- 迁移 v10 新增 nav_links 与 nav_link_translations 两张表,文案按语言存储 - 公开 GET /api/nav-links 返回启用链接(按 sort/id 排序);管理员可增删改查与启停 - URL 仅允许站内路径、http(s) 与 mailto,拒绝 javascript: 等危险协议;译文替换与校验 - 前端删除写死的“主页”按钮,头部按当前语言渲染动态链接,新窗口加 rel=noopener noreferrer - 后台管理页新增“头部导航链接”卡片(三语文案、URL、打开方式、排序、状态),改动即时生效 - 补充 nav 接口与迁移测试、三语文案,重新生成 Swagger 文档
121 lines
3.6 KiB
Go
121 lines
3.6 KiB
Go
// Package api 负责 HTTP 接口路由装配。
|
|
package api
|
|
|
|
import (
|
|
"net/http"
|
|
"path"
|
|
|
|
"github.com/gin-gonic/gin"
|
|
swaggerFiles "github.com/swaggo/files"
|
|
ginSwagger "github.com/swaggo/gin-swagger"
|
|
"gorm.io/gorm"
|
|
|
|
"rill/internal/auth"
|
|
"rill/internal/avatar"
|
|
"rill/internal/config"
|
|
"rill/internal/database"
|
|
"rill/internal/file"
|
|
"rill/internal/nav"
|
|
"rill/internal/note"
|
|
"rill/internal/site"
|
|
"rill/internal/user"
|
|
"rill/internal/usergroup"
|
|
)
|
|
|
|
// RegisterRoutes 注册 API 路由。health、swagger、auth、站点信息、文件查看与头部导航读取公开;notes、个人资料与文件上传删除需登录;站点信息更新、导航维护、用户与用户组管理仅限管理员。
|
|
func RegisterRoutes(rg *gin.RouterGroup, db *gorm.DB, cfg *config.Config) {
|
|
authn := auth.NewAuthenticator(cfg)
|
|
|
|
rg.GET("/health", health(db))
|
|
|
|
swagger := rg.Group("/swagger")
|
|
{
|
|
swagger.GET("", func(c *gin.Context) {
|
|
c.Redirect(http.StatusFound, path.Join("/", rg.BasePath(), "swagger", "index.html"))
|
|
})
|
|
swagger.GET("/*any", ginSwagger.WrapHandler(swaggerFiles.Handler, ginSwagger.URL("doc.json")))
|
|
}
|
|
|
|
authGroup := rg.Group("/auth")
|
|
{
|
|
authGroup.POST("/register", auth.Register(db))
|
|
authGroup.POST("/login", auth.Login(db, authn))
|
|
}
|
|
|
|
rg.GET("/site", site.Get(db))
|
|
rg.GET("/files/:id", file.View(db, cfg))
|
|
rg.GET("/nav-links", nav.List(db))
|
|
|
|
authed := rg.Group("", authn.RequireAuth(db))
|
|
{
|
|
authed.GET("/me", auth.Me())
|
|
authed.PUT("/me", auth.UpdateMe(db))
|
|
authed.PUT("/me/avatar", avatar.Update(db, cfg))
|
|
authed.DELETE("/me/avatar", avatar.Delete(db, cfg))
|
|
authed.POST("/files", file.Upload(db, cfg))
|
|
authed.DELETE("/files/:id", file.Delete(db, cfg))
|
|
|
|
notes := authed.Group("/notes")
|
|
{
|
|
notes.GET("", note.List(db))
|
|
notes.POST("", note.Create(db))
|
|
notes.GET("/:id", note.Get(db))
|
|
notes.PUT("/:id", note.Update(db))
|
|
notes.DELETE("/:id", note.Delete(db))
|
|
}
|
|
}
|
|
|
|
admin := rg.Group("", authn.RequireAuth(db), auth.RequireAdmin())
|
|
{
|
|
admin.PUT("/site", site.Update(db, cfg))
|
|
admin.PUT("/site/logo", site.UploadLogo(db, cfg))
|
|
admin.DELETE("/site/logo", site.DeleteLogo(db, cfg))
|
|
|
|
admin.GET("/nav-links/list", nav.ListAll(db))
|
|
admin.POST("/nav-links", nav.Create(db))
|
|
admin.PUT("/nav-links/:id", nav.Update(db))
|
|
admin.DELETE("/nav-links/:id", nav.Delete(db))
|
|
|
|
users := admin.Group("/users")
|
|
{
|
|
users.GET("", user.List(db))
|
|
users.POST("", user.Create(db))
|
|
users.GET("/:id", user.Get(db))
|
|
users.PUT("/:id", user.Update(db))
|
|
users.DELETE("/:id", user.Delete(db))
|
|
}
|
|
|
|
groups := admin.Group("/user-groups")
|
|
{
|
|
groups.GET("", usergroup.List(db))
|
|
groups.POST("", usergroup.Create(db))
|
|
groups.GET("/:id", usergroup.Get(db))
|
|
groups.PUT("/:id", usergroup.Update(db))
|
|
groups.DELETE("/:id", usergroup.Delete(db))
|
|
}
|
|
}
|
|
}
|
|
|
|
// HealthResponse 健康检查响应。
|
|
type HealthResponse struct {
|
|
Status string `json:"status" example:"ok"`
|
|
Error string `json:"error,omitempty" example:"database unavailable"`
|
|
}
|
|
|
|
// @Summary Health check
|
|
// @Description Check service and database connectivity; returns 503 when the database is unavailable.
|
|
// @Tags public
|
|
// @Produce json
|
|
// @Success 200 {object} api.HealthResponse
|
|
// @Failure 503 {object} api.HealthResponse
|
|
// @Router /health [get]
|
|
func health(db *gorm.DB) gin.HandlerFunc {
|
|
return func(c *gin.Context) {
|
|
if err := database.Ping(c.Request.Context(), db); err != nil {
|
|
c.JSON(http.StatusServiceUnavailable, HealthResponse{Status: "error", Error: "database unavailable"})
|
|
return
|
|
}
|
|
c.JSON(http.StatusOK, HealthResponse{Status: "ok"})
|
|
}
|
|
}
|