code-server
Version:
Run VS Code on a remote server.
110 lines • 4.76 kB
JavaScript
;
var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
return new (P || (P = Promise))(function (resolve, reject) {
function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
step((generator = generator.apply(thisArg, _arguments || [])).next());
});
};
Object.defineProperty(exports, "__esModule", { value: true });
exports.wsRouter = exports.router = void 0;
const express_1 = require("express");
const http_1 = require("../../common/http");
const http_2 = require("../http");
const proxy_1 = require("../proxy");
const wsRouter_1 = require("../wsRouter");
exports.router = (0, express_1.Router)();
const proxyDomainToRegex = (matchString) => {
const escapedMatchString = matchString.replace(/[.*+?^$()|[\]\\]/g, "\\$&");
// Replace {{port}} with a regex group to capture the port
// Replace {{host}} with .+ to allow any host match (so rely on DNS record here)
let regexString = escapedMatchString.replace("{{port}}", "(\\d+)");
regexString = regexString.replace("{{host}}", ".+");
regexString = regexString.replace(/[{}]/g, "\\$&"); //replace any '{}' that might be left
return new RegExp("^" + regexString + "$");
};
let proxyRegexes = [];
const proxyDomainsToRegex = (proxyDomains) => {
if (proxyDomains.length !== proxyRegexes.length) {
proxyRegexes = proxyDomains.map(proxyDomainToRegex);
}
return proxyRegexes;
};
/**
* Return the port if the request should be proxied.
*
* The proxy-domain should be of format anyprefix-{{port}}-anysuffix.{{host}}, where {{host}} is optional
* e.g. code-8080.domain.tld would match for code-{{port}}.domain.tld and code-{{port}}.{{host}}.
*
*/
const maybeProxy = (req) => {
const reqDomain = (0, http_2.getHost)(req);
if (reqDomain === undefined) {
return undefined;
}
const regexs = proxyDomainsToRegex(req.args["proxy-domain"]);
for (const regex of regexs) {
const match = reqDomain.match(regex);
if (match) {
return match[1]; // match[1] contains the port
}
}
return undefined;
};
exports.router.all(/.*/, (req, res, next) => __awaiter(void 0, void 0, void 0, function* () {
const port = maybeProxy(req);
if (!port) {
return next();
}
(0, http_2.ensureProxyEnabled)(req);
if (req.method === "OPTIONS" && req.args["skip-auth-preflight"]) {
// Allow preflight requests with `skip-auth-preflight` flag
return next();
}
// Must be authenticated to use the proxy.
const isAuthenticated = yield (0, http_2.authenticated)(req);
if (!isAuthenticated) {
// Let the assets through since they're used on the login page.
if (req.path.startsWith("/_static/") && req.method === "GET") {
return next();
}
// Assume anything that explicitly accepts text/html is a user browsing a
// page (as opposed to an xhr request). Don't use `req.accepts()` since
// *every* request that I've seen (in Firefox and Chromium at least)
// includes `*/*` making it always truthy. Even for css/javascript.
if (req.headers.accept && req.headers.accept.includes("text/html")) {
// Let the login through.
if (/\/login\/?/.test(req.path)) {
return next();
}
// Redirect all other pages to the login.
const to = (0, http_2.self)(req);
return (0, http_2.redirect)(req, res, "login", {
to: to !== "/" ? to : undefined,
});
}
// Everything else gets an unauthorized message.
throw new http_1.HttpError("Unauthorized", http_1.HttpCode.Unauthorized);
}
proxy_1.proxy.web(req, res, {
ignorePath: true,
target: `http://0.0.0.0:${port}${req.originalUrl}`,
});
}));
exports.wsRouter = (0, wsRouter_1.Router)();
exports.wsRouter.ws(/.*/, (req, _, next) => __awaiter(void 0, void 0, void 0, function* () {
const port = maybeProxy(req);
if (!port) {
return next();
}
(0, http_2.ensureProxyEnabled)(req);
(0, http_2.ensureOrigin)(req);
yield (0, http_2.ensureAuthenticated)(req);
proxy_1.proxy.ws(req, req.ws, req.head, {
ignorePath: true,
target: `http://0.0.0.0:${port}${req.originalUrl}`,
});
}));
//# sourceMappingURL=domainProxy.js.map