This commit is contained in:
Mateusz Gruszczyński committed 2026-10-05 17:05:06 +02:00
1 parent d168ee2afa
commit ddc5c6593f
70 files changed
+2293 -594

No files matched your search

+339 -3
View File
@@ -2,7 +2,7 @@
"openapi": "3.0.3",
"info": {
"title": "RustProxy Administration API",
"version": "0.25.7",
"version": "0.26.0",
"description": "Administration API for the active panel origin. Sign in through the panel; the same-origin HttpOnly cookie authenticates all private operations. Mutations also require the exact Origin, X-RustProxy-Request: 1 and a session-bound X-CSRF-Token. Loopback HTTP is the default; Settings can enable HTTPS before using a non-loopback administration bind. This document contains no live configuration or credentials. Object schemas marked extensible are summaries: full configuration validation is authoritative in Rust."
},
"servers": [
@@ -4799,6 +4799,111 @@
}
}
}
},
"FileLogSource": {
"type": "object",
"properties": {
"id": {
"type": "string"
},
"label": {
"type": "string"
},
"kind": {
"type": "string",
"enum": [
"access",
"error"
]
},
"path": {
"type": "string",
"description": "Configured server-side path. Clients cannot supply filesystem paths."
},
"enabled": {
"type": "boolean"
},
"format": {
"type": "string",
"enum": [
"JSONL",
"RAW"
]
},
"exists": {
"type": "boolean"
},
"size": {
"type": "integer",
"format": "int64"
},
"modified_ms": {
"type": "integer",
"format": "int64"
}
},
"additionalProperties": false
},
"FileLogsInventory": {
"type": "object",
"properties": {
"sources": {
"type": "array",
"items": {
"$ref": "#/components/schemas/FileLogSource"
}
},
"limits": {
"type": "object",
"additionalProperties": {
"type": "integer",
"format": "int64"
}
}
},
"additionalProperties": false
},
"FileLogsQuery": {
"type": "object",
"properties": {
"entries": {
"type": "array",
"items": {
"type": "object",
"additionalProperties": true
}
},
"total": {
"type": "integer",
"format": "int64"
},
"offset": {
"type": "integer",
"format": "int64"
},
"limit": {
"type": "integer",
"format": "int64"
},
"truncated": {
"type": "boolean"
},
"scanned_bytes": {
"type": "integer",
"format": "int64"
},
"scanned_lines": {
"type": "integer",
"format": "int64"
},
"sources": {
"type": "array",
"items": {
"$ref": "#/components/schemas/FileLogSource"
}
}
},
"additionalProperties": false
}
}
},
@@ -5161,7 +5266,7 @@
}
}
},
"description": "Sets an HttpOnly SameSite=Strict session cookie. Browser sessions use the configured 7–30 day absolute lifetime. Use the panel sign-in page. No bearer token or URL token is accepted.",
"description": "Sets an HttpOnly SameSite=Strict session cookie. Browser sessions use the configured 7\u201330 day absolute lifetime. Use the panel sign-in page. No bearer token or URL token is accepted.",
"security": [],
"parameters": [
{
@@ -9463,6 +9568,237 @@
}
}
}
},
"/api/file-logs": {
"get": {
"summary": "Configured on-disk log sources",
"description": "Lists only RustProxy log paths from the active configuration. This endpoint is independent from the Live Logs memory buffer and does not accept a filesystem path.",
"tags": [
"Monitoring"
],
"operationId": "get_api_file_logs",
"responses": {
"200": {
"description": "Configured file-log inventory",
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/FileLogsInventory"
}
}
}
},
"401": {
"description": "Authentication required or revoked",
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/Error"
}
}
}
},
"403": {
"description": "Host, origin or CSRF validation failed",
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/Error"
}
}
}
},
"429": {
"description": "Bounded worker/session/rate limit",
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/Error"
}
}
}
},
"503": {
"description": "Control-plane storage/worker unavailable",
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/Error"
}
}
}
}
}
}
},
"/api/file-logs/query": {
"get": {
"summary": "Query configured on-disk logs",
"description": "Reads bounded tails of configured RustProxy access/error log files using server-side source IDs only. The query never accepts arbitrary paths, follows no symlink on Unix, and is separate from /api/logs and /api/live-logs.",
"tags": [
"Monitoring"
],
"operationId": "get_api_file_logs_query",
"parameters": [
{
"name": "source",
"in": "query",
"required": false,
"description": "Source ID returned by /api/file-logs, or all. Never a filesystem path.",
"schema": {
"type": "string"
}
},
{
"name": "q",
"in": "query",
"required": false,
"description": "Case-insensitive text search in the bounded scanned records.",
"schema": {
"type": "string",
"maxLength": 256
}
},
{
"name": "event",
"in": "query",
"required": false,
"description": "Event class.",
"schema": {
"type": "string",
"enum": [
"all",
"request",
"protocol_error",
"error"
]
}
},
{
"name": "status_class",
"in": "query",
"required": false,
"description": "HTTP status class.",
"schema": {
"type": "string",
"enum": [
"all",
"1xx",
"2xx",
"3xx",
"4xx",
"5xx"
]
}
},
{
"name": "client_ip",
"in": "query",
"required": false,
"description": "Client IP substring filter.",
"schema": {
"type": "string",
"maxLength": 128
}
},
{
"name": "vhost",
"in": "query",
"required": false,
"description": "Vhost substring filter.",
"schema": {
"type": "string",
"maxLength": 256
}
},
{
"name": "offset",
"in": "query",
"required": false,
"description": "Result offset within the bounded scan.",
"schema": {
"type": "integer",
"minimum": 0,
"maximum": 10000,
"default": 0
}
},
{
"name": "limit",
"in": "query",
"required": false,
"description": "Page size.",
"schema": {
"type": "integer",
"minimum": 1,
"maximum": 500,
"default": 100
}
}
],
"responses": {
"200": {
"description": "Bounded filtered page",
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/FileLogsQuery"
}
}
}
},
"400": {
"description": "Invalid filter or unknown source",
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/Error"
}
}
}
},
"401": {
"description": "Authentication required or revoked",
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/Error"
}
}
}
},
"403": {
"description": "Host, origin or CSRF validation failed",
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/Error"
}
}
}
},
"429": {
"description": "Bounded worker/session/rate limit",
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/Error"
}
}
}
},
"503": {
"description": "Control-plane storage/worker unavailable",
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/Error"
}
}
}
}
}
}
}
}
}
}