api.go 3.7 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113
  1. package api
  2. import (
  3. "github.com/Unknwon/macaron"
  4. "github.com/grafana/grafana/pkg/api/dtos"
  5. "github.com/grafana/grafana/pkg/middleware"
  6. m "github.com/grafana/grafana/pkg/models"
  7. "github.com/macaron-contrib/binding"
  8. )
  9. // Register adds http routes
  10. func Register(r *macaron.Macaron) {
  11. reqSignedIn := middleware.Auth(&middleware.AuthOptions{ReqSignedIn: true})
  12. reqGrafanaAdmin := middleware.Auth(&middleware.AuthOptions{ReqSignedIn: true, ReqGrafanaAdmin: true})
  13. reqEditorRole := middleware.RoleAuth(m.ROLE_EDITOR, m.ROLE_ADMIN)
  14. reqAccountAdmin := middleware.RoleAuth(m.ROLE_ADMIN)
  15. bind := binding.Bind
  16. // not logged in views
  17. r.Get("/", reqSignedIn, Index)
  18. r.Get("/logout", Logout)
  19. r.Post("/login", bind(dtos.LoginCommand{}), LoginPost)
  20. r.Get("/login/:name", OAuthLogin)
  21. r.Get("/login", LoginView)
  22. // authed views
  23. r.Get("/profile/", reqSignedIn, Index)
  24. r.Get("/org/", reqSignedIn, Index)
  25. r.Get("/datasources/", reqSignedIn, Index)
  26. r.Get("/org/users/", reqSignedIn, Index)
  27. r.Get("/org/apikeys/", reqSignedIn, Index)
  28. r.Get("/dashboard/import/", reqSignedIn, Index)
  29. r.Get("/admin/settings", reqGrafanaAdmin, Index)
  30. r.Get("/admin/users", reqGrafanaAdmin, Index)
  31. r.Get("/admin/users/create", reqGrafanaAdmin, Index)
  32. r.Get("/admin/users/edit/:id", reqGrafanaAdmin, Index)
  33. r.Get("/dashboard/*", reqSignedIn, Index)
  34. // sign up
  35. r.Get("/signup", Index)
  36. r.Post("/api/user/signup", bind(m.CreateUserCommand{}), SignUp)
  37. // authed api
  38. r.Group("/api", func() {
  39. // user
  40. r.Group("/user", func() {
  41. r.Get("/", GetUser)
  42. r.Put("/", bind(m.UpdateUserCommand{}), UpdateUser)
  43. r.Post("/using/:id", UserSetUsingOrg)
  44. r.Get("/orgs", GetUserOrgList)
  45. r.Post("/stars/dashboard/:id", StarDashboard)
  46. r.Delete("/stars/dashboard/:id", UnstarDashboard)
  47. r.Put("/password", bind(m.ChangeUserPasswordCommand{}), ChangeUserPassword)
  48. })
  49. // account
  50. r.Group("/org", func() {
  51. r.Get("/", GetOrg)
  52. r.Post("/", bind(m.CreateOrgCommand{}), CreateOrg)
  53. r.Put("/", bind(m.UpdateOrgCommand{}), UpdateOrg)
  54. r.Post("/users", bind(m.AddOrgUserCommand{}), AddOrgUser)
  55. r.Get("/users", GetOrgUsers)
  56. r.Delete("/users/:id", RemoveOrgUser)
  57. }, reqAccountAdmin)
  58. // auth api keys
  59. r.Group("/auth/keys", func() {
  60. r.Get("/", GetApiKeys)
  61. r.Post("/", bind(m.AddApiKeyCommand{}), AddApiKey)
  62. r.Delete("/:id", DeleteApiKey)
  63. }, reqAccountAdmin)
  64. // Data sources
  65. r.Group("/datasources", func() {
  66. r.Combo("/").Get(GetDataSources).Put(AddDataSource).Post(UpdateDataSource)
  67. r.Delete("/:id", DeleteDataSource)
  68. r.Get("/:id", GetDataSourceById)
  69. }, reqAccountAdmin)
  70. r.Get("/frontend/settings/", GetFrontendSettings)
  71. r.Any("/datasources/proxy/:id/*", reqSignedIn, ProxyDataSourceRequest)
  72. // Dashboard
  73. r.Group("/dashboards", func() {
  74. r.Combo("/db/:slug").Get(GetDashboard).Delete(DeleteDashboard)
  75. r.Post("/db", reqEditorRole, bind(m.SaveDashboardCommand{}), PostDashboard)
  76. r.Get("/home", GetHomeDashboard)
  77. })
  78. // Search
  79. r.Get("/search/", Search)
  80. // metrics
  81. r.Get("/metrics/test", GetTestMetrics)
  82. }, reqSignedIn)
  83. // admin api
  84. r.Group("/api/admin", func() {
  85. r.Get("/settings", AdminGetSettings)
  86. r.Get("/users", AdminSearchUsers)
  87. r.Get("/users/:id", AdminGetUser)
  88. r.Post("/users", bind(dtos.AdminCreateUserForm{}), AdminCreateUser)
  89. r.Put("/users/:id/details", bind(dtos.AdminUpdateUserForm{}), AdminUpdateUser)
  90. r.Put("/users/:id/password", bind(dtos.AdminUpdateUserPasswordForm{}), AdminUpdateUserPassword)
  91. r.Put("/users/:id/permissions", bind(dtos.AdminUpdateUserPermissionsForm{}), AdminUpdateUserPermissions)
  92. r.Delete("/users/:id", AdminDeleteUser)
  93. }, reqGrafanaAdmin)
  94. // rendering
  95. r.Get("/render/*", reqSignedIn, RenderToPng)
  96. r.NotFound(NotFound)
  97. }