mirror of
https://github.com/cloudflare/cloudflared.git
synced 2025-05-15 04:16:34 +00:00
de07da02cd
This adds a new verifier interface that can be attached to ingress.Rule. This would act as a middleware layer that gets executed at the start of proxy.ProxyHTTP. A jwt validator implementation for this verifier is also provided. The validator downloads the public key from the access teams endpoint and uses it to verify the JWT sent to cloudflared with the audtag (clientID) information provided in the config.
83 lines
2.2 KiB
Go
83 lines
2.2 KiB
Go
/*
|
|
*
|
|
* Copyright 2021 gRPC authors.
|
|
*
|
|
* Licensed under the Apache License, Version 2.0 (the "License");
|
|
* you may not use this file except in compliance with the License.
|
|
* You may obtain a copy of the License at
|
|
*
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
|
*
|
|
* Unless required by applicable law or agreed to in writing, software
|
|
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
* See the License for the specific language governing permissions and
|
|
* limitations under the License.
|
|
*
|
|
*/
|
|
|
|
// Package pretty defines helper functions to pretty-print structs for logging.
|
|
package pretty
|
|
|
|
import (
|
|
"bytes"
|
|
"encoding/json"
|
|
"fmt"
|
|
|
|
"github.com/golang/protobuf/jsonpb"
|
|
protov1 "github.com/golang/protobuf/proto"
|
|
"google.golang.org/protobuf/encoding/protojson"
|
|
protov2 "google.golang.org/protobuf/proto"
|
|
)
|
|
|
|
const jsonIndent = " "
|
|
|
|
// ToJSON marshals the input into a json string.
|
|
//
|
|
// If marshal fails, it falls back to fmt.Sprintf("%+v").
|
|
func ToJSON(e interface{}) string {
|
|
switch ee := e.(type) {
|
|
case protov1.Message:
|
|
mm := jsonpb.Marshaler{Indent: jsonIndent}
|
|
ret, err := mm.MarshalToString(ee)
|
|
if err != nil {
|
|
// This may fail for proto.Anys, e.g. for xDS v2, LDS, the v2
|
|
// messages are not imported, and this will fail because the message
|
|
// is not found.
|
|
return fmt.Sprintf("%+v", ee)
|
|
}
|
|
return ret
|
|
case protov2.Message:
|
|
mm := protojson.MarshalOptions{
|
|
Multiline: true,
|
|
Indent: jsonIndent,
|
|
}
|
|
ret, err := mm.Marshal(ee)
|
|
if err != nil {
|
|
// This may fail for proto.Anys, e.g. for xDS v2, LDS, the v2
|
|
// messages are not imported, and this will fail because the message
|
|
// is not found.
|
|
return fmt.Sprintf("%+v", ee)
|
|
}
|
|
return string(ret)
|
|
default:
|
|
ret, err := json.MarshalIndent(ee, "", jsonIndent)
|
|
if err != nil {
|
|
return fmt.Sprintf("%+v", ee)
|
|
}
|
|
return string(ret)
|
|
}
|
|
}
|
|
|
|
// FormatJSON formats the input json bytes with indentation.
|
|
//
|
|
// If Indent fails, it returns the unchanged input as string.
|
|
func FormatJSON(b []byte) string {
|
|
var out bytes.Buffer
|
|
err := json.Indent(&out, b, "", jsonIndent)
|
|
if err != nil {
|
|
return string(b)
|
|
}
|
|
return out.String()
|
|
}
|