mirror of
https://github.com/StarFleetCPTN/GoMFT.git
synced 2026-09-08 15:41:20 +02:00
StarFleetCPTN
b91b0e8796
- Added new templates for managing authentication providers, including forms for creating and editing providers. - Implemented backend logic to handle retrieval, creation, and deletion of authentication providers. - Introduced new database migrations to support the storage of authentication provider data. - Enhanced the user interface to display available authentication providers and their statuses. - Added routes and handlers for managing authentication provider actions in the web application.
246 lines
10 KiB
Go
246 lines
10 KiB
Go
package handlers
|
|
|
|
import (
|
|
"github.com/gin-gonic/gin"
|
|
)
|
|
|
|
// RegisterRoutes registers all the routes for the web interface
|
|
func (h *Handlers) RegisterRoutes(router *gin.Engine) {
|
|
// Register error handlers first
|
|
h.RegisterErrorHandlers(router)
|
|
|
|
// Public routes
|
|
router.GET("/", h.HandleHome)
|
|
router.GET("/login", h.HandleLoginPage)
|
|
router.POST("/login", h.HandleLogin)
|
|
router.GET("/login/verify", h.Handle2FAVerifyPage)
|
|
router.POST("/login/verify", h.Handle2FAVerify)
|
|
router.GET("/login/backup-code", h.Handle2FABackupCodePage)
|
|
router.GET("/forgot-password", h.HandleForgotPasswordPage)
|
|
router.POST("/forgot-password", h.HandleForgotPassword)
|
|
router.GET("/reset-password", h.HandleResetPasswordPage)
|
|
router.POST("/reset-password", h.HandleResetPassword)
|
|
|
|
// External Authentication Provider routes for login page
|
|
router.GET("/auth/providers", h.GetAuthProviders)
|
|
router.GET("/auth/provider/:id", h.HandleAuthProviderInit)
|
|
router.GET("/auth/callback", h.HandleAuthProviderCallback)
|
|
|
|
// Protected routes
|
|
authorized := router.Group("/")
|
|
authorized.Use(h.AuthMiddleware())
|
|
|
|
// Password change route - only accessed from profile page
|
|
authorized.POST("/change-password", h.HandleChangePassword)
|
|
|
|
// 2FA routes - under profile
|
|
authorized.GET("/profile/2fa/setup", h.Handle2FASetup)
|
|
authorized.POST("/profile/2fa/verify", h.Handle2FAVerifySetup)
|
|
authorized.POST("/profile/2fa/disable", h.Handle2FADisable)
|
|
authorized.GET("/profile/2fa/backup-codes", h.Handle2FABackupCodes)
|
|
authorized.POST("/profile/2fa/regenerate-codes", h.Handle2FARegenerateCodes)
|
|
|
|
// Add notifications routes
|
|
authorized.GET("/notifications", h.HandleNotifications)
|
|
authorized.GET("/notifications/dropdown", h.HandleLoadNotifications)
|
|
authorized.GET("/notifications/count", h.HandleNotificationCount)
|
|
authorized.POST("/notifications/:id/read", h.HandleMarkNotificationAsRead)
|
|
authorized.POST("/notifications/mark-all-read", h.HandleMarkAllNotificationsAsRead)
|
|
|
|
{
|
|
authorized.GET("/dashboard", h.HandleDashboard)
|
|
authorized.GET("/configs", h.HandleConfigs)
|
|
authorized.GET("/configs/new", h.HandleNewConfig)
|
|
