mirror of
https://github.com/truewhile/MeBox.git
synced 2026-09-29 11:36:36 +08:00
ShukeBta
263 lines
14 KiB
Go
263 lines
14 KiB
Go
// Package handler — authenticated application routes.
|
|
package handler
|
|
|
|
import (
|
|
"github.com/gin-gonic/gin"
|
|
|
|
"github.com/ShukeBta/MediaStationGo/internal/config"
|
|
"github.com/ShukeBta/MediaStationGo/internal/middleware"
|
|
"github.com/ShukeBta/MediaStationGo/internal/service"
|
|
)
|
|
|
|
func registerAuthenticatedRoutes(api *gin.RouterGroup, cfg *config.Config, svc *service.Container) {
|
|
// Authenticated endpoints.
|
|
authed := api.Group("/")
|
|
authed.Use(middleware.AuthRequired(cfg.Secrets.JWTSecret))
|
|
authed.Use(activeUserRequired(svc))
|
|
{
|
|
authed.GET("/me", meHandler(svc))
|
|
authed.PATCH("/me", updateProfileHandler(svc))
|
|
authed.POST("/me/password", changePasswordHandler(svc))
|
|
authed.POST("/me/logout", logoutHandler(svc))
|
|
|
|
// Permissions.
|
|
authed.GET("/auth/permissions", getMyPermissionsHandler(svc))
|
|
|
|
// License activation bridge (admin only; talks to MediaStationLicenseServer).
|
|
authed.GET("/license/status", middleware.AdminRequired(), licenseStatusHandler(svc))
|
|
authed.POST("/license/activate", middleware.AdminRequired(), licenseActivateHandler(svc))
|
|
authed.POST("/license/heartbeat", middleware.AdminRequired(), licenseHeartbeatHandler(svc))
|
|
|
|
// Libraries.
|
|
authed.GET("/libraries", listLibrariesHandler(svc))
|
|
authed.POST("/libraries", middleware.AdminRequired(), createLibraryHandler(svc))
|
|
authed.DELETE("/libraries/:id", middleware.AdminRequired(), deleteLibraryHandler(svc))
|
|
authed.POST("/libraries/:id/scan", middleware.AdminRequired(), scanLibraryHandler(svc))
|
|
authed.POST("/libraries/:id/scrape", middleware.AdminRequired(), scrapeLibraryHandler(svc))
|
|
|
|
authed.GET("/libraries/:id/media", listMediaHandler(svc))
|
|
authed.GET("/libraries/:id/seasons", listSeasonsHandler(svc))
|
|
|
|
// Media.
|
|
authed.GET("/media/:id", getMediaHandler(svc))
|
|
authed.GET("/media", searchMediaHandler(svc))
|
|
authed.POST("/media/:id/scrape", middleware.AdminRequired(), scrapeOneHandler(svc))
|
|
authed.POST("/media/:id/probe", middleware.AdminRequired(), reprobeHandler(svc))
|
|
authed.DELETE("/media/:id", middleware.AdminRequired(), deleteMediaHandler(svc))
|
|
authed.POST("/media/:id/restore", middleware.AdminRequired(), restoreMediaHandler(svc))
|
|
authed.DELETE("/media/:id/purge", middleware.AdminRequired(), purgeMediaHandler(svc))
|
|
authed.GET("/media/:id/subtitles", listSubtitlesHandler(svc))
|
|
authed.GET("/subtitles/:id", serveSubtitleHandler(svc))
|
|
authed.POST("/media/:id/nfo", middleware.AdminRequired(), exportNFOHandler(svc))
|
|
authed.POST("/libraries/:id/nfo", middleware.AdminRequired(), exportLibraryNFOHandler(svc))
|
|
|
|
// Streaming.
|
|
authed.GET("/stream/:id", streamHandler(svc))
|
|
authed.HEAD("/stream/:id", streamHandler(svc))
|
|
authed.GET("/hls/:id/index.m3u8", hlsPlaylistHandler(svc))
|
|
authed.GET("/hls/:id/:seg", hlsSegmentHandler(svc))
|
|
authed.DELETE("/hls/:id", stopTranscodeHandler(svc))
|
|
|
|
// Cloud-disk 302 playback redirect (resolves a fresh direct link).
|
|
authed.GET("/cloud/play/:type", cloudPlayHandler(svc))
|
|
authed.HEAD("/cloud/play/:type", cloudPlayHandler(svc))
|
|
|
|
// Image proxy (URL passed as ?url=...).
|
|
authed.GET("/img", imageProxyHandler(svc))
|
|
|
|
// History / favourites / playlists.
|
|
authed.GET("/history", recentHistoryHandler(svc))
|
|
authed.POST("/history", recordProgressHandler(svc))
|
|
|
|
authed.GET("/favourites", listFavouritesHandler(svc))
|
|
authed.POST("/favourites/:id", toggleFavouriteHandler(svc))
|
|
|
|
// Storage breakdown.
