mirror of
https://github.com/yusing/godoxy.git
synced 2025-05-20 12:42:34 +02:00
73 lines
2.4 KiB
Go
73 lines
2.4 KiB
Go
package api
|
|
|
|
import (
|
|
"fmt"
|
|
"net"
|
|
"net/http"
|
|
|
|
v1 "github.com/yusing/go-proxy/internal/api/v1"
|
|
"github.com/yusing/go-proxy/internal/api/v1/auth"
|
|
. "github.com/yusing/go-proxy/internal/api/v1/utils"
|
|
"github.com/yusing/go-proxy/internal/common"
|
|
"github.com/yusing/go-proxy/internal/logging"
|
|
"github.com/yusing/go-proxy/internal/net/http/middleware"
|
|
)
|
|
|
|
type ServeMux struct{ *http.ServeMux }
|
|
|
|
func NewServeMux() ServeMux {
|
|
return ServeMux{http.NewServeMux()}
|
|
}
|
|
|
|
func (mux ServeMux) HandleFunc(method, endpoint string, handler http.HandlerFunc) {
|
|
mux.ServeMux.HandleFunc(fmt.Sprintf("%s %s", method, endpoint), checkHost(rateLimited(handler)))
|
|
}
|
|
|
|
func NewHandler() http.Handler {
|
|
mux := NewServeMux()
|
|
mux.HandleFunc("GET", "/v1", v1.Index)
|
|
mux.HandleFunc("GET", "/v1/version", v1.GetVersion)
|
|
mux.HandleFunc("POST", "/v1/login", auth.LoginHandler)
|
|
mux.HandleFunc("GET", "/v1/logout", auth.LogoutHandler)
|
|
mux.HandleFunc("POST", "/v1/logout", auth.LogoutHandler)
|
|
mux.HandleFunc("POST", "/v1/reload", v1.Reload)
|
|
mux.HandleFunc("GET", "/v1/list", auth.RequireAuth(v1.List))
|
|
mux.HandleFunc("GET", "/v1/list/{what}", auth.RequireAuth(v1.List))
|
|
mux.HandleFunc("GET", "/v1/list/{what}/{which}", auth.RequireAuth(v1.List))
|
|
mux.HandleFunc("GET", "/v1/file", auth.RequireAuth(v1.GetFileContent))
|
|
mux.HandleFunc("GET", "/v1/file/{filename...}", auth.RequireAuth(v1.GetFileContent))
|
|
mux.HandleFunc("POST", "/v1/file/{filename...}", auth.RequireAuth(v1.SetFileContent))
|
|
mux.HandleFunc("PUT", "/v1/file/{filename...}", auth.RequireAuth(v1.SetFileContent))
|
|
mux.HandleFunc("GET", "/v1/stats", v1.Stats)
|
|
mux.HandleFunc("GET", "/v1/stats/ws", v1.StatsWS)
|
|
return mux
|
|
}
|
|
|
|
// allow only requests to API server with localhost.
|
|
func checkHost(f http.HandlerFunc) http.HandlerFunc {
|
|
if common.IsDebug {
|
|
return f
|
|
}
|
|
return func(w http.ResponseWriter, r *http.Request) {
|
|
host, _, _ := net.SplitHostPort(r.RemoteAddr)
|
|
if host != "127.0.0.1" && host != "localhost" && host != "[::1]" {
|
|
LogWarn(r).Msgf("blocked API request from %s", host)
|
|
http.Error(w, "forbidden", http.StatusForbidden)
|
|
return
|
|
}
|
|
f(w, r)
|
|
}
|
|
}
|
|
|
|
func rateLimited(f http.HandlerFunc) http.HandlerFunc {
|
|
m, err := middleware.RateLimiter.WithOptionsClone(middleware.OptionsRaw{
|
|
"average": 10,
|
|
"burst": 10,
|
|
})
|
|
if err != nil {
|
|
logging.Fatal().Err(err).Msg("unable to create API rate limiter")
|
|
}
|
|
return func(w http.ResponseWriter, r *http.Request) {
|
|
m.ModifyRequest(f, w, r)
|
|
}
|
|
}
|