Separate server headers from http headers

Signed-off-by: Ivan Kanakarakis <[email protected]>

Author: c00kiemon5ter

src/satosa/context.py

@@ -26,6 +26,7 @@ def __init__(self):
         self.request_uri = None
         self.request_method = None
         self.qs_params = None
+        self.server = None
         self.http_headers = None
         self.cookie = None
         self.request_authorization = None

src/satosa/proxy_server.py

@@ -1,14 +1,15 @@
-import io
 import json
 import logging
 import logging.config
 import sys
+from io import BytesIO
 from urllib.parse import parse_qsl as _parse_query_string
 
 from cookies_samesite_compat import CookiesSameSiteCompatMiddleware
 
 import satosa
 import satosa.logging_util as lu
+
 from .base import SATOSABase
 from .context import Context
 from .response import ServiceError, NotFound
@@ -68,14 +69,22 @@ def unpack_request(environ, content_length=0):
     return data
 
 
+def collect_server_headers(environ):
+    headers = {
+        header_name: header_value
+        for header_name, header_value in environ.items()
+        if header_name.startswith("SERVER_")
+    }
+    return headers
+
+
 def collect_http_headers(environ):
     headers = {
         header_name: header_value
         for header_name, header_value in environ.items()
         if (
             header_name.startswith("HTTP_")
             or header_name.startswith("REMOTE_")
-            or header_name.startswith("SERVER_")
         )
     }
     return headers
@@ -119,20 +128,21 @@ def __call__(self, environ, start_response, debug=False):
         context.path = path
 
         # copy wsgi.input stream to allow it to be re-read later by satosa plugins
-        # see: http://stackoverflow.com/
-        #      questions/1783383/how-do-i-copy-wsgi-input-if-i-want-to-process-post-data-more-than-once
+        # see: http://stackoverflow.com/questions/1783383/how-do-i-copy-wsgi-input-if-i-want-to-process-post-data-more-than-once
         content_length = int(environ.get('CONTENT_LENGTH', '0') or '0')
-        body = io.BytesIO(environ['wsgi.input'].read(content_length))
+        body = BytesIO(environ['wsgi.input'].read(content_length))
         environ['wsgi.input'] = body
+
         context.request = unpack_request(environ, content_length)
         context.request_uri = environ.get("REQUEST_URI")
         context.request_method = environ.get("REQUEST_METHOD")
-        context.http_headers = collect_http_headers(environ)
         context.qs_params = parse_query_string(environ.get("QUERY_STRING"))
-        environ['wsgi.input'].seek(0)
+        context.server = collect_server_headers(environ)
+        context.http_headers = collect_http_headers(environ)
+        context.cookie = context.http_headers.get("HTTP_COOKIE", "")
+        context.request_authorization = context.http_headers.get("HTTP_AUTHORIZATION", "")
 
-        context.cookie = environ.get("HTTP_COOKIE", "")
-        context.request_authorization = environ.get("HTTP_AUTHORIZATION", "")
+        environ['wsgi.input'].seek(0)
 
         try:
             resp = self.run(context)