Add server components

2026-06-26 13:28:09 +08:00
parent 7ecc6a8923
commit 079ee4eaeb
168 changed files with 37475 additions and 0 deletions
@@ -0,0 +1,537 @@
+package config
+
+import (
+	"crypto/sha256"
+	"encoding/hex"
+	"encoding/json"
+	"fmt"
+	"html/template"
+	"io"
+	"net/http"
+	"os"
+	"path/filepath"
+	"reflect"
+	"strings"
+
+	"software-download-center/database"
+	"software-download-center/handlers"
+	"software-download-center/middleware"
+	"software-download-center/utils"
+
+	"github.com/gin-gonic/gin"
+)
+
+type ProductMeta struct {
+	Icon        string
+	Description string
+	ThemeColor  string
+	Tags        []string
+}
+
+var (
+	productMeta = map[string]ProductMeta{
+		"YMhut Box": {
+			Icon:        `<svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><rect x="3" y="3" width="18" height="18" rx="2" ry="2"/><circle cx="8.5" cy="8.5" r="1.5"/><polyline points="21 15 16 10 5 21"/></svg>`,
+			Description: "多功能工具箱，整合系统、网络、图像和日常效率工具。",
+			ThemeColor:  "#166534",
+			Tags:        []string{"桌面工具", "效率", "多平台"},
+		},
+		"YmhutBox": {
+			Icon:        `<svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><rect x="3" y="3" width="18" height="18" rx="2" ry="2"/><circle cx="8.5" cy="8.5" r="1.5"/><polyline points="21 15 16 10 5 21"/></svg>`,
+			Description: "多功能工具箱，整合系统、网络、图像和日常效率工具。",
+			ThemeColor:  "#166534",
+			Tags:        []string{"桌面工具", "效率", "多平台"},
+		},
+		"弓福小筑": {
+			Icon:        `<svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M2 3h6a4 4 0 0 1 4 4v14a3 3 0 0 0-3-3H2z"/><path d="M22 3h-6a4 4 0 0 0-4 4v14a3 3 0 0 1 3-3h7z"/></svg>`,
+			Description: "轻量入口应用，提供站点访问与定制下载入口。",
+			ThemeColor:  "#b45309",
+			Tags:        []string{"轻量", "入口", "桌面"},
+		},
+	}
+
+	defaultMeta = ProductMeta{
+		Icon:        `<svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><circle cx="12" cy="12" r="10"/><path d="M12 2v20"/><path d="M2 12h20"/></svg>`,
+		Description: "自动从 downloads 目录识别出的安装包分组。",
+		ThemeColor:  "#57534e",
+		Tags:        []string{"自动识别", "安装包", "下载"},
+	}
+)
+
+func RegisterRoutes(r *gin.Engine, logger *utils.Logger) {
+	logger.System("\n开始注册路由...\n")
+
+	rootDir, err := os.Getwd()
+	if err != nil {
+		logger.Error(fmt.Sprintf("获取工作目录失败: %s", err.Error()))
+		return
+	}
+
+	publicDir := filepath.Join(rootDir, "public")
+	viewsDir := filepath.Join(rootDir, "views")
+	downloadsDir := filepath.Join(publicDir, "downloads")
+
+	r.SetFuncMap(template.FuncMap{
+		"safeHTML": func(s string) template.HTML {
+			return template.HTML(s)
+		},
+		"marshalJSON": func(v interface{}) string {
+			data, _ := json.Marshal(v)
+			return string(data)
+		},
+		"slice": func(slice interface{}, start int, args ...int) interface{} {
+			v := reflect.ValueOf(slice)
+			if v.Kind() != reflect.Slice {
+				return slice
+			}
+			end := v.Len()
+			if len(args) > 0 {
+				end = args[0]
+			}
+			if start < 0 {
+				start = 0
+			}
+			if end > v.Len() {
+				end = v.Len()
+			}
+			if start >= end {
+				return reflect.MakeSlice(v.Type(), 0, 0).Interface()
+			}
+			return v.Slice(start, end).Interface()
+		},
+	})
+	r.LoadHTMLGlob(filepath.Join(viewsDir, "*.html"))
+
+	r.GET("/", func(c *gin.Context) {
+		products := utils.GetProductsInfo(downloadsDir, logger)
+
+		errorMessage := ""
+		if products == nil {
+			errorMessage = "无法读取 downloads 目录，请检查目录权限和文件配置。"
+		} else if len(products) == 0 {
+			errorMessage = "downloads 目录中暂时没有可识别的安装包。"
+		}
+
+		c.HTML(http.StatusOK, "index.html", gin.H{
