go-safeweb

go-safeweb copied to clipboard

Support Interceptor Wrapping

1

For various reasons (e.g. experiments) it might be useful to wrap interceptors. The problem is that once an interceptor gets wrapped, it will not be matched to its configurations anymore....

empijei

Currently we only support one key for this plugin, which makes key rotation impossible without disrupting the service. We should instead accept a set of keys and emit tokens with...

empijei

We should provide a way to serve all HTML files in a directory as templates. This will allow interceptors to inject data and functions into templates without requiring the user...

empijei

Can we integrate with gorilla/mux for path parameters support?

2

kele

Currently we implement the draft spec, but eventually we'll need to switch to the structured headers format. https://w3c.github.io/reporting/#header

empijei

Provide an ergonomic way to do per-handler interceptor configuration

5

empijei

Internally at Google we've adopted "restricted" APIs as the canonical way over alternatives ("banned", "unsafe", "unchecked"). A `grep` over "ban" in the repo should help with doing this. We also...

kele

bancheck: Does it work for methods of concrete types?

5

Example: ``` package tools type Fooer struct {} func (*Fooer) Foo() {} ``` 1. Would adding `tools.(*Fooer).Foo` to the banned API list ban calls like `f.Foo()`? 2. Do we want...

kele

https://blog.golang.org/examples

kele

We should provide some pre-baked configurations: 1) Basic, simple one: this is more of an example than a ready to use thing. The idea would be to showcase how a...

empijei