mirror of
https://github.com/Rain-kl/OpenFlare.git
synced 2026-10-11 09:46:37 +08:00
ryan
49d32d0b25
Unify OpenFlare console auth to user.IsAdmin and token_admin instead of the legacy Admin/Root role tiers. Route groups now use apiutil.AdminMiddlewares (LoginRequired + LoginAdminRequired) so admin checks cannot be skipped. Add middleware tests and extend integration coverage for 401/404/400 responses.
54 lines
2.3 KiB
Go
54 lines
2.3 KiB
Go
// Copyright 2026 Arctel.net
|
|
// SPDX-License-Identifier: Apache-2.0
|
|
|
|
package openflare
|
|
|
|
import (
|
|
"github.com/Rain-kl/Wavelet/internal/apps/openflare/apiutil"
|
|
"github.com/Rain-kl/Wavelet/internal/apps/openflare/tls"
|
|
"github.com/gin-gonic/gin"
|
|
)
|
|
|
|
func registerTLSRoutes(apiGroup *gin.RouterGroup) {
|
|
managedDomainRoute := apiGroup.Group("/managed-domains")
|
|
managedDomainRoute.Use(apiutil.AdminMiddlewares()...)
|
|
{
|
|
apiutil.RegisterCollection(managedDomainRoute, "GET", tls.GetManagedDomains)
|
|
managedDomainRoute.GET("/match", tls.MatchManagedDomainCertificateHandler)
|
|
apiutil.RegisterCollection(managedDomainRoute, "POST", tls.CreateManagedDomainHandler)
|
|
managedDomainRoute.POST("/:id/update", tls.UpdateManagedDomainHandler)
|
|
managedDomainRoute.POST("/:id/delete", tls.DeleteManagedDomainHandler)
|
|
}
|
|
|
|
tlsCertificateRoute := apiGroup.Group("/tls-certificates")
|
|
tlsCertificateRoute.Use(apiutil.AdminMiddlewares()...)
|
|
{
|
|
apiutil.RegisterCollection(tlsCertificateRoute, "GET", tls.GetCertificates)
|
|
tlsCertificateRoute.GET("/:id", tls.GetCertificateDetail)
|
|
tlsCertificateRoute.GET("/:id/content", tls.GetCertificateContentHandler)
|
|
apiutil.RegisterCollection(tlsCertificateRoute, "POST", tls.CreateCertificateHandler)
|
|
tlsCertificateRoute.POST("/:id/update", tls.UpdateCertificateHandler)
|
|
tlsCertificateRoute.POST("/:id/update-acme", tls.UpdateACMECertificateHandler)
|
|
tlsCertificateRoute.POST("/:id/convert-acme", tls.ConvertCertificateToACMEHandler)
|
|
tlsCertificateRoute.POST("/import-file", tls.ImportCertificateFile)
|
|
tlsCertificateRoute.POST("/:id/delete", tls.DeleteCertificateHandler)
|
|
tlsCertificateRoute.POST("/apply", tls.ApplyCertificateHandler)
|
|
tlsCertificateRoute.POST("/:id/renew", tls.RenewCertificateHandler)
|
|
}
|
|
|
|
acmeAccountRoute := apiGroup.Group("/acme-accounts")
|
|
acmeAccountRoute.Use(apiutil.AdminMiddlewares()...)
|
|
{
|
|
acmeAccountRoute.GET("/default", tls.GetDefaultAcmeAccountHandler)
|
|
}
|
|
|
|
dnsAccountRoute := apiGroup.Group("/dns-accounts")
|
|
dnsAccountRoute.Use(apiutil.AdminMiddlewares()...)
|
|
{
|
|
apiutil.RegisterCollection(dnsAccountRoute, "GET", tls.GetDNSAccounts)
|
|
apiutil.RegisterCollection(dnsAccountRoute, "POST", tls.CreateDNSAccountHandler)
|
|
dnsAccountRoute.POST("/:id/update", tls.UpdateDNSAccountHandler)
|
|
dnsAccountRoute.POST("/:id/delete", tls.DeleteDNSAccountHandler)
|
|
}
|
|
}
|