Add shared QUIC secret to h3 ASGI3 lab

Author: cobycloud

examples/h3_asgi3_lab/README.md

@@ -14,6 +14,10 @@ The runtime container generates a short-lived localhost certificate in a shared
 Compose volume. The UI-side probe trusts that certificate when it opens the H3
 QUIC connection from the container network.
 
+The Compose stack bind-mounts `examples/` into the containers so edits to the
+ASGI3 app and UI are picked up by container recreation without a full image
+rebuild.
+
 ## Run
 
 ```powershell

examples/h3_asgi3_lab/docker-compose.yml

@@ -13,10 +13,12 @@ services:
         --transport udp --host 0.0.0.0 --port 8445
         --protocol http3 --http 3
         --ssl-certfile /certs/server-cert.pem --ssl-keyfile /certs/server-key.pem
+        --quic-secret h3-asgi3-lab-shared-secret
         --alt-svc 'h3=":8445"; ma=60'
     ports:
       - "8445:8445/udp"
     volumes:
+      - ../../examples:/app/examples:ro
       - h3-asgi3-certs:/certs
 
   tigrcorn-h3-uix:
@@ -32,9 +34,11 @@ services:
       TIGRCORN_H3_TARGET_HOST: tigrcorn-h3-asgi3
       TIGRCORN_H3_TARGET_PORT: "8445"
       TIGRCORN_H3_SERVER_NAME: localhost
+      TIGRCORN_H3_QUIC_SECRET: h3-asgi3-lab-shared-secret
     ports:
       - "8091:8090/tcp"
     volumes:
+      - ../../examples:/app/examples:ro
       - h3-asgi3-certs:/certs
     depends_on:
       - tigrcorn-h3-asgi3

examples/h3_asgi3_lab/uix_server.py

@@ -8,7 +8,6 @@
 from pathlib import Path
 from urllib.parse import parse_qs, urlsplit
 
-from tigrcorn.constants import DEFAULT_QUIC_SECRET
 from tigrcorn.protocols.http3 import HTTP3ConnectionCore
 from tigrcorn.transports.quic import QuicConnection
 from tigrcorn.transports.quic.handshake import QuicTlsHandshakeDriver
@@ -23,9 +22,10 @@ async def _issue_h3_get(path: str) -> dict[str, object]:
     target_host = os.environ.get("TIGRCORN_H3_TARGET_HOST", "tigrcorn-h3-asgi3")
     target_port = int(os.environ.get("TIGRCORN_H3_TARGET_PORT", "8445"))
     server_name = os.environ.get("TIGRCORN_H3_SERVER_NAME", "localhost")
+    quic_secret = os.environ.get("TIGRCORN_H3_QUIC_SECRET", "h3-asgi3-lab-shared-secret").encode("utf-8")
     sock = socket.socket(socket.AF_INET, socket.SOCK_DGRAM)
     sock.setblocking(False)
-    client = QuicConnection(is_client=True, secret=DEFAULT_QUIC_SECRET, local_cid=b"h3uixprobe0001")
+    client = QuicConnection(is_client=True, secret=quic_secret, local_cid=b"h3uix001")
     client.configure_handshake(
         QuicTlsHandshakeDriver(
             is_client=True,

tests/test_h3_asgi3_lab.py

@@ -20,6 +20,8 @@ def test_compose_runs_tigrcorn_h3_asgi3_and_uix_containers(self) -> None:
         self.assertIn("--transport udp", compose)
         self.assertIn("--protocol http3", compose)
         self.assertIn("--http 3", compose)
+        self.assertIn("--quic-secret h3-asgi3-lab-shared-secret", compose)
+        self.assertIn("TIGRCORN_H3_QUIC_SECRET", compose)
         self.assertNotIn("webtransport", compose.lower())
         self.assertIn('"8445:8445/udp"', compose)
         self.assertIn("tigrcorn-h3-uix:", compose)