all: support insecure mode

- pomerium/authenticate: add cookie secure setting
- internal/config: transport security validation moved to options
- internal/config: certificate struct hydrated
- internal/grpcutil: add grpc server mirroring http one
- internal/grpcutil: move grpc middleware
- cmd/pomerium: use run wrapper around main to pass back errors
- cmd/pomerium: add waitgroup (block on) all servers http/grpc

Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>

proxy/proxy_test.go

@@ -10,27 +10,18 @@ import (
 	"github.com/pomerium/pomerium/internal/config"
 )
 
-func newTestOptions(t *testing.T) *config.Options {
-	opts, err := config.NewMinimalOptions("https://authenticate.example", "https://authorize.example")
-	if err != nil {
-		t.Fatal(err)
-	}
-	opts.CookieSecret = "OromP1gurwGWjQPYb1nNgSxtbVB5NnLzX6z5WOKr0Yw="
-	return opts
-}
-
 func testOptions(t *testing.T) config.Options {
-	authenticateService, _ := url.Parse("https://authenticate.corp.beyondperimeter.com")
-	authorizeService, _ := url.Parse("https://authorize.corp.beyondperimeter.com")
+	opts := config.NewDefaultOptions()
+	opts.AuthenticateURLString = "https://authenticate.example"
+	opts.AuthorizeURLString = "https://authorize.example"
 
-	opts := newTestOptions(t)
 	testPolicy := config.Policy{From: "https://corp.example.example", To: "https://example.example"}
 	opts.Policies = []config.Policy{testPolicy}
-	opts.AuthenticateURL = authenticateService
-	opts.AuthorizeURL = authorizeService
+	opts.InsecureServer = true
+	opts.CookieSecure = false
+	opts.Services = config.ServiceAll
 	opts.SharedKey = "80ldlrU2d7w+wVpKNfevk6fmb8otEx6CqOfshj2LwhQ="
 	opts.CookieSecret = "OromP1gurwGWjQPYb1nNgSxtbVB5NnLzX6z5WOKr0Yw="
-	opts.CookieName = "pomerium"
 	err := opts.Validate()
 	if err != nil {
 		t.Fatal(err)