mirror of
				https://github.com/caddyserver/caddy.git
				synced 2025-11-04 03:27:23 -05:00 
			
		
		
		
	
		
			Some checks failed
		
		
	
	Tests / test (./cmd/caddy/caddy, ~1.22.3, macos-14, 0, 1.22, mac) (push) Waiting to run
				
			Tests / test (./cmd/caddy/caddy, ~1.23.0, macos-14, 0, 1.23, mac) (push) Waiting to run
				
			Tests / test (./cmd/caddy/caddy.exe, ~1.22.3, windows-latest, True, 1.22, windows) (push) Waiting to run
				
			Tests / test (./cmd/caddy/caddy.exe, ~1.23.0, windows-latest, True, 1.23, windows) (push) Waiting to run
				
			Lint / lint (macos-14, mac) (push) Waiting to run
				
			Lint / lint (windows-latest, windows) (push) Waiting to run
				
			Tests / test (./cmd/caddy/caddy, ~1.22.3, ubuntu-latest, 0, 1.22, linux) (push) Failing after 1m46s
				
			Tests / test (./cmd/caddy/caddy, ~1.23.0, ubuntu-latest, 0, 1.23, linux) (push) Failing after 1m29s
				
			Tests / test (s390x on IBM Z) (push) Has been skipped
				
			Tests / goreleaser-check (push) Successful in 22s
				
			Cross-Build / build (~1.22.3, 1.22, aix) (push) Successful in 1m43s
				
			Cross-Build / build (~1.22.3, 1.22, darwin) (push) Successful in 1m38s
				
			Cross-Build / build (~1.22.3, 1.22, dragonfly) (push) Successful in 1m36s
				
			Cross-Build / build (~1.22.3, 1.22, freebsd) (push) Successful in 1m40s
				
			Cross-Build / build (~1.22.3, 1.22, illumos) (push) Successful in 1m45s
				
			Cross-Build / build (~1.22.3, 1.22, linux) (push) Successful in 1m49s
				
			Cross-Build / build (~1.22.3, 1.22, netbsd) (push) Successful in 1m43s
				
			Cross-Build / build (~1.22.3, 1.22, openbsd) (push) Successful in 1m42s
				
			Cross-Build / build (~1.22.3, 1.22, solaris) (push) Successful in 1m41s
				
			Cross-Build / build (~1.22.3, 1.22, windows) (push) Successful in 1m40s
				
			Cross-Build / build (~1.23.0, 1.23, aix) (push) Successful in 1m26s
				
			Cross-Build / build (~1.23.0, 1.23, darwin) (push) Successful in 1m28s
				
			Cross-Build / build (~1.23.0, 1.23, dragonfly) (push) Successful in 1m25s
				
			Cross-Build / build (~1.23.0, 1.23, freebsd) (push) Successful in 1m30s
				
			Cross-Build / build (~1.23.0, 1.23, illumos) (push) Successful in 1m33s
				
			Cross-Build / build (~1.23.0, 1.23, linux) (push) Successful in 1m28s
				
			Cross-Build / build (~1.23.0, 1.23, netbsd) (push) Successful in 1m28s
				
			Cross-Build / build (~1.23.0, 1.23, openbsd) (push) Successful in 1m30s
				
			Cross-Build / build (~1.23.0, 1.23, solaris) (push) Successful in 1m31s
				
			Cross-Build / build (~1.23.0, 1.23, windows) (push) Successful in 1m31s
				
			Lint / lint (ubuntu-latest, linux) (push) Successful in 2m15s
				
			Lint / govulncheck (push) Successful in 1m24s
				
			* caddy adapt for listen_protocols * adapt listen_socket * allow multiple listen sockets for port ranges and readd socket fd listen logic * readd logic to start servers according to listener protocols * gofmt * adapt caddytest * gosec * fmt and rename listen to listenWithSocket * fmt and rename listen to listenWithSocket * more consistent error msg * non unix listenReusableWithSocketFile * remove unused func * doc comment typo * nonosec * commit * doc comments * more doc comments * comment was misleading, cardinality did not change * addressesWithProtocols * update test * fd/ and fdgram/ * rm addr * actually write... * i guess we doin' "skip": now * wrong var in placeholder * wrong var in placeholder II * update param name in comment * dont save nil file pointers * windows * key -> parsedKey * osx * multiple default_bind with protocols * check for h1 and h2 listener netw
		
