70 lines
4.0 KiB
C#
70 lines
4.0 KiB
C#
using Microsoft.AspNetCore.Builder;
|
||
using Microsoft.AspNetCore.Http;
|
||
using Microsoft.AspNetCore.Routing;
|
||
using MoShiro.Backend.Application;
|
||
using MoShiro.Protocol;
|
||
|
||
namespace MoShiro.Backend.Api;
|
||
|
||
/// <summary>运维端点：<c>/healthz</c>、<c>/metrics</c>（admin 令牌）、一行安装脚本（<c>/install</c>、<c>/install.ps1</c>）。</summary>
|
||
public static class OpsEndpoints
|
||
{
|
||
private const string Tag = "ops";
|
||
|
||
public static void Map(IEndpointRouteBuilder app)
|
||
{
|
||
app.MapGet("/healthz", HealthAsync)
|
||
.Api("health_get", "SQLite and the raw data directory are both writable", Tag)
|
||
.Returns<HealthDto>().ProducesProblems(503);
|
||
app.MapGet("/metrics", MetricsAsync)
|
||
.Api("metrics_get", "Prometheus metrics (admin token)", Tag)
|
||
.Produces(StatusCodes.Status200OK, contentType: "text/plain").ProducesProblems(401, 403);
|
||
// 一行安装：curl -fsSL 'https://panel/install?code=…' | bash（macOS 用 zsh），irm 'https://panel/install.ps1?code=…' | iex（Windows）。
|
||
// Agent 和 Probe 是同一份脚本，角色、网关和镜像由一次性代码决定；代码不能用就是 404。
|
||
app.MapGet("/install", (HttpContext http, JoinTokenService tokens, BackendOptions options, string? code) => InstallAsync(http, tokens, options, code, "install.sh", "text/x-shellscript"))
|
||
.Api("install_sh", "One-line installer for Linux and macOS nodes (agent or probe, decided by the code)", Tag)
|
||
.Produces(StatusCodes.Status200OK, contentType: "text/x-shellscript").ProducesProblems(404);
|
||
app.MapGet("/install.sh", (HttpContext http, JoinTokenService tokens, BackendOptions options, string? code) => InstallAsync(http, tokens, options, code, "install.sh", "text/x-shellscript"))
|
||
.ExcludeFromDescription();
|
||
app.MapGet("/install.ps1", (HttpContext http, JoinTokenService tokens, BackendOptions options, string? code) => InstallAsync(http, tokens, options, code, "install.ps1", "text/plain"))
|
||
.Api("install_ps1", "One-line installer for Windows nodes (agent or probe, decided by the code)", Tag)
|
||
.Produces(StatusCodes.Status200OK, contentType: "text/plain").ProducesProblems(404);
|
||
}
|
||
|
||
private static async Task<IResult> InstallAsync(HttpContext http, JoinTokenService tokens, BackendOptions options, string? code, string resource, string contentType)
|
||
{
|
||
string baseUrl = options.PublicUrl ?? $"{http.Request.Scheme}://{http.Request.Host}";
|
||
InstallTarget? target = string.IsNullOrEmpty(code) ? null : await tokens.ResolveInstallAsync(code, baseUrl, http.RequestAborted);
|
||
if (target is null)
|
||
{
|
||
return Problems.Create(http, MoShiroErrors.NotFound, "the install code is invalid, expired or already used");
|
||
}
|
||
|
||
string script = InstallScripts.Render(resource, target);
|
||
http.Response.Headers.CacheControl = "no-store";
|
||
return TypedResults.Text(script, contentType + "; charset=utf-8");
|
||
}
|
||
|
||
private static async Task<IResult> HealthAsync(HttpContext http, OpsService ops)
|
||
{
|
||
StorageHealth health = await ops.HealthAsync(http.RequestAborted);
|
||
bool ok = health.Database && health.RawDirectory;
|
||
HealthDto dto = new(ok ? "ok" : "unavailable", health.Database, health.RawDirectory);
|
||
http.Response.Headers.CacheControl = "no-store";
|
||
return TypedResults.Json(dto, ApiJsonContext.Default.HealthDto, statusCode: ok ? StatusCodes.Status200OK : StatusCodes.Status503ServiceUnavailable);
|
||
}
|
||
|
||
private static async Task<IResult> MetricsAsync(HttpContext http, OpsService ops)
|
||
{
|
||
Principal principal = http.GetPrincipal();
|
||
if (!principal.IsAdmin)
|
||
{
|
||
return principal.CanRead
|
||
? Problems.Create(http, MoShiroErrors.Forbidden, "an admin token is required")
|
||
: Problems.Create(http, MoShiroErrors.Unauthorized, "an admin token is required");
|
||
}
|
||
|
||
return TypedResults.Text(await ops.RenderPrometheusAsync(http.RequestAborted), "text/plain; version=0.0.4");
|
||
}
|
||
}
|