Scamper

Scamper is the HTTP library for Scala.

It defines an interface for reading and writing HTTP messages, and it provides client and server implementations including WebSockets.

Getting Started
HTTP Messages
- Building Requests
- Building Responses
Specialized Header Access
Specialized Cookie Access
- Request Cookies
- Response Cookies
Message Body
- Creating Body
- Parsing Body
Multipart Message Body
Message Attributes
HTTP Authentication
- Basic Authentication
- Bearer Authentication
HTTP Client
HTTP Server
API Documentation
License

Getting Started

To get started, add Scamper to your project:

libraryDependencies += "com.github.losizm" %% "scamper" % "34.0.0"

Scamper uses SLF4J logging abstraction under the hood, so you'll need to bind it to an implementation if you wish to enable logging.

Here's how to bind to Logback:

libraryDependencies += "ch.qos.logback" % "logback-classic" % "1.3.5"

See SLF4J Documentation for binding to other logging frameworks.

NOTE: Starting with 23.0.0, Scamper is written for Scala 3. See previous releases for compatibility with Scala 2.12 and Scala 2.13.

HTTP Messages

At the core of Scamper is HttpMessage, which defines the fundamental characteristics of an HTTP message. HttpRequest and HttpResponse extend the specification to define characteristics specific to their respective message types.

Building Requests

An HttpRequest can be created using a factory method defined in the companion object, or you can start building from a RequestMethod.

import scala.language.implicitConversions

import scamper.http.RequestMethod.Registry.Get
import scamper.http.headers.{ Accept, Host }
import scamper.http.stringToUri
import scamper.http.types.stringToMediaRange

val req = Get("/motd")
  .setHost("localhost:8080")
  .setAccept("text/plain", "*/*; q=0.5")

Building Responses

An HttpResponse can be created using a factory method defined in the companion object, or you can start building from a ResponseStatus.

import scala.language.implicitConversions

import scamper.http.ResponseStatus.Registry.Ok
import scamper.http.headers.{ Connection, ContentType }
import scamper.http.stringToEntity
import scamper.http.types.stringToMediaType

val res = Ok("There is an answer.")
  .setContentType("text/plain")
  .setConnection("close")

Specialized Header Access

HttpMessage provides a set of methods for generalized header access. Using these methods, the header name and value are each represented as String.

import scala.language.implicitConversions

import scamper.http.RequestMethod.Registry.Post
import scamper.http.{ stringToUri, tupleToHeader }

val req = Post("/api/users").setHeaders("Content-Type" -> "application/json")

val contentType: Option[String] = req.getHeaderValue("Content-Type")

Although this gets the job done, there are implicit classes defined in scamper.http.headers for specialized header access.

For example, ContentType adds the following methods to HttpMessage:

/** Tests for Content-Type header. */
def hasContentType: Boolean

/** Gets Content-Type header value. */
def contentType: MediaType

/** Optionally gets Content-Type header value. */
def getContentType: Option[MediaType]

/** Creates message setting Content-Type header. */
def setContentType(value: MediaType): HttpMessage

/** Creates message removing Content-Type header. */
def removeContentType(): HttpMessage

With them imported, you can work with the header using its specialized header type.

import scala.language.implicitConversions

import scamper.http.RequestMethod.Registry.Post
import scamper.http.headers.ContentType
import scamper.http.stringToUri
import scamper.http.types.MediaType

val req = Post("/api/users").setContentType(MediaType("application/json"))
println(req.contentType.typeName) // application
println(req.contentType.subtypeName) // json

And, with conversions defined in scamper.http.types, you can implicitly convert values to the header types.

import scala.language.implicitConversions

import scamper.http.RequestMethod.Registry.Post
import scamper.http.headers.ContentType
import scamper.http.stringToUri
import scamper.http.types.stringToMediaType

val req = Post("/api/users").setContentType("application/json")
println(req.contentType.typeName) // application
println(req.contentType.subtypeName) // json

Specialized Cookie Access

In much the same way specialized access to headers is available, so too is the case for cookies. Specialized access is provided by classes in scamper.http.cookies.

