Goravel routing module can operated by facades.Route.

Default Routing File

All routing files are defined in the /routes directory. The framework defaults to a sample route /routes/web.go, in which the func Web() method is registered in the app/providers/route_service_provider.go file to achieve routing binding.

You can add routing files under the routes directory to perform more fine-grained management, then register them in the app/providers/route_service_provider.go file.

Start HTTP Server

Start the HTTP server in main.go in the root directory. facades.Route.Run() will automatically fetch the configuration.

package main

import (


func main() {
  //This bootstraps the framework and gets it ready for use.

  //Start http server by facades.Route.
  go func() {
    if err := facades.Route.Run(); err != nil {
      facades.Log.Errorf("Route run error: %v", err)

  select {}

Start HTTPS Server

Register Middleware

Framework has a general middleware built in, you can also customize it according to your own needs.

// app/http/kernel.go
import ""

func (kernel *Kernel) Middleware() []http.Middleware {
  return []http.Middleware{

Start Server

facades.Route.RunTLS() will automatically fetch the route.tls configuration:

// main.go
if err := facades.Route.RunTLS(); err != nil {
  facades.Log.Errorf("Route run error: %v", err)

You can also use facades.Route.RunTLSWithCert() method to customize host and certificate.

// main.go
if err := facades.Route.RunTLSWithCert("", "ca.pem", "ca.key"); err != nil {
  facades.Log.Errorf("Route run error: %v", err)

Routing Methods

RunStart HTTP Server
RunTLSStart HTTPS Server
RunTLSWithCertStart HTTPS Server
GroupGroup Routing
PrefixRouting Prefix
ServeHTTPTesting Routing
GetBasic Routing
PostBasic Routing
PutBasic Routing
DeleteBasic Routing
PatchBasic Routing
OptionsBasic Routing
AnyBasic Routing
StaticFile Routing
StaticFileFile Routing
StaticFSFile Routing

Basic Routing

facades.Route.Get("/", userController.Show)
facades.Route.Post("/", userController.Show)
facades.Route.Put("/", userController.Show)
facades.Route.Delete("/", userController.Show)
facades.Route.Patch("/", userController.Show)
facades.Route.Options("/", userController.Show)
facades.Route.Any("/", userController.Show)

Group Routing

facades.Route.Group(func(route route.Route) {
  route.Get("group/{id}", func(ctx http.Context) {
    ctx.Response().Success().String(ctx.Request().Query("id", "1"))

Routing Prefix

facades.Route.Prefix("users").Get("/", userController.Show)

File Routing

import "net/http"

facades.Route.Static("static", "./public")
facades.Route.StaticFile("static-file", "./public/logo.png")
facades.Route.StaticFS("static-fs", http.Dir("./public"))

Routing Parameters

facades.Route.Get("/input/{id}", func(ctx http.Context) {
    "id": ctx.Request().Input("id"),

Detail Request


import ""

facades.Route.Middleware(middleware.Cors()).Get("users", userController.Show)

Detail Middleware

Rate Limiting

Defining Rate Limiters

Goravel includes powerful and customizable rate limiting services that you may utilize to restrict the amount of traffic for a given route or group of routes. To get started, you should define rate limiter configurations that meet your application's needs. Typically, this should be done within the configureRateLimiting method of your application's app/providers/route_service_provider.go class.

Rate limiters are defined using the facades.RateLimiters For method. The For method accepts a rate limiter name and a closure that returns the limit configuration that should apply to routes that are assigned to the rate limiter. The rate limiter name may be any string you wish:

import (
  contractshttp ""

func (receiver *RouteServiceProvider) configureRateLimiting() {
  facades.RateLimiter.For("global", func(ctx contractshttp.Context) contractshttp.Limit {
    return limit.PerMinute(1000)

If the incoming request exceeds the specified rate limit, a response with a 429 HTTP status code will automatically be returned by Goravel. If you would like to define your own response that should be returned by a rate limit, you may use the response method:

facades.RateLimiter.For("global", func(ctx contractshttp.Context) contractshttp.Limit {
  return limit.PerMinute(1000).Response(func(ctx contractshttp.Context) {
    ctx.Response().String(429, "Custom response...")

Since rate limiter callbacks receive the incoming HTTP request instance, you may build the appropriate rate limit dynamically based on the incoming request or authenticated user:

facades.RateLimiter.For("global", func(ctx contractshttp.Context) contractshttp.Limit {
  // Suppose
  if is_vip() {
    return limit.PerMinute(100)

  return nil

Segmenting Rate Limits

Sometimes you may wish to segment rate limits by some arbitrary value. For example, you may wish to allow users to access a given route 100 times per minute per IP address. To accomplish this, you may use the By method when building your rate limit:

facades.RateLimiter.For("global", func(ctx contractshttp.Context) contractshttp.Limit {
  if is_vip() {
    return limit.PerMinute(100).By(ctx.Request().Ip())

  return nil

To illustrate this feature using another example, we can limit access to the route to 100 times per minute per authenticated user ID or 10 times per minute per IP address for guests:

facades.RateLimiter.For("global", func(ctx contractshttp.Context) contractshttp.Limit {
  if userID != 0 {
    return limit.PerMinute(100).By(userID)

  return limit.PerMinute(100).By(ctx.Request().Ip())

Multiple Rate Limits

If needed, you may return an array of rate limits for a given rate limiter configuration. Each rate limit will be evaluated for the route based on the order they are placed within the array:

facades.RateLimiter.ForWithLimits("login", func(ctx contractshttp.Context) []contractshttp.Limit {
  return []contractshttp.Limit{

Attaching Rate Limiters To Routes

Rate limiters may be attached to routes or route groups using the throttle middleware. The throttle middleware accepts the name of the rate limiter you wish to assign to the route:

facades.Route.Middleware(middleware.Throttle("global")).Get("/", func(ctx http.Context) {
  ctx.Response().Json(200, http.Json{
    "Hello": "Goravel",

Cross-Origin Resource Sharing (CORS)

Goravel has CORS enabled by default, the configuration can be modified in config/cors.go, the funciton is registered in app/http/kernel.go as global middleware.

For more information on CORS and CORS headers, please consult the MDN web documentation on CORSopen in new window.

Testing Routing

func TestHttp(t *testing.T) {
  w := httptest.NewRecorder()
  req, err := http.NewRequest("GET", "/users", nil)
  assert.Nil(t, err)
  facades.Route.ServeHTTP(w, req)
  assert.Equal(t, 200, w.Code)
  assert.Equal(t, "1", w.Body.String())