Middleware can filtering HTTP requests that enter the application. For example, Goravel provides a CORS middleware, which can implement requests across domains.

Define Middlewares

You can create your own middleware in the app/http/middleware directory, the structure is as follows.

package middleware

import (

func Cors() http.Middleware {
	return func(ctx http.Context) {
		method := ctx.Request().Method()
		origin := ctx.Request().Header("Origin", "")
		if origin != "" {
			ctx.Response().Header("Access-Control-Allow-Origin", "*")
			ctx.Response().Header("Access-Control-Allow-Methods", "POST, GET, OPTIONS, PUT, DELETE, UPDATE")
			ctx.Response().Header("Access-Control-Allow-Headers", "*")
			ctx.Response().Header("Access-Control-Expose-Headers", "Content-Length, Access-Control-Allow-Origin, Access-Control-Allow-Headers, Authorization")
			ctx.Response().Header("Access-Control-Max-Age", "172800")
			ctx.Response().Header("Access-Control-Allow-Credentials", "true")

		if method == "OPTIONS" {


There are some middleware available in Goravel:

github.com/goravel/framework/http/middleware/Corsacross domain

Register Middlewares

Global Middlewares

If you want to apply middleware for every HTTP request of your application, you only need to register the middleware in the Middleware in the app/http/kernel.go file.

// app/http/kernel.go
package http

import (

type Kernel struct {

func (kernel *Kernel) Middleware() []http.Middleware {
	return []http.Middleware{

Assign Middlewares for Routing

You can register the middleware for some routing separately:

import "github.com/goravel/framework/http/middleware"

facades.Route.Middleware(middleware.Cors()).Get("users", userController.Show)
Last Updated:
Contributors: Bowens, Bowens