Comments (11)
It appears that the only effect that DisableHeaderNormalizing
has is to set app.server.DisableHeaderNamesNormalizing = app.config.DisableHeaderNormalizing
.
The fasthttp documentation for this setting is a bit more detailed on its effects:
// Header names are passed as-is without normalization
// if this option is set.
//
// Disabled header names' normalization may be useful only for proxying
// incoming requests to other servers expecting case-sensitive
// header names. See https://github.com/valyala/fasthttp/issues/57
// for details.
//
// By default request and response header names are normalized, i.e.
// The first letter and the first letters following dashes
// are uppercased, while all the other letters are lowercased.
// Examples:
//
// * HOST -> Host
// * content-type -> Content-Type
// * cONTENT-lenGTH -> Content-Length
DisableHeaderNamesNormalizing bool
from fiber.
Thanks for opening your first issue here! 🎉 Be sure to follow the issue template! If you need help or want to chat with us, join us on Discord https://gofiber.io/discord
from fiber.
@Max-Cheng Which version of v2 are you running?
from fiber.
The main issue is whether Enable DisableHeaderNormalizing should affect the behavior of the CORS middleware or not.
from fiber.
Ping @sixcolors
from fiber.
@Max-Cheng Which version of v2 are you running?
github.com/gofiber/fiber/v2 v2.52.4
from fiber.
In my situation, I'm using a global middleware to enforce the Origin header to be in uppercase and process the correct logical path.
package main
import (
"github.com/gofiber/fiber/v2"
"github.com/gofiber/fiber/v2/log"
"github.com/gofiber/fiber/v2/middleware/cors"
)
func main() {
app := fiber.New(fiber.Config{
DisableHeaderNormalizing: true,
})
app.Use(func(c *fiber.Ctx) error {
if c.Get("origin") != "" {
c.Request().Header.Set(fiber.HeaderOrigin, c.Get("origin"))
return c.Next()
}
return c.Next()
})
app.Use(cors.New(cors.Config{
AllowOrigins: "*",
AllowMethods: "*",
AllowHeaders: "*",
}))
app.Get("/", func(c *fiber.Ctx) error {
return c.SendString("Hello, World!")
})
log.Fatal(app.Listen(":3000"))
}
from fiber.
This should not be the case. CORS middleware calls originHeader := strings.ToLower(c.Get(fiber.HeaderOrigin))
, and c.Get
is case insensitive, https://docs.gofiber.io/api/ctx/#get.
I will test and get back to you.
from fiber.
@Max-Cheng I understand what you mean now. If you set app := fiber.New(fiber.Config{ DisableHeaderNormalizing: true, })
, it will impact headers in any fiber middleware.
Since the Cross-Origin Resource Sharing (CORS) and other middleware included with fiber use c.Get
for headers, the middleware behaviour will follow this pattern. According to https://datatracker.ietf.org/doc/html/rfc2616#section-4.2, "Each header field consists of a name followed by a colon (":") and the field value. Field names are case-insensitive." Therefore, the default fiber behaviour is correct. However, the DisableHeaderNormalizing
option allows users to disable this, which would cause the behaviour you noted.
However, the comment for DisableHeaderNormalizing
does not seem to adequately capture this:
// When set to true, disables header normalization.
// By default all header names are normalized: conteNT-tYPE -> Content-Type.
//
// Default: false
Because https://docs.gofiber.io/api/ctx/#get notes that: "The match is case-insensitive." and the DisableHeaderNormalizing
does not specify that it has other effects, I think we can address that in the documentation.
from fiber.
Yes. I don't think we should change the behaviour of the CORS middleware
from fiber.
Related Issues (20)
- 📒 [docs]: Fix broken link in FAQ section HOT 1
- How to use Middleware handler HOT 3
- 🤗 [Question]: Why v3 has no option to DisableStartupMessage HOT 2
- 🤗 [Question]: upstream reply with long time HOT 8
- 🤗 [Question]: i get v3 docs are not exactly v3 docs HOT 1
- 📝 [Proposal]: Re-introduce the DisableStartupMessage configuration option in Fiber v3 HOT 2
- 🤗 [Question]: How to disable logger middleware in some endpoints HOT 2
- 🐛 [Bug]: Prefork Not Working on Fiber v3 HOT 2
- 📝 [Proposal]: shutdown procedure
- 🐛 [Bug]: incorrect routing when adding a default layout HOT 4
- 🐛 [Bug]: Middleware Monitor "CPU Usage" is a "static value". HOT 2
- 🐛 [Bug]: Appending handlers screws up routing HOT 2
- 🤗 [Question]: get param from path for proxy pass request HOT 1
- 🐛 [Bug]: Abort Signal HOT 5
- 🤗 [Question]: Question on ETag Docs HOT 1
- 🤗 [Question]: Does Fiber handle each request in different goroutines? HOT 2
- 📝 [Feature] [v2]: Add a function to get the session expiry HOT 5
- 🐛 [Bug]: setting a Logger that access TLSConnectionState() will break when `app.Server().MaxConnsPerIP` is set to a value HOT 7
- 🤗 [Question]: Fiber http with Cloudflare ssl reverse leading to 525, SSL handshake failed HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from fiber.