Files
gateway/internal/plugin/cobra/check.go
zeekayandHanzo Dev 53350699b6 deps(vendor): fold the krakend/lura module set into internal/
Every import in this module now resolves to github.com/hanzoai/gateway/v2.
The 34 github.com/krakend/* + github.com/luraproject/lura modules that
supplied the engine and its components are vendored under internal/ and
their 91 packages rewritten onto our own path.

Why fold rather than mirror into 34 hanzoai/* repos:

  - It removes the exposure outright. 34 rows leave 34 rows of go.sum to
    reason about; zero modules leave nothing. `go list -m all` and go.sum
    now contain no krakend/lura entry at all.
  - Cross-references cannot go wrong. 28 of the 34 import lura (97 files
    inside lura self-reference it). Mirroring means rewriting every one of
    those to our lura, and a single miss silently links a SECOND copy of
    lura into the binary. With one module that is structurally impossible.
  - It creates no duplicates. These are lura-coupled gateway glue with no
    consumer outside this binary; publishing 34 repos would be 34 new
    things to maintain for zero second caller. internal/ makes that
    guarantee mechanical — Go forbids importing it from outside this
    module, so none of it can become a competing public package. Verified
    no repo outside gateway imports any hanzoai/gateway/v2 subpackage.

Layout mirrors provenance so an upstream re-sync stays a diff:

  luraproject/lura/v2  -> internal/lura         (the engine, 20 pkgs)
  krakend/krakend-<x>  -> internal/plugin/<x>   (28 components)
  krakend/<x>          -> internal/pkg/<x>      (6 standalone libs)

This commit is PURELY MECHANICAL: 196 of the 197 vendored files are
byte-identical to their upstream original once the import rewrite is
applied. The single exception is bloomfilter's subpackage, which upstream
names `krakend` — the one package name that could not survive as-is; it
becomes internal/pkg/bloomfilter/register. Hand edits land separately in
the next commit so they are readable on their own.

Per `go mod vendor` semantics, dependencies' _test.go files are not
vendored. They test upstream code at a pinned version that we do not
modify, several cannot run at all from a module distribution (they need
TLS certs and compiled .so plugins upstream generates but never ships),
and one is a 100k-request stress test that exhausts the ephemeral port
range and fails every package running beside it. Fold integrity is proven
by the byte-diff above instead, which is the stronger check.

Preserved deliberately — each of these is behaviour, not branding:
  - the `github.com/devopsfaith/krakend*` extra_config namespace strings
    (35 of them). These are config-surface keys, not import paths;
    renaming one silently stops that component finding its config. The
    jose validator namespace backs `auth/validator` on 212 endpoints.
  - core.KrakendVersion / KrakendUserAgent / the X-KRAKEND consts, whose
    VALUES rebrand.go overwrites — that seam is unchanged.
  - the KRAKEND_ koanf env prefix (a hardcoded upstream const).
  - every vendored module's LICENSE (34 files, Apache-2.0/MIT).

The Makefile/CI -X paths move with the engine. An -X naming a symbol that
does not exist is silently ignored by the linker, so a stale path here
would have shipped an "undefined" version in the backend User-Agent and
X-Api-Version with a perfectly green build. Verified live:
`gateway version` reports 2.13.0, not undefined.

Verification (GOWORK=off CGO_ENABLED=0, both tag modes):
  go build ./...              OK      go build -tags legacy ./...   OK
  go vet ./...                clean   go vet -tags legacy ./...     clean
  go test ./...               6/6 ok  go test -tags legacy          5/5 ok
  tests/ integration harness  47 fixtures pass
  gateway check -c configs/{hanzo,lux}/gateway.json  -> Syntax OK!
  go list -m all | grep -iE 'krakend|lura'  -> empty
  go mod verify -> all modules verified

