224 lines
13 KiB
Go
224 lines
13 KiB
Go
package transport
|
|
|
|
import (
|
|
"time"
|
|
|
|
"github.com/gin-gonic/gin"
|
|
"github.com/jackc/pgx/v5/pgxpool"
|
|
"go.uber.org/zap"
|
|
|
|
"github.com/geo-platform/tenant-api/internal/ops/app"
|
|
sharedconfig "github.com/geo-platform/tenant-api/internal/shared/config"
|
|
"github.com/geo-platform/tenant-api/internal/shared/middleware"
|
|
"github.com/geo-platform/tenant-api/internal/shared/response"
|
|
"github.com/geo-platform/tenant-api/internal/shared/swagger"
|
|
tenantrepo "github.com/geo-platform/tenant-api/internal/tenant/repository"
|
|
)
|
|
|
|
type Deps struct {
|
|
Engine *gin.Engine
|
|
Server sharedconfig.ServerConfig
|
|
Logger *zap.Logger
|
|
DB *pgxpool.Pool
|
|
MonitoringDB *pgxpool.Pool
|
|
Issuer *app.TokenIssuer
|
|
Auth *app.AuthService
|
|
Accounts *app.AccountService
|
|
AdminUsers *app.AdminUserService
|
|
Jobs *app.JobService
|
|
KolSubs *app.KolSubscriptionService
|
|
Audits *app.AuditService
|
|
SiteDomains *app.SiteDomainMappingService
|
|
Releases *app.DesktopClientReleaseService
|
|
ObjectStorage *app.ObjectStorageService
|
|
BugReports *app.DesktopBugReportService
|
|
Compliance *app.ComplianceService
|
|
Scheduler *app.SchedulerService
|
|
MediaSupply *app.MediaSupplyService
|
|
}
|
|
|
|
func (d Deps) ServerAllowedOrigins() []string {
|
|
return d.Server.AllowedOrigins
|
|
}
|
|
|
|
func (d Deps) ServerSecurityHeadersEnabled() bool {
|
|
return d.Server.SecurityHeaders.Enabled
|
|
}
|
|
|
|
func RegisterRoutes(d Deps) {
|
|
d.Engine.Use(
|
|
middleware.Recovery(d.Logger),
|
|
middleware.RequestID(),
|
|
middleware.Logger(d.Logger),
|
|
)
|
|
if d.ServerSecurityHeadersEnabled() {
|
|
d.Engine.Use(middleware.SecurityHeaders())
|
|
}
|
|
d.Engine.Use(middleware.CORSWithConfig(middleware.CORSConfig{
|
|
AllowedOrigins: d.ServerAllowedOrigins(),
|
|
AllowAll: len(d.ServerAllowedOrigins()) == 0,
|
|
}))
|
|
|
|
d.Engine.GET("/api/health/live", func(c *gin.Context) {
|
|
response.Success(c, gin.H{"status": "alive"})
|
|
})
|
|
d.Engine.GET("/api/health/ready", func(c *gin.Context) {
|
|
if err := d.DB.Ping(c.Request.Context()); err != nil {
|
|
response.Error(c, response.ErrServiceUnavailable(50301, "postgres_unavailable", "数据库不可达"))
|
|
return
|
|
}
|
|
if d.MonitoringDB != nil {
|
|
if err := d.MonitoringDB.Ping(c.Request.Context()); err != nil {
|
|
response.Error(c, response.ErrServiceUnavailable(50303, "monitoring_postgres_unavailable", "监控数据库不可达"))
|
|
return
|
|
}
|
|
}
|
|
response.Success(c, gin.H{"status": "ready"})
|
|
})
|
|
d.Engine.GET("/api/desktop/releases/latest", checkDesktopClientReleaseHandler(d.Releases))
|
|
d.Engine.GET("/api/desktop/releases/download-url", resolveLatestDesktopClientReleaseDownloadURLHandler(d.Releases))
|
|
d.Engine.GET("/api/desktop/releases/updater/:platform/:arch/:channel/:version/:feed", desktopClientReleaseUpdaterFeedHandler(d.Releases))
|
|
d.Engine.GET("/api/desktop/releases/updater/:platform/:arch/:channel/:version", desktopClientReleaseUpdaterFeedHandler(d.Releases))
|
|
publicBugReportRateLimit := middleware.RateLimitByClientIP(10, time.Minute, 42961, "desktop_bug_report_rate_limited", "客户端 Bug 上报过于频繁，请稍后再试")
|
|
d.Engine.POST("/api/desktop/bug-reports", publicBugReportRateLimit, uploadDesktopBugReportHandler(d.BugReports))
|
|
|
|
desktopAuthed := d.Engine.Group("/api/desktop")
|
|
