mirror of
https://github.com/caddyserver/caddy.git
synced 2024-11-22 12:28:45 +08:00
4b1a9b6cc1
Some checks are pending
Tests / test (./cmd/caddy/caddy, ~1.22.3, macos-14, 0, 1.22, mac) (push) Waiting to run
Tests / test (./cmd/caddy/caddy, ~1.22.3, ubuntu-latest, 0, 1.22, linux) (push) Waiting to run
Tests / test (./cmd/caddy/caddy, ~1.23.0, macos-14, 0, 1.23, mac) (push) Waiting to run
Tests / test (./cmd/caddy/caddy, ~1.23.0, ubuntu-latest, 0, 1.23, linux) (push) Waiting to run
Tests / test (./cmd/caddy/caddy.exe, ~1.22.3, windows-latest, True, 1.22, windows) (push) Waiting to run
Tests / test (./cmd/caddy/caddy.exe, ~1.23.0, windows-latest, True, 1.23, windows) (push) Waiting to run
Tests / test (s390x on IBM Z) (push) Waiting to run
Tests / goreleaser-check (push) Waiting to run
Cross-Build / build (~1.22.3, 1.22, aix) (push) Waiting to run
Cross-Build / build (~1.22.3, 1.22, darwin) (push) Waiting to run
Cross-Build / build (~1.22.3, 1.22, dragonfly) (push) Waiting to run
Cross-Build / build (~1.22.3, 1.22, freebsd) (push) Waiting to run
Cross-Build / build (~1.22.3, 1.22, illumos) (push) Waiting to run
Cross-Build / build (~1.22.3, 1.22, linux) (push) Waiting to run
Cross-Build / build (~1.22.3, 1.22, netbsd) (push) Waiting to run
Cross-Build / build (~1.22.3, 1.22, openbsd) (push) Waiting to run
Cross-Build / build (~1.22.3, 1.22, solaris) (push) Waiting to run
Cross-Build / build (~1.22.3, 1.22, windows) (push) Waiting to run
Cross-Build / build (~1.23.0, 1.23, aix) (push) Waiting to run
Cross-Build / build (~1.23.0, 1.23, darwin) (push) Waiting to run
Cross-Build / build (~1.23.0, 1.23, dragonfly) (push) Waiting to run
Cross-Build / build (~1.23.0, 1.23, freebsd) (push) Waiting to run
Cross-Build / build (~1.23.0, 1.23, illumos) (push) Waiting to run
Cross-Build / build (~1.23.0, 1.23, linux) (push) Waiting to run
Cross-Build / build (~1.23.0, 1.23, netbsd) (push) Waiting to run
Cross-Build / build (~1.23.0, 1.23, openbsd) (push) Waiting to run
Cross-Build / build (~1.23.0, 1.23, solaris) (push) Waiting to run
Cross-Build / build (~1.23.0, 1.23, windows) (push) Waiting to run
Lint / lint (macos-14, mac) (push) Waiting to run
Lint / lint (ubuntu-latest, linux) (push) Waiting to run
Lint / lint (windows-latest, windows) (push) Waiting to run
Lint / govulncheck (push) Waiting to run
* caddy adapt for listen_protocols * adapt listen_socket * allow multiple listen sockets for port ranges and readd socket fd listen logic * readd logic to start servers according to listener protocols * gofmt * adapt caddytest * gosec * fmt and rename listen to listenWithSocket * fmt and rename listen to listenWithSocket * more consistent error msg * non unix listenReusableWithSocketFile * remove unused func * doc comment typo * nonosec * commit * doc comments * more doc comments * comment was misleading, cardinality did not change * addressesWithProtocols * update test * fd/ and fdgram/ * rm addr * actually write... * i guess we doin' "skip": now * wrong var in placeholder * wrong var in placeholder II * update param name in comment * dont save nil file pointers * windows * key -> parsedKey * osx * multiple default_bind with protocols * check for h1 and h2 listener netw
446 lines
12 KiB
Go
446 lines
12 KiB
Go
// Copyright 2015 Matthew Holt and The Caddy Authors
|
|
//
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
//
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
// See the License for the specific language governing permissions and
|
|
// limitations under the License.
