cneicy/new-api-custom
1
0 Fork 0
Code Issues 1 Pull Requests Packages Projects Releases Wiki Activity

feat: publish sanitized custom.97 source

Browse Source
This commit is contained in:
cneicy committed 2026-10-27 20:43:39 +08:00
1 parent 8e6ed0317b
commit 86c0276156
1022 files changed
+69903 -19207
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

router/api-router.go
+22 -6
View File
@@ -1,6 +1,8 @@
package router
import (
"net/http"
"github.com/QuantumNous/new-api/controller"
"github.com/QuantumNous/new-api/middleware"
"github.com/QuantumNous/new-api/service/authz"
@@ -13,6 +15,8 @@ import (
)
func SetApiRouter(router *gin.Engine) {
// SSE must bypass the API gzip middleware to flush events immediately.
router.GET("/api/group-status/events", middleware.RouteTag("api"), middleware.GlobalAPIRateLimit(), controller.StreamGroupStatus)
apiRouter := router.Group("/api")
apiRouter.Use(middleware.RouteTag("api"))
apiRouter.Use(gzip.Gzip(gzip.DefaultCompression))
@@ -24,6 +28,11 @@ func SetApiRouter(router *gin.Engine) {
apiRouter.GET("/setup", controller.GetSetup)
apiRouter.POST("/setup", anonymousRequestBodyLimit, controller.PostSetup)
apiRouter.GET("/status", controller.GetStatus)
apiRouter.POST("/bot/balances", controller.BotBalanceQuery)
apiRouter.POST("/bot/chaintest", controller.BotChainTest)
apiRouter.GET("/bot/chaintest/:id", controller.BotChainTest)
apiRouter.POST("/bot/ciallo", controller.BotCiallo)
apiRouter.GET("/bot/ciallo/:id", controller.BotCiallo)
apiRouter.GET("/uptime/status", controller.GetGroupStatus)
apiRouter.GET("/group-status", controller.GetSiteGroupStatus)
apiRouter.GET("/uptime/admin", middleware.AdminAuth(), controller.GetStatusPageAdmin)
@@ -106,10 +115,17 @@ func SetApiRouter(router *gin.Engine) {
selfRoute.GET("/models", controller.GetUserModels)
selfRoute.PUT("/self", middleware.CriticalRateLimit(), middleware.DisableCache(), controller.UpdateSelf)
selfRoute.DELETE("/self", middleware.DisableCache(), controller.DeleteSelf)
selfRoute.GET("/token", middleware.CriticalRateLimit(), middleware.UserCriticalRateLimit("access-token"), middleware.DisableCache(), controller.GenerateAccessToken)
selfRoute.GET("/token/status", middleware.DisableCache(), controller.GetAccessTokenStatus)
selfRoute.POST("/token", middleware.CriticalRateLimit(), middleware.UserCriticalRateLimit("access-token"), middleware.DisableCache(), controller.GenerateAccessToken)
selfRoute.DELETE("/token", middleware.CriticalRateLimit(), middleware.UserCriticalRateLimit("access-token"), middleware.DisableCache(), controller.RevokeAccessToken)
accessTokenRoute := selfRoute.Group("/access_tokens")
accessTokenRoute.Use(middleware.DisableCache())
{
accessTokenRoute.GET("", controller.ListAccessTokens)
accessTokenRoute.GET("/catalog", controller.GetAccessTokenCatalog)
accessTokenRoute.GET("/scopes", controller.GetAccessTokenScopes)
accessTokenRoute.POST("", middleware.CriticalRateLimit(), middleware.UserCriticalRateLimit("access-token"), controller.CreateAccessToken)
accessTokenRoute.PATCH("/:id", middleware.CriticalRateLimit(), middleware.UserCriticalRateLimit("access-token"), controller.UpdateAccessToken)
accessTokenRoute.DELETE("/:id", middleware.CriticalRateLimit(), middleware.UserCriticalRateLimit("access-token"), controller.DeleteAccessToken)
accessTokenRoute.DELETE("/legacy", middleware.CriticalRateLimit(), middleware.UserCriticalRateLimit("access-token"), controller.RevokeLegacyAccessToken)
}
selfRoute.GET("/passkey", controller.PasskeyStatus)
selfRoute.POST("/passkey/register/begin", middleware.UserCriticalRateLimit("security-verification"), middleware.DisableCache(), controller.PasskeyRegisterBegin)
selfRoute.POST("/passkey/register/finish", middleware.UserCriticalRateLimit("security-verification"), middleware.DisableCache(), controller.PasskeyRegisterFinish)
@@ -276,7 +292,7 @@ func SetApiRouter(router *gin.Engine) {
taskPluginRoute.POST("/:key/dryrun", controller.DryRunTaskPlugin)
taskPluginRoute.DELETE("/:key/versions/:version", controller.DeleteTaskPluginVersion)
}
apiRouter.GET("/task_plugin_options", middleware.AdminAuth(), middleware.RequirePermission(authz.TaskPluginBind), controller.GetTaskPluginOptions)
handlePermissionRoute(apiRouter.Group("", middleware.AdminAuth()), http.MethodGet, "/task_plugin_options", authz.TaskPluginBind, controller.GetTaskPluginOptions)
registerChannelRoutes(apiRouter)
registerAuthzRoutes(apiRouter)
tokenRoute := apiRouter.Group("/token")
@@ -318,7 +334,7 @@ func SetApiRouter(router *gin.Engine) {
redemptionRoute.DELETE("/invalid", controller.DeleteInvalidRedemption)
redemptionRoute.DELETE("/:id", controller.DeleteRedemption)
}
apiRouter.GET("/audit", middleware.DisableCache(), middleware.AdminAuth(), middleware.RequirePermission(authz.AuditRead), controller.GetAuditLogs)
handlePermissionRoute(apiRouter.Group("", middleware.DisableCache(), middleware.AdminAuth()), http.MethodGet, "/audit", authz.AuditRead, controller.GetAuditLogs)
apiRouter.GET("/audit/self", middleware.DisableCache(), middleware.UserAuth(), controller.GetAuditLogs)
logRoute := apiRouter.Group("/log")
logRoute.GET("/attempts/:request_id", middleware.UserAuth(), controller.GetRelayAttempts)