Request Cookies

In HttpRequest, cookies are stringed together in the Cookie header. You can access the cookies in their unbaked form using generalized header access. Or, you can access them using extension methods provided by RequestCookies with each cookie represented as PlainCookie.

import scamper.http.RequestMethod.Registry.Get
import scamper.http.cookies.{ PlainCookie, RequestCookies }
import scamper.http.stringToUri

val req = Get("https://localhost:8080/motd").setCookies(
  PlainCookie("ID", "bG9zCg"), PlainCookie("Region", "SE-US")
)

// Print name and value of both cookies
req.cookies.foreach(cookie => println(s"${cookie.name}=${cookie.value}"))

// Get cookies by name
val id: Option[PlainCookie] = req.getCookie("ID")
val region: Option[PlainCookie] = req.getCookie("Region")

// Get cookie values by name
assert(req.getCookieValue("ID").contains("bG9zCg"))
assert(req.getCookieValue("Region").contains("SE-US"))

// Get unbaked cookies
assert(req.getHeaderValue("Cookie").contains("ID=bG9zCg; Region=SE-US"))

Response Cookies

In HttpResponse, the cookies are a collection of Set-Cookie header values. Specialized access is provided by ResponseCookies with each cookie represented as SetCookie.

import scamper.http.ResponseStatus.Registry.Ok
import scamper.http.cookies.{ ResponseCookies, SetCookie }
import scamper.http.stringToEntity

val res = Ok("There is an answer.").setCookies(
  SetCookie("ID", "bG9zCg", path = Some("/motd"), secure = true),
  SetCookie("Region", "SE-US")
)

// Print both cookies
res.cookies.foreach(println)

// Get cookies by name
val id: Option[SetCookie] = res.getCookie("ID")
val region: Option[SetCookie] = res.getCookie("Region")

// Get attributes of ID cookie
val path: String = id.flatMap(_.path).getOrElse("/")
val secure: Boolean = id.map(_.secure).getOrElse(false)

// Get cookie values by name
assert(res.getCookieValue("ID").contains("bG9zCg"))
assert(res.getCookieValue("Region").contains("SE-US"))

// Get unbaked cookies
assert(res.getHeaderValue("Set-Cookie").contains("ID=bG9zCg; Path=/motd; Secure"))
assert(res.getHeaderValues("Set-Cookie").size == 2)

Note: Each response cookie is presented in its own Set-Cookie header. Whereas getHeaderValue() retrieves the first header value only, getHeaderValues() collects all header values into a Seq[String].

Message Body

The message body is represented as an Entity, which provides access to its data via an InputStream.

Creating Body

When building a message, use an Entity factory to create the body. For example, you can create a message with text content.

import scala.language.implicitConversions

import scamper.http.Entity
import scamper.http.ResponseStatus.Registry.Ok
import scamper.http.headers.ContentType
import scamper.http.types.stringToMediaType

val body = Entity("""
<!DOCTYPE html>
<html>
  <head>
    <title>Example</title>
  </head>
  <body>
    <p>Hello, world!</p>
  </body>
</html>
""")
val res = Ok(body).setContentType("text/html; charset=utf-8")

Or, create a message using file content.

import scala.language.implicitConversions

import java.io.File
import scamper.http.Entity
import scamper.http.ResponseStatus.Registry.Ok
import scamper.http.headers.ContentType
import scamper.http.types.stringToMediaType

val body = Entity(File("./index.html"))
val res = Ok(body).setContentType("text/html; charset=utf-8")

There are implicit conversions available for common entity types, so you aren't required to create them explicitly.

import scala.language.implicitConversions

import java.io.File
import scamper.http.ResponseStatus.Registry.Ok
import scamper.http.fileToEntity
import scamper.http.headers.ContentType
import scamper.http.types.stringToMediaType

val res = Ok(File("./index.html")).setContentType("text/html; charset=utf-8")

Parsing Body

When handling an incoming message, use an appropriate BodyParser to parse the message body. There are factory methods available, such as one used for creating a parser that parses the message body to a String.

import scamper.http.{ BodyParser, HttpMessage }

// Create text body parser
given BodyParser[String] = BodyParser.string(maxLength = 1024)

def printText(message: HttpMessage): Unit =
  // Parse message as String using given parser
  val text = message.as[String]

  println(text)

