bd4bf00856
- 增加 CORS/CSP/安全响应头与代理信任配置 - 引入 URL 白名单与私网开关，校验上游与价格源 - 改善 API Key 处理与网关错误返回 - 管理端设置隐藏敏感字段并优化前端提示 - 增加计费熔断与相关配置示例 测试: go test ./...
65 lines
1.9 KiB
Go
65 lines
1.9 KiB
Go
package server
|
||
|
||
import (
|
||
"log"
|
||
"net/http"
|
||
"time"
|
||
|
||
"github.com/Wei-Shaw/sub2api/internal/config"
|
||
"github.com/Wei-Shaw/sub2api/internal/handler"
|
||
middleware2 "github.com/Wei-Shaw/sub2api/internal/server/middleware"
|
||
"github.com/Wei-Shaw/sub2api/internal/service"
|
||
|
||
"github.com/gin-gonic/gin"
|
||
"github.com/google/wire"
|
||
)
|
||
|
||
// ProviderSet 提供服务器层的依赖
|
||
var ProviderSet = wire.NewSet(
|
||
ProvideRouter,
|
||
ProvideHTTPServer,
|
||
)
|
||
|
||
// ProvideRouter 提供路由器
|
||
func ProvideRouter(
|
||
cfg *config.Config,
|
||
handlers *handler.Handlers,
|
||
jwtAuth middleware2.JWTAuthMiddleware,
|
||
adminAuth middleware2.AdminAuthMiddleware,
|
||
apiKeyAuth middleware2.ApiKeyAuthMiddleware,
|
||
apiKeyService *service.ApiKeyService,
|
||
subscriptionService *service.SubscriptionService,
|
||
) *gin.Engine {
|
||
if cfg.Server.Mode == "release" {
|
||
gin.SetMode(gin.ReleaseMode)
|
||
}
|
||
|
||
r := gin.New()
|
||
r.Use(middleware2.Recovery())
|
||
if len(cfg.Server.TrustedProxies) > 0 {
|
||
if err := r.SetTrustedProxies(cfg.Server.TrustedProxies); err != nil {
|
||
log.Printf("Failed to set trusted proxies: %v", err)
|
||
}
|
||
} else {
|
||
if err := r.SetTrustedProxies(nil); err != nil {
|
||
log.Printf("Failed to disable trusted proxies: %v", err)
|
||
}
|
||
}
|
||
|
||
return SetupRouter(r, handlers, jwtAuth, adminAuth, apiKeyAuth, apiKeyService, subscriptionService, cfg)
|
||
}
|
||
|
||
// ProvideHTTPServer 提供 HTTP 服务器
|
||
func ProvideHTTPServer(cfg *config.Config, router *gin.Engine) *http.Server {
|
||
return &http.Server{
|
||
Addr: cfg.Server.Address(),
|
||
Handler: router,
|
||
// ReadHeaderTimeout: 读取请求头的超时时间，防止慢速请求头攻击
|
||
ReadHeaderTimeout: time.Duration(cfg.Server.ReadHeaderTimeout) * time.Second,
|
||
// IdleTimeout: 空闲连接超时时间，释放不活跃的连接资源
|
||
IdleTimeout: time.Duration(cfg.Server.IdleTimeout) * time.Second,
|
||
// 注意：不设置 WriteTimeout，因为流式响应可能持续十几分钟
|
||
// 不设置 ReadTimeout，因为大请求体可能需要较长时间读取
|
||
}
|
||
}
|