Co-authored-by: Hanzo Dev <[email protected]>
2026-07-25 14:57:19 -07:00

218 lines
5.5 KiB
Go

package cmd
import (
"context"
"encoding/json"
"errors"
"fmt"
"net/http"
"os"
"strings"
"time"
"github.com/hanzoai/gateway/v2/internal/plugin/cobra/dumper"
"github.com/santhosh-tekuri/jsonschema/v6"
"github.com/hanzoai/gateway/v2/internal/lura/config"
"github.com/hanzoai/gateway/v2/internal/lura/core"
"github.com/hanzoai/gateway/v2/internal/lura/logging"
"github.com/hanzoai/gateway/v2/internal/lura/proxy"
krakendgin "github.com/hanzoai/gateway/v2/internal/lura/router/gin"
"github.com/gin-gonic/gin"
"github.com/spf13/cobra"
)
var SchemaURL = "https://www.krakend.io/schema/v%s/krakend.json"
func errorMsg(content string) string {
if !IsTTY {
return content
}
return dumper.ColorRed + content + dumper.ColorReset
}
type LastSourcer interface {
LastSource() ([]byte, error)
}
func NewCheckCmd(rawSchema string) Command {
rawEmbedSchema = rawSchema
return CheckCommand
}
func checkFunc(cmd *cobra.Command, _ []string) { // skipcq: GO-R1005
if cfgFile == "" {
cmd.Println(errorMsg("Please, provide the path to the configuration file with --config or see all the options with --help"))
os.Exit(1) // skipcq: RVV-A0003
return
}
cmd.Printf("Parsing configuration file: %s\n", cfgFile)
v, err := parser.Parse(cfgFile)
if err != nil {
cmd.Println(errorMsg("ERROR parsing the configuration file:") + fmt.Sprintf("\t%s\n", err.Error()))
os.Exit(1) // skipcq: RVV-A0003
return
}
if customErrs := CustomValidationFunc(v); len(customErrs) > 0 {
eb := strings.Builder{}
for _, err := range customErrs {
eb.WriteString(fmt.Sprintf("\t%s\n", err.Error()))
}
cmd.Println(errorMsg("ERROR validating the configuration file:\n") + eb.String())
os.Exit(1) // skipcq: RVV-A0003
return
}
shouldLint := lintCurrentSchema || lintNoNetwork || (lintCustomSchemaPath != "")
if shouldLint {
var data []byte
var err error
if ls, ok := parser.(LastSourcer); ok {
data, err = ls.LastSource()
} else {
data, err = os.ReadFile(cfgFile)
}
if err != nil {
cmd.Println(errorMsg("ERROR loading the configuration content:") + fmt.Sprintf("\t%s\n", err.Error()))
os.Exit(1) // skipcq: RVV-A0003
return
}
var raw interface{}
if err := json.Unmarshal(data, &raw); err != nil {
cmd.Println(errorMsg("ERROR converting configuration content to JSON:") + fmt.Sprintf("\t%s\n", err.Error()))
os.Exit(1) // skipcq: RVV-A0003
return
}
var sch *jsonschema.Schema
var compilationErr error
if lintNoNetwork {
rawSchema, parseError := jsonschema.UnmarshalJSON(strings.NewReader(rawEmbedSchema))
if parseError != nil {
cmd.Println(errorMsg("ERROR parsing the embed schema:") + fmt.Sprintf("\t%s\n", parseError.Error()))
os.Exit(1) // skipcq: RVV-A0003
return
}
compiler := jsonschema.NewCompiler()
compiler.AddResource("schema.json", rawSchema)
sch, compilationErr = compiler.Compile("schema.json")
} else {
if lintCustomSchemaPath == "" {
lintCustomSchemaPath = fmt.Sprintf(SchemaURL, getVersionMinor(core.KrakendVersion))
}
httpLoader := SchemaHttpLoader(http.Client{
Timeout: 10 * time.Second,
})
loader := jsonschema.SchemeURLLoader{
"file": jsonschema.FileLoader{},
"http": &httpLoader,
"https": &httpLoader,
}
compiler := jsonschema.NewCompiler()
compiler.UseLoader(loader)
sch, compilationErr = compiler.Compile(lintCustomSchemaPath)
}
if compilationErr != nil {
cmd.Println(errorMsg("ERROR compiling the schema:") + fmt.Sprintf("\t%s\n", compilationErr.Error()))
os.Exit(1) // skipcq: RVV-A0003
return
}
if err = sch.Validate(raw); err != nil {
cmd.Println(errorMsg("ERROR linting the configuration file:") + fmt.Sprintf("\t%s\n", err.Error()))
os.Exit(1) // skipcq: RVV-A0003
return
}
}
if checkDebug > 0 {
cc := dumper.NewWithColors(cmd, checkDumpPrefix, checkDebug, IsTTY)
if err := cc.Dump(v); err != nil {
cmd.Println(errorMsg("ERROR checking the configuration file:") + fmt.Sprintf("\t%s\n", err.Error()))
os.Exit(1) // skipcq: RVV-A0003
return
}
}
if checkGinRoutes {
if err := RunRouterFunc(v); err != nil {
cmd.Println(errorMsg("ERROR testing the configuration file:") + fmt.Sprintf("\t%s\n", err.Error()))
os.Exit(1) // skipcq: RVV-A0003
return
}
}
if IsTTY {
cmd.Printf("%sSyntax OK!%s\n", dumper.ColorGreen, dumper.ColorReset)
return
}
cmd.Println("Syntax OK!")
}
var CustomValidationFunc = func(_ config.ServiceConfig) []error {
return nil
}
var RunRouterFunc = func(cfg config.ServiceConfig) (err error) {
defer func() {
if r := recover(); r != nil {
err = errors.New(r.(string))
}
}()
gin.SetMode(gin.ReleaseMode)
cfg.Debug = cfg.Debug || debug > 0
if port != 0 {
cfg.Port = port
}
ctx, cancel := context.WithTimeout(context.Background(), time.Second)
krakendgin.DefaultFactory(proxy.DefaultFactory(logging.NoOp), logging.NoOp).NewWithContext(ctx).Run(cfg)
cancel()
return nil
}
func getVersionMinor(ver string) string {
comps := strings.Split(ver, ".")
if len(comps) < 2 {
return ver
}
return fmt.Sprintf("%s.%s", comps[0], comps[1])
}
type SchemaHttpLoader http.Client
func (l *SchemaHttpLoader) Load(url string) (interface{}, error) {
client := (*http.Client)(l)
resp, err := client.Get(url)
if err != nil {
return nil, err
}
if resp.StatusCode != http.StatusOK {
_ = resp.Body.Close()
return nil, fmt.Errorf("%s returned status code %d", url, resp.StatusCode)
}
body, err := jsonschema.UnmarshalJSON(resp.Body)
if err != nil {
resp.Body.Close()
return nil, err
}
return body, resp.Body.Close()
}