git.iko.soy/typeable/oauth2-proxy
on d64d717 help sign in
typeable/oauth2-proxy/pkg/middleware/headers.go
114 lines 3.2 kB history raw
1package middleware
3import (
4 "fmt"
5 "net/http"
6 "strings"
8 "github.com/justinas/alice"
9 middlewareapi "github.com/oauth2-proxy/oauth2-proxy/v7/pkg/apis/middleware"
10 "github.com/oauth2-proxy/oauth2-proxy/v7/pkg/apis/options"
11 "github.com/oauth2-proxy/oauth2-proxy/v7/pkg/header"
14func NewRequestHeaderInjector(headers []options.Header) (alice.Constructor, error) {
15 headerInjector, err := newRequestHeaderInjector(headers)
16 if err != nil {
17 return nil, fmt.Errorf("error building request header injector: %v", err)
18 }
20 strip := newStripHeaders(headers)
21 if strip != nil {
22 return alice.New(strip, headerInjector).Then, nil
23 }
24 return headerInjector, nil
27func newStripHeaders(headers []options.Header) alice.Constructor {
28 headersToStrip := []string{}
29 for _, header := range headers {
30 if !header.PreserveRequestValue {
31 headersToStrip = append(headersToStrip, header.Name)
32 }
33 }
35 if len(headersToStrip) == 0 {
36 return nil
37 }
39 return func(next http.Handler) http.Handler {
40 return stripHeaders(headersToStrip, next)
41 }
44func flattenHeaders(headers http.Header) {
45 for name, values := range headers {
46 if len(values) > 1 {
47 headers.Set(name, strings.Join(values, ","))
48 }
49 }
52func stripHeaders(headers []string, next http.Handler) http.Handler {
53 return http.HandlerFunc(func(rw http.ResponseWriter, req *http.Request) {
54 for _, header := range headers {
55 req.Header.Del(header)
56 }
57 next.ServeHTTP(rw, req)
58 })
61func newRequestHeaderInjector(headers []options.Header) (alice.Constructor, error) {
62 injector, err := header.NewInjector(headers)
63 if err != nil {
64 return nil, fmt.Errorf("error building request injector: %v", err)
65 }
67 return func(next http.Handler) http.Handler {
68 return injectRequestHeaders(injector, next)
69 }, nil
72func injectRequestHeaders(injector header.Injector, next http.Handler) http.Handler {
73 return http.HandlerFunc(func(rw http.ResponseWriter, req *http.Request) {
74 scope := middlewareapi.GetRequestScope(req)
76 // If scope is nil, this will panic.
77 // A scope should always be injected before this handler is called.
78 injector.Inject(req.Header, scope.Session)
79 flattenHeaders(req.Header)
80 next.ServeHTTP(rw, req)
81 })
84func NewResponseHeaderInjector(headers []options.Header) (alice.Constructor, error) {
85 headerInjector, err := newResponseHeaderInjector(headers)
86 if err != nil {
87 return nil, fmt.Errorf("error building response header injector: %v", err)
88 }
90 return headerInjector, nil
93func newResponseHeaderInjector(headers []options.Header) (alice.Constructor, error) {
94 injector, err := header.NewInjector(headers)
95 if err != nil {
96 return nil, fmt.Errorf("error building response injector: %v", err)
97 }
99 return func(next http.Handler) http.Handler {
100 return injectResponseHeaders(injector, next)
101 }, nil
104func injectResponseHeaders(injector header.Injector, next http.Handler) http.Handler {
105 return http.HandlerFunc(func(rw http.ResponseWriter, req *http.Request) {
106 scope := middlewareapi.GetRequestScope(req)
108 // If scope is nil, this will panic.
109 // A scope should always be injected before this handler is called.
110 injector.Inject(rw.Header(), scope.Session)
111 flattenHeaders(rw.Header())
112 next.ServeHTTP(rw, req)
113 })