mirror of
https://github.com/gravitational/teleport.git
synced 2026-11-02 06:08:23 +08:00
Trent Clarke
e1b2a267a9
This patch will allow the web api to (optionally) fall back from HTTPS to HTTP under very particular circumstances: 1. The appropriate `insecure` flag was set, and 2. The target host is the loopback If both conditions are met, this patch will allow the WebAPI client to fall back to plain HTTP when attempting to login to the auth server.
62 lines
1.5 KiB
Go
62 lines
1.5 KiB
Go
/*
|
|
Copyright 2021 Gravitational, Inc.
|
|
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
See the License for the specific language governing permissions and
|
|
limitations under the License.
|
|
*/
|
|
|
|
package utils
|
|
|
|
import (
|
|
"context"
|
|
"net"
|
|
"strings"
|
|
)
|
|
|
|
// IsLoopback returns 'true' if a given hostname resolves *only* to the
|
|
// local host's loopback interface
|
|
func IsLoopback(host string) bool {
|
|
return isLoopbackWithResolver(host, net.DefaultResolver)
|
|
}
|
|
|
|
type nameResolver interface {
|
|
LookupIPAddr(ctx context.Context, host string) ([]net.IPAddr, error)
|
|
}
|
|
|
|
// isLoopbackWithResolver provides the inner implementation of IsLoopback(),
|
|
// but allows the caller to inject a custom resolver for testing purposes.
|
|
func isLoopbackWithResolver(host string, resolver nameResolver) bool {
|
|
if strings.Contains(host, ":") {
|
|
var err error
|
|
host, _, err = net.SplitHostPort(host)
|
|
if err != nil {
|
|
return false
|
|
}
|
|
}
|
|
addrs, err := resolver.LookupIPAddr(context.Background(), host)
|
|
if err != nil {
|
|
return false
|
|
}
|
|
|
|
if len(addrs) == 0 {
|
|
return false
|
|
}
|
|
|
|
for _, addr := range addrs {
|
|
if !addr.IP.IsLoopback() {
|
|
return false
|
|
}
|
|
}
|
|
|
|
return true
|
|
}
|