Packages
hackney
3.2.0
4.7.2
4.7.1
4.7.0
4.6.1
4.6.0
4.5.2
4.5.1
4.5.0
4.4.5
4.4.3
4.4.2
4.4.1
4.4.0
4.3.0
4.2.3
4.2.2
4.2.1
4.2.0
4.1.0
4.0.3
4.0.2
4.0.1
4.0.0
3.2.1
3.2.0
3.1.2
3.1.1
3.1.0
3.0.3
3.0.2
3.0.1
3.0.0
retired
2.0.1
2.0.0
2.0.0-beta.1
1.25.0
1.24.1
1.24.0
1.23.0
1.22.0
1.21.0
1.20.1
1.20.0
1.19.1
1.19.0
1.18.2
1.18.1
1.18.0
1.17.4
1.17.3
1.17.2
1.17.1
1.17.0
1.16.0
1.15.2
1.15.1
1.15.0
1.14.3
1.14.2
1.14.0
1.13.0
1.12.1
1.12.0
1.11.0
1.10.1
1.10.0
1.9.0
1.8.6
1.8.5
1.8.4
1.8.3
1.8.2
1.8.0
1.7.1
1.7.0
1.6.6
retired
1.6.5
1.6.4
retired
1.6.3
1.6.2
1.6.1
1.6.0
1.5.7
1.5.6
1.5.5
1.5.4
1.5.3
1.5.2
1.5.1
1.5.0
1.4.10
1.4.8
1.4.7
1.4.6
1.4.5
1.4.4
1.4.3
1.4.2
1.4.1
1.4.0
1.3.2
1.3.1
1.3.0
1.2.0
1.1.0
1.0.6
1.0.5
1.0.2
1.0.1
0.15.2
0.15.0
0.14.3
0.14.2
0.14.1
0.14.0
0.13.1
Simple HTTP client with HTTP/1.1, HTTP/2, and HTTP/3 support
Security advisory:
This version has known vulnerabilities.
View advisories
Current section
Files
Jump to
Current section
Files
src/hackney_h3.erl
%%% -*- erlang -*-
%%%
%%% This file is part of hackney released under the Apache 2 license.
%%% See the NOTICE for more information.
%%%
%%% Copyright (c) 2024-2026 Benoit Chesneau
%%%
%%% @doc HTTP/3 support for hackney.
%%%
%%% This module provides HTTP/3 functionality using pure Erlang QUIC.
%%% It handles stream management, header encoding, and request/response
%%% handling for HTTP/3 connections over QUIC.
%%%
%%% == Usage ==
%%%
%%% ```
%%% %% Make a simple GET request
%%% {ok, Status, Headers, Body} = hackney_h3:request(get, "https://cloudflare.com/")
%%%
%%% %% Make a request with options
%%% {ok, Status, Headers, Body} = hackney_h3:request(get, "https://example.com/",
%%% [{<<"user-agent">>, <<"hackney/2.0">>}], <<>>, #{timeout => 30000})
%%% '''
%%%
-module(hackney_h3).
-include("hackney_lib.hrl").
-export([
%% High-level API
is_available/0,
request/2, request/3, request/4, request/5,
connect/2, connect/3,
await_response/2,
%% Request operations (used by hackney_conn)
send_request/6,
send_request_headers/5,
send_body_chunk/4,
finish_send_body/3,
%% Stream management
new_stream/1,
close_stream/2,
get_stream_state/2,
update_stream_state/3,
%% Response parsing
parse_response_headers/1,
%% Connection close
close/1,
close/2
]).
-type h3_conn() :: reference().
-type stream_id() :: non_neg_integer().
-type method() :: get | post | put | delete | head | options | patch | atom() | binary().
-type url() :: binary() | string().
-type headers() :: [{binary(), binary()}].
-type body() :: binary() | iodata().
-type response() :: {ok, integer(), headers(), binary()} | {error, term()}.
-type stream_state() :: waiting_headers | {receiving_body, integer(), headers(), binary()} | done.
