Middleware

A middleware is an abstraction around a service that provides a means of manipulating the Request sent to service, and/or the Response returned by the service. In some cases, such as Authentication, middleware may even prevent the service from being called.

At its most basic, middleware is a function that takes one service and returns another. The middleware function can take any additional parameters it needs to perform its task. Let's look at a simple example.

For this, we'll need a dependency on the http4s dsl.

libraryDependencies ++= Seq(
  "org.http4s" %% "http4s-dsl" % http4sVersion
)

and some imports.

import cats.data.Kleisli
import cats.effect._
import cats.syntax.all._
import org.http4s._
import org.http4s.dsl.io._
import org.http4s.implicits._

If you're in a REPL, we also need a runtime:

import cats.effect.unsafe.IORuntime
implicit val runtime: IORuntime = cats.effect.unsafe.IORuntime.global

Then, we can create a middleware that adds a header to successful responses from the underlying HttpRoutes like this.

def myMiddle(service: HttpRoutes[IO], header: Header.ToRaw): HttpRoutes[IO] = Kleisli { (req: Request[IO]) =>
  service(req).map {
    case Status.Successful(resp) =>
      resp.putHeaders(header)
    case resp => resp
  }
}

All we do here is pass the request to the service, which returns an F[Response]. So, we use map to get the request out of the task, add the header if the response is a success, and then pass the response on. We could just as easily modify the request before we passed it to the service.

Now, let's create a simple service. As mentioned between service and dsl, because HttpRoutes is implemented as a Kleisli, which is just a function at heart, we can test a service without a server. Due to an HttpRoutes[F] returns a F[Response[F]], we need to call unsafeRunSync on the result of the function to extract the Response[F]. Note that basically, you shouldn't use unsafeRunSync in your application. Here we use it for demo reasons only.

val service = HttpRoutes.of[IO] {
  case GET -> Root / "bad" =>
    BadRequest()
  case _ => Ok()
}

val goodRequest = Request[IO](Method.GET, uri"/")
val badRequest = Request[IO](Method.GET, uri"/bad")

service.orNotFound(goodRequest).unsafeRunSync()
// res0: Response[[A]IO[A]] = (
//    = Status(code = 200),
//    = HttpVersion(major = 1, minor = 1),
//    = Headers(Content-Length: 0),
//    = Stream(..),
//    = org.typelevel.vault.Vault@1c426ea0
// )
service.orNotFound(badRequest).unsafeRunSync()
// res1: Response[[A]IO[A]] = (
//    = Status(code = 400),
//    = HttpVersion(major = 1, minor = 1),
//    = Headers(Content-Length: 0),
//    = Stream(..),
//    = org.typelevel.vault.Vault@5959e90a
// )

Now, we'll apply the service to our middleware function to create a new service, and try it out.

val modifiedService = myMiddle(service, "SomeKey" -> "SomeValue");

modifiedService.orNotFound(goodRequest).unsafeRunSync()
// res2: Response[[A]IO[A]] = (
//    = Status(code = 200),
//    = HttpVersion(major = 1, minor = 1),
//    = Headers(Content-Length: 0, SomeKey: SomeValue),
//    = Stream(..),
//    = org.typelevel.vault.Vault@5e29e11e
// )
modifiedService.orNotFound(badRequest).unsafeRunSync()
// res3: Response[[A]IO[A]] = (
//    = Status(code = 400),
//    = HttpVersion(major = 1, minor = 1),
//    = Headers(Content-Length: 0),
//    = Stream(..),
//    = org.typelevel.vault.Vault@131a5040
// )

Note that the successful response has your header added to it.

If you intend to use you middleware in multiple places, you may want to implement it as an object and use the apply method.

object MyMiddle {
  def addHeader(resp: Response[IO], header: Header.ToRaw) =
    resp match {
      case Status.Successful(resp) => resp.putHeaders(header)
      case resp => resp
    }

  def apply(service: HttpRoutes[IO], header: Header.ToRaw) =
    service.map(addHeader(_, header))
}

val newService = MyMiddle(service, "SomeKey" -> "SomeValue")

newService.orNotFound(goodRequest).unsafeRunSync()
// res4: Response[[A]IO[A]] = (
//    = Status(code = 200),
//    = HttpVersion(major = 1, minor = 1),
//    = Headers(Content-Length: 0, SomeKey: SomeValue),
//    = Stream(..),
//    = org.typelevel.vault.Vault@229783a0
// )
newService.orNotFound(badRequest).unsafeRunSync()
// res5: Response[[A]IO[A]] = (
//    = Status(code = 400),
//    = HttpVersion(major = 1, minor = 1),
//    = Headers(Content-Length: 0),
//    = Stream(..),
//    = org.typelevel.vault.Vault@895ea2e
// )

Let's consider Authentication middleware as an example. Authentication middleware is a function that takes AuthedRoutes[F] (that translates to AuthedRequest[F, T] => F[Option[Response[F]]]) and returns HttpRoutes[F] (that translates to Request[F] => F[Option[Response[F]]]). There is a type defined for this in the http4s.server package:

type AuthMiddleware[F[_], T] = Middleware[OptionT[F, *], AuthedRequest[F, T], Response[F], Request[F], Response[F]]

See the Authentication documentation for more details.

Composing Services with Middleware

Since middleware returns a Kleisli, you can compose it with another middleware. Additionally, you can compose services before applying the middleware function, and/or compose services with the service obtained by applying some middleware function. For example:

val apiService = HttpRoutes.of[IO] {
  case GET -> Root / "api" =>
    Ok()
}

val anotherService = HttpRoutes.of[IO] {
  case GET -> Root / "another" =>
    Ok()
}

val aggregateService = apiService <+> MyMiddle(service <+> anotherService, "SomeKey" -> "SomeValue")

val apiRequest = Request[IO](Method.GET, uri"/api")

aggregateService.orNotFound(goodRequest).unsafeRunSync()
// res6: Response[[A]IO[A]] = (
//    = Status(code = 200),
//    = HttpVersion(major = 1, minor = 1),
//    = Headers(Content-Length: 0, SomeKey: SomeValue),
//    = Stream(..),
//    = org.typelevel.vault.Vault@347efc52
// )
aggregateService.orNotFound(apiRequest).unsafeRunSync()
// res7: Response[[A]IO[A]] = (
//    = Status(code = 200),
//    = HttpVersion(major = 1, minor = 1),
//    = Headers(Content-Length: 0),
//    = Stream(..),
//    = org.typelevel.vault.Vault@4d02b9c5
// )

Note that goodRequest ran through the MyMiddle middleware and the Result had our header added to it. But, apiRequest did not go through the middleware and did not have the header added to it's Result.

Included middleware

See Server Middleware.