55 lines
1.6 KiB
Go
55 lines
1.6 KiB
Go
package handlers
|
|
|
|
import (
|
|
"net/http"
|
|
"strings"
|
|
|
|
"github.com/gin-gonic/gin"
|
|
|
|
"github.com/vaultdrop/backend/pkg/api"
|
|
)
|
|
|
|
// RegisterRoutes wires the full /api/v1 surface (public + protected).
|
|
// Public: /health, /devices, /auth/login. Everything else requires a user
|
|
// bearer token (subject = user_id, claim = device_id, cf. docs/api-v1.md §2).
|
|
func RegisterRoutes(r *gin.Engine) {
|
|
public := r.Group("/api/v1")
|
|
{
|
|
public.GET("/health", Health)
|
|
public.POST("/devices", DevicesRegister)
|
|
public.POST("/auth/login", AuthLogin)
|
|
}
|
|
|
|
protected := r.Group("/api/v1")
|
|
protected.Use(RequireAuth)
|
|
{
|
|
protected.GET("/files", FilesList)
|
|
protected.GET("/files/search", FilesSearch)
|
|
protected.GET("/files/:id", FilesGet)
|
|
protected.DELETE("/files/:id", FilesDelete)
|
|
protected.GET("/files/folders", FoldersList)
|
|
protected.POST("/files/upload", FilesUpload)
|
|
|
|
protected.GET("/users/resolve", ResolveUser)
|
|
protected.PATCH("/users/me/password", ChangePassword)
|
|
|
|
protected.POST("/ocr/jobs", OcrJobsCreate)
|
|
protected.GET("/ocr/jobs/:id", OcrJobsGet)
|
|
|
|
protected.POST("/sync/ops", SyncOpsPush)
|
|
protected.GET("/sync/permissions", SyncPermissionsGet)
|
|
}
|
|
|
|
// Route inconnue → enveloppe d'erreur du contrat (jamais de HTML).
|
|
r.NoRoute(func(c *gin.Context) {
|
|
api.Error(c, http.StatusNotFound, "NOT_FOUND", "route not found")
|
|
})
|
|
}
|
|
|
|
// userID lit la clé de scoping posée par RequireAuth. Un empty string est
|
|
// impossible en conditions normales (le middleware l'a validé) ; garde-fou
|
|
// pour un appel direct dans les tests.
|
|
func userID(c *gin.Context) string {
|
|
return strings.TrimSpace(c.GetString(UserIDKey))
|
|
}
|