureAll" $ \(_, baseUrl) -> do
300− let expected = [(Person "Paula" 0), (Person "Peta" 1)]
301− (left show <$> (runClientM (getCaptureAll ["Paula", "Peta"]) (ClientEnv manager baseUrl))) `shouldReturn` Right expected
302−
303− it "Servant.API.ReqBody" $ \(_, baseUrl) -> do
304− let p = Person "Clara" 42
305− (left show <$> runClientM (getBody p) (ClientEnv manager baseUrl)) `shouldReturn` Right p
306−
307− it "Servant.API.QueryParam" $ \(_, baseUrl) -> do
308− left show <$> runClientM (getQueryParam (Just "alice")) (ClientEnv manager baseUrl) `shouldReturn` Right alice
309− Left FailureResponse{..} <- runClientM (getQueryParam (Just "bob")) (ClientEnv manager baseUrl)
310− responseStatus `shouldBe` HTTP.Status 400 "bob not found"
311−
312− it "Servant.API.QueryParam.QueryParams" $ \(_, baseUrl) -> do
313− (left show <$> runClientM (getQueryParams []) (ClientEnv manager baseUrl)) `shouldReturn` Right []
314− (left show <$> runClientM (getQueryParams ["alice", "bob"]) (ClientEnv manager baseUrl))
315− `shouldReturn` Right [Person "alice" 0, Person "bob" 1]
316−
317− context "Servant.API.QueryParam.QueryFlag" $
318− forM_ [False, True] $ \ flag -> it (show flag) $ \(_, baseUrl) -> do
319− (left show <$> runClientM (getQueryFlag flag) (ClientEnv manager baseUrl)) `shouldReturn` Right flag
320−
321− it "Servant.API.Raw on success" $ \(_, baseUrl) -> do
322− res <- runClientM (getRawSuccess HTTP.methodGet) (ClientEnv manager baseUrl)
323− case res of
324− Left e -> assertFailure $ show e
325− Right (code, body, ct, _, response) -> do
326− (code, body, ct) `shouldBe` (200, "rawSuccess", "application"//"octet-stream")
327− C.responseBody response `shouldBe` body
328− C.responseStatus response `shouldBe` HTTP.ok200
329−
330− it "Servant.API.Raw should return a Left in case of failure" $ \(_, baseUrl) -> do
331− res <- runClientM (getRawFailure HTTP.methodGet) (ClientEnv manager baseUrl)
332− case res of
333− Right _ -> assertFailure "expected Left, but got Right"
334− Left e -> do
335− Servant.Client.responseStatus e `shouldBe` HTTP.status400
336− Servant.Client.responseBody e `shouldBe` "rawFailure"
337−
338− it "Returns headers appropriately" $ \(_, baseUrl) -> do
339− res <- runClientM getRespHeaders (ClientEnv manager baseUrl)
340− case res of
341− Left e -> assertFailure $ show e
342− Right val -> getHeaders val `shouldBe` [("X-Example1", "1729"), ("X-Example2", "eg2")]
343−
344− modifyMaxSuccess (const 20) $ do
345− it "works for a combination of Capture, QueryParam, QueryFlag and ReqBody" $ \(_, baseUrl) ->
346− property $ forAllShrink pathGen shrink $ \(NonEmpty cap) num flag body ->
347− ioProperty $ do
348− result <- left show <$> runClientM (getMultiple cap num flag body) (ClientEnv manager baseUrl)
349− return $
350− result === Right (cap, num, flag, body)
351−
352−
353−wrappedApiSpec :: Spec
354−wrappedApiSpec = describe "error status codes" $ do
355− let serveW api = serve api $ throwError $ ServantErr 500 "error message" "" []
356− context "are correctly handled by the client" $
357− let test :: (WrappedApi, String) -> Spec
358− test (WrappedApi api, desc) =
359− it desc $ bracket (startWaiApp $ serveW api) endWaiApp $ \(_, baseUrl) -> do
360− let getResponse :: SCR.ClientM ()
361− getResponse = client api
362− Left FailureResponse{..} <- runClientM getResponse (ClientEnv manager baseUrl)
363− responseStatus `shouldBe` (HTTP.Status 500 "error message")
364− in mapM_ test $
365− (WrappedApi (Proxy :: Proxy (Delete '[JSON] ())), "Delete") :
366− (WrappedApi (Proxy :: Proxy (Get '[JSON] ())), "Get") :
367− (WrappedApi (Proxy :: Proxy (Post '[JSON] ())), "Post") :
368− (WrappedApi (Proxy :: Proxy (Put '[JSON] ())), "Put") :
369− []
370−
371−failSpec :: Spec
372−failSpec = beforeAll (startWaiApp failServer) $ afterAll endWaiApp $ do
373−
374− context "client returns errors appropriately" $ do
375− it "reports FailureResponse" $ \(_, baseUrl) -> do
376− let (_ :<|> getDeleteEmpty :<|> _) = client api
377− Left res <- runClientM getDeleteEmpty (ClientEnv manager baseUrl)
378− case res of
379− FailureResponse _ (HTTP.Status 404 "Not Found") _ _ -> return ()
380− _ -> fail $ "expected 404 response, but got " <> show res
381−
382− it "reports DecodeFailure" $ \(_, baseUrl) -> do
383− let (_ :<|> _ :<|> getCapture :<|> _) = client api
384− Left res <- runClientM (getCapture "foo") (ClientEnv manager baseUrl)
385− case res of
386− DecodeFailure _ ("application/json") _ -> return ()
387− _ -> fail $ "expected DecodeFailure, but got " <> show res
388−
389− it "reports ConnectionError" $ \_ -> do
390− let (getGetWrongHost :<|> _) = client api
391− Left res <- runClientM getGetWrongHost (ClientEnv manager (BaseUrl Http "127.0.0.1" 19872 ""))
392− case res of
393− ConnectionError _ -> return ()
394− _ -> fail $ "expected ConnectionError, but got " <> show res
395−
396− it "reports UnsupportedContentType" $ \(_, baseUrl) -> do
397− let (getGet :<|> _ ) = client api
398− Left res <- runClientM getGet (ClientEnv manager baseUrl)
399− case res of
400− UnsupportedContentType ("application/octet-stream") _ -> return ()
401− _ -> fail $ "expected UnsupportedContentType, but got " <> show res
402−
403− it "reports InvalidContentTypeHeader" $ \(_, baseUrl) -> do
404− let (_ :<|> _ :<|> _ :<|> _ :<|> getBody :<|> _) = client api
405− Left res <- runClientM (getBody alice) (ClientEnv manager baseUrl)
406− case res of
407− InvalidContentTypeHeader "fooooo" _ -> return ()
408− _ -> fail $ "expected InvalidContentTypeHeader, but got " <> show res
409−
410−data WrappedApi where
411− WrappedApi :: (HasServer (api :: *) '[], Server api ~ Handler a,
412− HasClient api, Client api ~ SCR.ClientM ()) =>
413− Proxy api -> WrappedApi
414−
415−basicAuthSpec :: Spec
416−basicAuthSpec = beforeAll (startWaiApp basicAuthServer) $ afterAll endWaiApp $ do
417− context "Authentication works when requests are properly authenticated" $ do
418−
419− it "Authenticates a BasicAuth protected server appropriately" $ \(_,baseUrl) -> do
420− let getBasic = client basicAuthAPI
421− let basicAuthData = BasicAuthData "servant" "server"
422− (left show <$> runClientM (getBasic basicAuthData) (ClientEnv manager baseUrl)) `shouldReturn` Right alice
423−
424− context "Authentication is rejected when requests are not authenticated properly" $ do
425−
426− it "Authenticates a BasicAuth protected server appropriately" $ \(_,baseUrl) -> do
427− let getBasic = client basicAuthAPI
428− let basicAuthData = BasicAuthData "not" "password"
429− Left FailureResponse{..} <- runClientM (getBasic basicAuthData) (ClientEnv manager baseUrl)
430− responseStatus `shouldBe` HTTP.Status 403 "Forbidden"
431−
432−genAuthSpec :: Spec
433−genAuthSpec = beforeAll (startWaiApp genAuthServer) $ afterAll endWaiApp $ do
434− context "Authentication works when requests are properly authenticated" $ do
435−
436− it "Authenticates a AuthProtect protected server appropriately" $ \(_, baseUrl) -> do
437− let getProtected = client genAuthAPI
438− let authRequest = mkAuthenticateReq () (\_ req -> SCR.addHeader "AuthHeader" ("cool" :: String) req)
439− (left show <$> runClientM (getProtected authRequest) (ClientEnv manager baseUrl)) `shouldReturn` Right alice
440−
441− context "Authentication is rejected when requests are not authenticated properly" $ do
442−
443− it "Authenticates a AuthProtect protected server appropriately" $ \(_, baseUrl) -> do
444− let getProtected = client genAuthAPI
445− let authRequest = mkAuthenticateReq () (\_ req -> SCR.addHeader "Wrong" ("header" :: String) req)
446− Left FailureResponse{..} <- runClientM (getProtected authRequest) (ClientEnv manager baseUrl)
447− responseStatus `shouldBe` (HTTP.Status 401 "Unauthorized")
448−
449−genericClientSpec :: Spec
450−genericClientSpec = beforeAll (startWaiApp genericClientServer) $ afterAll endWaiApp $ do
451− describe "Servant.Client.Generic" $ do
452−
453− let GenericClient{..} = mkClient (client (Proxy :: Proxy GenericClientAPI))
454− NestedClient1{..} = mkNestedClient1 "example"
455− NestedClient2{..} = mkNestedClient2 (Just 42)
456−
457− it "works for top-level client function" $ \(_, baseUrl) -> do
458− (left show <$> (runClientM (getSqr (Just 5)) (ClientEnv manager baseUrl))) `shouldReturn` Right 25
459−
460− it "works for nested clients" $ \(_, baseUrl) -> do
461− (left show <$> (runClientM (idChar (Just 'c')) (ClientEnv manager baseUrl))) `shouldReturn` Right 'c'
462− (left show <$> (runClientM (getSum 3 4) (ClientEnv manager baseUrl))) `shouldReturn` Right 7
463− (left show <$> (runClientM doNothing (ClientEnv manager baseUrl))) `shouldReturn` Right ()
464−
465−-- * utils
466−
467−startWaiApp :: Application -> IO (ThreadId, BaseUrl)
468−startWaiApp app = do
469− (port, socket) <- openTestSocket
470− let settings = setPort port $ defaultSettings
471− thread <- forkIO $ runSettingsSocket settings socket app
472− return (thread, BaseUrl Http "localhost" port "")
473−
474−
475−endWaiApp :: (ThreadId, BaseUrl) -> IO ()
476−endWaiApp (thread, _) = killThread thread
477−
478−openTestSocket :: IO (Port, Socket)
479−openTestSocket = do
480− s <- socket AF_INET Stream defaultProtocol
481− localhost <- inet_addr "127.0.0.1"
482− bind s (SockAddrInet aNY_PORT localhost)
483− listen s 1
484− port <- socketPort s
485− return (fromIntegral port, s)
486−
487−pathGen :: Gen (NonEmptyList Char)
488−pathGen = fmap NonEmpty path
489− where
490− path = listOf1 $ elements $
491− filter (not . (`elem` ("?%[]/#;" :: String))) $
492− filter isPrint $
493− map chr [0..127]
servant-client/test/Servant/ClientTestUtils.hsnew file+384
@@ -0,0 +1,384 @@
1+{-# LANGUAGE CPP #-}
2+{-# LANGUAGE ConstraintKinds #-}
3+{-# LANGUAGE DataKinds #-}
4+{-# LANGUAGE DeriveGeneric #-}
5+{-# LANGUAGE FlexibleContexts #-}
6+{-# LANGUAGE FlexibleInstances #-}
7+{-# LANGUAGE GADTs #-}
8+{-# LANGUAGE MultiParamTypeClasses #-}
9+{-# LANGUAGE OverloadedStrings #-}
10+{-# LANGUAGE PolyKinds #-}
11+{-# LANGUAGE ScopedTypeVariables #-}
12+{-# LANGUAGE TypeApplications #-}
13+{-# LANGUAGE TypeFamilies #-}
14+{-# LANGUAGE TypeOperators #-}
15+{-# LANGUAGE UndecidableInstances #-}
16+{-# OPTIONS_GHC -freduction-depth=100 #-}
17+{-# OPTIONS_GHC -fno-warn-orphans #-}
18+{-# OPTIONS_GHC -fno-warn-name-shadowing #-}
19+
20+module Servant.ClientTestUtils where
21+
22+import Prelude ()
23+import Prelude.Compat
24+
25+import Control.Concurrent
26+ (ThreadId, forkIO, killThread)
27+import Control.Monad
28+ (join)
29+import Control.Monad.Error.Class
30+ (throwError)
31+import Data.Aeson
32+import Data.ByteString
33+ (ByteString)
34+import Data.ByteString.Builder
35+ (byteString)
36+import qualified Data.ByteString.Lazy as LazyByteString
37+import Data.Char
38+ (chr, isPrint)
39+import Data.Monoid ()
40+import Data.Proxy
41+import Data.SOP
42+import Data.Text
43+ (Text)
44+import qualified Data.Text as Text
45+import Data.Text.Encoding
46+ (decodeUtf8, encodeUtf8)
47+import GHC.Generics
48+ (Generic)
49+import qualified Network.HTTP.Client as C
50+import qualified Network.HTTP.Types as HTTP
51+import Network.Socket
52+import qualified Network.Wai as Wai
53+import Network.Wai.Handler.Warp
54+import System.IO.Unsafe
55+ (unsafePerformIO)
56+import Test.QuickCheck
57+import Web.FormUrlEncoded
58+ (FromForm, ToForm)
59+
60+import Servant.API
61+ ((:<|>) ((:<|>)), (:>), AuthProtect, BasicAuth,
62+ BasicAuthData (..), Capture, CaptureAll, DeleteNoContent,
63+ EmptyAPI, FormUrlEncoded, Fragment, FromHttpApiData (..), Get, Header, Headers,
64+ JSON, MimeRender (mimeRender), MimeUnrender (mimeUnrender),
65+ NoContent (NoContent), PlainText, Post, QueryFlag, QueryParam,
66+ QueryParams, Raw, ReqBody, StdMethod (GET), ToHttpApiData (..), UVerb, Union,
67+ Verb, WithStatus (WithStatus), NamedRoutes, addHeader)
68+import Servant.API.Generic ((:-))
69+import Servant.Client
70+import qualified Servant.Client.Core.Auth as Auth
71+import Servant.Server
72+import Servant.Server.Experimental.Auth
73+import Servant.Test.ComprehensiveAPI
74+
75+-- This declaration simply checks that all instances are in place.
76+_ = client comprehensiveAPIWithoutStreaming
77+
78+-- * test data types
79+
80+data Person = Person
81+ { _name :: String
82+ , _age :: Integer
83+ } deriving (Eq, Show, Read, Generic)
84+
85+instance ToJSON Person
86+instance FromJSON Person
87+
88+instance ToForm Person
89+instance FromForm Person
90+
91+instance Arbitrary Person where
92+ arbitrary = Person <$> arbitrary <*> arbitrary
93+
94+instance MimeRender PlainText Person where
95+ mimeRender _ = LazyByteString.fromStrict . encodeUtf8 . Text.pack . show
96+
97+instance MimeUnrender PlainText Person where
98+ mimeUnrender _ =
99+ -- This does not handle any errors, but it should be fine for tests
100+ Right . read . Text.unpack . decodeUtf8 . LazyByteString.toStrict
101+
102+
103+alice :: Person
104+alice = Person "Alice" 42
105+
106+carol :: Person
107+carol = Person "Carol" 17
108+
109+type TestHeaders = '[Header "X-Example1" Int, Header "X-Example2" String]
110+
111+data RecordRoutes mode = RecordRoutes
