v0.31.0

src/proxy/forward_entry.rs

@@ -154,22 +154,24 @@ async fn forward_request(
             "RustProxy: RFC 9220 WebSocket transport is not enabled for this vhost\n",
         );
     }
-    if let Some(response) = frontend
-        .and_then(|frontend| method_policy_denial(&frontend.method_policy, request.method()))
-    {
-        return response;
-    }
-    if let Some(response) = frontend.and_then(|frontend| {
-        canonical_host_redirect(frontend, &host, tls, local.0.port(), request.uri())
-    }) {
-        return response;
-    }
-    if !tls {
-        if let Some(response) =
-            frontend.and_then(|frontend| force_ssl_redirect(frontend, &host, request.uri()))
+    if !cache_http_invalidation_method(request.method()) {
+        if let Some(response) = frontend
+            .and_then(|frontend| method_policy_denial(&frontend.method_policy, request.method()))
         {
             return response;
         }
+        if let Some(response) = frontend.and_then(|frontend| {
+            canonical_host_redirect(frontend, &host, tls, local.0.port(), request.uri())
+        }) {
+            return response;
+        }
+        if !tls {
+            if let Some(response) = frontend.and_then(|frontend| {
+                force_ssl_redirect(frontend, &host, request.uri())
+            }) {
+                return response;
+            }
+        }
     }
     let mut context = match snapshot.forwarding.context(
         request.headers(),
@@ -267,6 +269,9 @@ async fn forward_request(
             "RustProxy: denied by access policy\n",
         );
     }
+    if cache_http_invalidation_method(request.method()) {
+        return cache_http_invalidation(&state, &snapshot, frontend, &host, request, context.client_ip, peer.0.ip(), context.scheme).await;
+    }
     if let Some((_redirect, rule)) = redirect {
         let authority = original_host.to_str().unwrap_or(&host);
         let Some(mut response) = rule.response(authority, tls, request.uri()) else {