FP Refactor & Enveloping SPA Requests

forward-proxy/Cargo.toml

@@ -22,3 +22,5 @@ once_cell = "1.21.3"
 pingora-error = "0.5.0"
 boring = "4.17.0"
 env_logger = "0.11.8"
+utils = { path = "../utils" }
+hex = "0.4.3"

forward-proxy/src/handler/consts.rs

@@ -23,7 +23,20 @@ impl ForwardHeaderKeys {
 }
 
 const LAYER8_URL: &str = "http://127.0.0.1:5001";
-const RP_URL: &str = "http://127.0.0.1:6193";
+const RP_URL: &str = "http://127.0.0.1:6194";
+
 pub static RP_INIT_ENCRYPTED_TUNNEL_PATH: Lazy<String> = Lazy::new(|| format!("{}/init-tunnel", RP_URL));
 pub static RP_PROXY_PATH: Lazy<String> = Lazy::new(|| format!("{}/proxy", RP_URL));
 pub static LAYER8_GET_CERTIFICATE_PATH: Lazy<String> = Lazy::new(|| format!("{}/sp-pub-key?backend_url=", LAYER8_URL));
+
+pub const NTOR_SERVER_ID: &str = "ntor_server_id";
+pub const NTOR_SERVER_ID_TMP_VALUE: &str = "ReverseProxyServer";
+pub const NTOR_STATIC_PUBLIC_KEY: &str = "ntor_static_public_key";
+pub const NTOR_STATIC_PUBLIC_KEY_TMP_VALUE: [u8; 32] = [
+    131, 210, 36, 101, 39, 191, 61, 165, 29, 112, 94, 149, 120, 202, 189, 170,
+    151, 62, 247, 71, 208, 255, 144, 173, 52, 223, 239, 221, 153, 225, 40, 10
+];
+
+pub const INIT_TUNNEL_ENDPOINT: &str = "/init-tunnel";
+pub const PROXY_ENDPOINT: &str = "/proxy";
+pub const HEALTHCHECK_ENDPOINT: &str = "/healthcheck";

forward-proxy/src/handler/helpers.rs

@@ -0,0 +1,28 @@
+use serde::Serialize;
+use chrono::Utc;
+use jsonwebtoken::{encode, EncodingKey, Header};
+
+// Get SECRET_KEY from environment variable
+pub fn get_secret_key() -> String {
+    std::env::var("JWT_SECRET_KEY").expect("JWT_SECRET_KEY must be set")
+}
+
+#[derive(Serialize)]
+struct Claims {
+    exp: usize,
+}
+
+pub fn generate_standard_token(secret_key: &str) -> pingora::Result<String, Box<dyn std::error::Error>> {
+    let now = Utc::now();
+    let claims = Claims {
+        exp: (now + chrono::Duration::days(1)).timestamp() as usize,
+    };
+
+    let token = encode(
+        &Header::new(jsonwebtoken::Algorithm::HS256),
+        &claims,
+        &EncodingKey::from_secret(secret_key.as_bytes()),
+    )?;
+
+    Ok(token)
+}