Add middleware with support proxy headers

echo.go

@@ -205,24 +205,28 @@ const (
 	// advertised as supported by the target resource. Returning an Allow header is mandatory
 	// for status 405 (method not found) and useful for the OPTIONS method in responses.
 	// See RFC 7231: https://datatracker.ietf.org/doc/html/rfc7231#section-7.4.1
-	HeaderAllow               = "Allow"
-	HeaderAuthorization       = "Authorization"
-	HeaderContentDisposition  = "Content-Disposition"
-	HeaderContentEncoding     = "Content-Encoding"
-	HeaderContentLength       = "Content-Length"
-	HeaderContentType         = "Content-Type"
-	HeaderCookie              = "Cookie"
-	HeaderSetCookie           = "Set-Cookie"
-	HeaderIfModifiedSince     = "If-Modified-Since"
-	HeaderLastModified        = "Last-Modified"
-	HeaderLocation            = "Location"
-	HeaderRetryAfter          = "Retry-After"
-	HeaderUpgrade             = "Upgrade"
-	HeaderVary                = "Vary"
-	HeaderWWWAuthenticate     = "WWW-Authenticate"
-	HeaderXForwardedFor       = "X-Forwarded-For"
-	HeaderXForwardedProto     = "X-Forwarded-Proto"
-	HeaderXForwardedProtocol  = "X-Forwarded-Protocol"
+	HeaderAllow              = "Allow"
+	HeaderAuthorization      = "Authorization"
+	HeaderContentDisposition = "Content-Disposition"
+	HeaderContentEncoding    = "Content-Encoding"
+	HeaderContentLength      = "Content-Length"
+	HeaderContentType        = "Content-Type"
+	HeaderCookie             = "Cookie"
+	HeaderForwarded          = "Forwarded"
+	HeaderSetCookie          = "Set-Cookie"
+	HeaderIfModifiedSince    = "If-Modified-Since"
+	HeaderLastModified       = "Last-Modified"
+	HeaderLocation           = "Location"
+	HeaderRetryAfter         = "Retry-After"
+	HeaderUpgrade            = "Upgrade"
+	HeaderVary               = "Vary"
+	HeaderWWWAuthenticate    = "WWW-Authenticate"
+	HeaderXForwardedFor      = "X-Forwarded-For"
+	HeaderXForwardedHost     = "X-Forwarded-Host"
+	HeaderXForwardedPrefix   = "X-Forwarded-Prefix"
+	HeaderXForwardedProto    = "X-Forwarded-Proto"
+	HeaderXForwardedProtocol = "X-Forwarded-Protocol"
+
 	HeaderXForwardedSsl       = "X-Forwarded-Ssl"
 	HeaderXUrlScheme          = "X-Url-Scheme"
 	HeaderXHTTPMethodOverride = "X-HTTP-Method-Override"

middleware/proxy_headers.go

@@ -0,0 +1,50 @@
+package middleware
+
+import (
+	"net/url"
+	"regexp"
+	"strings"
+
+	"github.com/labstack/echo/v4"
+)
+
+var (
+	protoRegex = regexp.MustCompile(`(?i)(?:proto=)(https|http)`)
+)
+
+func ProxyHeaders() echo.MiddlewareFunc {
+	return func(next echo.HandlerFunc) echo.HandlerFunc {
+		return func(c echo.Context) error {
+			if fwd := c.RealIP(); fwd != "" {
+				c.Request().RemoteAddr = fwd
+			}
+
+			if scheme := getScheme(c); scheme != "" {
+				c.Request().URL.Scheme = scheme
+			}
+
+			if c.Request().Header.Get(echo.HeaderXForwardedHost) != "" {
+				c.Request().Host = c.Request().Header.Get(echo.HeaderXForwardedHost)
+			}
+
+			if prefix := c.Request().Header.Get(echo.HeaderXForwardedPrefix); prefix != "" {
+				c.Request().RequestURI, _ = url.JoinPath(prefix, c.Request().RequestURI)
+				c.Request().URL.Path, _ = url.JoinPath(prefix, c.Request().URL.Path)
+			}
+			return next(c)
+		}
+	}
+}
+
+func getScheme(c echo.Context) string {
+	var scheme string
+
+	if proto := c.Request().Header.Get(echo.HeaderXForwardedProto); proto != "" {
+		scheme = strings.ToLower(proto)
+	} else if proto = c.Request().Header.Get(echo.HeaderForwarded); proto != "" {
+		if match := protoRegex.FindStringSubmatch(proto); len(match) > 1 {
+			scheme = strings.ToLower(match[1])
+		}
+	}
+	return scheme
+}