ayurishchevandClaude Sonnet 5.5
068c10ea1c
New page /analytics/compare and API GET /admin/analytics/compare (+ /lists/{group}):
the administrator picks an old (A) and a new (B) run; the report shows the new
addresses (only in B), the ones that left (only in A) and the common ones whose
membership in the seven indicators (pass, partial, fail, egress https any/all,
ingress ssh any/all) differs, with a "what changed" summary per address; the
dynamics of each indicator (delta = new - left + entered - exited) and a verdict
transition matrix. Every number opens a list with CSV. Cancelled addresses are not
part of a run. The list dialog moved to a shared analytics-dialog.js and template;
/analytics got a "compare with another run" button.
Docs, plan and summary in docs/changes/.
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
94 lines
5.3 KiB
Go
94 lines
5.3 KiB
Go
package httpapi
|
|
|
|
import "net/http"
|
|
|
|
// route is one entry of the Control API route table. The access level is
|
|
// mandatory: every route must state who may call it, so a new endpoint cannot
|
|
// be exposed by accident. The same table is used by the tests.
|
|
type route struct {
|
|
Pattern string
|
|
Handler http.HandlerFunc
|
|
Access accessLevel
|
|
}
|
|
|
|
// RouteInfo is the exported, handler-free view of a route table entry.
|
|
type RouteInfo struct {
|
|
Pattern string
|
|
Access string // "open", "agent" or "admin"
|
|
}
|
|
|
|
// Routes returns the access classification of every registered route.
|
|
func (s *Server) Routes() []RouteInfo {
|
|
table := s.routeTable()
|
|
out := make([]RouteInfo, 0, len(table))
|
|
for _, rt := range table {
|
|
out = append(out, RouteInfo{Pattern: rt.Pattern, Access: rt.Access.String()})
|
|
}
|
|
return out
|
|
}
|
|
|
|
func (s *Server) routes(mux *http.ServeMux) {
|
|
for _, rt := range s.routeTable() {
|
|
mux.HandleFunc(rt.Pattern, s.Auth.require(rt.Access, rt.Handler))
|
|
}
|
|
}
|
|
|
|
func (s *Server) routeTable() []route {
|
|
return []route{
|
|
{"GET /healthz", s.handleHealthz, accessOpen},
|
|
{"POST /api/v1/agents/register", s.handleAgentRegister, accessOpen},
|
|
{"POST /api/v1/agents/{id}/heartbeat", s.handleAgentHeartbeat, accessOpen},
|
|
{"GET /api/v1/agents/{id}/assignment", s.handleAgentAssignment, accessOpen},
|
|
{"GET /api/v1/agents/{id}/observed-ip", s.handleAgentObservedIP, accessOpen},
|
|
{"POST /api/v1/agents/{id}/self-check", s.handleAgentSelfCheck, accessAgent},
|
|
{"POST /api/v1/agents/{id}/events", s.handleAgentEvent, accessAgent},
|
|
{"POST /api/v1/agents/{id}/results", s.handleAgentResults, accessAgent},
|
|
{"POST /api/v1/agents/{id}/complete", s.handleAgentComplete, accessAgent},
|
|
{"POST /api/v1/probers/register", s.handleProberRegister, accessOpen},
|
|
{"POST /api/v1/probers/{site_id}/heartbeat", s.handleProberHeartbeat, accessOpen},
|
|
{"GET /api/v1/probers/{site_id}/assignments", s.handleProberAssignments, accessOpen},
|
|
{"POST /api/v1/probers/{site_id}/results", s.handleProberResults, accessAgent},
|
|
{"GET /api/v1/admin/status", s.handleAdminStatus, accessAdmin},
|
|
{"GET /api/v1/admin/ips", s.handleAdminIPs, accessAdmin},
|
|
{"POST /api/v1/admin/ips", s.handleAdminSubmitIPs, accessAdmin},
|
|