112+ { version :: mode :- "version" :> Get '[JSON] Int
113+ , echo :: mode :- "echo" :> Capture "string" String :> Get '[JSON] String
114+ , otherRoutes :: mode :- "other" :> Capture "someParam" Int :> NamedRoutes OtherRoutes
115+ } deriving Generic
116+
117+data OtherRoutes mode = OtherRoutes
118+ { something :: mode :- "something" :> Get '[JSON] [String]
119+ } deriving Generic
120+
121+-- Get for HTTP 307 Temporary Redirect
122+type Get307 = Verb 'GET 307
123+
124+type Api =
125+ Get '[JSON] Person
126+ :<|> "get" :> Get '[JSON] Person
127+ -- This endpoint returns a response with status code 307 Temporary Redirect,
128+ -- different from the ones in the 2xx successful class, to test derivation
129+ -- of clients' api.
130+ :<|> "get307" :> Get307 '[PlainText] Text
131+ :<|> "deleteEmpty" :> DeleteNoContent
132+ :<|> "capture" :> Capture "name" String :> Get '[JSON,FormUrlEncoded] Person
133+ :<|> "captureAll" :> CaptureAll "names" String :> Get '[JSON] [Person]
134+ :<|> "body" :> ReqBody '[FormUrlEncoded,JSON] Person :> Post '[JSON] Person
135+ :<|> "param" :> QueryParam "name" String :> Get '[FormUrlEncoded,JSON] Person
136+ -- This endpoint makes use of a 'Raw' server because it is not currently
137+ -- possible to handle arbitrary binary query param values with
138+ -- @servant-server@
139+ :<|> "param-binary" :> QueryParam "payload" UrlEncodedByteString :> Raw
140+ :<|> "params" :> QueryParams "names" String :> Get '[JSON] [Person]
141+ :<|> "flag" :> QueryFlag "flag" :> Get '[JSON] Bool
142+ :<|> "fragment" :> Fragment String :> Get '[JSON] Person
143+ :<|> "rawSuccess" :> Raw
144+ :<|> "rawSuccessPassHeaders" :> Raw
145+ :<|> "rawFailure" :> Raw
146+ :<|> "multiple" :>
147+ Capture "first" String :>
148+ QueryParam "second" Int :>
149+ QueryFlag "third" :>
150+ ReqBody '[JSON] [(String, [Rational])] :>
151+ Get '[JSON] (String, Maybe Int, Bool, [(String, [Rational])])
152+ :<|> "headers" :> Get '[JSON] (Headers TestHeaders Bool)
153+ :<|> "uverb-headers" :> UVerb 'GET '[JSON] '[ WithStatus 200 (Headers TestHeaders Bool), WithStatus 204 String ]
154+ :<|> "deleteContentType" :> DeleteNoContent
155+ :<|> "redirectWithCookie" :> Raw
156+ :<|> "empty" :> EmptyAPI
157+ :<|> "uverb-success-or-redirect" :>
158+ Capture "bool" Bool :>
159+ UVerb 'GET '[PlainText] '[WithStatus 200 Person,
160+ WithStatus 301 Text]
161+ :<|> "uverb-get-created" :> UVerb 'GET '[PlainText] '[WithStatus 201 Person]
162+ :<|> NamedRoutes RecordRoutes
163+ :<|> "captureVerbatim" :> Capture "someString" Verbatim :> Get '[PlainText] Text
164+
165+api :: Proxy Api
166+api = Proxy
167+
168+getRoot :: ClientM Person
169+getGet :: ClientM Person
170+getGet307 :: ClientM Text
171+getDeleteEmpty :: ClientM NoContent
172+getCapture :: String -> ClientM Person
173+getCaptureAll :: [String] -> ClientM [Person]
174+getBody :: Person -> ClientM Person
175+getQueryParam :: Maybe String -> ClientM Person
176+getQueryParamBinary :: Maybe UrlEncodedByteString -> HTTP.Method -> ClientM Response
177+getQueryParams :: [String] -> ClientM [Person]
178+getQueryFlag :: Bool -> ClientM Bool
179+getFragment :: ClientM Person
180+getRawSuccess :: HTTP.Method -> ClientM Response
181+getRawSuccessPassHeaders :: HTTP.Method -> ClientM Response
182+getRawFailure :: HTTP.Method -> ClientM Response
183+getMultiple :: String -> Maybe Int -> Bool -> [(String, [Rational])]
184+ -> ClientM (String, Maybe Int, Bool, [(String, [Rational])])
185+getRespHeaders :: ClientM (Headers TestHeaders Bool)
186+getUVerbRespHeaders :: ClientM (Union '[ WithStatus 200 (Headers TestHeaders Bool), WithStatus 204 String ])
187+getDeleteContentType :: ClientM NoContent
188+getRedirectWithCookie :: HTTP.Method -> ClientM Response
189+uverbGetSuccessOrRedirect :: Bool
190+ -> ClientM (Union '[WithStatus 200 Person,
191+ WithStatus 301 Text])
192+uverbGetCreated :: ClientM (Union '[WithStatus 201 Person])
193+recordRoutes :: RecordRoutes (AsClientT ClientM)
194+
195+getRoot
196+ :<|> getGet
197+ :<|> getGet307
198+ :<|> getDeleteEmpty
199+ :<|> getCapture
200+ :<|> getCaptureAll
201+ :<|> getBody
202+ :<|> getQueryParam
203+ :<|> getQueryParamBinary
204+ :<|> getQueryParams
205+ :<|> getQueryFlag
206+ :<|> getFragment
207+ :<|> getRawSuccess
208+ :<|> getRawSuccessPassHeaders
209+ :<|> getRawFailure
210+ :<|> getMultiple
211+ :<|> getRespHeaders
212+ :<|> getUVerbRespHeaders
213+ :<|> getDeleteContentType
214+ :<|> getRedirectWithCookie
215+ :<|> EmptyClient
216+ :<|> uverbGetSuccessOrRedirect
217+ :<|> uverbGetCreated
218+ :<|> recordRoutes
219+ :<|> captureVerbatim = client api
220+
221+server :: Application
222+server = serve api (
223+ return carol
224+ :<|> return alice
225+ :<|> return "redirecting"
226+ :<|> return NoContent
227+ :<|> (\ name -> return $ Person name 0)
228+ :<|> (\ names -> return (zipWith Person names [0..]))
229+ :<|> return
230+ :<|> (\ name -> case name of
231+ Just "alice" -> return alice
232+ Just n -> throwError $ ServerError 400 (n ++ " not found") "" []
233+ Nothing -> throwError $ ServerError 400 "missing parameter" "" [])
234+ :<|> const (Tagged $ \request respond ->
235+ respond . maybe (Wai.responseLBS HTTP.notFound404 [] "Missing: payload")
236+ (Wai.responseLBS HTTP.ok200 [] . LazyByteString.fromStrict)
237+ . join
238+ . lookup "payload"
239+ $ Wai.queryString request
240+ )
241+ :<|> (\ names -> return (zipWith Person names [0..]))
242+ :<|> return
243+ :<|> return alice
244+ :<|> (Tagged $ \ _request respond -> respond $ Wai.responseLBS HTTP.ok200 [] "rawSuccess")
245+ :<|> (Tagged $ \ request respond -> (respond $ Wai.responseLBS HTTP.ok200 (Wai.requestHeaders $ request) "rawSuccess"))
246+ :<|> (Tagged $ \ _request respond -> respond $ Wai.responseLBS HTTP.badRequest400 [] "rawFailure")
247+ :<|> (\ a b c d -> return (a, b, c, d))
248+ :<|> (return $ addHeader 1729 $ addHeader "eg2" True)
249+ :<|> (pure . Z . I . WithStatus $ addHeader 1729 $ addHeader "eg2" True)
250+ :<|> return NoContent
251+ :<|> (Tagged $ \ _request respond -> respond $ Wai.responseLBS HTTP.found302 [("Location", "testlocation"), ("Set-Cookie", "testcookie=test")] "")
252+ :<|> emptyServer
253+ :<|> (\shouldRedirect -> if shouldRedirect
254+ then respond (WithStatus @301 ("redirecting" :: Text))
255+ else respond (WithStatus @200 alice ))
256+ :<|> respond (WithStatus @201 carol)
257+ :<|> RecordRoutes
258+ { version = pure 42
259+ , echo = pure
260+ , otherRoutes = \_ -> OtherRoutes
261+ { something = pure ["foo", "bar", "pweet"]
262+ }
263+ }
264+ :<|> pure . decodeUtf8 . unVerbatim
265+ )
266+
267+-- * api for testing failures
268+
269+type FailApi =
270+ "get" :> Raw
271+ :<|> "capture" :> Capture "name" String :> Raw
272+ :<|> "body" :> Raw
273+ :<|> "headers" :> Raw
274+failApi :: Proxy FailApi
275+failApi = Proxy
276+
277+failServer :: Application
278+failServer = serve failApi (
279+ (Tagged $ \ _request respond -> respond $ Wai.responseLBS HTTP.ok200 [] "")
280+ :<|> (\ _capture -> Tagged $ \_request respond -> respond $ Wai.responseLBS HTTP.ok200 [("content-type", "application/json")] "")
281+ :<|> (Tagged $ \_request respond -> respond $ Wai.responseLBS HTTP.ok200 [("content-type", "fooooo")] "")
282+ :<|> (Tagged $ \_request respond -> respond $ Wai.responseLBS HTTP.ok200 [("content-type", "application/x-www-form-urlencoded"), ("X-Example1", "1"), ("X-Example2", "foo")] "")
283+ )
284+
285+-- * basic auth stuff
286+
287+type BasicAuthAPI =
288+ BasicAuth "foo-realm" () :> "private" :> "basic" :> Get '[JSON] Person
289+
290+basicAuthAPI :: Proxy BasicAuthAPI
291+basicAuthAPI = Proxy
292+
293+basicAuthHandler :: BasicAuthCheck ()
294+basicAuthHandler =
295+ let check (BasicAuthData username password) =
296+ if username == "servant" && password == "server"
297+ then return (Authorized ())
298+ else return Unauthorized
299+ in BasicAuthCheck check
300+
301+basicServerContext :: Context '[ BasicAuthCheck () ]
302+basicServerContext = basicAuthHandler :. EmptyContext
303+
304+basicAuthServer :: Application
305+basicAuthServer = serveWithContext basicAuthAPI basicServerContext (const (return alice))
306+
307+-- * general auth stuff
308+
309+type GenAuthAPI =
310+ AuthProtect "auth-tag" :> "private" :> "auth" :> Get '[JSON] Person
311+
312+genAuthAPI :: Proxy GenAuthAPI
313+genAuthAPI = Proxy
314+
315+type instance AuthServerData (AuthProtect "auth-tag") = ()
316+type instance Auth.AuthClientData (AuthProtect "auth-tag") = ()
317+
318+genAuthHandler :: AuthHandler Wai.Request ()
319+genAuthHandler =
320+ let handler req = case lookup "AuthHeader" (Wai.requestHeaders req) of
321+ Nothing -> throwError (err401 { errBody = "Missing auth header" })
322+ Just _ -> return ()
323+ in mkAuthHandler handler
324+
325+genAuthServerContext :: Context '[ AuthHandler Wai.Request () ]
326+genAuthServerContext = genAuthHandler :. EmptyContext
327+
328+genAuthServer :: Application
329+genAuthServer = serveWithContext genAuthAPI genAuthServerContext (const (return alice))
330+
331+{-# NOINLINE manager' #-}
332+manager' :: C.Manager
333+manager' = unsafePerformIO $ C.newManager C.defaultManagerSettings
334+
335+runClient :: ClientM a -> BaseUrl -> IO (Either ClientError a)
336+runClient x baseUrl' = runClientM x (mkClientEnv manager' baseUrl')
337+
338+-- * utils
339+
340+startWaiApp :: Application -> IO (ThreadId, BaseUrl)
341+startWaiApp app = do
342+ (port, socket) <- openTestSocket
343+ let settings = setPort port defaultSettings
344+ thread <- forkIO $ runSettingsSocket settings socket app
345+ return (thread, BaseUrl Http "localhost" port "")
346+
347+
348+endWaiApp :: (ThreadId, BaseUrl) -> IO ()
349+endWaiApp (thread, _) = killThread thread
350+
351+openTestSocket :: IO (Port, Socket)
352+openTestSocket = do
353+ s <- socket AF_INET Stream defaultProtocol
354+ let localhost = tupleToHostAddress (127, 0, 0, 1)
355+ bind s (SockAddrInet defaultPort localhost)
356+ listen s 1
357+ port <- socketPort s
358+ return (fromIntegral port, s)
359+
360+pathGen :: Gen (NonEmptyList Char)
361+pathGen = fmap NonEmpty path
362+ where
363+ path = listOf1 $ elements $
364+ filter (not . (`elem` ("?%[]/#;" :: String))) $
365+ filter isPrint $
366+ map chr [0..127]
367+
368+newtype UrlEncodedByteString = UrlEncodedByteString { unUrlEncodedByteString :: ByteString }
369+
370+instance ToHttpApiData UrlEncodedByteString where
371+ toEncodedUrlPiece = byteString . HTTP.urlEncode True . unUrlEncodedByteString
372+ toUrlPiece = decodeUtf8 . HTTP.urlEncode True . unUrlEncodedByteString
373+
374+instance FromHttpApiData UrlEncodedByteString where
375+ parseUrlPiece = pure . UrlEncodedByteString . HTTP.urlDecode True . encodeUtf8
376+
377+newtype Verbatim = Verbatim { unVerbatim :: ByteString }
378+
379+instance ToHttpApiData Verbatim where
380+ toEncodedUrlPiece = byteString . unVerbatim
381+ toUrlPiece = decodeUtf8 . unVerbatim
382+
383+instance FromHttpApiData Verbatim where
384+ parseUrlPiece = pure . Verbatim . encodeUtf8
servant-client/test/Servant/ConnectionErrorSpec.hsnew file+55
@@ -0,0 +1,55 @@
1+{-# LANGUAGE CPP #-}
2+{-# LANGUAGE ConstraintKinds #-}
3+{-# LANGUAGE DataKinds #-}
4+{-# LANGUAGE FlexibleContexts #-}
5+{-# LANGUAGE FlexibleInstances #-}
6+{-# LANGUAGE GADTs #-}
7+{-# LANGUAGE MultiParamTypeClasses #-}
8+{-# LANGUAGE OverloadedStrings #-}
9+{-# LANGUAGE PolyKinds #-}
10+{-# LANGUAGE ScopedTypeVariables #-}
11+{-# LANGUAGE TypeApplications #-}
12+{-# LANGUAGE TypeFamilies #-}
13+{-# LANGUAGE TypeOperators #-}
14+{-# LANGUAGE UndecidableInstances #-}
15+{-# OPTIONS_GHC -freduction-depth=100 #-}
16+{-# OPTIONS_GHC -fno-warn-orphans #-}
17+{-# OPTIONS_GHC -fno-warn-name-shadowing #-}
18+
19+module Servant.ConnectionErrorSpec (spec) where
20+
21+import Prelude ()
22+import Prelude.Compat
23+
24+import Control.Exception
25+ (fromException)
26+import Data.Maybe
27+ (isJust)
28+import Data.Monoid ()
29+import Data.Proxy
30+import qualified Network.HTTP.Client as C
31+import Test.Hspec
32+
33+import Servant.API
34+ (Get, JSON)
35+import Servant.Client
36+import Servant.ClientTestUtils
37+
38+
39+spec :: Spec
40+spec = describe "Servant.ConnectionErrorSpec" $ do
41+ connectionErrorSpec
42+
43+type ConnectionErrorAPI = Get '[JSON] Int
44+
45+connectionErrorAPI :: Proxy ConnectionErrorAPI
46+connectionErrorAPI = Proxy
47+
48+connectionErrorSpec :: Spec
49+connectionErrorSpec = describe "Servant.Client.ClientError" $
50+ it "correctly catches ConnectionErrors when the HTTP request can't go through" $ do
51+ let getInt = client connectionErrorAPI
52+ let baseUrl' = BaseUrl Http "example.invalid" 80 ""
53+ let isHttpError (Left (ConnectionError e)) = isJust $ fromException @C.HttpException e
54+ isHttpError _ = False
55+ (isHttpError <$> runClient getInt baseUrl') `shouldReturn` True
servant-client/test/Servant/FailSpec.hsnew file+79
@@ -0,0 +1,79 @@
1+{-# LANGUAGE CPP #-}
2+{-# LANGUAGE ConstraintKinds #-}
3+{-# LANGUAGE DataKinds #-}
4+{-# LANGUAGE FlexibleContexts #-}
5+{-# LANGUAGE FlexibleInstances #-}
6+{-# LANGUAGE GADTs #-}
7+{-# LANGUAGE MultiParamTypeClasses #-}
