WebCmdlet unix-sockets

src/Microsoft.PowerShell.Commands.Utility/commands/utility/WebCmdlet/Common/WebRequestPSCmdlet.Common.cs

@@ -11,6 +11,7 @@
 using System.Net;
 using System.Net.Http;
 using System.Net.Http.Headers;
+using System.Net.Sockets;
 using System.Security;
 using System.Security.Authentication;
 using System.Security.Cryptography;
@@ -352,21 +353,23 @@ public abstract class WebRequestPSCmdlet : PSCmdlet, IDisposable
         [Parameter(Mandatory = true, ParameterSetName = "CustomMethodNoProxy")]
         [Alias("CM")]
         [ValidateNotNullOrEmpty]
-        public virtual string CustomMethod
-        {
-            get => _custommethod;
-
-            set => _custommethod = value.ToUpperInvariant();
-        }
+        public virtual string CustomMethod { get => _customMethod; set => _customMethod = value.ToUpperInvariant(); }
 
-        private string _custommethod;
+        private string _customMethod;
 
         /// <summary>
         /// Gets or sets the PreserveHttpMethodOnRedirect property.
         /// </summary>
         [Parameter]
         public virtual SwitchParameter PreserveHttpMethodOnRedirect { get; set; }
 
+        /// <summary>
+        /// Gets or sets the UnixSocket property.
+        /// </summary>
+        [Parameter]
+        [ValidateNotNullOrEmpty]
+        public virtual UnixDomainSocketEndPoint UnixSocket { get; set; }
+
         #endregion Method
 
         #region NoProxy
@@ -765,6 +768,13 @@ internal virtual void ValidateParameters()
                 ErrorRecord error = GetValidationError(WebCmdletStrings.CredentialConflict, "WebCmdletCredentialConflictException");
                 ThrowTerminatingError(error);
             }
+
+            // Method
+            if (UnixSocket is not null && Socket.OSSupportsUnixDomainSockets is false)
+            {
+                ErrorRecord error = GetValidationError(WebCmdletStrings.UnixDomainSocketsNotSupported, "UnixDomainSocketsNotSupportedException");
+                ThrowTerminatingError(error);
+            }
 
             // Proxy server
             if (ProxyUseDefaultCredentials && ProxyCredential is not null)
@@ -969,6 +979,8 @@ internal virtual void PrepareSession()
                 WebSession.MaximumRedirection = MaximumRedirection;
             }
 
+            WebSession.UnixSocket = UnixSocket;
+
             WebSession.SkipCertificateCheck = SkipCertificateCheck.IsPresent;
 
             // Store the other supplied headers

src/Microsoft.PowerShell.Commands.Utility/commands/utility/WebCmdlet/WebRequestSession.cs

@@ -7,6 +7,7 @@
 using System.Collections.Generic;
 using System.Net;
 using System.Net.Http;
+using System.Net.Sockets;
 using System.Security.Authentication;
 using System.Security.Cryptography.X509Certificates;
 using System.Threading;
@@ -33,6 +34,7 @@ public class WebRequestSession : IDisposable
         private bool _noProxy;
         private bool _disposed;
         private int _timeoutSec;
+        private UnixDomainSocketEndPoint? _unixSocket;
 
         /// <summary>
         /// Contains true if an existing HttpClient had to be disposed and recreated since the WebSession was last used.
@@ -144,6 +146,8 @@ public WebRequestSession()
 
         internal int TimeoutSec { set => SetStructVar(ref _timeoutSec, value); }
 
+        internal UnixDomainSocketEndPoint UnixSocket { set => SetClassVar(ref _unixSocket, value); }
+
         internal bool NoProxy
         {
             set
@@ -195,7 +199,18 @@ internal HttpClient GetHttpClient(bool suppressHttpClientRedirects, out bool cli
 
         private HttpClient CreateHttpClient()
         {
-            HttpClientHandler handler = new();
+            SocketsHttpHandler handler = new();
+
+            if (_unixSocket is not null)
+            {
+                handler.ConnectCallback = async (context, token) =>
+                {
+                    Socket socket = new(AddressFamily.Unix, SocketType.Stream, ProtocolType.IP);
+                    await socket.ConnectAsync(_unixSocket).ConfigureAwait(false);
+
+                    return new NetworkStream(socket, ownsSocket: false);
+                };
+            }
 
             handler.CookieContainer = Cookies;
             handler.AutomaticDecompression = DecompressionMethods.All;
@@ -206,7 +221,7 @@ private HttpClient CreateHttpClient()
             }
             else
             {
-                handler.UseDefaultCredentials = UseDefaultCredentials;
+                handler.Credentials = CredentialCache.DefaultCredentials;
             }
 
             if (_noProxy)
@@ -220,13 +235,12 @@ private HttpClient CreateHttpClient()
 
             if (Certificates is not null)
             {
-                handler.ClientCertificates.AddRange(Certificates);
+                handler.SslOptions.ClientCertificates = new X509CertificateCollection(Certificates);
             }
 
             if (_skipCertificateCheck)
             {
-                handler.ServerCertificateCustomValidationCallback = HttpClientHandler.DangerousAcceptAnyServerCertificateValidator;
-                handler.ClientCertificateOptions = ClientCertificateOption.Manual;
+                handler.SslOptions.RemoteCertificateValidationCallback = delegate { return true; };
             }
 
             handler.AllowAutoRedirect = _allowAutoRedirect;
@@ -235,9 +249,9 @@ private HttpClient CreateHttpClient()
                 handler.MaxAutomaticRedirections = MaximumRedirection;
             }
 
-            handler.SslProtocols = (SslProtocols)_sslProtocol;
+            handler.SslOptions.EnabledSslProtocols = (SslProtocols)_sslProtocol;
 
-            // Check timeout setting (in seconds instead of milliseconds as in HttpWebRequest)
+            // Check timeout setting (in seconds)
             return new HttpClient(handler)
             {
                 Timeout = _timeoutSec is 0 ? TimeSpan.FromMilliseconds(Timeout.Infinite) : TimeSpan.FromSeconds(_timeoutSec)

src/Microsoft.PowerShell.Commands.Utility/resources/WebCmdletStrings.resx

@@ -210,6 +210,9 @@
   <data name="ThumbprintNotFound" xml:space="preserve">
     <value>Unable to retrieve certificates because the thumbprint is not valid. Verify the thumbprint and retry. </value>
   </data>
+  <data name="UnixDomainSocketsNotSupported" xml:space="preserve">
+    <value>UnixDomainSockets are not supported on this platform. Reissue the command removing the -UnixSocket parameter. </value>
+  </data>
   <data name="WriteRequestComplete" xml:space="preserve">
     <value>Web request completed. (Number of bytes processed: {0})</value>
   </data>