mirror of
https://github.com/marcusDenslow/terminalShop.git
synced 2026-10-25 02:52:20 +02:00
marcusDenslow
296c052fa7
previously main.go handled auth directly, it connected to the database, ran migrations, created a JWT manager and SSHAuthService, and authenticated the SSH key before the TUI even started. this commit rips all of that out Auth now happens inside the TUI during the splash screen via splashAuthCmd, which calls the /auth/token endpoint. if no user exists or the fingerprint it auto-creates one using the SSH public ke, so there is no longer a separate registartion flow. The token and user com back in the response. once authed splashViewInitCmd fires a single /view/init request that loads everything needed to start the app, products, cart, addresses, cards, and orders, before switching to the shop page on the model side, User/*models.user and gossh.PublicKey were replaced with plain Fingerprint and SSHPublicKeyStr strings, and NewModelWithAuth was updated too
86 lines
2.7 KiB
Go
86 lines
2.7 KiB
Go
package routes
|
|
|
|
import (
|
|
"github.com/go-chi/chi/v5"
|
|
|
|
"terminalShop/api/handlers"
|
|
"terminalShop/api/middleware"
|
|
"terminalShop/pkg/auth"
|
|
)
|
|
|
|
// SetupRoutes configures all API routes
|
|
func SetupRoutes(version string, stripeSecretKey string, jwtManager *auth.JWTManager, authFingerprintKey string, shippoAPIKey string, bringAPIUID string, bringAPIKey string) *chi.Mux {
|
|
r := chi.NewRouter()
|
|
|
|
// Apply global middleware
|
|
r.Use(middleware.Logger)
|
|
r.Use(middleware.CORS())
|
|
r.Use(middleware.Recovery)
|
|
r.Use(middleware.Auth(jwtManager))
|
|
|
|
// Initialize handlers
|
|
healthHandler := handlers.NewHealthHandler(version)
|
|
productHandler := handlers.NewProductHandler()
|
|
authHandler := handlers.NewAuthHandler(jwtManager, authFingerprintKey)
|
|
cartHandler := handlers.NewCartHandler(stripeSecretKey)
|
|
cardHandler := handlers.NewCardHandler(stripeSecretKey)
|
|
orderHandler := handlers.NewOrderHandler()
|
|
addressHandler := handlers.NewAddressHandler(shippoAPIKey, bringAPIUID, bringAPIKey)
|
|
viewHandler := handlers.NewViewHandler()
|
|
|
|
// API v1 routes
|
|
r.Route("/api/v1", func(r chi.Router) {
|
|
// Health & testing endpoints
|
|
r.Get("/health", healthHandler.GetHealth)
|
|
r.Get("/ping", healthHandler.Ping)
|
|
|
|
// Authentication endpoints (SSH key-based)
|
|
r.Post("/auth/register", authHandler.RegisterWithSSHKey) // POST /api/v1/auth/register
|
|
r.Get("/auth/user", authHandler.GetUserBySSHKey) // GET /api/v1/auth/user?fingerprint=xxx
|
|
r.Post("/auth/token", authHandler.GetToken)
|
|
|
|
// Product endpoints (full CRUD)
|
|
r.Get("/products", productHandler.GetProducts) // Public
|
|
r.Get("/products/{id}", productHandler.GetProduct) // Public
|
|
|
|
// Protected routes - requires a valid JWT
|
|
r.Group(func(r chi.Router) {
|
|
r.Use(middleware.RequireAuth)
|
|
|
|
r.Get("/view/init", viewHandler.GetViewInit)
|
|
|
|
// Cart
|
|
r.Route("/cart", func(r chi.Router) {
|
|
r.Get("/", cartHandler.GetCart)
|
|
r.Put("/item", cartHandler.SetItem)
|
|
r.Put("/address", cartHandler.SetAddress)
|
|
r.Put("/card", cartHandler.SetCard)
|
|
r.Delete("/", cartHandler.ClearCart)
|
|
r.Post("/convert", cartHandler.ConvertCart)
|
|
})
|
|
|
|
// Cards
|
|
r.Route("/cards", func(r chi.Router) {
|
|
r.Get("/", cardHandler.GetCards)
|
|
r.Get("/{id}", cardHandler.GetCard)
|
|
r.Post("/", cardHandler.SaveCard)
|
|
r.Delete("/{id}", cardHandler.DeleteCard)
|
|
r.Put("/{id}/default", cardHandler.SetDefaultCard)
|
|
})
|
|
|
|
// Orders
|
|
r.Get("/orders", orderHandler.GetOrders)
|
|
|
|
// Addresses
|
|
r.Route("/addresses", func(r chi.Router) {
|
|
r.Get("/", addressHandler.GetAddresses)
|
|
r.Post("/", addressHandler.CreateAddress)
|
|
r.Delete("/{id}", addressHandler.DeleteAddress)
|
|
r.Put("/{id}/default", addressHandler.SetDefaultAddress)
|
|
})
|
|
})
|
|
})
|
|
|
|
return r
|
|
}
|