cdrop — 跨 OS 剪贴板与文件传输服务
Commilitia Drop：自托管的跨设备剪贴板同步与点对点文件传输。 - 后端 Go（chi / SQLite WAL / SSE Hub / WebRTC signaling + 状态机 / Relay ring buffer），编译进单个 distroless 镜像（前端 go:embed）。 - 前端 React + TanStack Router + Zustand，自实现 SSE + WebRTC P2P，NAT 受阻时回退服务端中继；聚珍（Juzhen）CJK 综合排版。 - 桌面端 Wails v2（macOS / Windows），瘦客户端复用 web。 - 鉴权 OIDC PKCE（自建 Casdoor 等），refresh_token 信封加密存系统密钥库；iOS Shortcut 用 HS256 scoped token。 架构文档与变更记录见 docs 分支（PROJECT_BRIEF / FRONTEND_DESIGN / CHANGELOG）。 本次为公开发布初始提交：完整开发历史（含部署细节）留存于私有归档，公开仓库自此干净起步。
This commit is contained in:
@@ -0,0 +1,202 @@
|
||||
package httpapi
|
||||
|
||||
import (
|
||||
"context"
|
||||
"database/sql"
|
||||
"encoding/json"
|
||||
"log/slog"
|
||||
"net/http"
|
||||
"time"
|
||||
|
||||
"github.com/go-chi/chi/v5"
|
||||
"github.com/go-chi/chi/v5/middleware"
|
||||
"github.com/go-chi/httprate"
|
||||
|
||||
"commilitia.net/cdrop/internal/calls"
|
||||
"commilitia.net/cdrop/internal/clipboard"
|
||||
"commilitia.net/cdrop/internal/config"
|
||||
"commilitia.net/cdrop/internal/db"
|
||||
"commilitia.net/cdrop/internal/hub"
|
||||
"commilitia.net/cdrop/internal/jwtauth"
|
||||
"commilitia.net/cdrop/internal/relay"
|
||||
"commilitia.net/cdrop/internal/transfer"
|
||||
"commilitia.net/cdrop/internal/webui"
|
||||
)
|
||||
|
||||
type Server struct {
|
||||
cfg *config.Config
|
||||
db *sql.DB
|
||||
queries *db.Queries
|
||||
auth *jwtauth.Authenticator
|
||||
hub *hub.Hub
|
||||
transfers *transfer.Service
|
||||
relay *relay.Manager
|
||||
calls *calls.Provider // optional; nil → STUN-only fallback
|
||||
clipboard *clipboard.Service // optional; nil → 503 on /api/clipboard
|
||||
mux *chi.Mux
|
||||
}
|
||||
|
||||
func New(
|
||||
cfg *config.Config,
|
||||
dbConn *sql.DB,
|
||||
queries *db.Queries,
|
||||
auth *jwtauth.Authenticator,
|
||||
h *hub.Hub,
|
||||
transfers *transfer.Service,
|
||||
rm *relay.Manager,
|
||||
cp *calls.Provider,
|
||||
clip *clipboard.Service,
|
||||
) *Server {
|
||||
s := &Server{
|
||||
cfg: cfg,
|
||||
db: dbConn,
|
||||
queries: queries,
|
||||
auth: auth,
|
||||
hub: h,
|
||||
transfers: transfers,
|
||||
relay: rm,
|
||||
calls: cp,
|
||||
clipboard: clip,
|
||||
mux: chi.NewRouter(),
|
||||
}
|
||||
s.routes()
|
||||
return s
|
||||
}
|
||||
|
||||
func (s *Server) Handler() http.Handler { return s.mux }
|
||||
|
||||
func (s *Server) routes() {
|
||||
s.mux.Use(middleware.RequestID)
|
||||
s.mux.Use(middleware.RealIP)
|
||||
s.mux.Use(middleware.Recoverer)
|
||||
|
||||
s.mux.Get("/healthz", s.handleHealth)
|
||||
|
||||
// Anything not matched below falls through to the embedded frontend bundle.
|
||||
// In Docker the binary serves the SPA itself; in local dev the embed FS is
|
||||
// empty and this 404s — vite dev on :5173 handles the UI instead.
|
||||
s.mux.NotFound(webui.Handler().ServeHTTP)
|
||||
|
||||
s.mux.Route("/api", func(r chi.Router) {
|
||||
// Public OIDC PKCE plumbing — no auth required (it bootstraps it).
|
||||
r.Get("/auth/config", s.handleAuthConfig)
|
||||
// Rate-limit the credential-bearing OAuth endpoints (G4): they proxy to
|
||||
// the IdP, so without a cap cdrop is a brute-force / token-pivot relay.
|
||||
// Per-IP (RealIP is mounted above); 60/min is ample for real logins and
|
||||
// hourly refresh even behind a shared NAT, while choking a scripted flood.
|
||||
r.Group(func(r chi.Router) {
|
||||
r.Use(httprate.LimitByIP(60, time.Minute))
|
||||
r.Post("/auth/exchange", s.handleAuthExchange)
|
||||
r.Post("/auth/refresh", s.handleAuthRefresh)
|
||||
})
|
||||
|
||||
// Protected routes. gzip / compress is intentionally NOT mounted —
|
||||
// it would buffer the SSE stream.
|
||||
r.Group(func(r chi.Router) {
|
||||
r.Use(s.auth.Middleware)
|
||||
|
||||
// Clipboard is the one capability a scoped shortcut token may reach
|
||||
// (iOS Shortcut sync) — it must carry the "clipboard" scope. Full
|
||||
// login sessions pass requireScope unconditionally.
