Files
gateway/internal/plugin/lambda/backend.go
zeekayandHanzo Dev 53350699b6 deps(vendor): fold the krakend/lura module set into internal/
Every import in this module now resolves to github.com/hanzoai/gateway/v2.
The 34 github.com/krakend/* + github.com/luraproject/lura modules that
supplied the engine and its components are vendored under internal/ and
their 91 packages rewritten onto our own path.

Why fold rather than mirror into 34 hanzoai/* repos:

  - It removes the exposure outright. 34 rows leave 34 rows of go.sum to
    reason about; zero modules leave nothing. `go list -m all` and go.sum
    now contain no krakend/lura entry at all.
  - Cross-references cannot go wrong. 28 of the 34 import lura (97 files
    inside lura self-reference it). Mirroring means rewriting every one of
    those to our lura, and a single miss silently links a SECOND copy of
    lura into the binary. With one module that is structurally impossible.
  - It creates no duplicates. These are lura-coupled gateway glue with no
    consumer outside this binary; publishing 34 repos would be 34 new
    things to maintain for zero second caller. internal/ makes that
    guarantee mechanical — Go forbids importing it from outside this
    module, so none of it can become a competing public package. Verified
    no repo outside gateway imports any hanzoai/gateway/v2 subpackage.

Layout mirrors provenance so an upstream re-sync stays a diff:

  luraproject/lura/v2  -> internal/lura         (the engine, 20 pkgs)
  krakend/krakend-<x>  -> internal/plugin/<x>   (28 components)
  krakend/<x>          -> internal/pkg/<x>      (6 standalone libs)

This commit is PURELY MECHANICAL: 196 of the 197 vendored files are
byte-identical to their upstream original once the import rewrite is
applied. The single exception is bloomfilter's subpackage, which upstream
names `krakend` — the one package name that could not survive as-is; it
becomes internal/pkg/bloomfilter/register. Hand edits land separately in
the next commit so they are readable on their own.

Per `go mod vendor` semantics, dependencies' _test.go files are not
vendored. They test upstream code at a pinned version that we do not
modify, several cannot run at all from a module distribution (they need
TLS certs and compiled .so plugins upstream generates but never ships),
and one is a 100k-request stress test that exhausts the ephemeral port
range and fails every package running beside it. Fold integrity is proven
by the byte-diff above instead, which is the stronger check.

Preserved deliberately — each of these is behaviour, not branding:
  - the `github.com/devopsfaith/krakend*` extra_config namespace strings
    (35 of them). These are config-surface keys, not import paths;
    renaming one silently stops that component finding its config. The
    jose validator namespace backs `auth/validator` on 212 endpoints.
  - core.KrakendVersion / KrakendUserAgent / the X-KRAKEND consts, whose
    VALUES rebrand.go overwrites — that seam is unchanged.
  - the KRAKEND_ koanf env prefix (a hardcoded upstream const).
  - every vendored module's LICENSE (34 files, Apache-2.0/MIT).

The Makefile/CI -X paths move with the engine. An -X naming a symbol that
does not exist is silently ignored by the linker, so a stale path here
would have shipped an "undefined" version in the backend User-Agent and
X-Api-Version with a perfectly green build. Verified live:
`gateway version` reports 2.13.0, not undefined.

Verification (GOWORK=off CGO_ENABLED=0, both tag modes):
  go build ./...              OK      go build -tags legacy ./...   OK
  go vet ./...                clean   go vet -tags legacy ./...     clean
  go test ./...               6/6 ok  go test -tags legacy          5/5 ok
  tests/ integration harness  47 fixtures pass
  gateway check -c configs/{hanzo,lux}/gateway.json  -> Syntax OK!
  go list -m all | grep -iE 'krakend|lura'  -> empty
  go mod verify -> all modules verified