+			"products":     products,
+			"productMeta":  productMeta,
+			"defaultMeta":  defaultMeta,
+			"pageTitle":    "YMhut 下载中心",
+			"errorMessage": errorMessage,
+		})
+	})
+	logger.Info("注册路由成功 [GET] /")
+
+	registerDynamicUpdateInfoRoutes(r, logger, publicDir, downloadsDir)
+	registerReleaseAPIRoutes(r, logger, publicDir, downloadsDir)
+
+	jsonRoutes := []struct {
+		path         string
+		file         string
+		cacheControl string
+	}{
+		{"/tool-status.json", "tool-status.json", "public, max-age=600"},
+		{"/tool-status", "tool-status.json", "public, max-age=600"},
+		{"/media-types.json", "media-types.json", "public, max-age=3600"},
+		{"/media-types", "media-types.json", "public, max-age=3600"},
+		{"/plugins", "plugins.json", "public, max-age=3600"},
+		{"/plugins.json", "plugins.json", "public, max-age=3600"},
+		{"/modules", "modules.json", "public, max-age=600"},
+		{"/modules.json", "modules.json", "public, max-age=600"},
+	}
+
+	for _, route := range jsonRoutes {
+		filePath := filepath.Join(publicDir, route.file)
+		fp := filePath
+		cc := route.cacheControl
+		path := route.path
+		fileName := route.file
+		if utils.FileExists(filePath) {
+			r.GET(path, func(c *gin.Context) {
+				if cached, ok := utils.GetCachedConfig(fileName); ok {
+					c.Header("Content-Type", "application/json; charset=utf-8")
+					c.Header("Cache-Control", cc)
+					c.JSON(http.StatusOK, cached)
+					return
+				}
+
+				data, err := utils.ReadJSONFile(fp)
+				if err != nil {
+					logger.Error(fmt.Sprintf("读取 JSON 文件失败: %s - %s", fp, err.Error()))
+					c.JSON(http.StatusInternalServerError, gin.H{"error": "文件读取失败"})
+					return
+				}
+
+				utils.SaveConfig(fileName, data)
+				c.Header("Content-Type", "application/json; charset=utf-8")
+				c.Header("Cache-Control", cc)
+				c.JSON(http.StatusOK, data)
+			})
+			logger.Info(fmt.Sprintf("注册路由成功 [GET] %s", path))
+		} else {
+			logger.Warn(fmt.Sprintf("跳过路由，文件不存在: %s", path))
+		}
+	}
+
+	fileRoutes := []struct {
+		path         string
+		file         string
+		cacheControl string
+		headers      map[string]string
+	}{
+		{"/lang/zh-CN.json", "lang/zh-CN.json", "public, max-age=86400", map[string]string{"Content-Disposition": `attachment; filename="zh-CN.json"`}},
+		{"/lang/en-US.json", "lang/en-US.json", "public, max-age=86400", map[string]string{"Content-Disposition": `attachment; filename="en-US.json"`}},
+		{"/fonts/MeiGanShouXieTi-2.ttf", "fonts/MeiGanShouXieTi-2.ttf", "public, max-age=86400", map[string]string{"Content-Disposition": `attachment; filename="MeiGanShouXieTi-2.ttf"`}},
+		{"/fonts/QianTuBiFengShouXieTi-2.ttf", "fonts/QianTuBiFengShouXieTi-2.ttf", "public, max-age=86400", map[string]string{"Content-Disposition": `attachment; filename="QianTuBiFengShouXieTi-2.ttf"`}},
+		{"/fonts/YOzBS-2.otf", "fonts/YOzBS-2.otf", "public, max-age=86400", map[string]string{"Content-Disposition": `attachment; filename="YOzBS-2.otf"`}},
+		{"/favicon.ico", "img/favicon.png", "public, max-age=604800", nil},
+	}
+
+	for _, route := range fileRoutes {
+		filePath := filepath.Join(publicDir, route.file)
+		fp := filePath
+		cc := route.cacheControl
+		hdrs := route.headers
+		path := route.path
+		if utils.FileExists(filePath) {
+			r.GET(path, func(c *gin.Context) {
+				mimeType := utils.GetMimeType(fp)
+				c.Header("Content-Type", mimeType)
+				c.Header("Cache-Control", cc)
+				if hdrs != nil {
+					for k, v := range hdrs {
