http01.go RawHistoryFolder

1package publictls
2
3import (
4	"context"
5	"sync"
6
7	"github.com/bnema/gordon/internal/domain"
8)
9
10// HTTP01Challenges stores ACME HTTP-01 challenge tokens and their key
11// authorizations. It is safe for concurrent use.
12type HTTP01Challenges struct {
13	mu   sync.RWMutex
14	data map[string]string
15}
16
17// NewHTTP01Challenges returns an initialized HTTP01Challenges.
18func NewHTTP01Challenges() *HTTP01Challenges {
19	return &HTTP01Challenges{
20		data: make(map[string]string),
21	}
22}
23
24// Present stores the key authorization for the given token. It silently
25// ignores unsafe tokens and empty keyAuth values.
26func (c *HTTP01Challenges) Present(token, keyAuth string) error {
27	if !domain.IsValidHTTP01Token(token) || keyAuth == "" {
28		return nil
29	}
30	c.mu.Lock()
31	defer c.mu.Unlock()
32	c.data[token] = keyAuth
33	return nil
34}
35
36// CleanUp removes the stored key authorization for the given token. It silently
37// ignores unsafe tokens.
38func (c *HTTP01Challenges) CleanUp(token string) error {
39	if !domain.IsValidHTTP01Token(token) {
40		return nil
41	}
42	c.mu.Lock()
43	defer c.mu.Unlock()
44	delete(c.data, token)
45	return nil
46}
47
48// Get returns the key authorization for the given token, and a boolean
49// indicating whether it was found. It returns false for unsafe tokens.
50func (c *HTTP01Challenges) Get(_ context.Context, token string) (string, bool) {
51	if !domain.IsValidHTTP01Token(token) {
52		return "", false
53	}
54	c.mu.RLock()
55	defer c.mu.RUnlock()
56	keyAuth, ok := c.data[token]
57	return keyAuth, ok
58}