Class HttpClientImpl

p2p/src/main/java/bisq/network/http/HttpClientImpl.java:93–557

HTTP client used for any external query (price feed, fee estimation, BSQ explorer, mempool broadcast, XMR proof, …). Hardening invariants enforced here: - URL must parse as a valid http/https URI with a non-empty host (no file://, no userinfo, no schemes outside http/https). - Requests addr

 *   - Bodies are decoded as UTF-8; size accounting is byte-exact.
 */
@Slf4j
public class HttpClientImpl implements HttpClient {
    // Connect=80s covers Tor circuit setup + onion-service rendezvous on a cold
    // start; read=60s is per-byte inactivity, generous for any healthy server
    // once the circuit is up.
    static final int CONNECT_TIMEOUT_SEC = 80;
    static final int READ_TIMEOUT_SEC = 60;
    // 512 KiB is well above any legitimate response from price feeds, fee
    // estimators, mempool/explorer JSON, or XMR proof endpoints. A larger cap
    // just widens the memory-exhaustion window without enabling any real use.
    static final long MAX_RESPONSE_BYTES = 512L * 1024;

    @Nullable
    private final Socks5ProxyProvider socks5ProxyProvider;
    private final boolean allowLanForHttpRequests;
    private final boolean allowClearnetHttpRequests;
    @Nullable
    private volatile HttpURLConnection connection;
    @Nullable
    private volatile CloseableHttpClient closeableHttpClient;

    @Getter
    private volatile String baseUrl;
    private volatile boolean ignoreSocks5Proxy;
    @Getter
    private final String uid;
    private final AtomicBoolean hasPendingRequest = new AtomicBoolean(false);

    @Inject
    public HttpClientImpl(@Nullable Socks5ProxyProvider socks5ProxyProvider,
                          @Named(Config.ALLOW_LAN_FOR_HTTP_REQUESTS) boolean allowLanForHttpRequests,
                          @Named(Config.ALLOW_CLEARNET_HTTP_REQUESTS) boolean allowClearnetHttpRequests) {
        this.socks5ProxyProvider = socks5ProxyProvider;
        this.allowLanForHttpRequests = allowLanForHttpRequests;
        this.allowClearnetHttpRequests = allowClearnetHttpRequests;
        if (allowClearnetHttpRequests) {
            log.warn("allowClearnetHttpRequests is enabled: HTTP requests to non-local destinations will " +
                    "bypass Tor and leak your IP address. Use only for development/testing.");
        }
        uid = UUID.randomUUID().toString();
    }

    public HttpClientImpl(@Nullable Socks5ProxyProvider socks5ProxyProvider) {
        // Test/legacy entry point. Defaults to strict loopback-only.
        this(socks5ProxyProvider, false, false);
    }

    public HttpClientImpl(String baseUrl) {
        this.socks5ProxyProvider = null;
        this.allowLanForHttpRequests = false;
        this.allowClearnetHttpRequests = false;
        setBaseUrl(baseUrl);
        uid = UUID.randomUUID().toString();
    }

    @Override
    public void setBaseUrl(String baseUrl) {
        // Validate up-front so misconfiguration surfaces at injection time, not at