server
/
new-api
1
0
Форкнуть 0
Код Задачи 0 Pull Request'ы 0 Релизы 0 Вики Активность
Вы не можете выбрать более 25 тем Темы должны начинаться с буквы или цифры, могут содержать дефисы(-) и должны содержать не более 35 символов.
281 коммит
2 Ветки
352 MiB
 
 
 
Дерево: 49ca8a6ae7
Ветки Теги
${ item.name }
Создать ветку ${ searchTerm }
из '49ca8a6ae7'
${ noResults }
new-api/router/api-router.go

449 строки
23 KiB
Исходник Вина История 

  1. package router

  2. 

  3. import (

  4. 	"github.com/QuantumNous/new-api/controller"

  5. 	"github.com/QuantumNous/new-api/middleware"

  6. 

  7. 	// Import oauth package to register providers via init()

  8. 	_ "github.com/QuantumNous/new-api/oauth"

  9. 

  10. 	"github.com/gin-contrib/gzip"

  11. 	"github.com/gin-gonic/gin"

  12. )

  13. 

  14. func SetApiRouter(router *gin.Engine) {

  15. 	apiRouter := router.Group("/api")

  16. 	apiRouter.Use(gzip.Gzip(gzip.DefaultCompression))

  17. 	apiRouter.Use(middleware.BodyStorageCleanup()) // 清理请求体存储

  18. 	apiRouter.Use(middleware.GlobalAPIRateLimit())

  19. 	{

  20. 		apiRouter.GET("/setup", controller.GetSetup)

  21. 		apiRouter.POST("/setup", controller.PostSetup)

  22. 		apiRouter.GET("/status", controller.GetStatus)

  23. 		apiRouter.GET("/uptime/status", controller.GetUptimeKumaStatus)

  24. 		apiRouter.GET("/models", middleware.UserAuth(), controller.DashboardListModels)

  25. 		apiRouter.GET("/status/test", middleware.AdminAuth(), controller.TestStatus)

  26. 		apiRouter.GET("/notice", controller.GetNotice)

  27. 		apiRouter.GET("/user-agreement", controller.GetUserAgreement)

  28. 		apiRouter.GET("/privacy-policy", controller.GetPrivacyPolicy)

  29. 		apiRouter.GET("/terms", controller.GetTermsOfService)

  30. 		apiRouter.GET("/usage-policy", controller.GetUsagePolicy)

  31. 		apiRouter.GET("/about", controller.GetAbout)

  32. 		//apiRouter.GET("/midjourney", controller.GetMidjourney)

  33. 		apiRouter.GET("/home_page_content", controller.GetHomePageContent)

  34. 		apiRouter.GET("/pricing", middleware.TryUserAuth(), controller.GetPricing)

  35. 		apiRouter.GET("/pricing/user/*model", middleware.TryUserAuth(), controller.GetUserPricing)

  36. 		apiRouter.GET("/captcha", controller.GetCaptcha)

  37. 		apiRouter.GET("/verification", middleware.EmailVerificationRateLimit(), middleware.TurnstileCheck(), controller.SendEmailVerification)

  38. 		apiRouter.GET("/reset_password", middleware.CriticalRateLimit(), middleware.TurnstileCheck(), controller.SendPasswordResetEmail)

  39. 		apiRouter.POST("/user/reset", middleware.CriticalRateLimit(), controller.ResetPassword)

  40. 		// OAuth routes - specific routes must come before :provider wildcard

  41. 		apiRouter.GET("/oauth/state", middleware.CriticalRateLimit(), controller.GenerateOAuthCode)

  42. 		apiRouter.GET("/oauth/email/bind", middleware.CriticalRateLimit(), controller.EmailBind)

  43. 		// Non-standard OAuth (WeChat, Telegram) - keep original routes

  44. 		apiRouter.GET("/oauth/wechat", middleware.CriticalRateLimit(), controller.WeChatAuth)

  45. 		apiRouter.GET("/oauth/wechat/bind", middleware.CriticalRateLimit(), controller.WeChatBind)

  46. 		apiRouter.GET("/oauth/telegram/login", middleware.CriticalRateLimit(), controller.TelegramLogin)

  47. 		apiRouter.GET("/oauth/telegram/bind", middleware.CriticalRateLimit(), controller.TelegramBind)

  48. 		// Standard OAuth providers (GitHub, Discord, OIDC, LinuxDO) - unified route

  49. 		apiRouter.GET("/oauth/:provider", middleware.CriticalRateLimit(), controller.HandleOAuth)

  50. 		apiRouter.GET("/ratio_config", middleware.CriticalRateLimit(), controller.GetRatioConfig)

  51. 		apiRouter.GET("/playground/config", controller.GetPlaygroundConfig)

  52. 

