feat(modules): RequireModule middleware to gate route groups #98

New Issue

forbes · 2026-02-14T19:46:18Z

forbes commented

2026-02-14 19:46:18 +00:00

Ref: docs/MODULES.md §4, §3, §11 step 5

Implement RequireModule middleware and wrap each optional module's route group.

Middleware behavior:
When a module is disabled, all its routes return 404 with {"error": "module '<id>' is not enabled"}.

func RequireModule(id string) func(http.Handler) http.Handler

Route groups to wrap (per §3):

auth — login/logout, OIDC callbacks, /api/auth/*, settings token routes
projects — /api/projects/*, item-project tagging endpoints
audit — /api/audit/*
odoo — /api/integrations/odoo/*
jobs — /api/jobs/*, /api/job-definitions/*, /api/runners/*, /api/runner/*
dag — /api/items/{partNumber}/dag/*
freecad — no routes currently, but future-proofed

When auth is disabled:
All routes are open and a synthetic dev admin user is injected (existing behavior).

Additional disabled-module behavior:

SSE events from disabled modules are not broadcast
Background goroutines (job sweepers, runner heartbeat) are not started
Database tables are NOT dropped — data preserved for re-enablement

Depends on #96.

**Ref:** docs/MODULES.md §4, §3, §11 step 5 Implement `RequireModule` middleware and wrap each optional module's route group. **Middleware behavior:** When a module is disabled, all its routes return `404` with `{"error": "module '<id>' is not enabled"}`. ```go func RequireModule(id string) func(http.Handler) http.Handler ``` **Route groups to wrap (per §3):** - `auth` — login/logout, OIDC callbacks, `/api/auth/*`, settings token routes - `projects` — `/api/projects/*`, item-project tagging endpoints - `audit` — `/api/audit/*` - `odoo` — `/api/integrations/odoo/*` - `jobs` — `/api/jobs/*`, `/api/job-definitions/*`, `/api/runners/*`, `/api/runner/*` - `dag` — `/api/items/{partNumber}/dag/*` - `freecad` — no routes currently, but future-proofed **When `auth` is disabled:** All routes are open and a synthetic `dev` admin user is injected (existing behavior). **Additional disabled-module behavior:** - SSE events from disabled modules are not broadcast - Background goroutines (job sweepers, runner heartbeat) are not started - Database tables are NOT dropped — data preserved for re-enablement Depends on #96.

forbes referenced this issue from a commit

2026-02-14 20:03:11 +00:00

feat(modules): RequireModule middleware to gate route groups

forbes referenced a pull request that will close this issue

2026-02-14 20:03:26 +00:00

feat: module system — registry, middleware, and discovery endpoint #102

forbes closed this issue

2026-02-14 20:05:43 +00:00

forbes referenced this issue

2026-02-14 20:06:42 +00:00

feat(jobs): Redis-backed job queue as alternative to PostgreSQL polling #103

Sign in to join this conversation.