Sep 7, 2023 · Aug 21, 2023
diff --git a/package.json b/package.json
 "markdownDescription":"An external command that outputs additional HTTP headers added to all requests. The command must output each header as `key=value` on its own line. The following environment variables will be available to the process: `CODER_URL`.",
 "type":"string",
 "default":""
        },
 "coder.tlsCertFile": {
 "markdownDescription":"Path to file for TLS client cert",
 "type":"string",
 "default":""
        },
 "coder.tlsKeyFile": {
 "markdownDescription":"Path to file for TLS client key",
 "type":"string",
 "default":""
        },
 "coder.tlsCaFile": {
 "markdownDescription":"Path to file for TLS certificate authority",
 "type":"string",
 "default":""
        }
      }
    },
diff --git a/src/extension.ts b/src/extension.ts
 "use strict"
 importaxiosfrom"axios"
 import{getAuthenticatedUser}from"coder/site/src/api/api"
 importfsfrom"fs"
 import*ashttpsfrom"https"
 import*asmodulefrom"module"
 import*asvscodefrom"vscode"
 false,
 )

 // updateInsecure is called on extension activation and when the insecure
 // setting is changed. It updates the https agent to allow self-signed
 // certificates if the insecure setting is true.
 constapplyInsecure=()=>{
 constinsecure=Boolean(vscode.workspace.getConfiguration().get("coder.insecure"))
 // applyHttpProperties is called on extension activation and when the
 // insecure or TLS setting are changed. It updates the https agent to allow
 // self-signed certificates if the insecure setting is true, as well as
 // adding cert/key/ca properties for TLS.
 constapplyHttpProperties=()=>{
 constcfg=vscode.workspace.getConfiguration()
 constinsecure=Boolean(cfg.get("coder.insecure"))
 constcertFile=String(cfg.get("coder.tlsCertFile"))
 constkeyFile=String(cfg.get("coder.tlsKeyFile"))
 constcaFile=String(cfg.get("coder.tlsCaFile"))

 axios.defaults.httpsAgent=newhttps.Agent({
 cert:certFile==="" ?undefined :fs.readFileSync(certFile),
 key:keyFile==="" ?undefined :fs.readFileSync(keyFile),
 ca:caFile==="" ?undefined :fs.readFileSync(caFile),
 // rejectUnauthorized defaults to true, so we need to explicitly set it to false
 // if we want to allow self-signed certificates.
 rejectUnauthorized:!insecure,
 )

 vscode.workspace.onDidChangeConfiguration((e)=>{
 e.affectsConfiguration("coder.insecure")&&applyInsecure()
 if(
 e.affectsConfiguration("coder.insecure")||
 e.affectsConfiguration("coder.tlsCertFile")||
 e.affectsConfiguration("coder.tlsKeyFile")||
 e.affectsConfiguration("coder.tlsCaFile")
 ){
 applyHttpProperties()
 }
 })
 applyInsecure()
 applyHttpProperties()

 constoutput=vscode.window.createOutputChannel("Coder")
 conststorage=newStorage(output,ctx.globalState,ctx.secrets,ctx.globalStorageUri,ctx.logUri)
Original file line number	Diff line number	Diff line change
Expand Up		@@ -62,6 +62,21 @@
		"markdownDescription":"An external command that outputs additional HTTP headers added to all requests. The command must output each header as `key=value` on its own line. The following environment variables will be available to the process: `CODER_URL`.",
		"type":"string",
		"default":""
		},
		"coder.tlsCertFile": {
		"markdownDescription":"Path to file for TLS client cert",
		"type":"string",
		"default":""
		},
		"coder.tlsKeyFile": {
		"markdownDescription":"Path to file for TLS client key",
		"type":"string",
		"default":""
		},
		"coder.tlsCaFile": {
		"markdownDescription":"Path to file for TLS certificate authority",
		"type":"string",
		"default":""
		}
		}
		},
Expand Down
Original file line number	Diff line number	Diff line change
		@@ -1,6 +1,7 @@
		"use strict"
		importaxiosfrom"axios"
		import{getAuthenticatedUser}from"coder/site/src/api/api"
		importfsfrom"fs"
		import*ashttpsfrom"https"
		import*asmodulefrom"module"
		import*asvscodefrom"vscode"
Expand DownExpand Up		@@ -30,13 +31,21 @@ export async function activate(ctx: vscode.ExtensionContext): Promise<void> {
		false,
		)

		// updateInsecure is called on extension activation and when the insecure
		// setting is changed. It updates the https agent to allow self-signed
		// certificates if the insecure setting is true.
		constapplyInsecure=()=>{
		constinsecure=Boolean(vscode.workspace.getConfiguration().get("coder.insecure"))
		// applyHttpProperties is called on extension activation and when the
		// insecure or TLS setting are changed. It updates the https agent to allow
		// self-signed certificates if the insecure setting is true, as well as
		// adding cert/key/ca properties for TLS.
		constapplyHttpProperties=()=>{
		constcfg=vscode.workspace.getConfiguration()
		constinsecure=Boolean(cfg.get("coder.insecure"))
		constcertFile=String(cfg.get("coder.tlsCertFile"))
		constkeyFile=String(cfg.get("coder.tlsKeyFile"))
		constcaFile=String(cfg.get("coder.tlsCaFile"))

		axios.defaults.httpsAgent=newhttps.Agent({
		cert:certFile==="" ?undefined :fs.readFileSync(certFile),
		key:keyFile==="" ?undefined :fs.readFileSync(keyFile),
		ca:caFile==="" ?undefined :fs.readFileSync(caFile),
		// rejectUnauthorized defaults to true, so we need to explicitly set it to false
		// if we want to allow self-signed certificates.
		rejectUnauthorized:!insecure,
Expand All		@@ -51,9 +60,16 @@ export async function activate(ctx: vscode.ExtensionContext): Promise<void> {
		)

		vscode.workspace.onDidChangeConfiguration((e)=>{
		e.affectsConfiguration("coder.insecure")&&applyInsecure()
		if(
		e.affectsConfiguration("coder.insecure")\|\|
		e.affectsConfiguration("coder.tlsCertFile")\|\|
		e.affectsConfiguration("coder.tlsKeyFile")\|\|
		e.affectsConfiguration("coder.tlsCaFile")
		){
		applyHttpProperties()
		}
		})
		applyInsecure()
		applyHttpProperties()

		constoutput=vscode.window.createOutputChannel("Coder")
		conststorage=newStorage(output,ctx.globalState,ctx.secrets,ctx.globalStorageUri,ctx.logUri)
Expand Down