Files
Dash/apps/backend/internal/api/boards.go
T
Tomas DvorakandDevin f3143af351 feat(api): phase 5 — alerts, agent depth, subdomains, auth, boards
P5b: notifier transport registry (webhook/slack/discord/telegram/
gotify/ntfy/smtp via net/smtp), per-monitor+domain alert rules
(failsBeforeDown, latencyWarn, certDays, mute).

P5c: per-container cpu/mem, optional SMART/ZFS/GPU exec-or-skip
collectors, crt.sh subdomain discovery with daily sweep.

P5d: opt-in auth (bcrypt, sqlite sessions, 7d rotating cookie, login
rate limit, public-route bypass) and multiple boards (boards table,
sections.board_id, /api/boards CRUD, slug routing).

Authored By: TDvorak <[email protected]>

Generated with [Devin](https://devin.ai)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
2026-09-22 12:49:44 +02:00

121 lines
3.3 KiB
Go

package api
// Multiple boards — sections carry board_id; the board list is small and
// lives next to the section tree. Deleting a board cascades its sections.
import (
"database/sql"
"net/http"
"strconv"
"strings"
"github.com/gin-gonic/gin"
)
// Board is a named dashboard page reachable at /b/<slug>.
type Board struct {
ID string `json:"id"`
Slug string `json:"slug"`
Name string `json:"name"`
Position float64 `json:"position"`
}
func (s *Server) listBoards(c *gin.Context) {
rows, err := s.db.Query(`SELECT id, slug, name, position FROM boards ORDER BY position`)
if err != nil {
fail(c, http.StatusInternalServerError, err.Error())
return
}
defer rows.Close()
out := []Board{}
for rows.Next() {
var b Board
if err := rows.Scan(&b.ID, &b.Slug, &b.Name, &b.Position); err != nil {
fail(c, http.StatusInternalServerError, err.Error())
return
}
out = append(out, b)
}
c.JSON(http.StatusOK, out)
}
func (s *Server) createBoard(c *gin.Context) {
var in struct {
Name string `json:"name"`
}
if err := c.ShouldBindJSON(&in); err != nil || strings.TrimSpace(in.Name) == "" {
fail(c, http.StatusBadRequest, "name required")
return
}
name := strings.TrimSpace(in.Name)
slug := slugify(name)
if slug == "" {
slug = "board"
}
// Uniquify: 'media', 'media-2', 'media-3'…
base := slug
for i := 2; ; i++ {
var n int
_ = s.db.QueryRow(`SELECT COUNT(*) FROM boards WHERE slug = ?`, slug).Scan(&n)
if n == 0 {
break
}
slug = base + "-" + strconv.Itoa(i)
}
var maxPos sql.NullFloat64
_ = s.db.QueryRow(`SELECT MAX(position) FROM boards`).Scan(&maxPos)
b := Board{ID: newID("b"), Slug: slug, Name: name, Position: midpoint(ptrOr(maxPos), nil)}
if _, err := s.db.Exec(`INSERT INTO boards (id, slug, name, position) VALUES (?,?,?,?)`,
b.ID, b.Slug, b.Name, b.Position); err != nil {
fail(c, http.StatusInternalServerError, err.Error())
return
}
c.JSON(http.StatusCreated, b)
}
func (s *Server) updateBoard(c *gin.Context) {
var in struct {
Name *string `json:"name"`
}
if err := c.ShouldBindJSON(&in); err != nil || in.Name == nil || strings.TrimSpace(*in.Name) == "" {
fail(c, http.StatusBadRequest, "name required")
return
}
// Slug stays fixed on rename — links shouldn't break.
res, err := s.db.Exec(`UPDATE boards SET name = ? WHERE id = ?`, strings.TrimSpace(*in.Name), c.Param("id"))
if err != nil {
fail(c, http.StatusInternalServerError, err.Error())
return
}
if n, _ := res.RowsAffected(); n == 0 {
fail(c, http.StatusNotFound, "board not found")
return
}
var b Board
if err := s.db.QueryRow(`SELECT id, slug, name, position FROM boards WHERE id = ?`, c.Param("id")).
Scan(&b.ID, &b.Slug, &b.Name, &b.Position); err != nil {
fail(c, http.StatusInternalServerError, err.Error())
return
}
c.JSON(http.StatusOK, b)
}
func (s *Server) deleteBoard(c *gin.Context) {
var n int
_ = s.db.QueryRow(`SELECT COUNT(*) FROM boards`).Scan(&n)
if n <= 1 {
fail(c, http.StatusBadRequest, "cannot delete the last board")
return
}
res, err := s.db.Exec(`DELETE FROM boards WHERE id = ?`, c.Param("id"))
if err != nil {
fail(c, http.StatusInternalServerError, err.Error())
return
}
if n, _ := res.RowsAffected(); n == 0 {
fail(c, http.StatusNotFound, "board not found")
return
}
c.Status(http.StatusNoContent)
}