+						c.Header(k, v)
+					}
+				}
+				c.File(fp)
+			})
+			logger.Info(fmt.Sprintf("注册路由成功 [GET] %s", path))
+		} else {
+			logger.Warn(fmt.Sprintf("跳过路由，文件不存在: %s", path))
+		}
+	}
+
+	r.Static("/css", filepath.Join(publicDir, "css"))
+	r.Static("/img", filepath.Join(publicDir, "img"))
+
+	r.GET("/downloads/:filename", func(c *gin.Context) {
+		filename := c.Param("filename")
+		if strings.Contains(filename, "..") || strings.Contains(filename, "/") || strings.Contains(filename, "\\") {
+			logger.Warn(fmt.Sprintf("拒绝下载请求: %s (IP: %s)", filename, c.ClientIP()))
+			c.JSON(http.StatusForbidden, gin.H{"error": "禁止访问"})
+			return
+		}
+
+		filePath := filepath.Join(downloadsDir, filename)
+		resolvedPath, err := filepath.Abs(filePath)
+		if err != nil {
+			logger.Error(fmt.Sprintf("解析文件路径失败: %s", err.Error()))
+			c.JSON(http.StatusInternalServerError, gin.H{"error": "内部错误"})
+			return
+		}
+
+		normalizedDir, _ := filepath.Abs(downloadsDir)
+		if !strings.HasPrefix(resolvedPath, normalizedDir) {
+			logger.Warn(fmt.Sprintf("下载路径越界: %s (IP: %s)", filename, c.ClientIP()))
+			c.JSON(http.StatusForbidden, gin.H{"error": "禁止访问"})
+			return
+		}
+
+		if !utils.FileExists(filePath) {
+			logger.Error(fmt.Sprintf("下载失败，文件不存在: %s", filename))
+			c.HTML(http.StatusNotFound, "404.html", gin.H{
+				"title": "文件未找到",
+				"path":  c.Request.URL.String(),
+			})
+			return
+		}
+
+		logger.Info(fmt.Sprintf("下载成功: %s (IP: %s)", filename, c.ClientIP()))
+		c.File(filePath)
+	})
+
+	r.GET("/admin", middleware.AuthMiddleware(), func(c *gin.Context) {
+		c.HTML(http.StatusOK, "admin.html", gin.H{"title": "后台管理"})
+	})
+
+	r.GET("/admin/login", func(c *gin.Context) {
+		if token, _ := c.Cookie("token"); token != "" {
+			c.Redirect(http.StatusFound, "/admin")
+			return
+		}
+		c.HTML(http.StatusOK, "login.html", gin.H{"title": "登录"})
+	})
+
+	r.GET("/admin/register", func(c *gin.Context) {
+		if token, _ := c.Cookie("token"); token != "" {
+			c.Redirect(http.StatusFound, "/admin")
+			return
+		}
+		c.HTML(http.StatusOK, "register.html", gin.H{"title": "注册"})
+	})
+
+	r.GET("/admin/settings", middleware.AuthMiddleware(), middleware.AdminMiddleware(), func(c *gin.Context) {
+		c.HTML(http.StatusOK, "settings.html", gin.H{"title": "系统设置"})
+	})
+
+	r.GET("/admin/install", func(c *gin.Context) {
+		if database.IsDBInitialized() {
+			c.Redirect(http.StatusFound, "/admin/login")
+			return
+		}
+		c.HTML(http.StatusOK, "install.html", gin.H{"title": "数据库配置"})
+	})
+
+	r.GET("/admin/install/status", handlers.CheckInstallStatus)
+	r.POST("/admin/install/database", handlers.InstallDatabase)
+
+	adminRoutes := r.Group("/admin")
+	{
+		adminRoutes.POST("/register", handlers.Register)
+		adminRoutes.POST("/login", handlers.Login)
+		adminRoutes.POST("/logout", handlers.Logout)
+		adminRoutes.GET("/me", middleware.AuthMiddleware(), handlers.GetCurrentUser)
+
+		adminAPI := adminRoutes.Group("/api")
+		adminAPI.Use(middleware.AuthMiddleware(), middleware.AdminMiddleware())
+		{
+			adminAPI.GET("/logs", handlers.GetLogs)
+			adminAPI.GET("/routes", handlers.GetRoutes)
+			adminAPI.POST("/routes", handlers.CreateRoute)
+			adminAPI.PUT("/routes/:id", handlers.UpdateRoute)
+			adminAPI.DELETE("/routes/:id", handlers.DeleteRoute)
+
+			adminAPI.GET("/files", handlers.GetFiles)
+			adminAPI.GET("/file", handlers.ReadFile)
+			adminAPI.POST("/file", handlers.SaveFile)
+
+			adminAPI.PUT("/config", handlers.UpdateJSONConfig)
