wehub-resource-sync
72 lines
1.9 KiB
Go
72 lines
1.9 KiB
Go
// Copyright 2025 Dolthub, Inc.
|
|
//
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
//
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
// See the License for the specific language governing permissions and
|
|
// limitations under the License.
|
|
|
|
package http
|
|
|
|
import (
|
|
"fmt"
|
|
"net"
|
|
"net/http"
|
|
"strings"
|
|
)
|
|
|
|
// IsLocalRequest determines if an HTTP request originated from a local source.
|
|
// It checks for common proxy headers to rule out forwarded requests and
|
|
// inspects the RemoteAddr to see if it corresponds to a loopback address
|
|
// or a unix socket path.
|
|
func IsLocalRequest(r *http.Request) (bool, error) {
|
|
// If any common proxy/forwarding headers are present, consider the request forwarded.
|
|
proxyHeaders := []string{
|
|
"X-Forwarded-For",
|
|
"X-Real-IP",
|
|
"Forwarded",
|
|
"Via",
|
|
"True-Client-IP",
|
|
"X-Cluster-Client-Ip",
|
|
}
|
|
for _, h := range proxyHeaders {
|
|
if v := r.Header.Get(h); v != "" {
|
|
return false, nil
|
|
}
|
|
}
|
|
|
|
remote := r.RemoteAddr
|
|
if remote == "" {
|
|
return false, fmt.Errorf("empty RemoteAddr")
|
|
}
|
|
|
|
// remote can be "host:port" or a raw address. Try SplitHostPort first.
|
|
host, _, err := net.SplitHostPort(remote)
|
|
if err != nil {
|
|
// If SplitHostPort fails, treat the whole value as the host (could be a unix socket path or raw IP).
|
|
host = remote
|
|
}
|
|
|
|
// Treat obvious unix-socket paths as local.
|
|
if strings.HasPrefix(host, "/") || strings.HasPrefix(host, "@") {
|
|
return true, nil
|
|
}
|
|
|
|
ip := net.ParseIP(host)
|
|
if ip == nil {
|
|
return false, fmt.Errorf("invalid remote IP: %s", host)
|
|
}
|
|
|
|
// Consider loopback addresses local.
|
|
if ip.IsLoopback() {
|
|
return true, nil
|
|
}
|
|
return false, nil
|
|
}
|