mirror of
https://github.com/hanzoai/gateway.git
synced 2026-10-30 15:04:44 +00:00
zeekayandHanzo Dev
a5c5cc019e
Modules declare go 1.27.1 and the build images follow. go fix applied the modernizers; omitzero is not applied, since it changes what the JSON says. Co-authored-by: Hanzo Dev <[email protected]>
124 lines
2.9 KiB
Go
124 lines
2.9 KiB
Go
package httpsecure
|
|
|
|
import (
|
|
"github.com/hanzoai/gateway/v2/internal/lura/config"
|
|
"github.com/unrolled/secure"
|
|
)
|
|
|
|
// Namespace is the key to use to store and access the custom config data
|
|
const Namespace = "github_com/devopsfaith/krakend-httpsecure"
|
|
|
|
// ZeroCfg is the zero value for the Config struct.
|
|
// Deprecated: the config getter does not return a ZeroCfg when no config available
|
|
var ZeroCfg = secure.Options{}
|
|
|
|
// ConfigGetter implements the config.ConfigGetter interface. It parses the extra config for the
|
|
// package and returns nil if something goes wrong.
|
|
func ConfigGetter(e config.ExtraConfig) any {
|
|
v, ok := e[Namespace]
|
|
if !ok {
|
|
return nil
|
|
}
|
|
tmp, ok := v.(map[string]any)
|
|
if !ok {
|
|
return nil
|
|
}
|
|
|
|
cfg := secure.Options{}
|
|
|
|
getStrings(tmp, "allowed_hosts", &cfg.AllowedHosts)
|
|
getBool(tmp, "allowed_hosts_are_regex", &cfg.AllowedHostsAreRegex)
|
|
getStrings(tmp, "host_proxy_headers", &cfg.HostsProxyHeaders)
|
|
|
|
getInt64(tmp, "sts_seconds", &cfg.STSSeconds)
|
|
getBool(tmp, "force_sts_header", &cfg.ForceSTSHeader)
|
|
|
|
getString(tmp, "custom_frame_options_value", &cfg.CustomFrameOptionsValue)
|
|
getString(tmp, "content_security_policy", &cfg.ContentSecurityPolicy)
|
|
// the feature for HPKP is no longer recommended and has been removed:
|
|
// https://github.com/unrolled/secure/commit/58f2e47bb3a34d4e58aabe6fa57e71255b89da90
|
|
// getString(tmp, "public_key", &cfg.PublicKey)
|
|
getString(tmp, "ssl_host", &cfg.SSLHost)
|
|
getString(tmp, "referrer_policy", &cfg.ReferrerPolicy)
|
|
|
|
getBool(tmp, "content_type_nosniff", &cfg.ContentTypeNosniff)
|
|
getBool(tmp, "browser_xss_filter", &cfg.BrowserXssFilter)
|
|
getBool(tmp, "is_development", &cfg.IsDevelopment)
|
|
getBool(tmp, "sts_include_subdomains", &cfg.STSIncludeSubdomains)
|
|
getBool(tmp, "frame_deny", &cfg.FrameDeny)
|
|
getBool(tmp, "ssl_redirect", &cfg.SSLRedirect)
|
|
|
|
cfg.SSLProxyHeaders = getStringMap(tmp, "ssl_proxy_headers")
|
|
return cfg
|
|
}
|
|
|
|
func getStrings(data map[string]any, key string, v *[]string) {
|
|
vi, ok := data[key]
|
|
if !ok {
|
|
return
|
|
}
|
|
va, ok := vi.([]any)
|
|
if !ok {
|
|
return
|
|
}
|
|
var result []string
|
|
for _, v := range va {
|
|
if s, ok := v.(string); ok {
|
|
result = append(result, s)
|
|
}
|
|
}
|
|
*v = result
|
|
}
|
|
|
|
func getStringMap(data map[string]any, key string) map[string]string {
|
|
im, ok := data[key]
|
|
if !ok {
|
|
return nil
|
|
}
|
|
mi, ok := im.(map[string]any)
|
|
if !ok {
|
|
return nil
|
|
}
|
|
|
|
nm := make(map[string]string, len(mi))
|
|
for mk, mv := range mi {
|
|
if s, ok := mv.(string); ok {
|
|
nm[mk] = s
|
|
}
|
|
}
|
|
return nm
|
|
}
|
|
|
|
func getString(data map[string]any, key string, v *string) {
|
|
vi, ok := data[key]
|
|
if !ok {
|
|
return
|
|
}
|
|
vs, ok := vi.(string)
|
|
if !ok {
|
|
return
|
|
}
|
|
*v = vs
|
|
}
|
|
|
|
func getBool(data map[string]any, key string, v *bool) {
|
|
if val, ok := data[key]; ok {
|
|
if b, ok := val.(bool); ok {
|
|
*v = b
|
|
}
|
|
}
|
|
}
|
|
|
|
func getInt64(data map[string]any, key string, v *int64) {
|
|
if val, ok := data[key]; ok {
|
|
switch i := val.(type) {
|
|
case int64:
|
|
*v = i
|
|
case int:
|
|
*v = int64(i)
|
|
case float64:
|
|
*v = int64(i)
|
|
}
|
|
}
|
|
}
|