package http import ( "crypto/tls" "os" chimiddleware "github.com/go-chi/chi/v5/middleware" svc "github.com/owncloud/ocis/idp/pkg/service/v0" pkgcrypto "github.com/owncloud/ocis/ocis-pkg/crypto" "github.com/owncloud/ocis/ocis-pkg/middleware" "github.com/owncloud/ocis/ocis-pkg/service/http" "github.com/owncloud/ocis/ocis-pkg/version" "go-micro.dev/v4" ) // Server initializes the http service and server. func Server(opts ...Option) (http.Service, error) { options := newOptions(opts...) var tlsConfig *tls.Config if options.Config.HTTP.TLS { _, certErr := os.Stat(options.Config.HTTP.TLSCert) _, keyErr := os.Stat(options.Config.HTTP.TLSKey) if os.IsNotExist(certErr) || os.IsNotExist(keyErr) { options.Logger.Info().Msgf("Generating certs") if err := pkgcrypto.GenCert(options.Config.HTTP.TLSCert, options.Config.HTTP.TLSKey, options.Logger); err != nil { options.Logger.Fatal().Err(err).Msg("Could not setup TLS") os.Exit(1) } } cer, err := tls.LoadX509KeyPair(options.Config.HTTP.TLSCert, options.Config.HTTP.TLSKey) if err != nil { options.Logger.Fatal().Err(err).Msg("Could not setup TLS") os.Exit(1) } tlsConfig = &tls.Config{MinVersion: tls.VersionTLS12, Certificates: []tls.Certificate{cer}} } service := http.NewService( http.Logger(options.Logger), http.Namespace(options.Config.HTTP.Namespace), http.Name(options.Config.Service.Name), http.Version(version.String), http.Address(options.Config.HTTP.Addr), http.Context(options.Context), http.Flags(options.Flags...), http.TLSConfig(tlsConfig), ) handle := svc.NewService( svc.Logger(options.Logger), svc.Config(options.Config), svc.Middleware( chimiddleware.RealIP, chimiddleware.RequestID, middleware.TraceContext, middleware.NoCache, middleware.Secure, middleware.Version( options.Config.Service.Name, version.String, ), middleware.Logger( options.Logger, ), ), ) { handle = svc.NewInstrument(handle, options.Metrics) handle = svc.NewLoggingHandler(handle, options.Logger) } if err := micro.RegisterHandler(service.Server(), handle); err != nil { return http.Service{}, err } return service, nil }