And, you can implement your own. Here's one for JSON powered by Grapple:

import scala.language.implicitConversions

import grapple.json.{ Json, JsonInput, given }

import scamper.http.{ BodyParser, HttpMessage, stringToEntity }
import scamper.http.RequestMethod.Registry.Post

case class User(id: Int, name: String)

// Define how to parse JSON body to user
given BodyParser[User] with
  given JsonInput[User] = json => User(json("id"), json("name"))

  def parse(message: HttpMessage): User =
    Json.parse(message.body.data)

// Create test message with JSON body
val request = Post("/users").setBody("""{ "id": 1000, "name": "lupita" }""")

// Parse message as User
val user = request.as[User]

assert(user.id == 1000)
assert(user.name == "lupita")

Multipart Message Body

You can create a message with multipart form data, which is generally required for form submission containing file content.

import java.io.File

import scamper.http.RequestMethod.Registry.Post
import scamper.http.multipart.*

// Build multipart form data with text and file content
val song = Multipart(
  Part("title", "Form Of Intellect"),
  Part("artist", "Gang Starr"),
  Part("album", "Step In The Arena"),
  Part("media", File("/music/gang_starr/form_of_intellect.mp3"))
)

// Create request with multipart body
val req = Post("https://musiclibrary.example.com/songs").setMultipartBody(song)

And, there's a standard BodyParser for reading an incoming message with a multipart body.

import scamper.http.{ BodyParser, HttpRequest }
import scamper.http.multipart.Multipart

def save(req: HttpRequest): Unit =
  // Get parser for multipart message body
  given BodyParser[Multipart] = Multipart.getBodyParser()

  // Parse message to Multipart instance
  val song = req.as[Multipart]

  // Extracts content from parts
  val title  = song.getString("title")
  val artist = song.getString("artist")
  val album  = song.getString("album")
  val media  = song.getFile("media")

  ...

Message Attributes

Attributes are arbitrary key/value pairs associated with a message.

import scala.concurrent.duration.{ Deadline, DurationInt }
import scamper.http.{ HttpRequest, HttpResponse }
import scamper.http.RequestMethod.Registry.Get

def send(req: HttpRequest): HttpResponse = ???

val req = Get("/motd").setAttributes("send-before" -> (Deadline.now + 1.minute))

val res = req.getAttribute[Deadline]("send-before")
  .filter(_.hasTimeLeft())
  .map(_ => send(req))

Note: Attributes are not included in the transmitted message.

HTTP Authentication

The scamper.http.auth package is included for working with authentication headers.

Challenges and Credentials

When working with authentication, a Challenge is presented in the response, and Credentials in the request. Each of these has an assigned scheme, which is associated with either a token or a set of parameters.

import scamper.http.RequestMethod.Registry.Get
import scamper.http.ResponseStatus.Registry.Unauthorized
import scamper.http.auth.{ Authorization, Challenge, Credentials, WwwAuthenticate }

// Present response challenge (scheme and parameters)
val challenge = Challenge("Bearer", "realm" -> "developer")
val res = Unauthorized().setWwwAuthenticate(challenge)

// Present request credentials (scheme and token)
val credentials = Credentials("Bearer", "QWxsIEFjY2VzcyEhIQo=")
val req = Get("/dev/projects").setAuthorization(credentials)

Basic Authentication

There are subclasses defined for Basic authentication: BasicChallenge and BasicCredentials.

import scamper.http.RequestMethod.Registry.Get
import scamper.http.ResponseStatus.Registry.Unauthorized
import scamper.http.auth.{ Authorization, BasicChallenge, BasicCredentials, WwwAuthenticate }

// Provide realm and optional parameters
val challenge = BasicChallenge("admin", "title" -> "Admin Console")
val res = Unauthorized().setWwwAuthenticate(challenge)

// Provide user and password
val credentials = BasicCredentials("sa", "l3tm31n")
val req = Get("/admin/users").setAuthorization(credentials)

In addition, there are methods for Basic authentication defined in the header classes.

import scamper.http.RequestMethod.Registry.Get
import scamper.http.ResponseStatus.Registry.Unauthorized
import scamper.http.auth.{ Authorization, WwwAuthenticate }

