Refactor to use publicsuffix
This commit is contained in:
parent
11e1e9120a
commit
501fc5c059
@ -12,6 +12,7 @@ import (
|
|||||||
"github.com/micro/go-micro/v2/api/resolver/path"
|
"github.com/micro/go-micro/v2/api/resolver/path"
|
||||||
"github.com/micro/go-micro/v2/auth"
|
"github.com/micro/go-micro/v2/auth"
|
||||||
"github.com/micro/go-micro/v2/logger"
|
"github.com/micro/go-micro/v2/logger"
|
||||||
|
"golang.org/x/net/publicsuffix"
|
||||||
)
|
)
|
||||||
|
|
||||||
// CombinedAuthHandler wraps a server and authenticates requests
|
// CombinedAuthHandler wraps a server and authenticates requests
|
||||||
@ -39,7 +40,7 @@ type authHandler struct {
|
|||||||
|
|
||||||
func (h authHandler) ServeHTTP(w http.ResponseWriter, req *http.Request) {
|
func (h authHandler) ServeHTTP(w http.ResponseWriter, req *http.Request) {
|
||||||
// Determine the namespace and set it in the header
|
// Determine the namespace and set it in the header
|
||||||
namespace := h.namespaceFromRequest(req)
|
namespace := h.NamespaceFromRequest(req)
|
||||||
req.Header.Set(auth.NamespaceKey, namespace)
|
req.Header.Set(auth.NamespaceKey, namespace)
|
||||||
|
|
||||||
// Extract the token from the request
|
// Extract the token from the request
|
||||||
@ -131,7 +132,7 @@ func (h authHandler) ServeHTTP(w http.ResponseWriter, req *http.Request) {
|
|||||||
http.Redirect(w, req, loginWithRedirect, http.StatusTemporaryRedirect)
|
http.Redirect(w, req, loginWithRedirect, http.StatusTemporaryRedirect)
|
||||||
}
|
}
|
||||||
|
|
||||||
func (h authHandler) namespaceFromRequest(req *http.Request) string {
|
func (h authHandler) NamespaceFromRequest(req *http.Request) string {
|
||||||
// check to see what the provided namespace is, we only do
|
// check to see what the provided namespace is, we only do
|
||||||
// domain mapping if the namespace is set to 'domain'
|
// domain mapping if the namespace is set to 'domain'
|
||||||
if h.namespace != "domain" {
|
if h.namespace != "domain" {
|
||||||
@ -161,18 +162,27 @@ func (h authHandler) namespaceFromRequest(req *http.Request) string {
|
|||||||
return auth.DefaultNamespace
|
return auth.DefaultNamespace
|
||||||
}
|
}
|
||||||
|
|
||||||
// TODO: this logic needs to be replaced with usage of publicsuffix
|
// extract the top level domain plus one (e.g. 'myapp.com')
|
||||||
// if host is not a subdomain, deturn default namespace
|
domain, err := publicsuffix.EffectiveTLDPlusOne(host)
|
||||||
comps := strings.Split(host, ".")
|
if err != nil {
|
||||||
if len(comps) < 3 {
|
logger.Debugf("Unable to extract domain from %v", host)
|
||||||
return auth.DefaultNamespace
|
return auth.DefaultNamespace
|
||||||
}
|
}
|
||||||
|
|
||||||
|
// check to see if the domain is the host, in this
|
||||||
|
// case we return the default namespace
|
||||||
|
if domain == host {
|
||||||
|
return auth.DefaultNamespace
|
||||||
|
}
|
||||||
|
|
||||||
|
// remove the domain from the host, leaving the subdomain
|
||||||
|
subdomain := strings.TrimSuffix(host, "."+domain)
|
||||||
|
|
||||||
// return the reversed subdomain as the namespace
|
// return the reversed subdomain as the namespace
|
||||||
nComps := comps[0 : len(comps)-2]
|
comps := strings.Split(subdomain, ".")
|
||||||
for i := len(nComps)/2 - 1; i >= 0; i-- {
|
for i := len(comps)/2 - 1; i >= 0; i-- {
|
||||||
opp := len(nComps) - 1 - i
|
opp := len(comps) - 1 - i
|
||||||
nComps[i], nComps[opp] = nComps[opp], nComps[i]
|
comps[i], comps[opp] = comps[opp], comps[i]
|
||||||
}
|
}
|
||||||
return strings.Join(nComps, ".")