8+{-# LANGUAGE OverloadedStrings #-}
9+{-# LANGUAGE PolyKinds #-}
10+{-# LANGUAGE ScopedTypeVariables #-}
11+{-# LANGUAGE TypeFamilies #-}
12+{-# LANGUAGE TypeOperators #-}
13+{-# LANGUAGE UndecidableInstances #-}
14+{-# OPTIONS_GHC -freduction-depth=100 #-}
15+{-# OPTIONS_GHC -fno-warn-orphans #-}
16+{-# OPTIONS_GHC -fno-warn-name-shadowing #-}
17+
18+module Servant.FailSpec (spec) where
19+
20+import Prelude ()
21+import Prelude.Compat
22+
23+import Data.Monoid ()
24+import qualified Network.HTTP.Types as HTTP
25+import Test.Hspec
26+
27+import Servant.API
28+ ((:<|>) ((:<|>)))
29+import Servant.Client
30+import Servant.ClientTestUtils
31+
32+spec :: Spec
33+spec = describe "Servant.FailSpec" $ do
34+ failSpec
35+
36+failSpec :: Spec
37+failSpec = beforeAll (startWaiApp failServer) $ afterAll endWaiApp $ do
38+
39+ context "client returns errors appropriately" $ do
40+ it "reports FailureResponse" $ \(_, baseUrl) -> do
41+ let (_ :<|> _ :<|> _ :<|> getDeleteEmpty :<|> _) = client api
42+ Left res <- runClient getDeleteEmpty baseUrl
43+ case res of
44+ FailureResponse _ r | responseStatusCode r == HTTP.status404 -> return ()
45+ _ -> fail $ "expected 404 response, but got " <> show res
46+
47+ it "reports DecodeFailure" $ \(_, baseUrl) -> do
48+ let (_ :<|> _ :<|> _ :<|> _ :<|> getCapture :<|> _) = client api
49+ Left res <- runClient (getCapture "foo") baseUrl
50+ case res of
51+ DecodeFailure _ _ -> return ()
52+ _ -> fail $ "expected DecodeFailure, but got " <> show res
53+
54+ it "reports ConnectionError" $ \_ -> do
55+ let (getGetWrongHost :<|> _) = client api
56+ Left res <- runClient getGetWrongHost (BaseUrl Http "127.0.0.1" 19872 "")
57+ case res of
58+ ConnectionError _ -> return ()
59+ _ -> fail $ "expected ConnectionError, but got " <> show res
60+
61+ it "reports UnsupportedContentType" $ \(_, baseUrl) -> do
62+ let (_ :<|> getGet :<|> _ ) = client api
63+ Left res <- runClient getGet baseUrl
64+ case res of
65+ UnsupportedContentType "application/octet-stream" _ -> return ()
66+ _ -> fail $ "expected UnsupportedContentType, but got " <> show res
67+
68+ it "reports UnsupportedContentType when there are response headers" $ \(_, baseUrl) -> do
69+ Left res <- runClient getRespHeaders baseUrl
70+ case res of
71+ UnsupportedContentType "application/x-www-form-urlencoded" _ -> return ()
72+ _ -> fail $ "expected UnsupportedContentType, but got " <> show res
73+
74+ it "reports InvalidContentTypeHeader" $ \(_, baseUrl) -> do
75+ let (_ :<|> _ :<|> _ :<|> _ :<|> _ :<|> _ :<|> getBody :<|> _) = client api
76+ Left res <- runClient (getBody alice) baseUrl
77+ case res of
78+ InvalidContentTypeHeader _ -> return ()
79+ _ -> fail $ "expected InvalidContentTypeHeader, but got " <> show res
servant-client/test/Servant/GenAuthSpec.hsnew file+54
@@ -0,0 +1,54 @@
1+{-# LANGUAGE CPP #-}
2+{-# LANGUAGE ConstraintKinds #-}
3+{-# LANGUAGE DataKinds #-}
4+{-# LANGUAGE FlexibleContexts #-}
5+{-# LANGUAGE FlexibleInstances #-}
6+{-# LANGUAGE GADTs #-}
7+{-# LANGUAGE MultiParamTypeClasses #-}
8+{-# LANGUAGE OverloadedStrings #-}
9+{-# LANGUAGE PolyKinds #-}
10+{-# LANGUAGE ScopedTypeVariables #-}
11+{-# LANGUAGE TypeFamilies #-}
12+{-# LANGUAGE TypeOperators #-}
13+{-# LANGUAGE UndecidableInstances #-}
14+{-# OPTIONS_GHC -freduction-depth=100 #-}
15+{-# OPTIONS_GHC -fno-warn-orphans #-}
16+{-# OPTIONS_GHC -fno-warn-name-shadowing #-}
17+
18+module Servant.GenAuthSpec (spec) where
19+
20+import Prelude ()
21+import Prelude.Compat
22+
23+import Control.Arrow
24+ (left)
25+import Data.Monoid ()
26+import qualified Network.HTTP.Types as HTTP
27+import Test.Hspec
28+
29+import Servant.Client
30+import qualified Servant.Client.Core.Auth as Auth
31+import qualified Servant.Client.Core.Request as Req
32+import Servant.ClientTestUtils
33+
34+spec :: Spec
35+spec = describe "Servant.GenAuthSpec" $ do
36+ genAuthSpec
37+
38+genAuthSpec :: Spec
39+genAuthSpec = beforeAll (startWaiApp genAuthServer) $ afterAll endWaiApp $ do
40+ context "Authentication works when requests are properly authenticated" $ do
41+
42+ it "Authenticates a AuthProtect protected server appropriately" $ \(_, baseUrl) -> do
43+ let getProtected = client genAuthAPI
44+ let authRequest = Auth.mkAuthenticatedRequest () (\_ req -> Req.addHeader "AuthHeader" ("cool" :: String) req)
45+ left show <$> runClient (getProtected authRequest) baseUrl `shouldReturn` Right alice
46+
47+ context "Authentication is rejected when requests are not authenticated properly" $ do
48+
49+ it "Authenticates a AuthProtect protected server appropriately" $ \(_, baseUrl) -> do
50+ let getProtected = client genAuthAPI
51+ let authRequest = Auth.mkAuthenticatedRequest () (\_ req -> Req.addHeader "Wrong" ("header" :: String) req)
52+ Left (FailureResponse _ r) <- runClient (getProtected authRequest) baseUrl
53+ responseStatusCode r `shouldBe` HTTP.Status 401 "Unauthorized"
54+
servant-client/test/Servant/GenericSpec.hsnew file+37
@@ -0,0 +1,37 @@
1+{-# LANGUAGE CPP #-}
2+{-# LANGUAGE ConstraintKinds #-}
3+{-# LANGUAGE DataKinds #-}
4+{-# LANGUAGE FlexibleContexts #-}
5+{-# LANGUAGE FlexibleInstances #-}
6+{-# LANGUAGE GADTs #-}
7+{-# LANGUAGE MultiParamTypeClasses #-}
8+{-# LANGUAGE OverloadedStrings #-}
9+{-# LANGUAGE PolyKinds #-}
10+{-# LANGUAGE ScopedTypeVariables #-}
11+{-# LANGUAGE TypeFamilies #-}
12+{-# LANGUAGE TypeOperators #-}
13+{-# LANGUAGE UndecidableInstances #-}
14+{-# OPTIONS_GHC -freduction-depth=100 #-}
15+{-# OPTIONS_GHC -fno-warn-orphans #-}
16+{-# OPTIONS_GHC -fno-warn-name-shadowing #-}
17+
18+module Servant.GenericSpec (spec) where
19+
20+import Test.Hspec
21+
22+import Servant.Client ((//), (/:))
23+import Servant.ClientTestUtils
24+
25+spec :: Spec
26+spec = describe "Servant.GenericSpec" $ do
27+ genericSpec
28+
29+genericSpec :: Spec
30+genericSpec = beforeAll (startWaiApp server) $ afterAll endWaiApp $ do
31+ context "Record clients work as expected" $ do
32+
33+ it "Client functions return expected values" $ \(_,baseUrl) -> do
34+ runClient (recordRoutes // version) baseUrl `shouldReturn` Right 42
35+ runClient (recordRoutes // echo /: "foo") baseUrl `shouldReturn` Right "foo"
36+ it "Clients can be nested" $ \(_,baseUrl) -> do
37+ runClient (recordRoutes // otherRoutes /: 42 // something) baseUrl `shouldReturn` Right ["foo", "bar", "pweet"]
servant-client/test/Servant/HoistClientSpec.hsnew file+58
@@ -0,0 +1,58 @@
1+{-# LANGUAGE CPP #-}
2+{-# LANGUAGE ConstraintKinds #-}
3+{-# LANGUAGE DataKinds #-}
4+{-# LANGUAGE FlexibleContexts #-}
5+{-# LANGUAGE FlexibleInstances #-}
6+{-# LANGUAGE GADTs #-}
7+{-# LANGUAGE MultiParamTypeClasses #-}
8+{-# LANGUAGE OverloadedStrings #-}
9+{-# LANGUAGE PolyKinds #-}
10+{-# LANGUAGE RecordWildCards #-}
11+{-# LANGUAGE ScopedTypeVariables #-}
12+{-# LANGUAGE TypeFamilies #-}
13+{-# LANGUAGE TypeOperators #-}
14+{-# LANGUAGE UndecidableInstances #-}
15+{-# OPTIONS_GHC -freduction-depth=100 #-}
16+{-# OPTIONS_GHC -fno-warn-orphans #-}
17+{-# OPTIONS_GHC -fno-warn-name-shadowing #-}
18+
19+module Servant.HoistClientSpec (spec) where
20+
21+import Prelude ()
22+import Prelude.Compat
23+
24+import Data.Monoid ()
25+import Data.Proxy
26+import Test.Hspec
27+
28+import Servant.API
29+ ((:<|>) ((:<|>)), (:>), Capture,
30+ Get, JSON, Post)
31+import Servant.Client
32+import Servant.Server
33+import Servant.ClientTestUtils
34+
35+
36+spec :: Spec
37+spec = describe "Servant.HoistClientSpec" $ do
38+ hoistClientSpec
39+
40+type HoistClientAPI = Get '[JSON] Int :<|> Capture "n" Int :> Post '[JSON] Int
41+
42+hoistClientAPI :: Proxy HoistClientAPI
43+hoistClientAPI = Proxy
44+
45+hoistClientServer :: Application -- implements HoistClientAPI
46+hoistClientServer = serve hoistClientAPI $ return 5 :<|> return
47+
48+hoistClientSpec :: Spec
49+hoistClientSpec = beforeAll (startWaiApp hoistClientServer) $ afterAll endWaiApp $ do
50+ describe "Servant.Client.hoistClient" $ do
51+ it "allows us to GET/POST/... requests in IO instead of ClientM" $ \(_, baseUrl) -> do
52+ let (getInt :<|> postInt)
53+ = hoistClient hoistClientAPI
54+ (fmap (either (error . show) id) . flip runClient baseUrl)
55+ (client hoistClientAPI)
56+
57+ getInt `shouldReturn` 5
58+ postInt 5 `shouldReturn` 5
servant-client/test/Servant/StreamSpec.hsnew file+183
@@ -0,0 +1,183 @@
1+{-# LANGUAGE CPP #-}
2+{-# LANGUAGE ConstraintKinds #-}
3+{-# LANGUAGE DataKinds #-}
4+{-# LANGUAGE DeriveGeneric #-}
5+{-# LANGUAGE FlexibleContexts #-}
6+{-# LANGUAGE FlexibleInstances #-}
7+{-# LANGUAGE FunctionalDependencies #-}
8+{-# LANGUAGE GADTs #-}
9+{-# LANGUAGE MultiParamTypeClasses #-}
10+{-# LANGUAGE OverloadedStrings #-}
11+{-# LANGUAGE PolyKinds #-}
12+{-# LANGUAGE RecordWildCards #-}
13+{-# LANGUAGE ScopedTypeVariables #-}
14+{-# LANGUAGE StandaloneDeriving #-}
15+{-# LANGUAGE TypeFamilies #-}
16+{-# LANGUAGE TypeOperators #-}
17+{-# LANGUAGE UndecidableInstances #-}
18+{-# OPTIONS_GHC -freduction-depth=100 #-}
19+{-# OPTIONS_GHC -fno-warn-orphans #-}
20+{-# OPTIONS_GHC -fno-warn-name-shadowing #-}
21+
22+module Servant.StreamSpec (spec) where
23+
24+import Control.Monad
25+ (when)
26+import Control.Monad.Codensity
27+ (Codensity (..))
28+import Control.Monad.IO.Class
29+ (MonadIO (..))
30+import Control.Monad.Trans.Except
31+import qualified Data.ByteString as BS
32+import Data.Proxy
33+import qualified Data.TDigest as TD
34+import qualified Network.HTTP.Client as C
35+import Prelude ()
36+import Prelude.Compat
37+import Servant.API
38+ ((:<|>) ((:<|>)), (:>), JSON, NetstringFraming, StreamBody,
39+ NewlineFraming, NoFraming, OctetStream, SourceIO, StreamGet,
40+ )
41+import Servant.Client.Streaming
42+import Servant.Server
43+import Servant.Test.ComprehensiveAPI
44+import Servant.Types.SourceT
45+import System.Entropy
46+ (getEntropy, getHardwareEntropy)
47+import System.IO.Unsafe
48+ (unsafePerformIO)
49+import System.Mem
50+ (performGC)
51+import Test.Hspec
52+import Servant.ClientTestUtils (Person(..))
53+import qualified Servant.ClientTestUtils as CT
54+
55+#if MIN_VERSION_base(4,10,0)
56+import GHC.Stats
57+ (gc, gcdetails_live_bytes, getRTSStats)
58+#else
59+import GHC.Stats
60+ (currentBytesUsed, getGCStats)
61+#endif
62+
63+-- This declaration simply checks that all instances are in place.
64+-- Note: this is streaming client
65+_ = client comprehensiveAPI
66+
67+spec :: Spec
68+spec = describe "Servant.Client.Streaming" $ do
69+ streamSpec
70+
71+type StreamApi =
72+ "streamGetNewline" :> StreamGet NewlineFraming JSON (SourceIO Person)
73+ :<|> "streamGetNetstring" :> StreamGet NetstringFraming JSON (SourceIO Person)
74+ :<|> "streamALot" :> StreamGet NoFraming OctetStream (SourceIO BS.ByteString)
75+ :<|> "streamBody" :> StreamBody NoFraming OctetStream (SourceIO BS.ByteString) :> StreamGet NoFraming OctetStream (SourceIO BS.ByteString)
76+
77+api :: Proxy StreamApi
78+api = Proxy
79+
80+getGetNL, getGetNS :: ClientM (SourceIO Person)
81+getGetALot :: ClientM (SourceIO BS.ByteString)
82+getStreamBody :: SourceT IO BS.ByteString -> ClientM (SourceIO BS.ByteString)
83+getGetNL :<|> getGetNS :<|> getGetALot :<|> getStreamBody = client api
84+
85+alice :: Person
86+alice = Person "Alice" 42
87+
88+bob :: Person
89+bob = Person "Bob" 25
90+
91+server :: Application
92+server = serve api
93+ $ return (source [alice, bob, alice])
94+ :<|> return (source [alice, bob, alice])
95+ -- 2 ^ (18 + 10) = 256M
96+ :<|> return (SourceT ($ lots (powerOfTwo 18)))
97+ :<|> return
98+ where
99+ lots n
100+ | n < 0 = Stop
101+ | otherwise = Effect $ do
102+ let size = powerOfTwo 10
103+ mbs <- getHardwareEntropy size
104+ bs <- maybe (getEntropy size) pure mbs
105+ return (Yield bs (lots (n - 1)))
106+
107+powerOfTwo :: Int -> Int
108+powerOfTwo = (2 ^)
109+
110+{-# NOINLINE manager' #-}
111+manager' :: C.Manager
112+manager' = unsafePerformIO $ C.newManager C.defaultManagerSettings
113+
114+withClient :: ClientM a -> BaseUrl -> (Either ClientError a -> IO r) -> IO r
115+withClient x baseUrl' = withClientM x (mkClientEnv manager' baseUrl')
116+
117+testRunSourceIO :: SourceIO a
118+ -> IO (Either String [a])
119+testRunSourceIO = runExceptT . runSourceT
120+
121+streamSpec :: Spec
122+streamSpec = beforeAll (CT.startWaiApp server) $ afterAll CT.endWaiApp $ do
123+ it "works with Servant.API.StreamGet.Newline" $ \(_, baseUrl) -> do
124+ withClient getGetNL baseUrl $ \(Right res) ->
125+ testRunSourceIO res `shouldReturn` Right [alice, bob, alice]
126+
127+ it "works with Servant.API.StreamGet.Netstring" $ \(_, baseUrl) -> do
128+ withClient getGetNS baseUrl $ \(Right res) ->
129+ testRunSourceIO res `shouldReturn` Right [alice, bob, alice]
130+
131+ it "works with Servant.API.StreamBody" $ \(_, baseUrl) -> do
132+ withClient (getStreamBody (source input)) baseUrl $ \(Right res) ->
133+ testRunSourceIO res `shouldReturn` Right output
134+ where
135+ input = ["foo", "", "bar"]
136+ output = ["foo", "bar"]
137+
138+{-
139+ it "streams in constant memory" $ \(_, baseUrl) -> do
140+ Right rs <- runClient getGetALot baseUrl
141+ performGC
142+ -- usage0 <- getUsage
