feat: add ReadHeaderTimeout default (#70)

ory · Jul 19, 2022 · d5d3fe4 · d5d3fe4
1 parent f59c4bb
commit d5d3fe4
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/http_defaults.go b/http_defaults.go
@@ -58,6 +58,8 @@ var (
 	// DefaultIdleTimeout sets the maximum amount of time a Keep-Alive connection can remain idle before
 	// being recycled (120s)
 	DefaultIdleTimeout = 120 * time.Second
+	// DefaultReadHeaderTimeout sets the maximum amount of time a client has to fully stream a request header (5s)
+	DefaultReadHeaderTimeout = DefaultReadTimeout
 )
 
 // WithDefaults patches a http.Server based on a best practice configuration
@@ -79,6 +81,10 @@ func WithDefaults(srv *http.Server) *http.Server {
 		srv.ReadTimeout = DefaultReadTimeout
 	}
 
+	if srv.ReadHeaderTimeout == 0 {
+		srv.ReadHeaderTimeout = DefaultReadHeaderTimeout
+	}
+
 	if srv.WriteTimeout == 0 {
 		srv.WriteTimeout = DefaultWriteTimeout
 	}