kevin
c1d560fd4a
- 新增 sessions 表，每次登录创建会话记录（记录 IP/UA） - AuthMiddleware 改为基于 session 校验，可精确踢掉单个设备 - 自己改密码后踢掉其他设备，管理员改密码后踢掉该用户全部设备 - 新增 GET /api/me/sessions 查看活跃会话列表 - 新增 DELETE /api/me/sessions/:sessionId 踢掉指定会话 - 新增 DELETE /api/admin/users/:id/sessions 管理员强制下线某用户 - 兼容无 session_id 的旧 token，回退到 TokenInvalidBefore 校验
58 lines
1.3 KiB
Go
58 lines
1.3 KiB
Go
package router
|
|
|
|
import (
|
|
"net/http"
|
|
"os"
|
|
"strings"
|
|
|
|
"lmvpn/internal/handler"
|
|
"lmvpn/internal/middleware"
|
|
"lmvpn/internal/vpn"
|
|
|
|
"github.com/gin-gonic/gin"
|
|
)
|
|
|
|
func Setup(r *gin.Engine) {
|
|
r.GET("/ws", vpn.HandleWS)
|
|
|
|
r.POST("/api/login", handler.Login)
|
|
|
|
auth := r.Group("/api")
|
|
auth.Use(middleware.AuthMiddleware())
|
|
{
|
|
auth.GET("/me", handler.Me)
|
|
auth.PUT("/me/password", handler.ChangePassword)
|
|
auth.GET("/me/sessions", handler.ListMySessions)
|
|
auth.DELETE("/me/sessions/:sessionId", handler.RevokeMySession)
|
|
}
|
|
|
|
admin := r.Group("/api/admin")
|
|
admin.Use(middleware.AuthMiddleware(), middleware.AdminMiddleware())
|
|
{
|
|
admin.GET("/users/count", handler.GetUserCount)
|
|
admin.GET("/users", handler.ListUsers)
|
|
admin.POST("/users", handler.CreateUser)
|
|
admin.PUT("/users/:id", handler.UpdateUser)
|
|
admin.DELETE("/users/:id", handler.DeleteUser)
|
|
admin.DELETE("/users/:id/sessions", handler.AdminRevokeUserSessions)
|
|
}
|
|
|
|
fs := http.FileServer(http.Dir("./dist"))
|
|
r.Use(func(c *gin.Context) {
|
|
if strings.HasPrefix(c.Request.URL.Path, "/ws") {
|
|
return
|
|
}
|
|
if strings.HasPrefix(c.Request.URL.Path, "/api") {
|
|
c.Next()
|
|
return
|
|
}
|
|
|
|
path := "./dist" + c.Request.URL.Path
|
|
if _, err := os.Stat(path); os.IsNotExist(err) {
|
|
c.Request.URL.Path = "/"
|
|
}
|
|
fs.ServeHTTP(c.Writer, c.Request)
|
|
c.Abort()
|
|
})
|
|
}
|