feat: scaffold initial RSS reader project with Go backend and React frontend

internal/api/server.go

@@ -0,0 +1,91 @@
+package api
+
+import (
+	"net/http"
+	"os"
+	"path/filepath"
+	"strings"
+
+	"github.com/go-chi/chi/v5"
+	"github.com/go-chi/chi/v5/middleware"
+	"github.com/go-chi/cors"
+	"github.com/haopengzhan/rsspipe/internal/auth"
+)
+
+func NewRouter(h *Handler, authService *auth.AuthService, staticDir string) http.Handler {
+	r := chi.NewRouter()
+
+	r.Use(middleware.RequestID)
+	r.Use(middleware.RealIP)
+	r.Use(middleware.Logger)
+	r.Use(middleware.Recoverer)
+	r.Use(middleware.Compress(5))
+
+	// CORS configuration for local development & PWA
+	r.Use(cors.Handler(cors.Options{
+		AllowedOrigins:   []string{"http://localhost:5173", "http://localhost:3000", "http://localhost:8080", "*"},
+		AllowedMethods:   []string{"GET", "POST", "PUT", "DELETE", "OPTIONS"},
+		AllowedHeaders:   []string{"Accept", "Authorization", "Content-Type", "X-CSRF-Token"},
+		ExposedHeaders:   []string{"Link"},
+		AllowCredentials: true,
+		MaxAge:           300,
+	}))
+
+	// Public share route (/share/<uuid>.html)
+	r.Get("/share/{uuid}", h.ViewSharedEntry)
+
+	// API Routes
+	r.Route("/api", func(r chi.Router) {
+		// Public auth endpoints
+		r.Post("/auth/login", h.Login)
+		r.Post("/auth/logout", h.Logout)
+
+		// Protected endpoints
+		r.Group(func(r chi.Router) {
+			r.Use(authService.Middleware)
+
+			r.Get("/auth/me", h.GetMe)
+			r.Get("/stats", h.GetStats)
+
+			// Categories
+			r.Get("/categories", h.ListCategories)
+			r.Post("/categories", h.CreateCategory)
+			r.Delete("/categories/{id}", h.DeleteCategory)
+
+			// Feeds
+			r.Get("/feeds", h.ListFeeds)
+			r.Post("/feeds", h.CreateFeed)
+			r.Put("/feeds/{id}", h.UpdateFeed)
+			r.Delete("/feeds/{id}", h.DeleteFeed)
+			r.Post("/feeds/{id}/refresh", h.RefreshFeed)
+			r.Post("/feeds/refresh-all", h.RefreshAllFeeds)
+
+			// Entries
+			r.Get("/entries", h.ListEntries)
+			r.Put("/entries/{id}/read", h.UpdateEntryRead)
+			r.Put("/entries/{id}/star", h.UpdateEntryStar)
+			r.Post("/entries/mark-all-read", h.MarkAllRead)
+
+			// OPML
+			r.Post("/opml/import", h.ImportOPML)
+			r.Get("/opml/export", h.ExportOPML)
+		})
+	})
+
+	// Static Files / Single Page Application fallback
+	if staticDir != "" {
+		if _, err := os.Stat(staticDir); err == nil {
+			fileServer := http.FileServer(http.Dir(staticDir))
+			r.Get("/*", func(w http.ResponseWriter, req *http.Request) {
+				path := filepath.Join(staticDir, req.URL.Path)
+				if _, err := os.Stat(path); os.IsNotExist(err) && !strings.HasPrefix(req.URL.Path, "/api") && !strings.HasPrefix(req.URL.Path, "/share") {
+					http.ServeFile(w, req, filepath.Join(staticDir, "index.html"))
+					return
+				}
+				fileServer.ServeHTTP(w, req)
+			})
+		}
+	}
+
+	return r
+}