desktopAuthed.Use(desktopBugReportClientMiddleware(tenantrepo.NewDesktopClientRepository(d.DB)))
|
|
desktopAuthed.POST("/clients/bug-reports", uploadDesktopBugReportForClientHandler(d.BugReports))
|
|
|
|
api := d.Engine.Group("/api/ops")
|
|
{
|
|
api.GET("/auth/password-key", passwordPublicKeyHandler(d.Auth))
|
|
api.POST("/auth/login", loginHandler(d.Auth))
|
|
}
|
|
|
|
authed := api.Group("")
|
|
authed.Use(authMiddleware(d.Issuer))
|
|
{
|
|
authed.GET("/auth/me", meHandler(d.Accounts))
|
|
authed.POST("/auth/password", changeOwnPasswordHandler(d.Accounts))
|
|
|
|
authed.GET("/accounts", listAccountsHandler(d.Accounts))
|
|
authed.POST("/accounts", createAccountHandler(d.Accounts))
|
|
authed.GET("/accounts/:id", getAccountHandler(d.Accounts))
|
|
authed.PATCH("/accounts/:id", updateAccountProfileHandler(d.Accounts))
|
|
authed.POST("/accounts/:id/status", setAccountStatusHandler(d.Accounts))
|
|
authed.POST("/accounts/:id/password", resetAccountPasswordHandler(d.Accounts))
|
|
|
|
authed.GET("/plans", listPlansHandler(d.AdminUsers))
|
|
authed.GET("/roles", listRolesHandler(d.AdminUsers))
|
|
|
|
authed.GET("/admin-users", listAdminUsersHandler(d.AdminUsers))
|
|
authed.POST("/admin-users", createAdminUserHandler(d.AdminUsers))
|
|
authed.GET("/admin-users/:id", getAdminUserHandler(d.AdminUsers))
|
|
authed.PATCH("/admin-users/:id", updateAdminUserHandler(d.AdminUsers))
|
|
authed.POST("/admin-users/:id/plan", changeAdminUserPlanHandler(d.AdminUsers))
|
|
authed.POST("/admin-users/:id/subscription-expiry", updateAdminUserSubscriptionExpiryHandler(d.AdminUsers))
|
|
authed.POST("/admin-users/:id/reset-plan-usage", resetAdminUserPlanUsageHandler(d.AdminUsers))
|
|
authed.POST("/admin-users/:id/role", changeAdminUserRoleHandler(d.AdminUsers))
|
|
authed.POST("/admin-users/:id/kol", setAdminUserKOLHandler(d.AdminUsers))
|
|
authed.POST("/admin-users/:id/status", setAdminUserStatusHandler(d.AdminUsers))
|
|
authed.POST("/admin-users/:id/password", resetAdminUserPasswordHandler(d.AdminUsers))
|
|
authed.POST("/admin-users/:id/reset-login-lock", resetAdminUserLoginLockHandler(d.AdminUsers))
|
|
|
|
authed.GET("/kol/packages", listKolSubscriptionPackagesHandler(d.KolSubs))
|
|
authed.GET("/kol/subscriptions", listKolSubscriptionsHandler(d.KolSubs))
|
|
authed.POST("/kol/subscriptions/manual-bind", manualBindKolSubscriptionHandler(d.KolSubs))
|
|
authed.POST("/kol/subscriptions/:id/approve", approveKolSubscriptionHandler(d.KolSubs))
|
|
authed.POST("/kol/subscriptions/:id/revoke", revokeKolSubscriptionHandler(d.KolSubs))
|
|
|
|
authed.GET("/audits", listAuditsHandler(d.Audits))
|
|
|
|
authed.GET("/jobs", listJobsHandler(d.Jobs))
|
|
authed.GET("/jobs/:source/:id", getJobHandler(d.Jobs))
|
|
authed.POST("/jobs/:source/:id/retry", retryJobHandler(d.Jobs))
|
|
authed.POST("/jobs/:source/:id/cancel", cancelJobHandler(d.Jobs))
|
|
|
|
authed.GET("/media-supply/resources", listMediaSupplyResourcesHandler(d.MediaSupply))
|
|
authed.PUT("/media-supply/resources/:id/price", setMediaSupplyResourcePriceHandler(d.MediaSupply))
|
|
authed.PUT("/media-supply/resources/:id/visibility", setMediaSupplyResourceVisibilityHandler(d.MediaSupply))
|
|
authed.POST("/media-supply/sync-jobs", queueMediaSupplySyncHandler(d.MediaSupply))
|
|
authed.GET("/media-supply/wallets", listMediaSupplyWalletsHandler(d.MediaSupply))
|
|
