ResponseCacheStrategy.php 8.5 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230
  1. <?php
  2. /*
  3. * This file is part of the Symfony package.
  4. *
  5. * (c) Fabien Potencier <fabien@symfony.com>
  6. *
  7. * For the full copyright and license information, please view the LICENSE
  8. * file that was distributed with this source code.
  9. */
  10. namespace Symfony\Component\HttpKernel\HttpCache;
  11. use Symfony\Component\HttpFoundation\Response;
  12. /**
  13. * ResponseCacheStrategy knows how to compute the Response cache HTTP header
  14. * based on the different response cache headers.
  15. *
  16. * This implementation changes the main response TTL to the smallest TTL received
  17. * or force validation if one of the surrogates has validation cache strategy.
  18. *
  19. * @author Fabien Potencier <fabien@symfony.com>
  20. */
  21. class ResponseCacheStrategy implements ResponseCacheStrategyInterface
  22. {
  23. /**
  24. * Cache-Control headers that are sent to the final response if they appear in ANY of the responses.
  25. */
  26. private const OVERRIDE_DIRECTIVES = ['private', 'no-cache', 'no-store', 'no-transform', 'must-revalidate', 'proxy-revalidate'];
  27. /**
  28. * Cache-Control headers that are sent to the final response if they appear in ALL of the responses.
  29. */
  30. private const INHERIT_DIRECTIVES = ['public', 'immutable'];
  31. private int $embeddedResponses = 0;
  32. private bool $isNotCacheableResponseEmbedded = false;
  33. private int $age = 0;
  34. private \DateTimeInterface|false|null $lastModified = null;
  35. private array $flagDirectives = [
  36. 'no-cache' => null,
  37. 'no-store' => null,
  38. 'no-transform' => null,
  39. 'must-revalidate' => null,
  40. 'proxy-revalidate' => null,
  41. 'public' => null,
  42. 'private' => null,
  43. 'immutable' => null,
  44. ];
  45. private array $ageDirectives = [
  46. 'max-age' => null,
  47. 's-maxage' => null,
  48. 'expires' => false,
  49. ];
  50. public function add(Response $response): void
  51. {
  52. ++$this->embeddedResponses;
  53. foreach (self::OVERRIDE_DIRECTIVES as $directive) {
  54. if ($response->headers->hasCacheControlDirective($directive)) {
  55. $this->flagDirectives[$directive] = true;
  56. }
  57. }
  58. foreach (self::INHERIT_DIRECTIVES as $directive) {
  59. if (false !== $this->flagDirectives[$directive]) {
  60. $this->flagDirectives[$directive] = $response->headers->hasCacheControlDirective($directive);
  61. }
  62. }
  63. $age = $response->getAge();
  64. $this->age = max($this->age, $age);
  65. if ($this->willMakeFinalResponseUncacheable($response)) {
  66. $this->isNotCacheableResponseEmbedded = true;
  67. return;
  68. }
  69. $maxAge = $response->headers->hasCacheControlDirective('max-age') ? (int) $response->headers->getCacheControlDirective('max-age') : null;
  70. $sharedMaxAge = $response->headers->hasCacheControlDirective('s-maxage') ? (int) $response->headers->getCacheControlDirective('s-maxage') : $maxAge;
  71. $expires = $response->getExpires();
  72. $expires = null !== $expires ? (int) $expires->format('U') - (int) $response->getDate()->format('U') : null;
  73. // See https://datatracker.ietf.org/doc/html/rfc7234#section-4.2.2
  74. // If a response is "public" but does not have maximum lifetime, heuristics might be applied.
  75. // Do not store NULL values so the final response can have more limiting value from other responses.
  76. $isHeuristicallyCacheable = $response->headers->hasCacheControlDirective('public')
  77. && null === $maxAge
  78. && null === $sharedMaxAge
  79. && null === $expires;
  80. if (!$isHeuristicallyCacheable || null !== $maxAge || null !== $expires) {
  81. $this->storeRelativeAgeDirective('max-age', $maxAge, $expires, $age);
  82. }
  83. if (!$isHeuristicallyCacheable || null !== $sharedMaxAge || null !== $expires) {
  84. $this->storeRelativeAgeDirective('s-maxage', $sharedMaxAge, $expires, $age);
  85. }
  86. if (null !== $expires) {
  87. $this->ageDirectives['expires'] = true;
  88. }
  89. if (false !== $this->lastModified) {
  90. $lastModified = $response->getLastModified();
  91. $this->lastModified = $lastModified ? max($this->lastModified, $lastModified) : false;
  92. }
  93. }
  94. public function update(Response $response): void
  95. {
  96. // if we have no embedded Response, do nothing
  97. if (0 === $this->embeddedResponses) {
  98. return;
  99. }
  100. // Remove Etag since it cannot be merged from embedded responses.