143+ -- putStrLn $ "Start: " ++ show usage0
144+ tdigest <- memoryUsage $ joinCodensitySourceT rs
145+
146+ -- putStrLn $ "Median: " ++ show (TD.median tdigest)
147+ -- putStrLn $ "Mean: " ++ show (TD.mean tdigest)
148+ -- putStrLn $ "Stddev: " ++ show (TD.stddev tdigest)
149+
150+ -- forM_ [0.01, 0.1, 0.2, 0.5, 0.8, 0.9, 0.99] $ \q ->
151+ -- putStrLn $ "q" ++ show q ++ ": " ++ show (TD.quantile q tdigest)
152+
153+ let Just stddev = TD.stddev tdigest
154+
155+ -- standard deviation of 100k is ok, we generate 256M of data after all.
156+ -- On my machine deviation is 40k-50k
157+ stddev `shouldSatisfy` (< 100000)
158+
159+memoryUsage :: SourceT IO BS.ByteString -> IO (TD.TDigest 25)
160+memoryUsage src = unSourceT src $ loop mempty (0 :: Int)
161+ where
162+ loop !acc !_ Stop = return acc
163+ loop !_ !_ (Error err) = fail err -- !
164+ loop !acc !n (Skip s) = loop acc n s
165+ loop !acc !n (Effect ms) = ms >>= loop acc n
166+ loop !acc !n (Yield _bs s) = do
167+ usage <- liftIO getUsage
168+ -- We perform GC in between as we generate garbage.
169+ when (n `mod` 1024 == 0) $ liftIO performGC
170+ loop (TD.insert usage acc) (n + 1) s
171+
172+getUsage :: IO Double
173+getUsage = fromIntegral .
174+#if MIN_VERSION_base(4,10,0)
175+ gcdetails_live_bytes . gc <$> getRTSStats
176+#else
177+ currentBytesUsed <$> getGCStats
178+#endif
179+ memUsed `shouldSatisfy` (< megabytes 22)
180+
181+megabytes :: Num a => a -> a
182+megabytes n = n * (1000 ^ (2 :: Int))
183+-}
servant-client/test/Servant/SuccessSpec.hsnew file+208
@@ -0,0 +1,208 @@
1+{-# LANGUAGE CPP #-}
2+{-# LANGUAGE ConstraintKinds #-}
3+{-# LANGUAGE DataKinds #-}
4+{-# LANGUAGE FlexibleContexts #-}
5+{-# LANGUAGE FlexibleInstances #-}
6+{-# LANGUAGE GADTs #-}
7+{-# LANGUAGE MultiParamTypeClasses #-}
8+{-# LANGUAGE OverloadedStrings #-}
9+{-# LANGUAGE PolyKinds #-}
10+{-# LANGUAGE ScopedTypeVariables #-}
11+{-# LANGUAGE TypeApplications #-}
12+{-# LANGUAGE TypeFamilies #-}
13+{-# LANGUAGE TypeOperators #-}
14+{-# LANGUAGE UndecidableInstances #-}
15+{-# OPTIONS_GHC -freduction-depth=100 #-}
16+{-# OPTIONS_GHC -fno-warn-orphans #-}
17+{-# OPTIONS_GHC -fno-warn-name-shadowing #-}
18+
19+module Servant.SuccessSpec (spec) where
20+
21+import Prelude ()
22+import Prelude.Compat
23+
24+import Control.Arrow
25+ ((+++), left)
26+import Control.Concurrent.STM
27+ (atomically)
28+import Control.Concurrent.STM.TVar
29+ (newTVar, readTVar)
30+import qualified Data.ByteString as BS
31+import qualified Data.ByteString.Lazy as BL
32+import Data.Foldable
33+ (forM_, toList)
34+import Data.Maybe
35+ (listToMaybe)
36+import Data.Monoid ()
37+import Data.Text
38+ (Text)
39+import Data.Text.Encoding
40+ (encodeUtf8)
41+import qualified Network.HTTP.Client as C
42+import qualified Network.HTTP.Types as HTTP
43+import Test.Hspec
44+import Test.Hspec.QuickCheck
45+import Test.HUnit
46+import Test.QuickCheck
47+
48+import Servant.API
49+ (NoContent (NoContent), WithStatus (WithStatus), getHeaders, Headers(..))
50+import Servant.Client
51+import qualified Servant.Client.Core.Request as Req
52+import Servant.ClientTestUtils
53+import Servant.Test.ComprehensiveAPI
54+
55+-- This declaration simply checks that all instances are in place.
56+_ = client comprehensiveAPIWithoutStreaming
57+
58+spec :: Spec
59+spec = describe "Servant.SuccessSpec" $ do
60+ successSpec
61+
62+successSpec :: Spec
63+successSpec = beforeAll (startWaiApp server) $ afterAll endWaiApp $ do
64+ describe "Servant.API.Get" $ do
65+ it "get root endpoint" $ \(_, baseUrl) -> do
66+ left show <$> runClient getRoot baseUrl `shouldReturn` Right carol
67+
68+ it "get simple endpoint" $ \(_, baseUrl) -> do
69+ left show <$> runClient getGet baseUrl `shouldReturn` Right alice
70+
71+ it "get redirection endpoint" $ \(_, baseUrl) -> do
72+ left show <$> runClient getGet307 baseUrl `shouldReturn` Right "redirecting"
73+
74+ describe "Servant.API.Delete" $ do
75+ it "allows empty content type" $ \(_, baseUrl) -> do
76+ left show <$> runClient getDeleteEmpty baseUrl `shouldReturn` Right NoContent
77+
78+ it "allows content type" $ \(_, baseUrl) -> do
79+ left show <$> runClient getDeleteContentType baseUrl `shouldReturn` Right NoContent
80+
81+ it "Servant.API.Capture" $ \(_, baseUrl) -> do
82+ left show <$> runClient (getCapture "Paula") baseUrl `shouldReturn` Right (Person "Paula" 0)
83+
84+ it "Servant.API.CaptureAll" $ \(_, baseUrl) -> do
85+ let expected = [Person "Paula" 0, Person "Peta" 1]
86+ left show <$> runClient (getCaptureAll ["Paula", "Peta"]) baseUrl `shouldReturn` Right expected
87+
88+ it "Servant.API.ReqBody" $ \(_, baseUrl) -> do
89+ let p = Person "Clara" 42
90+ left show <$> runClient (getBody p) baseUrl `shouldReturn` Right p
91+
92+ it "Servant.API FailureResponse" $ \(_, baseUrl) -> do
93+ left show <$> runClient (getQueryParam (Just "alice")) baseUrl `shouldReturn` Right alice
94+ Left (FailureResponse req _) <- runClient (getQueryParam (Just "bob")) baseUrl
95+ Req.requestPath req `shouldBe` (baseUrl, "/param")
96+ toList (Req.requestQueryString req) `shouldBe` [("name", Just "bob")]
97+ Req.requestMethod req `shouldBe` HTTP.methodGet
98+
99+ it "Servant.API.QueryParam" $ \(_, baseUrl) -> do
100+ left show <$> runClient (getQueryParam (Just "alice")) baseUrl `shouldReturn` Right alice
101+ Left (FailureResponse _ r) <- runClient (getQueryParam (Just "bob")) baseUrl
102+ responseStatusCode r `shouldBe` HTTP.Status 400 "bob not found"
103+
104+ it "Servant.API.QueryParam binary data" $ \(_, baseUrl) -> do
105+ let payload = BS.pack [0, 1, 2, 4, 8, 16, 32, 64, 128]
106+ apiCall = getQueryParamBinary (Just $ UrlEncodedByteString payload) HTTP.methodGet
107+ (show +++ responseBody) <$> runClient apiCall baseUrl `shouldReturn` Right (BL.fromStrict payload)
108+
109+ it "Servant.API.QueryParam.QueryParams" $ \(_, baseUrl) -> do
110+ left show <$> runClient (getQueryParams []) baseUrl `shouldReturn` Right []
111+ left show <$> runClient (getQueryParams ["alice", "bob"]) baseUrl
112+ `shouldReturn` Right [Person "alice" 0, Person "bob" 1]
113+
114+ context "Servant.API.QueryParam.QueryFlag" $
115+ forM_ [False, True] $ \ flag -> it (show flag) $ \(_, baseUrl) -> do
116+ left show <$> runClient (getQueryFlag flag) baseUrl `shouldReturn` Right flag
117+
118+ it "Servant.API.Fragment" $ \(_, baseUrl) -> do
119+ left id <$> runClient getFragment baseUrl `shouldReturn` Right alice
120+
121+ it "Servant.API.Raw on success" $ \(_, baseUrl) -> do
122+ res <- runClient (getRawSuccess HTTP.methodGet) baseUrl
123+ case res of
124+ Left e -> assertFailure $ show e
125+ Right r -> do
126+ responseStatusCode r `shouldBe` HTTP.status200
127+ responseBody r `shouldBe` "rawSuccess"
128+
129+ it "Servant.API.Raw should return a Left in case of failure" $ \(_, baseUrl) -> do
130+ res <- runClient (getRawFailure HTTP.methodGet) baseUrl
131+ case res of
132+ Right _ -> assertFailure "expected Left, but got Right"
133+ Left (FailureResponse _ r) -> do
134+ responseStatusCode r `shouldBe` HTTP.status400
135+ responseBody r `shouldBe` "rawFailure"
136+ Left e -> assertFailure $ "expected FailureResponse, but got " ++ show e
137+
138+ it "Returns headers appropriately" $ \(_, baseUrl) -> do
139+ res <- runClient getRespHeaders baseUrl
140+ case res of
141+ Left e -> assertFailure $ show e
142+ Right val -> getHeaders val `shouldBe` [("X-Example1", "1729"), ("X-Example2", "eg2")]
143+
144+ it "Returns headers on UVerb requests" $ \(_, baseUrl) -> do
145+ res <- runClient getUVerbRespHeaders baseUrl
146+ case res of
147+ Left e -> assertFailure $ show e
148+ Right val -> case matchUnion val of
149+ Just (WithStatus val' :: WithStatus 200 (Headers TestHeaders Bool))
150+ -> getHeaders val' `shouldBe` [("X-Example1", "1729"), ("X-Example2", "eg2")]
151+ Nothing -> assertFailure "unexpected alternative of union"
152+
153+ it "Stores Cookie in CookieJar after a redirect" $ \(_, baseUrl) -> do
154+ mgr <- C.newManager C.defaultManagerSettings
155+ cj <- atomically . newTVar $ C.createCookieJar []
156+ _ <- runClientM (getRedirectWithCookie HTTP.methodGet) (ClientEnv mgr baseUrl (Just cj) defaultMakeClientRequest)
157+ cookie <- listToMaybe . C.destroyCookieJar <$> atomically (readTVar cj)
158+ C.cookie_name <$> cookie `shouldBe` Just "testcookie"
159+ C.cookie_value <$> cookie `shouldBe` Just "test"
160+
161+ it "Can modify the outgoing Request using the ClientEnv" $ \(_, baseUrl) -> do
162+ mgr <- C.newManager C.defaultManagerSettings
163+ -- In proper situation, extra headers should probably be visible in API type.
164+ -- However, testing for response timeout is difficult, so we test with something which is easy to observe
165+ let createClientRequest url r = fmap (\req -> req { C.requestHeaders = [("X-Added-Header", "XXX")] })
166+ (defaultMakeClientRequest url r)
167+ clientEnv = (mkClientEnv mgr baseUrl) { makeClientRequest = createClientRequest }
168+ res <- runClientM (getRawSuccessPassHeaders HTTP.methodGet) clientEnv
169+ case res of
170+ Left e ->
171+ assertFailure $ show e
172+ Right r ->
173+ ("X-Added-Header", "XXX") `elem` toList (responseHeaders r) `shouldBe` True
174+
175+ modifyMaxSuccess (const 20) $ do
176+ it "works for a combination of Capture, QueryParam, QueryFlag and ReqBody" $ \(_, baseUrl) ->
177+ property $ forAllShrink pathGen shrink $ \(NonEmpty cap) num flag body ->
178+ ioProperty $ do
179+ result <- left show <$> runClient (getMultiple cap num flag body) baseUrl
180+ return $
181+ result === Right (cap, num, flag, body)
182+
183+ context "With a route that can either return success or redirect" $ do
184+ it "Redirects when appropriate" $ \(_, baseUrl) -> do
185+ eitherResponse <- runClient (uverbGetSuccessOrRedirect True) baseUrl
186+ case eitherResponse of
187+ Left clientError -> fail $ show clientError
188+ Right response -> matchUnion response `shouldBe` Just (WithStatus @301 @Text "redirecting")
189+
190+ it "Returns a proper response when appropriate" $ \(_, baseUrl) -> do
191+ eitherResponse <- runClient (uverbGetSuccessOrRedirect False) baseUrl
192+ case eitherResponse of
193+ Left clientError -> fail $ show clientError
194+ Right response -> matchUnion response `shouldBe` Just (WithStatus @200 alice)
195+
196+ context "with a route that uses uverb but only has a single response" $
197+ it "returns the expected response" $ \(_, baseUrl) -> do
198+ eitherResponse <- runClient (uverbGetCreated) baseUrl
199+ case eitherResponse of
200+ Left clientError -> fail $ show clientError
201+ Right response -> matchUnion response `shouldBe` Just (WithStatus @201 carol)
202+
203+ it "encodes URL pieces following ToHttpApiData instance" $ \(_, baseUrl) -> do
204+ let textOrig = "*"
205+ eitherResponse <- runClient (captureVerbatim $ Verbatim $ encodeUtf8 textOrig) baseUrl
206+ case eitherResponse of
207+ Left clientError -> fail $ show clientError
208+ Right textBack -> textBack `shouldBe` textOrig
servant-client/test/Servant/WrappedApiSpec.hsnew file+63
@@ -0,0 +1,63 @@
1+{-# LANGUAGE CPP #-}
2+{-# LANGUAGE ConstraintKinds #-}
3+{-# LANGUAGE DataKinds #-}
4+{-# LANGUAGE FlexibleContexts #-}
5+{-# LANGUAGE FlexibleInstances #-}
6+{-# LANGUAGE GADTs #-}
7+{-# LANGUAGE MultiParamTypeClasses #-}
8+{-# LANGUAGE OverloadedStrings #-}
9+{-# LANGUAGE PolyKinds #-}
10+{-# LANGUAGE ScopedTypeVariables #-}
11+{-# LANGUAGE TypeFamilies #-}
12+{-# LANGUAGE TypeOperators #-}
13+{-# LANGUAGE UndecidableInstances #-}
14+{-# OPTIONS_GHC -freduction-depth=100 #-}
15+{-# OPTIONS_GHC -fno-warn-orphans #-}
16+{-# OPTIONS_GHC -fno-warn-name-shadowing #-}
17+
18+module Servant.WrappedApiSpec (spec) where
19+
20+import Prelude ()
21+import Prelude.Compat
22+
23+import Control.Exception
24+ (bracket)
25+import Control.Monad.Error.Class
26+ (throwError)
27+import Data.Monoid ()
28+import Data.Proxy
29+import qualified Network.HTTP.Types as HTTP
30+import Test.Hspec
31+
32+import Servant.API
33+ (Delete, Get, JSON, Post, Put)
34+import Servant.Client
35+import Servant.Server
36+import Servant.ClientTestUtils
37+
38+spec :: Spec
39+spec = describe "Servant.WrappedApiSpec" $ do
40+ wrappedApiSpec
41+
42+data WrappedApi where
43+ WrappedApi :: (HasServer (api :: *) '[], Server api ~ Handler a,
44+ HasClient ClientM api, Client ClientM api ~ ClientM ()) =>
45+ Proxy api -> WrappedApi
46+
47+wrappedApiSpec :: Spec
48+wrappedApiSpec = describe "error status codes" $ do
49+ let serveW api = serve api $ throwError $ ServerError 500 "error message" "" []
50+ context "are correctly handled by the client" $
51+ let test :: (WrappedApi, String) -> Spec
52+ test (WrappedApi api, desc) =
53+ it desc $ bracket (startWaiApp $ serveW api) endWaiApp $ \(_, baseUrl) -> do
54+ let getResponse :: ClientM ()
55+ getResponse = client api
56+ Left (FailureResponse _ r) <- runClient getResponse baseUrl
57+ responseStatusCode r `shouldBe` HTTP.Status 500 "error message"
58+ in mapM_ test $
59+ (WrappedApi (Proxy :: Proxy (Delete '[JSON] ())), "Delete") :
60+ (WrappedApi (Proxy :: Proxy (Get '[JSON] ())), "Get") :
