mirror of
https://github.com/logos-co/logos-evm-net-proxy.git
synced 2026-08-27 04:11:13 +00:00
Dario LipicarandClaude Opus 4.8
1f862c31e8
The single, fail-closed constructor of HTTP clients for the Logos EVM wallet networking modules. build_client refuses to return a client when a proxy is required but unset/unusable, so requests are never sent in the clear. rustls-tls + socks (socks5h, Tor-ready). 6 unit tests. Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
1.5 KiB
1.5 KiB
logos-net-proxy
The single, fail-closed constructor of HTTP clients for the Logos wallet modules
(eth_rpc_module, token_list_module). It is the one chokepoint through which every
outbound request is built, so the wallet's privacy posture — never send in the clear
when a proxy is required — is enforced in one auditable place and is ready for Tor.
API
pub struct ProxyConfig { pub proxy: Option<String>, pub proxy_required: bool, pub timeout_secs: u64 }
pub enum ProxyError { ProxyRequiredButUnset, ProxyUnusable(String), Build(String) }
/// The ONLY place a reqwest client is constructed in the wallet networking modules.
pub fn build_client(cfg: &ProxyConfig) -> Result<reqwest::blocking::Client, ProxyError>;
Rules enforced by build_client:
proxy_required == trueand no usable proxy ⇒Err(ProxyRequiredButUnset)— it never falls back to a clear-net client.- A proxy URL must use a supported scheme:
socks5h(preferred — DNS resolves through the proxy, the right choice for Tor),socks5,http, orhttps. - With no proxy set and none required, ambient environment proxies are disabled so the clear-net path is explicit and deterministic.
Consumers depend on this crate and have no other way to obtain a client; each asserts via
a unit test that reqwest::Client::builder appears only here.
Build / test
cargo test
Uses reqwest with rustls-tls (pure-Rust TLS) + socks. Built with rustls rather than
native-tls to keep the link closure free of system OpenSSL.