dsh 0.2.0-rc.2: in-container update (experimental channel), path-agnostic compose, upstream patches adapted to 0.1.x/0.2.x

upstream/container/control-plane/services/gateway/lib/config.mjs

@@ -0,0 +1,75 @@
+import { UsageError } from './errors.mjs'
+
+export function parseBoolean(name, value, fallback) {
+  const resolved = value ?? String(fallback)
+  if (resolved === 'true') return true
+  if (resolved === 'false') return false
+  throw new UsageError(`${name} must be true or false`)
+}
+
+function parseUrlAuthority(value) {
+  try {
+    return new URL(`http://${value}`)
+  } catch {
+    return undefined
+  }
+}
+
+function canonicalAuthority(value, parsed) {
+  const port = parsed.port !== '' ? parsed.port : new URL(`https://${value}`).port
+  return port === '' ? parsed.hostname : `${parsed.hostname}:${port}`
+}
+
+export function parseTrustedAuthority(value) {
+  const parsed = parseUrlAuthority(value)
+  if (
+    parsed === undefined
+    || parsed.hostname.includes('*')
+    || canonicalAuthority(value, parsed) !== value.toLowerCase()
+  ) {
+    throw new UsageError(
+      `DSH_TRUSTED_HOSTS entry ${JSON.stringify(value)} must be a canonical host or host:port authority`,
+    )
+  }
+  const authority = canonicalAuthority(value, parsed)
+  return Object.freeze({
+    hostname: parsed.hostname,
+    authority,
+    anyPort: authority === parsed.hostname,
+    matchAuthority: parsed.host,
+  })
+}
+
+export function parseTrustedHosts(environment = process.env) {
+  const raw = environment.DSH_TRUSTED_HOSTS?.trim() ?? ''
+  if (raw === '') return Object.freeze({ wildcard: false, authorities: Object.freeze([]) })
+
+  const entries = raw.split(',').map(entry => entry.trim())
+  if (entries.some(entry => entry === '')) {
+    throw new UsageError('DSH_TRUSTED_HOSTS cannot contain an empty entry')
+  }
+  if (entries.includes('*')) {
+    if (entries.length !== 1) throw new UsageError('DSH_TRUSTED_HOSTS wildcard must be used alone')
+    return Object.freeze({ wildcard: true, authorities: Object.freeze([]) })
+  }
+
+  const unique = new Map()
+  for (const entry of entries) {
+    const parsed = parseTrustedAuthority(entry)
+    unique.set(`${parsed.authority}|${String(parsed.anyPort)}`, parsed)
+  }
+  return Object.freeze({ wildcard: false, authorities: Object.freeze([...unique.values()]) })
+}
+
+export async function loadConfig(environment = process.env) {
+  const managementPort = environment.DSH_MANAGEMENT_PORT === undefined || environment.DSH_MANAGEMENT_PORT.trim() === ''
+    ? 3081 : Number(environment.DSH_MANAGEMENT_PORT)
+  if (managementPort !== null && (!Number.isInteger(managementPort) || managementPort < 1 || managementPort > 65535)) {
+    throw new UsageError('DSH_MANAGEMENT_PORT must be an integer between 1 and 65535')
+  }
+  return Object.freeze({
+    trustedHosts: parseTrustedHosts(environment),
+    polyfill: parseBoolean('DSH_PROXY_POLYFILL', environment.DSH_PROXY_POLYFILL, true),
+    managementPort,
+  })
+}