middleware

Documentation

Index

• func CORS(cfg CORSConfig) bast.MiddlewareFunc
• func Logger(next bast.HandlerFunc) bast.HandlerFunc
• func Recover(next bast.HandlerFunc) bast.HandlerFunc
• func RequestID(next bast.HandlerFunc) bast.HandlerFunc
• type CORSConfig

Functions

func CORS

func CORS(cfg CORSConfig) bast.MiddlewareFunc

CORS returns a middleware that applies Cross-Origin Resource Sharing headers. Panics on AllowedOrigins ["*"] combined with AllowCredentials: the Fetch spec forbids the pair and every browser rejects it, so it is always a config bug.

func Logger

func Logger(next bast.HandlerFunc) bast.HandlerFunc

Logger logs method, path, status code, duration, and client IP for every request.

func Recover

func Recover(next bast.HandlerFunc) bast.HandlerFunc

Recover catches panics in downstream handlers, logs them, and returns a 500. Framework code must not panic — this catches user handler panics only.

func RequestID

func RequestID(next bast.HandlerFunc) bast.HandlerFunc

RequestID generates a unique request ID, stores it in the Ctx, and attaches it as X-Request-ID on the response.

Types

type CORSConfig

type CORSConfig struct {
	AllowedOrigins   []string // Use ["*"] to allow all origins.
	AllowedMethods   []string // Defaults to GET, POST, PUT, PATCH, DELETE, OPTIONS.
	AllowedHeaders   []string // Defaults to Content-Type, Authorization.
	ExposedHeaders   []string
	AllowCredentials bool
	MaxAge           int // Preflight cache duration in seconds.
}

CORSConfig configures the CORS middleware.