Middleware là gì? Tính năng và ứng dụng middleware cho REST API

Middleware is a software layer that connects system components, processing requests before they reach the main application. This article explains how it works, types, applications in REST API, and practical examples with Laravel.

What is Middleware?

Middleware is a software layer between the operating system, database, and application. It acts as a bridge enabling different system components to communicate and exchange data, regardless of programming language or platform.

The concept of middleware emerged in the 1980s when enterprise systems needed to integrate applications across different platforms. Instead of each application handling its own connections, middleware provides a common abstraction layer — reducing complexity and improving scalability.

In modern web development, middleware typically refers to the request/response processing mechanism in frameworks like Express.js, Laravel, and Django — intercepting and processing HTTP requests before they reach the controller.

How It Works

Middleware operates on a pipeline model (processing chain):

1. Client sends an HTTP request to the server.
2. Middleware 1 intercepts the request → performs processing (e.g., CORS check).
3. Middleware 2 continues processing (e.g., JWT token authentication).
4. Middleware 3 processes further (e.g., logging, rate limiting).
5. Controller receives the middleware-processed request, executes business logic.
6. Response travels back through the middleware pipeline before reaching the client.

Each middleware can:

• Forward the request to the next middleware (call next()).
• Block the request and return a response immediately (e.g., 401 Unauthorized).
• Transform the request/response (add headers, transform data).

Middleware Types

Middleware in REST API

In REST APIs, middleware handles common tasks separated from business logic:

Example authentication middleware in Express.js:

 1const authMiddleware = (req, res, next) => {
 2  const token = req.headers.authorization?.split(' ')[1];
 3  if (!token) return res.status(401).json({ error: 'Token required' });
 4
 5  try {
 6    req.user = jwt.verify(token, process.env.JWT_SECRET);
 7    next(); // Pass to next middleware/controller
 8  } catch (err) {
 9    res.status(403).json({ error: 'Invalid token' });
10  }
11};
12
13app.get('/api/profile', authMiddleware, profileController);

What is an Application Server? Features, Benefits and Use Cases

Middleware in Laravel

Laravel integrates middleware into its HTTP pipeline at 3 levels:

• Global Middleware: Runs for every request (e.g., TrustProxies, HandleCors).
• Route Middleware: Assigned to specific routes (e.g., auth, throttle).
• Middleware Group: Groups multiple middleware (e.g., web, api).

Creating custom middleware:

1php artisan make:middleware CheckAge

1// app/Http/Middleware/CheckAge.php
2public function handle(Request $request, Closure $next)
3{
4    if ($request->age < 18) {
5        return redirect('home');
6    }
7    return $next($request);
8}

Register and use:

1// routes/web.php
2Route::get('/dashboard', function () {
3    // Logic
4})->middleware('check.age');

Laravel also supports terminable middleware — processing after the response has been sent to the client (e.g., logging, sending notifications).

Benefits and Use Cases

• Separation of Concerns (SoC): Authentication, logging, and caching logic separated from business logic — cleaner code, easier maintenance.
• Reusability: A single middleware can be used across multiple routes/controllers without code duplication.
• Centralized Security: Authentication, authorization, and input validation at a single point instead of scattered throughout.
• Easy Scaling: Adding/removing middleware doesn't affect core application logic.
• Performance: Caching and compression middleware optimize response time.
• Monitoring: Logging middleware records all requests for tracking and debugging.

What is Laravel? The Most Popular PHP Framework

Conclusion: Middleware is an essential intermediary software layer in modern application architecture, from enterprise system integration to HTTP request processing in web frameworks. Understanding and using middleware correctly helps build secure, scalable, and maintainable applications.

Frequently Asked Questions