authorized.GET("/configs/:id", h.HandleEditConfig)
|
|
authorized.POST("/configs", h.HandleCreateConfig)
|
|
authorized.PUT("/configs/:id", h.HandleUpdateConfig)
|
|
authorized.POST("/configs/:id", h.HandleUpdateConfig)
|
|
authorized.DELETE("/configs/:id", h.HandleDeleteConfig)
|
|
authorized.POST("/configs/:id/duplicate", h.HandleDuplicateConfig)
|
|
|
|
// Path validation endpoint
|
|
authorized.GET("/check-path", h.HandleCheckPath)
|
|
|
|
// Google Drive authentication routes
|
|
authorized.GET("/configs/:id/gdrive-auth", h.HandleGDriveAuth)
|
|
authorized.GET("/configs/gdrive-callback", h.HandleGDriveAuthCallback)
|
|
authorized.GET("/configs/gdrive-token", h.HandleGDriveTokenProcess)
|
|
|
|
// Duplicate rclone endpoints for web interface to access - same path as API
|
|
rcloneHandler := NewRcloneHandler(h.DB)
|
|
authorized.GET("api/rclone/commands", func(c *gin.Context) { rcloneHandler.RcloneCommandOptions(c) })
|
|
authorized.GET("api/rclone/command-flags", func(c *gin.Context) { rcloneHandler.RcloneCommandFlags(c) })
|
|
authorized.GET("api/rclone/command/:id/usage", func(c *gin.Context) { rcloneHandler.RcloneCommandUsage(c) })
|
|
|
|
authorized.GET("/jobs", h.HandleJobs)
|
|
authorized.GET("/jobs/new", h.HandleNewJob)
|
|
authorized.GET("/jobs/:id", h.HandleEditJob)
|
|
authorized.POST("/jobs", h.HandleCreateJob)
|
|
authorized.PUT("/jobs/:id", h.HandleUpdateJob)
|
|
authorized.POST("/jobs/:id", h.HandleUpdateJob)
|
|
authorized.DELETE("/jobs/:id", h.HandleDeleteJob)
|
|
authorized.POST("/jobs/:id/duplicate", h.HandleDuplicateJob)
|
|
authorized.POST("/jobs/:id/run", h.HandleRunJob)
|
|
authorized.GET("/history", h.HandleHistory)
|
|
authorized.GET("/job-runs/:id", h.HandleJobRunDetails)
|
|
authorized.GET("/profile", h.HandleProfile)
|
|
authorized.POST("/profile/theme", h.HandleUpdateTheme)
|
|
authorized.POST("/logout", h.HandleLogout)
|
|
|
|
// File metadata routes
|
|
fileMetadataHandler := &FileMetadataHandler{DB: h.DB}
|
|
fileGroup := authorized.Group("/files")
|
|
fileGroup.GET("", fileMetadataHandler.ListFileMetadata)
|
|
fileGroup.GET("/:id", fileMetadataHandler.GetFileMetadataDetails)
|
|
fileGroup.GET("/job/:job_id", fileMetadataHandler.GetFileMetadataForJob)
|
|
fileGroup.GET("/search", fileMetadataHandler.SearchFileMetadata)
|
|
fileGroup.GET("/search/partial", fileMetadataHandler.HandleFileMetadataSearchPartial)
|
|
fileGroup.DELETE("/:id", fileMetadataHandler.DeleteFileMetadata)
|
|
fileGroup.GET("/partial", fileMetadataHandler.HandleFileMetadataPartial)
|
|
|
|
// AJAX routes for dashboard
|
|
authorized.GET("/dashboard/data", h.HandleDashboardData)
|
|
authorized.GET("/dashboard/jobs", h.HandleDashboardJobsData)
|
|
authorized.GET("/dashboard/history", h.HandleDashboardHistoryData)
|
|
|
|
}
|
|
|
|
// Admin-only routes
|
|
admin := router.Group("/admin")
|
|
admin.Use(h.AuthMiddleware())
|
|
{
|
|
// Main admin dashboard - requires admin role
|
|