+			adminAPI.GET("/system", handlers.GetSystemInfo)
+
+			adminAPI.GET("/database", handlers.GetDatabaseInfo)
+			adminAPI.GET("/database/config", handlers.GetDatabaseConfig)
+			adminAPI.POST("/database/config", handlers.UpdateDatabaseConfig)
+			adminAPI.POST("/database/convert", handlers.ConvertDatabase)
+			adminAPI.POST("/database/password", handlers.UpdateDatabasePassword)
+
+			adminAPI.POST("/reload", handlers.ReloadRoutes)
+		}
+	}
+
+	r.NoRoute(func(c *gin.Context) {
+		fullURL := c.Request.URL.String()
+		logger.Warn(fmt.Sprintf("404 Not Found - %s", fullURL))
+		c.HTML(http.StatusNotFound, "404.html", gin.H{
+			"title": "页面未找到",
+			"path":  fullURL,
+		})
+	})
+
+	r.Use(gin.CustomRecovery(func(c *gin.Context, recovered interface{}) {
+		logger.Error(fmt.Sprintf("500 Server Error - 路径: %s - 错误: %v", c.Request.URL.Path, recovered))
+		c.HTML(http.StatusInternalServerError, "500.html", gin.H{
+			"title":   "服务器错误",
+			"message": "服务器内部错误，请稍后重试。",
+		})
+		c.Abort()
+	}))
+
+	logger.System("路由注册完成。\n")
+}
+
+func registerDynamicUpdateInfoRoutes(
+	r *gin.Engine,
+	logger *utils.Logger,
+	publicDir string,
+	downloadsDir string,
+) {
+	updateInfoPath := filepath.Join(publicDir, "update-info.json")
+	for _, path := range []string{"/update-info.json", "/update-info"} {
+		routePath := path
+		r.GET(routePath, func(c *gin.Context) {
+			payload := map[string]interface{}{}
+			if utils.FileExists(updateInfoPath) {
+				if data, err := utils.ReadJSONFile(updateInfoPath); err == nil {
+					payload = data
+				}
+			}
+
+			products := utils.GetProductsInfo(downloadsDir, logger)
+			productName, latest := utils.GetLatestProductRelease(products, "YMhut Box")
+			if latest != nil {
+				baseURL := requestBaseURL(c)
+				payload["app_version"] = latest.Version
+				payload["download_url"] = baseURL + latest.DownloadPath
+				payload["download_mirrors"] = []map[string]interface{}{
+					{
+						"id":      "primary",
+						"name":    "官方直连",
+						"url":     baseURL + latest.DownloadPath,
+						"type":    "direct",
+						"sha256":  sha256File(filepath.Join(downloadsDir, latest.FileName)),
+						"enabled": true,
+					},
+				}
+				payload["detected_product"] = productName
+				payload["detected_packages"] = products
+			}
+
+			c.Header("Content-Type", "application/json; charset=utf-8")
+			c.Header("Cache-Control", "public, max-age=300")
+			c.JSON(http.StatusOK, payload)
+		})
+		logger.Info(fmt.Sprintf("注册动态更新信息路由 [GET] %s", routePath))
+	}
+}
+
+func requestBaseURL(c *gin.Context) string {
+	scheme := c.GetHeader("X-Forwarded-Proto")
+	if scheme == "" {
+		if c.Request.TLS != nil {
+			scheme = "https"
+		} else {
+			scheme = "http"
+		}
+	}
+	return scheme + "://" + c.Request.Host
+}
+
+func registerReleaseAPIRoutes(
+	r *gin.Engine,
+	logger *utils.Logger,
+	publicDir string,
+	downloadsDir string,
+) {
+	r.GET("/api/releases", func(c *gin.Context) {
+		c.JSON(http.StatusOK, buildReleaseManifest(c, logger, publicDir, downloadsDir))
+	})
+	r.GET("/api/modules", func(c *gin.Context) {
+		manifest := buildReleaseManifest(c, logger, publicDir, downloadsDir)
+		c.JSON(http.StatusOK, gin.H{
+			"manifest_version": manifest["manifest_version"],
+			"modules":          manifest["modules"],
+		})
+	})
+	r.GET("/api/update-info", func(c *gin.Context) {
+		c.JSON(http.StatusOK, buildReleaseManifest(c, logger, publicDir, downloadsDir))
+	})
+}
+
+func buildReleaseManifest(
+	c *gin.Context,
