349d783fd1
- Remove old review reports (keep latest only) - Move docs/ to deploy/docs-backup/ - Move performance-testing/ to deploy/ - Clean up test output files - Organize root directory
127 lines
4.0 KiB
Go
127 lines
4.0 KiB
Go
package server
|
||
|
||
import (
|
||
"context"
|
||
"log"
|
||
"sync/atomic"
|
||
"time"
|
||
|
||
"github.com/Wei-Shaw/sub2api/internal/config"
|
||
"github.com/Wei-Shaw/sub2api/internal/handler"
|
||
middleware2 "github.com/Wei-Shaw/sub2api/internal/server/middleware"
|
||
"github.com/Wei-Shaw/sub2api/internal/server/routes"
|
||
"github.com/Wei-Shaw/sub2api/internal/service"
|
||
"github.com/Wei-Shaw/sub2api/internal/web"
|
||
|
||
"github.com/gin-gonic/gin"
|
||
"github.com/prometheus/client_golang/prometheus/promhttp"
|
||
"github.com/redis/go-redis/v9"
|
||
)
|
||
|
||
const frameSrcRefreshTimeout = 5 * time.Second
|
||
|
||
// SetupRouter 配置路由器中间件和路由
|
||
func SetupRouter(
|
||
r *gin.Engine,
|
||
handlers *handler.Handlers,
|
||
jwtAuth middleware2.JWTAuthMiddleware,
|
||
adminAuth middleware2.AdminAuthMiddleware,
|
||
apiKeyAuth middleware2.APIKeyAuthMiddleware,
|
||
apiKeyService *service.APIKeyService,
|
||
subscriptionService *service.SubscriptionService,
|
||
opsService *service.OpsService,
|
||
settingService *service.SettingService,
|
||
cfg *config.Config,
|
||
redisClient *redis.Client,
|
||
) *gin.Engine {
|
||
// 缓存 iframe 页面的 origin 列表，用于动态注入 CSP frame-src
|
||
var cachedFrameOrigins atomic.Pointer[[]string]
|
||
emptyOrigins := []string{}
|
||
cachedFrameOrigins.Store(&emptyOrigins)
|
||
|
||
refreshFrameOrigins := func() {
|
||
ctx, cancel := context.WithTimeout(context.Background(), frameSrcRefreshTimeout)
|
||
defer cancel()
|
||
origins, err := settingService.GetFrameSrcOrigins(ctx)
|
||
if err != nil {
|
||
// 获取失败时保留已有缓存，避免 frame-src 被意外清空
|
||
return
|
||
}
|
||
cachedFrameOrigins.Store(&origins)
|
||
}
|
||
refreshFrameOrigins() // 启动时初始化
|
||
|
||
// 应用中间件
|
||
r.Use(middleware2.RequestLogger())
|
||
r.Use(middleware2.Logger())
|
||
r.Use(middleware2.CORS(cfg.CORS))
|
||
r.Use(middleware2.SecurityHeaders(cfg.Security.CSP, func() []string {
|
||
if p := cachedFrameOrigins.Load(); p != nil {
|
||
return *p
|
||
}
|
||
return nil
|
||
}))
|
||
|
||
// Prometheus metrics 中间件（用于收集 HTTP 请求指标）
|
||
r.Use(middleware2.PrometheusMetrics())
|
||
|
||
// Serve embedded frontend with settings injection if available
|
||
if web.HasEmbeddedFrontend() {
|
||
frontendServer, err := web.NewFrontendServer(settingService)
|
||
if err != nil {
|
||
log.Printf("Warning: Failed to create frontend server with settings injection: %v, using legacy mode", err)
|
||
r.Use(web.ServeEmbeddedFrontend())
|
||
settingService.SetOnUpdateCallback(refreshFrameOrigins)
|
||
} else {
|
||
// Register combined callback: invalidate HTML cache + refresh frame origins
|
||
settingService.SetOnUpdateCallback(func() {
|
||
frontendServer.InvalidateCache()
|
||
refreshFrameOrigins()
|
||
})
|
||
r.Use(frontendServer.Middleware())
|
||
}
|
||
} else {
|
||
settingService.SetOnUpdateCallback(refreshFrameOrigins)
|
||
}
|
||
|
||
// 注册路由
|
||
registerRoutes(r, handlers, jwtAuth, adminAuth, apiKeyAuth, apiKeyService, subscriptionService, opsService, settingService, cfg, redisClient)
|
||
|
||
return r
|
||
}
|
||
|
||
// registerRoutes 注册所有 HTTP 路由
|
||
func registerRoutes(
|
||
r *gin.Engine,
|
||
h *handler.Handlers,
|
||
jwtAuth middleware2.JWTAuthMiddleware,
|
||
adminAuth middleware2.AdminAuthMiddleware,
|
||
apiKeyAuth middleware2.APIKeyAuthMiddleware,
|
||
apiKeyService *service.APIKeyService,
|
||
subscriptionService *service.SubscriptionService,
|
||
opsService *service.OpsService,
|
||
settingService *service.SettingService,
|
||
cfg *config.Config,
|
||
redisClient *redis.Client,
|
||
) {
|
||
// 通用路由（健康检查、状态等）
|
||
routes.RegisterCommonRoutes(r)
|
||
|
||
// Prometheus metrics 端点（在 API 组之外，不需要认证）
|
||
r.GET("/metrics", gin.WrapH(promhttp.Handler()))
|
||
|
||
// API v1
|
||
v1 := r.Group("/api/v1")
|
||
|
||
// 注册各模块路由
|
||
routes.RegisterAuthRoutes(v1, h, jwtAuth, redisClient, settingService)
|
||
routes.RegisterUserRoutes(v1, h, jwtAuth, settingService)
|
||
routes.RegisterSoraClientRoutes(v1, h, jwtAuth, settingService)
|
||
routes.RegisterAdminRoutes(v1, h, adminAuth)
|
||
|
||
// Prometheus Alertmanager webhook（在 adminAuth 之外，使用独立 token 校验）
|
||
routes.RegisterPrometheusWebhookRoute(v1, h)
|
||
|
||
routes.RegisterGatewayRoutes(r, h, apiKeyAuth, apiKeyService, subscriptionService, opsService, settingService, cfg)
|
||
}
|