kot.pink
1package repo
2
3import (
4 "net/http"
5
6 "github.com/go-chi/chi/v5"
7 "tangled.org/core/appview/middleware"
8)
9
10func (rp *Repo) Router(mw *middleware.Middleware) http.Handler {
11 r := chi.NewRouter()
12 r.Get("/", rp.Index)
13 r.Get("/opengraph", rp.Opengraph)
14 r.Get("/feed.atom", rp.AtomFeed)
15 r.Get("/commits/{ref}", rp.Log)
16 r.Route("/tree/{ref}", func(r chi.Router) {
17 r.Get("/", rp.Index)
18 r.Get("/*", rp.Tree)
19 })
20 r.Get("/commit/{ref}", rp.Commit)
21 r.Get("/branches", rp.Branches)
22 r.Delete("/branches", rp.DeleteBranch)
23 r.Route("/tags", func(r chi.Router) {
24 r.Get("/", rp.Tags)
25 r.Route("/{tag}", func(r chi.Router) {
26 r.Get("/download/{file}", rp.DownloadArtifact)
27
28 // require repo:push to upload or delete artifacts
29 //
30 // additionally: only the uploader can truly delete an artifact
31 // (record+blob will live on their pds)
32 r.Group(func(r chi.Router) {
33 r.Use(middleware.AuthMiddleware(rp.oauth))
34 r.Use(mw.RepoPermissionMiddleware("repo:push"))
35 r.Post("/upload", rp.AttachArtifact)
36 r.Delete("/{file}", rp.DeleteArtifact)
37 })
38 })
39 })
40 r.Get("/blob/{ref}/*", rp.Blob)
41 r.Get("/raw/{ref}/*", rp.RepoBlobRaw)
42
43 r.Route("/fork", func(r chi.Router) {
44 r.Use(middleware.AuthMiddleware(rp.oauth))
45 r.Get("/", rp.ForkRepo)
46 r.Post("/", rp.ForkRepo)
47 r.With(mw.RepoPermissionMiddleware("repo:owner")).Route("/sync", func(r chi.Router) {
48 r.Post("/", rp.SyncRepoFork)
49 })
50 })
51
52 r.Route("/compare", func(r chi.Router) {
53 r.Get("/", rp.CompareNew) // start an new comparison
54
55 // we have to wildcard here since we want to support GitHub's compare syntax
56 // /compare/{ref1}...{ref2}
57 // for example:
58 // /compare/master...some/feature
59 // /compare/master...example.com:another/feature <- this is a fork
60 r.Get("/{base}/{head}", rp.Compare)
61 r.Get("/*", rp.Compare)
62 })
63
64 // label panel in issues/pulls/discussions/tasks
65 r.Route("/label", func(r chi.Router) {
66 r.Get("/", rp.LabelPanel)
67 r.Get("/edit", rp.EditLabelPanel)
68 })
69
70 // settings routes, needs auth
71 r.Group(func(r chi.Router) {
72 r.Use(middleware.AuthMiddleware(rp.oauth))
73 r.With(mw.RepoPermissionMiddleware("repo:settings")).Route("/settings", func(r chi.Router) {
74 r.Get("/", rp.Settings)
75 r.With(mw.RepoPermissionMiddleware("repo:owner")).Put("/base", rp.EditBaseSettings)
76 r.With(mw.RepoPermissionMiddleware("repo:owner")).Post("/spindle", rp.EditSpindle)
77 r.With(mw.RepoPermissionMiddleware("repo:owner")).Put("/label", rp.AddLabelDef)
78 r.With(mw.RepoPermissionMiddleware("repo:owner")).Delete("/label", rp.DeleteLabelDef)
79 r.With(mw.RepoPermissionMiddleware("repo:owner")).Post("/label/subscribe", rp.SubscribeLabel)
80 r.With(mw.RepoPermissionMiddleware("repo:owner")).Post("/label/unsubscribe", rp.UnsubscribeLabel)
81 r.With(mw.RepoPermissionMiddleware("repo:invite")).Put("/collaborator", rp.AddCollaborator)
82 r.With(mw.RepoPermissionMiddleware("repo:delete")).Delete("/delete", rp.DeleteRepo)
83 r.Put("/branches/default", rp.SetDefaultBranch)
84 r.Put("/secrets", rp.Secrets)
85 r.Delete("/secrets", rp.Secrets)
86 })
87 })
88
89 return r
90}