faye 1.2.2 → 1.4.0
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +5 -5
- data/CHANGELOG.md +362 -230
- data/LICENSE.md +12 -0
- data/README.md +4 -28
- data/build/client/faye-browser-min.js +1 -3
- data/build/client/faye-browser-min.js.map +1 -1
- data/build/client/faye-browser.js +3334 -3005
- data/build/client/faye-browser.js.map +1 -1
- data/lib/faye.rb +1 -5
- data/lib/faye/adapters/rack_adapter.rb +26 -20
- data/lib/faye/protocol/client.rb +8 -8
- data/lib/faye/protocol/dispatcher.rb +8 -7
- data/lib/faye/protocol/server.rb +16 -4
- data/lib/faye/transport/http.rb +12 -18
- data/lib/faye/transport/transport.rb +2 -2
- data/lib/faye/transport/web_socket.rb +1 -11
- metadata +30 -30
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
|
-
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
2
|
+
SHA256:
|
|
3
|
+
metadata.gz: 75788ddfabe886ea54ef361093becae8966721c002d50f15cc73fdcc5e8d9989
|
|
4
|
+
data.tar.gz: ffed4468e7ee32ab131191edae3cca52f96cfacd7ae6680db73e6922471a464d
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 6d2955083bd87e4c290f3331551d5ec477e57c401b9aadc75aa94f78b1a208962248238fdda186b99c317b4a5aacfc7707d262ea0465e3c8c31f6152f00d22bc
|
|
7
|
+
data.tar.gz: 92c68a4b89f3e730aa1e0ace1ec2ba2bf1640a7625ae2ab98f5625fbc4c2af9ec016e16410d03600ea41caad793f14429d1da5eb8ee18ca55617dffe5c3df73b
|
data/CHANGELOG.md
CHANGED
|
@@ -1,66 +1,146 @@
|
|
|
1
|
+
### 1.4.0 / 2020-07-31
|
|
2
|
+
|
|
3
|
+
- Implement TLS certificate verification and enable it by default in the Ruby
|
|
4
|
+
client class `Faye::Client`
|
|
5
|
+
- Add a `:tls` option to the Ruby client with sub-field `:verify_peer` for
|
|
6
|
+
configuring TLS verification
|
|
7
|
+
- Officially support the `tls` option in the Node.js client, whose contents are
|
|
8
|
+
forward to the `https` and `tls` modules as appropriate
|
|
9
|
+
|
|
10
|
+
### 1.3.0 / 2020-06-08
|
|
11
|
+
|
|
12
|
+
- Support `user:pass@` authorization in URIs and send `Authorization` headers
|
|
13
|
+
from the Node HTTP transport
|
|
14
|
+
- Support IPv6 hostnames in URIs
|
|
15
|
+
- Allow credentials (cookies and `Authorization` headers) in cross-origin
|
|
16
|
+
requests, by:
|
|
17
|
+
- setting `Access-Control-Allow-Origin` to the value of the `Origin` header
|
|
18
|
+
(not `*`)
|
|
19
|
+
- enabling `Access-Control-Allow-Credentials`
|
|
20
|
+
- Enable credentials when sending cross-origin requests
|
|
21
|
+
- Don't disconnect WebSocket on page unload if `autodisconnect` is turned off
|
|
22
|
+
- Catch errors when creating a WebSocket, which happens when Content Security
|
|
23
|
+
Policy blocks it, allowing other transports to be tried
|
|
24
|
+
- Fix a bug in the client where it handles messages from other clients as though
|
|
25
|
+
they're the server's response to its own messages, based on the `id` field;
|
|
26
|
+
now we only treat messages as server responses if they contain `successful:
|
|
27
|
+
true`
|
|
28
|
+
- Stop sending an empty message list `[]` from the WebSocket client as a
|
|
29
|
+
keep-alive mechanism since CometD does not accept this message
|
|
30
|
+
- Fix deprecation warnings for using the `new Buffer()` constructor
|
|
31
|
+
- Switch to the Apache 2.0 license
|
|
32
|
+
|
|
33
|
+
|
|
34
|
+
### 1.2.5 / 2020-04-28
|
|
35
|
+
|
|
36
|
+
- Fix `/meta/*` channel recognition bug in the server that enables
|
|
37
|
+
authentication bypass
|
|
38
|
+
- https://blog.jcoglan.com/2020/04/28/authentication-bypass-in-faye/
|
|
39
|
+
|
|
40
|
+
|
|
41
|
+
### 1.2.4 / 2017-01-28
|
|
42
|
+
|
|
43
|
+
- Fix `RackAdapter#get_client` that was failing due to a URI error
|
|
44
|
+
- Define `Promise#catch` in a safe way for old browsers
|
|
45
|
+
- Log errors in the Node HTTP transport
|
|
46
|
+
|
|
47
|
+
|
|
48
|
+
### 1.2.3 / 2016-10-11
|
|
49
|
+
|
|
50
|
+
