- API token model (SHA-256 hashed, debounced lastUsedAt) with Bearer auth - Dual auth middleware (session + API token) in src/lib/api-auth.ts - 23 REST endpoints under /api/v1/ covering all functionality: tokens, proxy-hosts, l4-proxy-hosts, certificates, ca-certificates, client-certificates, access-lists, settings, instances, users, audit-log, caddy/apply - OpenAPI 3.1 spec at /api/v1/openapi.json with fully typed schemas - Swagger UI docs page at /api-docs in the dashboard - API token management integrated into the Profile page - Fix: next build now works under Node.js (bun:sqlite aliased to better-sqlite3) - 89 new API route unit tests + 11 integration tests (592 total) Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
24 lines
907 B
TypeScript
24 lines
907 B
TypeScript
import { NextRequest, NextResponse } from "next/server";
|
|
import { requireApiAdmin, apiErrorResponse } from "@/src/lib/api-auth";
|
|
import { listAuditEvents, countAuditEvents } from "@/src/lib/models/audit";
|
|
|
|
export async function GET(request: NextRequest) {
|
|
try {
|
|
await requireApiAdmin(request);
|
|
const { searchParams } = request.nextUrl;
|
|
const page = Math.max(1, parseInt(searchParams.get("page") ?? "1", 10) || 1);
|
|
const perPage = Math.min(200, Math.max(1, parseInt(searchParams.get("per_page") ?? "50", 10) || 50));
|
|
const search = searchParams.get("search")?.trim() || undefined;
|
|
const offset = (page - 1) * perPage;
|
|
|
|
const [events, total] = await Promise.all([
|
|
listAuditEvents(perPage, offset, search),
|
|
countAuditEvents(search),
|
|
]);
|
|
|
|
return NextResponse.json({ events, total, page, perPage });
|
|
} catch (error) {
|
|
return apiErrorResponse(error);
|
|
}
|
|
}
|