61+ (WrappedApi (Proxy :: Proxy (Post '[JSON] ())), "Post") :
62+ (WrappedApi (Proxy :: Proxy (Put '[JSON] ())), "Put") :
63+ []
servant-client/tinc.yamldeleted−5
@@ -1,5 +0,0 @@
1−dependencies:
2− - name: servant
3− path: ../servant
4− - name: servant-server
5− path: ../servant-server
servant-conduit/CHANGELOG.mdnew file+4
@@ -0,0 +1,4 @@
1+0.15
2+----
3+
4+- First release with support for `servant-0.15` `Stream` refactoring.
servant-conduit/LICENSEnew file+30
@@ -0,0 +1,30 @@
1+Copyright (c) 2018, Servant Contributors
2+
3+All rights reserved.
4+
5+Redistribution and use in source and binary forms, with or without
6+modification, are permitted provided that the following conditions are met:
7+
8+ * Redistributions of source code must retain the above copyright
9+ notice, this list of conditions and the following disclaimer.
10+
11+ * Redistributions in binary form must reproduce the above
12+ copyright notice, this list of conditions and the following
13+ disclaimer in the documentation and/or other materials provided
14+ with the distribution.
15+
16+ * Neither the name of Servant Contributors nor the names of other
17+ contributors may be used to endorse or promote products derived
18+ from this software without specific prior written permission.
19+
20+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
21+"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
22+LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
23+A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
24+OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
25+SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
26+LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
27+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
28+THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
29+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
30+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
servant-conduit/README.mdnew file+3
@@ -0,0 +1,3 @@
1+# servant-conduit - Servant Stream support for conduit
2+
3+![servant](https://raw.githubusercontent.com/haskell-servant/servant/master/servant.png)
servant-conduit/Setup.hsnew file+2
@@ -0,0 +1,2 @@
1+import Distribution.Simple
2+main = defaultMain
servant-conduit/example/Main.hsnew file+103
@@ -0,0 +1,103 @@
1+{-# LANGUAGE DataKinds #-}
2+{-# LANGUAGE DeriveGeneric #-}
3+{-# LANGUAGE TypeOperators #-}
4+module Main (main) where
5+
6+import Prelude ()
7+import Prelude.Compat
8+
9+import Control.Concurrent
10+ (threadDelay)
11+import Control.Monad.IO.Class
12+ (MonadIO (..))
13+import Control.Monad.Trans.Resource
14+ (ResourceT)
15+import qualified Data.ByteString as BS
16+import Data.Maybe
17+ (fromMaybe)
18+import Network.HTTP.Client
19+ (defaultManagerSettings, newManager)
20+import Network.Wai
21+ (Application)
22+import System.Environment
23+ (getArgs, lookupEnv)
24+import Text.Read
25+ (readMaybe)
26+
27+import Data.Conduit
28+import qualified Data.Conduit.Combinators as C
29+import Servant
30+import Servant.Client.Streaming
31+import Servant.Conduit ()
32+
33+import qualified Network.Wai.Handler.Warp as Warp
34+
35+type FastAPI = "get" :> Capture "num" Int :> StreamGet NewlineFraming JSON (ConduitT () Int IO ())
36+
37+type API = FastAPI
38+ :<|> "slow" :> Capture "num" Int :> StreamGet NewlineFraming JSON (ConduitT () Int IO ())
39+ -- monad can be ResourceT IO too.
40+ :<|> "readme" :> StreamGet NoFraming OctetStream (ConduitT () BS.ByteString (ResourceT IO) ())
41+ -- we can have streaming request body
42+ :<|> "proxy"
43+ :> StreamBody NoFraming OctetStream (ConduitT () BS.ByteString IO ())
44+ :> StreamPost NoFraming OctetStream (ConduitT () BS.ByteString IO ())
45+
46+api :: Proxy API
47+api = Proxy
48+
49+server :: Server API
50+server = fast :<|> slow :<|> readme :<|> proxy
51+ where
52+ fast n = liftIO $ do
53+ putStrLn $ "/get/" ++ show n
54+ return $ fastConduit n
55+
56+ slow n = liftIO $ do
57+ putStrLn $ "/slow/" ++ show n
58+ return $ slowConduit n
59+
60+ readme = liftIO $ do
61+ putStrLn "/proxy"
62+ return (C.sourceFile "README.md")
63+
64+ proxy c = liftIO $ do
65+ putStrLn "/proxy"
66+ return c
67+
68+ -- for some reason unfold leaks?
69+ fastConduit = C.unfold mk where
70+ mk m
71+ | m < 0 = Nothing
72+ | otherwise = Just (m, pred m)
73+
74+ slowConduit m = fastConduit m .| C.mapM (<$ threadDelay 1000000)
75+
76+app :: Application
77+app = serve api server
78+
79+cli :: Client ClientM FastAPI
80+cli :<|> _ :<|> _ :<|> _ = client api
81+
82+main :: IO ()
83+main = do
84+ args <- getArgs
85+ case args of
86+ ("server":_) -> do
87+ putStrLn "Starting servant-conduit:example at http://localhost:8000"
88+ port <- fromMaybe 8000 . (>>= readMaybe) <$> lookupEnv "PORT"
89+ Warp.run port app
90+ ("client":ns:_) -> do
91+ n <- maybe (fail $ "not a number: " ++ ns) pure $ readMaybe ns
92+ mgr <- newManager defaultManagerSettings
93+ burl <- parseBaseUrl "http://localhost:8000/"
94+ withClientM (cli n) (mkClientEnv mgr burl) $ \me -> case me of
95+ Left err -> print err
96+ Right c -> do
97+ x <- connect c $ C.foldl (\p _ -> p + 1) (0 :: Int)
98+ print x
99+ _ -> do
100+ putStrLn "Try:"
101+ putStrLn "cabal new-run servant-conduit:example server"
102+ putStrLn "cabal new-run servant-conduit:example client 10"
103+ putStrLn "time curl -H 'Accept: application/json' localhost:8000/slow/5"
servant-conduit/servant-conduit.cabalnew file+62
@@ -0,0 +1,62 @@
1+cabal-version: 2.2
2+name: servant-conduit
3+version: 0.15.1
4+
5+synopsis: Servant Stream support for conduit.
6+category: Servant, Web, Enumerator
7+description: Servant Stream support for conduit.
8+ .
9+ Provides 'ToSourceIO' and 'FromSourceIO' instances for 'ConduitT'.
10+
11+homepage: http://docs.servant.dev/
12+bug-reports: http://github.com/haskell-servant/servant/issues
13+license: BSD-3-Clause
14+license-file: LICENSE
15+author: Servant Contributors
16+maintainer: haskell-servant-maintainers@googlegroups.com
17+copyright: 2018-2019 Servant Contributors
18+build-type: Simple
19+tested-with: GHC ==8.6.5 || ==8.8.4 || ==8.10.2
20+
21+extra-source-files:
22+ CHANGELOG.md
23+
24+source-repository head
25+ type: git
26+ location: http://github.com/haskell-servant/servant.git
27+
28+library
29+ exposed-modules: Servant.Conduit
30+ build-depends:
31+ base >=4.9 && <5
32+ , bytestring >=0.10.8.1 && <0.12
33+ , conduit >=1.3.1 && <1.4
34+ , mtl >=2.2.2 && <2.3
35+ , resourcet >=1.2.2 && <1.3
36+ , servant >=0.15 && <0.20
37+ , unliftio-core >=0.1.2.0 && <0.3
38+ hs-source-dirs: src
39+ default-language: Haskell2010
40+ ghc-options: -Wall
41+
42+test-suite example
43+ type: exitcode-stdio-1.0
44+ main-is: Main.hs
45+ hs-source-dirs:
46+ example
47+ ghc-options: -Wall -rtsopts -threaded
48+ build-depends:
49+ base
50+ , base-compat
51+ , bytestring
52+ , conduit
53+ , http-media
54+ , resourcet
55+ , servant
56+ , servant-conduit
57+ , servant-server >=0.15 && <0.20
58+ , servant-client >=0.15 && <0.20
59+ , wai >=3.2.1.2 && <3.3
60+ , warp >=3.2.25 && <3.4
61+ , http-client
62+ default-language: Haskell2010
servant-conduit/src/Servant/Conduit.hsnew file+72
@@ -0,0 +1,72 @@
1+{-# LANGUAGE DataKinds #-}
2+{-# LANGUAGE FlexibleInstances #-}
3+{-# LANGUAGE GADTs #-}
4+{-# LANGUAGE MultiParamTypeClasses #-}
5+{-# LANGUAGE RankNTypes #-}
6+{-# LANGUAGE ScopedTypeVariables #-}
7+{-# LANGUAGE UndecidableInstances #-}
8+{-# OPTIONS_GHC -Wno-orphans #-}
9+-- | This module exports 'ToSourceIO' and 'FromSourceIO' for 'ConduitT' instances.
10+module Servant.Conduit (
11+ ConduitToSourceIO (..),
12+ ) where
13+
14+import Control.Monad.IO.Class
15+ (MonadIO (..))
16+import Control.Monad.IO.Unlift
17+ (MonadUnliftIO (..))
18+import Control.Monad.Trans.Resource
19+ (ResourceT, runResourceT)
20+import Data.Conduit.Internal
21+ (ConduitT (..), Pipe (..))
22+import Servant.API.Stream
23+import qualified Servant.Types.SourceT as S
24+
25+-- | Helper class to implement @'ToSourceIO' 'ConduitT'@ instance
26+-- for various monads.
27+class ConduitToSourceIO m where
28+ conduitToSourceIO :: ConduitT i o m () -> SourceIO o
29+
30+instance ConduitToSourceIO IO where
31+ conduitToSourceIO (ConduitT con) = S.SourceT ($ go (con Done)) where
32+ go p0 = case p0 of
33+ Done () -> S.Stop
34+ HaveOutput p o -> S.Yield o (go p)
35+ NeedInput _ip up -> S.Skip (go (up ()))
36+ PipeM m -> S.Effect $ fmap go m
37+ Leftover p _l -> S.Skip (go p)
38+
39+instance m ~ IO => ConduitToSourceIO (ResourceT m) where
40+ conduitToSourceIO (ConduitT con) =
41+ S.SourceT $ \k ->
42+ runResourceT $ withRunInIO $ \runRes ->
43+ k (go runRes (con Done))
44+ where
45+ go :: (forall x. ResourceT m x -> m x)
46+ -> Pipe i i o () (ResourceT m) ()
47+ -> S.StepT IO o
48+ go _ (Done ()) = S.Stop
49+ go runRes (HaveOutput p o) = S.Yield o (go runRes p)
50+ go runRes (NeedInput _ip up) = S.Skip (go runRes (up ()))
51+ go runRes (PipeM m) = S.Effect $ runRes $ fmap (go runRes) m
52+ go runRes (Leftover p _l) = S.Skip (go runRes p)
53+
54+instance (ConduitToSourceIO m, r ~ ())
55+ => ToSourceIO o (ConduitT i o m r)
56+ where
57+ toSourceIO = conduitToSourceIO
58+
59+instance (MonadIO m, r ~ ()) => FromSourceIO o (ConduitT i o m r) where
60+ fromSourceIO src =
61+ ConduitT $ \con ->
62+ PipeM $ liftIO $ S.unSourceT src $ \step ->
63+ loop con step
64+ where
65+ loop :: MonadIO m => (() -> Pipe i i o () m b) -> S.StepT IO o -> IO (Pipe i i o () m b)
66+ loop con S.Stop = return (con ())
67+ loop _con (S.Error err) = fail err
68+ loop con (S.Skip s) = loop con s
69+ loop con (S.Effect ms) = ms >>= loop con
70+ loop con (S.Yield x s) = return (HaveOutput (PipeM (liftIO $ loop con s)) x)
71+
72+ {-# SPECIALIZE INLINE fromSourceIO :: SourceIO o -> ConduitT i o IO () #-}
servant-docs/CHANGELOG.md+120
@@ -1,3 +1,123 @@
1+[The latest version of this document is on GitHub.](https://github.com/haskell-servant/servant/blob/master/servant-docs/CHANGELOG.md)
2+[Changelog for `servant` package contains significant entries for all core packages.](https://github.com/haskell-servant/servant/blob/master/servant/CHANGELOG.md)
3+
4+0.12
5+----
6+
7+### Significant changes
8+
9+- Generate sample cURL requests
10+ ([#1401](https://github.com/haskell-servant/servant/pull/1401/files)).
11+ Breaking change: requires sample header values to be supplied with `headers`.
12+
13+0.11.9
14+------
15+
16+### Significant changes
17+
18+- Use Capture Description if available (#1423).
19+
20+### Other changes
21+
22+- Support GHC-9.0.1.
23+- Bump `bytestring` and `lens` dependencies.
24+
25+0.11.8
26+------
27+
28+### Significant changes
29+
30+- Support `Fragment` combinator.
31+
32+0.11.7
33+------
34+
35+### Significant changes
36+
37+- Add instance for ToSample NonEmpty
38+
39+### Other changes
40+
41+- Bump "tested-with" ghc versions
42+- Fix servant-docs code sample in README
43+
44+0.11.5
45+----
46+
47+
48+- Add NoContentVerb [#1028](https://github.com/haskell-servant/servant/issues/1028) [#1219](https://github.com/haskell-servant/servant/pull/1219) [#1228](https://github.com/haskell-servant/servant/pull/1228)
49+
50+ The `NoContent` API endpoints should now use `NoContentVerb` combinator.
51+ The API type changes are usually of the kind
52+
53+ ```diff
54+ - :<|> PostNoContent '[JSON] NoContent
55+ + :<|> PostNoContent
56+ ```
57+
58+ i.e. one doesn't need to specify the content-type anymore. There is no content.
59+
60+- `Capture` can be `Lenient` [#1155](https://github.com/haskell-servant/servant/issues/1155) [#1156](https://github.com/haskell-servant/servant/pull/1156)
61+
62+ You can specify a lenient capture as
63+
64+ ```haskell
65+ :<|> "capture-lenient" :> Capture' '[Lenient] "foo" Int :> GET
66+ ```
67+
68+ which will make the capture always succeed. Handlers will be of the
69+ type `Either String CapturedType`, where `Left err` represents
70+ the possible parse failure.
71+
72+- *servant-docs* Merge documentation from duplicate routes [#1240](https://github.com/haskell-servant/servant/issues/1240) [#1241](https://github.com/haskell-servant/servant/pull/1241)
73+
74+ Servant supports defining the same route multiple times with different
75+ content-types and result-types, but servant-docs was only documenting
76+ the first of copy of such duplicated routes. It now combines the
77+ documentation from all the copies.
78+
79+ Unfortunately, it is not yet possible for the documentation to specify
80+ multiple status codes.
81+
82+- *servant-docs* Prevent race-conditions in testing [#1194](https://github.com/haskell-servant/servant/pull/1194)
83+
84+0.11.4
85+------
86+
87+- Drop dependency on `control-monad-omega` in favor of `Data.Universe.Helpers` from `universe-base`.
88+
89+0.11.3
90+------
91+
92+- Support `servant-0.15`
93+ - Instances for 'Stream' and 'StreamBody'
94+
95+0.11.2
96+------
97+
98+* Allow `servant-0.13`:
99+ - Doesn't have instances for streaming.
100+ - Servant.API.Modifiers extra information isn't used.
101+
102+0.11.1
103+------
104+
105+* Export `DocAuthentication` and related lenses.
106+* Make `defAction`'s documentation visible in Haddock documentation.