- Return an error if the `data` field is missing on published messages
|
|
51
|
+
- Fix errors that occur in the new `websocket` util when the browser does not
|
|
52
|
+
support WebSocket
|
|
53
|
+
|
|
54
|
+
|
|
1
55
|
### 1.2.2 / 2016-07-18
|
|
2
56
|
|
|
3
|
-
|
|
57
|
+
- Mitigate the HTTPoxy vulnerability: https://httpoxy.org/
|
|
4
58
|
|
|
5
59
|
|
|
6
60
|
### 1.2.1 / 2016-06-29
|
|
7
61
|
|
|
8
|
-
|
|
62
|
+
- Fix a missing variable error in `NodeAdapter`
|
|
9
63
|
|
|
10
64
|
|
|
11
65
|
### 1.2.0 / 2016-06-26
|
|
12
66
|
|
|
13
|
-
|
|
14
|
-
|
|
15
|
-
|
|
16
|
-
|
|
17
|
-
|
|
18
|
-
|
|
19
|
-
|
|
20
|
-
|
|
21
|
-
|
|
22
|
-
|
|
23
|
-
|
|
24
|
-
|
|
67
|
+
- Add `client.subscribe().withChannel()` to yield the message channel for
|
|
68
|
+
wildcard subscriptions
|
|
69
|
+
- Restructure the JavaScript codebase around Node modules (require/exports)
|
|
70
|
+
rather than globals
|
|
71
|
+
- Update the Promise shim to reflect the standard API, including `catch()` and
|
|
72
|
+
`all()`
|
|
73
|
+
- Support connecting to servers that use SNI in the Ruby client
|
|
74
|
+
- Make the JavaScript client work inside React Native and Web Workers
|
|
75
|
+
- Remove JSON2; you should import a JSON shim yourself if necessary
|
|
76
|
+
- Handle errors that occur when a message is partially delivered via EventSource
|
|
77
|
+
- Reject requests with invalid (non-array or -object) top-level JSON values
|
|
78
|
+
- Make local client requests asynchronous to avoid re-entrant request handling
|
|
79
|
+
errors
|
|
80
|
+
- Remove `Connection: Close` from HTTP responses to allow use of keep-alive
|
|
81
|
+
- Use `XMLHttpRequest` in preference to the ActiveX API in IE10
|
|
82
|
+
- Fix bug where flushing large message batches puts promises in an invalid state
|
|
83
|
+
|
|
84
|
+
|
|
85
|
+
### 1.1.3 / 2020-04-28
|
|
86
|
+
|
|
87
|
+
- Fix `/meta/*` channel recognition bug in the server that enables
|
|
88
|
+
authentication bypass
|
|
89
|
+
- https://blog.jcoglan.com/2020/04/28/authentication-bypass-in-faye/
|
|
25
90
|
|
|
26
91
|
|
|
27
92
|
### 1.1.2 / 2015-07-19
|
|
28
93
|
|
|
29
|
-
|
|
30
|
-
|
|
31
|
-
|
|
32
|
-
|
|
33
|
-
|
|
34
|
-
|
|
94
|
+
- Allow the `Authorization` header to be used on CORS requests
|
|
95
|
+
- Disallow unused methods like PUT and DELETE on CORS requests
|
|
96
|
+
- Stop IE prematurely garbage-collecting `XDomainRequest` objects
|
|
97
|
+
- Make sure messages can be sent if they overflow the request size limit and the
|
|
98
|
+
outbox is empty
|
|
99
|
+
- Don't send messages over WebSockets unless they are in the 'open' ready-state
|
|
100
|
+
- Fix a bug preventing use of the in-process transport in Ruby
|
|
35
101
|
|
|
36
102
|
|
|
37
103
|
### 1.1.1 / 2015-02-25
|
|
38
104
|
|
|
39
|
-
|
|
40
|
-
|
|
41
|
-
|
|
42
|
-
|
|
105
|
+
- Make sure the client ID associated with a WebSocket is not dropped, so the
|
|
106
|
+
socket can be closed properly
|
|
107
|
+
- Handle cases where a JSON-P endpoint returns no response argument
|
|
108
|
+
- Stop trying to retry messages after the client has been disconnected
|
|
109
|
+
- Remove duplication of the client ID in EventSource URLs
|
|
43
110
|
|
|
44
111
|
|
|
45
112
|
### 1.1.0 / 2014-12-22
|
|
46
113
|
|
|
47
|
-
|
|
48
|
-
|
|
49
|
-
|
|
50
|
-
|
|
51
|
-
|
|
52
|
-
|
|
53
|
-
|
|
54
|
-
|
|
55
|
-
|
|
56
|
-
|
|
57
|
-
|
|
114
|
+
- Allow the server and client to use WebSocket extensions, for example
|
|
115
|
+
permessage-deflate
|
|
116
|
+
- Support the `HTTP_PROXY` and `HTTPS_PROXY` environment variables to send all
|
|
117
|
+
client connections through an HTTP proxy
|
|
118
|
+
- Introduce the `Scheduler` API to allow the user to control message retries
|
|
119
|
+
- Add the `attempts` and `deadline` options to `Client#publish()`
|
|
120
|
+