|
|
authed.GET("/storage", storageBreakdownHandler(svc))
|
|
|
|
authed.GET("/playlists", listPlaylistsHandler(svc))
|
|
authed.POST("/playlists", createPlaylistHandler(svc))
|
|
authed.GET("/playlists/:id", getPlaylistHandler(svc))
|
|
authed.POST("/playlists/:id/items", addPlaylistItemHandler(svc))
|
|
authed.DELETE("/playlists/:id/items/:media_id", removePlaylistItemHandler(svc))
|
|
authed.DELETE("/playlists/:id", deletePlaylistHandler(svc))
|
|
|
|
// Downloads.
|
|
authed.GET("/downloads", requirePermission(svc, "can_manage_downloads"), listDownloadsHandler(svc))
|
|
authed.POST("/downloads", requirePermission(svc, "can_manage_downloads"), addDownloadHandler(svc))
|
|
authed.DELETE("/downloads/:hash", requirePermission(svc, "can_manage_downloads"), deleteDownloadHandler(svc))
|
|
authed.POST("/downloads/relocate", requirePermission(svc, "can_manage_downloads"), relocateDownloadHandler(svc))
|
|
authed.POST("/downloads/reload", requirePermission(svc, "can_manage_downloads"), reloadDownloadConfigHandler(svc))
|
|
|
|
// Subscriptions.
|
|
authed.GET("/subscriptions", requirePermission(svc, "can_manage_subscriptions"), listSubscriptionsHandler(svc))
|
|
authed.POST("/subscriptions", requirePermission(svc, "can_manage_subscriptions"), createSubscriptionHandler(svc))
|
|
authed.DELETE("/subscriptions/:id", requirePermission(svc, "can_manage_subscriptions"), deleteSubscriptionHandler(svc))
|
|
authed.POST("/subscriptions/:id/run", requirePermission(svc, "can_manage_subscriptions"), runSubscriptionHandler(svc))
|
|
|
|
// Stats / dashboard.
|
|
authed.GET("/stats", statsHandler(svc))
|
|
authed.GET("/tasks", middleware.AdminRequired(), tasksHandler(svc))
|
|
|
|
// Discover (TMDb trending / popular).
|
|
authed.GET("/discover/trending", requirePermission(svc, "can_view_discover"), trendingHandler(svc))
|
|
authed.GET("/discover/popular", requirePermission(svc, "can_view_discover"), popularHandler(svc))
|
|
|
|
// AI.
|
|
authed.GET("/ai/status", requirePermission(svc, "can_use_ai"), aiStatusHandler(svc))
|
|
authed.POST("/ai/search", requirePermission(svc, "can_use_ai"), smartSearchHandler(svc))
|
|
authed.GET("/ai/recommend", requirePermission(svc, "can_use_ai"), aiRecommendHandler(svc))
|
|
|
|
// File browser (used by the library-path picker).
|
|
authed.GET("/files", middleware.AdminRequired(), browseFilesHandler(svc))
|
|
authed.POST("/files/folders", middleware.AdminRequired(), createFolderHandler(svc))
|
|
authed.PUT("/files/rename", middleware.AdminRequired(), renameFileHandler(svc))
|
|
authed.DELETE("/files", middleware.AdminRequired(), deleteFileHandler(svc))
|
|
authed.POST("/files/transfer", middleware.AdminRequired(), transferFileHandler(svc))
|
|
|
|
// DLNA discovery + cast.
|
|
authed.GET("/dlna/devices", dlnaListHandler(svc))
|
|
authed.POST("/dlna/cast", dlnaCastHandler(svc))
|
|
|
|
// STRM (URL-as-file).
|
|
authed.PUT("/media/:id/strm", middleware.AdminRequired(), setSTRMHandler(svc))
|
|
authed.DELETE("/media/:id/strm", middleware.AdminRequired(), clearSTRMHandler(svc))
|
|
authed.POST("/strm/import", middleware.AdminRequired(), importSTRMHandler(svc))
|
|
authed.POST("/strm/generate", middleware.AdminRequired(), generateSTRMHandler(svc))
|
|
|
|
// Duplicate finder.
|
|
authed.GET("/duplicates", middleware.AdminRequired(), listDuplicatesHandler(svc))
|
|
authed.POST("/duplicates/scan", middleware.AdminRequired(), detectDuplicatesHandler(svc))
|
|
authed.POST("/duplicates/unmark", middleware.AdminRequired(), unmarkDuplicatesHandler(svc))
|
|
|
|
// Site management + cross-site torrent search (via SiteHandler).
