Function TrailingSlashMiddleware

internal/api/server.go:71–88

TrailingSlashMiddleware redirects requests with trailing slashes to their canonical form

(next http.Handler)

// TrailingSlashMiddleware redirects requests with trailing slashes to their canonical form
func TrailingSlashMiddleware(next http.Handler) http.Handler {
	return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
		// Only redirect if the path is not "/" and ends with a "/"
		if r.URL.Path != "/" && strings.HasSuffix(r.URL.Path, "/") {
			// path.Clean both removes the trailing slash and collapses any
			// leading "//" to "/", which prevents an open-redirect via a
			// protocol-relative path like "//evil.com/" (GHSA-v8vw-gw5j-w7m6).
			newURL := *r.URL
			newURL.Path = path.Clean(r.URL.Path)

			// Use 308 Permanent Redirect to preserve the request method
			http.Redirect(w, r, newURL.String(), http.StatusPermanentRedirect)
			return
		}

		next.ServeHTTP(w, r)
	})
}

// Server represents the HTTP server
type Server struct {