plexus/lib/plexus_web/router.ex at 4268d3b06056cc2863af48d2721c8f2d9590d259 · techlore/plexus · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
defmodule PlexusWeb.Router do
  use PlexusWeb, :router

  pipeline :browser do
    plug :accepts, ["html"]
    plug :fetch_session
    plug :fetch_live_flash
    plug :put_root_layout, html: {PlexusWeb.Layouts, :root}
    plug :protect_from_forgery
    plug :put_secure_browser_headers
  end

  pipeline :api do
    plug :accepts, ["json"]
    plug OpenApiSpex.Plug.PutApiSpec, module: PlexusWeb.ApiSpec
  end

  pipeline :authenticated_device do
    plug PlexusWeb.APIAuthPlug
  end

  pipeline :ensure_auth do
    plug :auth
  end

  get "/sitemap.xml", PlexusWeb.SitemapController, :index

  scope "/" do
    pipe_through :browser

    live "/", PlexusWeb.AppLive.Index, :index
    get "/swaggerui", OpenApiSpex.Plug.SwaggerUI, path: "/api/openapi"
  end

  scope "/admin", PlexusWeb.Admin do
    pipe_through [:browser, :ensure_auth]

    live "/apps", AppLive.Index, :index
    live "/apps/new", AppLive.Index, :new
    live "/apps/:package/edit", AppLive.Index, :edit

    live "/apps/:package", AppLive.Show, :show
    live "/apps/:package/show/edit", AppLive.Show, :edit

    live "/apps/:package/ratings/:rating_type", RatingLive.Index, :index
  end

  scope "/api" do
    pipe_through :api
    get "/openapi", OpenApiSpex.Plug.RenderSpec, []
  end

  scope "/api/v1", PlexusWeb.API.V1 do
    pipe_through :api

    scope "/" do
      pipe_through :authenticated_device

      post "/apps", AppController, :create
      post "/apps/:package/ratings", RatingController, :create
    end

    get "/apps", AppController, :index
    get "/apps/:package", AppController, :show

    get "/apps/:package/ratings", RatingController, :index
    get "/apps/:package/ratings/:id", RatingController, :show

    post "/devices/register", DeviceController, :register
    post "/devices/verify", DeviceController, :verify
    post "/devices/renew", DeviceController, :renew
  end

  # Enable LiveDashboard and Swoosh mailbox preview in development
  if Application.compile_env(:plexus, :dev_routes) do
    # If you want to use the LiveDashboard in production, you should put
    # it behind authentication and allow only admins to access it.
    # If your application does not have an admins-only section yet,
    # you can use Plug.BasicAuth to set up some basic authentication
    # as long as you are also using SSL (which you should anyway).
    import Phoenix.LiveDashboard.Router

    scope "/dev" do
      pipe_through :browser

      live_dashboard "/dashboard", metrics: PlexusWeb.Telemetry
      forward "/mailbox", Plug.Swoosh.MailboxPreview
    end
  end

  defp auth(conn, _opts) do
    [username: username, password: password] = Application.fetch_env!(:plexus, :basic_auth)
    Plug.BasicAuth.basic_auth(conn, username: username, password: password)
  end
end