fb91f5a6c5
- Add libs/api/admin with admin API endpoints: sync models, workspace credit, billing alert check - Add workspace_alert_config model and alert service - Add Session::no_op() for background tasks without user context - Add admin/ Next.js admin panel (AI models, billing, workspaces, audit) - Start billing alert background task every 30 minutes
46 lines
1.4 KiB
Rust
46 lines
1.4 KiB
Rust
//! Alert trigger endpoint for admin.
|
|
|
|
use actix_web::{HttpRequest, HttpResponse, Result, web};
|
|
use service::AppService;
|
|
|
|
use crate::error::ApiError;
|
|
use crate::ApiResponse;
|
|
use service::error::AppError;
|
|
|
|
/// Validate the `x-admin-api-key` header against ADMIN_API_SHARED_KEY env var.
|
|
fn validate_admin_key(req: &HttpRequest) -> Result<(), ApiError> {
|
|
let expected = std::env::var("ADMIN_API_SHARED_KEY").ok();
|
|
let Some(expected) = expected else {
|
|
return Err(ApiError(AppError::InternalServerError(
|
|
"ADMIN_API_SHARED_KEY not configured".into(),
|
|
)));
|
|
};
|
|
let provided = req
|
|
.headers()
|
|
.get("x-admin-api-key")
|
|
.and_then(|v| v.to_str().ok())
|
|
.ok_or(ApiError(AppError::Unauthorized))?;
|
|
if provided != expected {
|
|
return Err(ApiError(AppError::Unauthorized));
|
|
}
|
|
Ok(())
|
|
}
|
|
|
|
#[utoipa::path(
|
|
post,
|
|
path = "/api/admin/alerts/check",
|
|
responses(
|
|
(status = 200, description = "Alert check result", body = ApiResponse<service::workspace::alert::CheckAlertsResponse>),
|
|
(status = 401, description = "Invalid or missing admin API key"),
|
|
),
|
|
tag = "Admin"
|
|
)]
|
|
pub async fn admin_check_alerts(
|
|
req: HttpRequest,
|
|
service: web::Data<AppService>,
|
|
) -> Result<HttpResponse, ApiError> {
|
|
validate_admin_key(&req)?;
|
|
let resp = service.check_billing_alerts().await;
|
|
Ok(ApiResponse::ok(resp).to_response())
|
|
}
|