107+* Add a markdown header for the Headers an endpoint is sensitive to.
108+* Document the HTTP Method the parameters of an endpoint belong to
109+ (rather than assuming `GET` for all of them).
110+* Content type of sample response body is also displayed.
111+* Can now customise various aspects of how the document is produced
112+ using `markdownWith` and `RenderingOptions`:
113+ - How many content-types for each example are shown
114+ - Whether notes should be grouped together under their own header.
115+
116+0.11
117+----
118+
119+* changed the type of `rqbody`.
120+
11210.10
2122----
3123
servant-docs/LICENSE+1−1
@@ -1,4 +1,4 @@
1−Copyright (c) 2014-2016, Zalora South East Asia Pte Ltd, Servant Contributors
1+Copyright (c) 2014-2016, Zalora South East Asia Pte Ltd, 2016-2018 Servant Contributors
22
33All rights reserved.
44
servant-docs/README.md+44−11
@@ -2,24 +2,56 @@
22
33![servant](https://raw.githubusercontent.com/haskell-servant/servant/master/servant.png)
44
5−Generate API docs for your *servant* webservice. Feel free to also take a look at [servant-pandoc](https://github.com/mpickering/servant-pandoc) which uses this package to target a broad range of output formats using the excellent **pandoc**.
5+Generate API docs for your _servant_ webservice. Feel free to also take a look at [servant-pandoc](https://github.com/mpickering/servant-pandoc) which uses this package to target a broad range of output formats using the excellent **pandoc**.
66
77## Example
88
99See [here](https://github.com/haskell-servant/servant/blob/master/servant-docs/example/greet.md) for the output of the following program.
1010
11−``` haskell
11+```haskell
1212{-# LANGUAGE DataKinds #-}
13−{-# LANGUAGE PolyKinds #-}
14−{-# LANGUAGE TypeFamilies #-}
1513{-# LANGUAGE DeriveGeneric #-}
16−{-# LANGUAGE TypeOperators #-}
1714{-# LANGUAGE FlexibleInstances #-}
15+{-# LANGUAGE MultiParamTypeClasses #-}
1816{-# LANGUAGE OverloadedStrings #-}
17+{-# LANGUAGE PolyKinds #-}
18+{-# LANGUAGE TypeFamilies #-}
19+{-# LANGUAGE TypeOperators #-}
1920
20−import Data.Proxy
21−import Data.Text
21+import Data.Aeson (FromJSON, ToJSON)
22+import Data.Proxy (Proxy (..))
23+import Data.String.Conversions (cs)
24+import Data.Text (Text)
25+import GHC.Generics (Generic)
26+import Servant.API
27+ ( (:<|>),
28+ (:>),
29+ Capture,
30+ Delete,
31+ Get,
32+ JSON,
33+ MimeRender,
34+ PlainText,
35+ Post,
36+ QueryParam,
37+ ReqBody,
38+ mimeRender,
39+ )
2240import Servant.Docs
41+ ( API,
42+ DocCapture (..),
43+ DocQueryParam (..),
44+ ParamKind (..),
45+ ToCapture,
46+ ToParam,
47+ ToSample,
48+ docs,
49+ markdown,
50+ singleSample,
51+ toCapture,
52+ toParam,
53+ toSamples,
54+ )
2355
2456-- our type for a Greeting message
2557data Greet = Greet { _msg :: Text }
@@ -29,6 +61,7 @@ data Greet = Greet { _msg :: Text }
2961-- 'MimeRender' instance for 'JSON'.
3062instance FromJSON Greet
3163instance ToJSON Greet
64+instance ToSample ()
3265
3366-- We can also implement 'MimeRender' explicitly for additional formats.
3467instance MimeRender PlainText Greet where
@@ -36,8 +69,7 @@ instance MimeRender PlainText Greet where
3669
3770-- we provide a sample value for the 'Greet' type
3871instance ToSample Greet where
39− toSample = Just g
40−
72+ toSamples _ = singleSample g
4173 where g = Greet "Hello, haskeller!"
4274
4375instance ToParam (QueryParam "capital" Bool) where
@@ -45,6 +77,7 @@ instance ToParam (QueryParam "capital" Bool) where
4577 DocQueryParam "capital"
4678 ["true", "false"]
4779 "Get the greeting message in uppercase (true) or not (false). Default is false."
80+ Normal
4881
4982instance ToCapture (Capture "name" Text) where
5083 toCapture _ = DocCapture "name" "name of the person to greet"
@@ -55,8 +88,8 @@ instance ToCapture (Capture "greetid" Text) where
5588-- API specification
5689type TestApi =
5790 "hello" :> Capture "name" Text :> QueryParam "capital" Bool :> Get '[JSON,PlainText] Greet
58− :<|> "greet" :> RQBody '[JSON] Greet :> Post '[JSON] Greet
59− :<|> "delete" :> Capture "greetid" Text :> Delete '[] ()
91+ :<|> "greet" :> ReqBody '[JSON] Greet :> Post '[JSON] Greet
92+ :<|> "delete" :> Capture "greetid" Text :> Delete '[JSON] ()
6093
6194testApi :: Proxy TestApi
6295testApi = Proxy
servant-docs/example/greet.hs+13−12
@@ -5,14 +5,15 @@
55{-# LANGUAGE OverloadedStrings #-}
66{-# LANGUAGE TypeOperators #-}
77{-# OPTIONS_GHC -fno-warn-orphans #-}
8−import Control.Lens
9−import Data.Aeson
10−import Data.Proxy
11−import Data.String.Conversions
12−import Data.Text (Text)
13−import GHC.Generics
14−import Servant.API
15−import Servant.Docs
8+import Control.Lens
9+import Data.Aeson
10+import Data.Proxy
11+import Data.String.Conversions
12+import Data.Text
13+ (Text)
14+import GHC.Generics
15+import Servant.API
16+import Servant.Docs
1617
1718-- * Example
1819
@@ -74,7 +75,7 @@ intro2 = DocIntro "This title is below the last"
7475-- API specification
7576type TestApi =
7677 -- GET /hello/:name?capital={true, false} returns a Greet as JSON or PlainText
77− "hello" :> Capture "name" Text :> QueryParam "capital" Bool :> Get '[JSON, PlainText] Greet
78+ "hello" :> Capture "name" Text :> Header "X-Num-Fairies" Int :> QueryParam "capital" Bool :> Get '[JSON, PlainText] Greet
7879
7980 -- POST /greet with a Greet as JSON in the request body,
8081 -- returns a Greet as JSON
@@ -92,9 +93,9 @@ testApi = Proxy
9293extra :: ExtraInfo TestApi
9394extra =
9495 extraInfo (Proxy :: Proxy ("greet" :> Capture "greetid" Text :> Delete '[JSON] NoContent)) $
95− defAction & headers <>~ ["unicorns"]
96+ defAction & headers <>~ [("X-Num-Unicorns", "1")]
9697 & notes <>~ [ DocNote "Title" ["This is some text"]
97− , DocNote "Second secton" ["And some more"]
98+ , DocNote "Second section" ["And some more"]
9899 ]
99100
100101-- Generate the data that lets us have API docs. This
@@ -108,4 +109,4 @@ docsGreet :: API
108109docsGreet = docsWith defaultDocOptions [intro1, intro2] extra testApi
109110
110111main :: IO ()
111−main = putStrLn $ markdown docsGreet
112+main = putStrLn $ markdownWith (defRenderingOptions { _renderCurlBasePath = Just "http://localhost:80" }) docsGreet
servant-docs/example/greet.md+55−27
@@ -10,116 +10,144 @@ You'll also note that multiple intros are possible.
1010
1111## POST /greet
1212
13−#### Request:
13+### Request:
1414
1515- Supported content types are:
1616
17+ - `application/json;charset=utf-8`
1718 - `application/json`
1819
19−- Example: `application/json`
20+- If you use ?capital=true (`application/json;charset=utf-8`, `application/json`):
2021
2122```javascript
2223"HELLO, HASKELLER"
2324```
2425
25−#### Response:
26+- If you use ?capital=false (`application/json;charset=utf-8`, `application/json`):
2627
27−- Status code 201
28+```javascript
29+"Hello, haskeller"
30+```
31+
32+### Response:
33+
34+- Status code 200
2835- Headers: [("X-Example","1729")]
2936
3037- Supported content types are:
3138
39+ - `application/json;charset=utf-8`
3240 - `application/json`
3341
34−- If you use ?capital=true
42+- If you use ?capital=true (`application/json;charset=utf-8`, `application/json`):
3543
3644```javascript
3745"HELLO, HASKELLER"
3846```
3947
40−- If you use ?capital=false
48+- If you use ?capital=false (`application/json;charset=utf-8`, `application/json`):
4149
4250```javascript
4351"Hello, haskeller"
4452```
4553
54+### Sample Request:
55+
56+```bash
57+curl -XPOST \
58+ -H "Content-Type: application/json;charset=utf-8" \
59+ -d "\"HELLO, HASKELLER\"" \
60+ http://localhost:80/greet
61+```
62+
4663## DELETE /greet/:greetid
4764
48−#### Title
65+### Title
4966
5067This is some text
5168
52−#### Second secton
69+### Second section
5370
5471And some more
5572
56−#### Captures:
73+### Captures:
5774
5875- *greetid*: identifier of the greet msg to remove
5976
77+### Headers:
6078
61−- This endpoint is sensitive to the value of the **unicorns** HTTP header.
79+- This endpoint is sensitive to the value of the **X-Num-Unicorns** HTTP header.
6280
63−#### Response:
81+### Response:
6482
6583- Status code 200
6684- Headers: []
6785
6886- Supported content types are:
6987
88+ - `application/json;charset=utf-8`
7089 - `application/json`
7190
72−- Response body as below.
91+- Example (`application/json;charset=utf-8`, `application/json`):
7392
7493```javascript
75−[]
94+
95+```
96+
97+### Sample Request:
98+
99+```bash
100+curl -XDELETE \
101+ -H "X-Num-Unicorns: 1" \
102+ http://localhost:80/greet/:greetid
76103```
77104
78105## GET /hello/:name
79106
80−#### Captures:
107+### Captures:
81108
82109- *name*: name of the person to greet
83110
84−#### GET Parameters:
111+### Headers:
112+
113+- This endpoint is sensitive to the value of the **X-Num-Fairies** HTTP header.
114+
115+### GET Parameters:
85116
86117- capital
87118 - **Values**: *true, false*
88119 - **Description**: Get the greeting message in uppercase (true) or not (false).Default is false.
89120
90121
91−#### Response:
122+### Response:
92123
93124- Status code 200
94125- Headers: []
95126
96127- Supported content types are:
97128
129+ - `application/json;charset=utf-8`
98130 - `application/json`
99131 - `text/plain;charset=utf-8`
100132
101−- If you use ?capital=true
133+- If you use ?capital=true (`application/json;charset=utf-8`, `application/json`, `text/plain;charset=utf-8`):
102134
103135```javascript
104136"HELLO, HASKELLER"
105137```
106138
107−- If you use ?capital=true
108−
109−```
110−"HELLO, HASKELLER"
111−```
112−
113−- If you use ?capital=false
139+- If you use ?capital=false (`application/json;charset=utf-8`, `application/json`):
114140
115141```javascript
116142"Hello, haskeller"
117143```
118144
119−- If you use ?capital=false
145+### Sample Request:
120146
121−```
122−"Hello, haskeller"
147+```bash
148+curl -XGET \
149+ -H "X-Num-Fairies: 1729" \
150+ http://localhost:80/hello/:name
123151```
124152
125153
servant-docs/golden/comprehensive.mdnew file+592
@@ -0,0 +1,592 @@
1+## GET /
2+
3+### Response:
4+
5+- Status code 200
6+- Headers: []
7+
8+- Supported content types are:
9+
10+ - `application/json;charset=utf-8`
11+ - `application/json`
12+
13+- Example (`application/json;charset=utf-8`, `application/json`):
14+
15+```javascript
16+
17+```
18+
19+## GET /alternative/left
20+
21+### Response:
22+
23+- Status code 200
24+- Headers: []
25+
26+- Supported content types are:
27+
28+ - `application/json;charset=utf-8`
29+ - `application/json`
30+
31+- Example (`application/json;charset=utf-8`, `application/json`):
32+
33+```javascript
34+
35+```
36+
37+## GET /alternative/right
38+
39+### Response:
40+
41+- Status code 200
42+- Headers: []
43+
44+- Supported content types are:
45+
46+ - `application/json;charset=utf-8`
47+ - `application/json`
48+
49+- Example (`application/json;charset=utf-8`, `application/json`):
50+
51+```javascript
52+
53+```
54+
55+## GET /capture/:bar
56+
57+### Captures:
58+
59+- *bar*: example description
60+
61+### Response:
62+
63+- Status code 200
64+- Headers: []
65+
66+- Supported content types are:
67+
68+ - `application/json;charset=utf-8`
69+ - `application/json`
70+
71+- Example (`application/json;charset=utf-8`, `application/json`):
72+
73+```javascript
74+
75+```
76+
77+## GET /capture-all/:foo
78+
79+### Captures:
80+
81+- *foo*: Capture all foo Int
82+
83+### Response:
84+
85+- Status code 200
86+- Headers: []
87+
88+- Supported content types are:
89+
90+ - `application/json;charset=utf-8`
91+ - `application/json`
92+
93+- Example (`application/json;charset=utf-8`, `application/json`):
94+
95+```javascript
96+
97+```
98+
99+## GET /capture-lenient/:foo
100+
101+### Captures:
102+
103+- *foo*: Capture foo Int
104+
105+### Response:
106+
107+- Status code 200
108+- Headers: []
109+
110+- Supported content types are:
111+
112+ - `application/json;charset=utf-8`
113+ - `application/json`
114+
115+- Example (`application/json;charset=utf-8`, `application/json`):
116+
117+```javascript
118+
119+```
120+
121+## GET /description
122+
123+### foo
124+
125+
126+### Response:
127+
128+- Status code 200
129+- Headers: []
130+
131+- Supported content types are:
132+
133+ - `application/json;charset=utf-8`
134+ - `application/json`
135+
136+- Example (`application/json;charset=utf-8`, `application/json`):
137+
138+```javascript
139+
140+```
141+
142+## GET /flag
143+
144+### GET Parameters:
145+
146+- foo
147+ - **Description**: QueryFlag
148+ - This parameter is a **flag**. This means no value is expected to be associated to this parameter.
149+
150+
151+### Response:
152+
153+- Status code 200
154+- Headers: []
155+
156+- Supported content types are:
157+
158+ - `application/json;charset=utf-8`
159+ - `application/json`
160+
161+- Example (`application/json;charset=utf-8`, `application/json`):
162+
163+```javascript
164+
165+```
166+
167+## GET /foo
168+
169+### Response:
170+
171+- Status code 200
172+- Headers: []
173+
174+- Supported content types are:
175+
176+ - `application/json;charset=utf-8`
177+ - `application/json`
178+
179+- Example (`application/json;charset=utf-8`, `application/json`):
180+
181+```javascript
182+
183+```
184+
