Huge News!Announcing our $40M Series B led by Abstract Ventures.Learn More
Socket
Sign inDemoInstall
Socket

@cinchapi/web-socket-js

Package Overview
Dependencies
Maintainers
1
Versions
1
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

@cinchapi/web-socket-js

Assuming you have Web server (e.g. Apache) running at **http://example.com/** .

  • 1.0.0
  • latest
  • Source
  • npm
  • Socket score

Version published
Weekly downloads
1
decreased by-50%
Maintainers
1
Weekly downloads
 
Created
Source

How to try the sample

Assuming you have Web server (e.g. Apache) running at http://example.com/ .

  1. Download web-socket-ruby.
  2. Run sample Web Socket server (echo server) in example.com with: (#1)
$ ruby web-socket-ruby/samples/echo_server.rb example.com 10081
  1. If your server already provides socket policy file at port 843, modify the file to allow access to port 10081. Otherwise you can skip this step. See below for details.
  2. Publish the web-socket-js directory with your Web server (e.g. put it in ~/public_html).
  3. Change ws://localhost:10081 to ws://example.com:10081 in sample.html.
  4. Open sample.html in your browser.
  5. After "onopen" is shown, input something, click [Send] and confirm echo back.

#1: First argument of echo_server.rb means that it accepts Web Socket connection from HTML pages in example.com.

How to use it in your application

  • Copy swfobject.js, web_socket.js, WebSocketMain.swf to your application directory.
  • Write JavaScript code:
<!-- Import JavaScript Libraries. -->
<script type="text/javascript" src="swfobject.js"></script>
<script type="text/javascript" src="web_socket.js"></script>

<script type="text/javascript">
  
  // Let the library know where WebSocketMain.swf is:
  WEB_SOCKET_SWF_LOCATION = "WebSocketMain.swf";
  
  // Write your code in the same way as for native WebSocket:
  var ws = new WebSocket("ws://example.com:10081/");
  ws.onopen = function() {
    ws.send("Hello");  // Sends a message.
  };
  ws.onmessage = function(e) {
    // Receives a message.
    alert(e.data);
  };
  ws.onclose = function() {
    alert("closed");
  };
  
</script>
  • Put Flash socket policy file to your server unless you use web-socket-ruby or em-websocket as your WebSocket server. See "Flash socket policy file" section below for details.

Troubleshooting

If it doesn't work, try these:

  1. Try Chrome and IE 8 or 9.

    • It doesn't work on Chrome:
      It's likely an issue of your code or the server. Debug your code as usual e.g. using console.log.
    • It works on Chrome but it doesn't work on IE:
      It's likely an issue of web-socket-js specific configuration (e.g. 3 and 4 below).
    • It works on both Chrome and IE, but it doesn't work on your browser:
      Check "Supported environment" section below. Your browser may not be supported by web-socket-js.
  2. Add this line before your code: WEB_SOCKET_DEBUG = true; and use Developer Tools (Chrome/Safari) or Firebug (Firefox) to see if console.log outputs any errors.

  3. Make sure you do NOT open your HTML page as local file e.g. file:///.../sample.html. web-socket-js doesn't work on local file. Open it via Web server e.g. http:///.../sample.html.

  4. Make sure you host your HTML page and WebSocketMain.swf in the same domain. Otherwise, see "How to host HTML file and SWF file in different domains" section.

  5. If you are NOT using web-socket-ruby or em-websocket as your WebSocket server, you need to place Flash socket policy file on your server. See "Flash socket policy file" section below for details.

  6. Check if sample.html bundled with web-socket-js works.

  7. Make sure the port used for WebSocket (10081 in example above) is not blocked by your server/client's firewall.

  8. Install debugger version of Flash Player to see Flash errors.

  9. If you followed the steps above and you still have an issue, please report here with these information:

    • The WebSocket server library you use (e.g. em-websocket, pywebsocket) and its version
    • The Web browser you use and its version
    • The exact message you are trying to send from the server or the client
    • The result of all steps above, especially error message in step 2 if any

Supported environments

It should work on:

  • Google Chrome 4 or later, Firefox 6 or later (uses native WebSocket or MozWebSocket implementation)
  • Firefox 3 to 5, Internet Explorer 8, 9 + Flash Player 10 or later

It may or may not work on other browsers such as Safari, Opera or IE 6. Patch for these browsers are appreciated, but I will not work on fixing issues specific to these browsers by myself.

