git.iko.soy/typeable/oauth2-proxy
on v2.2 help sign in
typeable/oauth2-proxy/http.go
110 lines 2.6 kB history raw
1package main
3import (
4 "crypto/tls"
5 "log"
6 "net"
7 "net/http"
8 "strings"
9 "time"
12type Server struct {
13 Handler http.Handler
14 Opts *Options
17func (s *Server) ListenAndServe() {
18 if s.Opts.TLSKeyFile != "" || s.Opts.TLSCertFile != "" {
19 s.ServeHTTPS()
20 } else {
21 s.ServeHTTP()
22 }
25func (s *Server) ServeHTTP() {
26 httpAddress := s.Opts.HttpAddress
27 scheme := ""
29 i := strings.Index(httpAddress, "://")
30 if i > -1 {
31 scheme = httpAddress[0:i]
32 }
34 var networkType string
35 switch scheme {
36 case "", "http":
37 networkType = "tcp"
38 default:
39 networkType = scheme
40 }
42 slice := strings.SplitN(httpAddress, "//", 2)
43 listenAddr := slice[len(slice)-1]
45 listener, err := net.Listen(networkType, listenAddr)
46 if err != nil {
47 log.Fatalf("FATAL: listen (%s, %s) failed - %s", networkType, listenAddr, err)
48 }
49 log.Printf("HTTP: listening on %s", listenAddr)
51 server := &http.Server{Handler: s.Handler}
52 err = server.Serve(listener)
53 if err != nil && !strings.Contains(err.Error(), "use of closed network connection") {
54 log.Printf("ERROR: http.Serve() - %s", err)
55 }
57 log.Printf("HTTP: closing %s", listener.Addr())
60func (s *Server) ServeHTTPS() {
61 addr := s.Opts.HttpsAddress
62 config := &tls.Config{
63 MinVersion: tls.VersionTLS12,
64 MaxVersion: tls.VersionTLS12,
65 }
66 if config.NextProtos == nil {
67 config.NextProtos = []string{"http/1.1"}
68 }
70 var err error
71 config.Certificates = make([]tls.Certificate, 1)
72 config.Certificates[0], err = tls.LoadX509KeyPair(s.Opts.TLSCertFile, s.Opts.TLSKeyFile)
73 if err != nil {
74 log.Fatalf("FATAL: loading tls config (%s, %s) failed - %s", s.Opts.TLSCertFile, s.Opts.TLSKeyFile, err)
75 }
77 ln, err := net.Listen("tcp", addr)
78 if err != nil {
79 log.Fatalf("FATAL: listen (%s) failed - %s", addr, err)
80 }
81 log.Printf("HTTPS: listening on %s", ln.Addr())
83 tlsListener := tls.NewListener(tcpKeepAliveListener{ln.(*net.TCPListener)}, config)
84 srv := &http.Server{Handler: s.Handler}
85 err = srv.Serve(tlsListener)
87 if err != nil && !strings.Contains(err.Error(), "use of closed network connection") {
88 log.Printf("ERROR: https.Serve() - %s", err)
89 }
91 log.Printf("HTTPS: closing %s", tlsListener.Addr())
94// tcpKeepAliveListener sets TCP keep-alive timeouts on accepted
95// connections. It's used by ListenAndServe and ListenAndServeTLS so
96// dead TCP connections (e.g. closing laptop mid-download) eventually
97// go away.
98type tcpKeepAliveListener struct {
99 *net.TCPListener
102func (ln tcpKeepAliveListener) Accept() (c net.Conn, err error) {
103 tc, err := ln.AcceptTCP()
104 if err != nil {
105 return
106 }
107 tc.SetKeepAlive(true)
108 tc.SetKeepAlivePeriod(3 * time.Minute)
109 return tc, nil