+	logger *utils.Logger,
+	publicDir string,
+	downloadsDir string,
+) map[string]interface{} {
+	payload := map[string]interface{}{}
+	updateInfoPath := filepath.Join(publicDir, "update-info.json")
+	if utils.FileExists(updateInfoPath) {
+		if data, err := utils.ReadJSONFile(updateInfoPath); err == nil {
+			payload = data
+		}
+	}
+
+	baseURL := requestBaseURL(c)
+	products := utils.GetProductsInfo(downloadsDir, logger)
+	packages := make([]map[string]interface{}, 0)
+	for productName, releases := range products {
+		for _, release := range releases {
+			filePath := filepath.Join(downloadsDir, release.FileName)
+			platform, arch := detectPackagePlatform(release.FileName, release.Extension)
+			packages = append(packages, map[string]interface{}{
+				"id":        packageID(productName, platform, arch, release.Version),
+				"name":      productName,
+				"version":   release.Version,
+				"platform":  platform,
+				"arch":      arch,
+				"url":       baseURL + release.DownloadPath,
+				"sha256":    sha256File(filePath),
+				"size":      release.SizeBytes,
+				"required":  utils.IsSameProduct(productName, "YMhut Box"),
+				"enabled":   true,
+				"changelog": map[string]string{},
+			})
+		}
+	}
+
+	modulesPath := filepath.Join(publicDir, "modules.json")
+	modules := []interface{}{}
+	if utils.FileExists(modulesPath) {
+		if data, err := utils.ReadJSONFile(modulesPath); err == nil {
+			if raw, ok := data["modules"].([]interface{}); ok {
+				modules = raw
+			}
+		}
+	}
+
+	payload["manifest_version"] = 2
+	payload["packages"] = packages
+	payload["modules"] = modules
+	payload["assets"] = []interface{}{}
+
+	productName, latest := utils.GetLatestProductRelease(products, "YMhut Box")
+	if latest != nil {
+		latestURL := baseURL + latest.DownloadPath
+		payload["app_version"] = latest.Version
+		payload["download_url"] = latestURL
+		payload["download_mirrors"] = []map[string]interface{}{
+			{
+				"id":      "primary",
+				"name":    "官方下载",
+				"url":     latestURL,
+				"type":    "direct",
+				"sha256":  sha256File(filepath.Join(downloadsDir, latest.FileName)),
+				"enabled": true,
+			},
+		}
+		payload["detected_product"] = productName
+		payload["detected_packages"] = products
+	}
+
+	return payload
+}
+
+func packageID(productName string, platform string, arch string, version string) string {
+	value := strings.ToLower(productName + "-" + platform + "-" + arch + "-" + version)
+	value = strings.NewReplacer(" ", "-", "_", "-").Replace(value)
+	return value
+}
+
+func detectPackagePlatform(fileName string, ext string) (string, string) {
+	lower := strings.ToLower(fileName)
+	platform := "unknown"
+	switch strings.ToLower(ext) {
+	case "exe", "msi":
+		platform = "windows"
+	case "apk":
+		platform = "android"
+	case "dmg", "pkg":
+		platform = "macos"
+	case "deb", "rpm", "appimage", "tar.gz":
+		platform = "linux"
+	}
+
+	arch := "x64"
+	if strings.Contains(lower, "arm64") || strings.Contains(lower, "aarch64") {
+		arch = "arm64"
+	} else if strings.Contains(lower, "x86") && !strings.Contains(lower, "x64") {
+		arch = "x86"
+	} else if platform == "android" {
+		arch = "universal"
+	}
+	return platform, arch
+}
+
+func sha256File(path string) string {
+	file, err := os.Open(path)
+	if err != nil {
+		return ""
+	}
+	defer file.Close()
+
+	hash := sha256.New()
+	if _, err := io.Copy(hash, file); err != nil {
+		return ""
+	}
+	return hex.EncodeToString(hash.Sum(nil))
+}