mirror of
https://github.com/hanzoai/gateway.git
synced 2026-11-02 23:52:23 +00:00
Every import in this module now resolves to github.com/hanzoai/gateway/v2.
The 34 github.com/krakend/* + github.com/luraproject/lura modules that
supplied the engine and its components are vendored under internal/ and
their 91 packages rewritten onto our own path.
Why fold rather than mirror into 34 hanzoai/* repos:
- It removes the exposure outright. 34 rows leave 34 rows of go.sum to
reason about; zero modules leave nothing. `go list -m all` and go.sum
now contain no krakend/lura entry at all.
- Cross-references cannot go wrong. 28 of the 34 import lura (97 files
inside lura self-reference it). Mirroring means rewriting every one of
those to our lura, and a single miss silently links a SECOND copy of
lura into the binary. With one module that is structurally impossible.
- It creates no duplicates. These are lura-coupled gateway glue with no
consumer outside this binary; publishing 34 repos would be 34 new
things to maintain for zero second caller. internal/ makes that
guarantee mechanical — Go forbids importing it from outside this
module, so none of it can become a competing public package. Verified
no repo outside gateway imports any hanzoai/gateway/v2 subpackage.
Layout mirrors provenance so an upstream re-sync stays a diff:
luraproject/lura/v2 -> internal/lura (the engine, 20 pkgs)
krakend/krakend-<x> -> internal/plugin/<x> (28 components)
krakend/<x> -> internal/pkg/<x> (6 standalone libs)
This commit is PURELY MECHANICAL: 196 of the 197 vendored files are
byte-identical to their upstream original once the import rewrite is
applied. The single exception is bloomfilter's subpackage, which upstream
names `krakend` — the one package name that could not survive as-is; it
becomes internal/pkg/bloomfilter/register. Hand edits land separately in
the next commit so they are readable on their own.
Per `go mod vendor` semantics, dependencies' _test.go files are not
vendored. They test upstream code at a pinned version that we do not
modify, several cannot run at all from a module distribution (they need
TLS certs and compiled .so plugins upstream generates but never ships),
and one is a 100k-request stress test that exhausts the ephemeral port
range and fails every package running beside it. Fold integrity is proven
by the byte-diff above instead, which is the stronger check.
Preserved deliberately — each of these is behaviour, not branding:
- the `github.com/devopsfaith/krakend*` extra_config namespace strings
(35 of them). These are config-surface keys, not import paths;
renaming one silently stops that component finding its config. The
jose validator namespace backs `auth/validator` on 212 endpoints.
- core.KrakendVersion / KrakendUserAgent / the X-KRAKEND consts, whose
VALUES rebrand.go overwrites — that seam is unchanged.
- the KRAKEND_ koanf env prefix (a hardcoded upstream const).
- every vendored module's LICENSE (34 files, Apache-2.0/MIT).
The Makefile/CI -X paths move with the engine. An -X naming a symbol that
does not exist is silently ignored by the linker, so a stale path here
would have shipped an "undefined" version in the backend User-Agent and
X-Api-Version with a perfectly green build. Verified live:
`gateway version` reports 2.13.0, not undefined.
Verification (GOWORK=off CGO_ENABLED=0, both tag modes):
go build ./... OK go build -tags legacy ./... OK
go vet ./... clean go vet -tags legacy ./... clean
go test ./... 6/6 ok go test -tags legacy 5/5 ok
tests/ integration harness 47 fixtures pass
gateway check -c configs/{hanzo,lux}/gateway.json -> Syntax OK!
go list -m all | grep -iE 'krakend|lura' -> empty
go mod verify -> all modules verified
Co-authored-by: Hanzo Dev <[email protected]>
202 lines
5.4 KiB
Go
202 lines
5.4 KiB
Go
// SPDX-License-Identifier: Apache-2.0
|
|
|
|
package gin
|
|
|
|
import (
|
|
"context"
|
|
"fmt"
|
|
"net/textproto"
|
|
|
|
"github.com/gin-gonic/gin"
|
|
|
|
"github.com/hanzoai/gateway/v2/internal/lura/config"
|
|
"github.com/hanzoai/gateway/v2/internal/lura/core"
|
|
"github.com/hanzoai/gateway/v2/internal/lura/logging"
|
|
"github.com/hanzoai/gateway/v2/internal/lura/proxy"
|
|
"github.com/hanzoai/gateway/v2/internal/lura/transport/http/server"
|
|
)
|
|
|
|
const requestParamsAsterisk string = "*"
|
|
|
|
// HandlerFactory creates a handler function that adapts the gin router with the injected proxy
|
|
type HandlerFactory func(*config.EndpointConfig, proxy.Proxy) gin.HandlerFunc
|
|
|
|
// ErrorResponseWriter writes the string representation of an error into the response body
|
|
// and sets a Content-Type header for errors that implement the encodedResponseError interface.
