middleware

type CORS struct {
	// AllowedOrigin Specifies which origin should be allowed, if you want to allow all use *
	AllowedOrigin string

	// AllowedCredentials indicates whether the response to the request can be exposed when the credentials flag is true.
	// The only valid value for this header is true (case-sensitive). If you don't need credentials,
	// omit this header entirely (rather than setting its value to false).
	AllowedCredentials bool

	// AllowedHeaders is used in response to a pre-flight request which includes the Access-Control-Request-Headers
	// to indicate which HTTP headers can be used during the actual request.
	AllowedHeaders []string

	// AllowedMethods is a list of methods the client is allowed to use with
	// cross-domain requests. Default value is simple methods (HEAD, GET and POST).
	AllowedMethods []string

	// ExposedHeaders indicates which headers can be exposed as part of the response by listing their names.
	ExposedHeaders []string

	// MaxAge indicates how long the results of a pre-flight request (that is the information contained in the
	// Access-Control-Allow-Methods and Access-Control-Allow-Headers headers) can be cached.
	// https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Max-Age
	MaxAge int
}

type Chain struct {
	// contains filtered or unexported fields
}

type DefaultHeaders struct {
	// CacheControl general-header field is used to specify directives for caching mechanisms in both requests
	// and responses.
	CacheControl string
	// ContentLanguage entity header is used to describe the language(s) intended for the audience, so that it allows a user to
	// differentiate according to the users' own preferred language. Default is en-US
	ContentLanguage []string
	// ContentType entity header is used to indicate the media type of the resource.
	ContentType string
	// Expires header contains the date/time after which the response is considered stale.
	Expires string
	// LastModified response HTTP header contains the date and time at which the origin server believes the resource was last
	// modified. It is used as a validator to determine if a resource received or stored is the same.
	// Format: <day-name>, <day> <month> <year> <hour>:<minute>:<second> GMT
	LastModified string
}

type LogObject struct {
	// Current timestamp of request
	Timestamp string `json:"timestamp"`
	// RemoteAddress contains the IP of the server/ the IP address of the proxy
	RemoteAddress string `json:"remote_address"`
	// TrueIP contains the IP of the original requester
	TrueIP string `json:"true_ip"`
	// Method contains the http method requested
	Method string `json:"method"`
	// Path contains the http path requested
	Path string `json:"path"`
	// Host contains the IP of host
	Host string `json:"host"`
	// Protocol contains http version
	Protocol string `json:"protocol"`
	// UserAgent
	UserAgent string `json:"user_agent"`
}

type Middlewares func(http.HandlerFunc) http.HandlerFunc

type SecureHeaders struct {
	// Sets the X-XSS-Protection Header. Valid values are https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-XSS-Protection
	// Default is 1; mode=block
	XSSProtection string
	// ContentTypeOptions provides protection against overriding Content-Type
	// header by setting the `X-Content-Type-Options` header.
	// Optional. Default value "nosniff".
	ContentTypeOptions string
	// Sets X-Frame-Options header that can be used to indicate whether or not a browser should be allowed to render a
	// page in a <frame>, <iframe>, <embed> or <object>. Valid values are deny, sameorigin and allow-from uri. Default
	// is deny
	FrameOptions string

	// ReferrerPolicy sets the `Referrer-Policy` header providing security against
	// leaking potentially sensitive request paths to third parties.
	// Optional. Default value "".  https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
	ReferrerPolicy string
}