xuans
e2200534d3
支持同项目内域名与服务器双向复用，局部修改和清空不影响其他域名；在绑定保存、服务器编辑和部署前拒绝已知共享路径冲突。 新增仓储、接口、工作流与页面回归源码，同步任务状态和第三版接口交接。按要求先开发后统一测试，本批未运行测试、构建或部署，保留在途任务与主机别名等待办。
73 lines
2.6 KiB
Go
73 lines
2.6 KiB
Go
package httpapi
|
|
|
|
import (
|
|
"context"
|
|
"errors"
|
|
"net/http"
|
|
"time"
|
|
|
|
"github.com/gin-gonic/gin"
|
|
|
|
"git.pcux.cn/xuans/Scert/backend/internal/deployment"
|
|
"git.pcux.cn/xuans/Scert/backend/internal/repository"
|
|
)
|
|
|
|
func (s *Server) registerProjectBindingRoutes() {
|
|
api := s.router.Group("/api/v1", privateProjectResponse)
|
|
api.PUT("/domains/:id/servers", s.projectBindingFailureAudit, s.requireAuthenticated, s.replaceProjectDomainServers)
|
|
}
|
|
|
|
func (s *Server) replaceProjectDomainServers(c *gin.Context) {
|
|
if s.projectBindings == nil {
|
|
s.writeError(c, http.StatusServiceUnavailable, "项目绑定服务尚未就绪", nil)
|
|
return
|
|
}
|
|
var input struct {
|
|
ServerIDs *[]string `json:"server_ids"`
|
|
}
|
|
if !validMemberIdentifier(c.Param("id")) || c.Request.URL.RawQuery != "" ||
|
|
bindJSON(c, &input, jsonRequestBodyLimit) != nil || input.ServerIDs == nil || len(*input.ServerIDs) > repository.MaxProjectBindingServers {
|
|
s.writeError(c, http.StatusBadRequest, repository.ErrProjectBindingInput.Error(), nil)
|
|
return
|
|
}
|
|
for _, id := range *input.ServerIDs {
|
|
if !validMemberIdentifier(id) {
|
|
s.writeError(c, http.StatusBadRequest, repository.ErrProjectBindingInput.Error(), nil)
|
|
return
|
|
}
|
|
}
|
|
items, err := s.projectBindings.ReplaceProjectDomainServers(c.Request.Context(), c.GetString(authenticatedActorKey), c.Param("id"), *input.ServerIDs)
|
|
switch {
|
|
case errors.Is(err, repository.ErrProjectAccessDenied):
|
|
s.writeError(c, http.StatusForbidden, "无权修改此项目的服务器绑定", nil)
|
|
case errors.Is(err, repository.ErrProjectBindingInput):
|
|
s.writeError(c, http.StatusBadRequest, err.Error(), nil)
|
|
case errors.Is(err, deployment.ErrSharedPathConflict):
|
|
s.writeError(c, http.StatusConflict, deployment.ErrSharedPathConflict.Error(), nil)
|
|
case err != nil:
|
|
s.writeError(c, http.StatusInternalServerError, "保存项目服务器绑定失败，请刷新后核对", nil)
|
|
default:
|
|
c.JSON(http.StatusOK, gin.H{"items": items})
|
|
}
|
|
}
|
|
|
|
func (s *Server) projectBindingFailureAudit(c *gin.Context) {
|
|
c.Next()
|
|
if c.Writer.Status() < 400 || s.projectBindings == nil {
|
|
return
|
|
}
|
|
domainID := c.Param("id")
|
|
if !validMemberIdentifier(domainID) {
|
|
domainID = ""
|
|
}
|
|
ctx, cancel := context.WithTimeout(context.WithoutCancel(c.Request.Context()), 3*time.Second)
|
|
defer cancel()
|
|
err := s.projectBindings.RecordProjectBindingFailure(ctx, repository.ProjectBindingFailure{
|
|
ActorID: c.GetString(authenticatedActorKey), DomainID: domainID,
|
|
StatusCode: c.Writer.Status(), RequestID: requestIDFromContext(c),
|
|
})
|
|
if err != nil && s.logger != nil {
|
|
s.logger.Error("项目绑定失败审计未保存", "request_id", requestIDFromContext(c), "status", c.Writer.Status())
|
|
}
|
|
}
|