- check session matches HTTP host / instance AND session is not anonymous
- rotate token by async job and push new tokens to active sessions
- require Bearer token to authorize requests / send push messages
- check sessionid cookie when client opens a websocket connection
Most easy installation is the one comming with the container based development system.
To install EGroupwares push server for a regular webserver running on the host follow these instructions:
cd /path/to/egroupware
git clone [email protected]:EGroupware/swoolpush.git
cd swoolpush
docker run --rm -it -v $(pwd):/var/www -v /var/lib/php/sessions:/var/lib/php/sessions -p9501:9501 phpswoole/swoole
You need to adapt the session-directory, if you are not using Ubuntu.
Then visit setup and install swoolpush app (no run rights for users neccessary).
You need to proxy the /push URL into the container, eg. for Apache
<Location /egroupware/push>
Order allow,deny
Allow from all
RewriteEngine On
RewriteCond %{HTTP:Upgrade} =websocket [NC]
RewriteRule /var/www/(.*) ws://localhost:9501/$1 [P,L]
RewriteCond %{HTTP:Upgrade} !=websocket [NC]
RewriteRule /var/www/(.*) http://localhost:9501/$1 [P,L]
ProxyPreserveHost On
ProxyPassReverse http://localhost:9501
</Location>
You need to change the above /var/www, in case you use a different document root.
eg. for Nginx
___location /egroupware/push {
proxy_http_version 1.1;
proxy_set_header Host $http_host;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "Upgrade";
proxy_pass http://localhost:9501;
}
You can get a token from the server output, when a client connects.
curl -i -H 'Content-Type: application/json' -X POST 'https://boulder.egroupware.org/egroupware/push?token=<token>' \
-d '{"type":"message","data":{"message":"Hi ;)","type":"notice"}}'
Remember you need to restart the Docker container, when you make changes to the server!