baodev0
0b08689ea4
- add rotating admin refresh tokens and password gates\n- expand ticket galleries, exports, and client resources\n- improve IP allocation auditing and dashboard data\n- enforce encrypted client access tokens on public routes
52 lines
1.9 KiB
PHP
52 lines
1.9 KiB
PHP
<?php
|
|
|
|
use App\Http\Controllers\Api\Admin\Auth\AuthController;
|
|
use App\Http\Controllers\Api\Admin\Setting\SettingController as AdminSettingController;
|
|
use Illuminate\Support\Facades\Route;
|
|
|
|
/*
|
|
|--------------------------------------------------------------------------
|
|
| API Routes
|
|
|--------------------------------------------------------------------------
|
|
|
|
|
| Here is where you can register API routes for your application. These
|
|
| routes are loaded by the RouteServiceProvider within a group which
|
|
| is assigned the "api" middleware group. Enjoy building your API!
|
|
|
|
|
*/
|
|
|
|
Route::prefix('v1')
|
|
/* Api for Admin */
|
|
->group(function () {
|
|
Route::prefix('administrator')->group(function () {
|
|
Route::post('login', [AuthController::class, 'login'])->middleware(['throttle:30,1', 'turnstile']);
|
|
Route::post('refresh', [AuthController::class, 'refresh'])->middleware('throttle:30,1');
|
|
|
|
Route::middleware('api.auth:admin')->group(function () {
|
|
require __DIR__.'/api/admin/auth.php';
|
|
require __DIR__.'/api/admin/customers.php';
|
|
require __DIR__.'/api/admin/catalog.php';
|
|
require __DIR__.'/api/admin/content.php';
|
|
require __DIR__.'/api/admin/billing.php';
|
|
require __DIR__.'/api/admin/infrastructure.php';
|
|
require __DIR__.'/api/admin/domains.php';
|
|
require __DIR__.'/api/admin/hosting.php';
|
|
require __DIR__.'/api/admin/system.php';
|
|
require __DIR__.'/api/admin/tags.php';
|
|
});
|
|
});
|
|
|
|
// Public branding settings — không cần token, dùng cho trang đăng nhập.
|
|
Route::get('settings/public', [AdminSettingController::class, 'public']);
|
|
});
|
|
|
|
Route::any('{any}', function () {
|
|
return response()->json(
|
|
[
|
|
'error' => true,
|
|
'message' => 'API Route not found',
|
|
],
|
|
404,
|
|
);
|
|
})->where('any', '.*');
|