// Provide realm and optional parameters
val res = Unauthorized().setBasic("admin", "title" -> "Admin Console")

// Access basic auth in response
printf(s"Realm: %s%n", res.basic.realm)
printf(s"Title: %s%n", res.basic.params("title"))

// Provide user and password
val req = Get("/admin/users").setBasic("sa", "l3tm3m1n")

// Access basic auth in request
printf(s"User: %s%n", req.basic.user)
printf(s"Password: %s%n", req.basic.password)

Bearer Authentication

There are subclasses defined for Bearer authentication: BearerChallenge and BearerCredentials. In addition, there are Bearer-specific methods available in the header classes.

import scamper.http.RequestMethod.Registry.Get
import scamper.http.ResponseStatus.Registry.Unauthorized
import scamper.http.auth.{ Authorization, WwwAuthenticate }

// Provide challenge parameters
val res = Unauthorized().setBearer(
  "scope" -> "user profile",
  "error" -> "invalid_token",
  "error_description" -> "Expired access token"
)

// Print optional realm parameter
res.bearer.realm.foreach(println)

// Print scope from space-delimited parameter
val scope: Seq[String] = res.bearer.scope
scope.foreach(println)

// Print error parameters
res.bearer.error.foreach(println)
res.bearer.errorDescription.foreach(println)
res.bearer.errorUri.foreach(println)

// Test for error conditions
println(res.bearer.isInvalidToken)
println(res.bearer.isInvalidRequest)
println(res.bearer.isInsufficientScope)

// Create request with Bearer token
val req = Get("/users").setBearer("R290IDUgb24gaXQhCg==")

// Access bearer auth in request
printf("Token: %s%n", req.bearer.token)

HTTP Client

Scamper provides the HttpClient for sending requests and handling the responses.

import scala.language.implicitConversions

import scamper.http.RequestMethod.Registry.Post
import scamper.http.client.HttpClient
import scamper.http.headers.ContentType
import scamper.http.types.stringToMediaType

val client = HttpClient()

val req = Post("https://localhost:8080/users")
  .setContentType("application/json")
  .setBody(s"""{ "id": 65534, "name": "nobody" }""")

// Send request and print response status
client.send(req) { res => println(res.status) }

In the previous example, an instance of HttpRequest is explicitly created and passed to the client. However, HttpClient provides methods corresponding to standard HTTP request methods that can be used instead of explicitly building the request first.

import scala.language.implicitConversions

import scamper.http.{ BodyParser, stringToUri }
import scamper.http.client.HttpClient

given BodyParser[String] = BodyParser.string()

// Create client instance
val client = HttpClient()

def messageOfTheDay: Either[Int, String] =
  client.get("http://localhost:8080/motd") {
    case res if res.isSuccessful => Right(res.as[String])
    case res                     => Left(res.statusCode)
  }

Configuring Client

You can also create a client using ClientSettings, which allows you to configure the client before creating it.

import scala.language.implicitConversions

import java.io.File
import scamper.http.{ stringToEntity, stringToUri }
import scamper.http.client.HttpClient
import scamper.http.cookies.CookieStore
import scamper.http.types.{ stringToContentCodingRange, stringToMediaRange }

// Build client from settings
val client = HttpClient.settings()
  .accept("text/plain; q=0.9", "application/json; q=0.1")
  .acceptEncoding("gzip", "deflate")
  .bufferSize(8192)
  .readTimeout(3000)
  .continueTimeout(1000)
  .cookies(CookieStore())
  .keepAlive(true)
  .trust(File("/path/to/truststore"))
  .create()

client.post("https://localhost:3000/messages", body = "Hello there!") { res =>
  assert(res.isSuccessful, s"Message not posted: ${res.statusCode}")
}

The accept setting provides a list of accepted media types, which are used to set the Accept header on each outgoing request.

The acceptEncoding provides a list of accepted content encodings, which are used to set the Accept-Encoding header on each outgoing request.

The bufferSize is the size in bytes used for the client send and receive buffers.

The readTimeout sets how many milliseconds a read on the client socket blocks before a SocketTimeoutException is thrown.