|
|
|
|
package caddy
|
|
|
|
import (
|
|
"bytes"
|
|
"fmt"
|
|
"io"
|
|
"net/http"
|
|
"os"
|
|
"path/filepath"
|
|
"runtime"
|
|
"strconv"
|
|
"strings"
|
|
"sync"
|
|
"time"
|
|
|
|
"go.uber.org/zap"
|
|
)
|
|
|
|
// NewReplacer returns a new Replacer.
|
|
func NewReplacer() *Replacer {
|
|
rep := &Replacer{
|
|
static: make(map[string]any),
|
|
mapMutex: &sync.RWMutex{},
|
|
}
|
|
rep.providers = []replacementProvider{
|
|
globalDefaultReplacementProvider{},
|
|
fileReplacementProvider{},
|
|
ReplacerFunc(rep.fromStatic),
|
|
}
|
|
return rep
|
|
}
|
|
|
|
// NewEmptyReplacer returns a new Replacer,
|
|
// without the global default replacements.
|
|
func NewEmptyReplacer() *Replacer {
|
|
rep := &Replacer{
|
|
static: make(map[string]any),
|
|
mapMutex: &sync.RWMutex{},
|
|
}
|
|
rep.providers = []replacementProvider{
|
|
ReplacerFunc(rep.fromStatic),
|
|
}
|
|
return rep
|
|
}
|
|
|
|
// Replacer can replace values in strings.
|
|
// A default/empty Replacer is not valid;
|
|
// use NewReplacer to make one.
|
|
type Replacer struct {
|
|
providers []replacementProvider
|
|
static map[string]any
|
|
mapMutex *sync.RWMutex
|
|
}
|
|
|
|
// WithoutFile returns a copy of the current Replacer
|
|
// without support for the {file.*} placeholder, which
|
|
// may be unsafe in some contexts.
|
|
//
|
|
// EXPERIMENTAL: Subject to change or removal.
|
|
func (r *Replacer) WithoutFile() *Replacer {
|
|
rep := &Replacer{static: r.static}
|
|
for _, v := range r.providers {
|
|
if _, ok := v.(fileReplacementProvider); ok {
|
|
continue
|
|
}
|
|
rep.providers = append(rep.providers, v)
|
|
}
|
|
return rep
|
|
}
|
|
|
|
// Map adds mapFunc to the list of value providers.
|
|
// mapFunc will be executed only at replace-time.
|
|
func (r *Replacer) Map(mapFunc ReplacerFunc) {
|
|
r.providers = append(r.providers, mapFunc)
|
|
}
|
|
|
|
// Set sets a custom variable to a static value.
|
|
func (r *Replacer) Set(variable string, value any) {
|
|
r.mapMutex.Lock()
|
|
r.static[variable] = value
|
|
r.mapMutex.Unlock()
|
|
}
|
|
|
|
// Get gets a value from the replacer. It returns
|
|
// the value and whether the variable was known.
|
|
func (r *Replacer) Get(variable string) (any, bool) {
|
|
for _, mapFunc := range r.providers {
|
|
if val, ok := mapFunc.replace(variable); ok {
|
|
return val, true
|
|
}
|
|
}
|
|
return nil, false
|
|
}
|
|
|
|
// GetString is the same as Get, but coerces the value to a
|
|
// string representation as efficiently as possible.
|
|
func (r *Replacer) GetString(variable string) (string, bool) {
|
|
s, found := r.Get(variable)
|
|
return ToString(s), found
|
|
}
|
|
|
|
// Delete removes a variable with a static value
|
|
// that was created using Set.
|
|
func (r *Replacer) Delete(variable string) {
|
|
r.mapMutex.Lock()
|
|
delete(r.static, variable)
|
|
r.mapMutex.Unlock()
|
|
}
|
|
|
|
// fromStatic provides values from r.static.
