Method workspaceAppsProxyPath

coderd/workspaceapps/proxy.go:286–359

workspaceAppsProxyPath proxies requests to a workspace application through a relative URL path.

(rw http.ResponseWriter, r *http.Request)

// workspaceAppsProxyPath proxies requests to a workspace application
// through a relative URL path.
func (s *Server) workspaceAppsProxyPath(rw http.ResponseWriter, r *http.Request) {
	if s.DisablePathApps {
		site.RenderStaticErrorPage(rw, r, site.ErrorPageData{
			Status:      http.StatusForbidden,
			Title:       "Forbidden",
			Description: "Path-based applications are disabled on this Coder deployment by the administrator.",
			Actions: []site.Action{
				{
					URL:  s.DashboardURL.String(),
					Text: "Back to site",
				},
			},
		})
		return
	}

	// We don't support @me in path apps since it requires the database to
	// lookup the username from token. We used to redirect by doing this lookup.
	if chi.URLParam(r, "user") == codersdk.Me {
		site.RenderStaticErrorPage(rw, r, site.ErrorPageData{
			Status:      http.StatusNotFound,
			Title:       "Application Not Found",
			Description: "Applications must be accessed with the full username, not @me.",
			Actions: []site.Action{
				{
					URL:  s.DashboardURL.String(),
					Text: "Back to site",
				},
			},
		})
		return
	}

	if !s.handleAPIKeySmuggling(rw, r, AccessMethodPath) {
		return
	}

	// Determine the real path that was hit. The * URL parameter in Chi will not
	// include the leading slash if it was present, so we need to add it back.
	chiPath := chi.URLParam(r, "*")
	basePath := strings.TrimSuffix(r.URL.Path, chiPath)
	if strings.HasSuffix(basePath, "/") {
		chiPath = "/" + chiPath
	}

	// ResolveRequest will only return a new signed token if the actor has the RBAC
	// permissions to connect to a workspace.
	token, ok := ResolveRequest(rw, r, ResolveRequestOptions{
		Logger:              s.Logger,
		Cookies:             s.cookies,
		CookieCfg:           s.CookiesConfig,
		SignedTokenProvider: s.SignedTokenProvider,
		DashboardURL:        s.DashboardURL,
		PathAppBaseURL:      s.AccessURL,
		AppHostname:         s.Hostname,
		AppRequest: Request{
			AccessMethod:      AccessMethodPath,
			BasePath:          basePath,