/*

 * Copyright (c) 2015, 2018, Oracle and/or its affiliates. All rights reserved.

 * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.

 *

 * This code is free software; you can redistribute it and/or modify it

 * under the terms of the GNU General Public License version 2 only, as

 * published by the Free Software Foundation.  Oracle designates this

 * particular file as subject to the "Classpath" exception as provided

 * by Oracle in the LICENSE file that accompanied this code.

 *

 * This code is distributed in the hope that it will be useful, but WITHOUT

 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or

 * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License

 * version 2 for more details (a copy is included in the LICENSE file that

 * accompanied this code).

 *

 * You should have received a copy of the GNU General Public License version

 * 2 along with this work; if not, write to the Free Software Foundation,

 * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.

 *

 * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA

 * or visit www.oracle.com if you need additional information or have any

 * questions.

 */

package java.net.http;

import java.io.IOException;

import java.net.Authenticator;

import java.net.CookieHandler;

import java.net.InetSocketAddress;

import java.net.Proxy;

import java.net.ProxySelector;

import java.net.URLPermission;

import java.security.AccessController;

import java.security.PrivilegedAction;

import java.time.Duration;

import java.util.Optional;

import java.util.concurrent.CompletableFuture;

import java.util.concurrent.Executor;

import java.util.concurrent.Executors;

import java.util.concurrent.ThreadFactory;

import javax.net.ssl.SSLContext;

import javax.net.ssl.SSLParameters;

import java.net.http.HttpResponse.BodyHandler;

import java.net.http.HttpResponse.PushPromiseHandler;

import jdk.internal.net.http.HttpClientBuilderImpl;

/**

 * An HTTP Client.

 *

 * <p> An {@code HttpClient} can be used to send {@linkplain HttpRequest

 * requests} and retrieve their {@linkplain HttpResponse responses}. An {@code

 * HttpClient} is created through a {@link HttpClient#newBuilder() builder}. The

 * builder can be used to configure per-client state, like: the preferred

 * protocol version ( HTTP/1.1 or HTTP/2 ), whether to follow redirects, a

 * proxy, an authenticator, etc. Once built, an {@code HttpClient} is immutable,

 * and can be used to send multiple requests.

 *

 * <p> An {@code HttpClient} provides configuration information, and resource

 * sharing, for all requests sent through it.

 *

 * <p> A {@link BodyHandler BodyHandler} must be supplied for each {@link

 * HttpRequest} sent. The {@code BodyHandler} determines how to handle the

 * response body, if any. Once an {@link HttpResponse} is received, the

 * headers, response code, and body (typically) are available. Whether the

 * response body bytes have been read or not depends on the type, {@code T}, of

 * the response body.

 *

 * <p> Requests can be sent either synchronously or asynchronously:

 * <ul>

 *     <li>{@link HttpClient#send(HttpRequest, BodyHandler)} blocks

 *     until the request has been sent and the response has been received.</li>

 *

 *     <li>{@link HttpClient#sendAsync(HttpRequest, BodyHandler)} sends the

 *     request and receives the response asynchronously. The {@code sendAsync}

 *     method returns immediately with a {@link CompletableFuture

 *     CompletableFuture}<{@link HttpResponse}>. The {@code

 *     CompletableFuture} completes when the response becomes available. The

 *     returned {@code CompletableFuture} can be combined in different ways to

 *     declare dependencies among several asynchronous tasks.</li>

 * </ul>

 *

 * <p><b>Synchronous Example</b>

 * <pre>{@code    HttpClient client = HttpClient.newBuilder()

 *        .version(Version.HTTP_1_1)

 *        .followRedirects(Redirect.NORMAL)

 *        .connectTimeout(Duration.ofSeconds(20))

 *        .proxy(ProxySelector.of(new InetSocketAddress("proxy.example.com", 80)))

 *        .authenticator(Authenticator.getDefault())

 *        .build();

 *   HttpResponse<String> response = client.send(request, BodyHandlers.ofString());

 *   System.out.println(response.statusCode());

 *   System.out.println(response.body());  }</pre>

 *

 * <p><b>Asynchronous Example</b>

 * <pre>{@code    HttpRequest request = HttpRequest.newBuilder()

 *        .uri(URI.create("https://foo.com/"))

 *        .timeout(Duration.ofMinutes(2))

 *        .header("Content-Type", "application/json")

 *        .POST(BodyPublishers.ofFile(Paths.get("file.json")))

 *        .build();

 *   client.sendAsync(request, BodyHandlers.ofString())

 *        .thenApply(HttpResponse::body)

 *        .thenAccept(System.out::println);  }</pre>

 *

 * <p> <a id="securitychecks"><b>Security checks</b></a>

 *

 * <p> If a security manager is present then security checks are performed by

 * the HTTP Client's sending methods. An appropriate {@link URLPermission} is

 * required to access the destination server, and proxy server if one has

 * been configured. The form of the {@code URLPermission} required to access a

 * proxy has a {@code method} parameter of {@code "CONNECT"} (for all kinds of

 * proxying) and a {@code URL} string of the form {@code "socket://host:port"}

 * where host and port specify the proxy's address.