  53. 		assetRoute := apiRouter.Group("/v1/volcengine")

  54. 		assetRoute.Use(middleware.SystemPerformanceCheck(), middleware.TokenAuth())

  55. 		{

  56. 			assetRoute.POST("/asset", controller.DoubaoAssetProxy)

  57. 		}

  58. 

  59. 		apiRouter.POST("/stripe/webhook", controller.StripeWebhook)

  60. 		apiRouter.POST("/creem/webhook", controller.CreemWebhook)

  61. 		apiRouter.POST("/wechat/pay/webhook", controller.WechatPayWebhook)

  62. 		apiRouter.POST("/alipay/pay/webhook", controller.AlipayPayWebhook)

  63. 		// Universal secure verification routes

  64. 		apiRouter.POST("/verify", middleware.UserAuth(), middleware.CriticalRateLimit(), controller.UniversalVerify)

  65. 

  66. 		userRoute := apiRouter.Group("/user")

  67. 		userRoute.Use(middleware.CORS())

  68. 		{

  69. 			userRoute.POST("/register", middleware.CriticalRateLimit(), middleware.TurnstileCheck(), controller.Register)

  70. 			userRoute.POST("/login", middleware.CriticalRateLimit(), middleware.TurnstileCheck(), controller.Login)

  71. 			userRoute.POST("/login/2fa", middleware.CriticalRateLimit(), controller.Verify2FALogin)

  72. 			userRoute.POST("/passkey/login/begin", middleware.CriticalRateLimit(), controller.PasskeyLoginBegin)

  73. 			userRoute.POST("/passkey/login/finish", middleware.CriticalRateLimit(), controller.PasskeyLoginFinish)

  74. 			//userRoute.POST("/tokenlog", middleware.CriticalRateLimit(), controller.TokenLog)

  75. 			userRoute.GET("/logout", controller.Logout)

  76. 			userRoute.POST("/epay/notify", controller.EpayNotify)

  77. 			userRoute.GET("/epay/notify", controller.EpayNotify)

  78. 			userRoute.GET("/groups", controller.GetUserGroups)

  79. 

  80. 			selfRoute := userRoute.Group("/")

  81. 			selfRoute.Use(middleware.UserAuth())

  82. 			{

  83. 				selfRoute.GET("/self/groups", controller.GetUserGroups)

  84. 				selfRoute.GET("/self", controller.GetSelf)

  85. 				selfRoute.GET("/models", controller.GetUserModels)

  86. 				selfRoute.PUT("/self", controller.UpdateSelf)

  87. 				selfRoute.DELETE("/self", controller.DeleteSelf)

  88. 				selfRoute.GET("/token", controller.GenerateAccessToken)

  89. 				selfRoute.GET("/passkey", controller.PasskeyStatus)

  90. 				selfRoute.POST("/passkey/register/begin", controller.PasskeyRegisterBegin)

  91. 				selfRoute.POST("/passkey/register/finish", controller.PasskeyRegisterFinish)

  92. 				selfRoute.POST("/passkey/verify/begin", controller.PasskeyVerifyBegin)

  93. 				selfRoute.POST("/passkey/verify/finish", controller.PasskeyVerifyFinish)

  94. 				selfRoute.DELETE("/passkey", controller.PasskeyDelete)

  95. 				selfRoute.GET("/aff", controller.GetAffCode)

  96. 				selfRoute.GET("/topup/info", controller.GetTopUpInfo)

  97. 				selfRoute.GET("/topup/self", controller.GetUserTopUps)

  98. 				selfRoute.POST("/topup", middleware.CriticalRateLimit(), controller.TopUp)

  99. 				selfRoute.POST("/pay", middleware.CriticalRateLimit(), controller.RequestEpay)

  100. 				selfRoute.POST("/amount", controller.RequestAmount)

