feat: harden support, localize knowledge and add operator availability [skip ci]
Source-only publication of reviewed commit 64e96a7f423673dc29ad56485be9fc79bce8af1c.
Passed in isolation: focused frontend/backend tests, race checks, TypeScript typecheck, lint, Go compilation, Flowgram build, and deterministic SDK build/tests.
Not accepted as a production release: Next.js export/native assembly remains blocked by environment memory limits; browser interaction and MySQL staging acceptance remain unverified. No production server, database/schema, runtime configuration, deployment, release tag, or workflow execution was performed.
Expected source tree: 0a4a7528e9.
This commit is contained in:
@@ -1,3 +1,6 @@
|
||||
// Modified in AgentDeskNext: authenticated support availability and calendars.
|
||||
// Modified in the independent hardening fork; see docs/hardening.
|
||||
|
||||
package bootstrap
|
||||
|
||||
import (
|
||||
@@ -26,6 +29,7 @@ import (
|
||||
type publicRateLimits struct {
|
||||
login *ratelimit.Limiter
|
||||
supportRegister *ratelimit.Limiter
|
||||
supportStatus *ratelimit.Limiter
|
||||
sessionExchange *ratelimit.Limiter
|
||||
upload *ratelimit.Limiter
|
||||
docFeedback *ratelimit.Limiter
|
||||
@@ -39,6 +43,7 @@ type publicRateLimits struct {
|
||||
const (
|
||||
limitLogin = 20
|
||||
limitSupportRegister = 10
|
||||
limitSupportStatus = 120
|
||||
limitSessionExchange = 120
|
||||
limitUpload = 30
|
||||
limitDocFeedback = 20
|
||||
@@ -57,6 +62,7 @@ func newPublicRateLimits(cfg config.RateLimitConfig) publicRateLimits {
|
||||
return publicRateLimits{
|
||||
login: ratelimit.New(limitLogin, window),
|
||||
supportRegister: ratelimit.New(limitSupportRegister, window),
|
||||
supportStatus: ratelimit.New(limitSupportStatus, window),
|
||||
sessionExchange: ratelimit.New(limitSessionExchange, window),
|
||||
upload: ratelimit.New(limitUpload, window),
|
||||
docFeedback: ratelimit.New(limitDocFeedback, window),
|
||||
@@ -87,6 +93,7 @@ func registerApiWebhookRoutes(group *gin.RouterGroup) {
|
||||
|
||||
func registerApiCustomerRoutes(group *gin.RouterGroup, limits publicRateLimits) {
|
||||
group.POST("/session_exchange", middleware.RateLimit(limits.sessionExchange), api.CustomerPostSession_exchange)
|
||||
group.POST("/session_refresh", middleware.RateLimit(limits.sessionExchange), api.CustomerPostSession_refresh)
|
||||
}
|
||||
|
||||
func registerApiConversationRoutes(group *gin.RouterGroup) {
|
||||
@@ -112,6 +119,7 @@ func registerApiMessageRoutes(group *gin.RouterGroup, limits publicRateLimits) {
|
||||
|
||||
func registerApiSupportRoutes(group *gin.RouterGroup, limits publicRateLimits) {
|
||||
group.GET("/config", api.SupportConfigGetConfig)
|
||||
group.GET("/status", middleware.RateLimit(limits.supportStatus), api.SupportGetStatus)
|
||||
group.POST("/auth/register", middleware.RateLimit(limits.supportRegister), api.SupportAuthPostRegister)
|
||||
group.GET("/me", api.SupportGetMe)
|
||||
group.Any("/doc-page/list", api.DocPageAnyList)
|
||||
@@ -522,3 +530,13 @@ func registerThirdEmailRoutes(group *gin.RouterGroup, limits publicRateLimits) {
|
||||
group.POST("/request", middleware.RateLimit(limits.emailRequest), third.EmailPostRequest)
|
||||
group.POST("/request/:channel_id", middleware.RateLimit(limits.emailRequest), third.EmailPostRequest)
|
||||
}
|
||||
|
||||
func registerDashboardSupportAvailabilityRoutes(group *gin.RouterGroup) {
|
||||
group.GET("/me", dashboard.SupportAvailabilityGetMe)
|
||||
group.POST("/me", dashboard.SupportAvailabilityPostMe)
|
||||
group.GET("/agents", dashboard.SupportAvailabilityGetAgents)
|
||||
group.POST("/agent", dashboard.SupportAvailabilityPostAgent)
|
||||
group.GET("/calendar", dashboard.SupportAvailabilityGetCalendar)
|
||||
group.POST("/calendar", dashboard.SupportAvailabilityPostCalendar)
|
||||
group.POST("/calendar/preview", dashboard.SupportAvailabilityPostCalendarPreview)
|
||||
}
|
||||
|
||||
@@ -1,3 +1,4 @@
|
||||
// Modified in AgentDeskNext: authenticated support availability and calendars.
|
||||
package bootstrap
|
||||
|
||||
import (
|
||||
@@ -192,6 +193,7 @@ func addRouter(app *gin.Engine) {
|
||||
dashboardGroup := app.Group("/api/dashboard", middleware.AuthMiddleware)
|
||||
registerDashboardDashboardRoutes(dashboardGroup.Group("/dashboard"))
|
||||
registerDashboardSetupRoutes(dashboardGroup.Group("/setup"))
|
||||
registerDashboardSupportAvailabilityRoutes(dashboardGroup.Group("/support_availability"))
|
||||
registerDashboardUserRoutes(dashboardGroup.Group("/user"))
|
||||
registerDashboardOrganizationRoutes(dashboardGroup.Group("/organization"))
|
||||
registerDashboardCompanyRoutes(dashboardGroup.Group("/company"))
|
||||
|
||||
Reference in New Issue
Block a user