stillbox/pkg/server/routes.go

package server

import (
	"errors"
	"io/fs"
	"net/http"
	"path"
	"strings"

	"dynatron.me/x/stillbox/client"
	"dynatron.me/x/stillbox/internal/version"
	"dynatron.me/x/stillbox/pkg/config"
	"github.com/go-chi/chi/v5"
	"github.com/go-chi/httprate"
	"github.com/go-chi/render"
)

const (
	serverHeader = "Server"
)

func (s *Server) setupRoutes() {
	clientRoot, err := fs.Sub(client.Client, client.Prefix)
	if err != nil {
		panic(err)
	}

	r := s.r
	r.Use(s.WithCtxStores())

	s.installPprof()

	r.Group(func(r chi.Router) {
		// authenticated routes
		r.Use(s.auth.VerifyMiddleware(), s.auth.AuthMiddleware())
		s.nex.PrivateRoutes(r)
		s.auth.PrivateRoutes(r)
		s.alerter.PrivateRoutes(r)
		r.Mount("/api", s.rest.Subrouter())
	})

	r.Group(func(r chi.Router) {
		s.rateLimit(r)
		r.Use(render.SetContentType(render.ContentTypeJSON))
		// public routes
		s.sources.PublicRoutes(r)
	})

	r.Group(func(r chi.Router) {
		// auth/share routes get rate-limited heavily, but not using middleware
		s.rateLimit(r)
		r.Use(render.SetContentType(render.ContentTypeJSON))
		s.auth.PublicRoutes(r)
		r.Mount("/share", s.rest.ShareRouter())
	})

	r.Group(func(r chi.Router) {
		s.rateLimit(r)
		r.Use(s.auth.VerifyMiddleware())

		// optional auth routes

		s.clientRoute(r, clientRoot)
	})
}

// WithCtxStores is a middleware that installs all stores in the request context.
func (s *Server) WithCtxStores() func(next http.Handler) http.Handler {
	return func(next http.Handler) http.Handler {
		fn := func(w http.ResponseWriter, r *http.Request) {
			r = r.WithContext(s.fillCtx(r.Context()))
			next.ServeHTTP(w, r)
		}
		return http.HandlerFunc(fn)
	}
}

func (s *Server) rateLimit(r chi.Router) {
	if s.conf.RateLimit.Verify() {
		r.Use(rateLimiter(&s.conf.RateLimit))
	}
}

func rateLimiter(cfg *config.RateLimit) func(http.Handler) http.Handler {
	return httprate.LimitByRealIP(cfg.Requests, cfg.Over)
}

func (s *Server) clientRoute(r chi.Router, clientRoot fs.FS) {
	r.Get("/*", func(w http.ResponseWriter, r *http.Request) {
		hfs := http.FS(clientRoot)
		var pe *fs.PathError

		pc := path.Clean(r.URL.Path)
		f, err := hfs.Open(pc)
		if err != nil {
			if errors.As(err, &pe) {
				http.ServeFileFS(w, r, clientRoot, "/index.html")
				return
			}
		} else {
			f.Close()
		}

		rctx := chi.RouteContext(r.Context())
		pathPrefix := strings.TrimSuffix(rctx.RoutePattern(), "/*")
		fs := http.StripPrefix(pathPrefix, http.FileServer(http.FS(clientRoot)))
		fs.ServeHTTP(w, r)
	})
}

func ServerHeaderAdd(next http.Handler) http.Handler {
	serverString := version.HttpString(version.Name)
	hfn := func(w http.ResponseWriter, r *http.Request) {
		w.Header().Set(serverHeader, serverString)
		next.ServeHTTP(w, r)
	}
	return http.HandlerFunc(hfn)
}