mirror of
https://github.com/Studio-Saelix/sencho.git
synced 2026-08-08 18:05:10 +00:00
Anso
ba2cf99aa6
Move four small Round C route groups out of index.ts: - /api/auto-heal/* -> routes/autoHeal.ts - /api/notifications/*, /api/notification-routes/* -> routes/notifications.ts - /api/system/console-token -> routes/console.ts - /api/sso/config/* -> routes/ssoConfig.ts Share NOTIFICATION_CHANNEL_TYPES, cleanStackPatterns, and validateHttpsUrl via a new helpers/notificationChannels.ts so agents.ts and notifications.ts consume the same allowlist and URL validator. Handlers moved verbatim. Middleware chains and response shapes preserved. index.ts drops from 3231 to 2739 lines.
28 lines
1.2 KiB
TypeScript
28 lines
1.2 KiB
TypeScript
import { Router, type Request, type Response } from 'express';
|
|
import { authMiddleware } from '../middleware/auth';
|
|
import { requireAdmin, requireAdmiral } from '../middleware/tierGates';
|
|
import { rejectApiTokenScope } from '../middleware/apiTokenScope';
|
|
import { mintConsoleSession } from '../helpers/consoleSession';
|
|
|
|
/**
|
|
* Mint a short-lived `console_session` JWT. Used by the gateway when it
|
|
* needs to proxy an interactive terminal (host console or container exec)
|
|
* to a remote node: the long-lived `api_token` would be rejected by the
|
|
* remote's upgrade handler on interactive paths, so the gateway authenticates
|
|
* with the long-lived token, asks for this short-lived one, then forwards
|
|
* the WS upgrade using it.
|
|
*/
|
|
export const consoleRouter = Router();
|
|
|
|
consoleRouter.post('/console-token', authMiddleware, (req: Request, res: Response): void => {
|
|
if (rejectApiTokenScope(req, res, 'API tokens cannot generate console tokens.')) return;
|
|
if (!requireAdmin(req, res)) return;
|
|
if (!requireAdmiral(req, res)) return;
|
|
try {
|
|
res.json({ token: mintConsoleSession() });
|
|
} catch (error) {
|
|
console.error('Failed to issue console token:', error);
|
|
res.status(500).json({ error: 'Failed to issue console token' });
|
|
}
|
|
});
|