免费在 GitHub 公开

spring-cloud-gateway

Use when building or changing a Spring Cloud Gateway on Spring Boot 3. Covers route design, authentication, header hygiene, rate limiting, retries, timeouts, observability, and testing.

中文简介正在准备中。当前显示原文说明。

rrezartprebreza/spring-boot-skills

查看安装方法

包含的文件（4）

SKILL.md2.1 KB
agents/openai.yaml204 B
examples/bad-routes.yml194 B
examples/good-routes.yml303 B

SKILL.md（原文）

安装前可以查看交给 AI 代理的指令内容。

Spring Cloud Gateway

Keep the gateway an edge adapter. Do not move domain workflows into filters.

Compatibility first

Select the Spring Cloud release train compatible with the exact Boot 3 minor.
Import the Spring Cloud BOM and omit individual Spring Cloud dependency versions.
Prefer the reactive gateway unless the project deliberately uses the MVC variant.

Route rules

Use stable route IDs and explicit predicates.
Strip untrusted forwarding, identity, and internal headers at the edge.
Add correlation headers only after removing client-supplied values.
Keep path rewriting and host changes visible in route configuration.
Set connect and response timeouts globally, with narrow route overrides.

Security and resilience

Authenticate at the edge and authorize again in downstream services.
Relay tokens only to intended audiences.
Rate-limit by trusted identity or API key, not an unverified header.
Retry only idempotent operations and only before response commitment.
Use circuit breakers for failing dependencies; never hide sustained failure with unlimited retries.

Testing and operations

Test predicates, filters, header removal, status mapping, and timeouts.
Use WireMock or a containerized upstream for integration tests.
Emit route ID, outcome, latency, and upstream metrics with bounded tags.

Examples

See examples/good-routes.yml and examples/bad-routes.yml.

Gotchas

Agent trusts X-User-Id from the public request - derive identity after authentication.
Agent retries POST requests by default - retry only operations proven idempotent.
Agent adds business orchestration to a gateway filter - keep domain logic downstream.
Agent omits response timeouts - stalled upstreams can exhaust gateway resources.
Agent mixes incompatible Spring Cloud and Boot versions - use the official compatibility matrix.

评价

还没有评价。欢迎分享你的使用感受。

无需登录即可发表。欢迎分享使用感受、提问，或说明在哪些环境下无法运行。

还没有评论。来写第一条吧。

同一仓库的技能

ai-observability

免费

Use when adding Spring AI-specific model observations, token usage, latency, externally configured cost attribution, advisor telemetry, or protected prompt and completion logging. Use production-observability for general service metrics, health, logs, and OTLP setup.

中文简介正在准备中。当前显示原文说明。