feat: upload project

Signed-off-by: zwlucas <lucas.fariamo08@gmail.com>

1 files changed, 71 insertions, 0 deletions

diff --git a/backend/internal/api/router.go b/backend/internal/api/router.go
new file mode 100644
index 0000000..9a18cc5
--- /dev/null
+++ b/backend/internal/api/router.go
@@ -0,0 +1,71 @@
+package api
+
+import (
+	"net/http"
+	"strings"
+)
+
+func NewRouter(h *Handler, stream *StreamHandler, auth *AuthHandler) http.Handler {
+	mux := http.NewServeMux()
+
+	mux.HandleFunc("POST /api/auth/login", auth.Login)
+	mux.HandleFunc("GET /api/auth/verify", auth.Verify)
+
+	mux.HandleFunc("GET /api/services", h.ListServices)
+	mux.HandleFunc("POST /api/services", h.CreateService)
+	mux.HandleFunc("PUT /api/services/{id}", h.UpdateService)
+	mux.HandleFunc("PATCH /api/services/{id}/toggle", h.ToggleService)
+	mux.HandleFunc("POST /api/services/{id}/test", h.TestService)
+	mux.HandleFunc("DELETE /api/services/{id}", h.DeleteService)
+	mux.HandleFunc("GET /api/services/{id}/history", h.GetHistory)
+	mux.HandleFunc("GET /api/services/{id}/stats", h.GetStats)
+	mux.HandleFunc("GET /api/services/{id}/badge.svg", h.BadgeSVG)
+
+	mux.HandleFunc("GET /api/active-maintenance", h.GetActiveMaintenance)
+
+	mux.Handle("GET /api/stream", stream)
+
+	return corsMiddleware(auth.Middleware(mux))
+}
+
+func corsMiddleware(next http.Handler) http.Handler {
+	return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		origin := r.Header.Get("Origin")
+
+		if origin != "" && isAllowedOrigin(origin) {
+			w.Header().Set("Access-Control-Allow-Origin", origin)
+			w.Header().Set("Vary", "Origin")
+		} else {
+			w.Header().Set("Access-Control-Allow-Origin", "*")
+		}
+
+		w.Header().Set("Access-Control-Allow-Methods", "GET, POST, PUT, PATCH, DELETE, OPTIONS")
+		w.Header().Set("Access-Control-Allow-Headers", "Content-Type, Authorization")
+		w.Header().Set("Access-Control-Max-Age", "86400")
+
+		if r.Method == http.MethodOptions {
+			w.WriteHeader(http.StatusNoContent)
+			return
+		}
+
+		next.ServeHTTP(w, r)
+	})
+}
+
+func isAllowedOrigin(origin string) bool {
+	allowed := []string{
+		"http://localhost:5173",
+		"http://localhost:4173",
+		"http://127.0.0.1:5173",
+		"http://127.0.0.1:4173",
+	}
+	for _, a := range allowed {
+		if strings.EqualFold(origin, a) {
+			return true
+		}
+	}
+	if strings.HasPrefix(origin, "http://localhost:") {
+		return true
+	}
+	return false
+}