Skip to content

jmwallet.backends._transport_security

jmwallet.backends._transport_security

Transport-security diagnostics for direct backend connections.

Functions:

warn_if_unencrypted_remote_http(url: str) -> None

Warn when a direct backend URL uses HTTP outside an explicit loopback host.

Source code in jmwallet/src/jmwallet/backends/_transport_security.py 
29
30
31
32
33
34
35
36
37
38
39
def warn_if_unencrypted_remote_http(url: str) -> None:
    """Warn when a direct backend URL uses HTTP outside an explicit loopback host."""
    try:
        parsed = urlsplit(url)
    except ValueError:
        if url.lower().startswith("http:"):
            logger.warning(_UNENCRYPTED_REMOTE_HTTP_WARNING)
        return

    if parsed.scheme.lower() == "http" and not _is_loopback_host(parsed.hostname):
        logger.warning(_UNENCRYPTED_REMOTE_HTTP_WARNING)