ResponseCacheStrategy.php 9.0 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232
  1. <?php
  2. /*
  3. * This file is part of the Symfony package.
  4. *
  5. * (c) Fabien Potencier <fabien@symfony.com>
  6. *
  7. * For the full copyright and license information, please view the LICENSE
  8. * file that was distributed with this source code.
  9. */
  10. namespace Symfony\Component\HttpKernel\HttpCache;
  11. use Symfony\Component\HttpFoundation\Response;
  12. /**
  13. * ResponseCacheStrategy knows how to compute the Response cache HTTP header
  14. * based on the different response cache headers.
  15. *
  16. * This implementation changes the main response TTL to the smallest TTL received
  17. * or force validation if one of the surrogates has validation cache strategy.
  18. *
  19. * @author Fabien Potencier <fabien@symfony.com>
  20. */
  21. class ResponseCacheStrategy implements ResponseCacheStrategyInterface
  22. {
  23. /**
  24. * Cache-Control headers that are sent to the final response if they appear in ANY of the responses.
  25. */
  26. private const OVERRIDE_DIRECTIVES = ['private', 'no-cache', 'no-store', 'no-transform', 'must-revalidate', 'proxy-revalidate'];
  27. /**
  28. * Cache-Control headers that are sent to the final response if they appear in ALL of the responses.
  29. */
  30. private const INHERIT_DIRECTIVES = ['public', 'immutable'];
  31. private int $embeddedResponses = 0;
  32. private bool $isNotCacheableResponseEmbedded = false;
  33. private int $age = 0;
  34. private \DateTimeInterface|false|null $lastModified = null;
  35. private array $flagDirectives = [
  36. 'no-cache' => null,
  37. 'no-store' => null,
  38. 'no-transform' => null,
  39. 'must-revalidate' => null,
  40. 'proxy-revalidate' => null,
  41. 'public' => null,
  42. 'private' => null,
  43. 'immutable' => null,
  44. ];
  45. private array $ageDirectives = [
  46. 'max-age' => null,
  47. 's-maxage' => null,
  48. 'expires' => null,
  49. ];
  50. public function add(Response $response): void
  51. {
  52. ++$this->embeddedResponses;
  53. foreach (self::OVERRIDE_DIRECTIVES as $directive) {
  54. if ($response->headers->hasCacheControlDirective($directive)) {
  55. $this->flagDirectives[$directive] = true;
  56. }
  57. }
  58. foreach (self::INHERIT_DIRECTIVES as $directive) {
  59. if (false !== $this->flagDirectives[$directive]) {
  60. $this->flagDirectives[$directive] = $response->headers->hasCacheControlDirective($directive);
  61. }
  62. }
  63. $age = $response->getAge();
  64. $this->age = max($this->age, $age);
  65. if ($this->willMakeFinalResponseUncacheable($response)) {
  66. $this->isNotCacheableResponseEmbedded = true;
  67. return;
  68. }
  69. $isHeuristicallyCacheable = $response->headers->hasCacheControlDirective('public');
  70. $maxAge = $response->headers->hasCacheControlDirective('max-age') ? (int) $response->headers->getCacheControlDirective('max-age') : null;
  71. $this->storeRelativeAgeDirective('max-age', $maxAge, $age, $isHeuristicallyCacheable);
  72. $sharedMaxAge = $response->headers->hasCacheControlDirective('s-maxage') ? (int) $response->headers->getCacheControlDirective('s-maxage') : $maxAge;
  73. $this->storeRelativeAgeDirective('s-maxage', $sharedMaxAge, $age, $isHeuristicallyCacheable);
  74. $expires = $response->getExpires();
  75. $expires = null !== $expires ? (int) $expires->format('U') - (int) $response->getDate()->format('U') : null;
  76. $this->storeRelativeAgeDirective('expires', $expires >= 0 ? $expires : null, 0, $isHeuristicallyCacheable);
  77. if (false !== $this->lastModified) {
  78. $lastModified = $response->getLastModified();
  79. $this->lastModified = $lastModified ? max($this->lastModified, $lastModified) : false;
  80. }
  81. }
  82. public function update(Response $response): void
  83. {
  84. // if we have no embedded Response, do nothing
  85. if (0 === $this->embeddedResponses) {
  86. return;
  87. }
  88. // Remove Etag since it cannot be merged from embedded responses.