-type streams_map() :: #{stream_id() => {term(), stream_state()}}.
-export_type([h3_conn/0, stream_id/0, stream_state/0, streams_map/0]).
%%====================================================================
%% High-level API
%%====================================================================
%% @doc Check if HTTP/3/QUIC support is available.
%% Always returns true as pure Erlang implementation is always available.
-spec is_available() -> true.
is_available() -> true.
%% @doc Make an HTTP/3 request with default options.
-spec request(method(), url()) -> response().
request(Method, Url) ->
request(Method, Url, [], <<>>, #{}).
%% @doc Make an HTTP/3 request with headers.
-spec request(method(), url(), headers()) -> response().
request(Method, Url, Headers) ->
request(Method, Url, Headers, <<>>, #{}).
%% @doc Make an HTTP/3 request with headers and body.
-spec request(method(), url(), headers(), body()) -> response().
request(Method, Url, Headers, Body) ->
request(Method, Url, Headers, Body, #{}).
%% @doc Make an HTTP/3 request with all options.
%%
%% Options:
%% - timeout: Request timeout in milliseconds (default: 30000)
%% - recv_timeout: Response receive timeout (default: 30000)
%% - follow_redirect: boolean to follow redirects (default: false)
%% - max_redirect: maximum number of redirects to follow (default: 5)
%%
-spec request(method(), url(), headers(), body(), map()) -> response().
request(Method, Url, Headers, Body, Opts) ->
FollowRedirect = maps:get(follow_redirect, Opts, false),
MaxRedirect = maps:get(max_redirect, Opts, 5),
do_request_with_redirect(Method, Url, Headers, Body, Opts, FollowRedirect, MaxRedirect, 0).
%% @private Handle request with redirect following
do_request_with_redirect(Method, Url, Headers, Body, Opts, FollowRedirect, MaxRedirect, RedirectCount) ->
#hackney_url{host = Host, port = Port, path = Path, qs = Qs} = hackney_url:parse_url(Url),
HostBin = list_to_binary(Host),
PathBin = case Path of
<<>> -> <<"/">>;
_ -> Path
end,
%% Include query string if present
FullPath = case Qs of
<<>> -> PathBin;
_ -> <<PathBin/binary, "?", Qs/binary>>
end,
Timeout = maps:get(timeout, Opts, 30000),
case connect(HostBin, Port, Opts) of
{ok, Conn} ->
try
case do_request(Conn, Method, HostBin, FullPath, Headers, Body, Timeout) of
{ok, Status, RespHeaders, RespBody} when Status >= 301, Status =< 308 ->
%% Redirect response
handle_redirect(Status, RespHeaders, RespBody, Method, Url, Headers, Body, Opts,
FollowRedirect, MaxRedirect, RedirectCount);
Other ->
Other
end
after
close(Conn)
end;
{error, _} = Error ->
Error
end.
%% @private Handle redirect response
handle_redirect(Status, RespHeaders, RespBody, _Method, _Url, _Headers, _Body, _Opts, false, _MaxRedirect, _RedirectCount) ->
%% follow_redirect is false, return redirect response as-is
{ok, Status, RespHeaders, RespBody};
handle_redirect(_Status, _RespHeaders, _RespBody, _Method, _Url, _Headers, _Body, _Opts, true, MaxRedirect, RedirectCount)
when RedirectCount >= MaxRedirect ->
{error, {max_redirect, RedirectCount}};
handle_redirect(Status, RespHeaders, _RespBody, Method, Url, Headers, Body, Opts, true, MaxRedirect, RedirectCount) ->
case get_redirect_location(RespHeaders) of
{ok, Location} ->
%% Resolve Location to absolute URL
NewUrl = resolve_redirect_url(Location, Url),
%% Determine new method based on status code
NewMethod = redirect_method(Status, Method),
%% Clear body for POST->GET redirects
NewBody = case NewMethod of
get when Method =/= get -> <<>>;
_ -> Body
end,
%% Follow the redirect
do_request_with_redirect(NewMethod, NewUrl, Headers, NewBody, Opts,
true, MaxRedirect, RedirectCount + 1);
{error, no_location} ->
%% No Location header, return as-is
{ok, Status, RespHeaders, <<>>}
end.