  101. 				selfRoute.POST("/stripe/pay", middleware.CriticalRateLimit(), controller.RequestStripePay)

  102. 				selfRoute.POST("/stripe/amount", controller.RequestStripeAmount)

  103. 				selfRoute.POST("/creem/pay", middleware.CriticalRateLimit(), controller.RequestCreemPay)

  104. 				selfRoute.POST("/wechat/pay/amount", controller.RequestWechatPayAmount)

  105. 				selfRoute.POST("/wechat/pay", controller.RequestWechatPay)

  106. 				selfRoute.GET("/wechat/pay/status", controller.WechatPayStatus)

  107. 				selfRoute.POST("/alipay/pay/amount", controller.RequestAlipayPayAmount)

  108. 				selfRoute.POST("/alipay/pay", controller.RequestAlipayPay)

  109. 				selfRoute.GET("/alipay/pay/status", controller.AlipayPayStatus)

  110. 				selfRoute.POST("/aff_transfer", controller.TransferAffQuota)

  111. 				selfRoute.PUT("/setting", controller.UpdateUserSetting)

  112. 

  113. 				// 2FA routes

  114. 				selfRoute.GET("/2fa/status", controller.Get2FAStatus)

  115. 				selfRoute.POST("/2fa/setup", controller.Setup2FA)

  116. 				selfRoute.POST("/2fa/enable", controller.Enable2FA)

  117. 				selfRoute.POST("/2fa/disable", controller.Disable2FA)

  118. 				selfRoute.POST("/2fa/backup_codes", controller.RegenerateBackupCodes)

  119. 

  120. 				// Check-in routes

  121. 				selfRoute.GET("/checkin", controller.GetCheckinStatus)

  122. 				selfRoute.POST("/checkin", middleware.TurnstileCheck(), controller.DoCheckin)

  123. 

  124. 				// Custom OAuth bindings

  125. 				selfRoute.GET("/oauth/bindings", controller.GetUserOAuthBindings)

  126. 				selfRoute.DELETE("/oauth/bindings/:provider_id", controller.UnbindCustomOAuth)

  127. 			}

  128. 

  129. 			adminRoute := userRoute.Group("/")

  130. 			adminRoute.Use(middleware.AdminAuth())

  131. 			{

  132. 				adminRoute.GET("/", controller.GetAllUsers)

  133. 				adminRoute.GET("/topup", controller.GetAllTopUps)

  134. 				adminRoute.POST("/topup/complete", controller.AdminCompleteTopUp)

  135. 				adminRoute.GET("/search", controller.SearchUsers)

  136. 				adminRoute.GET("/:id/oauth/bindings", controller.GetUserOAuthBindingsByAdmin)

  137. 				adminRoute.DELETE("/:id/oauth/bindings/:provider_id", controller.UnbindCustomOAuthByAdmin)

  138. 				adminRoute.DELETE("/:id/bindings/:binding_type", controller.AdminClearUserBinding)

  139. 				adminRoute.GET("/:id", controller.GetUser)

  140. 				adminRoute.POST("/", controller.CreateUser)

  141. 				adminRoute.POST("/manage", controller.ManageUser)

  142. 				adminRoute.PUT("/", controller.UpdateUser)

  143. 				adminRoute.DELETE("/:id", controller.DeleteUser)

  144. 				adminRoute.DELETE("/:id/reset_passkey", controller.AdminResetPasskey)

  145. 

  146. 				// Admin 2FA routes

  147. 				adminRoute.GET("/2fa/stats", controller.Admin2FAStats)

  148. 				adminRoute.DELETE("/:id/2fa", controller.AdminDisable2FA)

  149. 

  150. 				// User model RPM rate limit routes

  151. 				adminRoute.GET("/:id/rate-limits", controller.GetUserRateLimits)

  152. 				adminRoute.PUT("/:id/rate-limits", controller.SetUserRateLimits)

  153. 			}

  154. 		}

  155. 