Limitations/differences compared to native WebSocket

  • You need some more lines in your JavaScript code. See "How to use it in your application" section above for details.
  • It requires Flash Player 10 or later unless the browser supports native WebSocket.
  • Your server must provide Flash socket policy file, unless you use web-socket-ruby or em-websocket. See "Flash socket policy file" section below for details.
  • It has limited support for Cookies on WebSocket. See "Cookie support" section below for details.
  • It doesn't use proxies specified in browser config. See "Proxy support" section below for details.

Flash socket policy file

This implementation uses Flash's socket, which means that your server must provide Flash socket policy file to declare the server accepts connections from Flash.

If you use web-socket-ruby or em-websocket, you don't need anything special, because they handle Flash socket policy file request. But if you already provide socket policy file at port 843, you need to modify the file to allow access to Web Socket port, because it precedes what the libraries provide.

If you use other Web Socket server implementation, you need to provide socket policy file yourself. See Setting up A Flash Socket Policy File for details. Implementation of socket policy file server is available at:

Actually, it's still better to provide socket policy file at port 843 even if you use web-socket-ruby or em-websocket. Flash always try to connect to port 843 first, so providing the file at port 843 makes startup faster.

web-socket-js has limited supported for Cookies on WebSocket.

Cookie is sent if Web Socket host is exactly the same as the origin of JavaScript (The port can be different). Otherwise it is not sent, because I don't know way to send right Cookie (which is Cookie of the host of Web Socket, I heard). Also, HttpOnly Cookies are not sent.

Note that it's technically possible that client sends arbitrary string as Cookie and any other headers (by modifying this library for example) once you place Flash socket policy file in your server. So don't trust Cookie and other headers if you allow connection from untrusted origin.

Proxy support

The WebSocket spec specifies instructions for User Agents to support proxied connections by implementing the HTTP CONNECT method.

The AS3 Socket class doesn't implement this mechanism, which renders it useless for the scenarios where the user trying to open a socket is behind a proxy.

The class RFC2817Socket (by Christian Cantrell) effectively lets us implement this, as long as the proxy settings are known and provided by the interface that instantiates the WebSocket. As such, if you want to support proxied conncetions, you'll have to supply this information to the WebSocket constructor when Flash is being used. One way to go about it would be to ask the user for proxy settings information if the initial connection fails.

How to host HTML file and SWF file in different domains

By default, HTML file and SWF file must be in the same domain. You can follow steps below to allow hosting them in different domain.

WARNING: If you use the method below, HTML files in ANY domains can send arbitrary TCP data to your WebSocket server, regardless of configuration in Flash socket policy file. Arbitrary TCP data means that they can even fake request headers including Origin and Cookie.

  1. Unzip WebSocketMainInsecure.zip to extract WebSocketMainInsecure.swf.
  2. Put WebSocketMainInsecure.swf on your server, instead of WebSocketMain.swf.
  3. In JavaScript, set WEB_SOCKET_SWF_LOCATION to URL of your WebSocketMainInsecure.swf.

How to build WebSocketMain.swf

Install Flex 4 SDK.

$ cd flash-src
$ ./build.sh

WebSocket protocol versions

  • web-socket-js speaks WebSocket protocol defined in RFC 6455.
  • web-socket-js doesn't speak old draft versions of WebSocket protocol including hixie-76, which was supported by old version of this library. If you really need web-socket-js which speaks hixie-76, you can get it from hixie-76 branch, but the branch is no longer maintained.

License

New BSD License.

FAQs

Package last updated on 30 Nov 2017

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap
  • Changelog

Packages

npm

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc