middlewares

func OriginVerify ¶

func OriginVerify(cfg config.OriginConfig) func(http.Handler) http.Handler

OriginVerify creates middleware that validates requests contain a shared secret header. Uses constant-time comparison to prevent timing attacks.

When origin verification is disabled via config, the middleware is a no-op. Returns 403 Forbidden when the header is missing or the value doesn't match.

func SecurityHeaders ¶

func SecurityHeaders(next http.Handler) http.Handler

SecurityHeaders adds OWASP-recommended security headers to responses. HSTS header is only added when the request is served over TLS.