			
				
	
	
		
			446 lines
		
	
	
		
			12 KiB
		
	
	
	
		
			Go
		
	
	
	
	
	
			
		
		
	
	
			446 lines
		
	
	
		
			12 KiB
		
	
	
	
		
			Go
		
	
	
	
	
	
// Copyright 2015 Matthew Holt and The Caddy Authors
 | 
						|
//
 | 
						|
// Licensed under the Apache License, Version 2.0 (the "License");
 | 
						|
// you may not use this file except in compliance with the License.
 | 
						|
// You may obtain a copy of the License at
 | 
						|
//
 | 
						|
//     http://www.apache.org/licenses/LICENSE-2.0
 | 
						|
//
 | 
						|
// Unless required by applicable law or agreed to in writing, software
 | 
						|
// distributed under the License is distributed on an "AS IS" BASIS,
 | 
						|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 | 
						|
// See the License for the specific language governing permissions and
 | 
						|
// limitations under the License.
 | 
						|
 | 
						|
package caddy
 | 
						|
 | 
						|
import (
 | 
						|
	"bytes"
 | 
						|
	"fmt"
 | 
						|
	"io"
 | 
						|
	"net/http"
 | 
						|
	"os"
 | 
						|
	"path/filepath"
 | 
						|
	"runtime"
 | 
						|
	"strconv"
 | 
						|
	"strings"
 | 
						|
	"sync"
 | 
						|
	"time"
 | 
						|
 | 
						|
	"go.uber.org/zap"
 | 
						|
)
 | 
						|
 | 
						|
// NewReplacer returns a new Replacer.
 | 
						|
func NewReplacer() *Replacer {
 | 
						|
	rep := &Replacer{
 | 
						|
		static:   make(map[string]any),
 | 
						|
		mapMutex: &sync.RWMutex{},
 | 
						|
	}
 | 
						|
	rep.providers = []replacementProvider{
 | 
						|
		globalDefaultReplacementProvider{},
 | 
						|
		fileReplacementProvider{},
 | 
						|
		ReplacerFunc(rep.fromStatic),
 | 
						|
	}
 | 
						|
	return rep
 | 
						|
}
 | 
						|
 | 
						|
// NewEmptyReplacer returns a new Replacer,
 | 
						|
// without the global default replacements.
 | 
						|
func NewEmptyReplacer() *Replacer {
 | 
						|
	rep := &Replacer{
 | 
						|
		static:   make(map[string]any),
 | 
						|
		mapMutex: &sync.RWMutex{},
 | 
						|
	}
 | 
						|
	rep.providers = []replacementProvider{
 | 
						|
		ReplacerFunc(rep.fromStatic),
 | 
						|
	}
 | 
						|
	return rep
 | 
						|
}
 | 
						|
 | 
						|
// Replacer can replace values in strings.
 | 
						|
// A default/empty Replacer is not valid;
 | 
						|
// use NewReplacer to make one.
 | 
						|
type Replacer struct {
 | 
						|
	providers []replacementProvider
 | 
						|
	static    map[string]any
 | 
						|
	mapMutex  *sync.RWMutex
 | 
						|
}
 | 
						|
 | 
						|
// WithoutFile returns a copy of the current Replacer
 | 
						|
// without support for the {file.*} placeholder, which
 | 
						|
// may be unsafe in some contexts.
 | 
						|
//
 | 
						|
// EXPERIMENTAL: Subject to change or removal.
 | 
						|
func (r *Replacer) WithoutFile() *Replacer {
 | 
						|
	rep := &Replacer{static: r.static}
 | 
						|
	for _, v := range r.providers {
 | 
						|
		if _, ok := v.(fileReplacementProvider); ok {
 | 
						|
			continue
 | 
						|
		}
 | 
						|
		rep.providers = append(rep.providers, v)
 | 
						|
	}
 | 
						|
	return rep
 | 
						|
}
 | 
						|
 | 
						|
// Map adds mapFunc to the list of value providers.
 | 
						|
// mapFunc will be executed only at replace-time.
 | 
						|
func (r *Replacer) Map(mapFunc ReplacerFunc) {
 | 
						|
	r.providers = append(r.providers, mapFunc)
 | 
						|
}
 | 
						|
 | 
						|
// Set sets a custom variable to a static value.
 | 
						|
func (r *Replacer) Set(variable string, value any) {
