cf_http

Sep 12, 2026

Changes in this version

+ func TrustedIngressClientIP(r *http.Request) string

Aug 19, 2026

Changes in this version

type Option

+ func WithWaitForHealth(timeout time.Duration) Option

Aug 17, 2026

Changes in this version

+ const ErrorCodePayloadTooLarge

+ var ErrCSRFExposeTokenOriginOnly = errors.New("cf_http: ExposeTokenHeader cannot be used with origin_only")

+ var ErrCSRFInvalidTrustedHost = errors.New("cf_http: TrustedHosts entries must be host or host:port, not a URL")

+ var ErrCSRFUnknownMode = errors.New("cf_http: unknown CSRF Mode")

+ var ErrSecurityHeadersHSTSMaxAge = errors.New("cf_http: HSTSMaxAge must be >= 0")

+ func CSRFTokenFrom(r *http.Request) string

+ func IsBodyTooLarge(err error) bool

type CSRFConfig

+ ExposeTokenHeader bool

+ FormField string

+ Mode CSRFMode

+ TrustedHosts []string

+ func (cfg CSRFConfig) Validate() error

+ type CSRFMode string

+ const CSRFDoubleSubmit

+ const CSRFOriginOnly

+ const CSRFSynchronizer

type Failure

+ func PayloadTooLarge(code, message string) Failure

type Middleware

+ func MaxBodyBytes(n int64, write ErrorWriter) Middleware

+ func RequestLogWith(logger func() *slog.Logger, cfg RequestLogConfig) Middleware

+ func SecurityHeaders(cfg SecurityHeadersConfig) Middleware

+ type RequestLogConfig struct

+ ClientIP func(*http.Request) string

+ IP cf_logs.IPMode

+ type SecurityHeadersConfig struct

+ HSTSIncludeSubdomains bool

+ HSTSMaxAge int

+ HSTSPreload bool

+ NoSniff *bool

+ func (cfg SecurityHeadersConfig) Validate() error

Aug 16, 2026

Changes in this version

+ type Bind []string

+ func (b *Bind) UnmarshalJSON(data []byte) error

+ func (b *Bind) UnmarshalYAML(value *yaml.Node) error

+ func (b Bind) MarshalJSON() ([]byte, error)

type Option

+ func WithBind(addrs ...string) Option

type ServerConfig

+ Bind Bind

Aug 12, 2026

Changes in this version

+ var ErrServerRestartRequired = errors.New("cf_http: server settings changed; immediate restart requested")

type Option

+ func WithRestartPolicy(policy string) Option

type ServerConfig

+ RestartPolicy RestartPolicy

Aug 11, 2026

Changes in this version

+ const ComponentName

+ const ComponentStage

+ const ErrorCodeBadRequest

+ const ErrorCodeConflict

+ const ErrorCodeForbidden

+ const ErrorCodeInternal

+ const ErrorCodeNotFound

+ const ErrorCodeUnauthorized

+ const ErrorCodeValidation

+ const GraphQLInstrumentationApp

+ const GraphQLInstrumentationHTTPPeek

+ const HTTPInstrumentationApp

+ const HTTPInstrumentationMiddleware

+ var ErrCORSCredentialsWildcard = errors.New(...)

+ var ErrServerKnobsRestart = errors.New("cf_http: server settings changed; immediate restart requested")

+ func DefaultErrorWriter(w http.ResponseWriter, r *http.Request, failure Failure)

+ func Record(server *Server, route string, status int, duration time.Duration)

+ func RequestIDFrom(r *http.Request) string

+ type CORSConfig struct

+ AllowCredentials bool

+ AllowedHeaders []string

+ AllowedMethods []string

+ AllowedOrigins []string

+ ExposedHeaders []string

+ MaxAge int

+ func (cfg CORSConfig) Validate() error

+ type CSRFConfig struct

+ CookieName string

+ HeaderName string

+ SameSite http.SameSite

+ Secure *bool

+ TokenLength int

+ Write ErrorWriter

+ type CompressionConfig struct

+ Level int

+ MinSize int

+ type ErrorWriter func(w http.ResponseWriter, r *http.Request, failure Failure)

