tcjlj/OpenFlare
1
0
Fork 0
mirror of https://github.com/Rain-kl/OpenFlare.git synced 2026-10-03 15:06:36 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix(config): serve public settings and enforce login CAP

Browse Source 
Public config now comes from admin as a flat visibility=1 map instead of
a cross-plugin query that compared an integer column to "visible". Login
and register resolve CaptchaService per request so CAP is not skipped
when user applies before cap.
This commit is contained in:
ryan
2026-09-02 17:07:07 +08:00
parent 4f50f6a8f9
commit 455e2f8be5
17 changed files with 289 additions and 94 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/plugins/domain/system/plugin.go
+26 -27
View File
@@ -9,8 +9,8 @@ import (
"Wavelet/core/contracts"
"Wavelet/pkg/logger"
"Wavelet/pkg/response"
"context"
"net/http"
"reflect"
"github.com/gin-gonic/gin"
)
@@ -28,13 +28,6 @@ func (p *Plugin) Name() string {
return "system"
}
// Inject declares required dependencies for the system domain plugin.
func (p *Plugin) Inject() []reflect.Type {
return []reflect.Type{
reflect.TypeFor[contracts.DBService](),
}
}
// Manifest returns the plugin metadata.
func (p *Plugin) Manifest() core.Manifest {
return core.Manifest{
@@ -47,37 +40,31 @@ func (p *Plugin) Manifest() core.Manifest {
// Apply registers system routes.
func (p *Plugin) Apply(ctx *core.Context) error {
appName := ctx.Config().String("app.app_name", "Wavelet")
// 1. Health check
ctx.Router().GET("/api/healthz", func(c *gin.Context) {
c.JSON(http.StatusOK, gin.H{"status": "ok"})
})
ctx.Router().RegisterWhitelist("/api/healthz")
// 2. Public config
// 2. Public config — owned data comes from PublicConfigProvider (admin).
ctx.Router().GET("/api/v1/config/public", func(c *gin.Context) {
if p, err := core.Inject[contracts.PublicConfigProvider](ctx); err == nil && p != nil {
data, err := p.PublicConfig(c.Request.Context())
if err != nil {
logger.ErrorF(c.Request.Context(), "[System] public config provider failed: %v", err)
response.AbortInternal(c, "public config unavailable")
return
}
c.JSON(http.StatusOK, response.OK(data))
provider := resolvePublicConfigProvider(c.Request.Context(), ctx)
if provider == nil {
c.JSON(http.StatusOK, response.OK(map[string]string{}))
return
}
configs, err := listPublicSystemConfigs(c.Request.Context(), ctx)
data, err := provider.PublicConfig(c.Request.Context())
if err != nil {
logger.ErrorF(c.Request.Context(), "[System] query public system configs failed: %v", err)
logger.ErrorF(c.Request.Context(), "[System] public config provider failed: %v", err)
response.AbortInternal(c, "public config unavailable")
return
}
c.JSON(http.StatusOK, response.OK(gin.H{
"configs": configs,
"app": gin.H{
"name": appName,
},
}))
if data == nil {
data = map[string]string{}
}
c.JSON(http.StatusOK, response.OK(data))
})
ctx.Router().RegisterWhitelist("/api/v1/config/public")
// 3. Custom injection
ctx.Router().GET("/custom", func(c *gin.Context) {
@@ -86,3 +73,15 @@ func (p *Plugin) Apply(ctx *core.Context) error {
return nil
}
func resolvePublicConfigProvider(reqCtx context.Context, appCtx *core.Context) contracts.PublicConfigProvider {
if p, err := core.InjectFrom[contracts.PublicConfigProvider](reqCtx); err == nil && p != nil {
return p
}
if appCtx != nil {
if p, err := core.Inject[contracts.PublicConfigProvider](appCtx); err == nil && p != nil {
return p
}
}
return nil
}