// Package handler wires the HTTP routes to the service container. // // All routes are mounted under /api/* (matching the original MediaStation // surface) so the frontend dev-server can proxy a single prefix. package handler import ( "github.com/gin-gonic/gin" "go.uber.org/zap" "github.com/ShukeBta/MediaStationGo/internal/config" "github.com/ShukeBta/MediaStationGo/internal/middleware" "github.com/ShukeBta/MediaStationGo/internal/service" ) // Register attaches every API route to the engine. func Register(r *gin.Engine, cfg *config.Config, log *zap.Logger, svc *service.Container) { api := r.Group("/api") { api.GET("/health", healthCheck) api.GET("/version", versionInfo) // Public auth. auth := api.Group("/auth") { auth.POST("/login", loginHandler(svc)) auth.POST("/register", registerHandler(svc)) // /auth/refresh 用 RefreshHandler.RefreshToken:它从 body 读 // refresh_token 并签发新 access/refresh 对。旧的 refreshHandler // 依赖 AuthRequired 中间件,永远 401,因此弃用。 refreshHd := NewRefreshHandler(svc, log) auth.POST("/refresh", refreshHd.RefreshToken) } // Authenticated endpoints. authed := api.Group("/") authed.Use(middleware.AuthRequired(cfg.Secrets.JWTSecret)) { authed.GET("/me", meHandler(svc)) authed.PATCH("/me", updateProfileHandler(svc)) authed.POST("/me/password", changePasswordHandler(svc)) authed.POST("/me/logout", logoutHandler(svc)) // Permissions. authed.GET("/auth/permissions", getMyPermissionsHandler(svc)) // Libraries. authed.GET("/libraries", listLibrariesHandler(svc)) authed.POST("/libraries", middleware.AdminRequired(), createLibraryHandler(svc)) authed.DELETE("/libraries/:id", middleware.AdminRequired(), deleteLibraryHandler(svc)) authed.POST("/libraries/:id/scan", middleware.AdminRequired(), scanLibraryHandler(svc)) authed.POST("/libraries/:id/scrape", middleware.AdminRequired(), scrapeLibraryHandler(svc)) authed.GET("/libraries/:id/media", listMediaHandler(svc)) authed.GET("/libraries/:id/seasons", listSeasonsHandler(svc)) // Media. authed.GET("/media/:id", getMediaHandler(svc)) authed.GET("/media", searchMediaHandler(svc)) authed.POST("/media/:id/scrape", middleware.AdminRequired(), scrapeOneHandler(svc)) authed.POST("/media/:id/probe", middleware.AdminRequired(), reprobeHandler(svc)) authed.DELETE("/media/:id", middleware.AdminRequired(), deleteMediaHandler(svc)) authed.POST("/media/:id/restore", middleware.AdminRequired(), restoreMediaHandler(svc)) authed.DELETE("/media/:id/purge", middleware.AdminRequired(), purgeMediaHandler(svc)) authed.GET("/media/:id/subtitles", listSubtitlesHandler(svc)) authed.GET("/subtitles/:id", serveSubtitleHandler(svc)) authed.POST("/media/:id/nfo", middleware.AdminRequired(), exportNFOHandler(svc)) authed.POST("/libraries/:id/nfo", middleware.AdminRequired(), exportLibraryNFOHandler(svc)) // Streaming. authed.GET("/stream/:id", streamHandler(svc)) authed.GET("/hls/:id/index.m3u8", hlsPlaylistHandler(svc)) authed.GET("/hls/:id/:seg", hlsSegmentHandler(svc)) authed.DELETE("/hls/:id", stopTranscodeHandler(svc)) // Image proxy (URL passed as ?url=...). authed.GET("/img", imageProxyHandler(svc)) // History / favourites / playlists. authed.GET("/history", recentHistoryHandler(svc)) authed.POST("/history", recordProgressHandler(svc)) authed.GET("/favourites", listFavouritesHandler(svc)) authed.POST("/favourites/:id", toggleFavouriteHandler(svc)) authed.GET("/playlists", listPlaylistsHandler(svc)) authed.POST("/playlists", createPlaylistHandler(svc)) authed.GET("/playlists/:id", getPlaylistHandler(svc)) authed.POST("/playlists/:id/items", addPlaylistItemHandler(svc)) authed.DELETE("/playlists/:id/items/:media_id", removePlaylistItemHandler(svc)) authed.DELETE("