Add timeouts to HTTP requests (#3908)

CHANGELOG.md

@@ -9,6 +9,7 @@
 - fix: only send contact changed event for recently seen if it is relevant (not too old to matter) #3938
 - Immediately save `accounts.toml` if it was modified by a migration from absolute paths to relative paths #3943
 - Do not treat invalid email addresses as an exception #3942
+- Add timeouts to HTTP requests #3948
 
 
 ## 1.105.0

src/configure/read_url.rs

@@ -16,7 +16,7 @@ pub async fn read_url(context: &Context, url: &str) -> anyhow::Result<String> {
 }
 
 pub async fn read_url_inner(context: &Context, url: &str) -> anyhow::Result<String> {
-    let client = reqwest::Client::new();
+    let client = crate::http::get_client()?;
     let mut url = url.to_string();
 
     // Follow up to 10 http-redirects

src/http.rs

@@ -0,0 +1,12 @@
+//! # HTTP module.
+
+use anyhow::Result;
+use std::time::Duration;
+
+const HTTP_TIMEOUT: Duration = Duration::from_secs(30);
+
+pub(crate) fn get_client() -> Result<reqwest::Client> {
+    Ok(reqwest::ClientBuilder::new()
+        .timeout(HTTP_TIMEOUT)
+        .build()?)
+}

src/lib.rs

@@ -66,6 +66,7 @@ mod decrypt;
 pub mod download;
 mod e2ee;
 pub mod ephemeral;
+mod http;
 mod imap;
 pub mod imex;
 mod scheduler;

src/oauth2.rs

@@ -158,7 +158,7 @@ pub async fn get_oauth2_access_token(
         }
 
         // ... and POST
-        let client = reqwest::Client::new();
+        let client = crate::http::get_client()?;
 
         let response: Response = match client.post(post_url).form(&post_param).send().await {
             Ok(resp) => match resp.json().await {
@@ -284,7 +284,14 @@ impl Oauth2 {
         //   "verified_email": true,
         //   "picture": "https://lh4.googleusercontent.com/-Gj5jh_9R0BY/AAAAAAAAAAI/AAAAAAAAAAA/IAjtjfjtjNA/photo.jpg"
         // }
-        let response = match reqwest::get(userinfo_url).await {
+        let client = match crate::http::get_client() {
+            Ok(cl) => cl,
+            Err(err) => {
+                warn!(context, "failed to get HTTP client: {}", err);
+                return None;
+            }
+        };
+        let response = match client.get(userinfo_url).send().await {
             Ok(response) => response,
             Err(err) => {
                 warn!(context, "failed to get userinfo: {}", err);

src/qr.rs

@@ -381,7 +381,7 @@ struct CreateAccountErrorResponse {
 #[allow(clippy::indexing_slicing)]
 async fn set_account_from_qr(context: &Context, qr: &str) -> Result<()> {
     let url_str = &qr[DCACCOUNT_SCHEME.len()..];
-    let response = reqwest::Client::new().post(url_str).send().await?;
+    let response = crate::http::get_client()?.post(url_str).send().await?;
     let response_status = response.status();
     let response_text = response.text().await.with_context(|| {
         format!(