319 lines
16 KiB
Go
319 lines
16 KiB
Go
package api
|
|
|
|
import (
|
|
domainAPIKey "RenewCMS/internal/domain/apikey"
|
|
domainArticle "RenewCMS/internal/domain/article"
|
|
domainImage "RenewCMS/internal/domain/image"
|
|
domainInvite "RenewCMS/internal/domain/invite"
|
|
domainMail "RenewCMS/internal/domain/mail"
|
|
domainPurge "RenewCMS/internal/domain/purge"
|
|
domainUpdate "RenewCMS/internal/domain/update"
|
|
domainUser "RenewCMS/internal/domain/user"
|
|
"RenewCMS/internal/infrastructure/config"
|
|
"RenewCMS/internal/infrastructure/hashing"
|
|
"RenewCMS/internal/infrastructure/mailer"
|
|
"RenewCMS/internal/infrastructure/markdown"
|
|
"RenewCMS/internal/infrastructure/persistence/database"
|
|
persistence "RenewCMS/internal/infrastructure/persistence/repositories"
|
|
"RenewCMS/internal/infrastructure/scheduler"
|
|
"RenewCMS/internal/infrastructure/storage"
|
|
"RenewCMS/internal/infrastructure/update"
|
|
"RenewCMS/internal/infrastructure/useCases"
|
|
"crypto/ed25519"
|
|
"log"
|
|
"net/http"
|
|
"os"
|
|
"path/filepath"
|
|
"runtime"
|
|
"sync"
|
|
"time"
|
|
|
|
"github.com/go-chi/jwtauth/v5"
|
|
)
|
|
|
|
type UseCases struct {
|
|
apiKeyAuthOnce sync.Once
|
|
apiKeyAuthMiddleware func(http.Handler) http.Handler
|
|
Token *jwtauth.JWTAuth
|
|
PurgeScheduler *scheduler.Runner
|
|
CreateArticleUseCase *useCases.CreateArticleUseCase
|
|
GetArticleUseCase *useCases.GetArticleUseCase
|
|
ListArticlesUseCase *useCases.ListArticlesUseCase
|
|
UpdateArticleUseCase *useCases.UpdateArticleUseCase
|
|
DeleteArticleUseCase *useCases.DeleteArticleUseCase
|
|
GetUserUseCase *useCases.GetUserUseCase
|
|
CreateUserUseCase *useCases.CreateUserUseCase
|
|
AuthenticateUserUseCase *useCases.AuthenticateUserUseCase
|
|
VerifyUserUseCase *useCases.VerifyUserUseCase
|
|
CancelRegistrationUseCase *useCases.CancelRegistrationUseCase
|
|
RequestPasswordResetUseCase *useCases.RequestPasswordResetUseCase
|
|
ResetPasswordUseCase *useCases.ResetPasswordUseCase
|
|
UpdateUserProfileUseCase *useCases.UpdateUserProfileUseCase
|
|
ListUsersUseCase *useCases.ListUsersUseCase
|
|
CreateInviteUseCase *useCases.CreateInviteUseCase
|
|
CancelInviteUseCase *useCases.CancelInviteUseCase
|
|
RenewInviteUseCase *useCases.RenewInviteUseCase
|
|
ListUsersAndInvitesUseCase *useCases.ListUsersAndInvitesUseCase
|
|
GetInviteUseCase *useCases.GetInviteUseCase
|
|
AcceptInviteUseCase *useCases.AcceptInviteUseCase
|
|
SendMailUseCase *useCases.SendMailUseCase
|
|
CreateImageUseCase *useCases.CreateImageUseCase
|
|
OpenMediaUseCase *useCases.OpenMediaUseCase
|
|
ListMediaUseCase *useCases.ListMediaUseCase
|
|
RenameMediaUseCase *useCases.RenameMediaUseCase
|
|
DeleteMediaUseCase *useCases.DeleteMediaUseCase
|
|
MergeMediaUseCase *useCases.MergeMediaUseCase
|
|
GetMediaUsageUseCase *useCases.GetMediaUsageUseCase
|
|
GetPurgeSettingsUseCase *useCases.GetPurgeSettingsUseCase
|
|
UpdatePurgeSettingsUseCase *useCases.UpdatePurgeSettingsUseCase
|
|
PreviewPurgeUseCase *useCases.PreviewPurgeUseCase
|
|
RunPurgeUseCase *useCases.RunPurgeUseCase
|
|
GetSettingsUseCase *useCases.GetSettingsUseCase
|
|
GetUpdateStatusUseCase *useCases.GetUpdateStatusUseCase
|
|
