| | | 1 | | // Licensed to the .NET Foundation under one or more agreements. |
| | | 2 | | // The .NET Foundation licenses this file to you under the MIT license. |
| | | 3 | | |
| | | 4 | | using System.Collections.Generic; |
| | | 5 | | |
| | | 6 | | namespace System.Net.Http |
| | | 7 | | { |
| | | 8 | | internal sealed class HttpEnvironmentProxyCredentials : ICredentials |
| | | 9 | | { |
| | | 10 | | // Wrapper class for cases when http and https has different authentication. |
| | | 11 | | private readonly NetworkCredential? _httpCred; |
| | | 12 | | private readonly NetworkCredential? _httpsCred; |
| | | 13 | | private readonly Uri? _httpProxy; |
| | | 14 | | private readonly Uri? _httpsProxy; |
| | | 15 | | |
| | 0 | 16 | | public HttpEnvironmentProxyCredentials(Uri? httpProxy, NetworkCredential? httpCred, |
| | 0 | 17 | | Uri? httpsProxy, NetworkCredential? httpsCred) |
| | 0 | 18 | | { |
| | 0 | 19 | | _httpCred = httpCred; |
| | 0 | 20 | | _httpsCred = httpsCred; |
| | 0 | 21 | | _httpProxy = httpProxy; |
| | 0 | 22 | | _httpsProxy = httpsProxy; |
| | 0 | 23 | | } |
| | | 24 | | |
| | | 25 | | public NetworkCredential? GetCredential(Uri? uri, string authType) |
| | 0 | 26 | | { |
| | 0 | 27 | | if (uri == null) |
| | 0 | 28 | | { |
| | 0 | 29 | | return null; |
| | | 30 | | } |
| | 0 | 31 | | return uri.Equals(_httpProxy) ? _httpCred : |
| | 0 | 32 | | uri.Equals(_httpsProxy) ? _httpsCred : null; |
| | 0 | 33 | | } |
| | | 34 | | |
| | | 35 | | public static HttpEnvironmentProxyCredentials? TryCreate(Uri? httpProxy, Uri? httpsProxy) |
| | 0 | 36 | | { |
| | 0 | 37 | | NetworkCredential? httpCred = null; |
| | 0 | 38 | | NetworkCredential? httpsCred = null; |
| | | 39 | | |
| | 0 | 40 | | if (httpProxy != null) |
| | 0 | 41 | | { |
| | 0 | 42 | | httpCred = GetCredentialsFromString(httpProxy.UserInfo); |
| | 0 | 43 | | } |
| | 0 | 44 | | if (httpsProxy != null) |
| | 0 | 45 | | { |
| | 0 | 46 | | httpsCred = GetCredentialsFromString(httpsProxy.UserInfo); |
| | 0 | 47 | | } |
| | 0 | 48 | | if (httpCred == null && httpsCred == null) |
| | 0 | 49 | | { |
| | 0 | 50 | | return null; |
| | | 51 | | } |
| | 0 | 52 | | return new HttpEnvironmentProxyCredentials(httpProxy, httpCred, httpsProxy, httpsCred); |
| | 0 | 53 | | } |
| | | 54 | | |
| | | 55 | | /// <summary> |
| | | 56 | | /// Converts string containing user:password to NetworkCredential object |
| | | 57 | | /// </summary> |
| | | 58 | | private static NetworkCredential? GetCredentialsFromString(string? value) |
| | 0 | 59 | | { |
| | 0 | 60 | | if (string.IsNullOrWhiteSpace(value)) |
| | 0 | 61 | | { |
| | 0 | 62 | | return null; |
| | | 63 | | } |
| | | 64 | | |
| | 0 | 65 | | if (value == ":") |
| | 0 | 66 | | { |
| | 0 | 67 | | return CredentialCache.DefaultNetworkCredentials; |
| | | 68 | | } |
| | | 69 | | |
| | 0 | 70 | | value = Uri.UnescapeDataString(value); |
| | | 71 | | |
| | 0 | 72 | | string password = ""; |
| | 0 | 73 | | string? domain = null; |
| | 0 | 74 | | int idx = value.IndexOf(':'); |
| | 0 | 75 | | if (idx != -1) |
| | 0 | 76 | | { |
| | 0 | 77 | | password = value.Substring(idx + 1); |
| | 0 | 78 | | value = value.Substring(0, idx); |
| | 0 | 79 | | } |
| | | 80 | | |
| | 0 | 81 | | idx = value.IndexOf('\\'); |
| | 0 | 82 | | if (idx != -1) |
| | 0 | 83 | | { |
| | 0 | 84 | | domain = value.Substring(0, idx); |
| | 0 | 85 | | value = value.Substring(idx + 1); |
