Function httpServiceDirAuth

core/integration/services_test.go:2377–2434

(ctx context.Context, t testing.TB, c *dagger.Client, hostname string, dir *dagger.Directory, username string, token *dagger.Secret)

}

func httpServiceDirAuth(ctx context.Context, t testing.TB, c *dagger.Client, hostname string, dir *dagger.Directory, username string, token *dagger.Secret) (*dagger.Service, string) {
	t.Helper()

	if username == "" {
		username = "x-access-token"
	}

	var tokenPlaintext string
	if token != nil {
		var err error
		tokenPlaintext, err = token.Plaintext(ctx)
		require.NoError(t, err)
	}

	tmpl, err := template.New("").Parse(`
server {
	listen       80;
	server_name  localhost;

	location / {
		root   /usr/share/nginx/html;
		index  index.html index.htm;
	}

	{{ if .token }}
	auth_basic            "Restricted";
	auth_basic_user_file  /usr/share/nginx/htpasswd;
	{{ end }}
}
`)
	require.NoError(t, err)

	var config bytes.Buffer
	err = tmpl.Execute(&config, map[string]any{
		"token": tokenPlaintext,
	})
	require.NoError(t, err)

	svc := c.Container().
		From("nginx").
		WithNewFile("/etc/nginx/conf.d/default.conf", config.String()).
		WithMountedDirectory("/usr/share/nginx/html", dir).
		WithEnvVariable("CACHE_BUSTER", fmt.Sprintf("%s-%d", username, time.Now().UnixNano())).
		WithMountedSecret("/usr/share/nginx/htpasswd", c.SetSecret("htpasswd-"+identity.NewID(), username+":{PLAIN}"+tokenPlaintext), dagger.ContainerWithMountedSecretOpts{
			Owner: "nginx",
		}).
		WithExposedPort(80).
		AsService(dagger.ContainerAsServiceOpts{UseEntrypoint: true})

	if hostname == "" {
		hostname, err = svc.Hostname(ctx)
		require.NoError(t, err)
	} else {
		svc = svc.WithHostname(hostname)
	}
	url := fmt.Sprintf("http://%s", hostname)
	return svc, url
}