1f81ca9eb0
Security: - Move config export behind auth middleware - Validate OIDC callback token before storing in localStorage - Use constant-time comparison for webhook secret - Encrypt OIDC client secret at rest (like registry tokens) Performance: - Make TriggerDeploy async from HTTP handlers (return deploy ID immediately, run pipeline in background goroutine) Robustness: - Wrap api.ts res.json() in try/catch for non-JSON responses i18n: - Replace ~20 hardcoded English validation messages with $t() calls - Localize ConfirmDialog cancel button, InstanceCard confirm titles, ProjectCard instance/instances pluralization - Add validation keys to both en.json and ru.json
181 lines
4.7 KiB
Go
181 lines
4.7 KiB
Go
package api
|
|
|
|
import (
|
|
"log/slog"
|
|
"net/http"
|
|
"strconv"
|
|
"strings"
|
|
|
|
"github.com/alexei/docker-watcher/internal/store"
|
|
)
|
|
|
|
// listDeploys handles GET /api/deploys.
|
|
func (s *Server) listDeploys(w http.ResponseWriter, r *http.Request) {
|
|
limitStr := r.URL.Query().Get("limit")
|
|
limit := 50
|
|
if limitStr != "" {
|
|
if parsed, err := strconv.Atoi(limitStr); err == nil && parsed > 0 {
|
|
limit = parsed
|
|
}
|
|
}
|
|
|
|
deploys, err := s.store.GetRecentDeploys(limit)
|
|
if err != nil {
|
|
respondError(w, http.StatusInternalServerError, "failed to list deploys: "+err.Error())
|
|
return
|
|
}
|
|
respondJSON(w, http.StatusOK, deploys)
|
|
}
|
|
|
|
// NOTE: getDeployLogs has been replaced by streamDeployLogs in sse.go.
|
|
// The new handler supports both SSE streaming and JSON fallback via Accept header.
|
|
|
|
// inspectRequest is the expected JSON body for POST /api/deploy/inspect.
|
|
type inspectRequest struct {
|
|
Image string `json:"image"`
|
|
}
|
|
|
|
// inspectResponse is the response body for POST /api/deploy/inspect.
|
|
type inspectResponse struct {
|
|
Image string `json:"image"`
|
|
Port int `json:"port"`
|
|
Healthcheck string `json:"healthcheck"`
|
|
}
|
|
|
|
// inspectImage handles POST /api/deploy/inspect.
|
|
// Pulls the image and inspects it for EXPOSE ports and healthcheck config.
|
|
func (s *Server) inspectImage(w http.ResponseWriter, r *http.Request) {
|
|
var req inspectRequest
|
|
if !decodeJSON(w, r, &req) {
|
|
return
|
|
}
|
|
|
|
if req.Image == "" {
|
|
respondError(w, http.StatusBadRequest, "image is required")
|
|
return
|
|
}
|
|
|
|
ctx := r.Context()
|
|
|
|
// Pull the image first so it's available locally for inspection.
|
|
// Split image:tag for the pull call.
|
|
imageRef, tag := splitImageTag(req.Image)
|
|
if err := s.docker.PullImage(ctx, imageRef, tag, ""); err != nil {
|
|
slog.Warn("pull image for inspect", "image", req.Image, "error", err)
|
|
// Try to inspect anyway in case the image is already local.
|
|
}
|
|
|
|
info, err := s.docker.InspectImage(ctx, req.Image)
|
|
if err != nil {
|
|
respondError(w, http.StatusInternalServerError, "failed to inspect image: "+err.Error())
|
|
return
|
|
}
|
|
|
|
port := extractPort(info.ExposedPorts)
|
|
|
|
respondJSON(w, http.StatusOK, inspectResponse{
|
|
Image: req.Image,
|
|
Port: port,
|
|
Healthcheck: info.Healthcheck,
|
|
})
|
|
}
|
|
|
|
// quickDeployRequest is the expected JSON body for POST /api/deploy/quick.
|
|
type quickDeployRequest struct {
|
|
Name string `json:"name"`
|
|
Image string `json:"image"`
|
|
Tag string `json:"tag"`
|
|
Registry string `json:"registry"`
|
|
Port int `json:"port"`
|
|
}
|
|
|
|
// quickDeploy handles POST /api/deploy/quick.
|
|
// Creates a project, a default stage, and triggers a deploy in one call.
|
|
func (s *Server) quickDeploy(w http.ResponseWriter, r *http.Request) {
|
|
var req quickDeployRequest
|
|
if !decodeJSON(w, r, &req) {
|
|
return
|
|
}
|
|
|
|
if req.Image == "" {
|
|
respondError(w, http.StatusBadRequest, "image is required")
|
|
return
|
|
}
|
|
if req.Tag == "" {
|
|
req.Tag = "latest"
|
|
}
|
|
if req.Name == "" {
|
|
// Derive name from image.
|
|
parts := strings.Split(req.Image, "/")
|
|
req.Name = parts[len(parts)-1]
|
|
}
|
|
|
|
// Create project.
|
|
project, err := s.store.CreateProject(store.Project{
|
|
Name: req.Name,
|
|
Image: req.Image,
|
|
Registry: req.Registry,
|
|
Port: req.Port,
|
|
Env: "{}",
|
|
Volumes: "{}",
|
|
})
|
|
if err != nil {
|
|
respondError(w, http.StatusInternalServerError, "failed to create project: "+err.Error())
|
|
return
|
|
}
|
|
|
|
// Create default stage.
|
|
stage, err := s.store.CreateStage(store.Stage{
|
|
ProjectID: project.ID,
|
|
Name: "dev",
|
|
TagPattern: "*",
|
|
AutoDeploy: true,
|
|
MaxInstances: 1,
|
|
})
|
|
if err != nil {
|
|
respondError(w, http.StatusInternalServerError, "failed to create stage: "+err.Error())
|
|
return
|
|
}
|
|
|
|
// Trigger deploy asynchronously.
|
|
deployID, err := s.deployer.AsyncTriggerDeploy(r.Context(), project.ID, stage.ID, req.Tag)
|
|
if err != nil {
|
|
respondError(w, http.StatusInternalServerError, "failed to trigger deploy: "+err.Error())
|
|
return
|
|
}
|
|
|
|
respondJSON(w, http.StatusAccepted, map[string]any{
|
|
"project": project,
|
|
"stage": stage,
|
|
"tag": req.Tag,
|
|
"deploy_id": deployID,
|
|
"status": "deploying",
|
|
})
|
|
}
|
|
|
|
// splitImageTag splits "image:tag" into image and tag parts.
|
|
// Returns the full string and empty tag if no colon separator is found.
|
|
func splitImageTag(ref string) (string, string) {
|
|
if idx := strings.LastIndex(ref, ":"); idx != -1 {
|
|
afterColon := ref[idx+1:]
|
|
if !strings.Contains(afterColon, "/") {
|
|
return ref[:idx], afterColon
|
|
}
|
|
}
|
|
return ref, ""
|
|
}
|
|
|
|
// extractPort parses the first exposed port from Docker EXPOSE entries.
|
|
// Entries are in the form "8080/tcp" or "8080". Returns 0 if none found.
|
|
func extractPort(exposedPorts []string) int {
|
|
if len(exposedPorts) == 0 {
|
|
return 0
|
|
}
|
|
raw := exposedPorts[0]
|
|
if idx := strings.Index(raw, "/"); idx != -1 {
|
|
raw = raw[:idx]
|
|
}
|
|
port, _ := strconv.Atoi(raw)
|
|
return port
|
|
}
|