The continueTimeout specifies how many milliseconds the client waits for a 100 (Continue) response from the server before the client sends the request body. This behavior is effected only if the request includes an Expect header set to 100-Continue.

The cookie store supplied to cookies is used to store cookies included in HTTP responses. Using the cookie store, the client automatically adds the appropriate cookies to each outgoing request.

The keepAlive setting is used to enable persistence connections, which are disabled by default.

You can supply a truststore to trust, as demonstrated in the previous example. Or, if greater control is required, you can supply a trust manager instead.

import scala.language.implicitConversions

import javax.net.ssl.TrustManager
import scamper.http.stringToUri
import scamper.http.client.HttpClient

class SingleSiteTrustManager(address: String) extends TrustManager {
  // Provide TrustManager implementation
  ???
}

// Build client from settings
val client = HttpClient
  .settings()
  .readTimeout(5000)
  // Use supplied trust manager
  .trust(SingleSiteTrustManager("192.168.0.2"))
  .create()

client.get("https://192.168.0.2:3000/messages") { res =>
  res.drain(System.out, 16 * 1024)
}

Adding Request and Response Filters

To perform common operations on client requests and their responses, you can add filters to the client.

import scamper.http.Uri
import scamper.http.client.*
import scamper.http.cookies.*

val settings = HttpClient.settings()

settings.readTimeout(30 * 1000)

// Add request filter
settings.outgoing { req =>
  def findCookies(target: Uri): Seq[PlainCookie] = ???

  // Add cookies to request
  req.setCookies { findCookies(req.absoluteTarget) }
}

// Add response filter
settings.incoming { res =>
  def storeCookies(target: Uri, cookies: Seq[SetCookie]): Unit = ???

  // Store cookies from response
  storeCookies(res.absoluteTarget, res.cookies)
  res
}

// Create client
val client = settings.create()

You can add multiple request and response filters. If multiple filters are added, each is executed in the order it is added. That is, request filters are executed in order, and response filters are executed in order.

Using WebSocket Client

The client instance can also be used as a WebSocket client.

import scala.language.implicitConversions

import scamper.http.stringToUri
import scamper.http.client.HttpClient

HttpClient().websocket("ws://localhost:9090/hello") { session =>
  session.onText { message =>
    println(s"Received text message: $message")

    if message.equalsIgnoreCase("bye") then
      session.close()
  }

  session.onPing { data =>
    println(s"Received ping message.")
    session.pong(data)
  }

  session.onPong { data =>
    println(s"Received pong message.")
  }

  session.onError { err =>
    println(s"Encountered error: $err")
    err.printStackTrace()
  }

  session.onClose { statusCode =>
    println(s"WebSocket connection closed: $statusCode")
  }

  session.idleTimeout(5000)
  session.open()
  session.send("Hello, server!")
}

In the above example, the client establishes a WebSocket connection to the specified target URI. (Note use of "ws" scheme. For secure connections, use "wss" instead.)

After the client and server perform the opening handshake, a WebSocketSession is passed to the supplied handler. The handler then applies subsequent handlers for various message types along with an error handler.

It then sets the session's idle timeout. If no messages are received in any 5 second span, the session will be closed automatically.

Before the session begins reading incoming messages, it must first be opened. And, to kick things off, a simple text message is sent to the server.

See WebSocketSession in scaladoc for additional details.

HTTP Server

Scamper includes an extensible server framework. To demonstrate, let's begin with a simple example.

import scamper.http.ResponseStatus.Registry.Ok
import scamper.http.server.HttpServer

val server = HttpServer.app()
  .incoming { req => Ok("Hello, world!") }
  .create(8080)

This is as bare-bones as it gets. We create a server at port 8080 that sends a simple message back to the client for each incoming request. Although trite, it demonstrates how easy it is to get going.

We'll use the remainder of this documentation to describe what goes into creating more practical applications.

Server Application

To build a server, you begin with ServerApplication. This is a mutable structure to which you apply changes to configure the server. Once the desired settings are applied, you invoke one of several methods to create the server.