- Let `RackAdapter` take a block that yields the instance, so extensions can be
|
|
121
|
+
added to middleware
|
|
122
|
+
- Allow monitoring listeners to see the `clientId` on publishd messages but
|
|
123
|
+
still avoid sending it to subscribers
|
|
124
|
+
- Return a promise from `Client#disconnect()`
|
|
125
|
+
- Fix client-side retry bugs causing the client to flood the server with
|
|
126
|
+
duplicate messages
|
|
127
|
+
- Send all transport types in the `supportedConnectionTypes` handshake parameter
|
|
128
|
+
- Don't close WebSockets when the client recovers from an error and sends a new
|
|
129
|
+
`clientId`
|
|
130
|
+
- Replace `cookiejar` with `tough-cookie` to avoid global variable leaks
|
|
131
|
+
|
|
132
|
+
|
|
133
|
+
### 1.0.4 / 2020-04-28
|
|
134
|
+
|
|
135
|
+
- Fix `/meta/*` channel recognition bug in the server that enables
|
|
136
|
+
authentication bypass
|
|
137
|
+
- https://blog.jcoglan.com/2020/04/28/authentication-bypass-in-faye/
|
|
58
138
|
|
|
59
139
|
|
|
60
140
|
### 1.0.3 / 2014-07-08
|
|
61
141
|
|
|
62
|
-
|
|
63
|
-
|
|
142
|
+
- Make some changes to JSON-P responses to mitigate the Rosetta Flash attack
|
|
143
|
+
- http://miki.it/blog/2014/7/8/abusing-jsonp-with-rosetta-flash/
|
|
64
144
|
|
|
65
145
|
|
|
66
146
|
### 1.0.2 -- removed due to error while publishing
|
|
@@ -68,62 +148,83 @@
|
|
|
68
148
|
|
|
69
149
|
### 1.0.1 / 2013-12-10
|
|
70
150
|
|
|
71
|
-
|
|
72
|
-
|
|
73
|
-
|
|
74
|
-
|
|
75
|
-
|
|
151
|
+
- Add `Adapter#close()` method for gracefully shutting down the server
|
|
152
|
+
- Fix error recover bug in WebSocket that made transport cycle through
|
|
153
|
+
`up`/`down` state
|
|
154
|
+
- Update Promise implementation to pass `promises-aplus-tests 2.0`
|
|
155
|
+
- Correct some incorrect variable names in the Ruby transports
|
|
156
|
+
- Make logging methods public to fix a problem on Ruby 2.1
|
|
76
157
|
|
|
77
158
|
|
|
78
159
|
### 1.0.0 / 2013-10-01
|
|
79
160
|
|
|
80
|
-
|
|
81
|
-
|
|
82
|
-
|
|
83
|
-
|
|
84
|
-
|
|
85
|
-
|
|
86
|
-
|
|
87
|
-
|
|
88
|
-
|
|
89
|
-
|
|
90
|
-
|
|
91
|
-
|
|
92
|
-
|
|
93
|
-
|
|
94
|
-
|
|
95
|
-
|
|
96
|
-
|
|
97
|
-
|
|
98
|
-
|
|
99
|
-
|
|
100
|
-
|
|
101
|
-
|
|
102
|
-
|
|
103
|
-
|
|
104
|
-
|
|
105
|
-
|
|
161
|
+
- Client changes:
|
|
162
|
+
- Allow clients to be instantiated with URI objects rather than strings
|
|
163
|
+
- Add a `ca` option to the Node `Client` class for passing in trusted server
|
|
164
|
+
certificates
|
|
165
|
+
- Objects supporting the `callback()` method in JavaScript are now Promises
|
|
166
|
+
- Fix protocol-relative URI parsing in the client
|
|
167
|
+
- Remove the `getClientId()` and `getState()` methods from the `Client` class
|
|
168
|
+
- Transport changes:
|
|
169
|
+
- Add request-size limiting to all batching transports
|
|
170
|
+
- Make the WebSocket transport more robust against quiet network periods and
|
|
171
|
+
clients going to sleep
|
|
172
|
+
- Support cookies across all transports when using the client on Node.js or
|
|
173
|
+
Ruby
|
|
174
|
+
- Support custom headers in the `cross-origin-long-polling` and server-side
|
|
175
|
+
`websocket` transports
|
|
176
|
+
- Adapter changes:
|
|
177
|
+
- Support the `rack.hijack` streaming API
|
|
178
|
+
- Migrate to MultiJson for JSON handling on Ruby, allowing use of JRuby
|
|
179
|
+
- Escape U+2028 and U+2029 in JSON-P output
|
|
180
|
+
- Fix a bug stopping requests being routed when the mount point is `/`
|
|
181
|
+
- Fix various bugs that cause errors to be thrown if we try to send a message
|
|
182
|
+
over a closed socket
|
|
183
|
+
- Remove the `listen()` method from `Adapter` in favour of using
|
|
184
|
+
server-specific APIs
|
|
185
|
+
- Server changes:
|
|
186
|
+
- Use cryptographically secure random number generators to create client IDs