|
|
siteHandler := NewSiteHandler(svc)
|
|
authed.GET("/sites", requirePermission(svc, "can_manage_sites"), siteHandler.ListSites)
|
|
authed.GET("/sites/types", requirePermission(svc, "can_manage_sites"), siteHandler.GetSiteTypes)
|
|
authed.GET("/sites/auth-types", requirePermission(svc, "can_manage_sites"), siteHandler.GetAuthTypes)
|
|
authed.POST("/sites", requirePermission(svc, "can_manage_sites"), siteHandler.CreateSite)
|
|
authed.GET("/sites/:id", requirePermission(svc, "can_manage_sites"), siteHandler.GetSite)
|
|
authed.PUT("/sites/:id", requirePermission(svc, "can_manage_sites"), siteHandler.UpdateSite)
|
|
authed.DELETE("/sites/:id", requirePermission(svc, "can_manage_sites"), siteHandler.DeleteSite)
|
|
authed.POST("/sites/:id/test", requirePermission(svc, "can_manage_sites"), siteHandler.TestSite)
|
|
authed.GET("/sites/search", requirePermission(svc, "can_manage_sites"), siteSearchHandler(svc))
|
|
|
|
// Recycle bin.
|
|
authed.GET("/recycle", middleware.AdminRequired(), listRecycleHandler(svc))
|
|
|
|
authed.GET("/ws", wsHandler(svc))
|
|
|
|
// SSE event stream.
|
|
authed.GET("/events", sseHandler(svc))
|
|
|
|
// Scheduler.
|
|
authed.GET("/scheduler/tasks", schedulerListTasksHandler(svc))
|
|
authed.POST("/scheduler/tasks/:id/run", middleware.AdminRequired(), schedulerRunTaskHandler(svc))
|
|
authed.GET("/scheduler/status", schedulerGetStatusHandler(svc))
|
|
|
|
// ── Auxiliary endpoints used by the React UI rails ──
|
|
authed.GET("/media/recent", recentMediaHandler(svc))
|
|
authed.GET("/media/stats", mediaStatsHandler(svc))
|
|
|
|
// Watch history (extra surface beyond /history).
|
|
authed.GET("/watch-history", historyListHandler(svc))
|
|
authed.GET("/watch-history/stats", historyStatsHandler(svc))
|
|
authed.GET("/watch-history/continue", historyContinueHandler(svc))
|
|
authed.DELETE("/watch-history", historyDeleteHandler(svc))
|
|
authed.DELETE("/watch-history/:id", historyDeleteOneHandler(svc))
|
|
|
|
// Multi-section TMDb feed used by DiscoverPage.
|
|
authed.GET("/discover/sections", requirePermission(svc, "can_view_discover"), discoverSectionsHandler(svc))
|
|
authed.GET("/discover/feed", requirePermission(svc, "can_view_discover"), discoverFeedHandler(svc))
|
|
|
|
// System metadata + read-only scheduler view.
|
|
authed.GET("/system/info", systemInfoHandler(svc))
|
|
authed.GET("/system/status", systemStatusHandler(svc))
|
|
authed.GET("/system/scheduler", systemSchedulerHandler(svc))
|
|
|
|
// Richer dashboard rails.
|
|
authed.GET("/stats/overview", statsOverviewHandler(svc))
|
|
authed.GET("/stats/trend", statsTrendHandler(svc))
|
|
authed.GET("/stats/top-content", statsTopContentHandler(svc))
|
|
authed.GET("/stats/libraries", statsLibrariesHandler(svc))
|
|
authed.GET("/stats/monitor", statsMonitorHandler(svc))
|
|
|
|
// Multi-persona play profiles (caller-scoped).