authed.POST("/media-supply/wallets/adjustments", adjustMediaSupplyWalletHandler(d.MediaSupply))
|
|
|
|
authed.GET("/scheduler/jobs", listSchedulerJobsHandler(d.Scheduler))
|
|
authed.GET("/scheduler/jobs/:key", getSchedulerJobHandler(d.Scheduler))
|
|
authed.PATCH("/scheduler/jobs/:key", updateSchedulerJobHandler(d.Scheduler))
|
|
authed.POST("/scheduler/jobs/:key/enable", enableSchedulerJobHandler(d.Scheduler, true))
|
|
authed.POST("/scheduler/jobs/:key/disable", enableSchedulerJobHandler(d.Scheduler, false))
|
|
authed.POST("/scheduler/jobs/:key/run", triggerSchedulerJobHandler(d.Scheduler, "manual"))
|
|
authed.POST("/scheduler/jobs/:key/dry-run", triggerSchedulerJobHandler(d.Scheduler, "dry_run"))
|
|
authed.GET("/scheduler/jobs/:key/runs", listSchedulerRunsHandler(d.Scheduler))
|
|
authed.GET("/scheduler/instances", listSchedulerInstancesHandler(d.Scheduler))
|
|
|
|
authed.GET("/site-domain-mappings", listSiteDomainMappingsHandler(d.SiteDomains))
|
|
authed.GET("/site-domain-mappings/export", exportSiteDomainMappingsHandler(d.SiteDomains))
|
|
authed.POST("/site-domain-mappings/import", importSiteDomainMappingsHandler(d.SiteDomains))
|
|
authed.POST("/site-domain-mappings", createSiteDomainMappingHandler(d.SiteDomains))
|
|
authed.PATCH("/site-domain-mappings/:id", updateSiteDomainMappingHandler(d.SiteDomains))
|
|
authed.POST("/site-domain-mappings/:id/active", setSiteDomainMappingActiveHandler(d.SiteDomains))
|
|
authed.DELETE("/site-domain-mappings/:id", deleteSiteDomainMappingHandler(d.SiteDomains))
|
|
|
|
authed.GET("/object-storage/objects", listObjectStorageObjectsHandler(d.ObjectStorage))
|
|
authed.GET("/object-storage/usage", getObjectStorageUsageHandler(d.ObjectStorage))
|
|
authed.GET("/object-storage/objects/detail", getObjectStorageObjectHandler(d.ObjectStorage))
|
|
authed.GET("/object-storage/objects/url", resolveObjectStorageObjectURLHandler(d.ObjectStorage))
|
|
authed.GET("/object-storage/objects/download-url", resolveObjectStorageObjectDownloadURLHandler(d.ObjectStorage))
|
|
authed.GET("/object-storage/objects/download", downloadObjectStorageObjectHandler(d.ObjectStorage))
|
|
authed.POST("/object-storage/objects/upload", uploadObjectStorageObjectHandler(d.ObjectStorage))
|
|
authed.POST("/object-storage/objects/move", moveObjectStorageObjectHandler(d.ObjectStorage))
|
|
authed.DELETE("/object-storage/objects", deleteObjectStorageObjectHandler(d.ObjectStorage))
|
|
authed.POST("/object-storage/folders", createObjectStorageFolderHandler(d.ObjectStorage))
|
|
authed.DELETE("/object-storage/folders", deleteObjectStorageFolderHandler(d.ObjectStorage))
|
|
|
|
authed.GET("/desktop-client/releases", listDesktopClientReleasesHandler(d.Releases))
|
|
authed.POST("/desktop-client/releases/upload", uploadDesktopClientReleaseHandler(d.Releases))
|
|
authed.POST("/desktop-client/releases/direct-upload", initiateDesktopClientReleaseDirectUploadHandler(d.Releases))
|
|
authed.POST("/desktop-client/releases/direct-upload/complete", completeDesktopClientReleaseDirectUploadHandler(d.Releases))
|
|
authed.POST("/desktop-client/releases/direct-upload/complete-jobs", startDesktopClientReleaseDirectUploadCompleteJobHandler(d.Releases))
|
|
authed.GET("/desktop-client/release-upload-complete-jobs/:job_id", getDesktopClientReleaseCompleteJobHandler(d.Releases))
|
|
authed.POST("/desktop-client/release-uploads", initiateDesktopClientReleaseUploadHandler(d.Releases))