/playlists/:id", deletePlaylistHandler(svc)) // Downloads. authed.GET("/downloads", listDownloadsHandler(svc)) authed.POST("/downloads", addDownloadHandler(svc)) authed.DELETE("/downloads/:hash", middleware.AdminRequired(), deleteDownloadHandler(svc)) authed.POST("/downloads/reload", middleware.AdminRequired(), reloadDownloadConfigHandler(svc)) // Subscriptions. authed.GET("/subscriptions", listSubscriptionsHandler(svc)) authed.POST("/subscriptions", createSubscriptionHandler(svc)) authed.DELETE("/subscriptions/:id", deleteSubscriptionHandler(svc)) authed.POST("/subscriptions/:id/run", runSubscriptionHandler(svc)) // Stats / dashboard. authed.GET("/stats", statsHandler(svc)) authed.GET("/tasks", tasksHandler(svc)) // Discover (TMDb trending / popular). authed.GET("/discover/trending", trendingHandler(svc)) authed.GET("/discover/popular", popularHandler(svc)) // AI. authed.GET("/ai/status", aiStatusHandler(svc)) authed.POST("/ai/search", smartSearchHandler(svc)) authed.GET("/ai/recommend", aiRecommendHandler(svc)) // File browser (used by the library-path picker). authed.GET("/files", browseFilesHandler(svc)) // Disk usage breakdown. authed.GET("/storage", storageHandler(svc)) // DLNA discovery + cast. authed.GET("/dlna/devices", dlnaListHandler(svc)) authed.POST("/dlna/cast", dlnaCastHandler(svc)) // STRM (URL-as-file). authed.PUT("/media/:id/strm", middleware.AdminRequired(), setSTRMHandler(svc)) authed.DELETE("/media/:id/strm", middleware.AdminRequired(), clearSTRMHandler(svc)) authed.POST("/strm/import", middleware.AdminRequired(), importSTRMHandler(svc)) // Duplicate finder. authed.POST("/duplicates/scan", middleware.AdminRequired(), detectDuplicatesHandler(svc)) authed.POST("/duplicates/unmark", middleware.AdminRequired(), unmarkDuplicatesHandler(svc)) // Site management + cross-site torrent search (via SiteHandler). siteHandler := NewSiteHandler(svc) authed.GET("/sites", siteHandler.ListSites) authed.GET("/sites/types", siteHandler.GetSiteTypes) authed.GET("/sites/auth-types", siteHandler.GetAuthTypes) authed.POST("/sites", middleware.AdminRequired(), siteHandler.CreateSite) authed.GET("/sites/:id", siteHandler.GetSite) authed.PUT("/sites/:id", middleware.AdminRequired(), siteHandler.UpdateSite) authed.DELETE("/sites/:id", middleware.AdminRequired(), siteHandler.DeleteSite) authed.POST("/sites/:id/test", middleware.AdminRequired(), siteHandler.TestSite) authed.GET("/sites/search", siteSearchHandler(svc)) // Recycle bin. authed.GET("/recycle", middleware.AdminRequired(), listRecycleHandler(svc)) authed.GET("/ws", wsHandler(svc)) // SSE event stream. authed.GET("/events", sseHandler(svc)) // Scheduler. authed.GET("/scheduler/tasks", schedulerListTasksHandler(svc)) authed.POST("/scheduler/tasks/:id/run", middleware.AdminRequired(), schedulerRunTaskHandler(svc)) authed.GET("/scheduler/status", schedulerGetStatusHandler(svc)) // ── Auxiliary endpoints used by the React UI rails ── authed.GET("/media/recent", recentMediaHandler(svc)) authed.GET("/media/stats", mediaStatsHandler(svc)) // Watch history (extra surface beyond /history). authed.GET("/watch-history", historyListHandler(svc)) authed.GET("/watch-history/stats", historyStatsHandler(svc)) authed.GET("/watch-history/continue", historyContinueHandler(svc)) authed.DELETE("/watch-history", historyDeleteHandler(svc)) authed.DELETE("/watch-history/:id", historyDeleteOneHandler(svc)) // Multi-section TMDb feed used by DiscoverPage. authed.GET("/discover/sections", discoverSectionsHandler(svc)) authed.GET("/discover/feed", discoverFeedHandler(svc)) // System metadata + read-only scheduler