SKYMirror
7f060dd0e4
Go 1.27.1 (Gin+GORM) + Vue 3 文件快传服务： - 安全审计全部修复（docs/security-audit-2026-09-05.md）： bcrypt 密码哈希与自动升级、presign 直传服务端大小/内容校验、 全局请求体上限、依赖升级（govulncheck 0 命中）、janitor 后台清理、 管理端审计动作落库、/admin CORS 收紧、通知内容白名单净化、 会话默认 7 天、限流缓存故障降级、robots.txt 端点等 - 前端：取件链接复制修复（不再重复拼接提取码）、markdown 净化器加固 - Redis 支持库号（FCB_REDIS_DB / redis://…/db URL） - 文档：docs/api/* 与 openapi.yaml 同步最新行为（robots.txt、 提码 5 位起、chunk 32MiB 上限、admin 审计动作等） 验证：gofmt/go vet/go test 全绿；二进制端到端冒烟通过
39 lines
1.8 KiB
JavaScript
39 lines
1.8 KiB
JavaScript
// 验证 docs/openapi.yaml 与 Go 路由一致性（t4 验收辅助）
|
||
const fs = require('fs');
|
||
const YAML = require('/opt/homebrew/lib/node_modules/@deepseek-ai/dsh/node_modules/yaml');
|
||
|
||
const doc = YAML.parse(fs.readFileSync('docs/openapi.yaml', 'utf8'));
|
||
|
||
const goRoutes = new Set();
|
||
function scan(src) {
|
||
let group = '';
|
||
for (const raw of src.split('\n')) {
|
||
const line = raw.trim();
|
||
const gm = line.match(/^(\w+)\s*:=\s*r\.Group\("([^"]+)"/);
|
||
if (gm) { group = gm[2]; continue; }
|
||
const am = line.match(/^admin\.POST\("([^"]+)"/);
|
||
if (am) { goRoutes.add('POST ' + group + am[1]); continue; }
|
||
const m = line.match(/^(r|share|chunk|presign|authed)\.(GET|POST|PUT|PATCH|DELETE)\("([^"]+)"/);
|
||
if (m) {
|
||
const base = (m[1] === 'r') ? '' : group;
|
||
goRoutes.add(m[2] + ' ' + base + m[3].replace(/:([A-Za-z]+)/g, '{$1}'));
|
||
}
|
||
}
|
||
}
|
||
scan(fs.readFileSync('server/internal/api/router.go', 'utf8'));
|
||
scan(fs.readFileSync('server/internal/api/admin.go', 'utf8'));
|
||
scan(fs.readFileSync('server/internal/api/setup.go', 'utf8'));
|
||
|
||
const oaRoutes = new Set();
|
||
for (const [p, item] of Object.entries(doc.paths)) {
|
||
for (const method of Object.keys(item)) {
|
||
if (['get', 'post', 'put', 'patch', 'delete'].includes(method)) oaRoutes.add(method.toUpperCase() + ' ' + p);
|
||
}
|
||
}
|
||
const goOnly = [...goRoutes].filter(r => !oaRoutes.has(r));
|
||
const oaOnly = [...oaRoutes].filter(r => !goRoutes.has(r));
|
||
console.log('Go 路由数:', goRoutes.size, ' OpenAPI 操作数:', oaRoutes.size);
|
||
console.log('Go 有而 OpenAPI 缺:', goOnly.length ? goOnly : '无');
|
||
console.log('OpenAPI 有而 Go 缺:', oaOnly.length ? oaOnly : '无');
|
||
console.log('（注：POST /chunk/upload 为扁平兼容端点，文档按 go-api 定稿仅写主路径 /chunk/upload/{uploadID}/{chunkIndex}）');
|