  156. 		// Subscription billing (plans, purchase, admin management)

  157. 		subscriptionRoute := apiRouter.Group("/subscription")

  158. 		subscriptionRoute.Use(middleware.UserAuth())

  159. 		{

  160. 			subscriptionRoute.GET("/plans", controller.GetSubscriptionPlans)

  161. 			subscriptionRoute.GET("/self", controller.GetSubscriptionSelf)

  162. 			subscriptionRoute.PUT("/self/preference", controller.UpdateSubscriptionPreference)

  163. 			subscriptionRoute.POST("/epay/pay", middleware.CriticalRateLimit(), controller.SubscriptionRequestEpay)

  164. 			subscriptionRoute.POST("/stripe/pay", middleware.CriticalRateLimit(), controller.SubscriptionRequestStripePay)

  165. 			subscriptionRoute.POST("/creem/pay", middleware.CriticalRateLimit(), controller.SubscriptionRequestCreemPay)

  166. 			subscriptionRoute.POST("/wechat/pay", middleware.CriticalRateLimit(), controller.SubscriptionRequestWechatPay)

  167. 		}

  168. 		subscriptionAdminRoute := apiRouter.Group("/subscription/admin")

  169. 		subscriptionAdminRoute.Use(middleware.AdminAuth())

  170. 		{

  171. 			subscriptionAdminRoute.GET("/plans", controller.AdminListSubscriptionPlans)

  172. 			subscriptionAdminRoute.POST("/plans", controller.AdminCreateSubscriptionPlan)

  173. 			subscriptionAdminRoute.PUT("/plans/:id", controller.AdminUpdateSubscriptionPlan)

  174. 			subscriptionAdminRoute.PATCH("/plans/:id", controller.AdminUpdateSubscriptionPlanStatus)

  175. 			subscriptionAdminRoute.POST("/bind", controller.AdminBindSubscription)

  176. 

  177. 			// User subscription management (admin)

  178. 			subscriptionAdminRoute.GET("/users/:id/subscriptions", controller.AdminListUserSubscriptions)

  179. 			subscriptionAdminRoute.POST("/users/:id/subscriptions", controller.AdminCreateUserSubscription)

  180. 			subscriptionAdminRoute.POST("/user_subscriptions/:id/invalidate", controller.AdminInvalidateUserSubscription)

  181. 			subscriptionAdminRoute.DELETE("/user_subscriptions/:id", controller.AdminDeleteUserSubscription)

  182. 		}

  183. 

  184. 		// Subscription payment callbacks (no auth)

  185. 		apiRouter.POST("/subscription/epay/notify", controller.SubscriptionEpayNotify)

  186. 		apiRouter.GET("/subscription/epay/notify", controller.SubscriptionEpayNotify)

  187. 		apiRouter.GET("/subscription/epay/return", controller.SubscriptionEpayReturn)

  188. 		apiRouter.POST("/subscription/epay/return", controller.SubscriptionEpayReturn)

  189. 		optionRoute := apiRouter.Group("/option")

  190. 		optionRoute.Use(middleware.RootAuth())

  191. 		{

  192. 			optionRoute.GET("/", controller.GetOptions)

  193. 			optionRoute.PUT("/", controller.UpdateOption)

  194. 			optionRoute.GET("/model_pricing", controller.GetModelPricingRules)

  195. 			optionRoute.GET("/model_pricing/*model", controller.GetModelPricingRule)

  196. 			optionRoute.PUT("/model_pricing/*model", controller.UpdateModelPricingRule)

  197. 			optionRoute.DELETE("/model_pricing/*model", controller.DeleteModelPricingRule)

  198. 			optionRoute.GET("/model_display_pricing", controller.GetModelDisplayPricingRules)

  199. 			optionRoute.GET("/model_display_pricing/*model", controller.GetModelDisplayPricingRule)

  200. 			optionRoute.PUT("/model_display_pricing/*model", controller.UpdateModelDisplayPricingRule)

  201. 			optionRoute.DELETE("/model_display_pricing/*model", controller.DeleteModelDisplayPricingRule)

  202. 			optionRoute.GET("/channel_affinity_cache", controller.GetChannelAffinityCacheStats)

  203. 			optionRoute.DELETE("/channel_affinity_cache", controller.ClearChannelAffinityCache)

  204. 			optionRoute.POST("/rest_model_ratio", controller.ResetModelRatio)

  205. 			optionRoute.POST("/migrate_console_setting", controller.MigrateConsoleSetting) // 用于迁移检测的旧键，下个版本会删除

  206. 		}

  207. 