|
|
var ErrorResponseWriter = func(c *gin.Context, err error) {
|
|
if te, ok := err.(encodedResponseError); ok && te.Encoding() != "" {
|
|
c.Header("Content-Type", te.Encoding())
|
|
}
|
|
c.Writer.WriteString(err.Error())
|
|
}
|
|
|
|
// EndpointHandler implements the HandlerFactory interface using the default ToHTTPError function
|
|
var EndpointHandler = CustomErrorEndpointHandler(logging.NoOp, server.DefaultToHTTPError)
|
|
|
|
// CustomErrorEndpointHandler returns a HandlerFactory using the injected ToHTTPError function and logger
|
|
func CustomErrorEndpointHandler(logger logging.Logger, errF server.ToHTTPError) HandlerFactory { // skipcq: GO-R1005
|
|
return func(configuration *config.EndpointConfig, prxy proxy.Proxy) gin.HandlerFunc {
|
|
cacheControlHeaderValue := fmt.Sprintf("public, max-age=%d", int(configuration.CacheTTL.Seconds()))
|
|
isCacheEnabled := configuration.CacheTTL.Seconds() != 0
|
|
requestGenerator := NewRequest(configuration.HeadersToPass)
|
|
render := getRender(configuration)
|
|
logPrefix := "[ENDPOINT: " + configuration.Endpoint + "]"
|
|
|
|
return func(c *gin.Context) {
|
|
requestCtx, cancel := context.WithTimeout(c, configuration.Timeout)
|
|
|
|
c.Header(core.KrakendHeaderName, core.KrakendHeaderValue)
|
|
|
|
response, err := prxy(requestCtx, requestGenerator(c, configuration.QueryString))
|
|
|
|
select {
|
|
case <-requestCtx.Done():
|
|
if err == nil {
|
|
err = server.ErrInternalError
|
|
}
|
|
default:
|
|
}
|
|
|
|
complete := server.HeaderIncompleteResponseValue
|
|
|
|
if response != nil && len(response.Data) > 0 {
|
|
if response.IsComplete {
|
|
complete = server.HeaderCompleteResponseValue
|
|
if isCacheEnabled {
|
|
c.Header("Cache-Control", cacheControlHeaderValue)
|
|
}
|
|
}
|
|
|
|
for k, vs := range response.Metadata.Headers {
|
|
for _, v := range vs {
|
|
c.Writer.Header().Add(k, v)
|
|
}
|
|
}
|
|
}
|
|
|
|
c.Header(server.CompleteResponseHeaderName, complete)
|
|
|
|
for _, err := range c.Errors {
|
|
logger.Error(logPrefix, err.Error())
|
|
}
|
|
|
|
if err != nil {
|
|
if t, ok := err.(multiError); ok {
|
|
for i, errN := range t.Errors() {
|
|
c.Error(errN)
|
|
logger.Error(fmt.Sprintf("%s Error #%d: %s", logPrefix, i, errN.Error()))
|
|
}
|
|
} else {
|
|
c.Error(err)
|
|
logger.Error(logPrefix, err.Error())
|
|
}
|
|
|
|
if response == nil {
|
|
if t, ok := err.(headerResponseError); ok {
|
|
for k, vs := range t.Headers() {
|
|
for _, v := range vs {
|
|
c.Writer.Header().Add(k, v)
|
|
}
|
|
}
|
|
}
|
|
if t, ok := err.(responseError); ok {
|
|
c.Status(t.StatusCode())
|
|
} else {
|
|
c.Status(errF(err))
|
|
}
|
|
|
|
if returnErrorMsg {
|
|
ErrorResponseWriter(c, err)
|
|
}
|
|
cancel()
|
|
return
|
|
}
|
|
}
|
|
|
|
render(c, response)
|
|
cancel()
|
|
}
|
|
}
|
|
}
|
|
|
|
// NewRequest gets a request from the current gin context and the received query string
|
|
func NewRequest(headersToSend []string) func(*gin.Context, []string) *proxy.Request {
|
|
if len(headersToSend) == 0 {
|
|
headersToSend = server.HeadersToSend
|
|
}
|
|
|
|
return func(c *gin.Context, queryString []string) *proxy.Request {
|
|
params := make(map[string]string, len(c.Params))
|
|
for _, param := range c.Params {
|
|
params[textproto.CanonicalMIMEHeaderKey(param.Key[:1])+param.Key[1:]] = param.Value
|
|
}
|
|
|
|
headers := make(map[string][]string, 3+len(headersToSend))
|
|
|
|
for _, k := range headersToSend {
|
|
if k == requestParamsAsterisk {
|
|
headers = c.Request.Header
|
|
|
|
break
|
|
}
|
|
|
|
if h, ok := c.Request.Header[textproto.CanonicalMIMEHeaderKey(k)]; ok {
|
|
headers[k] = h
|
|
}
|
|
}
|
|
|
|
headers["X-Forwarded-For"] = []string{c.ClientIP()}
|
|
headers["X-Forwarded-Host"] = []string{c.Request.Host}
|
|
// if User-Agent is not forwarded using headersToSend, we set
|
|
// the KrakenD router User Agent value
|
|
if _, ok := headers["User-Agent"]; !ok {
|
|
headers["User-Agent"] = server.UserAgentHeaderValue
|
|
} else {
|
|
headers["X-Forwarded-Via"] = server.UserAgentHeaderValue
|
|
}
|
|
|
|
query := make(map[string][]string, len(queryString))
|
|
queryValues := c.Request.URL.Query()
|
|
for i := range queryString {
|
|
if queryString[i] == requestParamsAsterisk {
|
|
query = c.Request.URL.Query()
|
|
|
|
break
|
|
}
|
|
|
|
if v, ok := queryValues[queryString[i]]; ok && len(v) > 0 {
|
|
query[queryString[i]] = v
|
|
}
|
|
}
|
|
|
|
return &proxy.Request{
|
|
Path: c.Request.URL.Path,
|
|
Method: c.Request.Method,
|
|
Query: query,
|
|
Body: c.Request.Body,
|
|
Params: params,
|
|
Headers: headers,
|
|
}
|
|
}
|
|
}
|
|
|
|
type encodedResponseError interface {
|
|
responseError
|
|
Encoding() string
|
|
}
|
|
|
|
type responseError interface {
|
|
error
|
|
StatusCode() int
|
|
}
|
|
|
|
type headerResponseError interface {
|
|
responseError
|
|
Headers() map[string][]string
|
|
}
|
|
|
|
type multiError interface {
|
|
error
|
|
Errors() []error
|
|
}
|