 | 
						|
	r.mapMutex.Lock()
 | 
						|
	r.static[variable] = value
 | 
						|
	r.mapMutex.Unlock()
 | 
						|
}
 | 
						|
 | 
						|
// Get gets a value from the replacer. It returns
 | 
						|
// the value and whether the variable was known.
 | 
						|
func (r *Replacer) Get(variable string) (any, bool) {
 | 
						|
	for _, mapFunc := range r.providers {
 | 
						|
		if val, ok := mapFunc.replace(variable); ok {
 | 
						|
			return val, true
 | 
						|
		}
 | 
						|
	}
 | 
						|
	return nil, false
 | 
						|
}
 | 
						|
 | 
						|
// GetString is the same as Get, but coerces the value to a
 | 
						|
// string representation as efficiently as possible.
 | 
						|
func (r *Replacer) GetString(variable string) (string, bool) {
 | 
						|
	s, found := r.Get(variable)
 | 
						|
	return ToString(s), found
 | 
						|
}
 | 
						|
 | 
						|
// Delete removes a variable with a static value
 | 
						|
// that was created using Set.
 | 
						|
func (r *Replacer) Delete(variable string) {
 | 
						|
	r.mapMutex.Lock()
 | 
						|
	delete(r.static, variable)
 | 
						|
	r.mapMutex.Unlock()
 | 
						|
}
 | 
						|
 | 
						|
// fromStatic provides values from r.static.
 | 
						|
func (r *Replacer) fromStatic(key string) (any, bool) {
 | 
						|
	r.mapMutex.RLock()
 | 
						|
	defer r.mapMutex.RUnlock()
 | 
						|
	val, ok := r.static[key]
 | 
						|
	return val, ok
 | 
						|
}
 | 
						|
 | 
						|
// ReplaceOrErr is like ReplaceAll, but any placeholders
 | 
						|
// that are empty or not recognized will cause an error to
 | 
						|
// be returned.
 | 
						|
func (r *Replacer) ReplaceOrErr(input string, errOnEmpty, errOnUnknown bool) (string, error) {
 | 
						|
	return r.replace(input, "", false, errOnEmpty, errOnUnknown, nil)
 | 
						|
}
 | 
						|
 | 
						|
// ReplaceKnown is like ReplaceAll but only replaces
 | 
						|
// placeholders that are known (recognized). Unrecognized
 | 
						|
// placeholders will remain in the output.
 | 
						|
func (r *Replacer) ReplaceKnown(input, empty string) string {
 | 
						|
	out, _ := r.replace(input, empty, false, false, false, nil)
 | 
						|
	return out
 | 
						|
}
 | 
						|
 | 
						|
// ReplaceAll efficiently replaces placeholders in input with
 | 
						|
// their values. All placeholders are replaced in the output
 | 
						|
// whether they are recognized or not. Values that are empty
 | 
						|
// string will be substituted with empty.
 | 
						|
func (r *Replacer) ReplaceAll(input, empty string) string {
 | 
						|
	out, _ := r.replace(input, empty, true, false, false, nil)
 | 
						|
	return out
 | 
						|
}
 | 
						|
 | 
						|
// ReplaceFunc is the same as ReplaceAll, but calls f for every
 | 
						|
// replacement to be made, in case f wants to change or inspect
 | 
						|
// the replacement.
 | 
						|
func (r *Replacer) ReplaceFunc(input string, f ReplacementFunc) (string, error) {
 | 
						|
	return r.replace(input, "", true, false, false, f)
 | 
						|
}
 | 
						|
 | 
						|
func (r *Replacer) replace(input, empty string,
 | 
						|
	treatUnknownAsEmpty, errOnEmpty, errOnUnknown bool,
 | 
						|
	f ReplacementFunc,
 | 
						|
) (string, error) {
 | 
						|
	if !strings.Contains(input, string(phOpen)) && !strings.Contains(input, string(phClose)) {
 | 
						|
		return input, nil
 | 
						|
	}
 | 
						|
 | 
						|
	var sb strings.Builder
 | 
						|
 | 
						|
	// it is reasonable to assume that the output
 | 
						|
