1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
|
# frozen_string_literal: true
class Acme::Client::FaradayMiddleware < Faraday::Middleware
attr_reader :env, :response, :client
repo_url = 'https://github.com/unixcharles/acme-client'
USER_AGENT = "Acme::Client v#{Acme::Client::VERSION} (#{repo_url})".freeze
def initialize(app, client:)
super(app)
@client = client
end
def call(env)
@env = env
@env[:request_headers]['User-Agent'] = USER_AGENT
@env.body = crypto.generate_signed_jws(header: { nonce: pop_nonce }, payload: env.body)
@app.call(env).on_complete { |response_env| on_complete(response_env) }
rescue Faraday::TimeoutError
raise Acme::Client::Error::Timeout
end
def on_complete(env)
@env = env
raise_on_not_found!
store_nonce
env.body = decode_body
env.response_headers['Link'] = decode_link_headers
return if env.success?
raise_on_error!
end
private
def raise_on_not_found!
raise Acme::Client::Error::NotFound, env.url.to_s if env.status == 404
end
def raise_on_error!
raise error_class, error_message
end
def error_message
if env.body.is_a? Hash
env.body['detail']
else
"Error message: #{env.body}"
end
end
def error_class
if error_name && !error_name.empty? && Acme::Client::Error.const_defined?(error_name)
Object.const_get("Acme::Client::Error::#{error_name}")
else
Acme::Client::Error
end
end
def error_name
@error_name ||= begin
return unless env.body.is_a?(Hash)
return unless env.body.key?('type')
env.body['type'].gsub('urn:acme:error:', '').split(/[_-]/).map(&:capitalize).join
end
end
def decode_body
content_type = env.response_headers['Content-Type']
if content_type == 'application/json' || content_type == 'application/problem+json'
JSON.load(env.body)
else
env.body
end
end
LINK_MATCH = /<(.*?)>;rel="([\w-]+)"/
def decode_link_headers
return unless env.response_headers.key?('Link')
link_header = env.response_headers['Link']
links = link_header.split(', ').map { |entry|
_, link, name = *entry.match(LINK_MATCH)
[name, link]
}
Hash[*links.flatten]
end
def store_nonce
nonces << env.response_headers['replay-nonce']
end
def pop_nonce
if nonces.empty?
get_nonce
else
nonces.pop
end
end
def get_nonce
response = Faraday.head(env.url, nil, 'User-Agent' => USER_AGENT)
response.headers['replay-nonce']
end
def nonces
client.nonces
end
def private_key
client.private_key
end
def crypto
@crypto ||= Acme::Client::Crypto.new(private_key)
end
end
|