|
|
187
|
+
- Allow extensions to access request properties by using 3-ary methods
|
|
188
|
+
- Objects supporting the `bind()` method now implement the full `EventEmitter`
|
|
189
|
+
API
|
|
190
|
+
- Stop the server from forwarding the `clientId` property of published
|
|
191
|
+
messages
|
|
192
|
+
- Miscellaneous:
|
|
193
|
+
- Support Browserify by returning the client module
|
|
194
|
+
- `Faye.logger` can now be a logger object rather than a function
|
|
195
|
+
|
|
196
|
+
|
|
197
|
+
### 0.8.11 / 2014-07-08
|
|
198
|
+
|
|
199
|
+
- Make some changes to JSON-P responses to mitigate the Rosetta Flash attack
|
|
200
|
+
- http://miki.it/blog/2014/7/8/abusing-jsonp-with-rosetta-flash/
|
|
201
|
+
|
|
202
|
+
|
|
203
|
+
### 0.8.10 -- removed due to error while publishing
|
|
106
204
|
|
|
107
205
|
|
|
108
206
|
### 0.8.9 / 2013-02-26
|
|
109
207
|
|
|
110
|
-
|
|
111
|
-
|
|
112
|
-
|
|
113
|
-
|
|
114
|
-
|
|
115
|
-
|
|
116
|
-
|
|
117
|
-
|
|
118
|
-
|
|
119
|
-
|
|
120
|
-
|
|
121
|
-
|
|
208
|
+
- Specify ciphers for SSL on Node to mitigate the BEAST attack
|
|
209
|
+
- Mitigate increased risk of socket hang-up errors in Node v0.8.20
|
|
210
|
+
- Fix race condition when processing outgoing extensions in the Node server
|
|
211
|
+
- Fix problem loading the client script when using `{mount: '/'}`
|
|
212
|
+
- Clean up connection objects when a WebSocket is re-used with a new clientId
|
|
213
|
+
- All JavaScript code now runs in strict mode
|
|
214
|
+
- Select transport on handshake, instead of on client creation to allow time for
|
|
215
|
+
`disable()` calls
|
|
216
|
+
- Do not speculatively open WebSocket/EventSource connections if they are
|
|
217
|
+
disabled
|
|
218
|
+
- Gracefully handle WebSocket messages with no data on the client side
|
|
219
|
+
- Close and reconnect WebSocket when onerror is fired, not just when onclose is
|
|
220
|
+
fired
|
|
221
|
+
- Fix problem with caching of EventSource connections with stale clientIds
|
|
222
|
+
- Don't parse query strings when checking if a URL is same-origin or not
|
|
122
223
|
|
|
123
224
|
|
|
124
225
|
### 0.8.8 / 2013-01-10
|
|
125
226
|
|
|
126
|
-
|
|
227
|
+
- Patch security hole allowing remote execution of arbitrary Server methods
|
|
127
228
|
|
|
128
229
|
|
|
129
230
|
### 0.8.7 -- removed due to error while publishing
|
|
@@ -131,280 +232,311 @@
|
|
|
131
232
|
|
|
132
233
|
### 0.8.6 / 2012-10-07
|
|
133
234
|
|
|
134
|
-
|
|
235
|
+
- Make sure messages pushed to the client over a socket pass through outgoing
|
|
236
|
+
extensions
|
|
135
237
|
|
|
136
238
|
|
|
137
239
|
### 0.8.5 / 2012-09-30
|
|
138
240
|
|
|
139
|
-
|
|
241
|
+
- Fix a bug in `URI.parse()` that caused Faye endpoints to inherit search and
|
|
242
|
+
hash from `window.location`
|
|
140
243
|
|
|
141
244
|
|
|
142
245
|
### 0.8.4 / 2012-09-29
|
|
143
246
|
|
|
144
|
-
|
|
145
|
-
|
|
146
|
-
|
|
147
|
-
|
|
148
|
-
|
|
149
|
-
|
|
150
|
-
|
|
151
|
-
|
|
247
|
+
- Optimise upgrade process so that WebSocket is tested earlier and the
|
|
248
|
+
connection is cached
|
|
249
|
+
- Check that EventSource actually works to work around broken Opera
|
|
250
|
+
implementation
|
|
251
|
+
- Emit `connection:open` and `connection:close` events from the Engine proxy
|
|
252
|
+
- Increase size of client IDs from 128 to 160 bits
|
|
253
|
+
- Fix bug with relative URL resolution in IE
|
|
254
|
+
- Limit the JSON-P transport's message buffer so it doesn't create over-long
|
|
255
|
+
URLs
|
|
256
|
+
- Send `Pragma: no-cache` with XHR requests to guard against iOS 6 POST caching
|
|
257
|
+
- Add `charset=utf-8` to response Content-Type headers
|
|
152
258
|
|
|
153
259
|
|
|
154
260
|
### 0.8.3 / 2012-07-15
|
|
155
261
|
|
|
156
|
-
|
|
157
|
-
|
|
158
|
-
|
|
159
|
-
|
|
160
|
-
|
|
161
