mirror of
https://github.com/git-pkgs/proxy.git
synced 2026-11-10 08:09:17 -05:00
143eef7f05
TestAPKSnapshots_CacheHit covers the cache-hit branch with a metadata TTL above 0. proxyCachedWithEncoding takes optional hooks for a cache hit and a fetched body, so the APK handler no longer keeps a copy of it.
74 lines
2.4 KiB
Go
74 lines
2.4 KiB
Go
package handler
|
|
|
|
import (
|
|
"crypto/sha256"
|
|
"encoding/hex"
|
|
"net/http"
|
|
"strings"
|
|
)
|
|
|
|
const (
|
|
homebrewArtifactNamespace = "homebrew"
|
|
homebrewArtifactRepository = "homebrew/core"
|
|
homebrewMetadataEcosystem = "homebrew"
|
|
)
|
|
|
|
// HomebrewHandler proxies Homebrew's JSON API without modifying signed files.
|
|
type HomebrewHandler struct {
|
|
proxy *Proxy
|
|
apiUpstream string
|
|
}
|
|
|
|
// NewHomebrewHandler creates a Homebrew JSON API handler.
|
|
func NewHomebrewHandler(proxy *Proxy, apiUpstream string) *HomebrewHandler {
|
|
return &HomebrewHandler{
|
|
proxy: proxy,
|
|
apiUpstream: strings.TrimSuffix(apiUpstream, "/"),
|
|
}
|
|
}
|
|
|
|
// RegisterHomebrewArtifacts routes homebrew/core OCI requests to its configured
|
|
// registry and blocks other homebrew repositories from reaching the default
|
|
// OCI registry.
|
|
func RegisterHomebrewArtifacts(container *ContainerHandler, artifactUpstream string) {
|
|
container.BlockRegistry(homebrewArtifactNamespace)
|
|
container.RegisterRegistry(homebrewArtifactRepository, artifactUpstream)
|
|
}
|
|
|
|
// Routes returns the Homebrew JSON API handler. Mount this at /homebrew.
|
|
func (h *HomebrewHandler) Routes() http.Handler {
|
|
return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
|
|
if r.Method != http.MethodGet && r.Method != http.MethodHead {
|
|
w.Header().Set("Allow", "GET, HEAD")
|
|
http.Error(w, "method not allowed", http.StatusMethodNotAllowed)
|
|
return
|
|
}
|
|
|
|
requestPath := strings.TrimPrefix(r.URL.EscapedPath(), "/")
|
|
if requestPath == "" || containsPathTraversal(requestPath) {
|
|
http.NotFound(w, r)
|
|
return
|
|
}
|
|
|
|
upstreamURL := h.apiUpstream + "/" + requestPath
|
|
if r.URL.RawQuery != "" {
|
|
upstreamURL += "?" + r.URL.RawQuery
|
|
}
|
|
|
|
// brew fetches every JSON API download with `curl --compressed` and
|
|
// decodes Content-Encoding itself, and formula.jws.json is ~33 MB plain
|
|
// versus ~5 MB gzip, so keep both hops compressed. The analytics
|
|
// endpoints are the one consumer brew fetches without --compressed;
|
|
// they stay identity.
|
|
acceptEncoding := "gzip"
|
|
if strings.HasPrefix(requestPath, "analytics/") {
|
|
acceptEncoding = "identity"
|
|
}
|
|
h.proxy.proxyCachedWithEncoding(w, r, upstreamURL, homebrewMetadataEcosystem, homebrewMetadataCacheKey(requestPath, r.URL.RawQuery), acceptEncoding, nil, "*/*")
|
|
})
|
|
}
|
|
|
|
func homebrewMetadataCacheKey(requestPath, rawQuery string) string {
|
|
sum := sha256.Sum256([]byte(requestPath + "\x00" + rawQuery))
|
|
return hex.EncodeToString(sum[:])
|
|
}
|