Function monitorRoutes

src/server/routes/api/monitor.ts:131–243

(app: FastifyInstance)

}

export async function monitorRoutes(app: FastifyInstance) {
  app.get('/api/monitor/config', { preHandler: [limitMonitorConfigRead] }, async () => {
    const ldohCookie = await getSettingString(LDOH_COOKIE_SETTING_KEY);
    return {
      ldohCookieConfigured: !!ldohCookie,
      ldohCookieMasked: ldohCookie ? maskCookieValue(ldohCookie) : '',
    };
  });

  app.put<{ Body: unknown }>(
    '/api/monitor/config',
    { preHandler: [limitMonitorConfigWrite] },
    async (request, reply) => {
    const parsedBody = parseMonitorConfigPayload(request.body);
    if (!parsedBody.success) {
      return reply.code(400).send({ success: false, message: parsedBody.error });
    }

    const raw = String(parsedBody.data.ldohCookie || '').trim();
    if (!raw) {
      await upsertSetting(LDOH_COOKIE_SETTING_KEY, '');
      return { success: true, message: 'LDOH Cookie 已清空', ldohCookieConfigured: false };
    }

    const normalized = normalizeLdohCookie(raw);
    if (!normalized.startsWith('ld_auth_session=') || normalized.length < 24) {
      return reply.code(400).send({ success: false, message: 'Cookie 格式无效，请填写 ld_auth_session 或其值' });
    }

    await upsertSetting(LDOH_COOKIE_SETTING_KEY, normalized);
    return {
      success: true,
      message: 'LDOH Cookie 已保存',
      ldohCookieConfigured: true,
      ldohCookieMasked: maskCookieValue(normalized),
    };
    },
  );

  app.post('/api/monitor/session', { preHandler: [limitMonitorSession] }, async (_, reply) => {
    // HttpOnly cookie for iframe proxy auth within current origin.
    reply.header(
      'Set-Cookie',
      `${MONITOR_AUTH_COOKIE}=${config.authToken}; Path=/; HttpOnly; SameSite=Lax; Max-Age=7200`,
    );
    return { success: true };
  });

  const handleLdohProxy = async (request: FastifyRequest, reply: FastifyReply) => {
    if (!ensureMonitorAuth(request, reply)) return;

    const storedCookie = await getSettingString(LDOH_COOKIE_SETTING_KEY);
    if (!storedCookie) {
      return reply.code(400).send('LDOH cookie not configured');
    }

    const wildcardPath = resolveLdohProxyPath(request);
    const targetUrl = new URL(`${LDOH_BASE_URL}/${wildcardPath}`);