Download the PHP package bvtterfly/replay without Composer

🚨 THIS PACKAGE HAS BEEN ABANDONED 🚨

I no longer use Laravel and cannot justify the time needed to maintain this package. That's why I have chosen to abandon it. Feel free to fork my code and maintain your own copy.

🔄 Replay - Idempotency Middleware

This package makes your endpoints idempotent easily.

Check out this Stripe Blog Post about Idempotency.

Implementation inspired by Stripe API.

💡 Features

• Adding support idempotency requests to your APIs easily by adding a middleware.
• Works only for POST requests. Other endpoints are ignored.
• Record and replay only successful(2xx) and server-side errors(5xx) responses, without touching your controller again.
• it's safe to retry, it doesn't record the response with client-side errors (4xx).
• To prevent accidental misuse of the cached responses, the request's signature is validated to ensure that the cached response is returned using the same combination of Idempotency-Key and Request.
• Concurrency protection using Laravel's atomic locks to prevent race conditions.

Installation

You can install the package via composer:

You can publish the config file with:

This is the contents of the published config file:

Note: Replay needs a cache driver that supports Cache Tags & Atomic Locks features. Refer to Laravel's documentation to see if your driver supports these features.

Optionally, you can publish the translations using

✨ Server Usage

The Bvtterfly\Replay\Replay-middleware must be registered in the kernel:

Next, For idempotent an endpoint, apply replay middleware to it:

By default, Replay stores the idempotent key as a cache key in the cache store, So all routes with replay middleware share the same cache key with an idempotent key. It's Okay to store it this way in most cases, but in some scenarios, we just need to separate them. In these scenarios, we can add a prefix to cache keys using middleware parameters:

Custom Policy

Replay use Policy to determine whether a request is idempotent and whether the response should be recorded. By default, Replay includes and uses StripePolicy Policy. To create your custom policy, you first need to implement the \Bvtterfly\Replay\Contracts\Policy contract:

If you want to view an example implementation take a look at the StripePolicy class.

For using this policy, We can change the policy in the config file.

✨ Client Usage

To perform an idempotent request, Client must provide an additional Idempotency-Key : <key> header with a unique key to the request.

it is recommended to:

• Use "V4 UUIDs" for the creation of the idempotency unique keys (e.g. 07cd2d27-e0dc-466f-8193-28453e9c3023).
• Derive the key from a user-attached object, like the ID of a shopping cart. This provides a relatively straightforward way to protect against double submissions.

Once Replay detects a key, it'll look it up in cache store. If found, it will serve the same response without hitting your controller action again.

To identify a previously executed response that’s being replayed from the server, look for the header Idempotent-Replayed: true.

If Replay can't find the key, it attempts to acquire a cache lock and caches successful or server error responses. Still, if it can't acquire the lock, another request with the same key is already in progress, then it will respond with the HTTP Conflict response status code.

Resetting the Cache

If you need to manually reset the cache for this package, you may use the following artisan command:

🧪 Testing

Changelog

Please see CHANGELOG for more information on what has changed recently.

Security Vulnerabilities

Please review our security policy on how to report security vulnerabilities.

Credits

• Ari
• All Contributors

License

The MIT License (MIT). Please see License File for more information.