CheckForUpdateUseCase *useCases.CheckForUpdateUseCase
|
|
StartUpdateDownloadUseCase *useCases.StartUpdateDownloadUseCase
|
|
RequestRestartUseCase *useCases.RequestRestartUseCase
|
|
RecordRunningInfoUseCase *useCases.RecordRunningInfoUseCase
|
|
CreateAPIKeyUseCase *useCases.CreateAPIKeyUseCase
|
|
ListAPIKeysUseCase *useCases.ListAPIKeysUseCase
|
|
RevokeAPIKeyUseCase *useCases.RevokeAPIKeyUseCase
|
|
AuthenticateAPIKeyUseCase *useCases.AuthenticateAPIKeyUseCase
|
|
}
|
|
|
|
type Repositories struct {
|
|
ArticleRepo domainArticle.Repository
|
|
UserRepo domainUser.Repository
|
|
ImageRepo domainImage.Repository
|
|
InviteRepo domainInvite.Repository
|
|
APIKeyRepo domainAPIKey.Repository
|
|
PurgeSettingsRepo domainPurge.Repository
|
|
MailRepo domainMail.Repository
|
|
ReleaseFeed domainUpdate.ReleaseFeed
|
|
UpdateStore domainUpdate.StatusStore
|
|
UpdateJobs domainUpdate.JobStore
|
|
UpdateHelper domainUpdate.HelperDetector
|
|
AssetFetcher domainUpdate.AssetFetcher
|
|
SignatureVerifier domainUpdate.SignatureVerifier
|
|
StagedRunner domainUpdate.StagedBinaryRunner
|
|
DatabaseBackup domainUpdate.DatabaseBackup
|
|
UpdateResults domainUpdate.ResultStore
|
|
RestartRequests domainUpdate.RestartRequestStore
|
|
RunningInfo domainUpdate.RunningInfoStore
|
|
}
|
|
|
|
const (
|
|
updateStatusFileName = "update-status.json"
|
|
updateJobFileName = "update-job.json"
|
|
updateHelperFileName = "update-helper.json"
|
|
updatesDirName = "updates"
|
|
backupsDirName = "backups"
|
|
)
|
|
|
|
func openImageStorage(settings config.Settings) domainImage.Storage {
|
|
imageStorage, err := storage.Open(storage.Config{Driver: storage.DriverLocal, Location: settings.UploadDir})
|
|
if err != nil {
|
|
panic("Unable to open the image storage: " + err.Error())
|
|
}
|
|
return imageStorage
|
|
}
|
|
|
|
func databaseConfig(settings config.Settings) database.Config {
|
|
switch settings.Database.Driver {
|
|
case config.DatabaseDriverMySQL:
|
|
return mysqlDatabaseConfig(settings.Database)
|
|
case "", config.DatabaseDriverSQLite:
|
|
return database.Config{Driver: database.DriverSQLite, Source: settings.DBFile}
|
|
default:
|
|
return database.Config{Driver: settings.Database.Driver}
|
|
}
|
|
}
|
|
|
|
func mysqlDatabaseConfig(settings config.DatabaseSettings) database.Config {
|
|
return database.Config{
|
|
Driver: database.DriverMySQL,
|
|
Source: database.MySQLDSN(database.MySQLConfig{
|
|
Host: settings.Host,
|
|
Port: settings.Port,
|
|
User: settings.User,
|
|
Password: settings.Password,
|
|
Name: settings.Name,
|
|
TLS: settings.TLS,
|
|
}),
|
|
Pool: &database.PoolSettings{
|
|
MaxOpenConns: settings.MaxOpenConns,
|
|
MaxIdleConns: settings.MaxIdleConns,
|
|
ConnMaxLifetime: settings.ConnMaxLifetime,
|
|
},
|
|
}
|
|
}
|
|
|
|
func openDatabase(settings config.Settings) *database.Connection {
|
|
connection, err := database.Connect(databaseConfig(settings))
|
|
if err != nil {
|
|
panic("Unable to open the database: " + err.Error())
|
|
}
|
|
if err := database.Migrate(connection.DB); err != nil {
|
|
panic("Failed to migrate database: " + err.Error())
|
|
}
|
|
return connection
|
|
}
|
|
|
|
func releasePublicKey() ed25519.PublicKey {
|
|
