feat(config): add support for authorization header on blockchain http requests

Author: mpolitzer

cmd/cartesi-rollups-claimer/root/root.go

@@ -5,6 +5,7 @@ package root
 
 import (
 	"context"
+	"net/http"
 
 	"github.com/cartesi/rollups-node/internal/claimer"
 	"github.com/cartesi/rollups-node/internal/config"
@@ -105,14 +106,22 @@ func run(cmd *cobra.Command, args []string) {
 		Config: *cfg,
 	}
 
+	clientOptions := []rpc.ClientOption{}
 	rclient := retryablehttp.NewClient()
 	rclient.Logger = service.NewLogger(cfg.LogLevel, cfg.LogColor).With("service", serviceName)
 	rclient.RetryMax = int(cfg.BlockchainHttpMaxRetries)
 	rclient.RetryWaitMin = cfg.BlockchainHttpRetryMinWait
 	rclient.RetryWaitMax = cfg.BlockchainHttpRetryMaxWait
+	clientOptions = append(clientOptions, rpc.WithHTTPClient(rclient.StandardClient()))
 
-	clientOption := rpc.WithHTTPClient(rclient.StandardClient())
-	rpcClient, err := rpc.DialOptions(ctx, cfg.BlockchainHttpEndpoint.String(), clientOption)
+	if cfg.BlockchainHttpAuthorization.Value != "undefined" {
+		clientOptions = append(clientOptions, rpc.WithHTTPAuth(func(h http.Header) error {
+			h.Set("Authorization", cfg.BlockchainHttpAuthorization.Value)
+			return nil
+		}))
+	}
+
+	rpcClient, err := rpc.DialOptions(ctx, cfg.BlockchainHttpEndpoint.String(), clientOptions...)
 	cobra.CheckErr(err)
 	createInfo.EthConn = ethclient.NewClient(rpcClient)
 

cmd/cartesi-rollups-evm-reader/root/root.go

@@ -6,6 +6,7 @@ package root
 import (
 	"context"
 	"log/slog"
+	"net/http"
 
 	"github.com/cartesi/rollups-node/internal/config"
 	"github.com/cartesi/rollups-node/internal/evmreader"
@@ -90,14 +91,22 @@ func init() {
 }
 
 func createEthClient(ctx context.Context, endpoint string, logger *slog.Logger) (*ethclient.Client, error) {
+	clientOptions := []rpc.ClientOption{}
 	rclient := retryablehttp.NewClient()
 	rclient.Logger = logger
 	rclient.RetryMax = int(cfg.BlockchainHttpMaxRetries)
 	rclient.RetryWaitMin = cfg.BlockchainHttpRetryMinWait
 	rclient.RetryWaitMax = cfg.BlockchainHttpRetryMaxWait
-	clientOption := rpc.WithHTTPClient(rclient.StandardClient())
+	clientOptions = append(clientOptions, rpc.WithHTTPClient(rclient.StandardClient()))
 
-	rpcClient, err := rpc.DialOptions(ctx, endpoint, clientOption)
+	if cfg.BlockchainHttpAuthorization.Value != "undefined" {
+		clientOptions = append(clientOptions, rpc.WithHTTPAuth(func(h http.Header) error {
+			h.Set("Authorization", cfg.BlockchainHttpAuthorization.Value)
+			return nil
+		}))
+	}
+
+	rpcClient, err := rpc.DialOptions(ctx, endpoint, clientOptions...)
 	if err != nil {
 		return nil, err
 	}

cmd/cartesi-rollups-node/root/root.go

@@ -6,6 +6,7 @@ package root
 import (
 	"context"
 	"log/slog"
+	"net/http"
 
 	"github.com/cartesi/rollups-node/internal/config"
 	"github.com/cartesi/rollups-node/internal/node"
@@ -132,14 +133,22 @@ func init() {
 }
 
 func createEthClient(ctx context.Context, endpoint string, logger *slog.Logger) (*ethclient.Client, error) {
+	clientOptions := []rpc.ClientOption{}
 	rclient := retryablehttp.NewClient()
 	rclient.Logger = logger
 	rclient.RetryMax = int(cfg.BlockchainHttpMaxRetries)
 	rclient.RetryWaitMin = cfg.BlockchainHttpRetryMinWait
 	rclient.RetryWaitMax = cfg.BlockchainHttpRetryMaxWait
-	clientOption := rpc.WithHTTPClient(rclient.StandardClient())
+	clientOptions = append(clientOptions, rpc.WithHTTPClient(rclient.StandardClient()))
 
-	rpcClient, err := rpc.DialOptions(ctx, endpoint, clientOption)
+	if cfg.BlockchainHttpAuthorization.Value != "undefined" {
+		clientOptions = append(clientOptions, rpc.WithHTTPAuth(func(h http.Header) error {
+			h.Set("Authorization", cfg.BlockchainHttpAuthorization.Value)
+			return nil
+		}))
+	}
+
+	rpcClient, err := rpc.DialOptions(ctx, endpoint, clientOptions...)
 	if err != nil {
 		return nil, err
 	}

internal/config/generate/Config.toml

@@ -106,6 +106,14 @@ description = """
 HTTP endpoint for the blockchain RPC provider."""
 used-by = ["evmreader", "claimer", "node"]
 
+[blockchain.CARTESI_BLOCKCHAIN_HTTP_AUTHORIZATION]
+file = true
+default = "undefined"
+go-type = "RedactedString"
+description = """
+HTTP Authorization header."""
+used-by = ["evmreader", "claimer", "node"]
+
 [blockchain.CARTESI_BLOCKCHAIN_WS_ENDPOINT]
 file = true
 go-type = "URL"