package vault import ( "net/http" "net/textproto" "strings" log "github.com/hashicorp/go-hclog" "github.com/hashicorp/vault/internalshared/configutil" ) type ListenerCustomHeaders struct { Address string StatusCodeHeaderMap map[string][]*CustomHeader // ConfiguredHeadersStatusCodeMap field is introduced so that we would not need to loop through // StatusCodeHeaderMap to see if a header exists, the key for this map is the headers names configuredHeadersStatusCodeMap map[string][]string } type CustomHeader struct { Name string Value string } func NewListenerCustomHeader(ln []*configutil.Listener, logger log.Logger, uiHeaders http.Header) []*ListenerCustomHeaders { var listenerCustomHeadersList []*ListenerCustomHeaders for _, l := range ln { listenerCustomHeaderStruct := &ListenerCustomHeaders{ Address: l.Address, } listenerCustomHeaderStruct.StatusCodeHeaderMap = make(map[string][]*CustomHeader) listenerCustomHeaderStruct.configuredHeadersStatusCodeMap = make(map[string][]string) for statusCode, headerValMap := range l.CustomResponseHeaders { var customHeaderList []*CustomHeader for headerName, headerVal := range headerValMap { // Sanitizing custom headers // X-Vault- prefix is reserved for Vault internal processes if strings.HasPrefix(headerName, "X-Vault-") { logger.Warn("custom headers starting with X-Vault are not valid", "header", headerName) continue } // Checking for UI headers, if any common header exists, we just log an error if uiHeaders != nil { exist := uiHeaders.Get(headerName) if exist != "" { logger.Warn("found a duplicate header in UI", "header:", headerName, "Headers defined in the server configuration take precedence.") } } // Checking if the header value is not an empty string if headerVal == "" { logger.Warn("header value is an empty string", "header", headerName, "value", headerVal) continue } ch := &CustomHeader{ Name: headerName, Value: headerVal, } customHeaderList = append(customHeaderList, ch) // setting up the reverse map of header to status code for easy lookups listenerCustomHeaderStruct.configuredHeadersStatusCodeMap[headerName] = append(listenerCustomHeaderStruct.configuredHeadersStatusCodeMap[headerName], statusCode) } listenerCustomHeaderStruct.StatusCodeHeaderMap[statusCode] = customHeaderList } listenerCustomHeadersList = append(listenerCustomHeadersList, listenerCustomHeaderStruct) } return listenerCustomHeadersList } func (l *ListenerCustomHeaders) ExistCustomResponseHeader(header string) bool { if header == "" { return false } if l.StatusCodeHeaderMap == nil { return false } headerName := textproto.CanonicalMIMEHeaderKey(header) headerMap := l.configuredHeadersStatusCodeMap _, ok := headerMap[headerName] return ok }