key, err := update.EmbeddedPublicKey()
|
|
if err != nil {
|
|
panic("Unable to read the embedded release key: " + err.Error())
|
|
}
|
|
return key
|
|
}
|
|
|
|
func getRepositories(connection *database.Connection, settings config.Settings) *Repositories {
|
|
db := connection.DB
|
|
dataDir := settings.DataDir()
|
|
return &Repositories{
|
|
ArticleRepo: persistence.NewArticleRepository(db),
|
|
UserRepo: persistence.NewUserRepository(db),
|
|
ImageRepo: persistence.NewImageRepository(db),
|
|
InviteRepo: persistence.NewInviteRepository(db),
|
|
APIKeyRepo: persistence.NewAPIKeyRepository(db),
|
|
PurgeSettingsRepo: persistence.NewPurgeSettingsRepository(db),
|
|
MailRepo: mailer.NewMailRepository(settings.Smtp),
|
|
ReleaseFeed: update.NewGiteaReleaseFeed(settings.UpdateFeedURL),
|
|
UpdateStore: update.NewJSONStatusStore(filepath.Join(dataDir, updateStatusFileName)),
|
|
UpdateJobs: update.NewJSONJobStore(filepath.Join(dataDir, updateJobFileName)),
|
|
UpdateHelper: update.NewContainerHelperDetector(update.NewFileHelperDetector(filepath.Join(dataDir, updateHelperFileName)), settings.Container),
|
|
AssetFetcher: update.NewHTTPAssetFetcher(settings.UpdateFeedURL),
|
|
SignatureVerifier: update.NewEd25519SignatureVerifier(releasePublicKey()),
|
|
StagedRunner: update.NewExecStagedBinaryRunner(),
|
|
DatabaseBackup: connection.NewBackup(filepath.Join(dataDir, backupsDirName), time.Now),
|
|
UpdateResults: update.NewJSONResultStore(filepath.Join(dataDir, domainUpdate.ResultFileName)),
|
|
RestartRequests: update.NewJSONRestartRequestStore(filepath.Join(dataDir, domainUpdate.RestartRequestFileName)),
|
|
RunningInfo: update.NewJSONRunningInfoStore(filepath.Join(dataDir, domainUpdate.RunningInfoFileName)),
|
|
}
|
|
}
|
|
|
|
func getUseCases(repos *Repositories, imageStorage domainImage.Storage, settings config.Settings) *UseCases {
|
|
hasher := hashing.NewBcryptHasher()
|
|
renderer := markdown.NewConverter()
|
|
keyGenerator := hashing.NewSHA256KeyGenerator()
|
|
mergeMedia := useCases.NewMergeMediaUseCase(repos.ImageRepo, repos.ArticleRepo, imageStorage)
|
|
|
|
runPurge := useCases.NewRunPurgeUseCase(repos.ImageRepo, repos.ArticleRepo, mergeMedia, repos.PurgeSettingsRepo, time.Now, log.Default())
|
|
purgeScheduler := useCases.NewPurgeSchedulerUseCase(repos.PurgeSettingsRepo, runPurge)
|
|
|
|
return &UseCases{
|
|
PurgeScheduler: scheduler.NewSystemRunner(purgeScheduler, log.Default()),
|
|
Token: jwtauth.New("HS256", []byte(settings.JWTSecret), nil),
|
|
CreateArticleUseCase: useCases.NewCreateArticleUseCase(repos.ArticleRepo, renderer),
|
|
GetArticleUseCase: useCases.NewGetArticleUseCase(repos.ArticleRepo, renderer),
|
|
ListArticlesUseCase: useCases.NewListArticlesUseCase(repos.ArticleRepo, renderer),
|
|
UpdateArticleUseCase: useCases.NewUpdateArticleUseCase(repos.ArticleRepo, renderer),
|
|
DeleteArticleUseCase: useCases.NewDeleteArticleUseCase(repos.ArticleRepo),
|
|
GetUserUseCase: useCases.NewGetUserUseCase(repos.UserRepo),
|
|
CreateUserUseCase: useCases.NewCreateUserUseCase(repos.UserRepo, hasher, repos.MailRepo, settings.PublicURL),
|
|
AuthenticateUserUseCase: useCases.NewAuthenticateUserUseCase(repos.UserRepo, hasher),
