dguerri / k8s-ssh-gateway-controller

91%

Build Type

push

github

Committed by dguerri

Commit Message

fix(ssh): cancel wrong-hostname tunnels using requested host:port

Previously handleAssignedURIs canceled forwardings using the
server-bound port parsed from tcp:// URIs. Per RFC 4254 §7.1, sish and
other servers key cancel-tcpip-forward on the originally-requested bind
address and port, so canceling the bound value never matched and leaked
the listener. Worse, HTTP/HTTPS tunnels (e.g. pico.sh web tunnels) have
no tcp:// URI, so no cancel was sent at all.

Now cancel always uses the originally-requested host:port, releasing the
listener for both TCP and HTTP/HTTPS forwardings. Tests updated and a new
test added covering the HTTP/HTTPS case.

Coverage Stats

7 of 7 new or added lines in 1 file covered. (100.0%)

1 existing line in 1 file now uncovered.

2010 of 2215 relevant lines covered (90.74%)

9.16 hits per line