yangjianbo
bd4bf00856
- 增加 CORS/CSP/安全响应头与代理信任配置 - 引入 URL 白名单与私网开关，校验上游与价格源 - 改善 API Key 处理与网关错误返回 - 管理端设置隐藏敏感字段并优化前端提示 - 增加计费熔断与相关配置示例 测试: go test ./...
65 lines
1.9 KiB
Go
65 lines
1.9 KiB
Go
package server
|
|
|
|
import (
|
|
"log"
|
|
"net/http"
|
|
"time"
|
|
|
|
"github.com/Wei-Shaw/sub2api/internal/config"
|
|
"github.com/Wei-Shaw/sub2api/internal/handler"
|
|
middleware2 "github.com/Wei-Shaw/sub2api/internal/server/middleware"
|
|
"github.com/Wei-Shaw/sub2api/internal/service"
|
|
|
|
"github.com/gin-gonic/gin"
|
|
"github.com/google/wire"
|
|
)
|
|
|
|
// ProviderSet 提供服务器层的依赖
|
|
var ProviderSet = wire.NewSet(
|
|
ProvideRouter,
|
|
ProvideHTTPServer,
|
|
)
|
|
|
|
// ProvideRouter 提供路由器
|
|
func ProvideRouter(
|
|
cfg *config.Config,
|
|
handlers *handler.Handlers,
|
|
jwtAuth middleware2.JWTAuthMiddleware,
|
|
adminAuth middleware2.AdminAuthMiddleware,
|
|
apiKeyAuth middleware2.ApiKeyAuthMiddleware,
|
|
apiKeyService *service.ApiKeyService,
|
|
subscriptionService *service.SubscriptionService,
|
|
) *gin.Engine {
|
|
if cfg.Server.Mode == "release" {
|
|
gin.SetMode(gin.ReleaseMode)
|
|
}
|
|
|
|
r := gin.New()
|
|
r.Use(middleware2.Recovery())
|
|
if len(cfg.Server.TrustedProxies) > 0 {
|
|
if err := r.SetTrustedProxies(cfg.Server.TrustedProxies); err != nil {
|
|
log.Printf("Failed to set trusted proxies: %v", err)
|
|
}
|
|
} else {
|
|
if err := r.SetTrustedProxies(nil); err != nil {
|
|
log.Printf("Failed to disable trusted proxies: %v", err)
|
|
}
|
|
}
|
|
|
|
return SetupRouter(r, handlers, jwtAuth, adminAuth, apiKeyAuth, apiKeyService, subscriptionService, cfg)
|
|
}
|
|
|
|
// ProvideHTTPServer 提供 HTTP 服务器
|
|
func ProvideHTTPServer(cfg *config.Config, router *gin.Engine) *http.Server {
|
|
return &http.Server{
|
|
Addr: cfg.Server.Address(),
|
|
Handler: router,
|
|
// ReadHeaderTimeout: 读取请求头的超时时间，防止慢速请求头攻击
|
|
ReadHeaderTimeout: time.Duration(cfg.Server.ReadHeaderTimeout) * time.Second,
|
|
// IdleTimeout: 空闲连接超时时间，释放不活跃的连接资源
|
|
IdleTimeout: time.Duration(cfg.Server.IdleTimeout) * time.Second,
|
|
// 注意：不设置 WriteTimeout，因为流式响应可能持续十几分钟
|
|
// 不设置 ReadTimeout，因为大请求体可能需要较长时间读取
|
|
}
|
|
}
|