Jupyterhub 可配置的 Http 代理问题

Question

我一直在使用 Jupyterhub 的可配置 Http 代理，我一直在为代理添加必要的选项来处理客户端的 ssl 证书，而无需使用命令行选项。

我的主要目标是接收客户端对代理的请求并将他们的证书信息添加到 header。进入 header 后，我将使用 jupyterhub 的身份验证器来制作用户名。

我的问题是，当我使用可用于 http-proxy 的 proxy.on('proxyReq 方法来设置 header 时，出现此错误：[Error: Can't set headers after they are sent.]

我一直在查看代码以查看 response/request 被写入或发送的位置，但我找不到它。

这里是ConfigurableProxy的功能代码，如果需要我可以给你更多：

function ConfigurableProxy (options) {

var that = this;
this.options = options || {};
this.trie = new trie.URLTrie();
this.auth_token = this.options.auth_token;
this.includePrefix = options.includePrefix === undefined ? true : options.includePrefix;
this.routes = {};
this.host_routing = this.options.host_routing;
this.error_target = options.error_target;
if (this.error_target && this.error_target.slice(-1) !== '/') {
    this.error_target = this.error_target + '/'; // ensure trailing /
}
this.error_path = options.error_path || path.join(__dirname, 'error');

if (this.options.default_target) {
    this.add_route('/', {
        target: this.options.default_target
    });
}

options.ws = true;
options.secure= true;
// These are the ssl options

options.ssl = {
    //Right the key and cert are relative path on my computer
    //but these can be changed.
    key: fs.readFileSync('/Users/grantherman/Desktop/jupyterHubCSProject/ssl/server.key'),
    cert: fs.readFileSync('/Users/grantherman/Desktop/jupyterHubCSProject/ssl/server.crt'),
    requestCert: true,
    //Right now this is set to false, but if we add a CA to these options
    // and set this to true, the proxy will reject all unkown ssl certs
    rejectUnauthorized: false
};
var response = [];
var data = [];
var proxy = this.proxy = httpProxy.createProxyServer(options);

proxy.on('proxyReq', function(proxyReq, req, res, options) {
    console.log("proxy request");
    try{
  proxyReq.setHeader('X-Special-Proxy-Header', req.socket.getPeerCertificate());

  }catch(err){
    console.log(err);
    }

});

 proxy.on('data', function(data, req, res, options) {
  data.push(data);
  });

proxy.on('proxyRes', function(proxyRes, req, res, options) {
  response.push(proxyRes);
  });

proxy.on('error', function(error, req, res, options) {
    log.add(error);

});

proxy.on('close', function (req, socket, head) {
  // view disconnected websocket connections
  console.log('Client disconnected');
});


// tornado-style regex routing,
// because cross-language cargo-culting is always a good idea

this.api_handlers = [
    [ /^\/api\/routes(\/.*)?$/, {
        get : bound(this, authorized(this.get_routes)),
        post : json_handler(bound(this, authorized(this.post_routes))),
        'delete' : bound(this, authorized(this.delete_routes))
    } ]
];

Answer 1

我认为这需要对 configurable-http-proxy 本身进行修改。添加headers的地方在发起代理请求之前的原始reqobject上，here.

它看起来像：

ConfigurableProxy.prototype.handle_proxy = function (kind, req, res) {
    ...
    req.headers['X-My-Header'] = 'My-Value';
    // dispatch the actual method
    this.proxy[kind].apply(this.proxy, args);

在此处向 CHP 添加一个用于修改请求的挂钩，应该可以在不修改 CHP 源的情况下实现这一点。

Jupyterhub 可配置的 Http 代理问题

Jupyterhub Configurable Http Proxy issue

proxy

node.js

node-http-proxy

jupyter-notebook