/ 
PAGI-0.001020
River stage one • 2 direct dependents • 2 total dependents

Changes for version 0.001020 - 2026-03-16

  • Security Hardening
    • Reject requests with both Transfer-Encoding and Content-Length (RFC 9112)
    • Validate Transfer-Encoding per RFC 9112 Section 6.1 (chunked must be final)
    • Validate trailer headers for CRLF injection
    • Validate SSE event/id/retry fields against newline injection
    • Prevent code injection via loop_type parameter (block eval, not string eval)
    • Fix TLS config to allow TLS 1.3 negotiation (SSL_version trailing colon)
  • Session Middleware Refactor
    • Pluggable State/Store architecture for PAGI::Middleware::Session
    • State classes: Cookie (default), Header, Bearer, Callback
    • Store classes: Memory (default, dev/test), with async Future-based interface
    • PAGI::Session standalone helper with strict get() (dies on missing key)
    • PAGI::Session accepts raw data, scope hashref, or object with ->scope
    • Bulk operations: set(k1 => v1, k2 => v2), delete(@keys), slice(@keys), clear()
    • Session destroy lifecycle: deletes from store, clears cookie via State::clear()
    • Session regenerate lifecycle: generates new ID, deletes old, preserves data
    • Idempotency: middleware skips if pagi.session already in scope
    • Reserved keys (_destroyed, _regenerated) documented as middleware-consumed flags
    • Store::Cookie extracted to separate CPAN dist (PAGI-Middleware-Session-Store-Cookie)
  • Bug Fixes
    • disable_tls skips TLS setup instead of dying
    • Recompile access log formatter on configure() changes
    • Weaken $self in _pause_accepting timer closure (reference cycle fix)
    • Replace Future::IO->load_impl('IOAsync') with use Future::IO::Impl::IOAsync (fixes compatibility with Future::IO 0.22+)
  • Cleanup
    • Remove unused _log_connection_stats method

Documentation

pagi-server
PAGI application server
PAGI::Cookbook
Recipes for Common PAGI Tasks
PAGI::Server::Compliance
HTTP/1.1, HTTP/2, WebSocket, and Security Compliance Documentation
PAGI::Spec
PAGI Specification Documentation
PAGI::Spec::Lifespan
PAGI Specification Documentation
PAGI::Spec::Tls
PAGI Specification Documentation
PAGI::Spec::Www
PAGI Specification Documentation
PAGI::Tutorial
A comprehensive guide to building async web applications with PAGI

