middleware

type AccessLogOptions struct {
	// SkipPaths are not logged. Put the health and metrics endpoints here:
	// a liveness probe every two seconds is 43,200 log lines a day saying
	// nothing happened.
	SkipPaths []string
	// SlowThreshold promotes a slow request to warn. Zero disables it.
	SlowThreshold time.Duration
	// LogSuccess logs 2xx and 3xx as well. Off by default — the access log of
	// a busy service is a metric, and metrics belong in a metrics system.
	LogSuccess bool
}

type CORSOptions struct {
	// AllowOrigins is an explicit list. "*" is honoured ONLY when
	// AllowCredentials is false — the combination is forbidden by the spec and
	// browsers reject it, so this middleware refuses to emit it rather than
	// letting you ship a configuration that silently never works.
	AllowOrigins []string
	// AllowOriginFunc decides per request, for the wildcard-subdomain case.
	// It takes precedence over AllowOrigins.
	AllowOriginFunc  func(origin string) bool
	AllowMethods     []string
	AllowHeaders     []string
	ExposeHeaders    []string
	AllowCredentials bool
	MaxAge           time.Duration
}

type ChainOptions struct {
	Timeout       time.Duration
	AccessLog     AccessLogOptions
	SecureHeaders *SecureHeadersOptions
	Identity      IdentityResolver
}

type IdentityResolver func(c fiber.Ctx) (ctxkit.Tenant, ctxkit.Actor, error)

type MemoryRateLimitStore struct {
	// contains filtered or unexported fields
}

type RateLimitOptions struct {
	// Max requests per Window. Zero disables the middleware entirely, which
	// is the honest behaviour for an unset config — better than a limit of
	// zero that refuses everything.
	Max    int
	Window time.Duration
	// KeyFunc identifies the caller. The default is the client IP, which is
	// the right default and the wrong one behind a proxy that does not set
	// X-Forwarded-For: everyone shares one key and one user exhausts it for
	// all. Prefer an account or api-key based function.
	KeyFunc func(c fiber.Ctx) string
	// Skip exempts a request — a health probe, an internal caller.
	Skip  func(c fiber.Ctx) bool
	Store RateLimitStore
	// FailOpen decides what happens when the store errors. True (the default)
	// serves the request: a Redis blip should not take the API down with it.
	// Set false where the limit protects something that must not be exceeded.
	FailOpen *bool
}

type RateLimitStore interface {
	// Incr adds one to key's count within window and returns the new count
	// and the time the window resets.
	Incr(key string, window time.Duration) (count int, resetAt time.Time, err error)
}

type SecureHeadersOptions struct {
	// HSTSMaxAge enables Strict-Transport-Security. Zero disables it — do not
	// send HSTS from a service reachable over plain HTTP in development, or a
	// developer's browser will pin localhost to HTTPS and they will lose an
	// afternoon to it.
	HSTSMaxAge time.Duration
	// ContentSecurityPolicy is sent verbatim when non-empty. The default below
	// suits a JSON API; a service that serves HTML needs its own.
	ContentSecurityPolicy string
	// FrameOptions defaults to DENY.
	FrameOptions string
}