pronounsfu/backend/server/server.go

99 lines
2.2 KiB
Go
Raw Normal View History

2022-05-02 08:19:37 -07:00
package server
import (
"net/http"
2022-05-02 08:19:37 -07:00
"os"
2022-05-25 15:41:06 -07:00
"strconv"
"time"
2022-05-02 08:19:37 -07:00
"codeberg.org/u1f320/pronouns.cc/backend/db"
"codeberg.org/u1f320/pronouns.cc/backend/server/auth"
2022-05-02 08:19:37 -07:00
"github.com/go-chi/chi/v5"
"github.com/go-chi/chi/v5/middleware"
2022-05-25 15:41:06 -07:00
"github.com/go-chi/httprate"
"github.com/go-chi/render"
2022-05-02 08:19:37 -07:00
)
// Revision is the git commit, filled at build time
var Revision = "[unknown]"
type Server struct {
Router *chi.Mux
DB *db.DB
Auth *auth.Verifier
}
func New() (*Server, error) {
db, err := db.New()
2022-05-02 08:19:37 -07:00
if err != nil {
return nil, err
}
s := &Server{
Router: chi.NewMux(),
DB: db,
Auth: auth.New(),
}
if os.Getenv("DEBUG") == "true" {
s.Router.Use(middleware.Logger)
}
s.Router.Use(middleware.Recoverer)
// enable authentication for all routes (but don't require it)
s.Router.Use(s.maybeAuth)
2022-05-25 15:41:06 -07:00
// rate limit handling
// - 120 req/minute (2/s)
// - keyed by Authorization header if valid token is provided, otherwise by IP
// - returns rate limit reset info in error
s.Router.Use(httprate.Limit(
120, time.Minute,
httprate.WithKeyFuncs(func(r *http.Request) (string, error) {
_, ok := ClaimsFromContext(r.Context())
if token := r.Header.Get("Authorization"); ok && token != "" {
return token, nil
}
ip, err := httprate.KeyByIP(r)
return ip, err
}),
httprate.WithLimitHandler(func(w http.ResponseWriter, r *http.Request) {
reset, _ := strconv.Atoi(w.Header().Get("X-RateLimit-Reset"))
render.Status(r, http.StatusTooManyRequests)
render.JSON(w, r, APIError{
Code: ErrTooManyRequests,
Message: errCodeMessages[ErrTooManyRequests],
RatelimitReset: &reset,
})
}),
))
// return an API error for not found + method not allowed
s.Router.NotFound(func(w http.ResponseWriter, r *http.Request) {
render.Status(r, errCodeStatuses[ErrNotFound])
render.JSON(w, r, APIError{
Code: ErrNotFound,
Message: errCodeMessages[ErrNotFound],
})
})
s.Router.MethodNotAllowed(func(w http.ResponseWriter, r *http.Request) {
render.Status(r, errCodeStatuses[ErrMethodNotAllowed])
render.JSON(w, r, APIError{
Code: ErrMethodNotAllowed,
Message: errCodeMessages[ErrMethodNotAllowed],
})
})
2022-05-02 08:19:37 -07:00
return s, nil
}
type ctxKey int
const (
ctxKeyClaims ctxKey = 1
)