  208. 		// 邮箱后缀额度规则路由（管理员权限）

  209. 		emailQuotaRuleRoute := apiRouter.Group("/email_quota_rule")

  210. 		emailQuotaRuleRoute.Use(middleware.AdminAuth())

  211. 		{

  212. 			emailQuotaRuleRoute.GET("/", controller.GetAllEmailQuotaRules)

  213. 			emailQuotaRuleRoute.POST("/", controller.CreateEmailQuotaRule)

  214. 			emailQuotaRuleRoute.PUT("/:id", controller.UpdateEmailQuotaRule)

  215. 			emailQuotaRuleRoute.DELETE("/:id", controller.DeleteEmailQuotaRule)

  216. 		}

  217. 

  218. 		// Custom OAuth provider management (root only)

  219. 		customOAuthRoute := apiRouter.Group("/custom-oauth-provider")

  220. 		customOAuthRoute.Use(middleware.RootAuth())

  221. 		{

  222. 			customOAuthRoute.POST("/discovery", controller.FetchCustomOAuthDiscovery)

  223. 			customOAuthRoute.GET("/", controller.GetCustomOAuthProviders)

  224. 			customOAuthRoute.GET("/:id", controller.GetCustomOAuthProvider)

  225. 			customOAuthRoute.POST("/", controller.CreateCustomOAuthProvider)

  226. 			customOAuthRoute.PUT("/:id", controller.UpdateCustomOAuthProvider)

  227. 			customOAuthRoute.DELETE("/:id", controller.DeleteCustomOAuthProvider)

  228. 		}

  229. 		performanceRoute := apiRouter.Group("/performance")

  230. 		performanceRoute.Use(middleware.RootAuth())

  231. 		{

  232. 			performanceRoute.GET("/stats", controller.GetPerformanceStats)

  233. 			performanceRoute.DELETE("/disk_cache", controller.ClearDiskCache)

  234. 			performanceRoute.POST("/reset_stats", controller.ResetPerformanceStats)

  235. 			performanceRoute.POST("/gc", controller.ForceGC)

  236. 		}

  237. 		ratioSyncRoute := apiRouter.Group("/ratio_sync")

  238. 		ratioSyncRoute.Use(middleware.RootAuth())

  239. 		{

  240. 			ratioSyncRoute.GET("/channels", controller.GetSyncableChannels)

  241. 			ratioSyncRoute.POST("/fetch", controller.FetchUpstreamRatios)

  242. 		}

  243. 		channelRoute := apiRouter.Group("/channel")

  244. 		channelRoute.Use(middleware.AdminAuth())

  245. 		{

  246. 			channelRoute.GET("/", controller.GetAllChannels)

  247. 			channelRoute.GET("/search", controller.SearchChannels)

  248. 			channelRoute.GET("/models", controller.ChannelListModels)

  249. 			channelRoute.GET("/models_enabled", controller.EnabledListModels)

  250. 			channelRoute.GET("/:id", controller.GetChannel)

  251. 			channelRoute.POST("/:id/key", middleware.RootAuth(), middleware.CriticalRateLimit(), middleware.DisableCache(), middleware.SecureVerificationRequired(), controller.GetChannelKey)

  252. 			channelRoute.GET("/test", controller.TestAllChannels)

  253. 			channelRoute.GET("/test/:id", controller.TestChannel)

  254. 			channelRoute.GET("/update_balance", controller.UpdateAllChannelsBalance)

  255. 			channelRoute.GET("/update_balance/:id", controller.UpdateChannelBalance)

  256. 			channelRoute.POST("/", controller.AddChannel)

  257. 			channelRoute.PUT("/", controller.UpdateChannel)

  258. 			channelRoute.DELETE("/disabled", controller.DeleteDisabledChannel)

  259. 			channelRoute.POST("/tag/disabled", controller.DisableTagChannels)

  260. 			channelRoute.POST("/tag/enabled", controller.EnableTagChannels)

  261. 			channelRoute.PUT("/tag", controller.EditTagChannels)

  262. 			channelRoute.DELETE("/:id", controller.DeleteChannel)

  263. 			channelRoute.POST("/batch", controller.DeleteChannelBatch)

  264. 			channelRoute.POST("/fix", controller.FixChannelsAbilities)

  265. 			channelRoute.GET("/fetch_models/:id", controller.FetchUpstreamModels)

  266. 			channelRoute.POST("/fetch_models", middleware.RootAuth(), controller.FetchModels)