|
|
func (r *Replacer) fromStatic(key string) (any, bool) {
|
|
r.mapMutex.RLock()
|
|
defer r.mapMutex.RUnlock()
|
|
val, ok := r.static[key]
|
|
return val, ok
|
|
}
|
|
|
|
// ReplaceOrErr is like ReplaceAll, but any placeholders
|
|
// that are empty or not recognized will cause an error to
|
|
// be returned.
|
|
func (r *Replacer) ReplaceOrErr(input string, errOnEmpty, errOnUnknown bool) (string, error) {
|
|
return r.replace(input, "", false, errOnEmpty, errOnUnknown, nil)
|
|
}
|
|
|
|
// ReplaceKnown is like ReplaceAll but only replaces
|
|
// placeholders that are known (recognized). Unrecognized
|
|
// placeholders will remain in the output.
|
|
func (r *Replacer) ReplaceKnown(input, empty string) string {
|
|
out, _ := r.replace(input, empty, false, false, false, nil)
|
|
return out
|
|
}
|
|
|
|
// ReplaceAll efficiently replaces placeholders in input with
|
|
// their values. All placeholders are replaced in the output
|
|
// whether they are recognized or not. Values that are empty
|
|
// string will be substituted with empty.
|
|
func (r *Replacer) ReplaceAll(input, empty string) string {
|
|
out, _ := r.replace(input, empty, true, false, false, nil)
|
|
return out
|
|
}
|
|
|
|
// ReplaceFunc is the same as ReplaceAll, but calls f for every
|
|
// replacement to be made, in case f wants to change or inspect
|
|
// the replacement.
|
|
func (r *Replacer) ReplaceFunc(input string, f ReplacementFunc) (string, error) {
|
|
return r.replace(input, "", true, false, false, f)
|
|
}
|
|
|
|
func (r *Replacer) replace(input, empty string,
|
|
treatUnknownAsEmpty, errOnEmpty, errOnUnknown bool,
|
|
f ReplacementFunc,
|
|
) (string, error) {
|
|
if !strings.Contains(input, string(phOpen)) && !strings.Contains(input, string(phClose)) {
|
|
return input, nil
|
|
}
|
|
|
|
var sb strings.Builder
|
|
|
|
// it is reasonable to assume that the output
|
|
// will be approximately as long as the input
|
|
sb.Grow(len(input))
|
|
|
|
// iterate the input to find each placeholder
|
|
var lastWriteCursor int
|
|
|
|
// fail fast if too many placeholders are unclosed
|
|
var unclosedCount int
|
|
|
|
scan:
|
|
for i := 0; i < len(input); i++ {
|
|
// check for escaped braces
|
|
if i > 0 && input[i-1] == phEscape && (input[i] == phClose || input[i] == phOpen) {
|
|
sb.WriteString(input[lastWriteCursor : i-1])
|
|
lastWriteCursor = i
|
|
continue
|
|
}
|
|
|
|
if input[i] != phOpen {
|
|
continue
|
|
}
|
|
|
|
// our iterator is now on an unescaped open brace (start of placeholder)
|
|
|
|
// too many unclosed placeholders in absolutely ridiculous input can be extremely slow (issue #4170)
|
|
if unclosedCount > 100 {
|
|
return "", fmt.Errorf("too many unclosed placeholders")
|
|
}
|
|
|
|
// find the end of the placeholder
|
|
end := strings.Index(input[i:], string(phClose)) + i
|
|
if end < i {
|
|
unclosedCount++
|
|
continue
|
|
}
|
|
|
|
// if necessary look for the first closing brace that is not escaped
|
|
for end > 0 && end < len(input)-1 && input[end-1] == phEscape {
|
|
nextEnd := strings.Index(input[end+1:], string(phClose))
|
|
if nextEnd < 0 {
|
|
unclosedCount++
|
|
continue scan
|
|
}
|
|
end += nextEnd + 1
|
|
}
|
|
|
|
// write the substring from the last cursor to this point
