git.iko.soy/typeable/oauth2-proxy
on v2.1 help sign in
typeable/oauth2-proxy/http.go
106 lines 2.6 kB history raw
1package main
3import (
4 "crypto/tls"
5 "log"
6 "net"
7 "net/http"
8 "net/url"
9 "strings"
10 "time"
13type Server struct {
14 Handler http.Handler
15 Opts *Options
18func (s *Server) ListenAndServe() {
19 if s.Opts.TLSKeyFile != "" || s.Opts.TLSCertFile != "" {
20 s.ServeHTTPS()
21 } else {
22 s.ServeHTTP()
23 }
26func (s *Server) ServeHTTP() {
27 u, err := url.Parse(s.Opts.HttpAddress)
28 if err != nil {
29 log.Fatalf("FATAL: could not parse %#v: %v", s.Opts.HttpAddress, err)
30 }
32 var networkType string
33 switch u.Scheme {
34 case "", "http":
35 networkType = "tcp"
36 default:
37 networkType = u.Scheme
38 }
39 listenAddr := strings.TrimPrefix(u.String(), u.Scheme+"://")
41 listener, err := net.Listen(networkType, listenAddr)
42 if err != nil {
43 log.Fatalf("FATAL: listen (%s, %s) failed - %s", networkType, listenAddr, err)
44 }
45 log.Printf("HTTP: listening on %s", listenAddr)
47 server := &http.Server{Handler: s.Handler}
48 err = server.Serve(listener)
49 if err != nil && !strings.Contains(err.Error(), "use of closed network connection") {
50 log.Printf("ERROR: http.Serve() - %s", err)
51 }
53 log.Printf("HTTP: closing %s", listener.Addr())
56func (s *Server) ServeHTTPS() {
57 addr := s.Opts.HttpsAddress
58 config := &tls.Config{
59 MinVersion: tls.VersionTLS12,
60 MaxVersion: tls.VersionTLS12,
61 }
62 if config.NextProtos == nil {
63 config.NextProtos = []string{"http/1.1"}
64 }
66 var err error
67 config.Certificates = make([]tls.Certificate, 1)
68 config.Certificates[0], err = tls.LoadX509KeyPair(s.Opts.TLSCertFile, s.Opts.TLSKeyFile)
69 if err != nil {
70 log.Fatalf("FATAL: loading tls config (%s, %s) failed - %s", s.Opts.TLSCertFile, s.Opts.TLSKeyFile, err)
71 }
73 ln, err := net.Listen("tcp", addr)
74 if err != nil {
75 log.Fatalf("FATAL: listen (%s) failed - %s", addr, err)
76 }
77 log.Printf("HTTPS: listening on %s", ln.Addr())
79 tlsListener := tls.NewListener(tcpKeepAliveListener{ln.(*net.TCPListener)}, config)
80 srv := &http.Server{Handler: s.Handler}
81 err = srv.Serve(tlsListener)
83 if err != nil && !strings.Contains(err.Error(), "use of closed network connection") {
84 log.Printf("ERROR: https.Serve() - %s", err)
85 }
87 log.Printf("HTTPS: closing %s", tlsListener.Addr())
90// tcpKeepAliveListener sets TCP keep-alive timeouts on accepted
91// connections. It's used by ListenAndServe and ListenAndServeTLS so
92// dead TCP connections (e.g. closing laptop mid-download) eventually
93// go away.
94type tcpKeepAliveListener struct {
95 *net.TCPListener
98func (ln tcpKeepAliveListener) Accept() (c net.Conn, err error) {
99 tc, err := ln.AcceptTCP()
100 if err != nil {
101 return
102 }
103 tc.SetKeepAlive(true)
104 tc.SetKeepAlivePeriod(3 * time.Minute)
105 return tc, nil