%% @private Get Location header from response
get_redirect_location(Headers) ->
case lists:keyfind(<<"location">>, 1, Headers) of
{_, Location} -> {ok, Location};
false ->
%% Try case-insensitive search
case lists:keyfind(<<"Location">>, 1, Headers) of
{_, Location} -> {ok, Location};
false -> {error, no_location}
end
end.
%% @private Resolve redirect URL relative to original URL
resolve_redirect_url(Location, OriginalUrl) when is_binary(Location) ->
case Location of
<<"http://", _/binary>> -> Location;
<<"https://", _/binary>> -> Location;
<<"/", _/binary>> ->
%% Absolute path - use original scheme, host, port
#hackney_url{scheme = Scheme, host = Host, port = Port} = hackney_url:parse_url(OriginalUrl),
SchemeBin = atom_to_binary(Scheme),
HostBin = list_to_binary(Host),
case {Scheme, Port} of
{https, 443} -> <<SchemeBin/binary, "://", HostBin/binary, Location/binary>>;
{http, 80} -> <<SchemeBin/binary, "://", HostBin/binary, Location/binary>>;
_ ->
PortBin = integer_to_binary(Port),
<<SchemeBin/binary, "://", HostBin/binary, ":", PortBin/binary, Location/binary>>
end;
_ ->
%% Relative path
#hackney_url{scheme = Scheme, host = Host, port = Port, path = BasePath} = hackney_url:parse_url(OriginalUrl),
SchemeBin = atom_to_binary(Scheme),
HostBin = list_to_binary(Host),
%% Get directory of base path
BaseDir = case binary:split(BasePath, <<"/">>, [global, trim]) of
[] -> <<"/">>;
Parts ->
DirParts = lists:droplast(Parts),
case DirParts of
[] -> <<"/">>;
_ -> iolist_to_binary(["/", lists:join("/", DirParts), "/"])
end
end,
FullPath = <<BaseDir/binary, Location/binary>>,
case {Scheme, Port} of
{https, 443} -> <<SchemeBin/binary, "://", HostBin/binary, FullPath/binary>>;
{http, 80} -> <<SchemeBin/binary, "://", HostBin/binary, FullPath/binary>>;
_ ->
PortBin = integer_to_binary(Port),
<<SchemeBin/binary, "://", HostBin/binary, ":", PortBin/binary, FullPath/binary>>
end
end.
%% @private Determine HTTP method after redirect
%% 301, 302, 303: POST/PUT/DELETE -> GET (de facto standard)
%% 307, 308: Preserve original method
redirect_method(Status, Method) when Status =:= 301; Status =:= 302; Status =:= 303 ->
case Method of
get -> get;
head -> head;
_ -> get %% POST, PUT, DELETE, etc. become GET
end;
redirect_method(_Status, Method) ->
%% 307, 308 preserve method
Method.
%% @doc Connect to an HTTP/3 server.
-spec connect(binary() | string(), inet:port_number()) -> {ok, reference()} | {error, term()}.
connect(Host, Port) ->
connect(Host, Port, #{}).
%% @doc Connect to an HTTP/3 server with options.
%% lsquic handles its own UDP socket creation and DNS resolution.
-spec connect(binary() | string(), inet:port_number(), map()) -> {ok, reference()} | {error, term()}.
connect(Host, Port, Opts) when is_list(Host) ->
connect(list_to_binary(Host), Port, Opts);
connect(Host, Port, Opts) when is_binary(Host) ->
Timeout = maps:get(timeout, Opts, 30000),
case hackney_quic:connect(Host, Port, Opts, self()) of
{ok, ConnRef} ->
wait_connected(ConnRef, Timeout, erlang:monotonic_time(millisecond));
{error, _} = Error ->
Error
end.
