06_Builtin_Middlewares.md

title	summary
Built-in Middleware	Middleware components that come with Silverstripe CMS

Built-in Middleware

Silverstripe CMS has a number of Middleware components. Some of them are listed here. Many of them are in the SilverStripe\Control\Middleware namespace.

Name	Description
AllowedHostsMiddleware	Secures requests by only allowing a whitelist of Host values
AuthenticationMiddleware	Handles authentication for the request
CanonicalURLMiddleware	URL normalisation and redirection
ChangeDetectionMiddleware	Change detection via Etag / IfModifiedSince headers, conditionally sending a 304 not modified if possible.
ConfirmationMiddleware	Checks whether user manual confirmation is required for HTTPRequest
DevelopmentAdminConfirmationMiddleware	A specific subclass of ConfirmationMiddleware which handles the /dev/* routes.
ExecMetricMiddleware	Display execution metrics in DEV mode
FlushMiddleware	Triggers a call to flush() on all Flushable implementors
HTTPCacheControlMiddleware	Controls HTTP response cache headers
PasswordExpirationMiddleware	Check if authenticated user has password expired
RateLimitMiddleware	Access throttling, controls HTTP Retry-After header
SessionMiddleware	PHP Session initialisation
TrustedProxyMiddleware	Rewrites headers that provide IP and host details from upstream proxies
URLSpecialsMiddleware	Controls some of the URL special variables