Files
zeekayandHanzo Dev 53350699b6 deps(vendor): fold the krakend/lura module set into internal/
Every import in this module now resolves to github.com/hanzoai/gateway/v2.
The 34 github.com/krakend/* + github.com/luraproject/lura modules that
supplied the engine and its components are vendored under internal/ and
their 91 packages rewritten onto our own path.

Why fold rather than mirror into 34 hanzoai/* repos:

  - It removes the exposure outright. 34 rows leave 34 rows of go.sum to
    reason about; zero modules leave nothing. `go list -m all` and go.sum
    now contain no krakend/lura entry at all.
  - Cross-references cannot go wrong. 28 of the 34 import lura (97 files
    inside lura self-reference it). Mirroring means rewriting every one of
    those to our lura, and a single miss silently links a SECOND copy of
    lura into the binary. With one module that is structurally impossible.
  - It creates no duplicates. These are lura-coupled gateway glue with no
    consumer outside this binary; publishing 34 repos would be 34 new
    things to maintain for zero second caller. internal/ makes that
    guarantee mechanical — Go forbids importing it from outside this
    module, so none of it can become a competing public package. Verified
    no repo outside gateway imports any hanzoai/gateway/v2 subpackage.

Layout mirrors provenance so an upstream re-sync stays a diff:

  luraproject/lura/v2  -> internal/lura         (the engine, 20 pkgs)
  krakend/krakend-<x>  -> internal/plugin/<x>   (28 components)
  krakend/<x>          -> internal/pkg/<x>      (6 standalone libs)

This commit is PURELY MECHANICAL: 196 of the 197 vendored files are
byte-identical to their upstream original once the import rewrite is
applied. The single exception is bloomfilter's subpackage, which upstream
names `krakend` — the one package name that could not survive as-is; it
becomes internal/pkg/bloomfilter/register. Hand edits land separately in
the next commit so they are readable on their own.

Per `go mod vendor` semantics, dependencies' _test.go files are not
vendored. They test upstream code at a pinned version that we do not
modify, several cannot run at all from a module distribution (they need
TLS certs and compiled .so plugins upstream generates but never ships),
and one is a 100k-request stress test that exhausts the ephemeral port
range and fails every package running beside it. Fold integrity is proven
by the byte-diff above instead, which is the stronger check.

Preserved deliberately — each of these is behaviour, not branding:
  - the `github.com/devopsfaith/krakend*` extra_config namespace strings
    (35 of them). These are config-surface keys, not import paths;
    renaming one silently stops that component finding its config. The
    jose validator namespace backs `auth/validator` on 212 endpoints.
  - core.KrakendVersion / KrakendUserAgent / the X-KRAKEND consts, whose
    VALUES rebrand.go overwrites — that seam is unchanged.
  - the KRAKEND_ koanf env prefix (a hardcoded upstream const).
  - every vendored module's LICENSE (34 files, Apache-2.0/MIT).

The Makefile/CI -X paths move with the engine. An -X naming a symbol that
does not exist is silently ignored by the linker, so a stale path here
would have shipped an "undefined" version in the backend User-Agent and
X-Api-Version with a perfectly green build. Verified live:
`gateway version` reports 2.13.0, not undefined.

Verification (GOWORK=off CGO_ENABLED=0, both tag modes):
  go build ./...              OK      go build -tags legacy ./...   OK
  go vet ./...                clean   go vet -tags legacy ./...     clean
  go test ./...               6/6 ok  go test -tags legacy          5/5 ok
  tests/ integration harness  47 fixtures pass
  gateway check -c configs/{hanzo,lux}/gateway.json  -> Syntax OK!
  go list -m all | grep -iE 'krakend|lura'  -> empty
  go mod verify -> all modules verified