|
|
sb.WriteString(input[lastWriteCursor:i])
|
|
|
|
// trim opening bracket
|
|
key := input[i+1 : end]
|
|
|
|
// try to get a value for this key, handle empty values accordingly
|
|
val, found := r.Get(key)
|
|
if !found {
|
|
// placeholder is unknown (unrecognized); handle accordingly
|
|
if errOnUnknown {
|
|
return "", fmt.Errorf("unrecognized placeholder %s%s%s",
|
|
string(phOpen), key, string(phClose))
|
|
} else if !treatUnknownAsEmpty {
|
|
// if treatUnknownAsEmpty is true, we'll handle an empty
|
|
// val later; so only continue otherwise
|
|
lastWriteCursor = i
|
|
continue
|
|
}
|
|
}
|
|
|
|
// apply any transformations
|
|
if f != nil {
|
|
var err error
|
|
val, err = f(key, val)
|
|
if err != nil {
|
|
return "", err
|
|
}
|
|
}
|
|
|
|
// convert val to a string as efficiently as possible
|
|
valStr := ToString(val)
|
|
|
|
// write the value; if it's empty, either return
|
|
// an error or write a default value
|
|
if valStr == "" {
|
|
if errOnEmpty {
|
|
return "", fmt.Errorf("evaluated placeholder %s%s%s is empty",
|
|
string(phOpen), key, string(phClose))
|
|
} else if empty != "" {
|
|
sb.WriteString(empty)
|
|
}
|
|
} else {
|
|
sb.WriteString(valStr)
|
|
}
|
|
|
|
// advance cursor to end of placeholder
|
|
i = end
|
|
lastWriteCursor = i + 1
|
|
}
|
|
|
|
// flush any unwritten remainder
|
|
sb.WriteString(input[lastWriteCursor:])
|
|
|
|
return sb.String(), nil
|
|
}
|
|
|
|
// ToString returns val as a string, as efficiently as possible.
|
|
// EXPERIMENTAL: may be changed or removed later.
|
|
func ToString(val any) string {
|
|
switch v := val.(type) {
|
|
case nil:
|
|
return ""
|
|
case string:
|
|
return v
|
|
case fmt.Stringer:
|
|
return v.String()
|
|
case error:
|
|
return v.Error()
|
|
case byte:
|
|
return string(v)
|
|
case []byte:
|
|
return string(v)
|
|
case []rune:
|
|
return string(v)
|
|
case int:
|
|
return strconv.Itoa(v)
|
|
case int32:
|
|
return strconv.Itoa(int(v))
|
|
case int64:
|
|
return strconv.Itoa(int(v))
|
|
case uint:
|
|
return strconv.FormatUint(uint64(v), 10)
|
|
case uint32:
|
|
return strconv.FormatUint(uint64(v), 10)
|
|
case uint64:
|
|
return strconv.FormatUint(v, 10)
|
|
case float32:
|
|
return strconv.FormatFloat(float64(v), 'f', -1, 32)
|
|
case float64:
|
|
return strconv.FormatFloat(v, 'f', -1, 64)
|
|
case bool:
|
|
if v {
|
|
return "true"
|
|
}
|
|
return "false"
|
|
default:
|
|
return fmt.Sprintf("%+v", v)
|
|
}
|
|
}
|
|
|
|
// ReplacerFunc is a function that returns a replacement for the
|
|
// given key along with true if the function is able to service
|
|
// that key (even if the value is blank). If the function does
|
|
// not recognize the key, false should be returned.
|
|
type ReplacerFunc func(key string) (any, bool)
|
|
|
|
func (f ReplacerFunc) replace(key string) (any, bool) {
|
|
return f(key)
|
|
}
|
|
|
|
// replacementProvider is a type that can provide replacements
|
|
// for placeholders. Allows for type assertion to determine
|
|
// which type of provider it is.
|
|
type replacementProvider interface {
|
|
replace(key string) (any, bool)
|
|
}
|
|
|
|
// fileReplacementsProvider handles {file.*} replacements,
|
|
// reading a file from disk and replacing with its contents.