  89. $response->setEtag(null);
  90. $this->add($response);
  91. $response->headers->set('Age', $this->age);
  92. if ($this->isNotCacheableResponseEmbedded) {
  93. $response->setLastModified(null);
  94. if ($this->flagDirectives['no-store']) {
  95. $response->headers->set('Cache-Control', 'no-cache, no-store, must-revalidate');
  96. } else {
  97. $response->headers->set('Cache-Control', 'no-cache, must-revalidate');
  98. }
  99. return;
  100. }
  101. $response->setLastModified($this->lastModified ?: null);
  102. $flags = array_filter($this->flagDirectives);
  103. if (isset($flags['must-revalidate'])) {
  104. $flags['no-cache'] = true;
  105. }
  106. $response->headers->set('Cache-Control', implode(', ', array_keys($flags)));
  107. $maxAge = null;
  108. if (is_numeric($this->ageDirectives['max-age'])) {
  109. $maxAge = $this->ageDirectives['max-age'] + $this->age;
  110. $response->headers->addCacheControlDirective('max-age', $maxAge);
  111. }
  112. if (is_numeric($this->ageDirectives['s-maxage'])) {
  113. $sMaxage = $this->ageDirectives['s-maxage'] + $this->age;
  114. if ($maxAge !== $sMaxage) {
  115. $response->headers->addCacheControlDirective('s-maxage', $sMaxage);
  116. }
  117. }
  118. if (is_numeric($this->ageDirectives['expires'])) {
  119. $date = clone $response->getDate();
  120. $date = $date->modify('+'.($this->ageDirectives['expires'] + $this->age).' seconds');
  121. $response->setExpires($date);
  122. }
  123. }
  124. /**
  125. * RFC2616, Section 13.4.
  126. *
  127. * @see https://www.w3.org/Protocols/rfc2616/rfc2616-sec13.html#sec13.4
  128. */
  129. private function willMakeFinalResponseUncacheable(Response $response): bool
  130. {
  131. // RFC2616: A response received with a status code of 200, 203, 300, 301 or 410
  132. // MAY be stored by a cache […] unless a cache-control directive prohibits caching.
  133. if ($response->headers->hasCacheControlDirective('no-cache')
  134. || $response->headers->hasCacheControlDirective('no-store')
  135. ) {
  136. return true;
  137. }
  138. // Etag headers cannot be merged, they render the response uncacheable
  139. // by default (except if the response also has max-age etc.).
  140. if (null === $response->getEtag() && \in_array($response->getStatusCode(), [200, 203, 300, 301, 410])) {
  141. return false;
  142. }
  143. // RFC2616: A response received with any other status code (e.g. status codes 302 and 307)
  144. // MUST NOT be returned in a reply to a subsequent request unless there are
  145. // cache-control directives or another header(s) that explicitly allow it.
  146. $cacheControl = ['max-age', 's-maxage', 'must-revalidate', 'proxy-revalidate', 'public', 'private'];
  147. foreach ($cacheControl as $key) {
  148. if ($response->headers->hasCacheControlDirective($key)) {
  149. return false;
  150. }
  151. }
  152. if ($response->headers->has('Expires')) {
  153. return false;
  154. }
  155. return true;
  156. }
  157. /**
  158. * Store lowest max-age/s-maxage/expires for the final response.
  159. *
  160. * The response might have been stored in cache a while ago. To keep things comparable,
  161. * we have to subtract the age so that the value is normalized for an age of 0.
  162. *
  163. * If the value is lower than the currently stored value, we update the value, to keep a rolling
  164. * minimal value of each instruction.
  165. *
  166. * If the value is NULL and the isHeuristicallyCacheable parameter is false, the directive will
  167. * not be set on the final response. In this case, not all responses had the directive set and no
  168. * value can be found that satisfies the requirements of all responses. The directive will be dropped
  169. * from the final response.
  170. *
  171. * If the isHeuristicallyCacheable parameter is true, however, the current response has been marked
  172. * as cacheable in a public (shared) cache, but did not provide an explicit lifetime that would serve
  173. * as an upper bound. In this case, we can proceed and possibly keep the directive on the final response.
  174. */
  175. private function storeRelativeAgeDirective(string $directive, ?int $value, int $age, bool $isHeuristicallyCacheable): void
  176. {
  177. if (null === $value) {
  178. if ($isHeuristicallyCacheable) {
  179. /*
  180. * See https://datatracker.ietf.org/doc/html/rfc7234#section-4.2.2
  181. * This particular response does not require maximum lifetime; heuristics might be applied.
  182. * Other responses, however, might have more stringent requirements on maximum lifetime.
  183. * So, return early here so that the final response can have the more limiting value set.
  184. */
  185. return;
  186. }
  187. $this->ageDirectives[$directive] = false;
  188. }
  189. if (false !== $this->ageDirectives[$directive]) {
  190. $value -= $age;
  191. $this->ageDirectives[$directive] = null !== $this->ageDirectives[$directive] ? min($this->ageDirectives[$directive], $value) : $value;
  192. }
  193. }
  194. }