view. authed.GET("/system/info", systemInfoHandler(svc)) authed.GET("/system/status", systemStatusHandler(svc)) authed.GET("/system/scheduler", systemSchedulerHandler(svc)) // Richer dashboard rails. authed.GET("/stats/overview", statsOverviewHandler(svc)) authed.GET("/stats/trend", statsTrendHandler(svc)) authed.GET("/stats/top-content", statsTopContentHandler(svc)) authed.GET("/stats/libraries", statsLibrariesHandler(svc)) authed.GET("/stats/monitor", statsMonitorHandler(svc)) // Multi-persona play profiles (caller-scoped, admins via ?all=true). authed.GET("/play-profiles", listPlayProfilesHandler(svc)) authed.POST("/play-profiles", createPlayProfileHandler(svc)) authed.PUT("/play-profiles/:id", updatePlayProfileHandler(svc)) authed.DELETE("/play-profiles/:id", deletePlayProfileHandler(svc)) // ── Search aliases ── authed.GET("/search", searchUnifiedHandler(svc)) authed.GET("/search/advanced", searchAdvancedHandler(svc)) authed.GET("/search/tmdb", searchTMDbHandler(svc)) authed.GET("/search/sites", searchSitesHandler(svc)) // ── System extras ── authed.GET("/system/config", listSystemConfigHandler(svc)) authed.GET("/settings/schema", schemaHandler(svc)) authed.GET("/system/events/ticket", systemEventsTicketHandler(svc)) // ── Per-user stats ── authed.GET("/stats/user/:id", statsUserHandler(svc)) authed.GET("/stats/top-users", statsTopUsersHandler(svc)) authed.POST("/stats/play", statsPlayHandler(svc)) // ── Sites extras ── authed.GET("/sites/:id/resource", siteResourceHandler(svc)) authed.GET("/sites/:id/userdata", siteUserdataHandler(svc)) // ── Subscription extras ── authed.PUT("/subscriptions/:id", updateSubscriptionHandler(svc)) authed.POST("/subscriptions/:id/search", searchSubscriptionHandler(svc)) // ── Playlist extras ── authed.POST("/playlists/:id/reorder", reorderPlaylistHandler(svc)) authed.DELETE("/playlists/:id/items/by-id/:item_id", deletePlaylistItemByIDHandler(svc)) // ── DLNA per-renderer control ── authed.POST("/dlna/:uuid/play", dlnaPlayHandler(svc)) authed.POST("/dlna/:uuid/pause", dlnaPauseHandler(svc)) authed.POST("/dlna/:uuid/stop", dlnaStopHandler(svc)) authed.GET("/dlna/:uuid/status", dlnaStatusHandler(svc)) // ── Media favourite alias surface ── authed.GET("/favorites", listFavoritesAliasHandler(svc)) authed.POST("/media/:id/favorite", addMediaFavoriteHandler(svc)) authed.DELETE("/media/:id/favorite", removeMediaFavoriteHandler(svc)) authed.GET("/media/:id/favorite/status", getMediaFavoriteStatusHandler(svc)) authed.POST("/media/:id/ai-scrape", aiScrapeMediaHandler(svc)) authed.POST("/media/scrape/test", scrapeTestHandler(svc)) authed.POST("/media/organize", middleware.AdminRequired(), organizeBulkHandler(svc)) // ── Playback metadata + external player handoff ── authed.GET("/playback/:id/info", playbackInfoHandler(svc)) authed.POST("/playback/:id/progress", playbackProgressHandler(svc)) authed.GET("/playback/:id/external-players", externalPlayersHandler(svc)) authed.GET("/playback/:id/external-url", externalURLHandler(svc)) authed.GET("/playback/transcode/:job_id/status", transcodeStatusHandler(svc)) // ── Download task ops + sync triggers ── authed.POST("/download/:id/pause", downloadPauseHandler(svc)) authed.POST("/download/:id/resume", downloadResumeHandler(svc)) authed.POST("/download/:id/organize", middleware.AdminRequired(), downloadOrganizeOneHandler(svc)) authed.POST("/download/organize", middleware.AdminRequired(), downloadOrganizeAllHandler(svc)) authed.POST("/download/sync", middleware.AdminRequired(), downloadSyncHandler(svc)) authed.POST("/download/start-auto-sync", middleware.AdminRequired(), downloadAutoSyncHandler(svc)) authed.GET("/download/tasks", downloadTasksAliasHandler(svc)) // ── Assistant (multi-turn AI chat) ── authed.GET("/admin/assistant/sessions", listAssistantSessionsHandler(svc)) authed.POST("/admin/assistant/sessions", createAssistantSessionHandler(svc)) authed.GET("/admin/assistant/session/:id", getAssistantSessionHandler(svc)) authed.DELETE("/admin/assistant/session/:id", deleteAssistantSessionHandler(svc)) authed.POST("/admin/assistant/chat", assistantChatHandler(svc)) authed.POST("/admin/assistant/execute", assistantExecuteHandler(svc)) authed.POST("/admin/assistant/undo/:op_id", assistantUndoHandler(svc)) authed.GET("/admin/assistant/history", assistantHistoryHandler(svc)) } // Admin-only endpoints. admin := api.Group("/admin") admin.Use(middleware.AuthRequired(cfg.Secrets.JWTSecret), middleware.AdminRequired()) { admin.GET("/users", listUsersHandler(svc)) admin.PATCH("/users/:id/role", adminUpdateRoleHandler(svc)) admin.DELETE("/users/:id", deleteUserHandler(svc)) admin.GET("/settings", listSettingsHandler(svc)) admin.PUT("/settings", updateSettingHandler(svc)) admin.GET("/logs", recentLogsHandler(svc)) // Permissions admin. admin.GET("/users/:id/permissions", getUserPermissionsHandler(svc)) admin.PUT("/users/:id/permissions", updateUserPermissionsHandler(svc)) admin.POST("/users/:id/permissions/reset", resetUserPermissionsHandler(svc)) // Storage configs (Alist / S3 / WebDAV). admin.GET("/storage/status", listStorageConfigsHandler(svc)) admin.GET("/storage/:type", getStorageConfigHandler(svc)) admin.PUT("/storage/:type", saveStorageConfigHandler(svc)) admin.POST("/storage/:type/test", testStorageConfigHandler(svc)) // Download client CRUD. admin.GET("/download/clients", listDownloadClientsHandler(svc)) admin.POST("/download/clients", createDownloadClientHandler(svc)) admin.PUT("/download/clients/:id", updateDownloadClientHandler(svc)) admin.DELETE("/download/clients/:id", deleteDownloadClientHandler(svc)) admin.POST("/download/clients/:id/test", testDownloadClientHandler(svc)) admin.GET("/download/aria2/stats", aria2StatsHandler(svc)) // System scheduler trigger alias. admin.POST("/system/scheduler/:name/trigger", schedulerTriggerHandler(svc)) // Database backup. admin.GET("/backups", listBackupsHandler(svc)) admin.POST("/backups", createBackupHandler(svc)) admin.DELETE("/backups", deleteBackupHandler(svc)) admin.POST("/backups/restore", restoreBackupHandler(svc)) // Notifications (test endpoint). admin.POST("/notify/test", notifyTestHandler(svc)) // Notify channels CRUD + per-channel test. admin.GET("/notify/channels", listNotifyChannelsHandler(svc)) admin.POST("/notify/channels", createNotifyChannelHandler(svc)) admin.PUT("/notify/channels/:id", updateNotifyChannelHandler(svc)) admin.DELETE("/notify/channels/:id", deleteNotifyChannelHandler(svc)) admin.POST("/notify/channels/:id/test", testNotifyChannelHandler(svc)) // File organizer. admin.POST("/media/:id/organize", organizeMediaHandler(svc)) admin.POST("/libraries/:id/organize", organizeLibraryHandler(svc)) // API key management (encrypted at rest). admin.GET("/api-configs", listAPIConfigsHandler(svc)) admin.GET("/api-configs/:provider", getAPIConfigHandler(svc)) admin.PUT("/api-configs/:provider", updateAPIConfigHandler(svc)) admin.DELETE("/api-configs/:provider", deleteAPIConfigHandler(svc)) // Scheduled jobs. admin.GET("/scheduler", schedulerStatusHandler(svc)) admin.POST("/scheduler/:name/run", schedulerRunHandler(svc)) } // API Config management (admin only). apiConfig := api.Group("/api-config") apiConfig.Use(middleware.AuthRequired(cfg.Secrets.JWTSecret), middleware.AdminRequired()) { apiConfig.GET("", listApiConfigsHandler(svc)) apiConfig.GET("/providers/list", listProvidersHandler(svc)) apiConfig.GET("/:provider", getApiConfigHandler(svc)) apiConfig.GET("/:provider/effective", getEffectiveConfigHandler(svc)) apiConfig.POST("/:provider", upsertApiConfigHandler(svc)) apiConfig.DELETE("/:provider", deleteApiConfigHandler(svc)) apiConfig.POST("/:provider/test", testApiConfigHandler(svc)) } // Emby/Jellyfin compatibility shim — routes mounted at /emby/* AND // the root path so Infuse / Yamby / Hills / Senplayer 都能自动连接。 } registerEmbyRoutes(r, cfg.Secrets.JWTSecret, svc) } func healthCheck(c *gin.Context) { c.JSON(200, gin.H{"status": "ok"}) } func versionInfo(c *gin.Context) { c.JSON(200, gin.H{"name": "MediaStationGo", "version": "0.1.0"}) } // ─── 权限 Handler 包装 ──────────────────────────────────────────────────────── func getMyPermissionsHandler(svc *service.Container) gin.HandlerFunc { h := NewPermissionHandler(svc, svc.Log) return h.GetMyPermissions } // ─── API Config Handler 包装 ─────────────────────────────────────────────────── func listApiConfigsHandler(svc *service.Container) gin.HandlerFunc { h := NewApiConfigHandler(svc, svc.Log) return h.ListApiConfigs } func listProvidersHandler(svc *service.Container) gin.HandlerFunc { h := NewApiConfigHandler(svc, svc.Log) return h.ListProviders } func getApiConfigHandler(svc *service.Container) gin.HandlerFunc { h := NewApiConfigHandler(svc, svc.Log) return h.GetApiConfig } func getEffectiveConfigHandler(svc *service.Container) gin.HandlerFunc { h := NewApiConfigHandler(svc, svc.Log) return h.GetEffectiveConfig } func upsertApiConfigHandler(svc *service.Container) gin.HandlerFunc { h := NewApiConfigHandler(svc, svc.Log) return h.UpsertApiConfig } func deleteApiConfigHandler(svc *service.Container) gin.HandlerFunc { h := NewApiConfigHandler(svc, svc.Log) return h.DeleteApiConfig } func testApiConfigHandler(svc *service.Container) gin.HandlerFunc { h := NewApiConfigHandler(svc, svc.Log) return h.TestApiConfig } // ─── Download Client Handler 包装 ───────────────────────────────────────────── func getDownloadClientHandler(svc *service.Container) gin.HandlerFunc { h := NewDownloadClientHandler(svc, svc.Log) return h.Get } // ─── Notify Channel Handler 包装 ────────────────────────────────────────────── func getNotifyChannelTypesHandler(svc *service.Container) gin.HandlerFunc { h := NewNotifyHandler(svc, svc.Log) return h.GetTypes } func getNotifyChannelHandler(svc *service.Container) gin.HandlerFunc { h := NewNotifyHandler(svc, svc.Log) return h.Get } // ─── Scheduler Handler 包装 ────────────────────────────────────────────────── func schedulerListTasksHandler(svc *service.Container) gin.HandlerFunc { h := NewSchedulerHandler(svc, svc.Log) return h.ListTasks } func schedulerRunTaskHandler(svc *service.Container) gin.HandlerFunc { h := NewSchedulerHandler(svc, svc.Log) return h.RunTask } func schedulerGetStatusHandler(svc *service.Container) gin.HandlerFunc { h := NewSchedulerHandler(svc, svc.Log) return h.GetStatus } // ─── SSE Handler ────────────────────────────────────────────────────────────── func sseHandler(svc *service.Container) gin.HandlerFunc { return func(c *gin.Context) { // 获取 SSE Hub hub := svc.SSEHub // 设置 SSE 响应头 c.Header("Content-Type", "text/event-stream") c.Header("Cache-Control", "no-cache") c.Header("Connection", "keep-alive") c.Header("X-Accel-Buffering", "no") // 订阅事件流 client := hub.Subscribe() defer hub.Unsubscribe(client) // 发送初始连接成功事件 c.SSEvent("connected", gin.H{"status": "ok"}) c.Writer.Flush() // 持续发送事件直到客户端断开连接 clientGone := c.Request.Context().Done() for { select { case <-clientGone: return case event, ok := <-client.Ch: if !ok { return } c.SSEvent(event.Type, event.Payload) c.Writer.Flush() } } } }