tegwick
e7282e493d
Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a0e6f1-443f-7783-9920-a16b2ffc467f
46 lines
1.8 KiB
Python
46 lines
1.8 KiB
Python
"""Bounded HTTP transport; endpoint configuration is never supplied by callers."""
|
|
import json
|
|
from http.client import HTTPException
|
|
from urllib.error import HTTPError, URLError
|
|
from urllib.parse import urlsplit
|
|
from urllib.request import HTTPRedirectHandler, ProxyHandler, Request, build_opener
|
|
|
|
|
|
def origin(value, internal=False):
|
|
p = urlsplit(value)
|
|
local = p.hostname in ('127.0.0.1', '::1') or (p.hostname or '').endswith(('.svc', '.svc.cluster.local'))
|
|
if (p.scheme != 'https' and not (internal and local and p.scheme == 'http')
|
|
or not p.hostname or p.username or p.password or p.path or p.query or p.fragment
|
|
or any(c.isspace() for c in value)):
|
|
raise ValueError('invalid fixed origin')
|
|
return value
|
|
|
|
|
|
class NoRedirect(HTTPRedirectHandler):
|
|
def redirect_request(self, *args, **kwargs):
|
|
return None
|
|
|
|
|
|
class Transport:
|
|
def __init__(self):
|
|
self.opener = build_opener(ProxyHandler({}), NoRedirect())
|
|
|
|
def request(self, method, url, body=None, headers=None):
|
|
try:
|
|
try:
|
|
response = self.opener.open(Request(url, data=body, headers=headers or {}, method=method), timeout=5)
|
|
except HTTPError as error:
|
|
response = error
|
|
with response:
|
|
status = response.code
|
|
if status >= 300:
|
|
return status, {}
|
|
raw = response.read(262145)
|
|
if len(raw) > 262144:
|
|
raise ValueError()
|
|
data = json.loads(raw)
|
|
if not isinstance(data, dict):
|
|
raise ValueError()
|
|
return status, data
|
|
except (OSError, URLError, HTTPException, ValueError, UnicodeError):
|
|
raise OSError('upstream unavailable or invalid') from None
|