| | 0 | 86 | | } |
| | | 87 | | |
| | 0 | 88 | | return new NetworkCredential(value, password, domain); |
| | 0 | 89 | | } |
| | | 90 | | } |
| | | 91 | | |
| | | 92 | | internal sealed partial class HttpEnvironmentProxy : IWebProxy |
| | | 93 | | { |
| | | 94 | | private const string EnvAllProxyUC = "ALL_PROXY"; |
| | | 95 | | private const string EnvHttpProxyUC = "HTTP_PROXY"; |
| | | 96 | | private const string EnvHttpsProxyUC = "HTTPS_PROXY"; |
| | | 97 | | private const string EnvNoProxyUC = "NO_PROXY"; |
| | | 98 | | private const string EnvCGI = "GATEWAY_INTERFACE"; // Running in a CGI environment. |
| | | 99 | | |
| | | 100 | | private readonly Uri? _httpProxyUri; // String URI for HTTP requests |
| | | 101 | | private readonly Uri? _httpsProxyUri; // String URI for HTTPS requests |
| | | 102 | | private readonly List<string>? _bypass; // list of domains or IP addresses not to proxy |
| | | 103 | | private readonly List<IPNetwork>? _bypassNetworks; // list of subnet ranges not to proxy |
| | | 104 | | private ICredentials? _credentials; |
| | | 105 | | |
| | | 106 | | private HttpEnvironmentProxy(Uri? httpProxy, Uri? httpsProxy, string? bypassList) |
| | | 107 | | { |
| | | 108 | | _httpProxyUri = httpProxy; |
| | | 109 | | _httpsProxyUri = httpsProxy; |
| | | 110 | | |
| | | 111 | | _credentials = HttpEnvironmentProxyCredentials.TryCreate(httpProxy, httpsProxy); |
| | | 112 | | |
| | | 113 | | if (bypassList != null) |
| | | 114 | | { |
| | | 115 | | foreach (string entry in bypassList.Split(',', StringSplitOptions.RemoveEmptyEntries | StringSplitOption |
| | | 116 | | { |
| | | 117 | | if (IPNetwork.TryParse(entry, out IPNetwork networkEntry)) |
| | | 118 | | { |
| | | 119 | | _bypassNetworks ??= new List<IPNetwork>(); |
| | | 120 | | _bypassNetworks.Add(networkEntry); |
| | | 121 | | } |
| | | 122 | | else |
| | | 123 | | { |
| | | 124 | | _bypass ??= new List<string>(); |
| | | 125 | | _bypass.Add(entry); |
| | | 126 | | } |
| | | 127 | | } |
| | | 128 | | } |
| | | 129 | | } |
| | | 130 | | |
| | | 131 | | /// <summary> |
| | | 132 | | /// Attempt to parse a partial Uri string into a Uri object. |
| | | 133 | | /// The string may contain the scheme, user info, host, and port. The host is the only required part. |
| | | 134 | | /// Example expected inputs: contoso.com, contoso.com:8080, http://contoso.com/, user@contoso.com. |
| | | 135 | | /// </summary> |
| | | 136 | | /// <returns><see langword="null"/> if parsing fails.</returns> |
| | | 137 | | private static unsafe Uri? GetUriFromString(string? value) |
| | | 138 | | { |
| | | 139 | | if (string.IsNullOrEmpty(value)) |
| | | 140 | | { |
| | | 141 | | return null; |
| | | 142 | | } |
| | | 143 | | |
| | | 144 | | int hostIndex = 0; |
| | | 145 | | string protocol = "http"; |
| | | 146 | | ushort port = 80; |
| | | 147 | | |
| | | 148 | | if (value.StartsWith("http://", StringComparison.OrdinalIgnoreCase)) |
| | | 149 | | { |
| | | 150 | | hostIndex = 7; |
| | | 151 | | } |
| | | 152 | | else if (value.StartsWith("https://", StringComparison.OrdinalIgnoreCase)) |
| | | 153 | | { |
| | | 154 | | hostIndex = 8; |
| | | 155 | | protocol = "https"; |
| | | 156 | | port = 443; |
| | | 157 | | } |
| | | 158 | | else if (value.StartsWith("socks4://", StringComparison.OrdinalIgnoreCase)) |
| | | 159 | | { |
| | | 160 | | hostIndex = 9; |
