module Network.HTTP2.TLS.Client.Settings where

import Data.X509.CertificateStore (CertificateStore)
import Network.Socket

import Network.Control
import Network.HTTP2.Client (
    cacheLimit,
    defaultClientConfig,
 )
import Network.Run.TCP (openClientSocket)
import Network.TLS (
    Information,
    SessionData,
    SessionID,
    SessionManager,
    noSessionManager,
 )

-- Client settings type.
data Settings = Settings
    { Settings -> String -> IO ()
settingsKeyLogger :: String -> IO ()
    -- ^ Key logger (TLS and H2)
    --
    -- Applications may wish to set this depending on the SSLKEYLOGFILE environment variable.
    --
    -- Default: do nothing.
    , Settings -> Bool
settingsValidateCert :: Bool
    -- ^ Should we validate TLS certificates? (TLS and H2)
    --
    -- >>> settingsValidateCert defaultSettings
    -- True
    , Settings -> CertificateStore
settingsCAStore :: CertificateStore
    -- ^ Certificate store used for validation. (TLS and H2)
    --
    -- Default: 'mempty'.
    , Settings -> Maybe String
settingsServerNameOverride :: Maybe HostName
    -- ^ Server name override (H2)
    --
    -- By default, the server name (for TLS SNI) is set based on the
    -- 'Network.HTTP2.Client.authority', corresponding to the HTTP2
    -- @:authority@ pseudo-header. In rare circumstances these two values should
    -- be different (for example in the case of domain fronting);
    -- 'settingsServerNameOverride' can be used to give SNI a different value
    -- than @:authority@.
    , Settings -> [AddrInfoFlag]
settingsAddrInfoFlags :: [AddrInfoFlag]
    -- ^ Obsoleted.
    , Settings -> Int
settingsCacheLimit :: Int
    -- ^ How many pushed responses are contained in the cache (H2 and H2c)
    --
    -- >>> settingsCacheLimits defaultSettings
    -- 64
    , Settings -> Int
settingsConcurrentStreams :: Int
    -- ^ The maximum number of incoming streams on the net (H2 and H2c)
    --
    -- >>> settingsConcurrentStreams defaultSettings
    -- 64
    , Settings -> Int
settingsStreamWindowSize :: Int
    -- ^ The window size of incoming streams (H2 and H2c)
    --
    -- >>> settingsStreamWindowSize defaultSettings
    -- 262144
    , Settings -> Int
settingsConnectionWindowSize :: Int
    -- ^ The window size of a connection (H2 and H2c)
    --
    -- >>> settingsConnectionWindowSize defaultSettings
    -- 1048575
    , Settings -> SessionManager
settingsSessionManager :: SessionManager
    -- ^ TLS session manager (H2 and TLS)
    --
    -- Default: 'noSessionManager'
    , Settings -> Maybe (SessionID, SessionData)
settingsWantSessionResume :: Maybe (SessionID, SessionData)
    -- ^ Try to resume a TLS session (H2 and TLS)
    --
    -- >>> settingsWantSessionResume defaultSettings
    -- Nothing
    , Settings -> [(SessionID, SessionData)]
settingsWantSessionResumeList :: [(SessionID, SessionData)]
    -- ^ Try to resume a TLS session (H2 and TLS).
    -- This takes precedence over 'settingsWantSessionResume'.
    --
    -- >>> settingsWantSessionResumeList defaultSettings
    -- []
    , Settings -> Bool
settingsUseEarlyData :: Bool
    -- ^ Try to use 0-RTT (H2 and TLS)
    --
    -- This is only supported for @tls >= 2.0@.
    --
    -- >>> settingsUseEarlyData defaultSettings
    -- False
    , Settings -> AddrInfo -> IO Socket
settingsOpenClientSocket :: AddrInfo -> IO Socket
    -- ^ Function to initialize the server socket (All)
    --
    -- Default: 'openClientSocket'
    , Settings -> Information -> IO ()
settingsOnServerFinished :: Information -> IO ()
    , Settings -> Int
settingsPingRateLimit :: Int
    -- ^ Maximum number of pings allowed per second (CVE-2019-9512)
    --
    -- >>> settingsPingRateLimit defaultSettings
    -- 10
    , Settings -> Int
settingsEmptyFrameRateLimit :: Int
    -- ^ Maximum number of empty data frames allowed per second (CVE-2019-9518)
    --
    -- >>> settingsEmptyFrameRateLimit defaultSettings
    -- 4
    , Settings -> Int
settingsSettingsRateLimit :: Int
    -- ^ Maximum number of settings frames allowed per second (CVE-2019-9515)
    --
    -- >>> settingsSettingsRateLimit defaultSettings
    -- 4
    , Settings -> Int
settingsRstRateLimit :: Int
    -- ^ Maximum number of reset frames allowed per second (CVE-2023-44487)
    --
    -- >>> settingsRstRateLimit
    -- 4
    }

-- | Default settings.
defaultSettings :: Settings
defaultSettings :: Settings
defaultSettings =
    Settings
        { settingsKeyLogger :: String -> IO ()
settingsKeyLogger = \String
_ -> () -> IO ()
forall a. a -> IO a
forall (m :: * -> *) a. Monad m => a -> m a
return ()
        , settingsValidateCert :: Bool
settingsValidateCert = Bool
True
        , settingsCAStore :: CertificateStore
settingsCAStore = CertificateStore
forall a. Monoid a => a
mempty
        , settingsServerNameOverride :: Maybe String
settingsServerNameOverride = Maybe String
forall a. Maybe a
Nothing
        , settingsAddrInfoFlags :: [AddrInfoFlag]
settingsAddrInfoFlags = []
        , settingsCacheLimit :: Int
settingsCacheLimit = ClientConfig -> Int
cacheLimit ClientConfig
defaultClientConfig
        , settingsConcurrentStreams :: Int
settingsConcurrentStreams = Int
defaultMaxStreams
        , settingsStreamWindowSize :: Int
settingsStreamWindowSize = Int
defaultMaxStreamData
        , settingsConnectionWindowSize :: Int
settingsConnectionWindowSize = Int
defaultMaxData
        , settingsSessionManager :: SessionManager
settingsSessionManager = SessionManager
noSessionManager
        , settingsWantSessionResume :: Maybe (SessionID, SessionData)
settingsWantSessionResume = Maybe (SessionID, SessionData)
forall a. Maybe a
Nothing
        , settingsWantSessionResumeList :: [(SessionID, SessionData)]
settingsWantSessionResumeList = []
        , settingsUseEarlyData :: Bool
settingsUseEarlyData = Bool
False
        , settingsOpenClientSocket :: AddrInfo -> IO Socket
settingsOpenClientSocket = AddrInfo -> IO Socket
openClientSocket
        , settingsOnServerFinished :: Information -> IO ()
settingsOnServerFinished = \Information
_ -> () -> IO ()
forall a. a -> IO a
forall (m :: * -> *) a. Monad m => a -> m a
return ()
        , settingsPingRateLimit :: Int
settingsPingRateLimit = Int
10
        , settingsEmptyFrameRateLimit :: Int
settingsEmptyFrameRateLimit = Int
4
        , settingsSettingsRateLimit :: Int
settingsSettingsRateLimit = Int
4
        , settingsRstRateLimit :: Int
settingsRstRateLimit = Int
4
        }