|
|
type fileReplacementProvider struct{}
|
|
|
|
func (f fileReplacementProvider) replace(key string) (any, bool) {
|
|
if !strings.HasPrefix(key, filePrefix) {
|
|
return nil, false
|
|
}
|
|
|
|
filename := key[len(filePrefix):]
|
|
maxSize := 1024 * 1024
|
|
body, err := readFileIntoBuffer(filename, maxSize)
|
|
if err != nil {
|
|
wd, _ := os.Getwd()
|
|
Log().Error("placeholder: failed to read file",
|
|
zap.String("file", filename),
|
|
zap.String("working_dir", wd),
|
|
zap.Error(err))
|
|
return nil, true
|
|
}
|
|
body = bytes.TrimSuffix(body, []byte("\n"))
|
|
body = bytes.TrimSuffix(body, []byte("\r"))
|
|
return string(body), true
|
|
}
|
|
|
|
// globalDefaultReplacementsProvider handles replacements
|
|
// that can be used in any context, such as system variables,
|
|
// time, or environment variables.
|
|
type globalDefaultReplacementProvider struct{}
|
|
|
|
func (f globalDefaultReplacementProvider) replace(key string) (any, bool) {
|
|
// check environment variable
|
|
const envPrefix = "env."
|
|
if strings.HasPrefix(key, envPrefix) {
|
|
return os.Getenv(key[len(envPrefix):]), true
|
|
}
|
|
|
|
switch key {
|
|
case "system.hostname":
|
|
// OK if there is an error; just return empty string
|
|
name, _ := os.Hostname()
|
|
return name, true
|
|
case "system.slash":
|
|
return string(filepath.Separator), true
|
|
case "system.os":
|
|
return runtime.GOOS, true
|
|
case "system.wd":
|
|
// OK if there is an error; just return empty string
|
|
wd, _ := os.Getwd()
|
|
return wd, true
|
|
case "system.arch":
|
|
return runtime.GOARCH, true
|
|
case "time.now":
|
|
return nowFunc(), true
|
|
case "time.now.http":
|
|
// According to the comment for http.TimeFormat, the timezone must be in UTC
|
|
// to generate the correct format.
|
|
// https://github.com/caddyserver/caddy/issues/5773
|
|
return nowFunc().UTC().Format(http.TimeFormat), true
|
|
case "time.now.common_log":
|
|
return nowFunc().Format("02/Jan/2006:15:04:05 -0700"), true
|
|
case "time.now.year":
|
|
return strconv.Itoa(nowFunc().Year()), true
|
|
case "time.now.unix":
|
|
return strconv.FormatInt(nowFunc().Unix(), 10), true
|
|
case "time.now.unix_ms":
|
|
return strconv.FormatInt(nowFunc().UnixNano()/int64(time.Millisecond), 10), true
|
|
}
|
|
|
|
return nil, false
|
|
}
|
|
|
|
// readFileIntoBuffer reads the file at filePath into a size limited buffer.
|
|
func readFileIntoBuffer(filename string, size int) ([]byte, error) {
|
|
file, err := os.Open(filename)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
defer file.Close()
|
|
|
|
buffer := make([]byte, size)
|
|
n, err := file.Read(buffer)
|
|
if err != nil && err != io.EOF {
|
|
return nil, err
|
|
}
|
|
|
|
// slice the buffer to the actual size
|
|
return buffer[:n], nil
|
|
}
|
|
|
|
// ReplacementFunc is a function that is called when a
|
|
// replacement is being performed. It receives the
|
|
// variable (i.e. placeholder name) and the value that
|
|
// will be the replacement, and returns the value that
|
|
// will actually be the replacement, or an error. Note
|
|
// that errors are sometimes ignored by replacers.
|
|
type ReplacementFunc func(variable string, val any) (any, error)
|
|
|
|
// nowFunc is a variable so tests can change it
|
|
// in order to obtain a deterministic time.
|
|
var nowFunc = time.Now
|
|
|
|
// ReplacerCtxKey is the context key for a replacer.
|
|
const ReplacerCtxKey CtxKey = "replacer"
|
|
|
|
const phOpen, phClose, phEscape = '{', '}', '\\'
|
|
|
|
const filePrefix = "file."
|