Modules

PAGI
Perl Asynchronous Gateway Interface
PAGI::App::Cascade
Try apps in sequence until success
PAGI::App::Directory
Serve files with directory listing
PAGI::App::File
Serve static files
PAGI::App::Healthcheck
Health check endpoint app
PAGI::App::Loader
Load PAGI app from file
PAGI::App::NotFound
Customizable 404 response
PAGI::App::Proxy
HTTP reverse proxy (DEMO ONLY - NOT FOR PRODUCTION)
PAGI::App::Redirect
URL redirect app
PAGI::App::Router
Unified routing for HTTP, WebSocket, and SSE
PAGI::App::SSE::Pubsub
Pub/sub Server-Sent Events
PAGI::App::Throttle
Rate-limited request processing
PAGI::App::URLMap
Mount apps at URL path prefixes
PAGI::App::WebSocket::Broadcast
Pub/sub WebSocket broadcast
PAGI::App::WebSocket::Chat
Multi-room chat application
PAGI::App::WebSocket::Echo
Echo WebSocket messages back to sender
PAGI::App::WrapCGI
Execute CGI scripts as PAGI apps
PAGI::App::WrapPSGI
PSGI-to-PAGI adapter
PAGI::Endpoint::HTTP
Class-based HTTP endpoint handler
PAGI::Endpoint::Router
Class-based router with wrapped handlers
PAGI::Endpoint::SSE
Class-based Server-Sent Events endpoint handler
PAGI::Endpoint::WebSocket
Class-based WebSocket endpoint handler
PAGI::Lifespan
Wrap a PAGI app with lifecycle management
PAGI::Middleware
Base class for PAGI middleware
PAGI::Middleware::AccessLog
Request logging middleware
PAGI::Middleware::Auth::Basic
HTTP Basic Authentication middleware
PAGI::Middleware::Auth::Bearer
Bearer token authentication middleware
PAGI::Middleware::Builder
DSL for composing PAGI middleware
PAGI::Middleware::CORS
Cross-Origin Resource Sharing middleware
PAGI::Middleware::CSRF
Cross-Site Request Forgery protection middleware
PAGI::Middleware::ConditionalGet
Conditional GET/HEAD request handling
PAGI::Middleware::ContentLength
Auto Content-Length header middleware
PAGI::Middleware::ContentNegotiation
HTTP content negotiation middleware
PAGI::Middleware::Cookie
Cookie parsing middleware
PAGI::Middleware::Debug
Development debug panel middleware
PAGI::Middleware::ETag
ETag generation middleware
PAGI::Middleware::ErrorHandler
Exception handling middleware
PAGI::Middleware::FormBody
Form request body parsing middleware
PAGI::Middleware::GZip
Response compression middleware
PAGI::Middleware::HTTPSRedirect
Force HTTPS redirect middleware
PAGI::Middleware::Head
HEAD request handling middleware
PAGI::Middleware::Healthcheck
Health check endpoint middleware
PAGI::Middleware::JSONBody
JSON request body parsing middleware
PAGI::Middleware::Lint
Validate PAGI application compliance
PAGI::Middleware::Maintenance
Serve maintenance page when enabled
PAGI::Middleware::MethodOverride
Override HTTP method from request data
PAGI::Middleware::RateLimit
Request rate limiting middleware
PAGI::Middleware::RequestId
Unique request ID middleware
PAGI::Middleware::ReverseProxy
Handle X-Forwarded-* headers from reverse proxies
PAGI::Middleware::Rewrite
URL rewriting middleware
PAGI::Middleware::Runtime
Request timing middleware
PAGI::Middleware::SSE::Retry
Add retry hints to SSE events
PAGI::Middleware::SecurityHeaders
Security headers middleware
PAGI::Middleware::Session
Session management middleware with pluggable State/Store
PAGI::Middleware::Session::State
Base class for session state extraction
PAGI::Middleware::Session::State::Bearer
Bearer token session ID transport
PAGI::Middleware::Session::State::Callback
Custom coderef-based session ID transport
PAGI::Middleware::Session::State::Cookie
Cookie-based session ID transport
PAGI::Middleware::Session::State::Header
Header-based session ID transport
PAGI::Middleware::Session::Store
Base class for async session storage
PAGI::Middleware::Session::Store::Memory
In-memory session store
PAGI::Middleware::Static
Static file serving middleware
PAGI::Middleware::TrustedHosts
Host header validation middleware
PAGI::Middleware::WebSocket::Compression
WebSocket per-message compression
PAGI::Middleware::WebSocket::RateLimit
Rate limiting for WebSocket connections
PAGI::Middleware::XSendfile
Delegate file serving to reverse proxy
PAGI::Request
Convenience wrapper for PAGI request scope
PAGI::Request::BodyStream
Streaming body consumption for PAGI requests
PAGI::Request::MultiPartHandler
Async multipart/form-data parser
PAGI::Request::Negotiate
Content negotiation utilities for PAGI
PAGI::Request::Upload
Uploaded file representation
PAGI::Response
Fluent response builder for PAGI applications
PAGI::Runner
PAGI application loader and server runner
PAGI::SSE
Convenience wrapper for PAGI Server-Sent Events connections
PAGI::Server
PAGI Reference Server Implementation
PAGI::Server::AsyncFile
Non-blocking file I/O for PAGI::Server internals
PAGI::Server::Connection
Per-connection state machine
PAGI::Server::ConnectionState
Connection state tracking for HTTP requests
PAGI::Server::EventValidator
Dev-mode event field validation
PAGI::Server::Protocol::HTTP1
HTTP/1.1 protocol handler
PAGI::Server::Protocol::HTTP2
HTTP/2 protocol handler using nghttp2
PAGI::Session
Standalone helper object for session data access
PAGI::Test::Client
Test client for PAGI applications
PAGI::Test::Response
HTTP response wrapper for testing
PAGI::Test::SSE
Server-Sent Events connection for testing PAGI applications
PAGI::Test::WebSocket
WebSocket connection for testing PAGI applications
PAGI::Utils
Shared utility helpers for PAGI
PAGI::Utils::Random
Cryptographically secure random bytes
PAGI::WebSocket
Convenience wrapper for PAGI WebSocket connections

Provides

PAGI::App::WrapPSGI::Writer
in lib/PAGI/App/WrapPSGI.pm
PAGI::Endpoint::Router::RouteBuilder
in lib/PAGI/Endpoint/Router.pm
PAGI::Middleware::Cookie::Jar
in lib/PAGI/Middleware/Cookie.pm
PAGI::Response::Writer
in lib/PAGI/Response.pm
PAGI::Server::Protocol::HTTP2::Session
in lib/PAGI/Server/Protocol/HTTP2.pm

Examples

Other files