185+## GET /fragment
186+
187+### Fragment:
188+
189+- *foo*: Fragment Int
190+
191+### Response:
192+
193+- Status code 200
194+- Headers: []
195+
196+- Supported content types are:
197+
198+ - `application/json;charset=utf-8`
199+ - `application/json`
200+
201+- Example (`application/json;charset=utf-8`, `application/json`):
202+
203+```javascript
204+
205+```
206+
207+## GET /get-int
208+
209+### Response:
210+
211+- Status code 200
212+- Headers: []
213+
214+- Supported content types are:
215+
216+ - `application/json;charset=utf-8`
217+ - `application/json`
218+
219+- Example (`application/json;charset=utf-8`, `application/json`):
220+
221+```javascript
222+17
223+```
224+
225+## GET /header
226+
227+### Headers:
228+
229+- This endpoint is sensitive to the value of the **foo** HTTP header.
230+
231+### Response:
232+
233+- Status code 200
234+- Headers: []
235+
236+- Supported content types are:
237+
238+ - `application/json;charset=utf-8`
239+ - `application/json`
240+
241+- Example (`application/json;charset=utf-8`, `application/json`):
242+
243+```javascript
244+
245+```
246+
247+## GET /header-lenient
248+
249+### Headers:
250+
251+- This endpoint is sensitive to the value of the **bar** HTTP header.
252+
253+### Response:
254+
255+- Status code 200
256+- Headers: []
257+
258+- Supported content types are:
259+
260+ - `application/json;charset=utf-8`
261+ - `application/json`
262+
263+- Example (`application/json;charset=utf-8`, `application/json`):
264+
265+```javascript
266+
267+```
268+
269+## GET /http-version
270+
271+### Response:
272+
273+- Status code 200
274+- Headers: []
275+
276+- Supported content types are:
277+
278+ - `application/json;charset=utf-8`
279+ - `application/json`
280+
281+- Example (`application/json;charset=utf-8`, `application/json`):
282+
283+```javascript
284+
285+```
286+
287+## GET /is-secure
288+
289+### Response:
290+
291+- Status code 200
292+- Headers: []
293+
294+- Supported content types are:
295+
296+ - `application/json;charset=utf-8`
297+ - `application/json`
298+
299+- Example (`application/json;charset=utf-8`, `application/json`):
300+
301+```javascript
302+
303+```
304+
305+## GET /named-context
306+
307+### Response:
308+
309+- Status code 200
310+- Headers: []
311+
312+- Supported content types are:
313+
314+ - `application/json;charset=utf-8`
315+ - `application/json`
316+
317+- Example (`application/json;charset=utf-8`, `application/json`):
318+
319+```javascript
320+
321+```
322+
323+## GET /param
324+
325+### GET Parameters:
326+
327+- foo
328+ - **Values**: *1, 2, 3*
329+ - **Description**: QueryParams Int
330+
331+
332+### Response:
333+
334+- Status code 200
335+- Headers: []
336+
337+- Supported content types are:
338+
339+ - `application/json;charset=utf-8`
340+ - `application/json`
341+
342+- Example (`application/json;charset=utf-8`, `application/json`):
343+
344+```javascript
345+
346+```
347+
348+## GET /param-lenient
349+
350+### GET Parameters:
351+
352+- bar
353+ - **Values**: *1, 2, 3*
354+ - **Description**: QueryParams Int
355+
356+
357+### Response:
358+
359+- Status code 200
360+- Headers: []
361+
362+- Supported content types are:
363+
364+ - `application/json;charset=utf-8`
365+ - `application/json`
366+
367+- Example (`application/json;charset=utf-8`, `application/json`):
368+
369+```javascript
370+
371+```
372+
373+## GET /params
374+
375+### GET Parameters:
376+
377+- foo
378+ - **Values**: *1, 2, 3*
379+ - **Description**: QueryParams Int
380+ - This parameter is a **list**. All GET parameters with the name foo[] will forward their values in a list to the handler.
381+
382+
383+### Response:
384+
385+- Status code 200
386+- Headers: []
387+
388+- Supported content types are:
389+
390+ - `application/json;charset=utf-8`
391+ - `application/json`
392+
393+- Example (`application/json;charset=utf-8`, `application/json`):
394+
395+```javascript
396+
397+```
398+
399+## POST /post-int
400+
401+### Response:
402+
403+- Status code 204
404+- Headers: []
405+
406+- Supported content types are:
407+
408+ - `application/json;charset=utf-8`
409+ - `application/json`
410+
411+- Example (`application/json;charset=utf-8`, `application/json`):
412+
413+```javascript
414+17
415+```
416+
417+## POST /post-no-content
418+
419+### Response:
420+
421+- Status code 204
422+- Headers: []
423+
424+- No response body
425+
426+## GET /raw
427+
428+### Response:
429+
430+- Status code 200
431+- Headers: []
432+
433+- No response body
434+
435+## GET /remote-host
436+
437+### Response:
438+
439+- Status code 200
440+- Headers: []
441+
442+- Supported content types are:
443+
444+ - `application/json;charset=utf-8`
445+ - `application/json`
446+
447+- Example (`application/json;charset=utf-8`, `application/json`):
448+
449+```javascript
450+
451+```
452+
453+## GET /req-body
454+
455+### Request:
456+
457+- Supported content types are:
458+
459+ - `application/json;charset=utf-8`
460+ - `application/json`
461+
462+- Example (`application/json;charset=utf-8`, `application/json`):
463+
464+```javascript
465+17
466+```
467+
468+### Response:
469+
470+- Status code 200
471+- Headers: []
472+
473+- Supported content types are:
474+
475+ - `application/json;charset=utf-8`
476+ - `application/json`
477+
478+- Example (`application/json;charset=utf-8`, `application/json`):
479+
480+```javascript
481+
482+```
483+
484+## GET /req-body-lenient
485+
486+### Request:
487+
488+- Supported content types are:
489+
490+ - `application/json;charset=utf-8`
491+ - `application/json`
492+
493+- Example (`application/json;charset=utf-8`, `application/json`):
494+
495+```javascript
496+17
497+```
498+
499+### Response:
500+
501+- Status code 200
502+- Headers: []
503+
504+- Supported content types are:
505+
506+ - `application/json;charset=utf-8`
507+ - `application/json`
508+
509+- Example (`application/json;charset=utf-8`, `application/json`):
510+
511+```javascript
512+
513+```
514+
515+## GET /res-headers
516+
517+### Response:
518+
519+- Status code 200
520+- Headers: [("foo","17")]
521+
522+- Supported content types are:
523+
524+ - `application/json;charset=utf-8`
525+ - `application/json`
526+
527+- Example (`application/json;charset=utf-8`, `application/json`):
528+
529+```javascript
530+
531+```
532+
533+## GET /streaming
534+
535+### Request:
536+
537+- Supported content types are:
538+
539+ - `application/json;charset=utf-8`
540+ - `application/json`
541+
542+### Response:
543+
544+- Status code 200
545+- Headers: []
546+
547+- Supported content types are:
548+
549+ - `application/json;charset=utf-8`
550+ - `application/json`
551+
552+- No response body
553+
554+## GET /summary
555+
556+### foo
557+
558+
559+### Response:
560+
561+- Status code 200
562+- Headers: []
563+
564+- Supported content types are:
565+
566+ - `application/json;charset=utf-8`
567+ - `application/json`
568+
569+- Example (`application/json;charset=utf-8`, `application/json`):
570+
571+```javascript
572+
573+```
574+
575+## GET /vault
576+
577+### Response:
578+
579+- Status code 200
580+- Headers: []
581+
582+- Supported content types are:
583+
584+ - `application/json;charset=utf-8`
585+ - `application/json`
586+
587+- Example (`application/json;charset=utf-8`, `application/json`):
588+
589+```javascript
590+
591+```
592+
servant-docs/include/overlapping-compat.hdeleted−8
@@ -1,8 +0,0 @@
1−#if __GLASGOW_HASKELL__ >= 710
2−#define OVERLAPPABLE_ {-# OVERLAPPABLE #-}
3−#define OVERLAPPING_ {-# OVERLAPPING #-}
4−#else
5−{-# LANGUAGE OverlappingInstances #-}
6−#define OVERLAPPABLE_
7−#define OVERLAPPING_
8−#endif
servant-docs/servant-docs.cabal+54−34
@@ -1,27 +1,31 @@
1+cabal-version: 2.2
12name: servant-docs
2−version: 0.10.0.1
3+version: 0.12
4+
35synopsis: generate API docs for your servant webservice
6+category: Servant, Web
47description:
58 Library for generating API docs from a servant API definition.
69 .
7− Runnable example <https://github.com/haskell-servant/servant-docs/blob/master/example/greet.hs here>.
10+ Runnable example <https://github.com/haskell-servant/servant/blob/master/servant-docs/example/greet.hs here>.
811 .
912 <https://github.com/haskell-servant/servant/blob/master/servant-docs/CHANGELOG.md CHANGELOG>
10−license: BSD3
13+
14+homepage: http://docs.servant.dev/
15+bug-reports: http://github.com/haskell-servant/servant/issues
16+license: BSD-3-Clause
1117license-file: LICENSE
1218author: Servant Contributors
1319maintainer: haskell-servant-maintainers@googlegroups.com
14−copyright: 2014-2016 Zalora South East Asia Pte Ltd, Servant Contributors
15−category: Servant Web
20+copyright: 2014-2016 Zalora South East Asia Pte Ltd, 2016-2019 Servant Contributors
1621build-type: Simple
17−cabal-version: >=1.10
18−tested-with: GHC >= 7.8
19−homepage: http://haskell-servant.readthedocs.org/
20−Bug-reports: http://github.com/haskell-servant/servant/issues
22+tested-with: GHC ==8.6.5 || ==8.8.4 || ==8.10.2 || ==9.0.1
23+
2124extra-source-files:
22− include/*.h
2325 CHANGELOG.md
2426 README.md
27+ golden/comprehensive.md
28+
2529source-repository head
2630 type: git
2731 location: http://github.com/haskell-servant/servant.git
@@ -31,31 +35,38 @@ library
3135 Servant.Docs
3236 , Servant.Docs.Internal
3337 , Servant.Docs.Internal.Pretty
38+
39+ -- Bundled with GHC: Lower bound to not force re-installs
40+ -- text and mtl are bundled starting with GHC-8.4
41+ --
42+ -- note: mtl lower bound is so low because of GHC-7.8
3443 build-depends:
35− base >=4.7 && <5
36− , base-compat >= 0.9.1 && <0.10
37− , aeson
38− , aeson-pretty
39− , bytestring
40− , case-insensitive
41− , hashable
42− , http-media >= 0.6
43− , http-types >= 0.7
44− , lens
45− , servant == 0.11.*
46− , string-conversions
47− , text
48− , unordered-containers
49− , control-monad-omega == 0.3.*
50− if !impl(ghc >= 8.0)
51− build-depends:
52− semigroups >=0.16.2.2 && <0.19
44+ base >= 4.9 && < 4.17
45+ , bytestring >= 0.10.8.1 && < 0.12
46+ , text >= 1.2.3.0 && < 2.1
47+
48+ -- Servant dependencies
49+ build-depends:
50+ servant >= 0.18 && <0.20
51+
52+ -- Other dependencies: Lower bound around what is in the latest Stackage LTS.
53+ -- Here can be exceptions if we really need features from the newer versions.
54+ build-depends:
55+ aeson >= 1.4.1.0 && < 3
56+ , aeson-pretty >= 0.8.5 && < 0.9
57+ , base-compat >= 0.10.5 && < 0.13
58+ , case-insensitive >= 1.2.0.11 && < 1.3
59+ , hashable >= 1.2.7.0 && < 1.5
60+ , http-media >= 0.7.1.3 && < 0.9
61+ , http-types >= 0.12.2 && < 0.13
62+ , lens >= 4.17 && < 5.2
63+ , string-conversions >= 0.4.0.1 && < 0.5
64+ , universe-base >= 1.1.1 && < 1.2
65+ , unordered-containers >= 0.2.9.0 && < 0.3
66+
5367 hs-source-dirs: src
5468 default-language: Haskell2010
55− ghc-options: -Wall
56− if impl(ghc >= 8.0)
57− ghc-options: -Wno-redundant-constraints
58− include-dirs: include
69+ ghc-options: -Wall -Wno-redundant-constraints
5970
6071executable greet-docs
6172 main-is: greet.hs
@@ -72,17 +83,26 @@ executable greet-docs
7283 default-language: Haskell2010
7384
7485test-suite spec
86+ default-language: Haskell2010
7587 type: exitcode-stdio-1.0
7688 main-is: Spec.hs
7789 other-modules: Servant.DocsSpec
7890 hs-source-dirs: test
7991 ghc-options: -Wall
92+
93+ -- Dependencies inherited from the library. No need to specify bounds.
8094 build-depends:
8195 base
96+ , base-compat
8297 , aeson
83− , hspec
8498 , lens
8599 , servant
86100 , servant-docs
87101 , string-conversions
88− default-language: Haskell2010
102+
103+ -- Additional dependencies
104+ build-depends:
105+ tasty >= 1.1.0.4 && < 1.5,
106+ tasty-golden >= 2.3.2 && < 2.4,
107+ tasty-hunit >= 0.10.0.1 && < 0.11,
108+ transformers >= 0.5.2.0 && < 0.6
servant-docs/src/Servant/Docs.hs+7−3
@@ -24,6 +24,9 @@
2424module Servant.Docs
2525 ( -- * 'HasDocs' class and key functions
2626 HasDocs(..), docs, pretty, markdown
27+ -- ** Customising generated documentation
28+ , markdownWith, RenderingOptions(..), defRenderingOptions
29+ , requestExamples, responseExamples, ShowContentTypes(..), notesHeading
2730 -- * Generating docs with extra information
2831 , docsWith, docsWithIntros, docsWithOptions
2932 , ExtraInfo(..), extraInfo
@@ -43,14 +46,15 @@ module Servant.Docs
4346 , -- * ADTs to represent an 'API'
4447 Endpoint, path, method, defEndpoint
4548 , API, apiIntros, apiEndpoints, emptyAPI
49+ , DocAuthentication(..), authIntro, authDataRequired
4650 , DocCapture(..), capSymbol, capDesc
4751 , DocQueryParam(..), ParamKind(..), paramName, paramValues, paramDesc, paramKind
4852 , DocNote(..), noteTitle, noteBody
4953 , DocIntro(..), introTitle, introBody
5054 , Response(..), respStatus, respTypes, respBody, defResponse
51− , Action, captures, headers, notes, params, rqtypes, rqbody, response, defAction
55+ , Action, authInfo, captures, headers, notes, params, rqtypes, rqbody, response, defAction
5256 , single
5357 ) where
5458
55−import Servant.Docs.Internal
56−import Servant.Docs.Internal.Pretty
59+import Servant.Docs.Internal
60+import Servant.Docs.Internal.Pretty
servant-docs/src/Servant/Docs/Internal.hs+416−108

