mirror of
https://github.com/Rain-kl/OpenFlare.git
synced 2026-09-29 14:06:36 +08:00
ryan
e0f2309520
- implement route whitelist registration and wildcard matching in RouterExtension - add cookie store session fallback when Redis is disabled in driver_http - actively register public auth endpoints to whitelist in auth plugin - update user handlers to persist session and clear cookie on logout - document router whitelist mechanism in AGENTS.md and new-api skill
104 lines
2.5 KiB
Go
104 lines
2.5 KiB
Go
// Copyright 2026 Arctel.net
|
|
// SPDX-License-Identifier: Apache-2.0
|
|
|
|
package driver_http
|
|
|
|
import (
|
|
"log"
|
|
"net/http"
|
|
"strconv"
|
|
|
|
"github.com/gin-contrib/sessions"
|
|
"github.com/gin-contrib/sessions/cookie"
|
|
"github.com/gin-contrib/sessions/redis"
|
|
"github.com/gin-gonic/gin"
|
|
"go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin"
|
|
)
|
|
|
|
// BuildEngine 构建并初始化 Gin 路由引擎及全部中间件和路由
|
|
func BuildEngine() (*gin.Engine, error) {
|
|
return BuildEngineWithConfig(httpAppConfig{}, httpRedisConfig{})
|
|
}
|
|
|
|
// BuildEngineWithConfig constructs the Gin engine with explicitly injected configuration.
|
|
func BuildEngineWithConfig(appCfg httpAppConfig, redisCfg httpRedisConfig) (*gin.Engine, error) {
|
|
// 运行模式
|
|
if appCfg.Env == "production" || appCfg.Env == "prod" {
|
|
gin.SetMode(gin.ReleaseMode)
|
|
}
|
|
|
|
setAPIPrefix(appCfg.APIPrefix)
|
|
|
|
// 初始化路由
|
|
r := gin.New()
|
|
r.Use(gin.Recovery())
|
|
r.Use(corsMiddleware())
|
|
|
|
sessionSecret := appCfg.SessionSecret
|
|
if sessionSecret == "" {
|
|
sessionSecret = "wavelet-default-session-secret"
|
|
}
|
|
|
|
sessionStore := initSessionStore(sessionSecret, redisCfg)
|
|
|
|
sessionCookieName := appCfg.SessionCookieName
|
|
if sessionCookieName == "" {
|
|
sessionCookieName = "wavelet_session"
|
|
}
|
|
|
|
sessionAge := appCfg.SessionAge
|
|
if sessionAge <= 0 {
|
|
sessionAge = 86400
|
|
}
|
|
|
|
sessionStore.Options(sessions.Options{
|
|
Path: "/",
|
|
Domain: appCfg.SessionDomain,
|
|
MaxAge: sessionAge,
|
|
HttpOnly: appCfg.SessionHTTPOnly,
|
|
Secure: appCfg.SessionSecure,
|
|
SameSite: http.SameSiteLaxMode,
|
|
})
|
|
|
|
r.Use(sessions.Sessions(sessionCookieName, sessionStore))
|
|
|
|
appName := appCfg.AppName
|
|
if appName == "" {
|
|
appName = "Wavelet"
|
|
}
|
|
|
|
// 补充中间件
|
|
r.Use(otelgin.Middleware(appName), errorHandlerMiddleware(), loggerMiddleware())
|
|
|
|
return r, nil
|
|
}
|
|
|
|
func initSessionStore(sessionSecret string, redisCfg httpRedisConfig) sessions.Store {
|
|
if !redisCfg.Enabled || len(redisCfg.Addrs) == 0 {
|
|
return cookie.NewStore([]byte(sessionSecret))
|
|
}
|
|
|
|
sessionAddr := redisCfg.Addrs[0]
|
|
store, err := redis.NewStoreWithDB(
|
|
redisCfg.MinIdleConn,
|
|
"tcp",
|
|
sessionAddr,
|
|
redisCfg.Username,
|
|
redisCfg.Password,
|
|
strconv.Itoa(redisCfg.DB),
|
|
[]byte(sessionSecret),
|
|
)
|
|
if err != nil {
|
|
log.Printf("[driver_http] init redis session store failed, fallback to cookie store: %v\n", err)
|
|
return cookie.NewStore([]byte(sessionSecret))
|
|
}
|
|
|
|
if redisCfg.KeyPrefix != "" {
|
|
if err := redis.SetKeyPrefix(store, redisCfg.KeyPrefix+"session:"); err != nil {
|
|
log.Printf("[API] set session key prefix failed: %v\n", err)
|
|
}
|
|
}
|
|
|
|
return store
|
|
}
|