	// will be approximately as long as the input
 | 
						|
	sb.Grow(len(input))
 | 
						|
 | 
						|
	// iterate the input to find each placeholder
 | 
						|
	var lastWriteCursor int
 | 
						|
 | 
						|
	// fail fast if too many placeholders are unclosed
 | 
						|
	var unclosedCount int
 | 
						|
 | 
						|
scan:
 | 
						|
	for i := 0; i < len(input); i++ {
 | 
						|
		// check for escaped braces
 | 
						|
		if i > 0 && input[i-1] == phEscape && (input[i] == phClose || input[i] == phOpen) {
 | 
						|
			sb.WriteString(input[lastWriteCursor : i-1])
 | 
						|
			lastWriteCursor = i
 | 
						|
			continue
 | 
						|
		}
 | 
						|
 | 
						|
		if input[i] != phOpen {
 | 
						|
			continue
 | 
						|
		}
 | 
						|
 | 
						|
		// our iterator is now on an unescaped open brace (start of placeholder)
 | 
						|
 | 
						|
		// too many unclosed placeholders in absolutely ridiculous input can be extremely slow (issue #4170)
 | 
						|
		if unclosedCount > 100 {
 | 
						|
			return "", fmt.Errorf("too many unclosed placeholders")
 | 
						|
		}
 | 
						|
 | 
						|
		// find the end of the placeholder
 | 
						|
		end := strings.Index(input[i:], string(phClose)) + i
 | 
						|
		if end < i {
 | 
						|
			unclosedCount++
 | 
						|
			continue
 | 
						|
		}
 | 
						|
 | 
						|
		// if necessary look for the first closing brace that is not escaped
 | 
						|
		for end > 0 && end < len(input)-1 && input[end-1] == phEscape {
 | 
						|
			nextEnd := strings.Index(input[end+1:], string(phClose))
 | 
						|
			if nextEnd < 0 {
 | 
						|
				unclosedCount++
 | 
						|
				continue scan
 | 
						|
			}
 | 
						|
			end += nextEnd + 1
 | 
						|
		}
 | 
						|
 | 
						|
		// write the substring from the last cursor to this point
 | 
						|
		sb.WriteString(input[lastWriteCursor:i])
 | 
						|
 | 
						|
		// trim opening bracket
 | 
						|
		key := input[i+1 : end]
 | 
						|
 | 
						|
		// try to get a value for this key, handle empty values accordingly
 | 
						|
		val, found := r.Get(key)
 | 
						|
		if !found {
 | 
						|
			// placeholder is unknown (unrecognized); handle accordingly
 | 
						|
			if errOnUnknown {
 | 
						|
				return "", fmt.Errorf("unrecognized placeholder %s%s%s",
 | 
						|
					string(phOpen), key, string(phClose))
 | 
						|
			} else if !treatUnknownAsEmpty {
 | 
						|
				// if treatUnknownAsEmpty is true, we'll handle an empty
 | 
						|
				// val later; so only continue otherwise
 | 
						|
				lastWriteCursor = i
 | 
						|
				continue
 | 
						|
			}
 | 
						|
		}
 | 
						|
 | 
						|
		// apply any transformations
 | 
						|
		if f != nil {
 | 
						|
			var err error
 | 
						|
			val, err = f(key, val)
 | 
						|
			if err != nil {
 | 
						|
				return "", err
 | 
						|
			}
 | 
						|
		}
 | 
						|
 | 
						|
		// convert val to a string as efficiently as possible
 | 
						|
		valStr := ToString(val)
 | 
						|
 | 
						|
		// write the value; if it's empty, either return
 | 
						|
		// an error or write a default value
 | 
						|
		if valStr == "" {
 | 
						|
			if errOnEmpty {
 | 
						|
				return "", fmt.Errorf("evaluated placeholder %s%s%s is empty",
 | 
						|
					string(phOpen), key, string(phClose))
 | 
						|
			} else if empty != "" {
 | 
						|
				sb.WriteString(empty)
 | 
						|
			}
 | 
						|
		} else {
 | 
						|
			sb.WriteString(valStr)
 | 
						|
		}
 | 
						|
 | 
						|
		// advance cursor to end of placeholder
 | 
						|
