1. class
  2. Hypervel
  3. \
  4. Passport
  5. \
  6. Http
  7. \
  8. HttpsDestinationPolicy

HttpsDestinationPolicy

class HttpsDestinationPolicy extends PublicDestinationPolicy

Constants

protected DISALLOWED_NETWORKS

Methods

__construct(array $allowedNetworks = [])

Create a new public destination policy instance.

from  PublicDestinationPolicy
ResolvedDestination
resolve(string $url, float $timeoutSeconds)

Resolve a public HTTPS destination, including each redirect target.

void
validate(string $url)

Validate a registered URL without making a network request.

string|null
proxyFor(UriInterface $uri)

Return an approved proxy for the destination.

from  PublicDestinationPolicy
bool
allowsAddress(UriInterface $uri, string $address)

Determine whether a non-public address may be used.

from  PublicDestinationPolicy
array
resolveHost(string $host, float $timeoutSeconds)

Resolve every address for a hostname.

from  PublicDestinationPolicy
array|false
resolveAddressFamily(string $host, int $family, float $timeoutSeconds)

Resolve one address family within its share of the request budget.

from  PublicDestinationPolicy
void
ensureHttps(string $url)

Reject plaintext endpoints before destination resolution.

Details

in PublicDestinationPolicy at line 48
__construct(array $allowedNetworks = [])

Create a new public destination policy instance.

Parameters

array $allowedNetworks

addresses or CIDR ranges that are allowed even when they are not public

at line 16
ResolvedDestination resolve(string $url, float $timeoutSeconds)

Resolve a public HTTPS destination, including each redirect target.

Parameters

string $url
float $timeoutSeconds

Return Value

ResolvedDestination

at line 26
void validate(string $url)

Validate a registered URL without making a network request.

Parameters

string $url

Return Value

void

in PublicDestinationPolicy at line 125
protected string|null proxyFor(UriInterface $uri)

Return an approved proxy for the destination.

Applications that require trusted egress proxies may extend this policy and select an absolute URL from a bounded operator-configured set. The policy then vets and pins only the proxy: hostname targets are resolved by the proxy, so it must enforce the same destination rules itself.

Parameters

UriInterface $uri

Return Value

string|null

in PublicDestinationPolicy at line 136
protected bool allowsAddress(UriInterface $uri, string $address)

Determine whether a non-public address may be used.

Applications may narrowly allow known internal destinations by extending this policy. Every resolved address must be allowed.

Parameters

UriInterface $uri
string $address

Return Value

bool

in PublicDestinationPolicy at line 148
protected array resolveHost(string $host, float $timeoutSeconds)

Resolve every address for a hostname.

Parameters

string $host
float $timeoutSeconds

Return Value

array

Exceptions

DestinationResolutionException

in PublicDestinationPolicy at line 185
protected array|false resolveAddressFamily(string $host, int $family, float $timeoutSeconds)

Resolve one address family within its share of the request budget.

Parameters

string $host
int $family
float $timeoutSeconds

Return Value

array|false

at line 36
protected void ensureHttps(string $url)

Reject plaintext endpoints before destination resolution.

Parameters

string $url

Return Value

void