Sansan
090e794460
Security - Serve character images through os.Root so names like ../ can't escape the characters folder - Sync start and /sync/reset are POST only (legacy and /api/v1) - /api/v1/token/cleanup requires a token, password compared in constant time, tokens no longer logged - Echo's rate limiter replaces the custom one; TRUSTED_PROXIES enables X-Forwarded-For for reverse proxies Crashes and races - Sync state lives in SyncService with atomics and a mutex instead of unsynchronised globals (fixes concurrent map writes during full sync) - Only one sync can run; /api/v1 sync and music routes are locked during sync like the legacy ones - No log.Fatal outside startup: errors become 4xx/5xx responses - Search uses an in-order character match instead of unescaped regexes - Empty queue / no songs return 404 instead of panicking or looping Behaviour - Sync result is computed once and stays the same between polls - Swagger and /openapi serve the embedded spec - Shutdown stops HTTP before closing the database - Expired tokens are deleted with a context that outlives the request - Files are served with Range support and correct content types; audio has no write deadline Performance - Migration 000006 adds soundtrack.fingerprint (names, sizes, mtimes) so unchanged folders are skipped without reading any files - Songs are reconciled per soundtrack with one query plus needed writes; renames keep play counts - Moved MUSIC_PATH updates soundtrack and song paths - .id cleanup only runs for changed soundtracks or a full sync - Classic random uses one SQL query; Gitea release lookups are cached with a timeout Structure - internal/config reads all environment variables once - sqlc emits a Querier interface; backend globals become services injected into handlers - One route registration shared by legacy and /api/v1 - Removed dead code (dbHelper.go, unused middleware, duplicate Gitea functions, embedded Swagger UI copy) and lib/pq - templ and swag pinned as go tools
52 lines
1.4 KiB
YAML
52 lines
1.4 KiB
YAML
version: "2"
|
|
sql:
|
|
- engine: "postgresql"
|
|
queries: "./internal/db/queries"
|
|
schema: "./internal/db/migrations"
|
|
gen:
|
|
go:
|
|
emit_json_tags: true
|
|
emit_interface: true
|
|
package: "repository"
|
|
out: "internal/db/repository"
|
|
sql_package: "pgx/v5"
|
|
overrides:
|
|
- db_type: "pg_catalog.timestamp"
|
|
go_type:
|
|
import: "time"
|
|
type: "Time"
|
|
- db_type: "pg_catalog.timestamp"
|
|
nullable: true
|
|
go_type:
|
|
pointer: true
|
|
import: "time"
|
|
type: "Time"
|
|
- db_type: "pg_catalog.varchar"
|
|
nullable: true
|
|
go_type:
|
|
pointer: true
|
|
type: "string"
|
|
- db_type: "int4"
|
|
nullable: true
|
|
go_type:
|
|
pointer: true
|
|
type: "int32"
|
|
- db_type: "int4"
|
|
nullable: false
|
|
go_type:
|
|
type: "int32"
|
|
- db_type: "date"
|
|
nullable: false
|
|
go_type:
|
|
import: "time"
|
|
type: "Time"
|
|
- db_type: "uuid"
|
|
go_type:
|
|
import: "github.com/google/uuid"
|
|
type: "UUID"
|
|
- db_type: "uuid"
|
|
nullable: true
|
|
go_type:
|
|
import: "github.com/google/uuid"
|
|
type: "UUID"
|