|
-
|
|
162
|
-
|
|
262
|
+
- `Client#subscribe` returns an array of Subscriptions if given an array of
|
|
263
|
+
channels
|
|
264
|
+
- Allow different endpoints to be specified per-transport
|
|
265
|
+
- Only use IE's `XDomainRequest` for same-protocol requests
|
|
266
|
+
- Replace URL parser with one that treats relative URLs the same as the browser
|
|
267
|
+
- Improve logging of malformed requests and detect problems earlier
|
|
268
|
+
- Make sure socket connections are closed when a client session is timed out
|
|
269
|
+
- Stop WebSocket reconnecting after `window.onbeforeunload`
|
|
163
270
|
|
|
164
271
|
|
|
165
272
|
### 0.8.2 / 2012-04-12
|
|
166
273
|
|
|
167
|
-
|
|
168
|
-
|
|
169
|
-
|
|
170
|
-
|
|
171
|
-
|
|
274
|
+
- Fix replacement of `null` with `{}` in `copyObject()`
|
|
275
|
+
- Make EventSource transport trigger `transport:up/down` events
|
|
276
|
+
- Supply source map for minified JavaScript client, and include source in gem
|
|
277
|
+
- Return `Content-Length: 0` for 304 responses
|
|
278
|
+
- Handle pre-flight CORS requests from old versions of Safari
|
|
172
279
|
|
|
173
280
|
|
|
174
281
|
### 0.8.1 / 2012-03-15
|
|
175
282
|
|
|
176
|
-
|
|
177
|
-
|
|
178
|
-
|
|
179
|
-
|
|
180
|
-
|
|
181
|
-
|
|
182
|
-
|
|
283
|
+
- Make `Publisher#trigger` safe for event listeners that modify the listener
|
|
284
|
+
list
|
|
285
|
+
- Make `Server#subscribe` return a response if the incoming message has an error
|
|
286
|
+
- Fix edge case in code that identifies the `clientId` of socket connections
|
|
287
|
+
- Return `Content-Length` headers for HTTP responses
|
|
288
|
+
- Don't send empty lists of messages from the WebSocket transport
|
|
289
|
+
- Stop client sending multiple `/meta/subscribe` messages for subscriptions made
|
|
290
|
+
before handshaking
|
|
291
|
+
- Stop client treating incoming published messages as responses to `/meta/*`
|
|
292
|
+
messages
|
|
183
293
|
|
|
184
294
|
|
|
185
295
|
### 0.8.0 / 2012-02-26
|
|
186
296
|
|
|
187
|
-
|
|
188
|
-
|
|
189
|
-
|
|
190
|
-
|
|
191
|
-
|
|
192
|
-
|
|
193
|
-
|
|
194
|
-
|
|
195
|
-
|
|
196
|
-
|
|
197
|
-
|
|
198
|
-
|
|
297
|
+
- Extract the Redis engine into a separate library, `faye-redis`
|
|
298
|
+
- Stabilize and document the Engine API so others can write backends
|
|
299
|
+
- Extract WebSocket and EventSource tools into a separate library,
|
|
300
|
+
`faye-websocket`
|
|
301
|
+
- Improve use of WebSocket so messages are immediately pushed rather than
|
|
302
|
+
polling
|
|
303
|
+
- Introduce new EventSource-based transport, for proxies that block WebSocket
|
|
304
|
+
- Support the Rainbows and Goliath web servers for Ruby, same as
|
|
305
|
+
`faye-websocket`
|
|
306
|
+
- Improve detection of network errors and switch to fixed-interval for
|
|
307
|
+
reconnecting
|
|
308
|
+
- Add `setHeader()` method to Client (e.g. for connecting to Salesforce API)
|
|
309
|
+
- Add `timeout()` method to `Faye.Deferrable` to match
|
|
310
|
+
`EventMachine::Deferrable`
|
|
311
|
+
- Fix some bugs in client-side message handlers created with `subscribe()`
|
|
312
|
+
- Improve speed and memory consumption of `copyObject()`
|
|
313
|
+
- Switch from JSON to Yajl for JSON parsing in Ruby
|
|
314
|
+
|
|
315
|
+
|
|
316
|
+
### 0.7.2 / 2013-01-10
|
|
317
|
+
|
|
318
|
+
- Patch security hole allowing remote execution of arbitrary Server methods
|
|
199
319
|
|
|
200
320
|
|
|
201
321
|
### 0.7.1 / 2011-12-22
|
|
202
322
|
|
|
203
|
-
|
|
204
|
-
|
|
323
|
+
- Extension `added()` and `removed()` methods now receive the extended object
|
|
324
|
+
- Detection of WebSockets in RackAdapter is more strict
|
|
205
325
|
|
|
206
326
|
|
|
207
327
|
### 0.7.0 / 2011-11-22
|
|
208
328
|
|
|
209
|
-
|
|
210
|
-
|
|
211
|
-
|
|
212
|
-
|
|
213
|
-
|
|
214
|
-
|