 *

 * @implNote If an explicit {@linkplain HttpClient.Builder#executor(Executor)

 * executor} has not been set for an {@code HttpClient}, and a security manager

 * has been installed, then the default executor will execute asynchronous and

 * dependent tasks in a context that is granted no permissions. Custom

 * {@linkplain HttpRequest.BodyPublisher request body publishers}, {@linkplain

 * HttpResponse.BodyHandler response body handlers}, {@linkplain

 * HttpResponse.BodySubscriber response body subscribers}, and {@linkplain

 * WebSocket.Listener WebSocket Listeners}, if executing operations that require

 * privileges, should do so within an appropriate {@linkplain

 * AccessController#doPrivileged(PrivilegedAction) privileged context}.

 *

 * @since 11

 */

public abstract class HttpClient {

    /**

     * Creates an HttpClient.

     */

    protected HttpClient() {}

    /**

     * Returns a new {@code HttpClient} with default settings.

     *

     * <p> Equivalent to {@code newBuilder().build()}.

     *

     * <p> The default settings include: the "GET" request method, a preference

     * of {@linkplain HttpClient.Version#HTTP_2 HTTP/2}, a redirection policy of

     * {@linkplain Redirect#NEVER NEVER}, the {@linkplain

     * ProxySelector#getDefault() default proxy selector}, and the {@linkplain

     * SSLContext#getDefault() default SSL context}.

     *

     * @implNote The system-wide default values are retrieved at the time the

     * {@code HttpClient} instance is constructed. Changing the system-wide

     * values after an {@code HttpClient} instance has been built, for

     * instance, by calling {@link ProxySelector#setDefault(ProxySelector)}

     * or {@link SSLContext#setDefault(SSLContext)}, has no effect on already

     * built instances.

     *

     * @return a new HttpClient

     */

    public static HttpClient newHttpClient() {

        return newBuilder().build();

    }

    /**

     * Creates a new {@code HttpClient} builder.

     *

     * @return an {@code HttpClient.Builder}

     */

    public static Builder newBuilder() {

        return new HttpClientBuilderImpl();

    }

    /**

     * A builder of {@linkplain HttpClient HTTP Clients}.

     *

     * <p> Builders are created by invoking {@link HttpClient#newBuilder()

     * newBuilder}. Each of the setter methods modifies the state of the builder

     * and returns the same instance. Builders are not thread-safe and should not be

     * used concurrently from multiple threads without external synchronization.

     *

     * @since 11

     */

    public interface Builder {

        /**

         * A proxy selector that always return {@link Proxy#NO_PROXY} implying

         * a direct connection.

         *

         * <p> This is a convenience object that can be passed to

         * {@link #proxy(ProxySelector)} in order to build an instance of

         * {@link HttpClient} that uses no proxy.

         */

        public static final ProxySelector NO_PROXY = ProxySelector.of(null);

        /**

         * Sets a cookie handler.

         *

         * @param cookieHandler the cookie handler

         * @return this builder

         */

        public Builder cookieHandler(CookieHandler cookieHandler);

        /**

         * Sets the connect timeout duration for this client.

         *

         * <p> In the case where a new connection needs to be established, if

         * the connection cannot be established within the given {@code

         * duration}, then {@link HttpClient#send(HttpRequest,BodyHandler)

         * HttpClient::send} throws an {@link HttpConnectTimeoutException}, or

         * {@link HttpClient#sendAsync(HttpRequest,BodyHandler)

         * HttpClient::sendAsync} completes exceptionally with an

         * {@code HttpConnectTimeoutException}. If a new connection does not

         * need to be established, for example if a connection can be reused

         * from a previous request, then this timeout duration has no effect.

         *

         * @param duration the duration to allow the underlying connection to be

         *                 established

         * @return this builder

         * @throws IllegalArgumentException if the duration is non-positive

         */

        public Builder connectTimeout(Duration duration);

        /**

         * Sets an {@code SSLContext}.

