mirror of
https://github.com/hanzoai/gateway.git
synced 2026-11-02 23:52:23 +00:00
Every import in this module now resolves to github.com/hanzoai/gateway/v2.
The 34 github.com/krakend/* + github.com/luraproject/lura modules that
supplied the engine and its components are vendored under internal/ and
their 91 packages rewritten onto our own path.
Why fold rather than mirror into 34 hanzoai/* repos:
- It removes the exposure outright. 34 rows leave 34 rows of go.sum to
reason about; zero modules leave nothing. `go list -m all` and go.sum
now contain no krakend/lura entry at all.
- Cross-references cannot go wrong. 28 of the 34 import lura (97 files
inside lura self-reference it). Mirroring means rewriting every one of
those to our lura, and a single miss silently links a SECOND copy of
lura into the binary. With one module that is structurally impossible.
- It creates no duplicates. These are lura-coupled gateway glue with no
consumer outside this binary; publishing 34 repos would be 34 new
things to maintain for zero second caller. internal/ makes that
guarantee mechanical — Go forbids importing it from outside this
module, so none of it can become a competing public package. Verified
no repo outside gateway imports any hanzoai/gateway/v2 subpackage.
Layout mirrors provenance so an upstream re-sync stays a diff:
luraproject/lura/v2 -> internal/lura (the engine, 20 pkgs)
krakend/krakend-<x> -> internal/plugin/<x> (28 components)
krakend/<x> -> internal/pkg/<x> (6 standalone libs)
This commit is PURELY MECHANICAL: 196 of the 197 vendored files are
byte-identical to their upstream original once the import rewrite is
applied. The single exception is bloomfilter's subpackage, which upstream
names `krakend` — the one package name that could not survive as-is; it
becomes internal/pkg/bloomfilter/register. Hand edits land separately in
the next commit so they are readable on their own.
Per `go mod vendor` semantics, dependencies' _test.go files are not
vendored. They test upstream code at a pinned version that we do not
modify, several cannot run at all from a module distribution (they need
TLS certs and compiled .so plugins upstream generates but never ships),
and one is a 100k-request stress test that exhausts the ephemeral port
range and fails every package running beside it. Fold integrity is proven
by the byte-diff above instead, which is the stronger check.
Preserved deliberately — each of these is behaviour, not branding:
- the `github.com/devopsfaith/krakend*` extra_config namespace strings
(35 of them). These are config-surface keys, not import paths;
renaming one silently stops that component finding its config. The
jose validator namespace backs `auth/validator` on 212 endpoints.
- core.KrakendVersion / KrakendUserAgent / the X-KRAKEND consts, whose
VALUES rebrand.go overwrites — that seam is unchanged.
- the KRAKEND_ koanf env prefix (a hardcoded upstream const).
- every vendored module's LICENSE (34 files, Apache-2.0/MIT).
The Makefile/CI -X paths move with the engine. An -X naming a symbol that
does not exist is silently ignored by the linker, so a stale path here
would have shipped an "undefined" version in the backend User-Agent and
X-Api-Version with a perfectly green build. Verified live:
`gateway version` reports 2.13.0, not undefined.
Verification (GOWORK=off CGO_ENABLED=0, both tag modes):
go build ./... OK go build -tags legacy ./... OK
go vet ./... clean go vet -tags legacy ./... clean
go test ./... 6/6 ok go test -tags legacy 5/5 ok
tests/ integration harness 47 fixtures pass
gateway check -c configs/{hanzo,lux}/gateway.json -> Syntax OK!
go list -m all | grep -iE 'krakend|lura' -> empty
go mod verify -> all modules verified
Co-authored-by: Hanzo Dev <[email protected]>
167 lines
5.5 KiB
Go
167 lines
5.5 KiB
Go
// SPDX-License-Identifier: Apache-2.0
|
|
|
|
package proxy
|
|
|
|
import (
|
|
"bytes"
|
|
"context"
|
|
"fmt"
|
|
"io"
|
|
"net/http"
|
|
"strconv"
|
|
"strings"
|
|
|
|
"github.com/hanzoai/gateway/v2/internal/lura/config"
|
|
"github.com/hanzoai/gateway/v2/internal/lura/encoding"
|
|
"github.com/hanzoai/gateway/v2/internal/lura/logging"
|
|
"github.com/hanzoai/gateway/v2/internal/lura/transport/http/client"
|
|
)
|
|
|
|
var httpProxy = CustomHTTPProxyFactory(client.NewHTTPClient)
|
|
|
|
// HTTPProxyFactory returns a BackendFactory. The Proxies it creates will use the received net/http.Client
|
|
func HTTPProxyFactory(client *http.Client) BackendFactory {
|
|
return CustomHTTPProxyFactory(func(_ context.Context) *http.Client { return client })
|
|
}
|
|
|
|
// CustomHTTPProxyFactory returns a BackendFactory. The Proxies it creates will use the received HTTPClientFactory
|
|
func CustomHTTPProxyFactory(cf client.HTTPClientFactory) BackendFactory {
|
|
return func(backend *config.Backend) Proxy {
|
|
return NewHTTPProxy(backend, cf, backend.Decoder)
|
|
}
|
|
}
|
|
|
|
// NewHTTPProxy creates a http proxy with the injected configuration, HTTPClientFactory and Decoder