You can obtain an instance of ServerApplication from the HttpServer object.

val app = HttpServer.app()

This gives you the default application as a starting point. With this in hand, you can adjust the server settings.

app.backlogSize(50)
app.poolSize(10)
app.queueSize(25)
app.bufferSize(8192)
app.readTimeout(3000)
app.headerLimit(100)
app.keepAlive(5, 10)

The backlogSize specifies the maximum number of incoming connections that can wait for acceptance. Incoming connections that exceed this limit are refused.

The poolSize specifies the maximum number of requests processed concurrently.

The queueSize specifies the maximum number of requests permitted to wait for processing. Incoming requests that exceed this limit are sent 503 (Service Unavailable).

The bufferSize is the length in bytes of the buffer used when reading from and writing to a socket.

The readTimeout controls how many milliseconds a read from a socket blocks before it times out, whereafter 408 (Request Timeout) is sent to client.

The headerLimit sets the maximum number of request headers allowed. Incoming requests that exceed this limit are sent 431 (Request Header Fields Too Large).

The keepAlive settings enable persistent connections using the specified idle timeout seconds and max requests per connection.

Request Handlers

You define application-specific logic in instances of RequestHandler and add them to the application. The request handler accepts an HttpRequest and returns either an HttpRequest or an HttpResponse. The handler returns an HttpRequest if it doesn't satisfy the incoming request, allowing the next handler to have its turn. Otherwise, it returns an HttpResponse, and any remaining handlers are effectively ignored.

import scamper.http.RequestMethod.Registry.{ Get, Head }
import scamper.http.ResponseStatus.Registry.MethodNotAllowed
import scamper.http.headers.Allow

// Add handler to log request line and headers to stdout
app.incoming { req =>
  println(req.startLine)
  req.headers.foreach(println)
  println()
  req // Return request for next handler
}

// Add handler to allow GET and HEAD requests only
app.incoming { req =>
  req.isGet || req.isHead match
    // Return request for next handler
    case true  => req
    // Return response to end request chain
    case false => MethodNotAllowed().setAllow(Get, Head)
}

The order in which handlers are applied matters. For instance, in the example above, you'd swap the order of handlers if you wanted to log GET and HEAD requests only, and all other requests would immediately be sent 405 (Method Not Allowed) and never make it to the request logger.

And, a request handler is not restricted to returning the same request it accepted.

import scala.language.implicitConversions

import scamper.http.{ BodyParser, HttpMessage }
import scamper.http.headers.ContentLanguage
import scamper.http.types.{ LanguageTag, stringToLanguageTag }

// Translate message body from French (Oui, oui.)
app.incoming { req =>
  given BodyParser[String] with
    val parser = BodyParser.string()

    def parse(msg: HttpMessage) =
      msg.as(using parser).replaceAll("\boui\b", "yes")

  req.isPost && req.contentLanguage.contains("fr") match
    case true  => req.setBody(req.as[String]).setContentLanguage("en")
    case false => req
}

Target Handling

A handler can be added to a target path with or without a target request method.

import scamper.http.RequestMethod.Registry.Get
import scamper.http.ResponseStatus.Registry.{ Forbidden, Ok }

// Match request method and exact path
app.incoming("/about", Get) { req =>
  Ok("This server is powered by Scamper.")
}

// Match exact path and any method
app.incoming("/private") { req =>
  Forbidden()
}

And, handlers can be added using methods corresponding to the standard HTTP request methods.

import java.util.concurrent.atomic.AtomicInteger
import scala.collection.concurrent.TrieMap
import scamper.http.ResponseStatus.Registry.{ Created, Ok }
import scamper.http.headers.Location
import scamper.http.stringToUri

// Match GET requests to given path
app.get("/motd") { req =>
  Ok("She who laughs last laughs best.")
}

// Match POST requests to given path
app.post("/messages") { req =>
  val messages = TrieMap[Int, String]()
  val count    = AtomicInteger(0)

  def post(message: String): Int =
    val id = count.incrementAndGet()
    messages += id -> message
    id

  given BodyParser[String] = BodyParser.string()

  val id = post(req.as[String])
  Created().setLocation(s"/messages/$id")
}

Path Parameters

Parameters can be specified in the path and their resolved values made available to the handler. When a parameter is specified as :param, it matches a single path segment; whereas, *param matches the path segment along with any remaining segments, including intervening path separators (i.e., /).

import java.io.File
import scamper.http.ResponseStatus.Registry.{ Accepted, NotFound, Ok }
import scamper.http.server.ServerHttpRequest

// Match request method and parameterized path
app.delete("/orders/:id") { req =>
  def deleteOrder(id: Int): Boolean = ???