|
|
VerifyUserUseCase: useCases.NewVerifyUserUseCase(repos.UserRepo, hasher),
|
|
CancelRegistrationUseCase: useCases.NewCancelRegistrationUseCase(repos.UserRepo),
|
|
RequestPasswordResetUseCase: useCases.NewRequestPasswordResetUseCase(repos.UserRepo, hasher, repos.MailRepo, settings.PublicURL),
|
|
ResetPasswordUseCase: useCases.NewResetPasswordUseCase(repos.UserRepo, hasher, repos.APIKeyRepo, time.Now),
|
|
UpdateUserProfileUseCase: useCases.NewUpdateUserProfileUseCase(repos.UserRepo),
|
|
ListUsersUseCase: useCases.NewListUsersUseCase(repos.UserRepo),
|
|
CreateInviteUseCase: useCases.NewCreateInviteUseCase(repos.UserRepo, repos.InviteRepo, hasher, repos.MailRepo, settings.PublicURL),
|
|
CancelInviteUseCase: useCases.NewCancelInviteUseCase(repos.InviteRepo),
|
|
RenewInviteUseCase: useCases.NewRenewInviteUseCase(repos.UserRepo, repos.InviteRepo, hasher, repos.MailRepo, settings.PublicURL),
|
|
ListUsersAndInvitesUseCase: useCases.NewListUsersAndInvitesUseCase(repos.UserRepo, repos.InviteRepo),
|
|
GetInviteUseCase: useCases.NewGetInviteUseCase(repos.InviteRepo, hasher),
|
|
AcceptInviteUseCase: useCases.NewAcceptInviteUseCase(repos.UserRepo, repos.InviteRepo, hasher),
|
|
SendMailUseCase: useCases.NewSendMailUseCase(repos.MailRepo),
|
|
CreateImageUseCase: useCases.NewCreateImageUseCase(repos.ImageRepo, imageStorage),
|
|
OpenMediaUseCase: useCases.NewOpenMediaUseCase(imageStorage),
|
|
ListMediaUseCase: useCases.NewListMediaUseCase(repos.ImageRepo, repos.ArticleRepo, repos.UserRepo),
|
|
RenameMediaUseCase: useCases.NewRenameMediaUseCase(repos.ImageRepo),
|
|
DeleteMediaUseCase: useCases.NewDeleteMediaUseCase(repos.ImageRepo, imageStorage),
|
|
MergeMediaUseCase: mergeMedia,
|
|
GetMediaUsageUseCase: useCases.NewGetMediaUsageUseCase(repos.ImageRepo, repos.ArticleRepo),
|
|
GetPurgeSettingsUseCase: useCases.NewGetPurgeSettingsUseCase(repos.PurgeSettingsRepo),
|
|
UpdatePurgeSettingsUseCase: useCases.NewUpdatePurgeSettingsUseCase(repos.PurgeSettingsRepo, time.Now),
|
|
PreviewPurgeUseCase: useCases.NewPreviewPurgeUseCase(repos.ImageRepo, repos.ArticleRepo),
|
|
RunPurgeUseCase: runPurge,
|
|
GetSettingsUseCase: useCases.NewGetSettingsUseCase(settings.Version),
|
|
GetUpdateStatusUseCase: useCases.NewGetUpdateStatusUseCase(repos.UpdateStore, repos.UpdateJobs, repos.UpdateHelper, repos.UpdateResults, repos.RestartRequests, settings.Version, settings.Container, time.Now),
|
|
CheckForUpdateUseCase: useCases.NewCheckForUpdateUseCase(repos.ReleaseFeed, repos.UpdateStore, settings.Version, time.Now),
|
|
StartUpdateDownloadUseCase: startUpdateDownloadUseCase(repos, settings),
|
|
RequestRestartUseCase: useCases.NewRequestRestartUseCase(repos.UpdateStore, repos.UpdateJobs, repos.UpdateHelper, repos.UpdateResults, repos.RestartRequests, settings.Version, time.Now),
|
|
RecordRunningInfoUseCase: useCases.NewRecordRunningInfoUseCase(repos.RunningInfo, settings.Version, os.Getpid(), time.Now),
|
|
CreateAPIKeyUseCase: useCases.NewCreateAPIKeyUseCase(repos.APIKeyRepo, keyGenerator, time.Now),
|
|
ListAPIKeysUseCase: useCases.NewListAPIKeysUseCase(repos.APIKeyRepo, repos.UserRepo, time.Now),
|
|
