7b9faa3419
- empty (default) adds nothing; open or closed appends turnstile:{mode} to
POST /login and /register only; any other value fails boot naming the key
- TestTurnstileRoutesSmoke records the declared routes with a recording router
59 lines
2.2 KiB
Go
59 lines
2.2 KiB
Go
package user
|
|
|
|
import (
|
|
"fmt"
|
|
"strings"
|
|
|
|
"git.golem15.com/golem15/sm-user-plugin/controllers"
|
|
"git.golem15.com/golem15/summercms/modules/pact"
|
|
"git.golem15.com/golem15/summercms/modules/surf"
|
|
)
|
|
|
|
func (p *Plugin) Routes(r pact.Router) error {
|
|
guard, err := p.turnstileGuard()
|
|
if err != nil {
|
|
return err
|
|
}
|
|
r.Group("/_user/api/v1", surf.Use("throttle:user-api"), func(g pact.Router) {
|
|
g.Post("/login", controllers.Login(p.app), guard...)
|
|
g.Post("/logout", controllers.Logout(p.app))
|
|
g.Get("/fetch", controllers.Fetch(p.app))
|
|
g.Post("/refresh", controllers.Refresh(p.app))
|
|
g.Post("/register", controllers.Register(p.app), guard...)
|
|
g.Get("/oauth-providers", controllers.OAuthProviders(p.app))
|
|
g.Post("/forgot-password", controllers.ForgotPassword(p.app))
|
|
g.Post("/reset-password", controllers.ResetPassword(p.app))
|
|
g.Post("/activate", controllers.Activate(p.app))
|
|
g.Post("/activate-by-code", controllers.ActivateByCode(p.app))
|
|
g.Post("/update", controllers.Update(p.app))
|
|
g.Post("/change-password", controllers.ChangePassword(p.app))
|
|
g.Post("/marketing-consent", controllers.MarketingConsent(p.app))
|
|
g.Post("/avatar", controllers.UploadAvatar(p.app))
|
|
g.Post("/avatar/remove", controllers.RemoveAvatar(p.app))
|
|
g.Post("/tokens", controllers.APITokenStore(p.app), "jwt.auth")
|
|
g.Get("/tokens", controllers.APITokenIndex(p.app), "jwt.auth")
|
|
g.Delete("/tokens/{id}", controllers.APITokenDestroy(p.app), "jwt.auth")
|
|
g.Where("id", "[0-9]+")
|
|
})
|
|
return nil
|
|
}
|
|
|
|
// turnstileGuard returns the middleware that golem15.user.turnstile adds to
|
|
// POST /login and /register. The key is opt-in: empty (the default) adds
|
|
// nothing, "open" and "closed" select the framework's turnstile:{mode}
|
|
// middleware (summercms v0.3.0 and later), and any other value is refused so
|
|
// a typo cannot silently leave the forms unprotected.
|
|
func (p *Plugin) turnstileGuard() ([]string, error) {
|
|
if p.app == nil || p.app.Config == nil {
|
|
return nil, nil
|
|
}
|
|
switch mode := strings.TrimSpace(p.app.Config.String("golem15.user.turnstile")); mode {
|
|
case "":
|
|
return nil, nil
|
|
case "open", "closed":
|
|
return []string{"turnstile:" + mode}, nil
|
|
default:
|
|
return nil, fmt.Errorf("golem15.user: golem15.user.turnstile must be empty, open or closed, got %q", mode)
|
|
}
|
|
}
|