aboutsummaryrefslogtreecommitdiffstats
path: root/server/resty/session/storage/redis.lua
blob: 3de04722ec583a5c22a29d5ea01026fbf409c27a (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
local setmetatable  = setmetatable
local tonumber      = tonumber
local type          = type
local reverse       = string.reverse
local gmatch        = string.gmatch
local find          = string.find
local byte          = string.byte
local sub           = string.sub
local concat        = table.concat
local sleep         = ngx.sleep
local null          = ngx.null
local var           = ngx.var

local LB = byte("[")
local RB = byte("]")

local function parse_cluster_nodes(nodes)
    if not nodes or nodes == "" then
        return nil
    end

    if type(nodes) == "table" then
        return nodes
    end

    local addrs
    local i
    for node in gmatch(nodes, "%S+") do
        local ip   = node
        local port = 6379
        local pos = find(reverse(ip), ":", 2, true)
        if pos then
            local p = tonumber(sub(ip, -pos + 1), 10)
            if p >= 1 and p <= 65535 then
                local addr = sub(ip, 1, -pos - 1)
                if find(addr, ":", 1, true) then
                    if byte(addr, -1) == RB then
                        ip   = addr
                        port = p
                    end

                else
                    ip   = addr
                    port = p
                end
            end
        end

        if byte(ip, 1, 1) == LB then
            ip = sub(ip, 2)
        end

        if byte(ip, -1) == RB then
            ip = sub(ip, 1, -2)
        end

        if not addrs then
            i = 1
            addrs = {{
              ip   = ip,
              port = port,
            }}
        else
            i = i + 1
            addrs[i] = {
                ip   = ip,
                port = port,
            }
        end
    end

    if not i then
        return
    end

    return addrs
end

local redis_single = require "resty.redis"
local redis_cluster
do
    local pcall   = pcall
    local require = require
    local ok
    ok, redis_cluster = pcall(require, "resty.rediscluster")
    if not ok then
        ok, redis_cluster = pcall(require, "rediscluster")
        if not ok then
            redis_cluster = nil
        end
    end
end

local UNLOCK = [[
if redis.call("GET", KEYS[1]) == ARGV[1] then
    return redis.call("DEL", KEYS[1])
else
    return 0
end
]]

local function enabled(value)
    if value == nil then return nil end
    return value == true or (value == "1" or value == "true" or value == "on")
end

local function ifnil(value, default)
    if value == nil then
        return default
    end

    return enabled(value)
end

local defaults = {
    prefix          = var.session_redis_prefix                         or "sessions",
    socket          = var.session_redis_socket,
    host            = var.session_redis_host                           or "127.0.0.1",
    username        = var.session_redis_username,
    password        = var.session_redis_password                       or var.session_redis_auth,
    server_name     = var.session_redis_server_name,
    ssl             = enabled(var.session_redis_ssl)                   or false,
    ssl_verify      = enabled(var.session_redis_ssl_verify)            or false,
    uselocking      = enabled(var.session_redis_uselocking             or true),
    port            = tonumber(var.session_redis_port,            10)  or 6379,
    database        = tonumber(var.session_redis_database,        10)  or 0,
    connect_timeout = tonumber(var.session_redis_connect_timeout, 10),
    read_timeout    = tonumber(var.session_redis_read_timeout,    10),
    send_timeout    = tonumber(var.session_redis_send_timeout,    10),
    spinlockwait    = tonumber(var.session_redis_spinlockwait,    10)  or 150,
    maxlockwait     = tonumber(var.session_redis_maxlockwait,     10)  or 30,
    pool = {
        name        = var.session_redis_pool_name,
        timeout     = tonumber(var.session_redis_pool_timeout,    10),
        size        = tonumber(var.session_redis_pool_size,       10),
        backlog     = tonumber(var.session_redis_pool_backlog,    10),
    },
}


