mirror of
https://github.com/hanzoai/tasks.git
synced 2026-10-04 02:04:03 +00:00
Michael SnowdenandGitHub
d5c62e926f
<!-- Describe what has changed in this PR --> **What changed?** I renamed all of our Go source code files so that they're snake case instead of camel case. <!-- Tell your future self why have you made these changes --> **Why?** This was an annoying inconsistency we carried over from much older code in the repo. <!-- How have you verified this change? Tested locally? Added a unit test? Checked in staging env? --> **How did you test it?** The renaming process was part of an automated script (https://gist.github.com/MichaelSnowden/47576fffe27aa1cae6b26eaccec7ab55), so it should be consistent. Also, I don't see us doing anything in our codebase that involves parsing our own source files by path: <img width="687" alt="image" src="https://github.com/temporalio/temporal/assets/5942963/c6b873b0-d841-40d1-8b0f-2fe9d8079a53"> *PS: here's a link to the GPT convo I had to generate this renaming script: https://chat.openai.com/share/7f2d011a-a8da-4fa4-9c6d-e09102fdd49f* <!-- Assuming the worst case, what can be broken when deploying this change to production? --> **Potential risks** Mainly merge conflicts, but I used `git mv` so that these are renames instead of deletes/adds, so that shouldn't be a big issue. <!-- Is this PR a hotfix candidate or require that a notification be sent to the broader community? (Yes/No) --> **Is hotfix candidate?** No.
98 lines
2.8 KiB
Go
98 lines
2.8 KiB
Go
// The MIT License
|
|
//
|
|
// Copyright (c) 2020 Temporal Technologies Inc. All rights reserved.
|
|
//
|
|
// Copyright (c) 2020 Uber Technologies, Inc.
|
|
//
|
|
// Permission is hereby granted, free of charge, to any person obtaining a copy
|
|
// of this software and associated documentation files (the "Software"), to deal
|
|
// in the Software without restriction, including without limitation the rights
|
|
// to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
|
|
// copies of the Software, and to permit persons to whom the Software is
|
|
// furnished to do so, subject to the following conditions:
|
|
//
|
|
// The above copyright notice and this permission notice shall be included in
|
|
// all copies or substantial portions of the Software.
|
|
//
|
|
// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
|
|
// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
|
|
// FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
|
|
// AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
|
|
// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
|
|
// OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
|
|
// THE SOFTWARE.
|
|
|
|
package auth
|
|
|
|
import (
|
|
"crypto/tls"
|
|
"crypto/x509"
|
|
|
|
"go.temporal.io/server/common/log"
|
|
"go.temporal.io/server/common/log/tag"
|
|
)
|
|
|
|
// Helper methods for creating tls.Config structs to ensure MinVersion is 1.3
|
|
|
|
func NewEmptyTLSConfig() *tls.Config {
|
|
return &tls.Config{
|
|
MinVersion: tls.VersionTLS12,
|
|
NextProtos: []string{
|
|
"h2",
|
|
},
|
|
}
|
|
}
|
|
|
|
func NewTLSConfigForServer(
|
|
serverName string,
|
|
enableHostVerification bool,
|
|
) *tls.Config {
|
|
c := NewEmptyTLSConfig()
|
|
c.ServerName = serverName
|
|
c.InsecureSkipVerify = !enableHostVerification
|
|
return c
|
|
}
|
|
|
|
func NewDynamicTLSClientConfig(
|
|
getCert func() (*tls.Certificate, error),
|
|
rootCAs *x509.CertPool,
|
|
serverName string,
|
|
enableHostVerification bool,
|
|
) *tls.Config {
|
|
c := NewTLSConfigForServer(serverName, enableHostVerification)
|
|
|
|
if getCert != nil {
|
|
c.GetClientCertificate = func(info *tls.CertificateRequestInfo) (*tls.Certificate, error) {
|
|
return getCert()
|
|
}
|
|
}
|
|
c.RootCAs = rootCAs
|
|
|
|
return c
|
|
}
|
|
|
|
func NewTLSConfigWithCertsAndCAs(
|
|
clientAuth tls.ClientAuthType,
|
|
certificates []tls.Certificate,
|
|
clientCAs *x509.CertPool,
|
|
logger log.Logger,
|
|
) *tls.Config {
|
|
c := NewEmptyTLSConfig()
|
|
c.ClientAuth = clientAuth
|
|
c.Certificates = certificates
|
|
c.ClientCAs = clientCAs
|
|
c.VerifyConnection = func(state tls.ConnectionState) error {
|
|
logger.Debug("successfully established incoming TLS connection", tag.ServerName(state.ServerName), tag.Name(tlsCN(state)))
|
|
return nil
|
|
}
|
|
return c
|
|
}
|
|
|
|
func tlsCN(state tls.ConnectionState) string {
|
|
|
|
if len(state.PeerCertificates) == 0 {
|
|
return ""
|
|
}
|
|
return state.PeerCertificates[0].Subject.CommonName
|
|
}
|