Victor_Jay
2449a27eb5
Some checks failed
CI / Lint + Build (push) Has been cancelled
审计修复: - CSP: unsafe-inline移除, nonce替代; unsafe-eval保留供Vditor使用 - HSTS: 始终启用(不再依赖release模式) - Controller Exp: common.GetGinExp包装, 不再直接读context - UID解析: common.ParseUIDParam统一, follow/admin controller改用 重构: - router/api.go(198行)拆为7个域文件: auth/settings/posts/comments/reactions/social/studio - 管理后台站点设置: 单页拆为4个子页(brand/security/registration/content)+子菜单 - 前台用户设置页: 1201行拆为6个独立模板+6个独立JS文件 新增: - DB健康检测中间件(middleware/db_health.go): 5s ping+降级页面 - 时区配置: config.yaml server.timezone→time.Local初始化 - .gitea/workflows/ci.yml: strict模式CI流水线
44 lines
1.2 KiB
Go
44 lines
1.2 KiB
Go
package router
|
|
|
|
import (
|
|
"metazone.cc/mce/internal/config"
|
|
"metazone.cc/mce/internal/middleware"
|
|
|
|
"github.com/gin-gonic/gin"
|
|
)
|
|
|
|
// setupStudioAPIRoutes 注册创作中心、域能、趋势相关 API 路由
|
|
func setupStudioAPIRoutes(r *gin.Engine, cfg *config.Config, d *dependencies) {
|
|
// 创作中心
|
|
studioAPI := r.Group("/api/studio")
|
|
studioAPI.Use(d.authMdw.Required())
|
|
studioAPI.Use(d.authMdw.BannedWriteGuard())
|
|
studioAPI.Use(middleware.CSRF(cfg))
|
|
{
|
|
studioAPI.GET("/overview", d.studioCtrl.OverviewAPI)
|
|
studioAPI.GET("/posts", d.studioCtrl.ListPostsAPI)
|
|
studioAPI.POST("/posts", d.studioCtrl.Create)
|
|
studioAPI.PUT("/posts/:id", d.studioCtrl.Update)
|
|
studioAPI.DELETE("/posts/:id", d.studioCtrl.Delete)
|
|
studioAPI.POST("/posts/:id/submit", d.studioCtrl.Submit)
|
|
}
|
|
|
|
// 域能
|
|
energyAPI := r.Group("/api/energy")
|
|
energyAPI.Use(d.authMdw.Required())
|
|
energyAPI.Use(d.authMdw.BannedWriteGuard())
|
|
energyAPI.Use(middleware.CSRF(cfg))
|
|
{
|
|
energyAPI.POST("/energize", d.energyCtrl.Energize)
|
|
energyAPI.GET("/info", d.energyCtrl.GetEnergyInfo)
|
|
energyAPI.GET("/logs", d.energyCtrl.GetEnergyLogs)
|
|
}
|
|
|
|
// 趋势
|
|
trendsAPI := r.Group("/api/studio")
|
|
trendsAPI.Use(d.authMdw.Required())
|
|
{
|
|
trendsAPI.GET("/trends", d.studioCtrl.TrendsAPI)
|
|
}
|
|
}
|