validation.go RawHistoryFolder

1package auto
2
3import (
4	"strings"
5
6	"github.com/bnema/gordon/internal/domain"
7)
8
9// MatchesDomainAllowlist reports whether domain matches any of the given patterns.
10// Patterns may be exact domains, wildcard subdomains (*.example.com), or "*" to
11// allow everything. Wildcard patterns match a single subdomain level only, per
12// DNS/TLS conventions.
13func MatchesDomainAllowlist(domain string, patterns []string) bool {
14	domain = strings.ToLower(domain)
15	for _, pattern := range patterns {
16		pattern = strings.ToLower(strings.TrimSpace(pattern))
17		if pattern == "" {
18			continue
19		}
20		if pattern == "*" {
21			return true
22		}
23		if pattern == domain {
24			return true
25		}
26		if !strings.HasPrefix(pattern, "*.") {
27			continue
28		}
29		// Wildcard patterns match single-level subdomains only (per DNS/TLS conventions).
30		// e.g., "*.example.com" matches "foo.example.com" but not "bar.foo.example.com"
31		suffix := strings.TrimPrefix(pattern, "*.")
32		if !strings.HasSuffix(domain, "."+suffix) {
33			continue
34		}
35		prefix := strings.TrimSuffix(domain, "."+suffix)
36		if prefix != "" && !strings.Contains(prefix, ".") {
37			return true
38		}
39	}
40	return false
41}
42
43// ExtractRepoName strips the current or legacy Gordon registry domain, tag,
44// and digest from an image reference and returns the bare repository name
45// (e.g. "org/myapp").
46func ExtractRepoName(imageRef, registryDomain string, legacyRegistryDomains ...string) string {
47	return strings.ToLower(domain.ExtractGordonRepoName(imageRef, registryDomain, legacyRegistryDomains))
48}