orionis.http.Request

Build the base URL from an ASGI scope.

Constructs the base URL by combining scheme, host, and optional root_path from the ASGI scope.

Build the base URL from an RSGI scope.

Returns the base URL composed of scheme and host.

Build the full URL from an ASGI scope.

Constructs the complete request URL by combining scheme, host, path, and query string from the ASGI scope.

Build the full URL from an RSGI scope.

Constructs the complete request URL by combining scheme, host, path, and query string from the RSGI scope.

Parse and cache the request Content-Type header.

Cache and return the lowercased request Accept header.

Create the body reader when the request consumes its body.

Materialize the transport scope on its first access.

Initialize an HTTP request from an interface, adapter, and body stream.

Parse JSON body for data() and populate the JSON cache.

Parse MessagePack body for data().

Parse multipart body for data() in a single pass.

Parse URL-encoded body for data() with multi-value support.

Check if the client accepts a specific MIME type.

Return the full request body as bytes.

Buffers the stream on first call and caches the result. Subsequent calls are O(1) — they return the cached buffer.

Close uploaded files retained by the parsed multipart request.

Return the CSRF token for the current request.

The token is set on request.state.csrf_token by CSRFTokenMiddleware before the route handler is called. Returns None when the middleware has not run (e.g. API routes).

Return a flat dictionary parsed from the request body.

Cache the parsed value so repeated calls are O(1).

Parsing is selected by Content-Type:

• application/json -> JSON object (must be a mapping)

• application/x-www-form-urlencoded -> form fields with

  scalar-or-list collapsing for repeated keys

• multipart/form-data -> text fields and uploaded files with the

  same scalar-or-list collapsing

• application/msgpack -> MessagePack object (must be a mapping)

Parse multipart/form-data using a streaming parser.

The boundary is extracted with a proper RFC 2046-compatible parser, so quoted boundaries and extra parameters are handled correctly. The BodyStream provides transparent replay: if body() was called first, the buffer is streamed to the multipart parser instead of re-reading the transport.

Parse application/x-www-form-urlencoded body.

Determine if the request was made via AJAX.

Parse the request body as JSON.

Validates Content-Type, buffers the body, and delegates decoding to msgspec. Result is cached; a JSON null literal is handled correctly via the __json_parsed sentinel.

Decode the request body as MessagePack.

Parse and return structured data according to Content-Type.

Dispatches to the registered BodyParser callable from MediaTypeRegistry. multipart/form-data is handled separately because it requires a streaming body, not a pre-buffered bytes value. Falls back to raw bytes when the media type is absent or not registered.

Return the request body as raw bytes.

Return a specific path parameter by key.

Return all path parameters as a dictionary.

Yield chunks of the request body as they arrive.

Delegates to BodyStream, which handles RSGI and ASGI transports, enforces max_body_size, and replays from the internal buffer when the body has already been fully read by body() or a parser.

Decode the request body as UTF-8 text.

Determine if the client expects an HTML response based on the Accept header.

Determine if the client prefers a JSON response based on the Accept header.

Determine if the client prefers an XML response based on the Accept header.

Parse the request body as XML.

Uses defusedxml to reject internal and external entity declarations. DTDs without entity declarations are allowed; external resources are not resolved.