%% @doc Wait for an HTTP/3 response.
-spec await_response(reference(), non_neg_integer()) ->
{ok, integer(), headers(), binary()} | {error, term()}.
await_response(ConnRef, StreamId) ->
await_response_loop(ConnRef, StreamId, 30000, undefined, [], <<>>).
%%====================================================================
%% Request operations (used by hackney_conn)
%%====================================================================
%% @doc Send a complete HTTP/3 request (headers + body).
%% Returns {ok, StreamId, UpdatedStreams} or {error, Reason}.
-spec send_request(h3_conn(), method(), binary(), binary(), headers(), binary()) ->
{ok, stream_id(), streams_map()} | {error, term()}.
send_request(ConnRef, Method, Host, Path, Headers, Body) ->
case hackney_quic:open_stream(ConnRef) of
{ok, StreamId} ->
AllHeaders = build_request_headers(Method, Host, Path, Headers),
HasBody = Body =/= <<>> andalso Body =/= [],
Fin = not HasBody,
case hackney_quic:send_headers(ConnRef, StreamId, AllHeaders, Fin) of
ok when HasBody ->
case hackney_quic:send_data(ConnRef, StreamId, Body, true) of
ok ->
{ok, StreamId, #{StreamId => {undefined, waiting_headers}}};
{error, _} = Error ->
Error
end;
ok ->
{ok, StreamId, #{StreamId => {undefined, waiting_headers}}};
{error, _} = Error ->
Error
end;
{error, _} = Error ->
Error
end.
%% @doc Send HTTP/3 request headers only (for streaming body).
%% Returns {ok, StreamId, UpdatedStreams} or {error, Reason}.
-spec send_request_headers(h3_conn(), method(), binary(), binary(), headers()) ->
{ok, stream_id(), streams_map()} | {error, term()}.
send_request_headers(ConnRef, Method, Host, Path, Headers) ->
case hackney_quic:open_stream(ConnRef) of
{ok, StreamId} ->
AllHeaders = build_request_headers(Method, Host, Path, Headers),
case hackney_quic:send_headers(ConnRef, StreamId, AllHeaders, false) of
ok ->
{ok, StreamId, #{StreamId => {undefined, waiting_headers}}};
{error, _} = Error ->
Error
end;
{error, _} = Error ->
Error
end.
%% @doc Send a chunk of body data on a stream.
-spec send_body_chunk(h3_conn(), stream_id(), binary(), boolean()) ->
ok | {error, term()}.
send_body_chunk(ConnRef, StreamId, Data, Fin) ->
hackney_quic:send_data(ConnRef, StreamId, Data, Fin).
%% @doc Finish sending body (close stream for writing).
-spec finish_send_body(h3_conn(), stream_id(), streams_map()) ->
{ok, streams_map()} | {error, term()}.
finish_send_body(ConnRef, StreamId, Streams) ->
case hackney_quic:send_data(ConnRef, StreamId, <<>>, true) of
ok ->
{ok, Streams};
{error, _} = Error ->
Error
end.
%%====================================================================
%% Stream management
%%====================================================================
%% @doc Open a new stream for a request.
-spec new_stream(h3_conn()) -> {ok, stream_id()} | {error, term()}.
new_stream(ConnRef) ->
hackney_quic:open_stream(ConnRef).
%% @doc Close a specific stream.
-spec close_stream(h3_conn(), stream_id()) -> ok.
close_stream(_ConnRef, _StreamId) ->
%% HTTP/3 streams are closed when fin is sent/received
ok.
%% @doc Get the state of a specific stream.
-spec get_stream_state(stream_id(), streams_map()) ->
{ok, {term(), stream_state()}} | {error, not_found}.
get_stream_state(StreamId, Streams) ->
case maps:find(StreamId, Streams) of
{ok, State} -> {ok, State};
error -> {error, not_found}
end.
