senlinai/agent
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

refactor(api): introduce v1 response contract

Browse Source
This commit is contained in:
yanweidong
2026-07-21 13:45:04 +08:00
parent 1d35fcf4a1
commit 7803b2faf0
13 changed files with 303 additions and 48 deletions
Download Patch File Download Diff File Expand all files Collapse all files

38
backend/internal/httpx/router.go
View File

@@ -2,6 +2,7 @@ package httpx
import (
"net/http"
"strings"
"time"
"github.com/gin-gonic/gin"
@@ -13,10 +14,12 @@ type RouteRegistrar interface {
Register(router gin.IRouter)
}
// NewRouter 创建仅暴露 /api/v1 业务契约的公开路由。
func NewRouter(cfg config.Config, registrars ...RouteRegistrar) *gin.Engine {
return newRouter(cfg, nil, registrars...)
}
// NewProtectedRouter 为 /api/v1 业务路由启用签名 session 校验。
func NewProtectedRouter(cfg config.Config, tokenVerifier func(string) (uint, error), registrars ...RouteRegistrar) *gin.Engine {
return newRouter(cfg, tokenVerifier, registrars...)
}
@@ -28,14 +31,14 @@ func newRouter(cfg config.Config, tokenVerifier func(string) (uint, error), regi
router := gin.New()
router.Use(gin.Recovery())
router.Use(cors())
router.Use(cors(cfg))
router.GET("/healthz", func(c *gin.Context) {
c.JSON(http.StatusOK, gin.H{"status": "ok"})
})
api := router.Group("/api")
api := router.Group("/api/v1")
api.GET("/status", func(c *gin.Context) {
c.JSON(http.StatusOK, gin.H{"timestamp_ms": time.Now().UnixMilli()})
c.JSON(http.StatusOK, gin.H{"timestamp": time.Now().UTC().Format(time.RFC3339Nano)})
})
if tokenVerifier != nil {
api.Use(auth.RequireUser(tokenVerifier))
@@ -47,22 +50,27 @@ func newRouter(cfg config.Config, tokenVerifier func(string) (uint, error), regi
return router
}
func cors() gin.HandlerFunc {
allowedOrigins := map[string]bool{
"http://localhost:5173": true,
"http://127.0.0.1:5173": true,
"http://localhost:4173": true,
"http://127.0.0.1:4173": true,
"http://localhost:4174": true,
"http://127.0.0.1:4174": true,
"http://localhost:4175": true,
"http://127.0.0.1:4175": true,
"http://tauri.localhost": true,
func cors(cfg config.Config) gin.HandlerFunc {
origins := cfg.AllowedOrigins
if len(origins) == 0 && (cfg.Env == "development" || cfg.Env == "dev" || cfg.Env == "test") {
origins = []string{
"http://localhost:5173",
"http://127.0.0.1:5173",
"http://tauri.localhost",
}
}
// 非开发环境在未配置来源时默认拒绝跨域，防止意外开放浏览器访问。
allowedOrigins := make(map[string]struct{}, len(origins))
for _, origin := range origins {
if origin = strings.TrimSpace(origin); origin != "" {
allowedOrigins[origin] = struct{}{}
}
}
return func(c *gin.Context) {
origin := c.GetHeader("Origin")
if allowedOrigins[origin] {
if _, ok := allowedOrigins[origin]; ok {
c.Header("Access-Control-Allow-Origin", origin)
c.Header("Vary", "Origin")
c.Header("Access-Control-Allow-Methods", "GET, POST, PUT, PATCH, DELETE, OPTIONS")