Function startup_gate_middleware

nodedb/src/control/server/http/server.rs:178–210

Axum middleware that gates non-health routes on [`StartupPhase::GatewayEnable`]. All `/health*` paths (liveness, readiness, drain) are always let through so k8s probes can observe startup progress. All other routes receive a `503 Service Unavailable` until the node reaches `GatewayEnable`.

(
    State(app_state): State<AppState>,
    req: axum::http::Request<axum::body::Body>,
    next: Next,
)

/// k8s probes can observe startup progress. All other routes receive a
/// `503 Service Unavailable` until the node reaches `GatewayEnable`.
async fn startup_gate_middleware(
    State(app_state): State<AppState>,
    req: axum::http::Request<axum::body::Body>,
    next: Next,
) -> Response {
    use axum::http::StatusCode;
    use axum::response::IntoResponse;

    let path = req.uri().path();
    // Health-probe paths bypass the gate — these must be reachable during startup.
    let is_health_path = path == "/healthz" || path.starts_with("/health/");

    if !is_health_path {
        let gate = &app_state.shared.startup;
        let snap = gate.current_phase();
        if let Some(err) = gate.is_failed() {
            let body = serde_json::json!({
                "status": "failed",
                "error": err.to_string(),
            });
            return (StatusCode::SERVICE_UNAVAILABLE, axum::Json(body)).into_response();
        }
        if snap < crate::control::startup::StartupPhase::GatewayEnable {
            let body = serde_json::json!({
                "status": "starting",
                "phase": snap.name(),
            });
            return (StatusCode::SERVICE_UNAVAILABLE, axum::Json(body)).into_response();
        }
    }

    next.run(req).await
}

/// Start the HTTP API server from an already-bound [`tokio::net::TcpListener`].
///