nagayon-935 / conduit / 23789841913

64%

push

github

feat: implement SSH LocalForward HTTP/WebSocket proxy

Add support for ssh_config LocalForward directives in Conduit.
When a session has LocalForwards configured, the backend exposes
/api/forward/{token}/{host}/{port}/{path...} as an HTTP reverse
proxy tunneled through the existing SSH connection.

Backend:
- session: ForwardRule type, AllowedForwards allowlist, IsForwardAllowed()
- api/connect: accept local_forwards in ConnectRequest, return
  forward_base_url in ConnectResponse
- api/forward: HTTP reverse proxy via httputil.ReverseProxy with SSH
  DialContext transport; WebSocket upgrade via Hijack + bidirectional copy;
  Location header rewrite for redirects
- handler: register /api/forward/ routes outside loggingMiddleware
  to preserve http.Hijacker interface

Frontend:
- parseSshConfig: parse LocalForward directives (bind_address:port host:hostport)
- types: LocalForward interface, Profile.localForwards, ConnectResponse.forward_base_url
- useProfiles: propagate localForwards through import/upsert
- form: buildConnectRequest includes local_forwards
- Terminal: clickable [host:port] chips in status bar; greyed out when disconnected

Nginx:
- /api/forward/ location with WebSocket headers and 86400s timeout

88 of 153 new or added lines in 4 files covered. (57.52%)

727 of 1212 relevant lines covered (59.98%)

7.08 hits per line