asp/keep
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

feat: restructure routes to separate authenticated and public endpoints

Browse Source 
Co-authored-by: aider (openai/andrew/openrouter/deepseek/deepseek-chat-v3.1) <aider@aider.chat>
This commit is contained in:
Andrew Phillips
2025-08-28 16:21:58 -03:00
parent a1494717b9
commit fee576f638
1 changed files with 13 additions and 19 deletions
Download Patch File Download Diff File Expand all files Collapse all files

28
src/modes/server.rs
View File

@@ -98,34 +98,28 @@ async fn run_server(
.route("/mcp", post(mcp::handle_mcp_request)) .route("/mcp", post(mcp::handle_mcp_request))
.with_state(state.clone()); .with_state(state.clone());
// Create routes that don't require authentication // Create the app with documentation routes open and others protected
let open_routes = Router::new() let app = Router::new()
// Add documentation routes without authentication
.merge(api::add_docs_routes(Router::new())) .merge(api::add_docs_routes(Router::new()))
.with_state(state.clone()) // Add API, pages, and MCP routes with authentication
.layer(axum::middleware::from_fn(logging_middleware)) .merge(
.layer( Router::new()
ServiceBuilder::new()
.layer(TraceLayer::new_for_http())
.layer(CorsLayer::permissive())
);
// Create routes that require authentication
let protected_routes = Router::new()
.merge(api::add_routes(Router::new())) .merge(api::add_routes(Router::new()))
.merge(pages::add_routes(Router::new())) .merge(pages::add_routes(Router::new()))
.merge(mcp_router) .merge(mcp_router)
.with_state(state)
.layer(axum::middleware::from_fn(logging_middleware))
.layer(axum::middleware::from_fn(create_auth_middleware(config.password.clone(), config.password_hash.clone()))) .layer(axum::middleware::from_fn(create_auth_middleware(config.password.clone(), config.password_hash.clone())))
)
// Apply state to all routes
.with_state(state)
// Add other middleware layers to all routes
.layer(axum::middleware::from_fn(logging_middleware))
.layer( .layer(
ServiceBuilder::new() ServiceBuilder::new()
.layer(TraceLayer::new_for_http()) .layer(TraceLayer::new_for_http())
.layer(CorsLayer::permissive()) .layer(CorsLayer::permissive())
); );
// Combine both route groups
let app = open_routes.merge(protected_routes);
let addr: SocketAddr = bind_address.parse()?; let addr: SocketAddr = bind_address.parse()?;
info!("SERVER: HTTP server listening on {}", addr); info!("SERVER: HTTP server listening on {}", addr);