middlewares

func ChiRouteLabeler ¶ added in v1.0.4

func ChiRouteLabeler(next http.Handler) http.Handler

ChiRouteLabeler attaches the matched chi route pattern as the "http.route" attribute on the active otelhttp span. It must run after otelhttp.NewMiddleware so the labeler is present in the request context.

func OriginVerify ¶

func OriginVerify(cfg config.OriginConfig) func(http.Handler) http.Handler

OriginVerify creates middleware that validates requests contain a shared secret header. Uses constant-time comparison to prevent timing attacks.

When origin verification is disabled via config, the middleware is a no-op. Returns 403 Forbidden when the header is missing or the value doesn't match.

func SecurityHeaders ¶

func SecurityHeaders(next http.Handler) http.Handler

SecurityHeaders adds OWASP-recommended security headers to responses. HSTS header is only added when the request is served over TLS.