opencode/picoclaw
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix: launcher health check fails when gateway serves TLS

Browse source 
The launcher always used http:// to probe the gateway health endpoint,
but when web_app_url is configured with https://, the gateway starts
with TLS causing "client sent HTTP request to HTTPS server" errors.

Now detect TLS mode from config and use the correct scheme, with
InsecureSkipVerify for localhost self-signed cert access.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
dj-oyu 2026-03-15 17:31:22 +09:00
parent 2062fe566e
commit c8c7da47cf
1 changed files with 18 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

21
web/backend/api/gateway.go
View file

@ -2,6 +2,7 @@ package api
import (
"bufio"
"crypto/tls"
"encoding/json"
"fmt"
"io"
@ -44,10 +45,24 @@ var (
)
var gatewayHealthGet = func(url string, timeout time.Duration) (*http.Response, error) {
client := http.Client{Timeout: timeout}
transport := http.DefaultTransport
if strings.HasPrefix(url, "https://") {
transport = &http.Transport{
TLSClientConfig: &tls.Config{InsecureSkipVerify: true}, //nolint:gosec // localhost self-signed
}
}
client := http.Client{Timeout: timeout, Transport: transport}
return client.Get(url)
}
// gatewayHealthScheme returns "https" if the gateway is serving TLS, "http" otherwise.
func gatewayHealthScheme(cfg *config.Config) string {
if cfg != nil && strings.HasPrefix(cfg.Channels.Telegram.WebAppURL, "https://") {
return "https"
}
return "http"
}
// registerGatewayRoutes binds gateway lifecycle endpoints to the ServeMux.
func (h *Handler) registerGatewayRoutes(mux *http.ServeMux) {
mux.HandleFunc("GET /api/gateway/status", h.handleGatewayStatus)
@ -356,7 +371,7 @@ func (h *Handler) startGatewayLocked(initialStatus string) (int, error) {
if healthPort == 0 {
healthPort = 18790
}
healthURL := fmt.Sprintf("http://%s/health", net.JoinHostPort(healthHost, strconv.Itoa(healthPort)))
healthURL := fmt.Sprintf("%s://%s/health", gatewayHealthScheme(cfg), net.JoinHostPort(healthHost, strconv.Itoa(healthPort)))
resp, err := gatewayHealthGet(healthURL, 1*time.Second)
if err == nil {
resp.Body.Close()
@ -609,7 +624,7 @@ func (h *Handler) gatewayStatusData() map[string]any {
}
}
url := fmt.Sprintf("http://%s/health", net.JoinHostPort(host, strconv.Itoa(port)))
url := fmt.Sprintf("%s://%s/health", gatewayHealthScheme(cfg), net.JoinHostPort(host, strconv.Itoa(port)))
resp, err := gatewayHealthGet(url, 2*time.Second)
if err != nil {