Merge pull request #20 from delta10/feat/listen-with-tls

Add the ability to listen with TLS

cmd/filter-proxy/main.go

@@ -263,7 +263,11 @@ func main() {
 		MaxHeaderBytes: 1 << 20,
 	}
 
-	log.Fatal(s.ListenAndServe())
+	if config.ListenTLS.Certificate != "" && config.ListenTLS.Key != "" {
+		log.Fatal(s.ListenAndServeTLS(config.ListenTLS.Certificate, config.ListenTLS.Key))
+	} else {
+		log.Fatal(s.ListenAndServe())
+	}
 }
 
 func authorizeRequestWithService(config *config.Config, path config.Path, r *http.Request) (*AuthorizationResponse, bool) {

config.yaml

@@ -1,4 +1,9 @@
 listenAddress: localhost:8050
+
+# listenTls:
+#   certificate: tls.crt
+#   key: tls.key
+
 authorizationServiceUrl: http://localhost:8000/atlas/api/v1/authorize
 
 paths:

internal/config/config.go

@@ -40,7 +40,11 @@ type LogBackend struct {
 }
 
 type Config struct {
-	ListenAddress           string                `yaml:"listenAddress"`
+	ListenAddress string `yaml:"listenAddress"`
+	ListenTLS     struct {
+		Certificate string `yaml:"certificate"`
+		Key         string `yaml:"key"`
+	} `yaml:"listenTls"`
 	AuthorizationServiceURL string                `yaml:"authorizationServiceUrl"`
 	JwksURL                 string                `yaml:"jwksUrl"`
 	Paths                   []Path                `yaml:"paths"`