| | | 161 | | protocol = "socks4"; |
| | | 162 | | } |
| | | 163 | | else if (value.StartsWith("socks5://", StringComparison.OrdinalIgnoreCase)) |
| | | 164 | | { |
| | | 165 | | hostIndex = 9; |
| | | 166 | | protocol = "socks5"; |
| | | 167 | | } |
| | | 168 | | else if (value.StartsWith("socks5h://", StringComparison.OrdinalIgnoreCase)) |
| | | 169 | | { |
| | | 170 | | hostIndex = 10; |
| | | 171 | | protocol = "socks5h"; |
| | | 172 | | } |
| | | 173 | | else if (value.StartsWith("socks4a://", StringComparison.OrdinalIgnoreCase)) |
| | | 174 | | { |
| | | 175 | | hostIndex = 10; |
| | | 176 | | protocol = "socks4a"; |
| | | 177 | | } |
| | | 178 | | |
| | | 179 | | if (hostIndex > 0) |
| | | 180 | | { |
| | | 181 | | value = value.Substring(hostIndex); |
| | | 182 | | } |
| | | 183 | | |
| | | 184 | | string? user = null; |
| | | 185 | | string? password = null; |
| | | 186 | | string host; |
| | | 187 | | |
| | | 188 | | // Check if there is authentication part with user and possibly password. |
| | | 189 | | // Curl accepts raw text and that may break URI parser. |
| | | 190 | | int separatorIndex = value.LastIndexOf('@'); |
| | | 191 | | if (separatorIndex != -1) |
| | | 192 | | { |
| | | 193 | | // The User and password may or may not be URL encoded. |
| | | 194 | | // Curl seems to accept both. To match that, we also decode the value. |
| | | 195 | | string auth = Uri.UnescapeDataString(value.AsSpan(0, separatorIndex)); |
| | | 196 | | |
| | | 197 | | value = value.Substring(separatorIndex + 1); |
| | | 198 | | separatorIndex = auth.IndexOf(':'); |
| | | 199 | | if (separatorIndex == -1) |
| | | 200 | | { |
| | | 201 | | user = auth; |
| | | 202 | | } |
| | | 203 | | else |
| | | 204 | | { |
| | | 205 | | user = auth.Substring(0, separatorIndex); |
| | | 206 | | password = auth.Substring(separatorIndex + 1); |
| | | 207 | | } |
| | | 208 | | } |
| | | 209 | | |
| | | 210 | | // We expect inputs to not contain the path/query/fragment, but we do handle some simple cases like a traili |
| | | 211 | | // An arbitrary path can break this parsing logic, but we expect environment variables to be trusted and wel |
| | | 212 | | int delimiterIndex = value.IndexOfAny('/', '?', '#'); |
| | | 213 | | if (delimiterIndex >= 0) |
| | | 214 | | { |
| | | 215 | | value = value.Substring(0, delimiterIndex); |
| | | 216 | | } |
| | | 217 | | |
| | | 218 | | int ipV6AddressEnd = value.IndexOf(']'); |
| | | 219 | | separatorIndex = value.LastIndexOf(':'); |
| | | 220 | | // No ':' or it is part of IPv6 address. |
| | | 221 | | if (separatorIndex == -1 || (ipV6AddressEnd != -1 && separatorIndex < ipV6AddressEnd)) |
| | | 222 | | { |
| | | 223 | | host = value; |
| | | 224 | | } |
| | | 225 | | else |
| | | 226 | | { |
| | | 227 | | host = value.Substring(0, separatorIndex); |
| | | 228 | | |
| | | 229 | | if (!ushort.TryParse(value.AsSpan(separatorIndex + 1), out port)) |
| | | 230 | | { |
| | | 231 | | return null; |
| | | 232 | | } |
| | | 233 | | } |
| | | 234 | | |
| | | 235 | | try |
| | | 236 | | { |
| | | 237 | | UriBuilder ub = new UriBuilder(protocol, host, port); |
| | | 238 | | if (user != null) |
| | | 239 | | { |
| | | 240 | | ub.UserName = Uri.EscapeDataString(user); |
| | | 241 | | } |
| | | 242 | | |
| | | 243 | | if (password != null) |
| | | 244 | | { |
| | | 245 | | ub.Password = Uri.EscapeDataString(password); |
| | | 246 | | } |
| | | 247 | | |
