kevin
61189a53ec
- JWT 密钥改为环境变量/配置文件/随机生成注入，移除硬编码 - AuthMiddleware 用数据库 role 覆盖 claims，降级/禁用即时生效 - 改 role/status 时主动失效目标用户会话 - /ws 支持 JWT 认证（?token=），兼容密码认证，CheckOrigin 改同源校验 - 默认管理员改用随机密码，stdout 与文件双交付 - 登录与 WS 密码认证加限流（5次/分钟） - role 字段白名单校验（仅 admin/user） - socket/目录权限可配置（sock_mode/sock_group/sock_dir_mode），默认兼容现状 - 配置文件权限收紧 0644→0600，目录 0755→0700 - 静态文件改用 http.Dir.Open + NoRoute，移除手动路径拼接 - 隧道加 SetReadLimit(1MB) 与单用户连接数上限(3) - README 补充安全配置与生产部署说明
57 lines
1.4 KiB
Go
57 lines
1.4 KiB
Go
package router
|
|
|
|
import (
|
|
"net/http"
|
|
"strings"
|
|
|
|
"lmvpn/internal/handler"
|
|
"lmvpn/internal/middleware"
|
|
"lmvpn/internal/vpn"
|
|
|
|
"github.com/gin-gonic/gin"
|
|
)
|
|
|
|
func Setup(r *gin.Engine) {
|
|
r.GET("/ws", vpn.HandleWS)
|
|
|
|
r.POST("/api/login", middleware.LoginRateLimit(), handler.Login)
|
|
|
|
auth := r.Group("/api")
|
|
auth.Use(middleware.AuthMiddleware())
|
|
{
|
|
auth.GET("/me", handler.Me)
|
|
auth.PUT("/me/password", handler.ChangePassword)
|
|
auth.GET("/me/sessions", handler.ListMySessions)
|
|
auth.DELETE("/me/sessions/:sessionId", handler.RevokeMySession)
|
|
}
|
|
|
|
admin := r.Group("/api/admin")
|
|
admin.Use(middleware.AuthMiddleware(), middleware.AdminMiddleware())
|
|
{
|
|
admin.GET("/users/count", handler.GetUserCount)
|
|
admin.GET("/users", handler.ListUsers)
|
|
admin.POST("/users", handler.CreateUser)
|
|
admin.PUT("/users/:id", handler.UpdateUser)
|
|
admin.DELETE("/users/:id", handler.DeleteUser)
|
|
admin.DELETE("/users/:id/sessions", handler.AdminRevokeUserSessions)
|
|
}
|
|
|
|
distDir := http.Dir("./dist")
|
|
fs := http.FileServer(distDir)
|
|
r.NoRoute(func(c *gin.Context) {
|
|
path := c.Request.URL.Path
|
|
if strings.HasPrefix(path, "/api") || strings.HasPrefix(path, "/ws") {
|
|
c.JSON(http.StatusNotFound, gin.H{"error": "not found"})
|
|
return
|
|
}
|
|
f, err := distDir.Open(path)
|
|
if err != nil {
|
|
c.Header("Content-Type", "text/html")
|
|
c.File("./dist/index.html")
|
|
return
|
|
}
|
|
f.Close()
|
|
fs.ServeHTTP(c.Writer, c.Request)
|
|
})
|
|
}
|