Standalone net/http middleware for panic recovery, CORS, request ID injection, and request logging. What's included: - Recover(): panic -> 500, captures debug.Stack, no logger required - CORS(origins): OPTIONS 204 preflight, origin allowlist, package-wide method/header constants - RequestID(generator): injects ID via logz.WithRequestID, sets X-Request-ID response header - RequestLogger(logger): logs method/path/status/latency/request_id; Error for 5xx, Info otherwise - Logger interface: Info, Error, With — duck-typed; satisfied by logz.Logger - StatusRecorder: exported http.ResponseWriter wrapper that captures written status code - Direct logz import for context helpers (documented exception to ADR-001) Tested-via: todo-api POC integration Reviewed-against: docs/adr/
23 lines
597 B
Go
23 lines
597 B
Go
package httpmw
|
|
|
|
import (
|
|
"net/http"
|
|
|
|
"code.nochebuena.dev/go/logz"
|
|
)
|
|
|
|
// RequestID injects a unique request ID into the context (via logz.WithRequestID)
|
|
// and the X-Request-ID response header.
|
|
// generator is typically uuid.NewString.
|
|
func RequestID(generator func() string) func(http.Handler) http.Handler {
|
|
return func(next http.Handler) http.Handler {
|
|
return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
|
|
id := generator()
|
|
ctx := logz.WithRequestID(r.Context(), id)
|
|
r = r.WithContext(ctx)
|
|
w.Header().Set("X-Request-ID", id)
|
|
next.ServeHTTP(w, r)
|
|
})
|
|
}
|
|
}
|