Method handleRequest

packages/memos-core/src/viewer/server.ts:288–422

(req: http.IncomingMessage, res: http.ServerResponse)

  // ─── Request routing ───

  private handleRequest(req: http.IncomingMessage, res: http.ServerResponse): void {
    const url = new URL(req.url ?? "/", `http://${req.headers.host}`);
    const p = url.pathname;

    res.setHeader("Access-Control-Allow-Origin", "*");
    res.setHeader("Access-Control-Allow-Methods", "GET, POST, PUT, DELETE, OPTIONS");
    res.setHeader("Access-Control-Allow-Headers", "Content-Type");

    if (req.method === "OPTIONS") { res.writeHead(204); res.end(); return; }

    try {
      if (p === "/api/auth/status") {
        return this.jsonResponse(res, { needsSetup: this.needsSetup, loggedIn: this.isValidSession(req) });
      }
      if (p === "/api/auth/setup" && req.method === "POST") {
        return this.handleSetup(req, res);
      }
      if (p === "/api/auth/login" && req.method === "POST") {
        return this.handleLogin(req, res);
      }
      if (p === "/api/auth/reset" && req.method === "POST") {
        return this.handlePasswordReset(req, res);
      }
      if (p === "/branding-logo.svg" && this.branding?.logoSvgPath) {
        return this.serveBrandingLogo(res);
      }
      if (p === "/" || p === "/viewer") {
        return this.serveViewer(res);
      }

      if (!this.isValidSession(req)) {
        res.writeHead(401, { "Content-Type": "application/json" });
        res.end(JSON.stringify({ error: "unauthorized" }));
        return;
      }

      if (p === "/api/memories" && req.method === "GET") this.serveMemories(res, url);
      else if (p === "/api/memories/share-local" && req.method === "POST") this.handleMemoryLocalShare(req, res);
      else if (p === "/api/memories/unshare-local" && req.method === "POST") this.handleMemoryLocalUnshare(req, res);
      else if (p.match(/^\/api\/memory\/[^/]+\/scope$/) && req.method === "PUT") this.handleMemoryScope(req, res, p);
      else if (p.match(/^\/api\/task\/[^/]+\/scope$/) && req.method === "PUT") this.handleTaskScope(req, res, p);
      else if (p.match(/^\/api\/skill\/[^/]+\/scope$/) && req.method === "PUT") this.handleSkillScope(req, res, p);
      else if (p === "/api/stats") this.serveStats(res, url);
      else if (p === "/api/metrics") this.serveMetrics(res, url);
      else if (p === "/api/tool-metrics") this.serveToolMetrics(res, url);
      else if (p === "/api/search") this.serveSearch(req, res, url);
      else if (p === "/api/tasks" && req.method === "GET") this.serveTasks(res, url);
      else if (p === "/api/task-search" && req.method === "GET") this.serveTaskSearch(res, url);
      else if (p.match(/^\/api\/task\/[^/]+\/retry-skill$/) && req.method === "POST") this.handleTaskRetrySkill(req, res, p);
      else if (p.startsWith("/api/task/") && req.method === "DELETE") this.handleTaskDelete(res, p);
      else if (p.startsWith("/api/task/") && req.method === "PUT") this.handleTaskUpdate(req, res, p);
      else if (p.startsWith("/api/task/") && req.method === "GET") this.serveTaskDetail(res, p);
      else if (p === "/api/skills" && req.method === "GET") this.serveSkills(res, url);
      else if (p.match(/^\/api\/skill\/[^/]+\/download$/) && req.method === "GET") this.serveSkillDownload(res, p);
      else if (p.match(/^\/api\/skill\/[^/]+\/files$/) && req.method === "GET") this.serveSkillFiles(res, p);
      else if (p.match(/^\/api\/skill\/[^/]+\/visibility$/) && req.method === "PUT") this.handleSkillVisibility(req, res, p);
      else if (p.match(/^\/api\/skill\/[^/]+\/disable$/) && req.method === "PUT") this.handleSkillDisable(res, p);
      else if (p.match(/^\/api\/skill\/[^/]+\/enable$/) && req.method === "PUT") this.handleSkillEnable(res, p);