# frozen_string_literal: true require "httpx/plugins/proxy" module HTTPX module Plugins module Proxy module SSH def self.load_dependencies(_klass, *) # klass.plugin(:proxy) require "net/ssh/gateway" end def self.extra_options(options) Class.new(options.class) do def_option(:proxy) do |pr| Hash[pr] end end.new(options) end module InstanceMethods def with_proxy(*args) branch(default_options.with_proxy(*args)) end private def send_requests(*requests, options) request_options = @options.merge(options) return super unless request_options.proxy ssh_options = request_options.proxy ssh_uris = ssh_options.delete(:uri) ssh_uri = URI.parse(ssh_uris.shift) return super unless ssh_uri.scheme == "ssh" ssh_username = ssh_options.delete(:username) ssh_options[:port] ||= ssh_uri.port || 22 if request_options.debug ssh_options[:verbose] = request_options.debug_level == 2 ? :debug : :info end request_uri = URI(requests.first.uri) @_gateway = Net::SSH::Gateway.new(ssh_uri.host, ssh_username, ssh_options) begin @_gateway.open(request_uri.host, request_uri.port) do |local_port| io = build_gateway_socket(local_port, request_uri, request_options) super(*requests, options.merge(io: io)) end ensure @_gateway.shutdown! end end def build_gateway_socket(port, request_uri, options) case request_uri.scheme when "https" ctx = OpenSSL::SSL::SSLContext.new ctx_options = SSL::TLS_OPTIONS.merge(options.ssl) ctx.set_params(ctx_options) unless ctx_options.empty? sock = TCPSocket.open("localhost", port) io = OpenSSL::SSL::SSLSocket.new(sock, ctx) io.hostname = request_uri.host io.sync_close = true io.connect io.post_connection_check(request_uri.host) if ctx.verify_mode != OpenSSL::SSL::VERIFY_NONE io when "http" TCPSocket.open("localhost", port) else raise Error, "unexpected scheme: #{request_uri.scheme}" end end end end end register_plugin :"proxy/ssh", Proxy::SSH end end