mirror of
https://codeberg.org/Codeberg/pages-server.git
synced 2024-11-23 06:18:59 +00:00
8b1f497bc4
- Currently if the canonical domain validations fails(either for legitimate reasons or for bug reasons like the request to Gitea/Forgejo failing) it will use main domain certificate, which in the case for custom domains will warrant a security error as the certificate isn't issued to the custom domain. - This patch handles this situation more gracefully and instead only disallow obtaining a certificate if the domain validation fails, so in the case that a certificate still exists it can still be used even if the canonical domain validation fails. There's a small side effect, legitimate users that remove domains from `.domain` will still be able to use the removed domain(as long as the DNS records exists) as long as the certificate currently hold by pages-server isn't expired. - Given the increased usage in custom domains that are resulting in errors, I think it ways more than the side effect. - In order to future-proof against future slowdowns of instances, add a retry mechanism to the domain validation function, such that it's more likely to succeed even if the instance is not responding. - Refactor the code a bit and add some comments. Co-authored-by: Gusted <postmaster@gusted.xyz> Co-authored-by: 6543 <6543@obermui.de> Reviewed-on: https://codeberg.org/Codeberg/pages-server/pulls/160 Reviewed-by: 6543 <6543@obermui.de> Co-authored-by: Gusted <gusted@noreply.codeberg.org> Co-committed-by: Gusted <gusted@noreply.codeberg.org>
70 lines
2.3 KiB
Go
70 lines
2.3 KiB
Go
package upstream
|
|
|
|
import (
|
|
"strings"
|
|
"time"
|
|
|
|
"github.com/rs/zerolog/log"
|
|
|
|
"codeberg.org/codeberg/pages/server/cache"
|
|
"codeberg.org/codeberg/pages/server/gitea"
|
|
)
|
|
|
|
// canonicalDomainCacheTimeout specifies the timeout for the canonical domain cache.
|
|
var canonicalDomainCacheTimeout = 15 * time.Minute
|
|
|
|
const canonicalDomainConfig = ".domains"
|
|
|
|
// CheckCanonicalDomain returns the canonical domain specified in the repo (using the `.domains` file).
|
|
func (o *Options) CheckCanonicalDomain(giteaClient *gitea.Client, actualDomain, mainDomainSuffix string, canonicalDomainCache cache.SetGetKey) (domain string, valid bool) {
|
|
// Check if this request is cached.
|
|
if cachedValue, ok := canonicalDomainCache.Get(o.TargetOwner + "/" + o.TargetRepo + "/" + o.TargetBranch); ok {
|
|
domains := cachedValue.([]string)
|
|
for _, domain := range domains {
|
|
if domain == actualDomain {
|
|
valid = true
|
|
break
|
|
}
|
|
}
|
|
return domains[0], valid
|
|
}
|
|
|
|
body, err := giteaClient.GiteaRawContent(o.TargetOwner, o.TargetRepo, o.TargetBranch, canonicalDomainConfig)
|
|
if err == nil || err == gitea.ErrorNotFound {
|
|
log.Info().Err(err).Msgf("could not read %s of %s/%s", canonicalDomainConfig, o.TargetOwner, o.TargetRepo)
|
|
}
|
|
|
|
var domains []string
|
|
for _, domain := range strings.Split(string(body), "\n") {
|
|
domain = strings.ToLower(domain)
|
|
domain = strings.TrimSpace(domain)
|
|
domain = strings.TrimPrefix(domain, "http://")
|
|
domain = strings.TrimPrefix(domain, "https://")
|
|
if len(domain) > 0 && !strings.HasPrefix(domain, "#") && !strings.ContainsAny(domain, "\t /") && strings.ContainsRune(domain, '.') {
|
|
domains = append(domains, domain)
|
|
}
|
|
if domain == actualDomain {
|
|
valid = true
|
|
}
|
|
}
|
|
|
|
// Add [owner].[pages-domain] as valid domnain.
|
|
domains = append(domains, o.TargetOwner+mainDomainSuffix)
|
|
if domains[len(domains)-1] == actualDomain {
|
|
valid = true
|
|
}
|
|
|
|
// If the target repository isn't called pages, add `/[repository]` to the
|
|
// previous valid domain.
|
|
if o.TargetRepo != "" && o.TargetRepo != "pages" {
|
|
domains[len(domains)-1] += "/" + o.TargetRepo
|
|
}
|
|
|
|
// Add result to cache.
|
|
_ = canonicalDomainCache.Set(o.TargetOwner+"/"+o.TargetRepo+"/"+o.TargetBranch, domains, canonicalDomainCacheTimeout)
|
|
|
|
// Return the first domain from the list and return if any of the domains
|
|
// matched the requested domain.
|
|
return domains[0], valid
|
|
}
|