|
215
|
-
|
|
329
|
+
- Provide an event API for monitoring engine events on the server side
|
|
330
|
+
- Implement server-side WebSocket connections for improved latency
|
|
331
|
+
- Fix WebSocket protocol bugs and expose APIs for developers to use
|
|
332
|
+
- Make server-side HTTP transports support SSL and cookies
|
|
333
|
+
- Allow clients to disable selected transports and autodisconnection
|
|
334
|
+
- Add callback/errback API to `Client#publish()` interface
|
|
335
|
+
- Add `socket` setting for the Redis engine for connecting through a Unix socket
|
|
336
|
+
|
|
337
|
+
|
|
338
|
+
### 0.6.8 / 2013-01-10
|
|
339
|
+
|
|
340
|
+
- Patch security hole allowing remote execution of arbitrary Server methods
|
|
216
341
|
|
|
217
342
|
|
|
218
343
|
### 0.6.7 / 2011-10-20
|
|
219
344
|
|
|
220
|
-
|
|
221
|
-
|
|
222
|
-
|
|
223
|
-
|
|
224
|
-
|
|
225
|
-
|
|
226
|
-
|
|
227
|
-
|
|
345
|
+
- Cache client script in memory and add `ETag` and `Last-Modified` headers
|
|
346
|
+
- Fix bug in Node Redis engine where `undefined` was used if no namespace given
|
|
347
|
+
- Flush Redis message queues using a transaction to avoid re-delivery of
|
|
348
|
+
messages
|
|
349
|
+
- Fix race condition and timing errors present in Redis locking code
|
|
350
|
+
- Use `Cache-Control: no-cache, no-store` on JSON-P responses
|
|
351
|
+
- Improvements to the CORS and JSON-P transports
|
|
352
|
+
- Prevent retry handlers in transports from being invoked multiple times
|
|
353
|
+
- Use the current page protocol by default when parsing relative URIs
|
|
228
354
|
|
|
229
355
|
|
|
230
356
|
### 0.6.6 / 2011-09-12
|
|
231
357
|
|
|
232
|
-
|
|
233
|
-
|
|
234
|
-
|
|
358
|
+
- Add `:key` and `:cert` options to the `Adapter#listen` methods for setting up
|
|
359
|
+
SSL
|
|
360
|
+
- Fix error detection of CORS transport in IE9 running IE8 compatibility mode
|
|
361
|
+
- Fix dependency versions so that Rubygems lets Faye install
|
|
235
362
|
|
|
236
363
|
|
|
237
364
|
### 0.6.5 / 2011-08-29
|
|
238
365
|
|
|
239
|
-
|
|
240
|
-
|
|
241
|
-
|
|
242
|
-
|
|
366
|
+
- Fix UTF-8 encoding bugs in draft-75/76 and protocol-8 WebSocket parsers
|
|
367
|
+
- Switch to streaming parser for WebSocket protocol-8
|
|
368
|
+
- Remove an `SREM` operation that shouldn't have been in the Redis engine
|
|
369
|
+
- Move `thin_extensions.rb` so it's not on the Rubygems load path
|
|
243
370
|
|
|
244
371
|
|
|
245
372
|
### 0.6.4 / 2011-08-18
|
|
246
373
|
|
|
247
|
-
|
|
248
|
-
|
|
249
|
-
|
|
374
|
+
- Support WebSocket protocol used by Chrome 14 and Firefox 6
|
|
375
|
+
- Fix handling of multibyte characters in WebSocket messages on Node
|
|
376
|
+
- Improve message routing in Node memory engine to avoid false duplicates
|
|
250
377
|
|
|
251
378
|
|
|
252
379
|
### 0.6.3 / 2011-07-10
|
|
253
380
|
|
|
254
|
-
|
|
255
|
-
|
|
256
|
-
|
|
257
|
-
|
|
258
|
-
|
|
259
|
-
|
|
260
|
-
|
|
261
|
-
|
|
381
|
+
- Use sequential message IDs to reduce memory usage on the client side
|
|
382
|
+
- Only send advice with handshake and connect responses
|
|
383
|
+
- Stop trying to publish `/meta/*` messages - no-one is listening and it breaks
|
|
384
|
+
`/**`
|
|
385
|
+
- Fix bug causing invalid listeners to appear after a client reconnection
|
|
386
|
+
- Stop loading `rubygems` within our library code
|
|
387
|
+
- Make sure we only queue a message for each client once in the Redis engine
|
|
388
|
+
- Use lists instead of sets for message queues in Redis
|
|
389
|
+
- Improve clean-up of expired clients in Redis engine
|
|
262
390
|
|
|
263
391
|
|
|
264
392
|
### 0.6.2 / 2011-06-19
|
|
265
393
|
|
|
266
|
-
|
|
267
|
-
|
|
268
|
-
|
|
269
|
-
|
|
270
|
-
|
|
394
|
+
- Add authentication, database selection and namespacing to Redis engine
|
|
395
|
+