|
|
authed.GET("/play-profiles", listPlayProfilesHandler(svc))
|
|
authed.POST("/play-profiles", createPlayProfileHandler(svc))
|
|
authed.PUT("/play-profiles/:id", updatePlayProfileHandler(svc))
|
|
authed.POST("/play-profiles/:id/verify-pin", verifyPlayProfilePINHandler(svc))
|
|
authed.DELETE("/play-profiles/:id", deletePlayProfileHandler(svc))
|
|
|
|
// ── Search aliases ──
|
|
authed.GET("/search", searchUnifiedHandler(svc))
|
|
authed.GET("/search/advanced", searchAdvancedHandler(svc))
|
|
authed.GET("/search/tmdb", searchTMDbHandler(svc))
|
|
authed.GET("/search/sites", searchSitesHandler(svc))
|
|
|
|
// ── System extras ──
|
|
authed.GET("/system/config", listSystemConfigHandler(svc))
|
|
authed.GET("/settings/schema", schemaHandler(svc))
|
|
authed.GET("/system/events/ticket", systemEventsTicketHandler(svc))
|
|
|
|
// ── Per-user stats ──
|
|
authed.GET("/stats/user/:id", statsUserHandler(svc))
|
|
authed.GET("/stats/top-users", statsTopUsersHandler(svc))
|
|
authed.POST("/stats/play", statsPlayHandler(svc))
|
|
|
|
// ── Sites extras ──
|
|
authed.GET("/sites/:id/resource", requirePermission(svc, "can_manage_sites"), siteResourceHandler(svc))
|
|
authed.GET("/sites/:id/userdata", requirePermission(svc, "can_manage_sites"), siteUserdataHandler(svc))
|
|
|
|
// ── Subscription extras ──
|
|
authed.PUT("/subscriptions/:id", requirePermission(svc, "can_manage_subscriptions"), updateSubscriptionHandler(svc))
|
|
authed.POST("/subscriptions/:id/search", requirePermission(svc, "can_manage_subscriptions"), searchSubscriptionHandler(svc))
|
|
|
|
// ── Playlist extras ──
|
|
authed.POST("/playlists/:id/reorder", reorderPlaylistHandler(svc))
|
|
authed.DELETE("/playlists/:id/items/by-id/:item_id", deletePlaylistItemByIDHandler(svc))
|
|
|
|
// ── DLNA per-renderer control ──
|
|
authed.POST("/dlna/:uuid/play", dlnaPlayHandler(svc))
|
|
authed.POST("/dlna/:uuid/pause", dlnaPauseHandler(svc))
|
|
authed.POST("/dlna/:uuid/stop", dlnaStopHandler(svc))
|
|
authed.GET("/dlna/:uuid/status", dlnaStatusHandler(svc))
|
|
|
|
// ── Media favourite alias surface ──
|
|
authed.GET("/favorites", listFavoritesAliasHandler(svc))
|
|
authed.POST("/media/:id/favorite", addMediaFavoriteHandler(svc))
|
|
authed.DELETE("/media/:id/favorite", removeMediaFavoriteHandler(svc))
|
|
authed.GET("/media/:id/favorite/status", getMediaFavoriteStatusHandler(svc))
|
|
authed.POST("/media/:id/ai-scrape", requirePermission(svc, "can_rescrape"), aiScrapeMediaHandler(svc))
|
|
authed.POST("/media/scrape/test", requirePermission(svc, "can_rescrape"), scrapeTestHandler(svc))
|
|
authed.POST("/media/organize", requirePermission(svc, "can_manage_files"), organizeBulkHandler(svc))
|
|
|
|
// ── Playback metadata + external player handoff ──
|
|
authed.GET("/playback/:id/info", playbackInfoHandler(svc))
|
|
authed.POST("/playback/:id/progress", playbackProgressHandler(svc))
|
|
authed.GET("/playback/:id/external-players", externalPlayersHandler(svc))
|
|
authed.GET("/playback/:id/external-url", externalURLHandler(svc))
|
|
authed.GET("/playback/transcode/:job_id/status", transcodeStatusHandler(svc))
|
|
|
|
// ── Download task ops + sync triggers ──
|
|
authed.POST("/download/:id/pause", requirePermission(svc, "can_manage_downloads"), downloadPauseHandler(svc))
|
|
authed.POST("/download/:id/resume", requirePermission(svc, "can_manage_downloads"), downloadResumeHandler(svc))
|
|
authed.POST("/download/:id/organize", requirePermission(svc, "can_manage_files"), downloadOrganizeOneHandler(svc))
|
|
authed.POST("/download/organize", requirePermission(svc, "can_manage_files"), downloadOrganizeAllHandler(svc))
|
|
authed.POST("/download/sync", requirePermission(svc, "can_manage_downloads"), downloadSyncHandler(svc))
|
|
authed.POST("/download/start-auto-sync", requirePermission(svc, "can_manage_downloads"), downloadAutoSyncHandler(svc))
|
|
authed.GET("/download/tasks", requirePermission(svc, "can_manage_downloads"), downloadTasksAliasHandler(svc))
|
|
|
|
// ── Assistant (multi-turn AI chat) ──
|
|
authed.GET("/admin/assistant/sessions", listAssistantSessionsHandler(svc))
|
|
authed.POST("/admin/assistant/sessions", createAssistantSessionHandler(svc))
|
|
authed.GET("/admin/assistant/session/:id", getAssistantSessionHandler(svc))
|
|
authed.DELETE("/admin/assistant/session/:id", deleteAssistantSessionHandler(svc))
|
|
authed.POST("/admin/assistant/chat", assistantChatHandler(svc))
|
|
authed.POST("/admin/assistant/execute", assistantExecuteHandler(svc))
|
|
authed.POST("/admin/assistant/undo/:op_id", assistantUndoHandler(svc))
|
|
authed.GET("/admin/assistant/history", assistantHistoryHandler(svc))
|
|
}
|
|
|
|
}
|