mirror of
https://github.com/Rain-kl/OpenFlare.git
synced 2026-10-01 06:36:38 +08:00
ryan
49d32d0b25
Unify OpenFlare console auth to user.IsAdmin and token_admin instead of the legacy Admin/Root role tiers. Route groups now use apiutil.AdminMiddlewares (LoginRequired + LoginAdminRequired) so admin checks cannot be skipped. Add middleware tests and extend integration coverage for 401/404/400 responses.
17 lines
612 B
Go
17 lines
612 B
Go
// Copyright 2026 Arctel.net
|
|
// SPDX-License-Identifier: Apache-2.0
|
|
|
|
package apiutil
|
|
|
|
import (
|
|
"github.com/Rain-kl/Wavelet/internal/apps/admin"
|
|
"github.com/Rain-kl/Wavelet/internal/apps/oauth"
|
|
"github.com/gin-gonic/gin"
|
|
)
|
|
|
|
// AdminMiddlewares returns Wavelet-standard middlewares for OpenFlare console routes.
|
|
// OpenFlare no longer distinguishes Admin vs Root tiers; all management endpoints share
|
|
// the same gate: user.IsAdmin for session users, token_admin for Access Token callers.
|
|
func AdminMiddlewares() []gin.HandlerFunc {
|
|
return []gin.HandlerFunc{oauth.LoginRequired(), admin.LoginAdminRequired()}
|
|
} |