|
|
func NewHTTPProxy(remote *config.Backend, cf client.HTTPClientFactory, decode encoding.Decoder) Proxy {
|
|
return NewHTTPProxyWithHTTPExecutor(remote, client.DefaultHTTPRequestExecutor(cf), decode)
|
|
}
|
|
|
|
// NewHTTPProxyWithHTTPExecutor creates a http proxy with the injected configuration, HTTPRequestExecutor and Decoder
|
|
func NewHTTPProxyWithHTTPExecutor(remote *config.Backend, re client.HTTPRequestExecutor, dec encoding.Decoder) Proxy {
|
|
if remote.Encoding == encoding.NOOP {
|
|
return NewHTTPProxyDetailed(remote, re, client.NoOpHTTPStatusHandler, NoOpHTTPResponseParser)
|
|
}
|
|
|
|
ef := NewEntityFormatter(remote)
|
|
rp := DefaultHTTPResponseParserFactory(HTTPResponseParserConfig{dec, ef})
|
|
return NewHTTPProxyDetailed(remote, re, client.GetHTTPStatusHandler(remote), rp)
|
|
}
|
|
|
|
const (
|
|
clientHTTPOptions string = "backend/http/client"
|
|
clientHTTPOptionRedirectPost string = "send_body_on_redirect"
|
|
)
|
|
|
|
// redirectPostReaderFactory checks if the clientHTTPOptionRedirectPost is enabled
|
|
// This will read the body and return a bytes.Buffer with the body content, so we
|
|
// delegate to http.NewRequest the population of request.GetBody so a redirect (307
|
|
// and 308) is executed while maintaining the method and the body
|
|
// This is necessary since the request comes from another http.Client and it's not
|
|
// a concrete type that can be copied but just a io.ReaderCloser (*http.body)
|
|
func redirectPostReaderFactory(cfg *config.Backend) func(r io.ReadCloser) io.Reader {
|
|
emptyFactory := func(r io.ReadCloser) io.Reader { return r }
|
|
if cfg == nil || cfg.ExtraConfig == nil {
|
|
return emptyFactory
|
|
}
|
|
v, ok := cfg.ExtraConfig[clientHTTPOptions].(map[string]interface{})
|
|
if !ok {
|
|
return emptyFactory
|
|
}
|
|
if opt, ok := v[clientHTTPOptionRedirectPost].(bool); !ok || !opt {
|
|
return emptyFactory
|
|
}
|
|
return func(r io.ReadCloser) io.Reader {
|
|
if r == http.NoBody || r == nil {
|
|
return r
|
|
}
|
|
buf := new(bytes.Buffer)
|
|
buf.ReadFrom(r)
|
|
r.Close()
|
|
return buf
|
|
}
|
|
}
|
|
|
|
// NewHTTPProxyDetailed creates a http proxy with the injected configuration, HTTPRequestExecutor,
|
|
// Decoder and HTTPResponseParser
|
|
func NewHTTPProxyDetailed(cfg *config.Backend, re client.HTTPRequestExecutor, ch client.HTTPStatusHandler, rp HTTPResponseParser) Proxy {
|
|
bodyFactory := redirectPostReaderFactory(cfg)
|
|
return func(ctx context.Context, request *Request) (*Response, error) {
|
|
requestToBackend, err := http.NewRequest(strings.ToTitle(request.Method), request.URL.String(), bodyFactory(request.Body))
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
requestToBackend.Header = make(map[string][]string, len(request.Headers))
|
|
for k, vs := range request.Headers {
|
|
tmp := make([]string, len(vs))
|
|
copy(tmp, vs)
|
|
requestToBackend.Header[k] = tmp
|
|
}
|
|
if request.Body != nil {
|
|
if v, ok := request.Headers["Content-Length"]; ok && len(v) == 1 && v[0] != "chunked" {
|
|
if size, err := strconv.Atoi(v[0]); err == nil {
|
|
requestToBackend.ContentLength = int64(size)
|
|
}
|
|
}
|
|
}
|
|
|
|
resp, err := re(ctx, requestToBackend)
|
|
if requestToBackend.Body != nil {
|
|
requestToBackend.Body.Close()
|
|
}
|
|
|
|
select {
|
|
case <-ctx.Done():
|
|
return nil, ctx.Err()
|
|
default:
|
|
}
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
resp, err = ch(ctx, resp)
|
|
if err != nil {
|
|
if t, ok := err.(responseError); ok {
|
|
return &Response{
|
|
Data: map[string]interface{}{
|
|
fmt.Sprintf("error_%s", t.Name()): t,
|
|
},
|
|
Metadata: Metadata{StatusCode: t.StatusCode()},
|
|
}, nil
|
|
}
|
|
return nil, err
|
|
}
|
|
|
|
return rp(ctx, resp)
|
|
}
|
|
}
|
|
|
|
// NewRequestBuilderMiddleware creates a proxy middleware that parses the request params received
|
|
// from the outer layer and generates the path to the backend endpoints
|
|
var NewRequestBuilderMiddleware = func(remote *config.Backend) Middleware {
|
|
return newRequestBuilderMiddleware(logging.NoOp, remote)
|
|
}
|
|
|
|
func NewRequestBuilderMiddlewareWithLogger(logger logging.Logger, remote *config.Backend) Middleware {
|
|
return newRequestBuilderMiddleware(logger, remote)
|
|
}
|
|
|
|
func newRequestBuilderMiddleware(l logging.Logger, remote *config.Backend) Middleware {
|
|
return func(next ...Proxy) Proxy {
|
|
if len(next) > 1 {
|
|
l.Fatal("too many proxies for this %s %s -> %s proxy middleware: newRequestBuilderMiddleware only accepts 1 proxy, got %d", remote.ParentEndpointMethod, remote.ParentEndpoint, remote.URLPattern, len(next))
|
|
return nil
|
|
}
|
|
return func(ctx context.Context, r *Request) (*Response, error) {
|
|
r.GeneratePath(remote.URLPattern)
|
|
r.Method = remote.Method
|
|
return next[0](ctx, r)
|
|
}
|
|
}
|
|
}
|
|
|
|
type responseError interface {
|
|
Error() string
|
|
Name() string
|
|
StatusCode() int
|
|
}
|