  // Get resolved parameter
  val id = req.params.getInt("id")

  deleteOrder(id) match
    case true  => Accepted()
    case false => NotFound()
}

// Match prefixed path for GET requests
app.get("/archive/*path") { req =>
  def findFile(path: String): Option[File] = ???

  // Get resolved parameter
  val path = req.params.getString("path")

  findFile(path).map(Ok(_)).getOrElse(NotFound())
}

There can be at most one *param, which must be specified as the the last segment in the path; however, there can be multiple :param instances specified.

import scamper.http.BodyParser
import scamper.http.ResponseStatus.Registry.Ok
import scamper.http.server.ServerHttpRequest

// Match path with two parameters
app.post("/translate/:in/to/:out") { req =>
  def translate(from: String, to: String): BodyParser[String] = ???

  val from   = req.params.getString("in")
  val to     = req.params.getString("out")
  val result = req.as(using translate(from, to))

  Ok(result)
}

Serving Files

You can mount a file server as a specialized request handler.

app.files("/app/main", File("/path/to/public"))

This adds a handler to serve files from the directory at /path/to/public. Files are located in the source directory by stripping the mount path from the request path. For example, http://localhost:8080/app/main/images/logo.png would map to /path/to/public/images/logo.png.

Aborting Response

At times, you may wish to omit a response to a particular request. On such occassions, you'd throw ResponseAborted from the request handler.

import scamper.http.headers.Referer
import scamper.http.server.ResponseAborted

// Ignore requests originating from evil site
app.incoming { req =>
  if req.referer.getHost == "www.phishing.com" then
    throw ResponseAborted("Not trusted")
  req
}

WebSocket Session

As a special case of request handling, you can define a WebSocket endpoint and manage the session. The server takes care of the opening handshake and passes the session to your handler.

app.websocket("/hello") { session =>
  // Log ping message and send corresponding pong
  session.onPing { data =>
    println("Received ping message.")
    session.pong(data)
  }

  // Log pong message
  session.onPong { data =>
    println("Received pong message.")
  }

  // Log text message and close session after sending reply
  session.onText { message =>
    println(s"Received text message: $message")
    session.send("Goodbye.")
    session.close()
  }

  // Log status code when session is closed
  session.onClose { status =>
    println(s"Session closed: $status")
  }

  // Open session to incoming messages
  session.open()

  // Send ping message
  session.ping()
}

See WebSocketSession in scaladoc for additional details.

Error Handler

You can define an ErrorHandler to handle exceptions thrown from your request handlers.

import scamper.http.ResponseStatus.Registry.{ BadRequest, InternalServerError }

app.recover {
  def isClientError(err: Throwable) =
    err.isInstanceOf[NumberFormatException]

  // Define implementation of ErrorHandler
  req => isClientError(_) match
    case true  => BadRequest("Your bad.")
    case false => InternalServerError("My bad.")
}

Router

Use Router to structure the application routes hierarchically. Router works in much the same way as ServerApplication with all routes relative to its mount path.

import scala.language.implicitConversions

import scamper.http.ResponseStatus.Registry.{ BadRequest, NotFound, Ok }
import scamper.http.headers.ContentType
import scamper.http.server.{ ParameterNotConvertible, ServerApplication, ServerHttpRequest }
import scamper.http.types.stringToMediaType

// Mount router to /api
val app = ServerApplication()

app.route("/api") { router =>
  val messages = Map(1 -> "Hello, world!", 2 -> "Goodbye, cruel world!")

