httpclient.go RawHistoryFolder

1package provider
2
3import (
4	"crypto/tls"
5	"net/http"
6)
7
8// NewHTTPClient returns a provider HTTP client. When insecureTLS is true,
9// only this client skips TLS certificate verification. The process-wide
10// default transport is left untouched so auth, discovery, and other providers
11// keep normal certificate validation.
12func NewHTTPClient(insecureTLS bool) *http.Client {
13	if !insecureTLS {
14		return &http.Client{Timeout: 0}
15	}
16	tr, ok := http.DefaultTransport.(*http.Transport)
17	if ok {
18		tr = tr.Clone()
19	} else {
20		tr = &http.Transport{}
21	}
22	if tr.TLSClientConfig != nil {
23		tr.TLSClientConfig = tr.TLSClientConfig.Clone()
24	} else {
25		tr.TLSClientConfig = &tls.Config{}
26	}
27	tr.TLSClientConfig.InsecureSkipVerify = true //nolint:gosec
28	return &http.Client{Timeout: 0, Transport: tr}
29}
30
31// WithHTTPClient scopes an HTTP client to a concrete provider client.
32// Unsupported clients are returned unchanged.
33func WithHTTPClient(c Client, httpClient *http.Client) Client {
34	if httpClient == nil {
35		return c
36	}
37	switch v := c.(type) {
38	case *openaiClient:
39		v.http = httpClient
40	case *anthropicClient:
41		v.http = httpClient
42	case *geminiClient:
43		v.http = httpClient
44	case *bedrockClient:
45		v.http = httpClient
46	case *renamedClient:
47		v.inner = WithHTTPClient(v.inner, httpClient)
48	}
49	return c
50}