| | | 248 | | Uri uri = ub.Uri; |
| | | 249 | | |
| | | 250 | | // if both user and password exist and are empty we should preserve that and use default credentials. |
| | | 251 | | // UriBuilder does not handle that now e.g. does not distinguish between empty and missing. |
| | | 252 | | if (user == "" && password == "") |
| | | 253 | | { |
| | | 254 | | Span<Range> tokens = stackalloc Range[3]; |
| | | 255 | | ReadOnlySpan<char> uriSpan = uri.ToString(); |
| | | 256 | | if (uriSpan.Split(tokens, '/') == 3) |
| | | 257 | | { |
| | | 258 | | uri = new Uri($"{uriSpan[tokens[0]]}//:@{uriSpan[tokens[2]]}"); |
| | | 259 | | } |
| | | 260 | | } |
| | | 261 | | |
| | | 262 | | return uri; |
| | | 263 | | } |
| | | 264 | | catch { }; |
| | | 265 | | return null; |
| | | 266 | | } |
| | | 267 | | |
| | | 268 | | /// <summary> |
| | | 269 | | /// This function returns true if given Host match bypass list. |
| | | 270 | | /// Note, that the list is common for http and https. |
| | | 271 | | /// </summary> |
| | | 272 | | private bool IsMatchInBypassList(Uri input) |
| | | 273 | | { |
| | | 274 | | if (_bypass != null) |
| | | 275 | | { |
| | | 276 | | foreach (string s in _bypass) |
| | | 277 | | { |
| | | 278 | | if (s[0] == '.') |
| | | 279 | | { |
| | | 280 | | // This should match either domain it self or any subdomain or host |
| | | 281 | | // .foo.com will match foo.com it self or *.foo.com |
| | | 282 | | if (s.AsSpan(1).Equals(input.Host, StringComparison.OrdinalIgnoreCase)) |
| | | 283 | | { |
| | | 284 | | return true; |
| | | 285 | | } |
| | | 286 | | else if (input.Host.EndsWith(s, StringComparison.OrdinalIgnoreCase)) |
| | | 287 | | { |
| | | 288 | | return true; |
| | | 289 | | } |
| | | 290 | | |
| | | 291 | | } |
| | | 292 | | else |
| | | 293 | | { |
| | | 294 | | if (string.Equals(s, input.Host, StringComparison.OrdinalIgnoreCase)) |
| | | 295 | | { |
| | | 296 | | return true; |
| | | 297 | | } |
| | | 298 | | } |
| | | 299 | | } |
| | | 300 | | } |
| | | 301 | | |
| | | 302 | | if (_bypassNetworks != null && IPAddress.TryParse(input.Host, out IPAddress? ip)) |
| | | 303 | | { |
| | | 304 | | foreach (IPNetwork network in _bypassNetworks) |
| | | 305 | | { |
| | | 306 | | if (network.Contains(ip)) |
| | | 307 | | { |
| | | 308 | | return true; |
| | | 309 | | } |
| | | 310 | | } |
| | | 311 | | } |
| | | 312 | | |
| | | 313 | | return false; |
| | | 314 | | } |
| | | 315 | | |
| | | 316 | | /// <summary> |
| | | 317 | | /// Gets the proxy URI. (iWebProxy interface) |
| | | 318 | | /// </summary> |
| | | 319 | | public Uri? GetProxy(Uri uri) |
| | | 320 | | { |
| | | 321 | | return HttpUtilities.IsSupportedNonSecureScheme(uri.Scheme) ? _httpProxyUri : _httpsProxyUri; |
| | | 322 | | } |
| | | 323 | | |
| | | 324 | | /// <summary> |
| | | 325 | | /// Checks if URI is subject to proxy or not. |
| | | 326 | | /// </summary> |
| | | 327 | | public bool IsBypassed(Uri uri) |
| | | 328 | | { |
| | | 329 | | return GetProxy(uri) == null ? true : IsMatchInBypassList(uri); |
| | | 330 | | } |
| | | 331 | | |
| | | 332 | | public ICredentials? Credentials |
| | | 333 | | { |
| | | 334 | | get |
| | | 335 | | { |
| | | 336 | | return _credentials; |
| | | 337 | | } |
| | | 338 | | set |
| | | 339 | | { |
| | | 340 | | _credentials = value; |
| | | 341 | | } |
| | | 342 | | } |
| | | 343 | | } |
| | | 344 | | } |
| | | 345 | | |