Documentation
¶
Index ¶
- Constants
- func Auth(resolver KeyResolver) func(http.Handler) http.Handler
- func Chain(mws ...func(http.Handler) http.Handler) func(http.Handler) http.Handler
- func Logging(logger *slog.Logger) func(http.Handler) http.Handler
- func MaxBody(maxBytes int64) func(http.Handler) http.Handler
- func Recovery(logger *slog.Logger) func(http.Handler) http.Handler
- func RequestID(next http.Handler) http.Handler
- func Workspace() func(http.Handler) http.Handler
- type DevKeyResolver
- type KeyResolver
Constants ¶
const DefaultMaxBodyBytes int64 = 8 << 20
DefaultMaxBodyBytes caps request bodies at 8 MiB by default. MCP JSON-RPC envelopes add overhead on top of the payload — admin_import ships the full workspace bundle — so the cap is set higher than a plain REST API would need.
Variables ¶
This section is empty.
Functions ¶
func Auth ¶
func Auth(resolver KeyResolver) func(http.Handler) http.Handler
Auth enforces bearer-token authentication using the given resolver. On success, attaches the resolved workspace ID to the request context. Skips /healthz and /readyz so probes always succeed regardless of auth state.
func Chain ¶
Chain composes middleware left-to-right so the leftmost wraps outermost: Chain(A, B, C)(h) runs A(B(C(h))).
func Logging ¶
Logging emits one structured log line per request with method, path, status, duration, and request ID. Skips /healthz and /readyz to avoid probe spam.
func MaxBody ¶
MaxBody caps the request body at maxBytes. Writes past the cap fail with http.ErrBodyReadAfterClose. 0 disables the cap.
func Recovery ¶
Recovery catches panics from downstream handlers, logs the panic + stack trace via slog, and returns a 500 with a structured error envelope. Placed outermost so it catches panics in other middleware.
func RequestID ¶
RequestID honors an inbound X-Request-Id header or mints a new UUID. The value is stamped on the response header and stored in the request context for downstream access via reqctx.GetRequestID(ctx).
Types ¶
type DevKeyResolver ¶
type DevKeyResolver struct {
Key string
WorkspaceID models.WorkspaceID
}
DevKeyResolver accepts a single hardcoded API key and resolves it to a fixed workspace. Intended for tests — production wiring goes through APIKeyApp.
func (*DevKeyResolver) Resolve ¶
func (r *DevKeyResolver) Resolve(_ context.Context, plaintext string) (models.WorkspaceID, error)
Resolve implements KeyResolver. Returns Unauthorized for any key other than r.Key, or when r.Key is empty (no dev key configured).
type KeyResolver ¶
type KeyResolver interface {
Resolve(ctx context.Context, plaintext string) (models.WorkspaceID, error)
}
KeyResolver resolves a plaintext API key to its workspace. Production wiring uses APIKeyApp.Resolve; DevKeyResolver covers integration testing.
Source Files