mrleo1nidandClaude Opus 5.5
ed4a492dba
ci / contract / contract (сгенерированный код совпадает с openapi.yaml) (push) Successful in 1m15s
ci / api / api (push) Successful in 1m31s
ci / mobile / mobile (Metro-бандл Android) (push) Successful in 47s
ci / ts / ts (packages + web) (push) Successful in 39s
ci / docker / docker (образы собираются — их сервер собирает сам при обновлении) (push) Successful in 26s
- users, refresh_tokens and audit_log schema (migration 00002) - argon2id passwords with rehash on login, password policy, lockout with exponential back-off and a per-IP rate limit in Redis - Ed25519 JWT access tokens with kid-based key rotation; rotating refresh tokens with reuse detection (cookie for web, body for Android) - bootstrap admin on first start; must_change_credentials and must_change_password gate every other endpoint - /auth/login, /auth/refresh, /auth/logout(-all), /me, /me/password, /me/bootstrap-credentials, /me/sessions; server-info reports bootstrap_required - role policy from docs/auth-and-roles.md with table tests - problem+json errors with field errors; ru/en translations of the codes - install.sh and update.sh generate JWT_PRIVATE_KEY Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
62 lines
1.9 KiB
Go
62 lines
1.9 KiB
Go
// Package server собирает HTTP-роутер сервиса api из модулей.
|
|
package server
|
|
|
|
import (
|
|
"log/slog"
|
|
"net/http"
|
|
|
|
"github.com/go-chi/chi/v5"
|
|
"github.com/go-chi/chi/v5/middleware"
|
|
|
|
"pipu/api/internal/api/gen"
|
|
"pipu/api/internal/auth"
|
|
"pipu/api/internal/platform/httpx"
|
|
"pipu/api/internal/system"
|
|
)
|
|
|
|
// Deps — модули, реализующие части контракта API.
|
|
type Deps struct {
|
|
Log *slog.Logger
|
|
System *system.Handler
|
|
Auth *auth.Handler
|
|
// AuthService проверяет access-токены в middleware. nil — только для тестов служебных эндпоинтов.
|
|
AuthService *auth.Service
|
|
}
|
|
|
|
// handlers объединяет модули в единую реализацию gen.StrictServerInterface.
|
|
// По мере появления модулей (catalog, ...) они встраиваются сюда.
|
|
// Алиасы дают встроенным полям разные имена: у модулей одинаковое имя типа Handler.
|
|
type (
|
|
systemHandler = system.Handler
|
|
authHandler = auth.Handler
|
|
)
|
|
|
|
type handlers struct {
|
|
*systemHandler
|
|
*authHandler
|
|
}
|
|
|
|
var _ gen.StrictServerInterface = handlers{}
|
|
|
|
// NewRouter возвращает корневой http.Handler.
|
|
func NewRouter(d Deps) http.Handler {
|
|
log := d.Log
|
|
if log == nil {
|
|
log = slog.New(slog.DiscardHandler)
|
|
}
|
|
|
|
r := chi.NewRouter()
|
|
r.Use(middleware.RequestID, httpx.RealIP, httpx.AccessLog(log), middleware.Recoverer)
|
|
if d.AuthService != nil {
|
|
r.Use(auth.Middleware(d.AuthService, log))
|
|
}
|
|
r.NotFound(httpx.NotFound)
|
|
r.MethodNotAllowed(httpx.MethodNotAllowed)
|
|
|
|
strict := gen.NewStrictHandlerWithOptions(handlers{systemHandler: d.System, authHandler: d.Auth}, nil, gen.StrictHTTPServerOptions{
|
|
RequestErrorHandlerFunc: httpx.RequestError,
|
|
ResponseErrorHandlerFunc: httpx.ResponseError(log),
|
|
})
|
|
return gen.HandlerWithOptions(strict, gen.ChiServerOptions{BaseRouter: r})
|
|
}
|