baodev0andClaude Opus 5.5
e888a6ed5d
- Turnstile (App\Support\Turnstile, middleware turnstile) cho login admin và login/register/forgot/reset của khách; cấu hình ở setting key=turnstile, secret mã hoá SignRSA. - Menu sidebar khách (setting client_menu) và nút tắt topbar (setting client_quick_links) do admin sửa qua administrator/client-menu[/quick-links], khách đọc v1/setting/menu, v1/setting/quick-links. - v1/setting và settings/public chỉ trả whitelist PublicSetting::FIELDS (trước đây lộ bot_token, inet_api_key). - Cài đặt tài khoản khách (preferences), rate limit theo IP cho register/resend-verify. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
50 lines
1.8 KiB
PHP
50 lines
1.8 KiB
PHP
<?php
|
|
|
|
use App\Http\Controllers\Api\Admin\Auth\AuthController;
|
|
use App\Http\Controllers\Api\Admin\Setting\SettingController as AdminSettingController;
|
|
use Illuminate\Support\Facades\Route;
|
|
|
|
/*
|
|
|--------------------------------------------------------------------------
|
|
| API Routes
|
|
|--------------------------------------------------------------------------
|
|
|
|
|
| Here is where you can register API routes for your application. These
|
|
| routes are loaded by the RouteServiceProvider within a group which
|
|
| is assigned the "api" middleware group. Enjoy building your API!
|
|
|
|
|
*/
|
|
|
|
Route::prefix('v1')
|
|
/* Api for Admin */
|
|
->group(function () {
|
|
Route::prefix('administrator')->group(function () {
|
|
Route::post('login', [AuthController::class, 'login'])->middleware(['throttle:30,1', 'turnstile']);
|
|
|
|
Route::middleware('api.auth:admin')->group(function () {
|
|
require __DIR__.'/api/admin/auth.php';
|
|
require __DIR__.'/api/admin/customers.php';
|
|
require __DIR__.'/api/admin/catalog.php';
|
|
require __DIR__.'/api/admin/content.php';
|
|
require __DIR__.'/api/admin/billing.php';
|
|
require __DIR__.'/api/admin/infrastructure.php';
|
|
require __DIR__.'/api/admin/domains.php';
|
|
require __DIR__.'/api/admin/hosting.php';
|
|
require __DIR__.'/api/admin/system.php';
|
|
});
|
|
});
|
|
|
|
// Public branding settings — không cần token, dùng cho trang đăng nhập.
|
|
Route::get('settings/public', [AdminSettingController::class, 'public']);
|
|
});
|
|
|
|
Route::any('{any}', function () {
|
|
return response()->json(
|
|
[
|
|
'error' => true,
|
|
'message' => 'API Route not found',
|
|
],
|
|
404,
|
|
);
|
|
})->where('any', '.*');
|