- Clean up all client data when removing clients from Redis
|
|
396
|
+
- Fix `cross-origin-long-polling` for `OPTIONS`-aware browsers
|
|
397
|
+
- Update secure WebSocket detection for recent Node versions
|
|
398
|
+
- Reinstate `faye.client` field in Rack environment
|
|
271
399
|
|
|
272
400
|
|
|
273
401
|
### 0.6.1 / 2011-06-06
|
|
274
402
|
|
|
275
|
-
|
|
276
|
-
|
|
403
|
+
- Fix `cross-origin-long-polling` support in `RackAdapter`
|
|
404
|
+
- Plug some potential memory leaks in `Memory` engine
|
|
277
405
|
|
|
278
406
|
|
|
279
407
|
### 0.6.0 / 2011-05-21
|
|
280
408
|
|
|
281
|
-
|
|
282
|
-
|
|
283
|
-
|
|
284
|
-
|
|
285
|
-
|
|
286
|
-
|
|
287
|
-
|
|
288
|
-
|
|
289
|
-
|
|
409
|
+
- Extract core logic into the `Engine` class to support swappable backends
|
|
410
|
+
- Introduce a Redis-backed engine to support clustered web front-ends
|
|
411
|
+
- Use CORS for `cross-domain long-polling`
|
|
412
|
+
- Make server more resilient against bad requests, including empty message lists
|
|
413
|
+
- Perform subscription validation on the server and use errbacks to signal
|
|
414
|
+
errors
|
|
415
|
+
- Prohibit publishing to wildcard channels
|
|
416
|
+
- Unsubscribing from a channel is now O(1) instead of O(N)
|
|
417
|
+
- Much more thorough and consistent unit test coverage of both versions
|
|
418
|
+
- Automatic integration tests using Terminus and TestSwarm
|
|
290
419
|
|
|
291
420
|
|
|
292
421
|
### 0.5.5 / 2011-01-16
|
|
293
422
|
|
|
294
|
-
|
|
295
|
-
|
|
423
|
+
- Open a real socket to check for WebSocket usability, not just object detection
|
|
424
|
+
- Catch server-side errors when handshaking with WebSockets
|
|
296
425
|
|
|
297
426
|
|
|
298
427
|
### 0.5.4 / 2010-12-19
|
|
299
428
|
|
|
300
|
-
|
|
301
|
-
|
|
302
|
-
|
|
303
|
-
|
|
304
|
-
|
|
429
|
+
- Add a `#callback` method to `Subscriptions` to detect when they become active
|
|
430
|
+
- Add `:extensions` option to `RackAdapter` to make it easier to extend
|
|
431
|
+
middleware
|
|
432
|
+
- Detect secure WebSocket requests through the `HTTP_X_FORWARDED_PROTO` header
|
|
433
|
+
- Handle socket errors when sending WebSocket messages from `NodeAdapter`
|
|
434
|
+
- Use exponential backoff to reconnect client-side WebSockets to reduce CPU load
|
|
305
435
|
|
|
306
436
|
|
|
307
437
|
### 0.5.3 / 2010-10-21
|
|
308
438
|
|
|
309
|
-
|
|
310
|
-
|
|
311
|
-
|
|
312
|
-
|
|
313
|
-
|
|
314
|
-
|
|
315
|
-
|
|
439
|
+
- Improve detection of `wss:` requirement for secure WebSocket connections
|
|
440
|
+
- Correctly use default ports (80,443) for server-side HTTP connections
|
|
441
|
+
- Support legacy `application/x-www-form-urlencoded` POST requests
|
|
442
|
+
- Delete unused Channel objects that have all their subscribers removed
|
|
443
|
+
- Fix resend/reconnect logic in WebSocket transport
|
|
444
|
+
- Keep client script in memory rather than reading it from disk every time
|
|
445
|
+
- Prevent error-adding extensions from breaking the core protocol
|
|
316
446
|
|
|
317
447
|
|
|
318
448
|
### 0.5.2 / 2010-08-12
|
|
319
449
|
|
|
320
|
-
|
|
321
|
-
|
|
450
|
+
- Support draft-76 of the WebSocket protocol (FF4, Chrome 6)
|
|
451
|
+
- Reduce `Connection::MAX_DELAY` to improve latency
|
|
322
452
|
|
|
323
453
|
|
|
324
454
|
### 0.5.1 / 2010-07-21
|
|
325
455
|
|
|
326
|
-
|
|
456
|
+
- Fix a publishing problem in Ruby `LocalTransport`
|
|
327
457
|
|
|
328
458
|
|
|
329
459
|
### 0.5.0 / 2010-07-17
|
|
330
460
|
|
|
331
|
-
|
|
332
|
-
|
|
333
|
-
|
|
334
|
-
|
|
335
|
-
|
|
336
|
-
|
|
337
|
-
|
|
338
|
-
|
|
339
|
-
|
|
461
|
+
- Handle multiple event listeners bound to a channel
|
|
462
|
+
- Add extension system for adding domain-specific logic to the protocol
|
|
463
|
+
- Improve handling of client reconnections if the server goes down
|
|
464
|
+
