Handle unexpected HTTP verb about raxx

[CrowdHailer]

I think it should just send a default 501 response

The 501 (Not Implemented) status code indicates that the server does
not support the functionality required to fulfill the request. This
is the appropriate response when the server does not recognize the
request method and is not capable of supporting it for any resource. A 501 response is cacheable by default; i.e., unless otherwise
indicated by the method definition or explicit cache controls (see
Section 4.2.2 of [RFC7234]).

[CrowdHailer]

@lasseebert Fixed in Ace with this commit CrowdHailer/Ace@6a45644

Will release 0.18.7 soon

[CrowdHailer]

I don't have an answer ready for this issue.
These logs come from the parser in Ace, because each connection is isolated there is no harm in these logs but in that case they should not keep spamming your logs.

In my opinion there are two options here.

1. have Ace automatically return a default 400 response for any parser failure, it currently does this for several other kinds of "bad request"
2. expose these methods to the Raxx app and let user handle them as they want. This has problems because turning unknown methods to atoms opens up an attack vector to flood the atom table.

My preference is for 1 because it is simpler, and it handles the case you need right now.

[lasseebert]

@CrowdHailer 1. works for me too. I have not yet looked at Ace source code, but please let me know if you would like me to take a go on it ;)

[CrowdHailer]

It would be great if there were more eyes on the ace code. 👍 I'm hoping not too hard an issue to fix, hopefully just one extra case clause somewhere.

…

On Thu, 28 Mar 2019, 05:05 Lasse Skindstad Ebert, ***@***.***> wrote: @CrowdHailer <https://github.com/CrowdHailer> 1. works for me too. I have not yet looked at Ace source code, but please let me know if you would like me to take a go on it ;) — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub <#173 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AFlznqpdzAYvqsZoj212nI6NBs8jR7Siks5vbE2xgaJpZM4cOxKG> .

[lasseebert]

Awesome, thanks!