-
-
Notifications
You must be signed in to change notification settings - Fork 1
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
remove gatekeeper in favor of a gateway package that does the same th…
…ing, but with more robust features, including middleware pipelines
- Loading branch information
1 parent
e7a91c4
commit 746e775
Showing
6 changed files
with
263 additions
and
64 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file was deleted.
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,174 @@ | ||
| package gateway | ||
|
|
||
| import ( | ||
| "fmt" | ||
| "io" | ||
| "net/http" | ||
| "net/url" | ||
| "strings" | ||
|
|
||
| glob "github.com/ryanuber/go-glob" | ||
| ) | ||
|
|
||
| type GatewayUrlRequestMiddleware struct { | ||
| Name string | ||
| Handler func(g *Gateway, link string) error | ||
| } | ||
|
|
||
| type Gateway struct { | ||
| Enabled bool | ||
| AllowedDomains []string | ||
| DeniedDomains []string | ||
| Middleware []*GatewayUrlRequestMiddleware | ||
| } | ||
|
|
||
| // New initializes the gateway with deny/allow lists | ||
| func New(deniedDomains, allowedDomains []string) *Gateway { | ||
| result := Gateway{ | ||
| Enabled: true, | ||
| DeniedDomains: deniedDomains, | ||
| AllowedDomains: allowedDomains, | ||
| Middleware: []*GatewayUrlRequestMiddleware{}, | ||
| } | ||
|
|
||
| result.Initialize() | ||
|
|
||
| return &result | ||
| } | ||
|
|
||
| func (g *Gateway) Initialize() { | ||
| g.normalizeDataArray(&g.DeniedDomains) | ||
| g.normalizeDataArray(&g.AllowedDomains) | ||
|
|
||
| g.AddMiddleware(&ValidateUrlMiddleware) | ||
| g.AddMiddleware(&VerifyFileTypeMiddleware) | ||
|
|
||
| g.Enable() | ||
| } | ||
|
|
||
| func (g *Gateway) SetAllowedDomains(domains []string) { | ||
| g.AllowedDomains = domains | ||
| g.normalizeDataArray(&g.AllowedDomains) | ||
| } | ||
|
|
||
| func (g *Gateway) SetDeniedDomains(domains []string) { | ||
| g.DeniedDomains = domains | ||
| g.normalizeDataArray(&g.DeniedDomains) | ||
| } | ||
|
|
||
| func (g *Gateway) AddMiddleware(mw *GatewayUrlRequestMiddleware) { | ||
| g.Middleware = append(g.Middleware, mw) | ||
| } | ||
|
|
||
| // The `runUrlRequestPipeline` function is a method of the `Gateway` struct. It iterates over the | ||
| // `Middleware` slice of the `Gateway` struct and executes each middleware function in order. Each | ||
| // middleware function takes a `Gateway` instance and a URL `link` as parameters and returns an error. | ||
| // If any middleware function returns an error, the `runUrlRequestPipeline` function immediately | ||
| // returns that error. If all middleware functions are executed successfully, the function returns | ||
| // `nil`. | ||
| func (g *Gateway) runUrlRequestPipeline(link string) error { | ||
| for _, mw := range g.Middleware { | ||
| fmt.Printf("running middleware: %s\n", mw.Name) | ||
|
|
||
| err := (*mw).Handler(g, link) | ||
| if err != nil { | ||
| return err | ||
| } | ||
| } | ||
|
|
||
| return nil | ||
| } | ||
|
|
||
| func (g *Gateway) Allowed(link string) bool { | ||
| return g.runUrlRequestPipeline(link) == nil | ||
| } | ||
|
|
||
| // processes an array of domains and remove any empty strings and extract hostnames from URLs if | ||
| // they are present, then copy the result back to the original array so we have an array of only | ||
| // hostnames with or without wildcard characters. | ||
| func (g *Gateway) normalizeDataArray(arr *[]string) { | ||
| tempDomains := []string{} | ||
|
|
||
| for _, domain := range *arr { | ||
| if len(strings.TrimSpace(domain)) == 0 { | ||
| continue | ||
| } | ||
| if strings.Contains(domain, "://") { | ||
| parsedUrl, _ := url.Parse(domain) | ||
| domain = parsedUrl.Host | ||
| } | ||
|
|
||
| tempDomains = append(tempDomains, domain) | ||
| } | ||
|
|
||
| copy(*arr, tempDomains) | ||
| } | ||
|
|
||
| func (g *Gateway) Enable() { | ||
| g.Enabled = true | ||
| } | ||
|
|
||
| func (g *Gateway) Disable() { | ||
| g.Enabled = false | ||
| } | ||
|
|
||
| func (g *Gateway) checkArrayForMatch(arr *[]string, s string) bool { | ||
| for _, domain := range *arr { | ||
| if strings.EqualFold(s, domain) { | ||
| return true | ||
| } | ||
| if strings.Contains(domain, "*") && glob.Glob(domain, s) { | ||
| return true | ||
| } | ||
| } | ||
|
|
||
| return false | ||
| } | ||
|
|
||
| // GetUrl returns the contents of a URL as a string, assuming it | ||
| // is allowed by the gateway, otherwise it returns an error. | ||
| func (g *Gateway) GetUrl(urlStr string, headers ...string) (string, error) { | ||
| err := g.runUrlRequestPipeline(urlStr) | ||
| if err != nil { | ||
| return "", err | ||
| } | ||
|
|
||
| // remove the header items that are empty strings: | ||
| var tempHeaders []string | ||
| for _, header := range headers { | ||
| if strings.TrimSpace(header) != "" { | ||
| tempHeaders = append(tempHeaders, header) | ||
| } | ||
| } | ||
|
|
||
| req, err := http.NewRequest("GET", urlStr, nil) | ||
| if err != nil { | ||
| return "", err | ||
| } | ||
|
|
||
| // Add headers to the request | ||
| for _, header := range tempHeaders { | ||
| parts := strings.SplitN(header, ":", 2) | ||
| if len(parts) == 2 { | ||
| req.Header.Set(strings.TrimSpace(parts[0]), strings.TrimSpace(parts[1])) | ||
| } | ||
| } | ||
|
|
||
| resp, err := http.DefaultClient.Do(req) | ||
| if err != nil { | ||
| return "", err | ||
| } | ||
| defer resp.Body.Close() | ||
|
|
||
| if resp.StatusCode >= 400 { | ||
| return "", fmt.Errorf("HTTP error: %d", resp.StatusCode) | ||
| } | ||
|
|
||
| // Read the response body into a byte slice | ||
| body, err := io.ReadAll(resp.Body) | ||
| if err != nil { | ||
| return "", err | ||
| } | ||
|
|
||
| return string(body), nil | ||
| } |
Oops, something went wrong.