web

func MaxBodySize ¶ added in v0.0.18

func MaxBodySize(maxBytes int64) func(http.Handler) http.Handler

MaxBodySize limits the request body to the given number of bytes.

func NewRouter ¶

func NewRouter(
	orgSvc *services.OrganizationService,
	entitySvc *services.EntityService,
	natsEmbedded *embeddednats.EmbeddedNATS,
	sseHandler *SSEHandler,
	mtxClient *mediamtx.Client,
	apiHandler http.Handler,
	sessionAuth *apimiddleware.SessionAuth,
	authSvc *services.AuthService,
	userSvc *services.UserService,
	inviteSvc *services.InviteService,
	apiKeySvc *services.APIKeyService,
) chi.Router

func RateLimitByIP ¶ added in v0.0.18

func RateLimitByIP(requestsPerMinute int) func(http.Handler) http.Handler

RateLimitByIP returns middleware that limits requests per IP address using a fixed-window counter. Stale entries are cleaned up lazily during requests.

func RecoverPanic ¶ added in v0.0.18

func RecoverPanic(next http.Handler) http.Handler

RecoverPanic recovers from panics in HTTP handlers, logs the stack trace, and returns a 500 response instead of crashing the process.

func RequireAdmin ¶ added in v0.0.18

func RequireAdmin(next http.Handler) http.Handler

RequireAdmin is middleware that checks for the admin role in the request context. Must be used after session authentication middleware.

func SecurityHeaders ¶ added in v0.0.18

func SecurityHeaders(next http.Handler) http.Handler

SecurityHeaders adds security response headers to all responses.

func StaticFileServer ¶ added in v0.0.5

func StaticFileServer() (http.Handler, error)

StaticFileServer returns an http.Handler that serves embedded static files. Returns an error instead of panicking if the embedded filesystem is invalid.