  267. 			channelRoute.POST("/codex/oauth/start", controller.StartCodexOAuth)

  268. 			channelRoute.POST("/codex/oauth/complete", controller.CompleteCodexOAuth)

  269. 			channelRoute.POST("/:id/codex/oauth/start", controller.StartCodexOAuthForChannel)

  270. 			channelRoute.POST("/:id/codex/oauth/complete", controller.CompleteCodexOAuthForChannel)

  271. 			channelRoute.POST("/:id/codex/refresh", controller.RefreshCodexChannelCredential)

  272. 			channelRoute.GET("/:id/codex/usage", controller.GetCodexChannelUsage)

  273. 			channelRoute.POST("/ollama/pull", controller.OllamaPullModel)

  274. 			channelRoute.POST("/ollama/pull/stream", controller.OllamaPullModelStream)

  275. 			channelRoute.DELETE("/ollama/delete", controller.OllamaDeleteModel)

  276. 			channelRoute.GET("/ollama/version/:id", controller.OllamaVersion)

  277. 			channelRoute.POST("/batch/tag", controller.BatchSetChannelTag)

  278. 			channelRoute.GET("/tag/models", controller.GetTagModels)

  279. 			channelRoute.POST("/copy/:id", controller.CopyChannel)

  280. 			channelRoute.POST("/multi_key/manage", controller.ManageMultiKeys)

  281. 		}

  282. 		tokenRoute := apiRouter.Group("/token")

  283. 		tokenRoute.Use(middleware.UserAuth())

  284. 		{

  285. 			tokenRoute.GET("/", controller.GetAllTokens)

  286. 			tokenRoute.GET("/search", middleware.SearchRateLimit(), controller.SearchTokens)

  287. 			tokenRoute.GET("/:id", controller.GetToken)

  288. 			tokenRoute.POST("/", controller.AddToken)

  289. 			tokenRoute.PUT("/", controller.UpdateToken)

  290. 			tokenRoute.DELETE("/:id", controller.DeleteToken)

  291. 			tokenRoute.POST("/batch", controller.DeleteTokenBatch)

  292. 		}

  293. 

  294. 		usageRoute := apiRouter.Group("/usage")

  295. 		usageRoute.Use(middleware.CORS(), middleware.CriticalRateLimit())

  296. 		{

  297. 			tokenUsageRoute := usageRoute.Group("/token")

  298. 			tokenUsageRoute.Use(middleware.TokenAuthReadOnly())

  299. 			{

  300. 				tokenUsageRoute.GET("/", controller.GetTokenUsage)

  301. 			}

  302. 		}

  303. 

  304. 		redemptionRoute := apiRouter.Group("/redemption")

  305. 		redemptionRoute.Use(middleware.AdminAuth())

  306. 		{

  307. 			redemptionRoute.GET("/", controller.GetAllRedemptions)

  308. 			redemptionRoute.GET("/search", controller.SearchRedemptions)

  309. 			redemptionRoute.GET("/:id", controller.GetRedemption)

  310. 			redemptionRoute.POST("/", controller.AddRedemption)

  311. 			redemptionRoute.PUT("/", controller.UpdateRedemption)

  312. 			redemptionRoute.DELETE("/invalid", controller.DeleteInvalidRedemption)

  313. 			redemptionRoute.DELETE("/:id", controller.DeleteRedemption)

  314. 		}

  315. 		logRoute := apiRouter.Group("/log")

  316. 		logRoute.GET("/", middleware.AdminAuth(), controller.GetAllLogs)

  317. 		logRoute.DELETE("/", middleware.AdminAuth(), controller.DeleteHistoryLogs)

  318. 		logRoute.GET("/stat", middleware.AdminAuth(), controller.GetLogsStat)

  319. 		logRoute.GET("/self/stat", middleware.UserAuth(), controller.GetLogsSelfStat)

  320. 		logRoute.GET("/channel_affinity_usage_cache", middleware.AdminAuth(), controller.GetChannelAffinityUsageCacheStats)

  321. 		logRoute.GET("/search", middleware.AdminAuth(), controller.SearchAllLogs)

  322. 		logRoute.GET("/self", middleware.UserAuth(), controller.GetUserLogs)

  323. 		logRoute.GET("/self/search", middleware.UserAuth(), middleware.SearchRateLimit(), controller.SearchUserLogs)

  324. 

