Method handleUserInbounds

internal/serverapi/users.go:353–407

handleUserInbounds 处理用户的节点访问凭据列表（GET / POST）。

(w http.ResponseWriter, r *http.Request, userID string)

// handleUserInbounds 处理用户的节点访问凭据列表（GET / POST）。
func (a *userAPI) handleUserInbounds(w http.ResponseWriter, r *http.Request, userID string) {
	switch r.Method {
	case http.MethodGet:
		accesses, err := a.users.ListUserInboundsByUser(userID)
		if err != nil {
			internalError(w, r, err)
			return
		}
		writeJSON(w, http.StatusOK, map[string]any{"inbounds": accesses, "total": len(accesses)})
	case http.MethodPost:
		if _, err := a.users.GetUser(userID); err != nil {
			writeUserError(w, err)
			return
		}
		var req createAccessRequest
		if err := json.NewDecoder(r.Body).Decode(&req); err != nil {
			writeJSON(w, http.StatusBadRequest, map[string]any{"error": "invalid json body"})
			return
		}
		if req.InboundID == "" {
			writeJSON(w, http.StatusBadRequest, map[string]any{"error": "inbound_id is required"})
			return
		}
		ib, err := a.inboundStore.GetInbound(req.InboundID)
		if err != nil {
			writeJSON(w, http.StatusBadRequest, map[string]any{"error": "inbound not found"})
			return
		}
		if strings.TrimSpace(req.ID) == "" {
			req.ID = idgen.NextString()
		}
		if req.UUID == "" {
			req.UUID = randomUUID()
		}
		if req.Secret == "" {
			req.Secret = randomToken(12)
		}
		acc, err := a.users.UpsertUserInbound(users.UserInbound{
			ID:        req.ID,
			UserID:    userID,
			InboundID: req.InboundID,
			NodeID:    ib.NodeID,
			UUID:      req.UUID,
			Secret:    req.Secret,
		})
		if err != nil {
			internalError(w, r, err)
			return
		}
		a.applyNodes([]string{ib.NodeID})
		writeJSON(w, http.StatusOK, acc)
	default:
		writeMethodNotAllowed(w, http.MethodGet+", "+http.MethodPost)
	}
}

func (a *userAPI) handleUserInbound(w http.ResponseWriter, r *http.Request, userID, ibID string) {
	switch r.Method {