warp-tech/warpgate
1
1
Fork 0
mirror of https://github.com/warp-tech/warpgate.git synced 2025-10-02 03:16:51 +08:00
Code Issues Projects Releases Packages Wiki Activity

#353 - forbid HTTP caching for API endpoints

Browse source
This commit is contained in:
Eugene Pankov 2022-09-21 20:37:05 +03:00
parent 0fe5b92715
commit 04e5ecf5cb
No known key found for this signature in database
GPG key ID: 5896FCBBDD1CF4F4
1 changed files with 25 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

30
warpgate-protocol-http/src/lib.rs
View file

@ -18,6 +18,7 @@ use anyhow::{Context, Result};
use async_trait::async_trait; use async_trait::async_trait;
use common::page_admin_auth; use common::page_admin_auth;
pub use common::PROTOCOL_NAME; pub use common::PROTOCOL_NAME;
use http::HeaderValue;
use logging::{log_request_result, span_for_request}; use logging::{log_request_result, span_for_request};
use poem::endpoint::{EmbeddedFileEndpoint, EmbeddedFilesEndpoint}; use poem::endpoint::{EmbeddedFileEndpoint, EmbeddedFilesEndpoint};
use poem::listener::{Listener, RustlsConfig, TcpListener}; use poem::listener::{Listener, RustlsConfig, TcpListener};
@ -71,27 +72,46 @@ impl ProtocolServer for HTTPProtocolServer {
SharedSessionStorage(Arc::new(Mutex::new(Box::new(MemoryStorage::default())))); SharedSessionStorage(Arc::new(Mutex::new(Box::new(MemoryStorage::default()))));
let session_store = SessionStore::new(); let session_store = SessionStore::new();
let cache_bust = || {
SetHeader::new().overriding(
http::header::CACHE_CONTROL,
HeaderValue::from_static("must-revalidate,no-cache,no-store"),
)
};
let cache_static = || {
SetHeader::new().overriding(
http::header::CACHE_CONTROL,
HeaderValue::from_static("max-age=86400"),
)
};
let app = Route::new() let app = Route::new()
.nest( .nest(
"/@warpgate", "/@warpgate",
Route::new() Route::new()
.nest("/api/swagger", ui) .nest("/api/swagger", ui)
.nest("/api", api_service) .nest("/api", api_service.with(cache_bust()))
.nest("/api/openapi.json", spec) .nest("/api/openapi.json", spec)
.nest_no_strip("/assets", EmbeddedFilesEndpoint::<Assets>::new()) .nest_no_strip(
"/assets",
EmbeddedFilesEndpoint::<Assets>::new().with(cache_static()),
)
.nest( .nest(
"/admin/api", "/admin/api",
endpoint_auth(endpoint_admin_auth(admin_api_app)), endpoint_auth(endpoint_admin_auth(admin_api_app)).with(cache_bust()),
) )
.at( .at(
"/admin", "/admin",
page_auth(page_admin_auth(EmbeddedFileEndpoint::<Assets>::new( page_auth(page_admin_auth(EmbeddedFileEndpoint::<Assets>::new(
"src/admin/index.html", "src/admin/index.html",
))), )))
.with(cache_bust()),
) )
.at( .at(
"", "",
EmbeddedFileEndpoint::<Assets>::new("src/gateway/index.html"), EmbeddedFileEndpoint::<Assets>::new("src/gateway/index.html")
.with(cache_bust()),
) )
.around(move |ep, req| async move { .around(move |ep, req| async move {
let method = req.method().clone(); let method = req.method().clone();