Co-authored-by: Hanzo Dev <[email protected]>
2026-07-25 14:57:19 -07:00

195 lines
5.9 KiB
Go

// SPDX-License-Identifier: Apache-2.0
package mux
import (
"context"
"fmt"
"net"
"net/http"
"net/textproto"
"strings"
"github.com/hanzoai/gateway/v2/internal/lura/config"
"github.com/hanzoai/gateway/v2/internal/lura/core"
"github.com/hanzoai/gateway/v2/internal/lura/proxy"
"github.com/hanzoai/gateway/v2/internal/lura/transport/http/server"
)
const requestParamsAsterisk string = "*"
// HandlerFactory creates a handler function that adapts the mux router with the injected proxy
type HandlerFactory func(*config.EndpointConfig, proxy.Proxy) http.HandlerFunc
// EndpointHandler is a HandlerFactory that adapts the mux router with the injected proxy
// and the default RequestBuilder
var EndpointHandler = CustomEndpointHandler(NewRequest)
// CustomEndpointHandler returns a HandlerFactory with the received RequestBuilder using the default ToHTTPError function
func CustomEndpointHandler(rb RequestBuilder) HandlerFactory {
return CustomEndpointHandlerWithHTTPError(rb, server.DefaultToHTTPError)
}
// CustomEndpointHandlerWithHTTPError returns a HandlerFactory with the received RequestBuilder
func CustomEndpointHandlerWithHTTPError(rb RequestBuilder, errF server.ToHTTPError) HandlerFactory {
return func(configuration *config.EndpointConfig, prxy proxy.Proxy) http.HandlerFunc {
cacheControlHeaderValue := fmt.Sprintf("public, max-age=%d", int(configuration.CacheTTL.Seconds()))
isCacheEnabled := configuration.CacheTTL.Seconds() != 0
render := getRender(configuration)
headersToSend := configuration.HeadersToPass
if len(headersToSend) == 0 {
headersToSend = server.HeadersToSend
}
method := strings.ToTitle(configuration.Method)
return func(w http.ResponseWriter, r *http.Request) {
w.Header().Set(core.KrakendHeaderName, core.KrakendHeaderValue)
if r.Method != method {
w.Header().Set(server.CompleteResponseHeaderName, server.HeaderIncompleteResponseValue)
http.Error(w, "", http.StatusMethodNotAllowed)
return
}
requestCtx, cancel := context.WithTimeout(r.Context(), configuration.Timeout)
response, err := prxy(requestCtx, rb(r, configuration.QueryString, headersToSend))
select {
case <-requestCtx.Done():
if err == nil {
err = server.ErrInternalError
}
default:
}
if response != nil && len(response.Data) > 0 {
if response.IsComplete {
w.Header().Set(server.CompleteResponseHeaderName, server.HeaderCompleteResponseValue)
if isCacheEnabled {
w.Header().Set("Cache-Control", cacheControlHeaderValue)
}
} else {
w.Header().Set(server.CompleteResponseHeaderName, server.HeaderIncompleteResponseValue)
}
for k, vs := range response.Metadata.Headers {
for _, v := range vs {
w.Header().Add(k, v)
}
}
} else {
w.Header().Set(server.CompleteResponseHeaderName, server.HeaderIncompleteResponseValue)
if err != nil {
if t, ok := err.(responseError); ok {
http.Error(w, err.Error(), t.StatusCode())
} else {
http.Error(w, err.Error(), errF(err))
}
cancel()
return
}
}
render(w, response)
cancel()
}
}
}
// RequestBuilder is a function that creates a proxy.Request from the received http request
type RequestBuilder func(r *http.Request, queryString, headersToSend []string) *proxy.Request
// ParamExtractor is a function that extracts query params from the requested uri
type ParamExtractor func(r *http.Request) map[string]string
// NoopParamExtractor is a No Op ParamExtractor (returns an empty map of params)
func NoopParamExtractor(_ *http.Request) map[string]string { return map[string]string{} }
// NewRequest is a RequestBuilder that creates a proxy request from the received http request without
// processing the uri params
var NewRequest = NewRequestBuilder(NoopParamExtractor)
// NewRequestBuilder gets a RequestBuilder with the received ParamExtractor as a query param
// extraction mechanism
func NewRequestBuilder(paramExtractor ParamExtractor) RequestBuilder {
return func(r *http.Request, queryString, headersToSend []string) *proxy.Request {
params := paramExtractor(r)
headers := make(map[string][]string, 3+len(headersToSend))
for _, k := range headersToSend {
if k == requestParamsAsterisk {
headers = r.Header
break
}
if h, ok := r.Header[textproto.CanonicalMIMEHeaderKey(k)]; ok {
headers[k] = h
}
}
headers["X-Forwarded-For"] = []string{clientIP(r)}
headers["X-Forwarded-Host"] = []string{r.Host}
// if User-Agent is not forwarded using headersToSend, we set
// the KrakenD router User Agent value
if _, ok := headers["User-Agent"]; !ok {
headers["User-Agent"] = server.UserAgentHeaderValue
} else {
headers["X-Forwarded-Via"] = server.UserAgentHeaderValue
}
query := make(map[string][]string, len(queryString))
queryValues := r.URL.Query()
for i := range queryString {
if queryString[i] == requestParamsAsterisk {
query = queryValues
break
}
if v, ok := queryValues[queryString[i]]; ok && len(v) > 0 {
query[queryString[i]] = v
}
}
return &proxy.Request{
Path: r.URL.Path,
Method: r.Method,
Query: query,
Body: r.Body,
Params: params,
Headers: headers,
}
}
}
type responseError interface {
error
StatusCode() int
}
// clientIP implements a best effort algorithm to return the real client IP, it parses
// X-Real-IP and X-Forwarded-For in order to work properly with reverse-proxies such us: nginx or haproxy.
// Use X-Forwarded-For before X-Real-Ip as nginx uses X-Real-Ip with the proxy's IP.
func clientIP(r *http.Request) string {
clientIP := r.Header.Get("X-Forwarded-For")
clientIP = strings.TrimSpace(strings.Split(clientIP, ",")[0])
if clientIP == "" {
clientIP = strings.TrimSpace(r.Header.Get("X-Real-Ip"))
}
if clientIP != "" {
return clientIP
}
if addr := r.Header.Get("X-Appengine-Remote-Addr"); addr != "" {
return addr
}
if ip, _, err := net.SplitHostPort(strings.TrimSpace(r.RemoteAddr)); err == nil {
return ip
}
return ""
}