if redis_cluster then
    defaults.cluster = {
        name            = var.session_redis_cluster_name,
        dict            = var.session_redis_cluster_dict,
        maxredirections = tonumber(var.session_redis_cluster_maxredirections, 10),
        nodes           = parse_cluster_nodes(var.session_redis_cluster_nodes),
    }
end

local storage = {}

storage.__index = storage

function storage.new(session)
    local config  = session.redis         or defaults
    local pool    = config.pool           or defaults.pool
    local cluster = config.cluster        or defaults.cluster
    local locking = ifnil(config.uselocking, defaults.uselocking)

    local self = {
        prefix          = config.prefix                     or defaults.prefix,
        uselocking      = locking,
        spinlockwait    = tonumber(config.spinlockwait, 10) or defaults.spinlockwait,
        maxlockwait     = tonumber(config.maxlockwait,  10) or defaults.maxlockwait,
    }

    local username = config.username or defaults.username
    if username == "" then
      username = nil
    end
    local password = config.password or config.auth or defaults.password
    if password == "" then
        password = nil
    end

    local connect_timeout = tonumber(config.connect_timeout, 10) or defaults.connect_timeout

    local cluster_nodes
    if redis_cluster then
        cluster_nodes = parse_cluster_nodes(cluster.nodes or defaults.cluster.nodes)
    end

    local connect_opts = {
        pool             = pool.name                         or defaults.pool.name,
        pool_size        = tonumber(pool.size,           10) or defaults.pool.size,
        backlog          = tonumber(pool.backlog,        10) or defaults.pool.backlog,
        server_name      = config.server_name                or defaults.server_name,
        ssl              = ifnil(config.ssl,                    defaults.ssl),
        ssl_verify       = ifnil(config.ssl_verify,             defaults.ssl_verify),
    }

    if cluster_nodes then
        self.redis = redis_cluster:new({
            name               = cluster.name                          or defaults.cluster.name,
            dict_name          = cluster.dict                          or defaults.cluster.dict,
            username           = var.session_redis_username,
            password           = var.session_redis_password            or defaults.password,
            connection_timout  = connect_timeout, -- typo in library
            connection_timeout = connect_timeout,
            keepalive_timeout  = tonumber(pool.timeout,            10) or defaults.pool.timeout,
            keepalive_cons     = tonumber(pool.size,               10) or defaults.pool.size,
            max_redirection    = tonumber(cluster.maxredirections, 10) or defaults.cluster.maxredirections,
            serv_list          = cluster_nodes,
            connect_opts       = connect_opts,
        })
        self.cluster = true

    else
        local redis = redis_single:new()

        if redis.set_timeouts then
            local send_timeout = tonumber(config.send_timeout, 10) or defaults.send_timeout
            local read_timeout = tonumber(config.read_timeout, 10) or defaults.read_timeout

            if connect_timeout then
                if send_timeout and read_timeout then
                    redis:set_timeouts(connect_timeout, send_timeout, read_timeout)
                else
                    redis:set_timeout(connect_timeout)
                end
            end

        elseif redis.set_timeout and connect_timeout then
            redis:set_timeout(connect_timeout)
        end

        self.redis           = redis
        self.username        = username
        self.password        = password
        self.database        = tonumber(config.database,     10) or defaults.database
        self.pool_timeout    = tonumber(pool.timeout,        10) or defaults.pool.timeout
        self.connect_opts    = connect_opts

        local socket = config.socket or defaults.socket
        if socket and socket ~= "" then
            self.socket = socket
        else
            self.host = config.host or defaults.host
            self.port = config.port or defaults.port
        end
    end

    return setmetatable(self, storage)
end

function storage:connect()
    if self.cluster then
        return true -- cluster handles this on its own
    end

    local ok, err
    if self.socket then
        ok, err = self.redis:connect(self.socket, self.connect_opts)
    else
        ok, err = self.redis:connect(self.host, self.port, self.connect_opts)
    end