- Change default polling interval to 0 (immediate reconnect)
|
|
465
|
+
- Add support for WebSockets (draft75 only) as a network transport
|
|
466
|
+
- Remove support for Ruby servers other than Thin
|
|
467
|
+
- Make client and server compatible with CometD (1.x and 2.0) components
|
|
468
|
+
- Improve clean-up of unused server-side connections
|
|
469
|
+
- Change Node API for adding Faye service to an HTTP server
|
|
340
470
|
|
|
341
471
|
|
|
342
472
|
### 0.3.4 / 2010-06-20
|
|
343
473
|
|
|
344
|
-
|
|
474
|
+
- Stop local clients going into an infinite loop if a subscription block causes
|
|
475
|
+
a reconnect
|
|
345
476
|
|
|
346
477
|
|
|
347
478
|
### 0.3.3 / 2010-06-07
|
|
348
479
|
|
|
349
|
-
|
|
350
|
-
|
|
351
|
-
|
|
480
|
+
- Bring Node APIs up to date with 0.1.97
|
|
481
|
+
- Catch `ECONNREFUSED` errors in Node clients to withstand server outages
|
|
482
|
+
- Refactor the `Server` internals
|
|
352
483
|
|
|
353
484
|
|
|
354
485
|
### 0.3.2 / 2010-04-04
|
|
355
486
|
|
|
356
|
-
|
|
357
|
-
|
|
358
|
-
|
|
359
|
-
|
|
360
|
-
|
|
361
|
-
|
|
362
|
-
|
|
363
|
-
|
|
487
|
+
- Fix problems with JSON serialization when Prototype, MooTools present
|
|
488
|
+
- Make the client reconnect if it doesn't hear from the server after a timeout
|
|
489
|
+
- Stop JavaScript server returning `NaN` for `advice.interval`
|
|
490
|
+
- Make Ruby server return an integer for `advice.interval`
|
|
491
|
+
- Ensure EventMachine is running before handling messages
|
|
492
|
+
- Handle `data` and `end` events properly in Node HTTP API
|
|
493
|
+
- Switch to `application/json` for content types and stop using querystring
|
|
494
|
+
format in POST bodies
|
|
495
|
+
- Respond to any URL path under the mount point, not just the exact match
|
|
364
496
|
|
|
365
497
|
|
|
366
498
|
### 0.3.1 / 2010-03-09
|
|
367
499
|
|
|
368
|
-
|
|
369
|
-
|
|
500
|
+
- Pass client down through Rack stack as `env['faye.client']`
|
|
501
|
+
- Refactor some JavaScript internals to mirror Ruby codebase
|
|
370
502
|
|
|
371
503
|
|
|
372
504
|
### 0.3.0 / 2010-03-01
|
|
373
505
|
|
|
374
|
-
|
|
375
|
-
|
|
376
|
-
|
|
377
|
-
|
|
378
|
-
|
|
379
|
-
|
|
380
|
-
|
|
506
|
+
- Add server-side clients for Node.js and Ruby environments
|
|
507
|
+
- Clients support both HTTP and in-process transports
|
|
508
|
+
- Fix ID generation in JavaScript version to 128-bit IDs
|
|
509
|
+
- Fix bug in interpretation of `**` channel wildcard
|
|
510
|
+
- Users don't have to call `#connect()` on clients any more
|
|
511
|
+
- Fix timeout race conditions that were killing active connections
|
|
512
|
+
- Support new Node APIs from 0.1.29.
|
|
381
513
|
|
|
382
514
|
|
|
383
515
|
### 0.2.2 / 2010-02-10
|
|
384
516
|
|
|
385
|
-
|
|
517
|
+
- Kick out requests with malformed JSON as 400s
|
|
386
518
|
|
|
387
519
|
|
|
388
520
|
### 0.2.1 / 2010-02-04
|
|
389
521
|
|
|
390
|
-
|
|
391
|
-
|
|
522
|
+
- Fix server-side flushing of callback-polling connections
|
|
523
|
+
- Backend can be used cross-domain if running on Node or Thin
|
|
392
524
|
|
|
393
525
|
|
|
394
526
|
### 0.2.0 / 2010-02-02
|
|
395
527
|
|
|
396
|
-
|
|
397
|
-
|
|
398
|
-
|
|
528
|
+
- Port server to JavaScript with an adapter for Node.js
|
|
529
|
+
- Support Thin's async responses in the Ruby version for complete non-blocking
|
|
530
|
+
- Fix some minor client-side bugs in transport choice
|
|
399
531
|
|
|
400
532
|
|
|
401
533
|
### 0.1.1 / 2009-07-26
|
|
402
534
|
|
|
403
|
-
|
|
535
|
+
- Fix a broken client build
|
|
404
536
|
|
|
405
537
|
|
|
406
538
|
### 0.1.0 / 2009-06-15
|
|
407
539
|
|
|
408
|
-
|
|
409
|
-
|
|
410
|
-
|
|
540
|
+
- Ruby Bayeux server and Rack adapter
|
|
541
|
+
- Internally evented using EventMachine, web frontend blocks
|
|
542
|
+
- JavaScript client with `long-polling` and `callback-polling`
|