  325. 		dataRoute := apiRouter.Group("/data")

  326. 		dataRoute.GET("/", middleware.AdminAuth(), controller.GetAllQuotaDates)

  327. 		dataRoute.GET("/self", middleware.UserAuth(), controller.GetUserQuotaDates)

  328. 

  329. 		logRoute.Use(middleware.CORS(), middleware.CriticalRateLimit())

  330. 		{

  331. 			logRoute.GET("/token", middleware.TokenAuthReadOnly(), controller.GetLogByKey)

  332. 		}

  333. 		groupRoute := apiRouter.Group("/group")

  334. 		groupRoute.Use(middleware.AdminAuth())

  335. 		{

  336. 			groupRoute.GET("/", controller.GetGroups)

  337. 		}

  338. 

  339. 		prefillGroupRoute := apiRouter.Group("/prefill_group")

  340. 		prefillGroupRoute.Use(middleware.AdminAuth())

  341. 		{

  342. 			prefillGroupRoute.GET("/", controller.GetPrefillGroups)

  343. 			prefillGroupRoute.POST("/", controller.CreatePrefillGroup)

  344. 			prefillGroupRoute.PUT("/", controller.UpdatePrefillGroup)

  345. 			prefillGroupRoute.DELETE("/:id", controller.DeletePrefillGroup)

  346. 		}

  347. 

  348. 		mjRoute := apiRouter.Group("/mj")

  349. 		mjRoute.GET("/self", middleware.UserAuth(), controller.GetUserMidjourney)

  350. 		mjRoute.GET("/", middleware.AdminAuth(), controller.GetAllMidjourney)

  351. 

  352. 		taskRoute := apiRouter.Group("/task")

  353. 		{

  354. 			taskRoute.GET("/self", middleware.UserAuth(), controller.GetUserTask)

  355. 			taskRoute.GET("/", middleware.AdminAuth(), controller.GetAllTask)

  356. 		}

  357. 

  358. 		vendorRoute := apiRouter.Group("/vendors")

  359. 		vendorRoute.Use(middleware.AdminAuth())

  360. 		{

  361. 			vendorRoute.GET("/", controller.GetAllVendors)

  362. 			vendorRoute.GET("/search", controller.SearchVendors)

  363. 			vendorRoute.GET("/:id", controller.GetVendorMeta)

  364. 			vendorRoute.POST("/", controller.CreateVendorMeta)

  365. 			vendorRoute.PUT("/", controller.UpdateVendorMeta)

  366. 			vendorRoute.PUT("/reorder", controller.ReorderVendors)

  367. 			vendorRoute.DELETE("/:id", controller.DeleteVendorMeta)

  368. 		}

  369. 

  370. 		modelsRoute := apiRouter.Group("/models")

  371. 		modelsRoute.Use(middleware.AdminAuth())

  372. 		{

  373. 			modelsRoute.GET("/sync_upstream/preview", controller.SyncUpstreamPreview)

  374. 			modelsRoute.POST("/sync_upstream", controller.SyncUpstreamModels)

  375. 			modelsRoute.GET("/missing", controller.GetMissingModels)

  376. 			modelsRoute.GET("/", controller.GetAllModelsMeta)

  377. 			modelsRoute.GET("/search", controller.SearchModelsMeta)

  378. 			modelsRoute.GET("/:id", controller.GetModelMeta)

  379. 			modelsRoute.POST("/", controller.CreateModelMeta)

  380. 			modelsRoute.PUT("/", controller.UpdateModelMeta)

  381. 			modelsRoute.PUT("/reorder", controller.ReorderModels)

  382. 			modelsRoute.DELETE("/:id", controller.DeleteModelMeta)

  383. 		}

  384. 

