speedtest-tracker/src/lib.rs at main · avdv/speedtest-tracker · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
// Library exports for testing
pub mod api;
pub mod auth;
pub mod db;
pub mod embedded_assets;
pub mod error;
pub mod filters;
pub mod handlers;
pub mod i18n;
pub mod locale_middleware;
pub mod models;
pub mod scheduler;
pub mod session;
pub mod speedtest;

rust_i18n::i18n!("locales", fallback = "en");

// Re-export Database for convenience
pub use db::Database;

use axum::http::StatusCode;
use axum::{
    Router,
    extract::Request,
    middleware::{self, Next},
    response::{Json, Response},
    routing::{get, post},
};
use tower_http::trace::TraceLayer;

use crate::{auth::ErrorResponse, models::PersonalAccessToken};

#[derive(Clone)]
pub struct AppState {
    pub db: db::Database,
}

async fn require_read(
    token: PersonalAccessToken,
    request: Request,
    next: Next,
) -> Result<Response, (StatusCode, Json<ErrorResponse>)> {
    if token.is_read() {
        Ok(next.run(request).await)
    } else {
        Err((
            StatusCode::FORBIDDEN,
            Json(ErrorResponse {
                message: "You do not have permission to view results.".to_owned(),
            }),
        ))
    }
}

/// Create the application router with all routes configured
pub fn create_app(state: AppState) -> Router {
    // Admin routes requiring session authentication
    let admin_routes = Router::new()
        .route("/admin", get(handlers::admin_dashboard))
        .route("/admin/results/test", get(|| async { "Test route works!" }))
        .route("/admin/results/{id}", get(api::get_result))
        .route("/admin/results", get(handlers::results_list))
        .route("/admin/results/delete", post(handlers::delete_results))
        .route("/admin/profile", get(handlers::profile_page))
        .route("/admin/profile", post(handlers::profile_update))
        .route("/admin/api-tokens", get(handlers::api_tokens_page))
        .route("/admin/api-tokens/create", post(handlers::create_token))
        .route(
            "/admin/api-tokens/edit/{id}",
            get(handlers::edit_token_page),
        )
        .route("/admin/api-tokens/update", post(handlers::update_token))
        .route("/admin/api-tokens/delete", post(handlers::delete_token))
        .route("/admin/schedules", get(handlers::schedules_page))
        .route("/admin/schedules/create", post(handlers::create_schedule))
        .route("/admin/schedules/delete", post(handlers::delete_schedule))
        .route("/admin/schedules/toggle", post(handlers::toggle_schedule))
        .route("/admin/speedtest", get(handlers::run_test_page))
        .route("/admin/speedtest/run", post(handlers::run_test_execute))
        .layer(middleware::from_fn(session::require_session));

    // API v1 routes requiring token authentication
    let api_v1_routes = Router::new()
        .route(
            "/results",
            get(api::list_results).route_layer(middleware::from_fn(require_read)),
        )
        .route(
            "/results/latest",
            get(api::latest_result).route_layer(middleware::from_fn(require_read)),
        )
        .route(
            "/results/{id}",
            get(api::get_result).route_layer(middleware::from_fn(require_read)),
        )
        .route("/stats", get(api::get_stats))
        .route("/ookla/list-servers", get(api::list_ookla_servers))
        .route("/speedtests/run", post(api::run_speedtest_api))
        .layer(middleware::from_fn_with_state(
            state.clone(),
            auth::require_auth,
        ));

    // Build main router
    Router::new()
        .route("/", get(handlers::home_dashboard))
        .merge(admin_routes)
        .route("/login", get(handlers::login_page))
        .route("/login", post(handlers::login_post))
        .route("/logout", get(handlers::logout))
        .route("/set-language/{locale}", get(handlers::set_language))
        // Public API routes
        .route("/api/healthcheck", get(api::healthcheck))
        .route("/api/speedtest/latest", get(api::legacy_latest))
        // Protected API v1 routes
        .nest("/api/v1", api_v1_routes)
        // Static file serving
        .route("/favicon.ico", get(embedded_assets::serve_favicon))
        .route("/css/{*path}", get(embedded_assets::serve_css))
        .with_state(state)
        .layer(TraceLayer::new_for_http())
}