%% @doc Update the state of a stream.
-spec update_stream_state(stream_id(), {term(), stream_state()}, streams_map()) ->
streams_map().
update_stream_state(StreamId, State, Streams) ->
maps:put(StreamId, State, Streams).
%%====================================================================
%% Response parsing
%%====================================================================
%% @doc Parse response headers from a QUIC stream_headers event.
%% Returns {ok, Status, ResponseHeaders} or {error, Reason}.
-spec parse_response_headers(headers()) -> {ok, integer(), headers()} | {error, term()}.
parse_response_headers(Headers) ->
case get_status_from_headers(Headers) of
{ok, Status} ->
RespHeaders = filter_pseudo_headers(Headers),
{ok, Status, RespHeaders};
{error, _} = Error ->
Error
end.
%%====================================================================
%% Connection close
%%====================================================================
%% @doc Close the HTTP/3 connection.
-spec close(h3_conn()) -> ok.
close(ConnRef) ->
close(ConnRef, normal).
%% @doc Close the HTTP/3 connection with a reason.
-spec close(h3_conn(), term()) -> ok.
close(ConnRef, Reason) ->
hackney_quic:close(ConnRef, Reason).
%%====================================================================
%% Internal functions
%%====================================================================
%% Drive QUIC event loop until connected
wait_connected(ConnRef, Timeout, StartTime) ->
Elapsed = erlang:monotonic_time(millisecond) - StartTime,
Remaining = max(0, Timeout - Elapsed),
receive
{select, _Resource, _Ref, ready_input} ->
_ = hackney_quic:process(ConnRef),
wait_connected(ConnRef, Timeout, StartTime);
{quic, ConnRef, {connected, _Info}} ->
{ok, ConnRef};
{quic, ConnRef, {closed, Reason}} ->
{error, {connection_closed, Reason}};
{quic, ConnRef, {transport_error, Code, Msg}} ->
{error, {transport_error, Code, Msg}};
{quic, ConnRef, {settings, _Settings}} ->
%% HTTP/3 SETTINGS frame - ignore and continue waiting
wait_connected(ConnRef, Timeout, StartTime)
after Remaining ->
hackney_quic:close(ConnRef, timeout),
{error, timeout}
end.
do_request(ConnRef, Method, Host, Path, Headers, Body, Timeout) ->
case hackney_quic:open_stream(ConnRef) of
{ok, StreamId} ->
AllHeaders = build_request_headers(Method, Host, Path, Headers),
HasBody = Body =/= <<>> andalso Body =/= [],
Fin = not HasBody,
case hackney_quic:send_headers(ConnRef, StreamId, AllHeaders, Fin) of
ok when HasBody ->
case hackney_quic:send_data(ConnRef, StreamId, Body, true) of
ok ->
await_response_loop(ConnRef, StreamId, Timeout, undefined, [], <<>>);
{error, _} = Error ->
Error
end;
ok ->
await_response_loop(ConnRef, StreamId, Timeout, undefined, [], <<>>);
{error, _} = Error ->
Error
end;
{error, _} = Error ->
Error
end.
%% @private Wait for HTTP/3 response.
%% Timeout is per-chunk - resets each time data is received.
%% This allows large responses to complete as long as data keeps flowing.
%% Note: For very large responses, use hackney_conn with streaming mode instead.
