From ceb264cb65f4a62531e11b3ce666f931074b778a Mon Sep 17 00:00:00 2001
From: nsfisis <nsfisis@gmail.com>
Date: Mon, 9 Oct 2023 08:42:33 +0900
Subject: support basic auth

---
 config.go | 49 +++++++++++++++++++++++++++++++++++++++++++------
 1 file changed, 43 insertions(+), 6 deletions(-)

(limited to 'config.go')

diff --git a/config.go b/config.go
index 6ad988f..e191632 100644
--- a/config.go
+++ b/config.go
@@ -30,9 +30,10 @@ type ACMEChallengeConfig struct {
 }
 
 type ProxyConfig struct {
-	Name string
-	From ProxyFromConfig
-	To   ProxyToConfig
+	Name      string
+	From      ProxyFromConfig
+	To        ProxyToConfig
+	BasicAuth *ProxyBasicAuthConfig
 }
 
 type ProxyFromConfig struct {
@@ -45,6 +46,11 @@ type ProxyToConfig struct {
 	Port int
 }
 
+type ProxyBasicAuthConfig struct {
+	Realm          string
+	CredentialFile string
+}
+
 type InternalHCLConfig struct {
 	User    string                    `hcl:"user,optional"`
 	Servers []InternalHCLServerConfig `hcl:"server,block"`
@@ -66,9 +72,10 @@ type InternalHCLACMEChallengeConfig struct {
 }
 
 type InternalHCLProxyConfig struct {
-	Name string                     `hcl:"name,label"`
-	From InternalHCLProxyFromConfig `hcl:"from,block"`
-	To   InternalHCLProxyToConfig   `hcl:"to,block"`
+	Name  string                       `hcl:"name,label"`
+	From  InternalHCLProxyFromConfig   `hcl:"from,block"`
+	To    InternalHCLProxyToConfig     `hcl:"to,block"`
+	Auths []InternalHCLProxyAuthConfig `hcl:"auth,block"`
 }
 
 type InternalHCLProxyFromConfig struct {
@@ -81,6 +88,12 @@ type InternalHCLProxyToConfig struct {
 	Port int    `hcl:"port"`
 }
 
+type InternalHCLProxyAuthConfig struct {
+	Scheme         string `hcl:"scheme,label"`
+	Realm          string `hcl:"realm"`
+	CredentialFile string `hcl:"credential_file"`
+}
+
 func fromHCLConfigToConfig(hclConfig *InternalHCLConfig) *Config {
 	servers := make([]ServerConfig, len(hclConfig.Servers))
 	for i, s := range hclConfig.Servers {
@@ -92,6 +105,14 @@ func fromHCLConfigToConfig(hclConfig *InternalHCLConfig) *Config {
 		}
 		proxies := make([]ProxyConfig, len(s.Proxies))
 		for j, p := range s.Proxies {
+			var basicAuth *ProxyBasicAuthConfig
+			if len(p.Auths) != 0 {
+				auth := p.Auths[0]
+				basicAuth = &ProxyBasicAuthConfig{
+					Realm:          auth.Realm,
+					CredentialFile: auth.CredentialFile,
+				}
+			}
 			proxies[j] = ProxyConfig{
 				Name: p.Name,
 				From: ProxyFromConfig{
@@ -102,6 +123,7 @@ func fromHCLConfigToConfig(hclConfig *InternalHCLConfig) *Config {
 					Host: p.To.Host,
 					Port: p.To.Port,
 				},
+				BasicAuth: basicAuth,
 			}
 		}
 		servers[i] = ServerConfig{
@@ -199,6 +221,21 @@ func LoadConfig(fileName string) (*Config, error) {
 			if err != nil {
 				return nil, fmt.Errorf("Invalid host or port: %s:%d", p.To.Host, p.To.Port)
 			}
+			if 2 <= len(p.Auths) {
+				return nil, fmt.Errorf("Too many auth blocks found")
+			}
+			if len(p.Auths) == 1 {
+				auth := p.Auths[0]
+				if auth.Scheme != "basic" {
+					return nil, fmt.Errorf("Only basic auth is supported")
+				}
+				if auth.Realm == "" {
+					return nil, fmt.Errorf("realm is required")
+				}
+				if auth.CredentialFile == "" {
+					return nil, fmt.Errorf("credential_file is required")
+				}
+			}
 		}
 	}
 	if redirectToHTTPS && !listenHTTPS {
-- 
cgit v1.2.3-70-g09d2