Feature #47137

HTTP method tunneling

Added by Bastian Waidelich over 2 years ago. Updated over 2 years ago.

Status:Resolved Start date:2013-04-11
Priority:Should have Due date:
Assigned To:Bastian Waidelich % Done:

100%
Category:Http
Target version:TYPO3 Flow Base Distribution - 2.0
PHP Version: Complexity:
Has patch:No

Description

Due to limited support in browsers or restrictive firewalls, Flow should allow HTTP request methods to be overridden by the client.

For POST requests the request method is overridden if

  • a post argument __method is set OR
  • if the header X-HTTP-Method-Override is present OR
  • if the header X-HTTP-Method is present

(first rule applies in the order specified)

Example DELETE form:

1<form method="POST">
2  <input type="hidden" name="__method" value="DELETE" />
3</form>

Related issues

related to TYPO3.Flow - Feature #37604: Make Flow RestController useless by improving MVC stack Resolved 2012-05-30
related to TYPO3.Flow - Feature #47551: Allow usage of links for destructive actions again Rejected 2013-04-24

Associated revisions

Revision a297b170
Added by Bastian Waidelich over 2 years ago

[FEATURE] HTTP method tunneling

This change allows the HTTP method to be overridden by the client.
This is especially useful for clients that only support a subset of the
supported methods (e.g. browsers).

The request method can be overridden by specifying a ``__method``
argument. Additionally Flow now respects the ``X-HTTP-Method``
respectively ``X-HTTP-Method-Override`` header.

usage::

&lt;form method="POST"&gt;
        &lt;input type="hidden" name="__method" value="DELETE" /&gt;
    &lt;/form&gt;

Note::

The HTTP request method can only be changed for POST requests

Change-Id: Ibe753ca4bfcc3dc5b579e39fd13af95b79bc1f83
Resolves: #47137
Releases: master, 2.0

Revision f5b5024b
Added by Bastian Waidelich over 2 years ago

[FEATURE] HTTP method tunneling

This change allows the HTTP method to be overridden by the client.
This is especially useful for clients that only support a subset of the
supported methods (e.g. browsers).

The request method can be overridden by specifying a ``__method``
argument. Additionally Flow now respects the ``X-HTTP-Method``
respectively ``X-HTTP-Method-Override`` header.

usage::

&lt;form method="POST"&gt;
        &lt;input type="hidden" name="__method" value="DELETE" /&gt;
    &lt;/form&gt;

Note::

The HTTP request method can only be changed for POST requests

Change-Id: Ibe753ca4bfcc3dc5b579e39fd13af95b79bc1f83
Resolves: #47137
Releases: master, 2.0

History

#1 Updated by Gerrit Code Review over 2 years ago

  • Status changed from Accepted to Under Review

Patch set 1 for branch master has been pushed to the review server.
It is available at https://review.typo3.org/19800

#2 Updated by Gerrit Code Review over 2 years ago

Patch set 2 for branch master has been pushed to the review server.
It is available at https://review.typo3.org/19800

#3 Updated by Gerrit Code Review over 2 years ago

Patch set 3 for branch master has been pushed to the review server.
It is available at https://review.typo3.org/19800

#4 Updated by Gerrit Code Review over 2 years ago

Patch set 1 for branch 2.0 has been pushed to the review server.
It is available at https://review.typo3.org/20014

#5 Updated by Bastian Waidelich over 2 years ago

  • Status changed from Under Review to Resolved
  • % Done changed from 0 to 100

Also available in: Atom PDF