middleware

type AuthMiddleware ¶ added in v0.4.0

type AuthMiddleware struct {
	// contains filtered or unexported fields
}

func NewAuthMiddleware(secret string, v TokenValidation) (*AuthMiddleware, error)

func (m *AuthMiddleware) Verify(next http.Handler) http.Handler

type Authenticator ¶ added in v0.4.0

type Authenticator interface {
	Verify(next http.Handler) http.Handler
}

Authenticator verifies an incoming request and attaches identity to context. AuthMiddleware is the built-in JWT implementation; consumers needing a different auth scheme can implement their own.

type Field ¶

type Field struct {
	Key   string
	Value func(r *http.Request) any
}

Field is an extra request-scoped log field, e.g. userID, app version, route pattern. Consumers own how it's derived (chi route pattern, JWT claims, custom headers, etc.).

type HttpRequestLogStruct ¶

type HttpRequestLogStruct struct {
	// RequestID extracts the request ID (default: X-Request-Id header).
	RequestID func(r *http.Request) string
	// Fields are extra fields logged on both the start and end events, in order.
	Fields []Field
	// LogBody captures the response body on the end-of-request log.
	LogBody bool
}

HttpRequestLogStruct configures HttpRequestLog.

type RouteRegistrar ¶ added in v0.4.0

type RouteRegistrar func(r chi.Router)

RouteRegistrar registers routes on r. It closes over whatever Authenticator(s) it needs (zero, one, or several) - NewRouter has no opinion on auth.

type TokenValidation ¶ added in v0.7.4

type TokenValidation func(ctx context.Context, token *jwt.Token) (context.Context, error)

TokenValidation checks a parsed token against external state (e.g. revocation or DB-tracked expiry) and returns ctx enriched with claims-derived values. Returning an error 401s the request. Optional - nil skips this check and leaves ctx untouched.