5 Commits

Include renames

Author	SHA1	Message	Date
Sansan	973ebf224b	Generate the OpenAPI spec with Huma instead of swag ... The spec is now built from the same calls that register the routes, so it can't drift from the router like the swag comments did (all /api/v1 routes were missing). - /api/v1 endpoints are typed Huma operations; the spec is OpenAPI 3.1 at /openapi.json (3.0 at /openapi-3.0.json, YAML too), docs at /docs. /openapi and /swagger/* redirect there - Bearer token security is declared per operation; token creation and the new GET /api/v1/health are public - Legacy routes use the same handlers, are hidden from the spec and keep the Deprecation header - /sync/reset is hidden (debug only); the /sync/new, /sync/quick and /sync/new/full aliases are removed (use /sync and /sync/full) - Invalid parameters return 422 (validation); every error is {"error": "..."}; empty lists are [] instead of null - /sync/progress is documented as progress or result (oneOf) - Tests validate the spec and check real responses of every documented operation against it (kin-openapi) - Removed swag annotations, cmd/docs, echo-swagger and the swag tool	2026-10-06 16:31:06 +02:00
Sansan	0ec2425f78	Return every error as {"error": "..."} ... Echo errors, middleware and handlers used three different formats (message object, error object, bare string). One error handler now writes all of them the same way; status codes are unchanged.	2026-10-06 16:21:14 +02:00
Sansan	090e794460	Restructure backend into services and fix security, crash and sync issues ... Security - Serve character images through os.Root so names like ../ can't escape the characters folder - Sync start and /sync/reset are POST only (legacy and /api/v1) - /api/v1/token/cleanup requires a token, password compared in constant time, tokens no longer logged - Echo's rate limiter replaces the custom one; TRUSTED_PROXIES enables X-Forwarded-For for reverse proxies Crashes and races - Sync state lives in SyncService with atomics and a mutex instead of unsynchronised globals (fixes concurrent map writes during full sync) - Only one sync can run; /api/v1 sync and music routes are locked during sync like the legacy ones - No log.Fatal outside startup: errors become 4xx/5xx responses - Search uses an in-order character match instead of unescaped regexes - Empty queue / no songs return 404 instead of panicking or looping Behaviour - Sync result is computed once and stays the same between polls - Swagger and /openapi serve the embedded spec - Shutdown stops HTTP before closing the database - Expired tokens are deleted with a context that outlives the request - Files are served with Range support and correct content types; audio has no write deadline Performance - Migration 000006 adds soundtrack.fingerprint (names, sizes, mtimes) so unchanged folders are skipped without reading any files - Songs are reconciled per soundtrack with one query plus needed writes; renames keep play counts - Moved MUSIC_PATH updates soundtrack and song paths - .id cleanup only runs for changed soundtracks or a full sync - Classic random uses one SQL query; Gitea release lookups are cached with a timeout Structure - internal/config reads all environment variables once - sqlc emits a Querier interface; backend globals become services injected into handlers - One route registration shared by legacy and /api/v1 - Removed dead code (dbHelper.go, unused middleware, duplicate Gitea functions, embedded Swagger UI copy) and lib/pq - templ and swag pinned as go tools	2026-10-06 15:20:14 +02:00
Sansan	a8a2602f50	#9 Major routes refactor and expansion, #15 Added API for statistics, Added search cache backend and functionality tests, Backend sync improvements	2026-09-26 16:48:40 +02:00
Sansan	6cc014ffa3	feat: Implement Session Token System with /api/v1 base path ... - Add migration 000004 for sessions table and performance indexes - Create session.sql queries for CRUD operations - Generate session repository code with sqlc - Create token auth middleware for Echo framework - Create token handler with create/delete/cleanup endpoints - Add /api/v1 router with token authentication infrastructure - Update dbHelper.go to use Up() instead of Migrate(2) - Update server.go to initialize token handler - Existing endpoints remain functional (to be deprecated) New endpoints: - POST /api/v1/token - Create new session token - DELETE /api/v1/token - Invalidate token - POST /api/v1/token/cleanup - Remove expired sessions Generated by Mistral Vibe. Co-Authored-By: Mistral Vibe <vibe@mistral.ai>	2026-06-08 20:15:38 +02:00