         *

         * <p> If this method is not invoked prior to {@linkplain #build()

         * building}, then newly built clients will use the {@linkplain

         * SSLContext#getDefault() default context}, which is normally adequate

         * for client applications that do not need to specify protocols, or

         * require client authentication.

         *

         * @param sslContext the SSLContext

         * @return this builder

         */

        public Builder sslContext(SSLContext sslContext);

        /**

         * Sets an {@code SSLParameters}.

         *

         * <p> If this method is not invoked prior to {@linkplain #build()

         * building}, then newly built clients will use a default,

         * implementation specific, set of parameters.

         *

         * <p> Some parameters which are used internally by the HTTP Client

         * implementation (such as the application protocol list) should not be

         * set by callers, as they may be ignored. The contents of the given

         * object are copied.

         *

         * @param sslParameters the SSLParameters

         * @return this builder

         */

        public Builder sslParameters(SSLParameters sslParameters);

        /**

         * Sets the executor to be used for asynchronous and dependent tasks.

         *

         * <p> If this method is not invoked prior to {@linkplain #build()

         * building}, a default executor is created for each newly built {@code

         * HttpClient}.

         *

         * @implNote The default executor uses a thread pool, with a custom

         * thread factory. If a security manager has been installed, the thread

         * factory creates threads that run with an access control context that

         * has no permissions.

         *

         * @param executor the Executor

         * @return this builder

         */

        public Builder executor(Executor executor);

        /**

         * Specifies whether requests will automatically follow redirects issued

         * by the server.

         *

         * <p> If this method is not invoked prior to {@linkplain #build()

         * building}, then newly built clients will use a default redirection

         * policy of {@link Redirect#NEVER NEVER}.

         *

         * @param policy the redirection policy

         * @return this builder

         */

        public Builder followRedirects(Redirect policy);

        /**

         * Requests a specific HTTP protocol version where possible.

         *

         * <p> If this method is not invoked prior to {@linkplain #build()

         * building}, then newly built clients will prefer {@linkplain

         * Version#HTTP_2 HTTP/2}.

         *

         * <p> If set to {@linkplain Version#HTTP_2 HTTP/2}, then each request

         * will attempt to upgrade to HTTP/2. If the upgrade succeeds, then the

         * response to this request will use HTTP/2 and all subsequent requests

         * and responses to the same

         * <a href="https://tools.ietf.org/html/rfc6454#section-4">origin server</a>

         * will use HTTP/2. If the upgrade fails, then the response will be

         * handled using HTTP/1.1

         *

         * @implNote Constraints may also affect the selection of protocol version.

         * For example, if HTTP/2 is requested through a proxy, and if the implementation

         * does not support this mode, then HTTP/1.1 may be used

         *

         * @param version the requested HTTP protocol version

         * @return this builder

         */

        public Builder version(HttpClient.Version version);

        /**

         * Sets the default priority for any HTTP/2 requests sent from this

         * client. The value provided must be between {@code 1} and {@code 256}

         * (inclusive).

         *

         * @param priority the priority weighting

         * @return this builder

         * @throws IllegalArgumentException if the given priority is out of range

         */

        public Builder priority(int priority);

        /**

         * Sets a {@link java.net.ProxySelector}.

         *

         * @apiNote {@link ProxySelector#of(InetSocketAddress) ProxySelector::of}

         * provides a {@code ProxySelector} which uses a single proxy for all

         * requests. The system-wide proxy selector can be retrieved by

         * {@link ProxySelector#getDefault()}.

         *

         * @implNote

         * If this method is not invoked prior to {@linkplain #build() building},

         * then newly built clients will use the {@linkplain

         * ProxySelector#getDefault() default proxy selector}, which is usually

         * adequate for client applications. The default proxy selector supports

         * a set of system properties related to

         * <a href="{@docRoot}/java.base/java/net/doc-files/net-properties.html#Proxies">

         * proxy settings</a>. This default behavior can be disabled by

         * supplying an explicit proxy selector, such as {@link #NO_PROXY} or

         * one returned by {@link ProxySelector#of(InetSocketAddress)

         * ProxySelector::of}, before {@linkplain #build() building}.

         *

         * @param proxySelector the ProxySelector

         * @return this builder

         */

        public Builder proxy(ProxySelector proxySelector);

        /**

         * Sets an authenticator to use for HTTP authentication.

         *

         * @param authenticator the Authenticator

         * @return this builder

         */

        public Builder authenticator(Authenticator authenticator);

        /**

         * Returns a new {@link HttpClient} built from the current state of this

         * builder.