Co-authored-by: Hanzo Dev <[email protected]>
2026-07-25 14:57:19 -07:00

187 lines
4.6 KiB
Go

package lambda
import (
"bytes"
"context"
"encoding/base64"
"encoding/json"
"errors"
"io"
"strings"
"github.com/aws/aws-sdk-go/aws"
"github.com/aws/aws-sdk-go/aws/request"
"github.com/aws/aws-sdk-go/aws/session"
"github.com/aws/aws-sdk-go/service/lambda"
"github.com/hanzoai/gateway/v2/internal/lura/config"
"github.com/hanzoai/gateway/v2/internal/lura/core"
"github.com/hanzoai/gateway/v2/internal/lura/logging"
"github.com/hanzoai/gateway/v2/internal/lura/proxy"
)
const (
Namespace = "github.com/devopsfaith/krakend-lambda"
)
var (
errBadStatusCode = errors.New("aws lambda: bad status code")
errNoConfig = errors.New("aws lambda: no extra config defined")
errBadConfig = errors.New("aws lambda: unable to parse the defined extra config")
clientContext = base64.StdEncoding.EncodeToString([]byte(`{"client":"KrakenD", "version":"` + core.KrakendVersion + `"}`))
)
type Invoker interface {
InvokeWithContext(aws.Context, *lambda.InvokeInput, ...request.Option) (*lambda.InvokeOutput, error)
}
func BackendFactory(logger logging.Logger, bf proxy.BackendFactory) proxy.BackendFactory {
return BackendFactoryWithInvoker(logger, bf, invokerFactory)
}
func invokerFactory(o *Options) Invoker {
if o.Config == nil {
return lambda.New(session.New())
}
return lambda.New(session.Must(session.NewSession(o.Config)))
}
func BackendFactoryWithInvoker(logger logging.Logger, bf proxy.BackendFactory, invokerFactory func(*Options) Invoker) proxy.BackendFactory {
return func(remote *config.Backend) proxy.Proxy {
logPrefix := "[BACKEND: " + remote.URLPattern + "][Lambda]"
ecfg, err := getOptions(remote)
if err != nil {
if err != errNoConfig {
logger.Error(logPrefix, err)
}
return bf(remote)
}
i := invokerFactory(ecfg)
ef := proxy.NewEntityFormatter(remote)
logger.Debug(logPrefix, "Component enabled")
return func(ctx context.Context, r *proxy.Request) (*proxy.Response, error) {
payload, err := ecfg.PayloadExtractor(r)
if err != nil {
return nil, err
}
input := &lambda.InvokeInput{
// ClientContext: aws.String(clientContext),
FunctionName: aws.String(ecfg.FunctionExtractor(r)),
InvocationType: aws.String("RequestResponse"),
LogType: aws.String("None"),
Payload: payload,
// Qualifier: aws.String("1"),
}
result, err := i.InvokeWithContext(ctx, input)
if err != nil {
return nil, err
}
if result.StatusCode == nil || *result.StatusCode != 200 {
return nil, errBadStatusCode
}
data := map[string]interface{}{}
if err := json.Unmarshal(result.Payload, &data); err != nil {
return nil, err
}
response := ef.Format(proxy.Response{
Metadata: proxy.Metadata{
StatusCode: int(*result.StatusCode),
Headers: map[string][]string{},
},
Data: data,
IsComplete: true,
})
if result.ExecutedVersion != nil {
response.Metadata.Headers["X-Amz-Executed-Version"] = []string{*result.ExecutedVersion}
}
return &response, nil
}
}
}
func getOptions(remote *config.Backend) (*Options, error) {
v, ok := remote.ExtraConfig[Namespace]
if !ok {
return nil, errNoConfig
}
ecfg, ok := v.(map[string]interface{})
if !ok {
return nil, errBadConfig
}
var funcExtractor functionExtractor
funcName, ok := ecfg["function_name"].(string)
if ok {
funcExtractor = func(_ *proxy.Request) string {
return funcName
}
} else {
funcParamName, ok := ecfg["function_param_name"].(string)
if !ok {
funcParamName = "function"
}
funcExtractor = func(r *proxy.Request) string {
return r.Params[funcParamName]
}
}
cfg := &Options{
FunctionExtractor: funcExtractor,
}
if remote.Method == "GET" {
cfg.PayloadExtractor = fromParams
} else {
cfg.PayloadExtractor = fromBody
}
region, ok := ecfg["region"].(string)
if !ok {
return cfg, nil
}
cfg.Config = &aws.Config{
Region: aws.String(region),
}
if endpoint, ok := ecfg["endpoint"].(string); ok {
cfg.Config.WithEndpoint(endpoint)
}
if retries, ok := ecfg["max_retries"].(int); ok {
cfg.Config.WithMaxRetries(retries)
}
return cfg, nil
}
type Options struct {
PayloadExtractor payloadExtractor
FunctionExtractor functionExtractor
Config *aws.Config
}
type functionExtractor func(*proxy.Request) string
type payloadExtractor func(*proxy.Request) ([]byte, error)
func fromParams(r *proxy.Request) ([]byte, error) {
buf := new(bytes.Buffer)
params := map[string]string{}
for k, v := range r.Params {
params[strings.ToLower(k)] = v
}
err := json.NewEncoder(buf).Encode(params)
return buf.Bytes(), err
}
func fromBody(r *proxy.Request) ([]byte, error) {
return io.ReadAll(r.Body)
}