mirror of
				https://github.com/caddyserver/caddy.git
				synced 2025-10-30 18:22:49 -04:00 
			
		
		
		
	
		
			
				
	
	
		
			109 lines
		
	
	
		
			4.4 KiB
		
	
	
	
		
			Go
		
	
	
	
	
	
			
		
		
	
	
			109 lines
		
	
	
		
			4.4 KiB
		
	
	
	
		
			Go
		
	
	
	
	
	
| // Package middleware provides some types and functions common among middleware.
 | |
| package middleware
 | |
| 
 | |
| import (
 | |
| 	"net/http"
 | |
| 	"path"
 | |
| 	"time"
 | |
| )
 | |
| 
 | |
| type (
 | |
| 	// Middleware is the middle layer which represents the traditional
 | |
| 	// idea of middleware: it chains one Handler to the next by being
 | |
| 	// passed the next Handler in the chain.
 | |
| 	Middleware func(Handler) Handler
 | |
| 
 | |
| 	// Handler is like http.Handler except ServeHTTP returns a status code
 | |
| 	// and an error. The status code is for the client's benefit; the error
 | |
| 	// value is for the server's benefit. The status code will be sent to
 | |
| 	// the client while the error value will be logged privately. Sometimes,
 | |
| 	// an error status code (4xx or 5xx) may be returned with a nil error
 | |
| 	// when there is no reason to log the error on the server.
 | |
| 	//
 | |
| 	// If a HandlerFunc returns an error (status >= 400), it should NOT
 | |
| 	// write to the response. This philosophy makes middleware.Handler
 | |
| 	// different from http.Handler: error handling should happen at the
 | |
| 	// application layer or in dedicated error-handling middleware only
 | |
| 	// rather than with an "every middleware for itself" paradigm.
 | |
| 	//
 | |
| 	// The application or error-handling middleware should incorporate logic
 | |
| 	// to ensure that the client always gets a proper response according to
 | |
| 	// the status code. For security reasons, it should probably not reveal
 | |
| 	// the actual error message. (Instead it should be logged, for example.)
 | |
| 	//
 | |
| 	// Handlers which do write to the response should return a status value
 | |
| 	// < 400 as a signal that a response has been written. In other words,
 | |
| 	// only error-handling middleware or the application will write to the
 | |
| 	// response for a status code >= 400. When ANY handler writes to the
 | |
| 	// response, it should return a status code < 400 to signal others to
 | |
| 	// NOT write to the response again, which would be erroneous.
 | |
| 	Handler interface {
 | |
| 		ServeHTTP(http.ResponseWriter, *http.Request) (int, error)
 | |
| 	}
 | |
| 
 | |
| 	// HandlerFunc is a convenience type like http.HandlerFunc, except
 | |
| 	// ServeHTTP returns a status code and an error. See Handler
 | |
| 	// documentation for more information.
 | |
| 	HandlerFunc func(http.ResponseWriter, *http.Request) (int, error)
 | |
| )
 | |
| 
 | |
| // ServeHTTP implements the Handler interface.
 | |
| func (f HandlerFunc) ServeHTTP(w http.ResponseWriter, r *http.Request) (int, error) {
 | |
| 	return f(w, r)
 | |
| }
 | |
| 
 | |
| // IndexFile looks for a file in /root/fpath/indexFile for each string
 | |
| // in indexFiles. If an index file is found, it returns the root-relative
 | |
| // path to the file and true. If no index file is found, empty string
 | |
| // and false is returned. fpath must end in a forward slash '/'
 | |
| // otherwise no index files will be tried (directory paths must end
 | |
| // in a forward slash according to HTTP).
 | |
| //
 | |
| // All paths passed into and returned from this function use '/' as the
 | |
| // path separator, just like URLs.  IndexFle handles path manipulation
 | |
| // internally for systems that use different path separators.
 | |
| func IndexFile(root http.FileSystem, fpath string, indexFiles []string) (string, bool) {
 | |
| 	if fpath[len(fpath)-1] != '/' || root == nil {
 | |
| 		return "", false
 | |
| 	}
 | |
| 	for _, indexFile := range indexFiles {
 | |
| 		// func (http.FileSystem).Open wants all paths separated by "/",
 | |
| 		// regardless of operating system convention, so use
 | |
| 		// path.Join instead of filepath.Join
 | |
| 		fp := path.Join(fpath, indexFile)
 | |
| 		f, err := root.Open(fp)
 | |
| 		if err == nil {
 | |
| 			f.Close()
 | |
| 			return fp, true
 | |
| 		}
 | |
| 	}
 | |
| 	return "", false
 | |
| }
 | |
| 
 | |
| // SetLastModifiedHeader checks if the provided modTime is valid and if it is sets it
 | |
| // as a Last-Modified header to the ResponseWriter. If the modTime is in the future
 | |
| // the current time is used instead.
 | |
| func SetLastModifiedHeader(w http.ResponseWriter, modTime time.Time) {
 | |
| 	if modTime.IsZero() || modTime.Equal(time.Unix(0, 0)) {
 | |
| 		// the time does not appear to be valid. Don't put it in the response
 | |
| 		return
 | |
| 	}
 | |
| 
 | |
| 	// RFC 2616 - Section 14.29 - Last-Modified:
 | |
| 	// An origin server MUST NOT send a Last-Modified date which is later than the
 | |
| 	// server's time of message origination. In such cases, where the resource's last
 | |
| 	// modification would indicate some time in the future, the server MUST replace
 | |
| 	// that date with the message origination date.
 | |
| 	now := currentTime()
 | |
| 	if modTime.After(now) {
 | |
| 		modTime = now
 | |
| 	}
 | |
| 
 | |
| 	w.Header().Set("Last-Modified", modTime.UTC().Format(http.TimeFormat))
 | |
| }
 | |
| 
 | |
| // currentTime returns time.Now() everytime it's called. It's used for mocking in tests.
 | |
| var currentTime = func() time.Time {
 | |
| 	return time.Now()
 | |
| }
 |