         *

         * @return a new {@code HttpClient}

         */

        public HttpClient build();

    }

    /**

     * Returns an {@code Optional} containing this client's {@link

     * CookieHandler}. If no {@code CookieHandler} was set in this client's

     * builder, then the {@code Optional} is empty.

     *

     * @return an {@code Optional} containing this client's {@code CookieHandler}

     */

    public abstract Optional<CookieHandler> cookieHandler();

    /**

     * Returns an {@code Optional} containing the <i>connect timeout duration</i>

     * for this client. If the {@linkplain Builder#connectTimeout(Duration)

     * connect timeout duration} was not set in the client's builder, then the

     * {@code Optional} is empty.

     *

     * @return an {@code Optional} containing this client's connect timeout

     *         duration

     */

     public abstract Optional<Duration> connectTimeout();

    /**

     * Returns the follow redirects policy for this client. The default value

     * for client's built by builders that do not specify a redirect policy is

     * {@link HttpClient.Redirect#NEVER NEVER}.

     *

     * @return this client's follow redirects setting

     */

    public abstract Redirect followRedirects();

    /**

     * Returns an {@code Optional} containing the {@code ProxySelector}

     * supplied to this client. If no proxy selector was set in this client's

     * builder, then the {@code Optional} is empty.

     *

     * <p> Even though this method may return an empty optional, the {@code

     * HttpClient} may still have a non-exposed {@linkplain

     * Builder#proxy(ProxySelector) default proxy selector} that is

     * used for sending HTTP requests.

     *

     * @return an {@code Optional} containing the proxy selector supplied

     *        to this client.

     */

    public abstract Optional<ProxySelector> proxy();

    /**

     * Returns this client's {@code SSLContext}.

     *

     * <p> If no {@code SSLContext} was set in this client's builder, then the

     * {@linkplain SSLContext#getDefault() default context} is returned.

     *

     * @return this client's SSLContext

     */

    public abstract SSLContext sslContext();

    /**

     * Returns a copy of this client's {@link SSLParameters}.

     *

     * <p> If no {@code SSLParameters} were set in the client's builder, then an

     * implementation specific default set of parameters, that the client will

     * use, is returned.

     *

     * @return this client's {@code SSLParameters}

     */

    public abstract SSLParameters sslParameters();

    /**

     * Returns an {@code Optional} containing the {@link Authenticator} set on

     * this client. If no {@code Authenticator} was set in the client's builder,

     * then the {@code Optional} is empty.

     *

     * @return an {@code Optional} containing this client's {@code Authenticator}

     */

    public abstract Optional<Authenticator> authenticator();

    /**

     * Returns the preferred HTTP protocol version for this client. The default

     * value is {@link HttpClient.Version#HTTP_2}

     *

     * @implNote Constraints may also affect the selection of protocol version.

     * For example, if HTTP/2 is requested through a proxy, and if the

     * implementation does not support this mode, then HTTP/1.1 may be used

     *

     * @return the HTTP protocol version requested

     */

    public abstract HttpClient.Version version();

    /**

     * Returns an {@code Optional} containing this client's {@link

     * Executor}. If no {@code Executor} was set in the client's builder,

     * then the {@code Optional} is empty.

     *

     * <p> Even though this method may return an empty optional, the {@code

     * HttpClient} may still have an non-exposed {@linkplain

     * HttpClient.Builder#executor(Executor) default executor} that is used for

     * executing asynchronous and dependent tasks.

     *

     * @return an {@code Optional} containing this client's {@code Executor}

     */

    public abstract Optional<Executor> executor();

    /**

     * The HTTP protocol version.

     *

     * @since 11

     */

    public enum Version {

        /**

         * HTTP version 1.1

         */

        HTTP_1_1,

        /**

         * HTTP version 2

         */

        HTTP_2

    }

    /**

     * Defines the automatic redirection policy.

     *

     * <p> The automatic redirection policy is checked whenever a {@code 3XX}

     * response code is received. If redirection does not happen automatically,

     * then the response, containing the  {@code 3XX} response code, is returned,

     * where it can be handled manually.

     *

     * <p> {@code Redirect} policy is set through the {@linkplain

     * HttpClient.Builder#followRedirects(Redirect) Builder.followRedirects}

     * method.

     *

     * @implNote When automatic redirection occurs, the request method of the

     * redirected request may be modified depending on the specific {@code 30X}

     * status code, as specified in <a href="https://tools.ietf.org/html/rfc7231">

     * RFC 7231</a>. In addition, the {@code 301} and {@code 302} status codes

     * cause a {@code POST} request to be converted to a {@code GET} in the

     * redirected request.

     *

     * @since 11

     */

    public enum Redirect {