  385. 		// Deployments (model deployment management)

  386. 		deploymentsRoute := apiRouter.Group("/deployments")

  387. 		deploymentsRoute.Use(middleware.AdminAuth())

  388. 		{

  389. 			deploymentsRoute.GET("/settings", controller.GetModelDeploymentSettings)

  390. 			deploymentsRoute.POST("/settings/test-connection", controller.TestIoNetConnection)

  391. 			deploymentsRoute.GET("/", controller.GetAllDeployments)

  392. 			deploymentsRoute.GET("/search", controller.SearchDeployments)

  393. 			deploymentsRoute.POST("/test-connection", controller.TestIoNetConnection)

  394. 			deploymentsRoute.GET("/hardware-types", controller.GetHardwareTypes)

  395. 			deploymentsRoute.GET("/locations", controller.GetLocations)

  396. 			deploymentsRoute.GET("/available-replicas", controller.GetAvailableReplicas)

  397. 			deploymentsRoute.POST("/price-estimation", controller.GetPriceEstimation)

  398. 			deploymentsRoute.GET("/check-name", controller.CheckClusterNameAvailability)

  399. 			deploymentsRoute.POST("/", controller.CreateDeployment)

  400. 

  401. 			deploymentsRoute.GET("/:id", controller.GetDeployment)

  402. 			deploymentsRoute.GET("/:id/logs", controller.GetDeploymentLogs)

  403. 			deploymentsRoute.GET("/:id/containers", controller.ListDeploymentContainers)

  404. 			deploymentsRoute.GET("/:id/containers/:container_id", controller.GetContainerDetails)

  405. 			deploymentsRoute.PUT("/:id", controller.UpdateDeployment)

  406. 			deploymentsRoute.PUT("/:id/name", controller.UpdateDeploymentName)

  407. 			deploymentsRoute.POST("/:id/extend", controller.ExtendDeployment)

  408. 			deploymentsRoute.DELETE("/:id", controller.DeleteDeployment)

  409. 		}

  410. 

  411. 		// Region sync API routes (for inter-node communication)

  412. 		syncRoute := apiRouter.Group("/internal/sync")

  413. 		syncRoute.Use(middleware.SyncAuth())

  414. 		{

  415. 			syncRoute.POST("/user/create", controller.ReceiveSyncedUserCreate)

  416. 			syncRoute.POST("/quota/update", controller.ReceiveQuotaUpdate)

  417. 			syncRoute.POST("/quota/query", controller.QueryUserQuota)

  418. 			syncRoute.POST("/quota/batch-query", controller.BatchQueryUserQuota)

  419. 			syncRoute.POST("/quota/batch-deduct", controller.BatchDeductQuota)

  420. 			syncRoute.GET("/config", controller.GetSyncConfig)

  421. 		}

  422. 

  423. 		migrationRoute := apiRouter.Group("/internal/migration")

  424. 		migrationRoute.Use(middleware.SyncAuth())

  425. 		{

  426. 			migrationRoute.GET("/users/check-synced-copy", controller.CheckSyncedCopy)

  427. 			migrationRoute.GET("/users", controller.ListMigrationUsers)

  428. 			migrationRoute.POST("/users/query", controller.QueryMigrationUsers)

  429. 			migrationRoute.GET("/users/:id", controller.GetMigrationUser)

  430. 			migrationRoute.POST("/users/:id/convert-to-synced", controller.ConvertMigrationUserToSynced)

  431. 		}

  432. 

  433. 		userMigrationRoute := apiRouter.Group("/user-migrations")

  434. 		userMigrationRoute.Use(middleware.RootAuth(), middleware.MasterNodeOnly())

  435. 		{

  436. 			userMigrationRoute.GET("/candidate-users", controller.ListMigrationCandidateUsers)

  437. 			userMigrationRoute.POST("/batches", controller.CreateUserMigrationBatch)

  438. 			userMigrationRoute.GET("/batches", controller.ListUserMigrationBatches)

  439. 			userMigrationRoute.GET("/batches/:id", controller.GetUserMigrationBatch)

  440. 			userMigrationRoute.POST("/batches/:id/scan", controller.ScanUserMigrationBatch)

  441. 			userMigrationRoute.POST("/batches/:id/execute", controller.ExecuteUserMigrationBatch)

  442. 			userMigrationRoute.POST("/batches/:id/retry", controller.RetryUserMigrationBatch)

  443. 			userMigrationRoute.POST("/batches/:id/cancel", controller.CancelUserMigrationBatch)

  444. 			userMigrationRoute.POST("/batches/:id/verify", controller.VerifyUserMigrationBatch)

  445. 			userMigrationRoute.POST("/items/:id/resolve", controller.ResolveUserMigrationItem)

  446. 		}

  447. 	}

  448. }