// admin.GET("", h.AdminMiddleware(), h.HandleAdminDashboard)
|
|
|
|
// User management routes
|
|
userGroup := admin.Group("/users")
|
|
userGroup.Use(h.PermissionMiddleware("users.view"))
|
|
{
|
|
userGroup.GET("", h.HandleUsers)
|
|
userGroup.GET("/new", h.PermissionMiddleware("users.create"), h.HandleNewUser)
|
|
userGroup.POST("", h.PermissionMiddleware("users.create"), h.HandleCreateUser)
|
|
userGroup.GET("/:id/edit", h.PermissionMiddleware("users.edit"), h.HandleEditUser)
|
|
userGroup.PUT("/:id", h.PermissionMiddleware("users.edit"), h.HandleUpdateUser)
|
|
userGroup.DELETE("/:id", h.PermissionMiddleware("users.delete"), h.HandleDeleteUser)
|
|
userGroup.PUT("/:id/toggle-lock", h.PermissionMiddleware("users.edit"), h.AdminToggleLockUser)
|
|
}
|
|
|
|
// Admin routes for role management
|
|
adminRoles := admin.Group("/roles")
|
|
adminRoles.Use(h.PermissionMiddleware("roles.admin"))
|
|
{
|
|
adminRoles.GET("", h.HandleRoles)
|
|
adminRoles.GET("/new", h.HandleNewRole)
|
|
adminRoles.GET("/:id/edit", h.HandleRoles)
|
|
adminRoles.POST("", h.HandleCreateRole)
|
|
adminRoles.PUT("/:id", h.HandleEditRole)
|
|
adminRoles.DELETE("/:id", h.HandleDeleteRole)
|
|
}
|
|
|
|
// Audit log routes
|
|
auditGroup := admin.Group("/audit")
|
|
auditGroup.Use(h.PermissionMiddleware("audit.view"))
|
|
{
|
|
auditGroup.GET("", h.HandleAuditLogs)
|
|
auditGroup.GET("/export", h.PermissionMiddleware("audit.export"), h.HandleExportAuditLogs)
|
|
}
|
|
|
|
// System settings routes
|
|
settingsGroup := admin.Group("/settings")
|
|
settingsGroup.Use(h.PermissionMiddleware("system.settings"))
|
|
{
|
|
settingsGroup.GET("", h.HandleSettings)
|
|
// settingsGroup.GET("/backups", h.HandleBackupsPage)
|
|
// settingsGroup.POST("/backups", h.HandleCreateBackup)
|
|
// settingsGroup.GET("/logs", h.HandleLogsPage)
|
|
// settingsGroup.POST("/logs/download", h.HandleDownloadLogs)
|
|
// settingsGroup.DELETE("/logs", h.HandlePurgeLogs)
|
|
|
|
// Auth Provider routes
|
|
authProviderGroup := settingsGroup.Group("/auth-providers")
|
|
authProviderGroup.GET("", h.AuthProvidersPage)
|
|
authProviderGroup.GET("/new", h.NewAuthProviderPage)
|
|
authProviderGroup.POST("", h.HandleCreateAuthProvider)
|
|
authProviderGroup.GET("/:id/edit", h.EditAuthProviderPage)
|
|
authProviderGroup.POST("/:id", h.HandleUpdateAuthProvider)
|
|
authProviderGroup.DELETE("/:id", h.HandleDeleteAuthProvider)
|
|
authProviderGroup.POST("/:id/test", h.HandleTestAuthProviderConnection)
|
|
|
|
settingsGroup.POST("/notifications", h.HandleCreateNotificationService)
|
|
settingsGroup.DELETE("/notifications/:id", h.HandleDeleteNotificationService)
|
|
settingsGroup.POST("/notifications/test", h.HandleTestNotification)
|
|
|
|
settingsGroup.POST("/general", h.HandleSettings) // Placeholder for future implementation
|
|
settingsGroup.POST("/security", h.HandleSettings) // Placeholder for future implementation
|
|
}
|
|
|
|
// Database tools routes
|
|
