mirror of
https://github.com/Rain-kl/OpenFlare.git
synced 2026-09-30 14:26:36 +08:00
ryan
399c1bc88d
Move OpenFlare management endpoints to /api/v1/custom/openflare with Wavelet response envelopes and Abort* error handling. Keep agent, relay, and flared protocol routes on /api/* with the legacy compat format. - Add apiutil helpers and Swagger annotations for console handlers - Register all OpenFlare routes in internal/router/openflare (not apps) - Switch frontend services to OpenFlareBaseService and v1 paths - Remove dead auth/compat code and legacy-base.service.ts - Update integration tests and changelog
37 lines
1003 B
Go
37 lines
1003 B
Go
// Copyright 2026 Arctel.net
|
|
// SPDX-License-Identifier: Apache-2.0
|
|
|
|
package apiutil
|
|
|
|
import (
|
|
"github.com/Rain-kl/Wavelet/internal/apps/admin"
|
|
"github.com/Rain-kl/Wavelet/internal/apps/oauth"
|
|
"github.com/Rain-kl/Wavelet/internal/common"
|
|
"github.com/Rain-kl/Wavelet/internal/common/response"
|
|
"github.com/gin-gonic/gin"
|
|
)
|
|
|
|
// AdminRequired ensures the caller is logged in as a Wavelet administrator.
|
|
func AdminRequired() gin.HandlerFunc {
|
|
return func(c *gin.Context) {
|
|
user, err := oauth.GetUserFromRequest(c)
|
|
if err != nil {
|
|
response.AbortUnauthorized(c, common.UnAuthorized)
|
|
return
|
|
}
|
|
oauth.SetToContext(c, oauth.UserObjKey, user)
|
|
|
|
if tokenAuth, _ := oauth.GetFromContext[bool](c, oauth.TokenAuthKey); tokenAuth {
|
|
tokenAdmin, _ := oauth.GetFromContext[bool](c, oauth.TokenAdminKey)
|
|
if !tokenAdmin {
|
|
response.AbortNotFound(c, admin.TokenAdminRequired)
|
|
return
|
|
}
|
|
}
|
|
if !user.IsAdmin {
|
|
response.AbortNotFound(c, admin.AdminRequired)
|
|
return
|
|
}
|
|
c.Next()
|
|
}
|
|
} |