package main import ( "golang.org/x/net/websocket" "log" "net/http" "net/http/httputil" "net/url" "os" ) // newHandler creates a new http.Handler with CSRF protection func (a *api) newHandler(settings *Settings) http.Handler { var ( mux = http.NewServeMux() fileHandler = http.FileServer(http.Dir(a.assetPath)) ) handler := a.newAPIHandler() CSRFHandler := newCSRFHandler(a.dataPath) mux.Handle("/", fileHandler) mux.Handle("/dockerapi/", http.StripPrefix("/dockerapi", handler)) mux.Handle("/ws/exec", websocket.Handler(a.execContainer)) mux.HandleFunc("/settings", func(w http.ResponseWriter, r *http.Request) { settingsHandler(w, r, settings) }) mux.HandleFunc("/templates", func(w http.ResponseWriter, r *http.Request) { templatesHandler(w, r, a.templatesURL) }) return CSRFHandler(newCSRFWrapper(mux)) } // newAPIHandler initializes a new http.Handler based on the URL scheme func (a *api) newAPIHandler() http.Handler { var handler http.Handler var endpoint = *a.endpoint if endpoint.Scheme == "tcp" { if a.tlsConfig != nil { handler = a.newTCPHandlerWithTLS(&endpoint) } else { handler = a.newTCPHandler(&endpoint) } } else if endpoint.Scheme == "unix" { socketPath := endpoint.Path if _, err := os.Stat(socketPath); err != nil { if os.IsNotExist(err) { log.Fatalf("Unix socket %s does not exist", socketPath) } log.Fatal(err) } handler = a.newUnixHandler(socketPath) } else { log.Fatalf("Bad Docker enpoint: %v. Only unix:// and tcp:// are supported.", &endpoint) } return handler } // newUnixHandler initializes a new UnixHandler func (a *api) newUnixHandler(e string) http.Handler { return &unixHandler{e} } // newTCPHandler initializes a HTTP reverse proxy func (a *api) newTCPHandler(u *url.URL) http.Handler { u.Scheme = "http" return httputil.NewSingleHostReverseProxy(u) } // newTCPHandlerWithL initializes a HTTPS reverse proxy with a TLS configuration func (a *api) newTCPHandlerWithTLS(u *url.URL) http.Handler { u.Scheme = "https" proxy := httputil.NewSingleHostReverseProxy(u) proxy.Transport = &http.Transport{ TLSClientConfig: a.tlsConfig, } return proxy }