|
||||
r.Group(func(r chi.Router) {
|
||||
r.Use(requireScope(shortcutScope))
|
||||
r.Get("/clipboard", s.handleClipboardGet)
|
||||
r.Put("/clipboard", s.handleClipboardPut)
|
||||
// Lightweight version probe — no content; lets pollers (iOS
|
||||
// Shortcut) detect change cheaply before fetching the full body.
|
||||
r.Get("/clipboard/version", s.handleClipboardVersion)
|
||||
})
|
||||
|
||||
// Everything else requires a full login session; scoped shortcut
|
||||
// tokens are rejected, so a leaked token's blast radius stays the
|
||||
// clipboard and nothing more (including token self-management).
|
||||
r.Group(func(r chi.Router) {
|
||||
r.Use(rejectScoped)
|
||||
r.Get("/me", s.handleMe)
|
||||
r.Post("/me/disconnect", s.handleDisconnect)
|
||||
r.Get("/hub/events", s.handleEvents)
|
||||
r.Post("/hub/signal", s.handleSignal)
|
||||
r.Post("/message", s.handleMessage)
|
||||
r.Get("/devices", s.handleDevices)
|
||||
r.Delete("/devices/{name}", s.handleDeleteDevice)
|
||||
r.Get("/calls/credentials", s.handleCallsCredentials)
|
||||
r.Post("/shortcut/issue", s.handleShortcutIssue)
|
||||
r.Get("/shortcut", s.handleShortcutList)
|
||||
r.Delete("/shortcut/{jti}", s.handleShortcutRevoke)
|
||||
r.Route("/transfer", func(r chi.Router) {
|
||||
r.Post("/initiate", s.handleTransferInit)
|
||||
r.Post("/{id}/accept", s.transitionHandler(transfer.StateAccepted, ""))
|
||||
r.Post("/{id}/cancel", s.transitionHandler(transfer.StateCancelled, ""))
|
||||
r.Post("/{id}/p2p", s.transitionHandler(transfer.StateP2PActive, transfer.ModeP2P))
|
||||
r.Post("/{id}/fallback", s.transitionHandler(transfer.StateRelayActive, transfer.ModeRelay))
|
||||
r.Post("/{id}/done", s.transitionHandler(transfer.StateDone, ""))
|
||||
r.Post("/{id}/fail", s.transitionHandler(transfer.StateFailed, ""))
|
||||
})
|
||||
r.Route("/relay/{id}", func(r chi.Router) {
|
||||
r.Post("/chunk", s.handleRelayChunk)
|
||||
r.Get("/stream", s.handleRelayStream)
|
||||
})
|
||||
})
|
||||
})
|
||||
})
|
||||
}
|
||||
|
||||
type healthResp struct {
|
||||
Status string `json:"status"`
|
||||
AuthMode string `json:"auth_mode"`
|
||||
DBOK bool `json:"db_ok"`
|
||||
}
|
||||
|
||||
func (s *Server) handleHealth(w http.ResponseWriter, r *http.Request) {
|
||||
ctx, cancel := context.WithTimeout(r.Context(), 2*time.Second)
|
||||
defer cancel()
|
||||
|
||||
resp := healthResp{Status: "ok", AuthMode: s.cfg.AuthMode, DBOK: true}
|
||||
if err := s.db.PingContext(ctx); err != nil {
|
||||
resp.Status = "degraded"
|
||||
resp.DBOK = false
|
||||
slog.Error("healthz db ping failed", "err", err)
|
||||
}
|
||||
writeJSON(w, http.StatusOK, resp)
|
||||
}
|
||||
|
||||
type meResp struct {
|
||||
UserID string `json:"user_id"`
|
||||
Groups []string `json:"groups"`
|
||||
DeviceName string `json:"device_name"`
|
||||
}
|
||||
|
||||
func (s *Server) handleMe(w http.ResponseWriter, r *http.Request) {
|
||||
claims, ok := jwtauth.ClaimsFromContext(r.Context())
|
||||
if !ok {
|
||||
writeJSON(w, http.StatusInternalServerError, map[string]string{"error": "claims missing"})
|
||||
return
|
||||
}
|
||||
device, _ := jwtauth.DeviceNameFromContext(r.Context())
|
||||
writeJSON(w, http.StatusOK, meResp{
|
||||
UserID: claims.UserID,
|
||||
Groups: claims.Groups,
|
||||
DeviceName: device,
|
||||
})
|
||||
}
|
||||
|
||||
// handleDisconnect 是用户主动告知"本机要下线"的轻量信号（登出 / 关页前）。
|
||||
// auth 中间件会先 UPSERT device 把 last_seen 更新，本 handler 再 Kick 关闭
|
||||
// SSE + 立刻广播 presence，让对端不必等 30s 宽限期就看到本设备离线。
|
||||
func (s *Server) handleDisconnect(w http.ResponseWriter, r *http.Request) {
|
||||
claims, _ := jwtauth.ClaimsFromContext(r.Context())
|
||||
deviceName, _ := jwtauth.DeviceNameFromContext(r.Context())
|
||||
if deviceName == "" {
|
||||
writeJSON(w, http.StatusBadRequest, map[string]string{"error": "missing device"})
|
||||
return
|
||||
}
|
||||
s.hub.Kick(claims.UserID, deviceName)
|
||||
s.hub.PublishPresence(r.Context(), claims.UserID)
|
||||
w.WriteHeader(http.StatusNoContent)
|
||||
}
|
||||
|
||||
func writeJSON(w http.ResponseWriter, status int, v any) {
|
||||
w.Header().Set("Content-Type", "application/json; charset=utf-8")
|
||||
w.WriteHeader(status)
|
||||
_ = json.NewEncoder(w).Encode(v)
|
||||
}
|
||||
Reference in New Issue
Block a user