|
return strings.Join(comps, ".")
|
||||||
}
|
}
|
||||||
|
@ -13,6 +13,7 @@ func TestNamespaceFromRequest(t *testing.T) {
|
|||||||
Namespace string
|
Namespace string
|
||||||
}{
|
}{
|
||||||
{Host: "micro.mu", Namespace: auth.DefaultNamespace},
|
{Host: "micro.mu", Namespace: auth.DefaultNamespace},
|
||||||
|
{Host: "micro.com.au", Namespace: auth.DefaultNamespace},
|
||||||
{Host: "web.micro.mu", Namespace: auth.DefaultNamespace},
|
{Host: "web.micro.mu", Namespace: auth.DefaultNamespace},
|
||||||
{Host: "api.micro.mu", Namespace: auth.DefaultNamespace},
|
{Host: "api.micro.mu", Namespace: auth.DefaultNamespace},
|
||||||
{Host: "myapp.com", Namespace: auth.DefaultNamespace},
|
{Host: "myapp.com", Namespace: auth.DefaultNamespace},
|
||||||
@ -23,9 +24,11 @@ func TestNamespaceFromRequest(t *testing.T) {
|
|||||||
{Host: "81.151.101.146", Namespace: auth.DefaultNamespace},
|
{Host: "81.151.101.146", Namespace: auth.DefaultNamespace},
|
||||||
}
|
}
|
||||||
|
|
||||||
|
h := &authHandler{namespace: "domain"}
|
||||||
|
|
||||||
for _, tc := range tt {
|
for _, tc := range tt {
|
||||||
t.Run(tc.Host, func(t *testing.T) {
|
t.Run(tc.Host, func(t *testing.T) {
|
||||||
ns := namespaceFromRequest(&http.Request{Host: tc.Host})
|
ns := h.NamespaceFromRequest(&http.Request{Host: tc.Host})
|
||||||
if ns != tc.Namespace {
|
if ns != tc.Namespace {
|
||||||
t.Errorf("Expected namespace %v for host %v, actually got %v", tc.Namespace, tc.Host, ns)
|
t.Errorf("Expected namespace %v for host %v, actually got %v", tc.Namespace, tc.Host, ns)
|
||||||
}
|
}
|
||||||
|
1
go.sum
1
go.sum
@ -461,6 +461,7 @@ golang.org/x/net v0.0.0-20190930134127-c5a3c61f89f3/go.mod h1:z5CRVTTTmAJ677TzLL
|
|||||||
golang.org/x/net v0.0.0-20191027093000-83d349e8ac1a/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
|
golang.org/x/net v0.0.0-20191027093000-83d349e8ac1a/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
|
||||||
golang.org/x/net v0.0.0-20200222125558-5a598a2470a0 h1:MsuvTghUPjX762sGLnGsxC3HM0B5r83wEtYcYR8/vRs=
|
golang.org/x/net v0.0.0-20200222125558-5a598a2470a0 h1:MsuvTghUPjX762sGLnGsxC3HM0B5r83wEtYcYR8/vRs=
|
||||||
golang.org/x/net v0.0.0-20200222125558-5a598a2470a0/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
|
golang.org/x/net v0.0.0-20200222125558-5a598a2470a0/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
|
||||||
|
golang.org/x/net v0.0.0-20200324143707-d3edc9973b7e h1:3G+cUijn7XD+S4eJFddp53Pv7+slrESplyjG25HgL+k=
|
||||||
golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U=
|
golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U=
|
||||||
golang.org/x/oauth2 v0.0.0-20190226205417-e64efc72b421/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw=
|
golang.org/x/oauth2 v0.0.0-20190226205417-e64efc72b421/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw=
|
||||||
golang.org/x/oauth2 v0.0.0-20190604053449-0f29369cfe45/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw=
|
golang.org/x/oauth2 v0.0.0-20190604053449-0f29369cfe45/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw=
|
||||||
|
Loading…
Reference in New Issue
Block a user