|
|
authed.POST("/desktop-client/release-uploads/:upload_id/chunks/:chunk_index", uploadDesktopClientReleaseChunkHandler(d.Releases))
|
|
authed.POST("/desktop-client/release-uploads/:upload_id/complete", completeDesktopClientReleaseUploadHandler(d.Releases))
|
|
authed.POST("/desktop-client/release-uploads/:upload_id/complete-jobs", startDesktopClientReleaseUploadCompleteJobHandler(d.Releases))
|
|
authed.DELETE("/desktop-client/release-uploads/:upload_id", abortDesktopClientReleaseUploadHandler(d.Releases))
|
|
authed.POST("/desktop-client/releases", createDesktopClientReleaseHandler(d.Releases))
|
|
authed.PATCH("/desktop-client/releases/:id", updateDesktopClientReleaseHandler(d.Releases))
|
|
authed.GET("/desktop-client/releases/:id/download-url", resolveDesktopClientReleaseDownloadURLHandler(d.Releases))
|
|
authed.POST("/desktop-client/releases/:id/enabled", setDesktopClientReleaseEnabledHandler(d.Releases))
|
|
authed.DELETE("/desktop-client/releases/:id", deleteDesktopClientReleaseHandler(d.Releases))
|
|
authed.GET("/desktop-client/bug-reports", listDesktopBugReportsHandler(d.BugReports))
|
|
authed.GET("/desktop-client/bug-reports/:id", getDesktopBugReportHandler(d.BugReports))
|
|
authed.PATCH("/desktop-client/bug-reports/:id", updateDesktopBugReportHandler(d.BugReports))
|
|
authed.GET("/desktop-client/bug-reports/:id/dump-url", resolveDesktopBugReportDumpURLHandler(d.BugReports))
|
|
|
|
compliance := authed.Group("/compliance")
|
|
compliance.GET("/dictionaries", listComplianceDictionariesHandler(d.Compliance))
|
|
compliance.POST("/dictionaries", createComplianceDictionaryHandler(d.Compliance))
|
|
compliance.PUT("/dictionaries/:id", updateComplianceDictionaryHandler(d.Compliance))
|
|
compliance.DELETE("/dictionaries/:id", deleteComplianceDictionaryHandler(d.Compliance))
|
|
compliance.GET("/dictionaries/:id/terms", listComplianceTermsHandler(d.Compliance))
|
|
compliance.POST("/dictionaries/:id/terms", createComplianceTermHandler(d.Compliance))
|
|
compliance.POST("/dictionaries/:id/terms:batch-import", batchImportComplianceTermsHandler(d.Compliance))
|
|
compliance.DELETE("/dictionaries/:id/terms/:term_id", deleteComplianceTermHandler(d.Compliance))
|
|
compliance.POST("/dictionaries/:id/publish", publishComplianceDictionaryHandler(d.Compliance))
|
|
compliance.POST("/dictionaries/:id/rollback", rollbackComplianceDictionaryHandler(d.Compliance))
|
|
compliance.GET("/policy/global", getGlobalCompliancePolicyHandler(d.Compliance))
|
|
compliance.PUT("/policy/global", updateGlobalCompliancePolicyHandler(d.Compliance))
|
|
compliance.POST("/policy/global/master-switch", setGlobalComplianceMasterSwitchHandler(d.Compliance))
|
|
compliance.GET("/manual-reviews", listComplianceManualReviewsHandler(d.Compliance))
|
|
compliance.GET("/manual-reviews/:id", getComplianceManualReviewHandler(d.Compliance))
|
|
compliance.POST("/manual-reviews/:id/approve", approveComplianceManualReviewHandler(d.Compliance))
|
|
compliance.POST("/manual-reviews/:id/reject", rejectComplianceManualReviewHandler(d.Compliance))
|
|
compliance.GET("/stats", complianceStatsHandler(d.Compliance))
|
|
compliance.GET("/records", listComplianceRecordsHandler(d.Compliance))
|
|
}
|
|
|
|
if swagger.EnabledForMode(d.Server.Mode) {
|
|
swagger.Register(d.Engine, swagger.Config{
|
|
Title: "省心推 Ops API",
|
|
Version: "dev",
|
|
})
|
|
}
|
|
}
|