feat: support --trusted-origins

Author: DanielleMaywood

src/code-server/README.md

@@ -34,6 +34,7 @@ VS Code in the browser
 | port | The port to bind to for the code-server. | string | 8080 |
 | socket | Path to a socket. When specified, host and port will be ignored. | string | - |
 | socketMode | File mode of the socket when using the socket option. | string | - |
+| trustedOrigins | Comma-separated list of trusted-origins to disable origin check for. Useful if not able to access reverse proxy configuration. | string | - |
 | verbose | Enable verbose logging. | boolean | false |
 | version | The version of code-server to install. If empty, installs the latest version. | string | - |
 | welcomeText | Text to show on login page. | string | - |

src/code-server/devcontainer-feature.json

@@ -100,6 +100,11 @@
             "default": "",
             "description": "File mode of the socket when using the socket option."
         },
+        "trustedOrigins": {
+            "type": "string",
+            "default": "",
+            "description": "Comma-separated list of trusted-origins to disable origin check for. Useful if not able to access reverse proxy configuration."
+        },
         "verbose": {
             "type": "boolean",
             "default": false,

src/code-server/install.sh

@@ -91,6 +91,13 @@ if [[ "$VERBOSE" == "true" ]]; then
     FLAGS+=(--verbose)
 fi
 
+IFS=',' read -ra trusted_origins <<<"$TRUSTEDORIGINS"
+declare -p trusted_origins
+
+for trusted_origin in "${trusted_origins[@]}"; do
+    FLAGS+=(--trusted-origins "$trusted_origin")
+done
+
 cat > /usr/local/bin/code-server-entrypoint <<EOF
 #!/usr/bin/env bash
 set -e

test/code-server/code-server-trusted-origins.sh

@@ -0,0 +1,15 @@
+#!/bin/bash
+set -e
+
+# Optional: Import test library bundled with the devcontainer CLI
+source dev-container-features-test-lib
+
+# Feature-specific tests
+check "code-server version" code-server --version
+check "code-server running" pgrep -f 'code-server/lib/node.*/code-server'
+check "code-server listening" lsof -i "@127.0.0.1:8080"
+
+check "code-server trusted-origins" grep '"--trusted-origins".*"dev.coder.com".*"--trusted-origins".*"coder.com"' < /usr/local/bin/code-server-entrypoint
+
+# Report results
+reportResults

test/code-server/scenarios.json

@@ -200,5 +200,13 @@
                 "verbose": true
             }
         }
+    },
+    "code-server-trusted-origins": {
+        "image": "mcr.microsoft.com/devcontainers/base:ubuntu",
+        "features": {
+            "code-server": {
+                "trustedOrigins": ["dev.coder.com", "coder.com"]
+            }
+        }
     }
 }