Help us shape the future of Go! Take the 2026 Go Developer Survey

httpsec

package
v1.152.0 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Oct 21, 2026 License: Apache-2.0 Imports: 9 Imported by: 0

Documentation

Overview

Package httpsec provides HTTP security primitives for serving commands.

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

func BearerAuth

func BearerAuth(token string) func(http.Handler) http.Handler

BearerAuth authenticates requests with a static bearer token.

func LoopbackHost added in v1.152.0

func LoopbackHost(next http.Handler) http.Handler

LoopbackHost rejects DNS-rebinding hosts on unauthenticated TCP listeners. Local sockets should not use it: their clients may use synthetic hostnames.

func ValidateListenerAuth added in v1.152.0

func ValidateListenerAuth(addr net.Addr, token string) error

ValidateListenerAuth requires authentication when a TCP listener is not local. Checking the bound address also covers inherited file-descriptor listeners.

Types

type OriginMatcher

type OriginMatcher struct {
	// contains filtered or unexported fields
}

OriginMatcher holds validated literal origins and compiled origin patterns.

func ParseOrigins

func ParseOrigins(spec string) (*OriginMatcher, error)

ParseOrigins parses a comma-separated list of literal origins and regular expression patterns prefixed with "~".

func (*OriginMatcher) HasPatterns

func (m *OriginMatcher) HasPatterns() bool

HasPatterns reports whether the matcher has regular expression patterns.

func (*OriginMatcher) Literals

func (m *OriginMatcher) Literals() []string

Literals returns the configured literal origins.

func (*OriginMatcher) MatchPattern

func (m *OriginMatcher) MatchPattern(origin string) bool

MatchPattern reports whether origin matches a configured regular expression.

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL