noelorin
a3a6a3a77a
docs: update to SRS trunk + multi-distribution architecture
2026-08-23 15:19:46 +08:00
noelorin
46a6bd02d9
feat: 接入 sync-live 后端重构，前端全面对齐新协议与接口
...
- proto: live_sfu.proto -> sync_live.proto (synclive.v1/SyncLive)，重生成 gen/sync_live.*
- module: example.com/live-sfu -> sync-live，go.mod/go.sum 同步
- 后端: 新增 internal/room (role/member/room/service/store/permission)，manage 治理面 internal/server/manage.go，auth(jwt/policy) 与 gateway/server 重构，适配 token_type/access+refresh 与 HttpOnly Cookie
- 前端: types/api/auth/permissions 全量对齐，rooms 优先 query 分页、manage 创建，login 双模式+角色降级，用户管理封禁/解封，新增 /manage 5 Tab 治理页，主题与路由同步
- 构建: web 产物直出 internal/server/static，role 字符串序列化兼容数字，libsql 链接告警忽略
验证: web tsc --noEmit / go test / vite build / go build 常驻联调通过 (role:"creator" / manage/overview/rooms/query/create/members/refresh)
2026-08-21 00:31:51 +08:00
noelorin
16895dcdd8
docs: document chat/danmaku and broadcaster external push API; add design spec
...
- README: explain the room chat/danmaku flow and the host-only
POST /api/room/{room}/broadcast endpoint for OBS/bot/moderator use.
- Add design.md describing the Awwwards-grade visual/UX bar.
2026-08-20 15:03:44 +08:00
noelorin
115b34dcd3
feat(auth): 基于 casbin 的登录与 RBAC 权限系统
...
- 引入 github.com/casbin/casbin/v2 实现 RBAC (model.conf + policy.csv)
- 角色: admin/publisher/viewer/guest，资源: config/room/user/srs，动作: read/list/publish/subscribe/stop/watch/manage
- JWT 登录 (golang-jwt/jwt/v5，bcrypt 存储，data/users.json 持久化，种子用户 admin/publisher/viewer)
- 中间件: HTTP AuthorizeMiddleware + gRPC Unary/Stream 拦截器，支持 Authorization Bearer/Cookie/Query/X-Token
- 新增 API: POST /api/auth/login|register|logout, GET /api/auth/me|users|check, POST /api/auth/users/role (Casbin 鉴权)
- 保护业务路由: /api/publish/subscribe/stop/rooms/room/*/events/srs/streams 及媒体代理 /rtc/v1/* /api/cf/*
- gRPC 契约新增 Login/Register/GetMe/ListUsers/UpdateUserRole (api/live_sfu.proto + gen)
- 前端 login.html + app.js 自动附加 Authorization，SSE 通过 ?token 传递，未登录自动跳转
- 配置: JWT_SECRET/JWT_TTL/CASBIN_MODEL/CASBIN_POLICY/AUTH_USER_FILE/ALLOW_REGISTER
- 集成 TursoDB 持久化与测试覆盖 (auth_test.go)
2026-08-19 16:42:17 +08:00
noelorin
c4a50b07c6
feat: live SFU fan-out demo (Cloudflare Realtime + SRS)
...
- protobuf/gRPC control plane (LiveSFU service, buf generated)
- Cloudflare Realtime as primary SFU, SRS as secondary backend
- WHIP/WHEP + Cloudflare Realtime media proxies (server injects credentials)
- room fan-out state with SSE; publish/watch frontend
2026-08-17 15:14:51 +08:00
noelorin