{"POST /api/v1/admin/ips/scan", s.handleAdminScanFloatingIPs, accessAdmin},
|
|
{"GET /api/v1/admin/ips/scan", s.handleAdminScanStatus, accessAdmin},
|
|
{"GET /api/v1/admin/ips/{ip}", s.handleAdminIPDetail, accessAdmin},
|
|
{"POST /api/v1/admin/ips/{ip}/cancel", s.handleAdminCancelIP, accessAdmin},
|
|
{"DELETE /api/v1/admin/ips/{ip}", s.handleAdminDeleteIP, accessAdmin},
|
|
{"POST /api/v1/admin/ips/delete", s.handleAdminDeleteIPs, accessAdmin},
|
|
{"POST /api/v1/admin/ips/clear", s.handleAdminClearQueue, accessAdmin},
|
|
{"GET /api/v1/admin/validators", s.handleAdminValidators, accessAdmin},
|
|
{"GET /api/v1/admin/auto-cycle", s.handleAdminGetAutoCycle, accessAdmin},
|
|
{"PUT /api/v1/admin/auto-cycle", s.handleAdminPutAutoCycle, accessAdmin},
|
|
{"POST /api/v1/admin/auto-cycle/start", s.handleAdminStartAutoCycle, accessAdmin},
|
|
{"POST /api/v1/admin/auto-cycle/stop", s.handleAdminStopAutoCycle, accessAdmin},
|
|
{"GET /api/v1/admin/registry", s.handleAdminRegistry, accessAdmin},
|
|
{"GET /api/v1/admin/registry/{ip}", s.handleAdminRegistryHistory, accessAdmin},
|
|
{"GET /api/v1/admin/analytics/runs", s.handleAnalyticsRuns, accessAdmin},
|
|
{"GET /api/v1/admin/analytics/runs/{id}", s.handleAnalyticsRun, accessAdmin},
|
|
{"GET /api/v1/admin/analytics/runs/{id}/lists/{kind}", s.handleAnalyticsList, accessAdmin},
|
|
{"GET /api/v1/admin/analytics/compare", s.handleAnalyticsCompare, accessAdmin},
|
|
{"GET /api/v1/admin/analytics/compare/lists/{group}", s.handleAnalyticsCompareList, accessAdmin},
|
|
{"GET /api/v1/admin/config/subnets", s.handleConfigGetSubnets, accessAdmin},
|
|
{"PUT /api/v1/admin/config/subnets", s.handleConfigPutSubnets, accessAdmin},
|
|
{"GET /api/v1/admin/config/validators", s.handleConfigListValidators, accessAdmin},
|
|
{"POST /api/v1/admin/config/validators", s.handleConfigCreateValidator, accessAdmin},
|
|
{"PUT /api/v1/admin/config/validators/{id}", s.handleConfigUpdateValidator, accessAdmin},
|
|
{"DELETE /api/v1/admin/config/validators/{id}", s.handleConfigDeleteValidator, accessAdmin},
|
|
{"GET /api/v1/admin/config/sites", s.handleConfigListSites, accessAdmin},
|
|
{"PUT /api/v1/admin/config/sites/{index}", s.handleConfigPutSite, accessAdmin},
|
|
{"DELETE /api/v1/admin/config/sites/{index}", s.handleConfigDeleteSite, accessAdmin},
|
|
{"GET /api/v1/admin/config/targets", s.handleConfigListTargets, accessAdmin},
|
|
{"PUT /api/v1/admin/config/targets/{group}", s.handleConfigPutTargetGroup, accessAdmin},
|
|
{"DELETE /api/v1/admin/config/targets/{group}", s.handleConfigDeleteTargetGroup, accessAdmin},
|
|
{"GET /api/v1/admin/config/check-types", s.handleConfigListCheckTypes, accessAdmin},
|
|
{"PUT /api/v1/admin/config/check-types/{name}", s.handleConfigPutCheckType, accessAdmin},
|
|
{"DELETE /api/v1/admin/config/check-types/{name}", s.handleConfigDeleteCheckType, accessAdmin},
|
|
{"GET /api/v1/admin/config/orchestrator", s.handleConfigGetOrchestratorSettings, accessAdmin},
|
|
{"PUT /api/v1/admin/config/orchestrator", s.handleConfigPutOrchestratorSettings, accessAdmin},
|
|
{"GET /api/v1/admin/config/inbound-checks", s.handleConfigGetInboundChecks, accessAdmin},
|
|
{"PUT /api/v1/admin/config/inbound-checks", s.handleConfigPutInboundChecks, accessAdmin},
|
|
}
|
|
}
|