git.iko.soy/typeable/oauth2-proxy
on v3.0.0 help sign in
typeable/oauth2-proxy/http.go
114 lines 2.9 kB history raw
1package main
3import (
4 "crypto/tls"
5 "log"
6 "net"
7 "net/http"
8 "strings"
9 "time"
12// Server represents an HTTP server
13type Server struct {
14 Handler http.Handler
15 Opts *Options
18// ListenAndServe will serve traffic on HTTP or HTTPS depending on TLS options
19func (s *Server) ListenAndServe() {
20 if s.Opts.TLSKeyFile != "" || s.Opts.TLSCertFile != "" {
21 s.ServeHTTPS()
22 } else {
23 s.ServeHTTP()
24 }
27// ServeHTTP constructs a net.Listener and starts handling HTTP requests
28func (s *Server) ServeHTTP() {
29 HTTPAddress := s.Opts.HTTPAddress
30 var scheme string
32 i := strings.Index(HTTPAddress, "://")
33 if i > -1 {
34 scheme = HTTPAddress[0:i]
35 }
37 var networkType string
38 switch scheme {
39 case "", "http":
40 networkType = "tcp"
41 default:
42 networkType = scheme
43 }
45 slice := strings.SplitN(HTTPAddress, "//", 2)
46 listenAddr := slice[len(slice)-1]
48 listener, err := net.Listen(networkType, listenAddr)
49 if err != nil {
50 log.Fatalf("FATAL: listen (%s, %s) failed - %s", networkType, listenAddr, err)
51 }
52 log.Printf("HTTP: listening on %s", listenAddr)
54 server := &http.Server{Handler: s.Handler}
55 err = server.Serve(listener)
56 if err != nil && !strings.Contains(err.Error(), "use of closed network connection") {
57 log.Printf("ERROR: http.Serve() - %s", err)
58 }
60 log.Printf("HTTP: closing %s", listener.Addr())
63// ServeHTTPS constructs a net.Listener and starts handling HTTPS requests
64func (s *Server) ServeHTTPS() {
65 addr := s.Opts.HTTPSAddress
66 config := &tls.Config{
67 MinVersion: tls.VersionTLS12,
68 MaxVersion: tls.VersionTLS12,
69 }
70 if config.NextProtos == nil {
71 config.NextProtos = []string{"http/1.1"}
72 }
74 var err error
75 config.Certificates = make([]tls.Certificate, 1)
76 config.Certificates[0], err = tls.LoadX509KeyPair(s.Opts.TLSCertFile, s.Opts.TLSKeyFile)
77 if err != nil {
78 log.Fatalf("FATAL: loading tls config (%s, %s) failed - %s", s.Opts.TLSCertFile, s.Opts.TLSKeyFile, err)
79 }
81 ln, err := net.Listen("tcp", addr)
82 if err != nil {
83 log.Fatalf("FATAL: listen (%s) failed - %s", addr, err)
84 }
85 log.Printf("HTTPS: listening on %s", ln.Addr())
87 tlsListener := tls.NewListener(tcpKeepAliveListener{ln.(*net.TCPListener)}, config)
88 srv := &http.Server{Handler: s.Handler}
89 err = srv.Serve(tlsListener)
91 if err != nil && !strings.Contains(err.Error(), "use of closed network connection") {
92 log.Printf("ERROR: https.Serve() - %s", err)
93 }
95 log.Printf("HTTPS: closing %s", tlsListener.Addr())
98// tcpKeepAliveListener sets TCP keep-alive timeouts on accepted
99// connections. It's used by ListenAndServe and ListenAndServeTLS so
100// dead TCP connections (e.g. closing laptop mid-download) eventually
101// go away.
102type tcpKeepAliveListener struct {
103 *net.TCPListener
106func (ln tcpKeepAliveListener) Accept() (c net.Conn, err error) {
107 tc, err := ln.AcceptTCP()
108 if err != nil {
109 return
110 }
111 tc.SetKeepAlive(true)
112 tc.SetKeepAlivePeriod(3 * time.Minute)
113 return tc, nil