mrleo1nidandClaude Opus 5.5
4fa1add80d
ci / contract (сгенерированный код совпадает с openapi.yaml) (push) Successful in 48s
ci / api (push) Successful in 51s
ci / recommender (push) Canceled after 2s
ci / ts (packages + web) (push) Canceled after 0s
ci / docker (образы собираются — их сервер собирает сам при обновлении) (apps/web/Dockerfile, web, ) (push) Canceled after 0s
ci / docker (образы собираются — их сервер собирает сам при обновлении) (services/api/Dockerfile, api, api) (push) Canceled after 0s
ci / docker (образы собираются — их сервер собирает сам при обновлении) (services/api/Dockerfile, storage-agent, storage-agent) (push) Canceled after 0s
ci / docker (образы собираются — их сервер собирает сам при обновлении) (services/recommender/Dockerfile, recommender, ) (push) Canceled after 0s
ci / mobile (Metro-бандл Android) (push) Canceled after 0s
Security and robustness: - storage-agent rejects an empty INTERNAL_TOKEN (config notEmpty + middleware) - api takes the client IP only from X-Real-IP (chi RealIP trusted True-Client-IP) - /readyz reports ok/fail and logs the cause; checks run in parallel with a timeout - storage-agent shuts down gracefully; shared httpx.NewServer/Serve with IdleTimeout - goose migrations take a Postgres advisory lock - recommender readyz: per-check timeout, redis socket timeouts Clients: - Android release allows cleartext HTTP for LAN servers (expo-build-properties) - checkServer times out after 10s; connect button is disabled while checking Deploy and CI: - install.sh hands cache/uploads/updates/models to the non-root service users - update.sh refuses downgrades unless PIPU_ALLOW_DOWNGRADE=1 - recommender/analyzer get only the env they need; required secrets fail fast - nginx security headers and CSP; strip True-Client-IP - dev compose binds ports to 127.0.0.1; postgres/redis images pinned - version.mjs fails on a malformed explicit tag instead of releasing 0.0.0-dev - contract check catches untracked generated files - final releases fail without a release keystore; changelog skips rc tags Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
48 lines
1.4 KiB
Go
48 lines
1.4 KiB
Go
// Package server собирает HTTP-роутер сервиса api из модулей.
|
|
package server
|
|
|
|
import (
|
|
"log/slog"
|
|
"net/http"
|
|
|
|
"github.com/go-chi/chi/v5"
|
|
"github.com/go-chi/chi/v5/middleware"
|
|
|
|
"pipu/api/internal/api/gen"
|
|
"pipu/api/internal/platform/httpx"
|
|
"pipu/api/internal/system"
|
|
)
|
|
|
|
// Deps — модули, реализующие части контракта API.
|
|
type Deps struct {
|
|
Log *slog.Logger
|
|
System *system.Handler
|
|
}
|
|
|
|
// handlers объединяет модули в единую реализацию gen.StrictServerInterface.
|
|
// По мере появления модулей (auth, catalog, ...) они встраиваются сюда.
|
|
type handlers struct {
|
|
*system.Handler
|
|
}
|
|
|
|
var _ gen.StrictServerInterface = handlers{}
|
|
|
|
// NewRouter возвращает корневой http.Handler.
|
|
func NewRouter(d Deps) http.Handler {
|
|
log := d.Log
|
|
if log == nil {
|
|
log = slog.New(slog.DiscardHandler)
|
|
}
|
|
|
|
r := chi.NewRouter()
|
|
r.Use(middleware.RequestID, httpx.RealIP, httpx.AccessLog(log), middleware.Recoverer)
|
|
r.NotFound(httpx.NotFound)
|
|
r.MethodNotAllowed(httpx.MethodNotAllowed)
|
|
|
|
strict := gen.NewStrictHandlerWithOptions(handlers{Handler: d.System}, nil, gen.StrictHTTPServerOptions{
|
|
RequestErrorHandlerFunc: httpx.RequestError,
|
|
ResponseErrorHandlerFunc: httpx.ResponseError(log),
|
|
})
|
|
return gen.HandlerWithOptions(strict, gen.ChiServerOptions{BaseRouter: r})
|
|
}
|