RevokeAPIKeyUseCase: useCases.NewRevokeAPIKeyUseCase(repos.APIKeyRepo, repos.UserRepo, time.Now),
|
|
AuthenticateAPIKeyUseCase: useCases.NewAuthenticateAPIKeyUseCase(repos.APIKeyRepo, keyGenerator, repos.UserRepo, time.Now),
|
|
}
|
|
}
|
|
|
|
func startUpdateDownloadUseCase(repos *Repositories, settings config.Settings) *useCases.StartUpdateDownloadUseCase {
|
|
return useCases.NewStartUpdateDownloadUseCase(useCases.StartUpdateDownloadDependencies{
|
|
Store: repos.UpdateStore,
|
|
Jobs: repos.UpdateJobs,
|
|
Helper: repos.UpdateHelper,
|
|
Results: repos.UpdateResults,
|
|
Requests: repos.RestartRequests,
|
|
Fetcher: repos.AssetFetcher,
|
|
Verifier: repos.SignatureVerifier,
|
|
Runner: repos.StagedRunner,
|
|
Backup: repos.DatabaseBackup,
|
|
Staging: update.NewOSStagingArea(filepath.Join(settings.DataDir(), updatesDirName)),
|
|
Logger: log.Default(),
|
|
CurrentVersion: settings.Version,
|
|
Platform: domainUpdate.Platform{OS: runtime.GOOS, Arch: runtime.GOARCH},
|
|
FeedURL: settings.UpdateFeedURL,
|
|
Now: time.Now,
|
|
})
|
|
}
|
|
|
|
func InitContainer(settings config.Settings) (*UseCases, func() error) {
|
|
imageStorage := openImageStorage(settings)
|
|
connection := openDatabase(settings)
|
|
repos := getRepositories(connection, settings)
|
|
if err := useCases.NewBackfillImageMetadataUseCase(repos.ImageRepo, imageStorage).Run(); err != nil {
|
|
panic("Failed to backfill image metadata: " + err.Error())
|
|
}
|
|
return getUseCases(repos, imageStorage, settings), connection.Close
|
|
}
|
|
|
|
type BrowserUpdateCommands struct {
|
|
Enable *useCases.EnableBrowserUpdatesUseCase
|
|
Disable *useCases.DisableBrowserUpdatesUseCase
|
|
}
|
|
|
|
func InitBrowserUpdateCommands() *BrowserUpdateCommands {
|
|
units := update.NewSystemdUnits()
|
|
dependencies := useCases.ManageBrowserUpdatesDependencies{
|
|
Probe: update.NewSystemMachineProbe(),
|
|
Locator: units,
|
|
Units: units,
|
|
Manager: update.NewSystemctlControl(domainUpdate.ServiceUnitName),
|
|
Status: update.NewJSONHelperStatusWriter(),
|
|
Now: time.Now,
|
|
}
|
|
return &BrowserUpdateCommands{
|
|
Enable: useCases.NewEnableBrowserUpdatesUseCase(dependencies),
|
|
Disable: useCases.NewDisableBrowserUpdatesUseCase(dependencies),
|
|
}
|
|
}
|
|
|
|
func InitApplyUpdateCommand(options domainUpdate.InstallOptions) *useCases.ApplyRestartRequestUseCase {
|
|
layout := domainUpdate.HelperLayout{DataDir: options.DataDir, BinaryPath: options.Binary}
|
|
files := update.NewNoFollowFilesystem()
|
|
return useCases.NewApplyRestartRequestUseCase(useCases.ApplyRestartRequestDependencies{
|
|
Requests: update.NewFSRestartRequestStore(files, layout.RestartRequestPath()),
|
|
Results: update.NewFSResultStore(files, layout.ResultPath()),
|
|
Running: update.NewJSONRunningInfoStore(filepath.Join(options.DataDir, domainUpdate.RunningInfoFileName)),
|
|
Files: files,
|
|
Service: update.NewSystemctlControl(options.Service),
|
|
Health: update.NewHTTPHealthChecker(options.Port),
|
|
Verifier: update.NewEd25519SignatureVerifier(releasePublicKey()),
|
|
Clock: update.NewSystemClock(),
|
|
Logger: log.Default(),
|
|
Layout: layout,
|
|
Platform: domainUpdate.Platform{OS: runtime.GOOS, Arch: runtime.GOARCH},
|
|
})
|
|
}
|