config: add warning about http URLs (#2358)

This commit is contained in:
Caleb Doxsey 2021-07-13 11:12:03 -06:00 committed by GitHub
parent a9ba3ffff5
commit ca8205f0b4
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -1,6 +1,7 @@
package config
import (
"context"
"crypto/tls"
"encoding/base64"
"encoding/json"
@ -17,6 +18,7 @@ import (
"github.com/pomerium/pomerium/internal/hashutil"
"github.com/pomerium/pomerium/internal/identity"
"github.com/pomerium/pomerium/internal/log"
"github.com/pomerium/pomerium/internal/urlutil"
"github.com/pomerium/pomerium/pkg/cryptutil"
configpb "github.com/pomerium/pomerium/pkg/grpc/config"
@ -400,6 +402,10 @@ func (p *Policy) Validate() error {
return fmt.Errorf("config: policy source url (%s) contains a path, but it should be set using the path field instead",
source.String())
}
if source.Scheme == "http" {
log.Warn(context.Background()).Msgf("config: policy source url (%s) uses HTTP but only HTTPS is supported",
source.String())
}
p.Source = &StringURL{source}