    if not ok then
        return nil, err
    end

    if self.password and self.redis:get_reused_times() == 0 then
        -- usernames are supported only on Redis 6+, so use new AUTH form only when absolutely necessary
        if self.username then
            ok, err = self.redis:auth(self.username, self.password)
        else
            ok, err = self.redis:auth(self.password)
        end
        if not ok then
            self.redis:close()
            return nil, err
        end
    end

    if self.database ~= 0 then
        ok, err = self.redis:select(self.database)
        if not ok then
            self.redis:close()
        end
    end

    return ok, err
end

function storage:set_keepalive()
    if self.cluster then
        return true -- cluster handles this on its own
    end

    return self.redis:set_keepalive(self.pool_timeout)
end

function storage:key(id)
    return concat({ self.prefix, id }, ":" )
end

function storage:lock(key)
    if not self.uselocking or self.locked then
        return true
    end

    if not self.token then
        self.token = var.request_id
    end

    local lock_key = concat({ key, "lock" }, "." )
    local lock_ttl = self.maxlockwait + 1
    local attempts = (1000 / self.spinlockwait) * self.maxlockwait
    local waittime = self.spinlockwait / 1000

    for _ = 1, attempts do
        local ok = self.redis:set(lock_key, self.token, "EX", lock_ttl, "NX")
        if ok ~= null then
            self.locked = true
            return true
        end

        sleep(waittime)
    end

    return false, "unable to acquire a session lock"
end

function storage:unlock(key)
    if not self.uselocking or not self.locked then
        return
    end

    local lock_key = concat({ key, "lock" }, "." )

    self.redis:eval(UNLOCK, 1, lock_key, self.token)
    self.locked = nil
end

function storage:get(key)
    local data, err = self.redis:get(key)
    if not data then
        return nil, err
    end

    if data == null then
        return nil
    end

    return data
end

function storage:set(key, data, lifetime)
    return self.redis:setex(key, lifetime, data)
end

function storage:expire(key, lifetime)
    return self.redis:expire(key, lifetime)
end

function storage:delete(key)
    return self.redis:del(key)
end

function storage:open(id, keep_lock)
    local ok, err = self:connect()
    if not ok then
        return nil, err
    end

    local key = self:key(id)

    ok, err = self:lock(key)
    if not ok then
        self:set_keepalive()
        return nil, err
    end

    local data
    data, err = self:get(key)

    if err or not data or not keep_lock then
        self:unlock(key)
    end
    self:set_keepalive()

    return data, err
end

function storage:start(id)
    if not self.uselocking or not self.locked then
        return true
    end

    local ok, err = self:connect()
    if not ok then
        return nil, err
    end

    ok, err = self:lock(self:key(id))

    self:set_keepalive()

    return ok, err
end

function storage:save(id, ttl, data, close)
    local ok, err = self:connect()
    if not ok then
        return nil, err
    end

    local key = self:key(id)

    ok, err = self:set(key, data, ttl)

    if close then
        self:unlock(key)
    end

    self:set_keepalive()

    if not ok then
        return nil, err
    end

    return true
end

function storage:close(id)
    if not self.uselocking or not self.locked then
        return true
    end

    local ok, err = self:connect()
    if not ok then
        return nil, err
    end

    local key = self:key(id)

    self:unlock(key)
    self:set_keepalive()

    return true
end

function storage:destroy(id)
    local ok, err = self:connect()
    if not ok then
        return nil, err
    end

    local key = self:key(id)

    ok, err = self:delete(key)

    self:unlock(key)
    self:set_keepalive()

    return ok, err
end

function storage:ttl(id, ttl, close)
    local ok, err = self:connect()
    if not ok then
        return nil, err
    end

    local key = self:key(id)

    ok, err = self:expire(key, ttl)

    if close then
        self:unlock(key)
    end

    self:set_keepalive()

    return ok, err
end

return storage