6bceb8167c
Wire the user API session loop to the JWT blacklist and a pre-password throttle gate so a logged-out token cannot be fetched again. Co-authored-by: Cursor <cursoragent@cursor.com>
20 lines
622 B
Go
20 lines
622 B
Go
package user
|
|
|
|
import (
|
|
"git.golem15.com/golem15/fonoteka/plugins/golem15/user/controllers"
|
|
"git.golem15.com/golem15/summercms/pact"
|
|
"git.golem15.com/golem15/summercms/surf"
|
|
)
|
|
|
|
func (p *Plugin) Routes(r pact.Router) error {
|
|
r.Group("/_user/api/v1", surf.Use("throttle:user-api"), func(g pact.Router) {
|
|
g.Post("/login", controllers.Login(p.app))
|
|
g.Post("/logout", controllers.Logout(p.app))
|
|
g.Get("/fetch", controllers.Fetch(p.app))
|
|
g.Post("/refresh", controllers.Refresh(p.app))
|
|
g.Post("/register", controllers.Register(p.app))
|
|
g.Get("/oauth-providers", controllers.OAuthProviders(p.app))
|
|
})
|
|
return nil
|
|
}
|