Method handleUserInbound

internal/serverapi/users.go:409–441

(w http.ResponseWriter, r *http.Request, userID, ibID string)

}

func (a *userAPI) handleUserInbound(w http.ResponseWriter, r *http.Request, userID, ibID string) {
	switch r.Method {
	case http.MethodGet:
		acc, err := a.users.GetUserInbound(ibID)
		if err != nil {
			writeUserInboundError(w, err)
			return
		}
		if acc.UserID != userID {
			writeJSON(w, http.StatusNotFound, map[string]any{"error": "user inbound not found"})
			return
		}
		writeJSON(w, http.StatusOK, acc)
	case http.MethodDelete:
		acc, err := a.users.GetUserInbound(ibID)
		if err != nil {
			writeUserInboundError(w, err)
			return
		}
		if acc.UserID != userID {
			writeJSON(w, http.StatusNotFound, map[string]any{"error": "user inbound not found"})
			return
		}
		if err := a.users.DeleteUserInbound(ibID); err != nil {
			writeUserInboundError(w, err)
			return
		}
		a.applyNodes([]string{acc.NodeID})
		writeJSON(w, http.StatusOK, map[string]any{"deleted": true})
	default:
		writeMethodNotAllowed(w, http.MethodGet+", "+http.MethodDelete)
	}
}

// handleUserCredentials 管理用户全局凭证（UUID / Secret）。
// GET 返回当前凭证；PUT 更新凭证（留空则重新随机生成），随后触发全节点配置下发。