		i = end
 | 
						|
		lastWriteCursor = i + 1
 | 
						|
	}
 | 
						|
 | 
						|
	// flush any unwritten remainder
 | 
						|
	sb.WriteString(input[lastWriteCursor:])
 | 
						|
 | 
						|
	return sb.String(), nil
 | 
						|
}
 | 
						|
 | 
						|
// ToString returns val as a string, as efficiently as possible.
 | 
						|
// EXPERIMENTAL: may be changed or removed later.
 | 
						|
func ToString(val any) string {
 | 
						|
	switch v := val.(type) {
 | 
						|
	case nil:
 | 
						|
		return ""
 | 
						|
	case string:
 | 
						|
		return v
 | 
						|
	case fmt.Stringer:
 | 
						|
		return v.String()
 | 
						|
	case error:
 | 
						|
		return v.Error()
 | 
						|
	case byte:
 | 
						|
		return string(v)
 | 
						|
	case []byte:
 | 
						|
		return string(v)
 | 
						|
	case []rune:
 | 
						|
		return string(v)
 | 
						|
	case int:
 | 
						|
		return strconv.Itoa(v)
 | 
						|
	case int32:
 | 
						|
		return strconv.Itoa(int(v))
 | 
						|
	case int64:
 | 
						|
		return strconv.Itoa(int(v))
 | 
						|
	case uint:
 | 
						|
		return strconv.FormatUint(uint64(v), 10)
 | 
						|
	case uint32:
 | 
						|
		return strconv.FormatUint(uint64(v), 10)
 | 
						|
	case uint64:
 | 
						|
		return strconv.FormatUint(v, 10)
 | 
						|
	case float32:
 | 
						|
		return strconv.FormatFloat(float64(v), 'f', -1, 32)
 | 
						|
	case float64:
 | 
						|
		return strconv.FormatFloat(v, 'f', -1, 64)
 | 
						|
	case bool:
 | 
						|
		if v {
 | 
						|
			return "true"
 | 
						|
		}
 | 
						|
		return "false"
 | 
						|
	default:
 | 
						|
		return fmt.Sprintf("%+v", v)
 | 
						|
	}
 | 
						|
}
 | 
						|
 | 
						|
// ReplacerFunc is a function that returns a replacement for the
 | 
						|
// given key along with true if the function is able to service
 | 
						|
// that key (even if the value is blank). If the function does
 | 
						|
// not recognize the key, false should be returned.
 | 
						|
type ReplacerFunc func(key string) (any, bool)
 | 
						|
 | 
						|
func (f ReplacerFunc) replace(key string) (any, bool) {
 | 
						|
	return f(key)
 | 
						|
}
 | 
						|
 | 
						|
// replacementProvider is a type that can provide replacements
 | 
						|
// for placeholders. Allows for type assertion to determine
 | 
						|
// which type of provider it is.
 | 
						|
type replacementProvider interface {
 | 
						|
	replace(key string) (any, bool)
 | 
						|
}
 | 
						|
 | 
						|
// fileReplacementsProvider handles {file.*} replacements,
 | 
						|
// reading a file from disk and replacing with its contents.
 | 
						|
type fileReplacementProvider struct{}
 | 
						|
 | 
						|
func (f fileReplacementProvider) replace(key string) (any, bool) {
 | 
						|
	if !strings.HasPrefix(key, filePrefix) {
 | 
						|
		return nil, false
 | 
						|
	}
 | 
						|
 | 
						|
	filename := key[len(filePrefix):]
 | 
						|
	maxSize := 1024 * 1024
 | 
						|
	body, err := readFileIntoBuffer(filename, maxSize)
 | 
						|
	if err != nil {
 | 
						|
		wd, _ := os.Getwd()
 | 
						|
		Log().Error("placeholder: failed to read file",
 | 
						|
			zap.String("file", filename),
 | 
						|
			zap.String("working_dir", wd),
 | 
						|
			zap.Error(err))
 | 
						|
		return nil, true
 | 
						|
	}
 | 
						|
	body = bytes.TrimSuffix(body, []byte("\n"))
 | 
						|
	body = bytes.TrimSuffix(body, []byte("\r"))
 | 
						|
	return string(body), true
 | 
						|
}
 | 
						|
 | 
						|
// globalDefaultReplacementsProvider handles replacements