+ type Failure struct

+ Code string

+ Message string

+ RequestID string

+ Status int

+ func BadRequest(code, message string) Failure

+ func Conflict(code, message string) Failure

+ func Forbidden(code, message string) Failure

+ func InternalError(code, message string) Failure

+ func NewFailure(status int, code, message string) Failure

+ func NotFound(code, message string) Failure

+ func Unauthorized(code, message string) Failure

+ func ValidationError(code, message string) Failure

+ func (f Failure) WithRequestID(requestID string) Failure

+ type Middleware func(http.Handler) http.Handler

+ func CORS(cfg CORSConfig) Middleware

+ func CSRF(cfg CSRFConfig) Middleware

+ func Chain(mw ...Middleware) Middleware

+ func Compression(cfg CompressionConfig) Middleware

+ func Metrics(server *Server) Middleware

+ func Recover(get func() *slog.Logger, write ErrorWriter) Middleware

+ func RequestID() Middleware

+ func RequestLog(logger func() *slog.Logger) Middleware

+ type Option func(*options)

+ func WithAddress(address string) Option

+ func WithConfig(cfg ServerConfig) Option

+ func WithConfigSource(name, path string, opts ...SourceOption) Option

+ func WithIdleTimeout(d time.Duration) Option

+ func WithKnobRestartPolicy(policy string) Option

+ func WithLogger(logger *slog.Logger) Option

+ func WithMaxHeaderBytes(n int) Option

+ func WithMetricsEnabled(enabled bool) Option

+ func WithName(name string) Option

+ func WithReadHeaderTimeout(d time.Duration) Option

+ func WithReadTimeout(d time.Duration) Option

+ func WithShutdownTimeout(d time.Duration) Option

+ func WithWriteTimeout(d time.Duration) Option

+ type RestartPolicy string

+ const RestartPolicyHandled

+ const RestartPolicyImmediate

+ type Server struct

+ func New(opts ...Option) *Server

+ func (c *Server) Addr() string

+ func (c *Server) GetDependencies() []string

+ func (c *Server) GetInitOrderStage() cf.Stage

+ func (c *Server) Handler() http.Handler

+ func (c *Server) Health(ctx context.Context) error

+ func (c *Server) Init(ctx context.Context, fw *cf.CaerusFramework) error

+ func (c *Server) Logger() *slog.Logger

+ func (c *Server) Metrics() []cf_observability.Metric

+ func (c *Server) Name() string

+ func (c *Server) OnConfigReload(source string, cfg any)

+ func (c *Server) RecordGraphQLMetric(operation string, status int, duration time.Duration)

+ func (c *Server) RecordGraphQLMetricFromHTTPPeek(operation string, status int, duration time.Duration)

+ func (c *Server) RecordGraphQLResolverMetric(operation, resolver string, status int, duration time.Duration)

+ func (c *Server) RegisterConfigSources(conf any) error

+ func (c *Server) Run(ctx context.Context) error

+ func (c *Server) SetHandler(handler http.Handler)

+ func (c *Server) Shutdown(ctx context.Context) error

+ type ServerConfig struct

+ Address string

+ IdleTimeoutSec *float64

+ KnobRestartPolicy RestartPolicy

+ MaxHeaderBytes *int

+ MetricsEnabled *bool

+ ReadHeaderTimeoutSec *float64

+ ReadTimeoutSec *float64

+ ShutdownTimeoutSec *float64

+ WriteTimeoutSec *float64

+ type SourceOption func(*sourceOptions)

+ func WithSourceEnvPrefix(prefix string) SourceOption

+ func WithSourceFormat(format cf_configuration.Format) SourceOption