mirror of https://git.tuxpa.in/a/code-server.git
parent
cc5ed1eb57
commit
9d87c5328c
|
@ -37,6 +37,7 @@ bundle_code_server() {
|
||||||
rsync src/browser/media/ "$RELEASE_PATH/src/browser/media"
|
rsync src/browser/media/ "$RELEASE_PATH/src/browser/media"
|
||||||
mkdir -p "$RELEASE_PATH/src/browser/pages"
|
mkdir -p "$RELEASE_PATH/src/browser/pages"
|
||||||
rsync src/browser/pages/*.html "$RELEASE_PATH/src/browser/pages"
|
rsync src/browser/pages/*.html "$RELEASE_PATH/src/browser/pages"
|
||||||
|
rsync src/browser/robots.txt "$RELEASE_PATH/src/browser"
|
||||||
|
|
||||||
# Adds the commit to package.json
|
# Adds the commit to package.json
|
||||||
jq --slurp '.[0] * .[1]' package.json <(
|
jq --slurp '.[0] * .[1]' package.json <(
|
||||||
|
|
|
@ -0,0 +1,2 @@
|
||||||
|
User-agent: *
|
||||||
|
Disallow: /
|
|
@ -289,7 +289,7 @@ export abstract class HttpProvider {
|
||||||
/**
|
/**
|
||||||
* Helper to error if not authorized.
|
* Helper to error if not authorized.
|
||||||
*/
|
*/
|
||||||
protected ensureAuthenticated(request: http.IncomingMessage): void {
|
public ensureAuthenticated(request: http.IncomingMessage): void {
|
||||||
if (!this.authenticated(request)) {
|
if (!this.authenticated(request)) {
|
||||||
throw new HttpError("Unauthorized", HttpCode.Unauthorized)
|
throw new HttpError("Unauthorized", HttpCode.Unauthorized)
|
||||||
}
|
}
|
||||||
|
@ -647,10 +647,7 @@ export class HttpServer {
|
||||||
}
|
}
|
||||||
|
|
||||||
try {
|
try {
|
||||||
const payload =
|
const payload = (await this.handleRequest(route, request)) || (await route.provider.handleRequest(route, request))
|
||||||
this.maybeRedirect(request, route) ||
|
|
||||||
(route.provider.authenticated(request) && this.maybeProxy(request)) ||
|
|
||||||
(await route.provider.handleRequest(route, request))
|
|
||||||
if (payload.proxy) {
|
if (payload.proxy) {
|
||||||
this.doProxy(route, request, response, payload.proxy)
|
this.doProxy(route, request, response, payload.proxy)
|
||||||
} else {
|
} else {
|
||||||
|
@ -685,15 +682,23 @@ export class HttpServer {
|
||||||
}
|
}
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* Return any necessary redirection before delegating to a provider.
|
* Handle requests that are always in effect no matter what provider is
|
||||||
|
* registered at the route.
|
||||||
*/
|
*/
|
||||||
private maybeRedirect(request: http.IncomingMessage, route: ProviderRoute): RedirectResponse | undefined {
|
private async handleRequest(route: ProviderRoute, request: http.IncomingMessage): Promise<HttpResponse | undefined> {
|
||||||
// If we're handling TLS ensure all requests are redirected to HTTPS.
|
// If we're handling TLS ensure all requests are redirected to HTTPS.
|
||||||
if (this.options.cert && !(request.connection as tls.TLSSocket).encrypted) {
|
if (this.options.cert && !(request.connection as tls.TLSSocket).encrypted) {
|
||||||
return { redirect: route.fullPath }
|
return { redirect: route.fullPath }
|
||||||
}
|
}
|
||||||
|
|
||||||
return undefined
|
// Return robots.txt.
|
||||||
|
if (route.fullPath === "/robots.txt") {
|
||||||
|
const filePath = path.resolve(__dirname, "../../src/browser/robots.txt")
|
||||||
|
return { content: await fs.readFile(filePath), filePath }
|
||||||
|
}
|
||||||
|
|
||||||
|
// Handle proxy domains.
|
||||||
|
return this.maybeProxy(route, request)
|
||||||
}
|
}
|
||||||
|
|
||||||
/**
|
/**
|
||||||
|
@ -744,7 +749,7 @@ export class HttpServer {
|
||||||
// can't be transferred so we need an in-between).
|
// can't be transferred so we need an in-between).
|
||||||
const socketProxy = await this.socketProvider.createProxy(socket)
|
const socketProxy = await this.socketProvider.createProxy(socket)
|
||||||
const payload =
|
const payload =
|
||||||
this.maybeProxy(request) || (await route.provider.handleWebSocket(route, request, socketProxy, head))
|
this.maybeProxy(route, request) || (await route.provider.handleWebSocket(route, request, socketProxy, head))
|
||||||
if (payload && payload.proxy) {
|
if (payload && payload.proxy) {
|
||||||
this.doProxy(route, request, { socket: socketProxy, head }, payload.proxy)
|
this.doProxy(route, request, { socket: socketProxy, head }, payload.proxy)
|
||||||
}
|
}
|
||||||
|
@ -894,8 +899,10 @@ export class HttpServer {
|
||||||
*
|
*
|
||||||
* For example if `coder.com` is specified `8080.coder.com` will be proxied
|
* For example if `coder.com` is specified `8080.coder.com` will be proxied
|
||||||
* but `8080.test.coder.com` and `test.8080.coder.com` will not.
|
* but `8080.test.coder.com` and `test.8080.coder.com` will not.
|
||||||
|
*
|
||||||
|
* Throw an error if proxying but the user isn't authenticated.
|
||||||
*/
|
*/
|
||||||
public maybeProxy(request: http.IncomingMessage): HttpResponse | undefined {
|
public maybeProxy(route: ProviderRoute, request: http.IncomingMessage): HttpResponse | undefined {
|
||||||
// Split into parts.
|
// Split into parts.
|
||||||
const host = request.headers.host || ""
|
const host = request.headers.host || ""
|
||||||
const idx = host.indexOf(":")
|
const idx = host.indexOf(":")
|
||||||
|
@ -909,6 +916,9 @@ export class HttpServer {
|
||||||
return undefined
|
return undefined
|
||||||
}
|
}
|
||||||
|
|
||||||
|
// Must be authenticated to use the proxy.
|
||||||
|
route.provider.ensureAuthenticated(request)
|
||||||
|
|
||||||
return {
|
return {
|
||||||
proxy: {
|
proxy: {
|
||||||
port,
|
port,
|
||||||
|
|
Loading…
Reference in New Issue