 | 
						|
// that can be used in any context, such as system variables,
 | 
						|
// time, or environment variables.
 | 
						|
type globalDefaultReplacementProvider struct{}
 | 
						|
 | 
						|
func (f globalDefaultReplacementProvider) replace(key string) (any, bool) {
 | 
						|
	// check environment variable
 | 
						|
	const envPrefix = "env."
 | 
						|
	if strings.HasPrefix(key, envPrefix) {
 | 
						|
		return os.Getenv(key[len(envPrefix):]), true
 | 
						|
	}
 | 
						|
 | 
						|
	switch key {
 | 
						|
	case "system.hostname":
 | 
						|
		// OK if there is an error; just return empty string
 | 
						|
		name, _ := os.Hostname()
 | 
						|
		return name, true
 | 
						|
	case "system.slash":
 | 
						|
		return string(filepath.Separator), true
 | 
						|
	case "system.os":
 | 
						|
		return runtime.GOOS, true
 | 
						|
	case "system.wd":
 | 
						|
		// OK if there is an error; just return empty string
 | 
						|
		wd, _ := os.Getwd()
 | 
						|
		return wd, true
 | 
						|
	case "system.arch":
 | 
						|
		return runtime.GOARCH, true
 | 
						|
	case "time.now":
 | 
						|
		return nowFunc(), true
 | 
						|
	case "time.now.http":
 | 
						|
		// According to the comment for http.TimeFormat, the timezone must be in UTC
 | 
						|
		// to generate the correct format.
 | 
						|
		// https://github.com/caddyserver/caddy/issues/5773
 | 
						|
		return nowFunc().UTC().Format(http.TimeFormat), true
 | 
						|
	case "time.now.common_log":
 | 
						|
		return nowFunc().Format("02/Jan/2006:15:04:05 -0700"), true
 | 
						|
	case "time.now.year":
 | 
						|
		return strconv.Itoa(nowFunc().Year()), true
 | 
						|
	case "time.now.unix":
 | 
						|
		return strconv.FormatInt(nowFunc().Unix(), 10), true
 | 
						|
	case "time.now.unix_ms":
 | 
						|
		return strconv.FormatInt(nowFunc().UnixNano()/int64(time.Millisecond), 10), true
 | 
						|
	}
 | 
						|
 | 
						|
	return nil, false
 | 
						|
}
 | 
						|
 | 
						|
// readFileIntoBuffer reads the file at filePath into a size limited buffer.
 | 
						|
func readFileIntoBuffer(filename string, size int) ([]byte, error) {
 | 
						|
	file, err := os.Open(filename)
 | 
						|
	if err != nil {
 | 
						|
		return nil, err
 | 
						|
	}
 | 
						|
	defer file.Close()
 | 
						|
 | 
						|
	buffer := make([]byte, size)
 | 
						|
	n, err := file.Read(buffer)
 | 
						|
	if err != nil && err != io.EOF {
 | 
						|
		return nil, err
 | 
						|
	}
 | 
						|
 | 
						|
	// slice the buffer to the actual size
 | 
						|
	return buffer[:n], nil
 | 
						|
}
 | 
						|
 | 
						|
// ReplacementFunc is a function that is called when a
 | 
						|
// replacement is being performed. It receives the
 | 
						|
// variable (i.e. placeholder name) and the value that
 | 
						|
// will be the replacement, and returns the value that
 | 
						|
// will actually be the replacement, or an error. Note
 | 
						|
// that errors are sometimes ignored by replacers.
 | 
						|
type ReplacementFunc func(variable string, val any) (any, error)
 | 
						|
 | 
						|
// nowFunc is a variable so tests can change it
 | 
						|
// in order to obtain a deterministic time.
 | 
						|
var nowFunc = time.Now
 | 
						|
 | 
						|
// ReplacerCtxKey is the context key for a replacer.
 | 
						|
const ReplacerCtxKey CtxKey = "replacer"
 | 
						|
 | 
						|
const phOpen, phClose, phEscape = '{', '}', '\\'
 | 
						|
 | 
						|
const filePrefix = "file."
 |