Initial DDC release

internal/server/server.go

@@ -0,0 +1,73 @@
+package server
+
+import (
+	"net/http"
+	"strings"
+	"time"
+
+	"ddc/internal/auth"
+	"ddc/internal/config"
+	"ddc/internal/jobs"
+	"ddc/web"
+)
+
+const (
+	maxLoginFailures = 5
+	loginLockout     = 15 * time.Minute
+)
+
+type Server struct {
+	settings config.Settings
+	sessions *auth.SessionStore
+	limiter  *auth.LoginLimiter
+	manager  *jobs.Manager
+}
+
+func New(settings config.Settings, sessions *auth.SessionStore, manager *jobs.Manager) http.Handler {
+	server := &Server{
+		settings: settings,
+		sessions: sessions,
+		limiter:  auth.NewLoginLimiter(maxLoginFailures, loginLockout),
+		manager:  manager,
+	}
+	return server.routes()
+}
+
+func (server *Server) routes() http.Handler {
+	api := http.NewServeMux()
+	api.HandleFunc("POST /api/logout", server.handleLogout)
+	api.HandleFunc("GET /api/libraries", server.handleLibraries)
+	api.HandleFunc("GET /api/disk", server.handleDisk)
+	api.HandleFunc("GET /api/settings", server.handleGetSettings)
+	api.HandleFunc("POST /api/settings", server.handleUpdateSettings)
+	api.HandleFunc("GET /api/jobs", server.handleListJobs)
+	api.HandleFunc("POST /api/jobs", server.handleCreateJob)
+	api.HandleFunc("GET /api/jobs/{id}/files", server.handleJobFiles)
+	api.HandleFunc("POST /api/jobs/{id}/extract", server.handleExtract)
+	api.HandleFunc("POST /api/jobs/{id}/move", server.handleMove)
+	api.HandleFunc("DELETE /api/jobs/{id}", server.handleDeleteJob)
+
+	root := http.NewServeMux()
+	root.HandleFunc("POST /api/login", server.handleLogin)
+	root.HandleFunc("GET /api/session", server.handleSession)
+	root.HandleFunc("GET /healthz", handleHealth)
+	root.Handle("/api/", server.requireSession(api))
+	root.Handle("/", staticHandler())
+
+	return securityHeaders(protectStateChanges(root))
+}
+
+func staticHandler() http.Handler {
+	fileServer := http.FileServerFS(web.Static())
+	return http.HandlerFunc(func(writer http.ResponseWriter, request *http.Request) {
+		if request.URL.Path != "/" && strings.HasSuffix(request.URL.Path, "/") {
+			http.NotFound(writer, request)
+			return
+		}
+		fileServer.ServeHTTP(writer, request)
+	})
+}
+
+func handleHealth(writer http.ResponseWriter, _ *http.Request) {
+	writer.WriteHeader(http.StatusNoContent)
+}