await_response_loop(ConnRef, StreamId, Timeout, Status, Headers, AccBody) ->
receive
{select, _Resource, _Ref, ready_input} ->
_ = hackney_quic:process(ConnRef),
await_response_loop(ConnRef, StreamId, Timeout, Status, Headers, AccBody);
{quic, ConnRef, {stream_headers, StreamId, RespHeaders, Fin}} ->
NewStatus = get_status(RespHeaders),
FilteredHeaders = filter_pseudo_headers(RespHeaders),
case Fin of
true ->
%% Headers with Fin=true means no body (e.g., HEAD response, 204, 304)
{ok, NewStatus, FilteredHeaders, AccBody};
false ->
await_response_loop(ConnRef, StreamId, Timeout, NewStatus, FilteredHeaders, AccBody)
end;
{quic, ConnRef, {stream_data, StreamId, Data, Fin}} ->
NewBody = <<AccBody/binary, Data/binary>>,
case Fin of
true ->
{ok, Status, Headers, NewBody};
false ->
await_response_loop(ConnRef, StreamId, Timeout, Status, Headers, NewBody)
end;
{quic, ConnRef, {stream_reset, StreamId, _ErrorCode}} ->
{error, stream_reset};
{quic, ConnRef, {closed, Reason}} ->
{error, {connection_closed, Reason}};
{quic, ConnRef, {settings, _Settings}} ->
%% HTTP/3 SETTINGS frame - ignore and continue waiting
await_response_loop(ConnRef, StreamId, Timeout, Status, Headers, AccBody);
{quic, ConnRef, {goaway, _StreamId2}} ->
%% GOAWAY frame - connection is shutting down
{error, goaway}
after Timeout ->
{error, timeout}
end.
%% @private Build HTTP/3 request headers including pseudo-headers.
-spec build_request_headers(method(), binary(), binary(), headers()) -> headers().
build_request_headers(Method, Host, Path, Headers) ->
MethodBin = method_to_binary(Method),
PseudoHeaders = [
{<<":method">>, MethodBin},
{<<":path">>, Path},
{<<":scheme">>, <<"https">>},
{<<":authority">>, Host}
],
PseudoHeaders ++ normalize_headers(Headers).
%% @private Convert HTTP method to binary.
-spec method_to_binary(method()) -> binary().
method_to_binary(get) -> <<"GET">>;
method_to_binary(post) -> <<"POST">>;
method_to_binary(put) -> <<"PUT">>;
method_to_binary(delete) -> <<"DELETE">>;
method_to_binary(head) -> <<"HEAD">>;
method_to_binary(options) -> <<"OPTIONS">>;
method_to_binary(patch) -> <<"PATCH">>;
method_to_binary(Method) when is_atom(Method) ->
string:uppercase(atom_to_binary(Method));
method_to_binary(Method) when is_binary(Method) ->
Method.
%% @private Normalize headers to binary key-value pairs.
-spec normalize_headers(headers()) -> headers().
normalize_headers(Headers) ->
[{ensure_binary(K), ensure_binary(V)} || {K, V} <- Headers].
%% @private Ensure value is binary.
-spec ensure_binary(term()) -> binary().
ensure_binary(B) when is_binary(B) -> B;
ensure_binary(L) when is_list(L) -> list_to_binary(L);
ensure_binary(A) when is_atom(A) -> atom_to_binary(A).
%% @private Extract status from HTTP/3 response headers (returns integer or 0).
-spec get_status(headers()) -> integer().
get_status(Headers) ->
case lists:keyfind(<<":status">>, 1, Headers) of
{_, StatusBin} ->
binary_to_integer(StatusBin);
false ->
0
end.
%% @private Extract status from HTTP/3 response headers (returns ok/error tuple).
-spec get_status_from_headers(headers()) -> {ok, integer()} | {error, no_status | {invalid_status, binary()}}.
get_status_from_headers(Headers) ->
case lists:keyfind(<<":status">>, 1, Headers) of
{_, StatusBin} ->
try
{ok, binary_to_integer(StatusBin)}
catch
error:badarg -> {error, {invalid_status, StatusBin}}
end;
false ->
{error, no_status}
end.
%% @private Filter out pseudo-headers from response.
-spec filter_pseudo_headers(headers()) -> headers().
filter_pseudo_headers(Headers) ->
[{K, V} || {K, V} <- Headers, not is_pseudo_header(K)].
%% @private Check if header is a pseudo-header (starts with ':').
-spec is_pseudo_header(binary()) -> boolean().
is_pseudo_header(<<$:, _/binary>>) -> true;
is_pseudo_header(_) -> false.