  // Map handler to /api/messages
  router.get("/messages") { req =>
    Ok(messages.mkString("\n"))
  }

  // Map handler to /api/messages/:id
  router.get("/messages/:id") { req =>
    val id = req.params.getInt("id")
    messages.get(id)
     .map(Ok(_))
     .getOrElse(NotFound())
  }

  // Filter responses generated from router
  router.outgoing { res =>
    res.setContentType("text/plain")
  }

  // Recover from errors generated from router
  router.recover { req =>
    { case _: ParameterNotConvertible => BadRequest(req.target.toString) }
  }
}

Response Filters

Response filtering is performed by adding instances of ResponseFilter to the application. They are applied, in order, after a request handler generates a response.

app.outgoing { res =>
  println(res.startLine)
  res.headers.foreach(println)
  println()
  res // Return response for next filter
}

This is pretty much the same as the request logger from earlier, only instead of HttpRequest, it accepts and returns HttpResponse.

And, the filter is not restricted to returning the same response it accepts.

import scamper.http.server.ServerHttpResponse

// Gzip response body if not empty
app.outgoing { res =>
  res.body.isKnownEmpty match
    case true  => res
    case false => res.setGzipContentEncoding()
}

Lifecycle Hooks

A LifecycleHook is notified when the server is started and when it's stopped.

Here's an example of a simple hook:

import java.lang.System.currentTimeMillis as now

import scamper.http.server.{ LifecycleEvent, LifecycleHook }

class UptimeService extends LifecycleHook:
  private var startTime: Option[Long] = None
  private var stopTime: Option[Long]  = None

  // Process lifecycle event
  def process(event: LifecycleEvent) =
    event match
      case LifecycleEvent.Start(server) =>
        startTime = Some(now())

      case LifecycleEvent.Stop(server)  =>
        stopTime  = Some(now())
        println(s"Server was running for ${uptime / 1000} seconds")

  // Get server's current uptime
  def uptime =
    startTime.map { time => stopTime.getOrElse(now()) - time }.getOrElse(0L)

// Add lifecycle hook to application
app.trigger(UptimeService())

There isn't much happening inside this hook, so it's likely nothing goes wrong when it processes the events. However, if an exception were in fact thrown from the event handler, the server would simply log a warning and continue its normal operations.

If a lifecycle hook is critical to server operations, you should tag it as such by also extending CriticalService:

class CriticalUptimeService extends UptimeService, CriticalService

Server creation is halted if a critical service fails to process the start event.

More Lifecycle Hooks

A request handler is also added as lifecycle hook if it extends LifecycleHook.

class UptimeRequestHandler extends UptimeService with RequestHandler:
  def apply(req: HttpRequest) =
    Ok(s"Uptime: $uptime")

// Added as request handler and lifecycle hook
app.get("/uptime")(UptimeRequestHandler())

This behavior applies to RequestHandler, ResponseFilter, WebSocketApplication, RouterApplication, and ErrorHandler.

Securing Server

The last piece of configuration is whether to secure the server using SSL/TLS. To use a secure transport, you must supply an appropriate key and certificate.

app.secure(File("/path/to/private.key"), File("/path/to/public.crt"))

Or, if you have them tucked away in a keystore, you can supply the keystore location.

// Supply location, password, and store type (i.e., JKS, JCEKS, PCKS12)
app.secure(File("/path/to/keystore"), "s3cr3t", "pkcs12")

Creating Server

When the application has been configured, you can create the server.

val server = app.create(8080)

If the server must bind to a particular host, you can provide the host name or IP address.

val server = app.create("192.168.0.2", 8080)

An instance of HttpServer is returned, which can be used to query server details.

printf("Host: %s%n", server.host)
printf("Port: %d%n", server.port)
printf("Secure: %s%n", server.isSecure)
printf("Backlog Size: %d%n", server.backlogSize)
printf("Pool Size: %d%n", server.poolSize)
printf("Queue Size: %d%n", server.queueSize)
printf("Buffer Size: %d%n", server.bufferSize)
printf("Read Timeout: %d%n", server.readTimeout)
printf("Header Limit: %d%n", server.headerLimit)
printf("Keep-Alive: %s%n", server.keepAlive.getOrElse("disabled"))
printf("Closed: %s%n", server.isClosed)

And, ultimately, it is used to gracefully shut down the server.

server.close() // Goodbye, cruel world.

API Documentation

See scaladoc for additional details.

License

Scamper is licensed under the Apache License, Version 2. See LICENSE for more information.

losizm / scamper 34.0.0