dbGroup := admin.Group("/database")
|
|
dbGroup.Use(h.PermissionMiddleware("system.backup"))
|
|
{
|
|
dbGroup.GET("", h.HandleDatabaseTools)
|
|
dbGroup.POST("/backup-database", h.HandleBackupDatabase)
|
|
dbGroup.POST("/restore-database", h.PermissionMiddleware("system.restore"), h.HandleRestoreDatabase)
|
|
dbGroup.GET("/restore-database/:filename", h.PermissionMiddleware("system.restore"), h.HandleRestoreDatabase)
|
|
dbGroup.GET("/download-backup/:filename", h.HandleDownloadBackup)
|
|
dbGroup.POST("/delete-backup/:filename", h.HandleDeleteBackup)
|
|
dbGroup.GET("/refresh-backups", h.HandleRefreshBackups)
|
|
dbGroup.POST("/vacuum-database", h.HandleVacuumDatabase)
|
|
dbGroup.POST("/clear-job-history", h.HandleClearJobHistory)
|
|
dbGroup.GET("/export-configs", h.PermissionMiddleware("system.export"), h.HandleExportConfigs)
|
|
dbGroup.GET("/export-jobs", h.PermissionMiddleware("system.export"), h.HandleExportJobs)
|
|
}
|
|
|
|
}
|
|
|
|
// API routes
|
|
api := router.Group("/api")
|
|
{
|
|
api.POST("/login", h.HandleAPILogin)
|
|
|
|
// Protected API routes
|
|
apiAuthorized := api.Group("/")
|
|
apiAuthorized.Use(h.APIAuthMiddleware())
|
|
{
|
|
// Config endpoints
|
|
apiAuthorized.GET("/configs", h.HandleAPIConfigs)
|
|
apiAuthorized.GET("/configs/:id", h.HandleAPIConfig)
|
|
apiAuthorized.POST("/configs", h.HandleAPICreateConfig)
|
|
apiAuthorized.PUT("/configs/:id", h.HandleAPIUpdateConfig)
|
|
apiAuthorized.DELETE("/configs/:id", h.HandleAPIDeleteConfig)
|
|
|
|
// Job endpoints
|
|
apiAuthorized.GET("/jobs", h.HandleAPIJobs)
|
|
apiAuthorized.GET("/jobs/:id", h.HandleAPIJob)
|
|
apiAuthorized.POST("/jobs", h.HandleAPICreateJob)
|
|
apiAuthorized.PUT("/jobs/:id", h.HandleAPIUpdateJob)
|
|
apiAuthorized.DELETE("/jobs/:id", h.HandleAPIDeleteJob)
|
|
apiAuthorized.POST("/jobs/:id/run", h.HandleAPIRunJob)
|
|
|
|
// History endpoints
|
|
apiAuthorized.GET("/history", h.HandleAPIHistory)
|
|
apiAuthorized.GET("/job-runs/:id", h.HandleAPIJobRun)
|
|
|
|
// Admin-only API routes
|
|
apiAdmin := apiAuthorized.Group("/admin")
|
|
apiAdmin.Use(h.APIAdminMiddleware())
|
|
{
|
|
// User management
|
|
apiAdmin.GET("/users", h.HandleAPIUsers)
|
|
apiAdmin.GET("/users/:id", h.HandleAPIUser)
|
|
apiAdmin.POST("/users", h.HandleAPICreateUser)
|
|
apiAdmin.PUT("/users/:id", h.HandleAPIUpdateUser)
|
|
apiAdmin.DELETE("/users/:id", h.HandleAPIDeleteUser)
|
|
|
|
// Auth providers API routes
|
|
apiAdmin.GET("/auth-providers", h.HandleAPIUsers) // Placeholder for now
|
|
apiAdmin.GET("/auth-providers/:id", h.HandleAPIUser) // Placeholder for now
|
|
apiAdmin.POST("/auth-providers", h.HandleAPICreateUser) // Placeholder for now
|
|
apiAdmin.PUT("/auth-providers/:id", h.HandleAPIUpdateUser) // Placeholder for now
|
|
apiAdmin.DELETE("/auth-providers/:id", h.HandleAPIDeleteUser) // Placeholder for now
|
|
apiAdmin.POST("/auth-providers/:id/test", h.HandleAPIUser) // Placeholder for now
|
|
}
|
|
}
|
|
}
|
|
}
|