net/http: add enforcement hook to Transport.RoundTrip, like our net ones

Updates #55 Updates tailscale/corp#12702 Signed-off-by: Brad Fitzpatrick <[email protected]>
tailscale · Jul 23, 2023 · 7924b46 · 7924b46
1 parent 41b84e3
commit 7924b46
Show file tree

Hide file tree

Showing 2 changed files with 18 additions and 0 deletions.
diff --git a/src/net/http/tailscale.go b/src/net/http/tailscale.go
@@ -0,0 +1,13 @@
+package http
+
+var roundTripEnforcer func(*Request) error
+
+func SetRoundTripEnforcer(f func(*Request) error) {
+	if f == nil {
+		panic("nil func")
+	}
+	if roundTripEnforcer != nil {
+		panic("already called")
+	}
+	roundTripEnforcer = f
+}
diff --git a/src/net/http/transport.go b/src/net/http/transport.go
@@ -511,6 +511,11 @@ func (t *Transport) alternateRoundTripper(req *Request) RoundTripper {
 
 // roundTrip implements a RoundTripper over HTTP.
 func (t *Transport) roundTrip(req *Request) (*Response, error) {
+	if roundTripEnforcer != nil {
+		if err := roundTripEnforcer(req); err != nil {
+			return nil, err
+		}
+	}
 	t.nextProtoOnce.Do(t.onceSetNextProtoDefaults)
 	ctx := req.Context()
 	trace := httptrace.ContextClientTrace(ctx)