d7e23fd890
Tighten redirect URI validation for metadata documents, honor Cache-Control no-store when caching fetched documents, and resolve clients on the same transaction as authorization. Load external_client_id from the database and parse unbounded max-stale directives in cachecontrol. Signed-off-by: Bryan Frimin <bryan@probo.com>
162 lines
3.4 KiB
Go
162 lines
3.4 KiB
Go
// Copyright (c) 2026 Probo Inc <hello@probo.com>.
|
|
//
|
|
// Permission to use, copy, modify, and/or distribute this software for any
|
|
// purpose with or without fee is hereby granted, provided that the above
|
|
// copyright notice and this permission notice appear in all copies.
|
|
//
|
|
// THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
|
|
// REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
|
|
// AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
|
|
// INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
|
|
// LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
|
|
// OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
|
|
// PERFORMANCE OF THIS SOFTWARE.
|
|
|
|
package cachecontrol
|
|
|
|
import "time"
|
|
|
|
type (
|
|
RequestDirective struct {
|
|
maxAge *uint64
|
|
maxStale *uint64
|
|
maxStaleUnbounded bool
|
|
minFresh *uint64
|
|
noCache bool
|
|
noStore bool
|
|
noTransform bool
|
|
onlyIfCached bool
|
|
extensions map[string]string
|
|
}
|
|
|
|
ResponseDirective struct {
|
|
maxAge *uint64
|
|
mustRevalidate bool
|
|
noCache []string
|
|
noStore bool
|
|
noTransform bool
|
|
public bool
|
|
private []string
|
|
proxyRevalidate bool
|
|
sMaxAge *uint64
|
|
extensions map[string]string
|
|
}
|
|
)
|
|
|
|
func (d *RequestDirective) MaxAge() (uint64, bool) {
|
|
if v := d.maxAge; v != nil {
|
|
return *v, true
|
|
}
|
|
|
|
return 0, false
|
|
}
|
|
|
|
func (d *RequestDirective) MaxStale() (seconds uint64, bounded bool, ok bool) {
|
|
if d.maxStaleUnbounded {
|
|
return 0, false, true
|
|
}
|
|
|
|
if v := d.maxStale; v != nil {
|
|
return *v, true, true
|
|
}
|
|
|
|
return 0, false, false
|
|
}
|
|
|
|
func (d *RequestDirective) MaxStaleUnbounded() bool {
|
|
return d.maxStaleUnbounded
|
|
}
|
|
|
|
func (d *RequestDirective) MinFresh() (uint64, bool) {
|
|
if v := d.minFresh; v != nil {
|
|
return *v, true
|
|
}
|
|
|
|
return 0, false
|
|
}
|
|
|
|
func (d *RequestDirective) NoCache() bool {
|
|
return d.noCache
|
|
}
|
|
|
|
func (d *RequestDirective) NoStore() bool {
|
|
return d.noStore
|
|
}
|
|
|
|
func (d *RequestDirective) NoTransform() bool {
|
|
return d.noTransform
|
|
}
|
|
|
|
func (d *RequestDirective) OnlyIfCached() bool {
|
|
return d.onlyIfCached
|
|
}
|
|
|
|
func (d *RequestDirective) Extensions() map[string]string {
|
|
return d.extensions
|
|
}
|
|
|
|
func (d *RequestDirective) Extension(name string) string {
|
|
return d.extensions[name]
|
|
}
|
|
|
|
func (d *ResponseDirective) MaxAge() (uint64, bool) {
|
|
if v := d.maxAge; v != nil {
|
|
return *v, true
|
|
}
|
|
|
|
return 0, false
|
|
}
|
|
|
|
func (d *ResponseDirective) MaxAgeDuration() (time.Duration, bool) {
|
|
seconds, ok := d.MaxAge()
|
|
if !ok {
|
|
return 0, false
|
|
}
|
|
|
|
return secondsToDuration(seconds), true
|
|
}
|
|
|
|
func (d *ResponseDirective) MustRevalidate() bool {
|
|
return d.mustRevalidate
|
|
}
|
|
|
|
func (d *ResponseDirective) NoCache() []string {
|
|
return d.noCache
|
|
}
|
|
|
|
func (d *ResponseDirective) NoStore() bool {
|
|
return d.noStore
|
|
}
|
|
|
|
func (d *ResponseDirective) NoTransform() bool {
|
|
return d.noTransform
|
|
}
|
|
|
|
func (d *ResponseDirective) Public() bool {
|
|
return d.public
|
|
}
|
|
|
|
func (d *ResponseDirective) Private() []string {
|
|
return d.private
|
|
}
|
|
|
|
func (d *ResponseDirective) ProxyRevalidate() bool {
|
|
return d.proxyRevalidate
|
|
}
|
|
|
|
func (d *ResponseDirective) SMaxAge() (uint64, bool) {
|
|
if v := d.sMaxAge; v != nil {
|
|
return *v, true
|
|
}
|
|
|
|
return 0, false
|
|
}
|
|
|
|
func (d *ResponseDirective) Extensions() map[string]string {
|
|
return d.extensions
|
|
}
|
|
|
|
func (d *ResponseDirective) Extension(name string) string {
|
|
return d.extensions[name]
|
|
}
|