Security - Serve character images through os.Root so names like ../ can't escape the characters folder - Sync start and /sync/reset are POST only (legacy and /api/v1) - /api/v1/token/cleanup requires a token, password compared in constant time, tokens no longer logged - Echo's rate limiter replaces the custom one; TRUSTED_PROXIES enables X-Forwarded-For for reverse proxies Crashes and races - Sync state lives in SyncService with atomics and a mutex instead of unsynchronised globals (fixes concurrent map writes during full sync) - Only one sync can run; /api/v1 sync and music routes are locked during sync like the legacy ones - No log.Fatal outside startup: errors become 4xx/5xx responses - Search uses an in-order character match instead of unescaped regexes - Empty queue / no songs return 404 instead of panicking or looping Behaviour - Sync result is computed once and stays the same between polls - Swagger and /openapi serve the embedded spec - Shutdown stops HTTP before closing the database - Expired tokens are deleted with a context that outlives the request - Files are served with Range support and correct content types; audio has no write deadline Performance - Migration 000006 adds soundtrack.fingerprint (names, sizes, mtimes) so unchanged folders are skipped without reading any files - Songs are reconciled per soundtrack with one query plus needed writes; renames keep play counts - Moved MUSIC_PATH updates soundtrack and song paths - .id cleanup only runs for changed soundtracks or a full sync - Classic random uses one SQL query; Gitea release lookups are cached with a timeout Structure - internal/config reads all environment variables once - sqlc emits a Querier interface; backend globals become services injected into handlers - One route registration shared by legacy and /api/v1 - Removed dead code (dbHelper.go, unused middleware, duplicate Gitea functions, embedded Swagger UI copy) and lib/pq - templ and swag pinned as go tools
65 lines
1.9 KiB
SQL
65 lines
1.9 KiB
SQL
-- name: ResetSoundtrackIdSeq :one
|
|
SELECT setval('soundtrack_id_seq', (SELECT MAX(id) FROM soundtrack)+1);
|
|
|
|
-- name: GetSoundtrackNameById :one
|
|
SELECT soundtrack_name FROM soundtrack WHERE id = $1;
|
|
|
|
-- name: GetSoundtrackById :one
|
|
SELECT *
|
|
FROM soundtrack
|
|
WHERE id = $1
|
|
AND deleted IS NULL;
|
|
|
|
-- name: SetSoundtrackDeletionDate :exec
|
|
UPDATE soundtrack SET deleted=now() WHERE deleted IS NULL;
|
|
|
|
-- name: MarkSoundtracksDeletedExcept :exec
|
|
UPDATE soundtrack SET deleted=now() WHERE deleted IS NULL AND NOT (id = ANY(sqlc.arg(ids)::int[]));
|
|
|
|
-- name: SetSoundtrackFingerprint :exec
|
|
UPDATE soundtrack SET fingerprint=sqlc.arg(fingerprint) WHERE id=sqlc.arg(id);
|
|
|
|
-- name: ClearSoundtracks :exec
|
|
DELETE FROM soundtrack;
|
|
|
|
-- name: UpdateSoundtrackName :exec
|
|
UPDATE soundtrack SET soundtrack_name=sqlc.arg(name), path=sqlc.arg(path), last_changed=now() WHERE id=sqlc.arg(id);
|
|
|
|
-- name: UpdateSoundtrackHash :exec
|
|
UPDATE soundtrack SET hash=sqlc.arg(hash), last_changed=now() WHERE id=sqlc.arg(id);
|
|
|
|
-- name: RemoveSoundtrackDeletionDate :exec
|
|
UPDATE soundtrack SET deleted=NULL WHERE id=$1;
|
|
|
|
-- name: GetIdBySoundtrackName :one
|
|
SELECT id FROM soundtrack WHERE soundtrack_name = $1;
|
|
|
|
-- name: InsertSoundtrack :one
|
|
INSERT INTO soundtrack (soundtrack_name, path, hash, added, uuid) VALUES ($1, $2, $3, now(), $4) returning id, uuid;
|
|
|
|
-- name: InsertSoundtrackWithExistingId :exec
|
|
INSERT INTO soundtrack (id, soundtrack_name, path, hash, added) VALUES ($1, $2, $3, $4, now());
|
|
|
|
-- name: FindAllSoundtracks :many
|
|
SELECT *
|
|
FROM soundtrack
|
|
WHERE deleted IS NULL
|
|
ORDER BY soundtrack_name;
|
|
|
|
-- name: GetAllSoundtracksIncludingDeleted :many
|
|
SELECT *
|
|
FROM soundtrack
|
|
ORDER BY soundtrack_name;
|
|
|
|
-- name: AddSoundtrackPlayed :exec
|
|
UPDATE soundtrack SET times_played = times_played + 1, last_played = now() WHERE id = $1;
|
|
|
|
-- name: GetSoundtrackByUUID :one
|
|
SELECT *
|
|
FROM soundtrack
|
|
WHERE uuid = $1
|
|
AND deleted IS NULL;
|
|
|
|
-- name: GetSoundtrackUUIDById :one
|
|
SELECT uuid FROM soundtrack WHERE id = $1;
|