middleware

Jan 10, 2023

Changes in this version

+ var Error2HttpStatusCode = func(err error) int

type Middleware

+ func Authorize(supplier PermissionsSupplierFunc, matchAllPermissions bool) Middleware

+ type PermissionsSupplierFunc func(ctx context.Context, mc path.MatchingContext) ([]auth.Permission, error)

Nov 2, 2022

Changes in this version

type Middleware

+ func RequestDumper(logger func(val string)) Middleware

+ func SecurityPrincipalSupplier(sps SecurityPrincipalSupplierFunc) Middleware

+ type SecurityPrincipalSupplierFunc func(ctx context.Context, r *request.HttpRequest) (auth.SecurityPrincipal, error)

Oct 30, 2022

Changes in this version

+ const CSRFNonceCtxKey

+ const CSRFNonceRequestParamName

+ const CSRFRestNonceHeaderName

+ var CSRFExpirationTime = 1 * time.Hour

+ func GetCSRFNonceFromContext(ctx context.Context) string

+ type CorsConfig struct

+ AllowedHttpHeaders []string

+ AllowedHttpMethods []string

+ AllowedOrigins []string

+ AnyOriginAllowed bool

+ ExposedHeaders []string

+ PreflightMaxAgeSeconds int

+ SupportsCredentials bool

+ type Middleware func(handler handler.Handler) handler.Handler

+ func AuthorizeAll(permissions ...auth.Permission) Middleware

+ func AuthorizeAny(permissions ...auth.Permission) Middleware

+ func CSRFPrevention(nonceCache cache.Cache) Middleware

+ func CSRFPreventionWithCustomParamAndHeaderName(nonceCache cache.Cache, csrfNonceRequestParamName string, ...) Middleware

+ func CompressResponse(compressionLevel int) Middleware

+ func Cors(config CorsConfig) Middleware

+ func ErrJsonResponse() Middleware

+ func ErrResponse(responseSupplier ResponseSupplier) Middleware

+ func PanicRecover() Middleware

+ func SecurityHeaders(config SecurityHeadersConfig) Middleware

+ type ResponseSupplier func(statusCode int, err error) response.HttpResponse

+ type SecurityHeadersConfig struct

+ BlockContentSniffingEnabled bool

+ ClickJacking ShClickJackingConfig

+ STS ShStrictTransportSecurityConfig

+ XSSProtectionEnabled bool

+ type ShClickJackingConfig struct

+ Enabled bool

+ XFrameAllowFromUri string

+ XFrameOption XFrameOption

+ XFrameOptionHeaderValue string

+ type ShStrictTransportSecurityConfig struct

+ Enabled bool

+ IncludeSubDomains bool

+ MaxAgeSeconds int

+ Preload bool

+ type XFrameOption int

+ const XFrameOptionAllowFrom

+ const XFrameOptionDeny

+ const XFrameOptionSameOrigin