forked from mirrors/pronouns.cc
98 lines
2.2 KiB
Go
98 lines
2.2 KiB
Go
package server
|
|
|
|
import (
|
|
"net/http"
|
|
"os"
|
|
"strconv"
|
|
"time"
|
|
|
|
"codeberg.org/u1f320/pronouns.cc/backend/db"
|
|
"codeberg.org/u1f320/pronouns.cc/backend/server/auth"
|
|
"github.com/go-chi/chi/v5"
|
|
"github.com/go-chi/chi/v5/middleware"
|
|
"github.com/go-chi/httprate"
|
|
"github.com/go-chi/render"
|
|
)
|
|
|
|
// Revision is the git commit, filled at build time
|
|
var Revision = "[unknown]"
|
|
|
|
type Server struct {
|
|
Router *chi.Mux
|
|
|
|
DB *db.DB
|
|
Auth *auth.Verifier
|
|
}
|
|
|
|
func New() (*Server, error) {
|
|
db, err := db.New()
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
s := &Server{
|
|
Router: chi.NewMux(),
|
|
|
|
DB: db,
|
|
Auth: auth.New(),
|
|
}
|
|
|
|
if os.Getenv("DEBUG") == "true" {
|
|
s.Router.Use(middleware.Logger)
|
|
}
|
|
s.Router.Use(middleware.Recoverer)
|
|
// enable authentication for all routes (but don't require it)
|
|
s.Router.Use(s.maybeAuth)
|
|
|
|
// rate limit handling
|
|
// - 120 req/minute (2/s)
|
|
// - keyed by Authorization header if valid token is provided, otherwise by IP
|
|
// - returns rate limit reset info in error
|
|
s.Router.Use(httprate.Limit(
|
|
120, time.Minute,
|
|
httprate.WithKeyFuncs(func(r *http.Request) (string, error) {
|
|
_, ok := ClaimsFromContext(r.Context())
|
|
if token := r.Header.Get("Authorization"); ok && token != "" {
|
|
return token, nil
|
|
}
|
|
|
|
ip, err := httprate.KeyByIP(r)
|
|
return ip, err
|
|
}),
|
|
httprate.WithLimitHandler(func(w http.ResponseWriter, r *http.Request) {
|
|
reset, _ := strconv.Atoi(w.Header().Get("X-RateLimit-Reset"))
|
|
|
|
render.Status(r, http.StatusTooManyRequests)
|
|
render.JSON(w, r, APIError{
|
|
Code: ErrTooManyRequests,
|
|
Message: errCodeMessages[ErrTooManyRequests],
|
|
RatelimitReset: &reset,
|
|
})
|
|
}),
|
|
))
|
|
|
|
// return an API error for not found + method not allowed
|
|
s.Router.NotFound(func(w http.ResponseWriter, r *http.Request) {
|
|
render.Status(r, errCodeStatuses[ErrNotFound])
|
|
render.JSON(w, r, APIError{
|
|
Code: ErrNotFound,
|
|
Message: errCodeMessages[ErrNotFound],
|
|
})
|
|
})
|
|
|
|
s.Router.MethodNotAllowed(func(w http.ResponseWriter, r *http.Request) {
|
|
render.Status(r, errCodeStatuses[ErrMethodNotAllowed])
|
|
render.JSON(w, r, APIError{
|
|
Code: ErrMethodNotAllowed,
|
|
Message: errCodeMessages[ErrMethodNotAllowed],
|
|
})
|
|
})
|
|
|
|
return s, nil
|
|
}
|
|
|
|
type ctxKey int
|
|
|
|
const (
|
|
ctxKeyClaims ctxKey = 1
|
|
)
|