summercms/modules/boardwalk

boardwalk

HTTP handler that serves the embedded admin SPA build under a configurable path prefix.

import "git.golem15.com/golem15/summercms/modules/boardwalk"

Overview

boardwalk embeds the compiled admin SPA (dist/, produced by npm --prefix admin run build) into the binary and serves it. The build is path-agnostic: index.html carries a placeholder token that the handler replaces once, at construction, with the prefix the admin is mounted under, so one build works at any backend URI. cabana mounts it when it activates the admin routes. It stands in for the server-rendered backend layouts of WinterCMS, which the Go port replaces with a single-page app.

Features

• Serves the embedded build under any prefix, rewriting relative asset URLs and the admin base meta in index.html for that prefix (boardwalk.RewriteIndex).
• Fails at boot when index.html lacks the boardwalk.BaseToken placeholder, which catches a stale or hand-edited build.
• Falls back to index.html for client-side routes and directories; missing files with an extension get a plain 404.
• Hands every request whose path under the prefix is api or starts with api/ to a caller-supplied handler, so admin API misses stay JSON instead of returning the SPA.
• Long-lived immutable caching for hashed files under assets/, no-cache for other files and no-store for index.html.
• Security headers on every response: a restrictive Content-Security-Policy, frame denial, nosniff, a same-origin referrer policy and noindex, nofollow.
• Explicit content types for scripts, styles, fonts, SVG and JSON, with a MIME lookup fallback.

Usage

notFoundAPI := http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
	w.Header().Set("Content-Type", "application/json")
	w.WriteHeader(http.StatusNotFound)
	_, _ = w.Write([]byte(`{"error":"not found"}`))
})

spa, err := boardwalk.Handler("/backend", notFoundAPI)
if err != nil {
	return err
}
mux.Handle("/backend/", spa)

API reference

Identifier	Description
boardwalk.Handler	Builds the SPA handler for a prefix; the second argument answers unmatched api/ paths.
boardwalk.Dist	Returns the embedded build as an fs.FS rooted at dist/.
boardwalk.RewriteIndex	Rewrites raw index.html bytes for a prefix; errors when the placeholder token is missing.
boardwalk.BaseToken	The placeholder in dist/index.html that is replaced by the prefix.
boardwalk.ContentType	The Content-Type served for a file name, with explicit UTF-8 JavaScript and CSS types. Shared with the plugin asset route in cabana.
boardwalk.SetSecurityHeaders	Sets the admin security headers (nosniff, referrer policy, no framing, the script-src 'self' CSP, noindex) on a response.

Dependencies

• SummerCMS modules: none.
• Third-party: none.
• Standard library: bytes, embed, errors, fmt, html, io/fs, mime, net/http, path, strings, time.

The embedded dist/ tree is generated from the admin/ Vite project, whose build writes to modules/boardwalk/dist.

Testing

go test ./modules/boardwalk/...

The tests run the handler through net/http/httptest against the embedded build and in-memory file systems; they need no external services.