  101. $response->setEtag(null);
  102. $this->add($response);
  103. $response->headers->set('Age', $this->age);
  104. if ($this->isNotCacheableResponseEmbedded) {
  105. $response->setLastModified(null);
  106. if ($this->flagDirectives['no-store']) {
  107. $response->headers->set('Cache-Control', 'no-cache, no-store, must-revalidate');
  108. } else {
  109. $response->headers->set('Cache-Control', 'no-cache, must-revalidate');
  110. }
  111. return;
  112. }
  113. $response->setLastModified($this->lastModified ?: null);
  114. $flags = array_filter($this->flagDirectives);
  115. if (isset($flags['must-revalidate'])) {
  116. $flags['no-cache'] = true;
  117. }
  118. $response->headers->set('Cache-Control', implode(', ', array_keys($flags)));
  119. $maxAge = null;
  120. if (is_numeric($this->ageDirectives['max-age'])) {
  121. $maxAge = $this->ageDirectives['max-age'] + $this->age;
  122. $response->headers->addCacheControlDirective('max-age', $maxAge);
  123. }
  124. if (is_numeric($this->ageDirectives['s-maxage'])) {
  125. $sMaxage = $this->ageDirectives['s-maxage'] + $this->age;
  126. if ($maxAge !== $sMaxage) {
  127. $response->headers->addCacheControlDirective('s-maxage', $sMaxage);
  128. }
  129. }
  130. if ($this->ageDirectives['expires'] && null !== $maxAge) {
  131. $date = clone $response->getDate();
  132. $date = $date->modify('+'.$maxAge.' seconds');
  133. $response->setExpires($date);
  134. }
  135. }
  136. /**
  137. * RFC2616, Section 13.4.
  138. *
  139. * @see https://www.w3.org/Protocols/rfc2616/rfc2616-sec13.html#sec13.4
  140. */
  141. private function willMakeFinalResponseUncacheable(Response $response): bool
  142. {
  143. // RFC2616: A response received with a status code of 200, 203, 300, 301 or 410
  144. // MAY be stored by a cache […] unless a cache-control directive prohibits caching.
  145. if ($response->headers->hasCacheControlDirective('no-cache')
  146. || $response->headers->hasCacheControlDirective('no-store')
  147. ) {
  148. return true;
  149. }
  150. // Etag headers cannot be merged, they render the response uncacheable
  151. // by default (except if the response also has max-age etc.).
  152. if (null === $response->getEtag() && \in_array($response->getStatusCode(), [200, 203, 300, 301, 410])) {
  153. return false;
  154. }
  155. // RFC2616: A response received with any other status code (e.g. status codes 302 and 307)
  156. // MUST NOT be returned in a reply to a subsequent request unless there are
  157. // cache-control directives or another header(s) that explicitly allow it.
  158. $cacheControl = ['max-age', 's-maxage', 'must-revalidate', 'proxy-revalidate', 'public', 'private'];
  159. foreach ($cacheControl as $key) {
  160. if ($response->headers->hasCacheControlDirective($key)) {
  161. return false;
  162. }
  163. }
  164. if ($response->headers->has('Expires')) {
  165. return false;
  166. }
  167. return true;
  168. }
  169. /**
  170. * Store lowest max-age/s-maxage/expires for the final response.
  171. *
  172. * The response might have been stored in cache a while ago. To keep things comparable,
  173. * we have to subtract the age so that the value is normalized for an age of 0.
  174. *
  175. * If the value is lower than the currently stored value, we update the value, to keep a rolling
  176. * minimal value of each instruction. If the value is NULL, the directive will not be set on the final response.
  177. */
  178. private function storeRelativeAgeDirective(string $directive, ?int $value, ?int $expires, int $age): void
  179. {
  180. if (null === $value && null === $expires) {
  181. $this->ageDirectives[$directive] = false;
  182. }
  183. if (false !== $this->ageDirectives[$directive]) {
  184. $value = min($value ?? PHP_INT_MAX, $expires ?? PHP_INT_MAX);
  185. $value -= $age;
  186. $this->ageDirectives[$directive] = null !== $this->ageDirectives[$directive] ? min($this->ageDirectives[$directive], $value) : $value;
  187. }
  188. }
  189. }