This diff is too big to show here.

servant-docs/src/Servant/Docs/Internal/Pretty.hs+29−6

This diff is too big to show here.

servant-docs/test/Servant/DocsSpec.hs+103−26

This diff is too big to show here.

servant-docs/test/Spec.hs+8−1

This diff is too big to show here.

servant-docs/tinc.yamldeleted−3

This diff is too big to show here.

servant-foreign/CHANGELOG.md+127

This diff is too big to show here.

servant-foreign/LICENSE+1−1

This diff is too big to show here.

servant-foreign/Setup.hs+1−1

This diff is too big to show here.

servant-foreign/include/overlapping-compat.hdeleted−8

This diff is too big to show here.

servant-foreign/servant-foreign.cabal+45−49

This diff is too big to show here.

servant-foreign/src/Servant/Foreign.hs+26−21

This diff is too big to show here.

servant-foreign/src/Servant/Foreign/Inflections.hs+26−17

This diff is too big to show here.

servant-foreign/src/Servant/Foreign/Internal.hs+240−82

This diff is too big to show here.

servant-foreign/test/Servant/ForeignSpec.hs+32−12

This diff is too big to show here.

servant-foreign/tinc.yamldeleted−3

This diff is too big to show here.

servant-http-streams/CHANGELOG.mdnew file+98

This diff is too big to show here.

servant-http-streams/LICENSEnew file+30

This diff is too big to show here.

servant-http-streams/README.lhsnew file+1

This diff is too big to show here.

servant-http-streams/README.mdnew file+44

This diff is too big to show here.

servant-http-streams/Setup.hsnew file+2

This diff is too big to show here.

servant-http-streams/servant-http-streams.cabalnew file+132

This diff is too big to show here.

servant-http-streams/src/Servant/HttpStreams.hsnew file+19

This diff is too big to show here.

servant-http-streams/src/Servant/HttpStreams/Internal.hsnew file+258

This diff is too big to show here.

servant-http-streams/test/Servant/ClientSpec.hsnew file+504

This diff is too big to show here.

servant-http-streams/test/Servant/StreamSpec.hsnew file+110

This diff is too big to show here.

servant-http-streams/test/Spec.hsnew file+1

This diff is too big to show here.

servant-machines/CHANGELOG.mdnew file+4

This diff is too big to show here.

servant-machines/LICENSEnew file+30

This diff is too big to show here.

servant-machines/README.mdnew file+3

This diff is too big to show here.

servant-machines/Setup.hsnew file+2

This diff is too big to show here.

servant-machines/example/Main.hsnew file+98

This diff is too big to show here.

servant-machines/servant-machines.cabalnew file+59

This diff is too big to show here.

servant-machines/src/Servant/Machines.hsnew file+46

This diff is too big to show here.

servant-pipes/CHANGELOG.mdnew file+22

This diff is too big to show here.

servant-pipes/LICENSEnew file+30

This diff is too big to show here.

servant-pipes/README.mdnew file+3

This diff is too big to show here.

servant-pipes/Setup.hsnew file+2

This diff is too big to show here.

servant-pipes/example/Main.hsnew file+107

This diff is too big to show here.

servant-pipes/servant-pipes.cabalnew file+63

This diff is too big to show here.

servant-pipes/src/Servant/Pipes.hsnew file+75

This diff is too big to show here.

servant-server/CHANGELOG.md+268

This diff is too big to show here.

servant-server/LICENSE+1−1

This diff is too big to show here.

servant-server/README.md+1−1

This diff is too big to show here.

servant-server/Setup.hsnew file+2

This diff is too big to show here.

servant-server/example/README.md+1−1

This diff is too big to show here.

servant-server/example/greet.hs+19−3

This diff is too big to show here.

servant-server/include/overlapping-compat.hdeleted−8

This diff is too big to show here.

servant-server/servant-server.cabal+89−85

This diff is too big to show here.

servant-server/src/Servant.hs+6−5

This diff is too big to show here.

servant-server/src/Servant/Server.hs+100−56

This diff is too big to show here.

servant-server/src/Servant/Server/Experimental/Auth.hs+28−25

This diff is too big to show here.

servant-server/src/Servant/Server/Generic.hsnew file+92

This diff is too big to show here.

servant-server/src/Servant/Server/Internal.hs+539−171

This diff is too big to show here.

servant-server/src/Servant/Server/Internal/BasicAuth.hs+23−16

This diff is too big to show here.

servant-server/src/Servant/Server/Internal/Context.hs+27−15

This diff is too big to show here.

servant-server/src/Servant/Server/Internal/Delayed.hsnew file+272

This diff is too big to show here.

servant-server/src/Servant/Server/Internal/DelayedIO.hsnew file+71

This diff is too big to show here.

servant-server/src/Servant/Server/Internal/ErrorFormatter.hsnew file+87

This diff is too big to show here.

servant-server/src/Servant/Server/Internal/Handler.hs+30−18

This diff is too big to show here.

servant-server/src/Servant/Server/Internal/RouteResult.hsnew file+76

This diff is too big to show here.

servant-server/src/Servant/Server/Internal/Router.hs+75−43

This diff is too big to show here.

servant-server/src/Servant/Server/Internal/RoutingApplication.hs+7−373

This diff is too big to show here.

servant-server/src/Servant/Server/Internal/ServantErr.hs → servant-server/src/Servant/Server/Internal/ServerError.hsrenamed+84−79

This diff is too big to show here.

servant-server/src/Servant/Server/StaticFiles.hsnew file+83

This diff is too big to show here.

servant-server/src/Servant/Server/UVerb.hsnew file+116

This diff is too big to show here.

servant-server/src/Servant/Utils/StaticFiles.hs+4−84

This diff is too big to show here.

servant-server/test/Servant/ArbitraryMonadServerSpec.hs+13−10

This diff is too big to show here.

servant/test/Servant/Utils/EnterSpec.hs → servant-server/test/Servant/HoistSpec.hsrenamed+16−9

This diff is too big to show here.

servant-server/test/Servant/Server/ErrorSpec.hs+78−9

This diff is too big to show here.

servant-server/test/Servant/Server/Internal/ContextSpec.hs+9−6

This diff is too big to show here.

servant-server/test/Servant/Server/Internal/RoutingApplicationSpec.hs+34−25

This diff is too big to show here.

servant-server/test/Servant/Server/RouterSpec.hs+179−26

This diff is too big to show here.

servant-server/test/Servant/Utils/StaticFilesSpec.hs → servant-server/test/Servant/Server/StaticFilesSpec.hsrenamed+25−16

This diff is too big to show here.

servant-server/test/Servant/Server/StreamingSpec.hs+8−7

This diff is too big to show here.

servant-server/test/Servant/Server/UsingContextSpec.hs+4−3

This diff is too big to show here.

servant-server/test/Servant/Server/UsingContextSpec/TestCombinators.hs+17−9

This diff is too big to show here.

servant-server/test/Servant/ServerSpec.hs+355−174

This diff is too big to show here.

servant-server/test/doctests.hsdeleted−25

This diff is too big to show here.

servant-server/tinc.yamldeleted−3

This diff is too big to show here.

servant-swagger/CHANGELOG.mdnew file+143

This diff is too big to show here.

servant-swagger/LICENSEnew file+28

This diff is too big to show here.

servant-swagger/README.mdnew file+46

This diff is too big to show here.

servant-server/Setup.lhs → servant-swagger/Setup.hsrenamed+5−3

This diff is too big to show here.

servant-swagger/example/LICENSEnew file+28

This diff is too big to show here.

servant-swagger/example/example.cabalnew file+62

This diff is too big to show here.

servant-swagger/example/server/Main.hsnew file+11

This diff is too big to show here.

servant-swagger/example/src/Todo.hsnew file+73

This diff is too big to show here.

servant-swagger/example/swagger.jsonnew file+158

This diff is too big to show here.

servant-swagger/example/test/Spec.hsnew file+1

This diff is too big to show here.

servant-swagger/example/test/TodoSpec.hsnew file+28

This diff is too big to show here.

servant-swagger/servant-swagger.cabalnew file+127

This diff is too big to show here.

servant-swagger/src/Servant/Swagger.hsnew file+188

This diff is too big to show here.

servant-swagger/src/Servant/Swagger/Internal.hsnew file+488

This diff is too big to show here.

servant-swagger/src/Servant/Swagger/Internal/Orphans.hsnew file+27

This diff is too big to show here.

servant-swagger/src/Servant/Swagger/Internal/Test.hsnew file+207

This diff is too big to show here.

servant-swagger/src/Servant/Swagger/Internal/TypeLevel.hsnew file+9

This diff is too big to show here.

servant-swagger/src/Servant/Swagger/Internal/TypeLevel/API.hsnew file+86

This diff is too big to show here.

servant-swagger/src/Servant/Swagger/Internal/TypeLevel/Every.hsnew file+63

This diff is too big to show here.

servant-swagger/src/Servant/Swagger/Internal/TypeLevel/TMap.hsnew file+37

This diff is too big to show here.

servant-swagger/src/Servant/Swagger/Test.hsnew file+13

This diff is too big to show here.

servant-swagger/src/Servant/Swagger/TypeLevel.hsnew file+15

This diff is too big to show here.

servant-swagger/test/Servant/SwaggerSpec.hsnew file+489

This diff is too big to show here.

servant-swagger/test/Spec.hsnew file+1

This diff is too big to show here.

servant-swagger/test/doctests.hsnew file+12

This diff is too big to show here.

servant/CHANGELOG.md+840

This diff is too big to show here.

servant/LICENSE+1−1

This diff is too big to show here.

servant/Setup.hsnew file+2

This diff is too big to show here.

servant/include/overlapping-compat.hdeleted−8

This diff is too big to show here.

servant/servant.cabal+101−83

This diff is too big to show here.

servant/src/Servant/API.hs+96−50

This diff is too big to show here.

servant/src/Servant/API/Alternative.hs+26−4

This diff is too big to show here.

servant/src/Servant/API/BasicAuth.hs+9−6

This diff is too big to show here.

servant/src/Servant/API/Capture.hs+10−6

This diff is too big to show here.

servant/src/Servant/API/ContentTypes.hs+39−37

This diff is too big to show here.

servant/src/Servant/API/Description.hsnew file+82

This diff is too big to show here.

servant/src/Servant/API/Empty.hs+2−1

This diff is too big to show here.

servant/src/Servant/API/Experimental/Auth.hs+5−4

This diff is too big to show here.

servant/src/Servant/API/Fragment.hsnew file+25

This diff is too big to show here.

servant/src/Servant/API/Generic.hsnew file+146

This diff is too big to show here.

servant/src/Servant/API/Header.hs+13−10

This diff is too big to show here.

servant/src/Servant/API/HttpVersion.hs+2−1

This diff is too big to show here.

servant/src/Servant/API/Internal/Test/ComprehensiveAPI.hsdeleted−44

This diff is too big to show here.

servant/src/Servant/API/IsSecure.hs+4−2

This diff is too big to show here.

servant/src/Servant/API/Modifiers.hsnew file+152

This diff is too big to show here.

servant/src/Servant/API/NamedRoutes.hsnew file+10

This diff is too big to show here.

servant/src/Servant/API/QueryParam.hs+13−6

This diff is too big to show here.

servant/src/Servant/API/Raw.hs+6−3

This diff is too big to show here.

servant/src/Servant/API/RemoteHost.hs+1

This diff is too big to show here.

servant/src/Servant/API/ReqBody.hs+13−3

This diff is too big to show here.

servant/src/Servant/API/ResponseHeaders.hs+125−41

This diff is too big to show here.

servant/src/Servant/API/Status.hsnew file+160

This diff is too big to show here.

servant/src/Servant/API/Stream.hsnew file+234

This diff is too big to show here.

servant/src/Servant/API/Sub.hs+4−3

This diff is too big to show here.

servant/src/Servant/API/TypeErrors.hsnew file+40

This diff is too big to show here.

servant/src/Servant/API/TypeLevel.hs+78−34

This diff is too big to show here.

servant/src/Servant/API/UVerb.hsnew file+124

This diff is too big to show here.

servant/src/Servant/API/UVerb/Union.hsnew file+147

This diff is too big to show here.

servant/src/Servant/API/Vault.hs+2−1

This diff is too big to show here.

servant/src/Servant/API/Verbs.hs+31−18

This diff is too big to show here.

servant/src/Servant/API/WithNamedContext.hs+2−2

This diff is too big to show here.

servant/src/Servant/Links.hsnew file+658

This diff is too big to show here.

servant/src/Servant/Test/ComprehensiveAPI.hsnew file+80

This diff is too big to show here.

servant/src/Servant/Types/SourceT.hsnew file+381

This diff is too big to show here.

servant/src/Servant/Utils/Enter.hsdeleted−122

This diff is too big to show here.

servant/src/Servant/Utils/Links.hsdeleted−315

This diff is too big to show here.

servant/test/Servant/API/ContentTypesSpec.hs+50−21

This diff is too big to show here.

servant/test/Servant/API/ResponseHeadersSpec.hs+4−4

This diff is too big to show here.

servant/test/Servant/API/StreamSpec.hsnew file+99

This diff is too big to show here.

servant/test/Servant/Utils/LinksSpec.hs → servant/test/Servant/LinksSpec.hsrenamed+56−15

This diff is too big to show here.

servant/test/doctests.hsdeleted−25

This diff is too big to show here.

setup.pynew file+11

This diff is too big to show here.

sources.txt+1

This diff is too big to show here.

stack-ghc-7.10.3.yamldeleted−20

This diff is too big to show here.

stack-ghc-7.8.4.yamldeleted−29

This diff is too big to show here.

stack-ghcjs.yamlnew file+34

This diff is too big to show here.

stack.yaml+14−8

This diff is too big to show here.

stack.yaml.locknew file+19

This diff is too big to show here.

streaming-benchmark.shnew file+268

This diff is too big to show here.