add feature license management

backend/internal/common/router/middleware.go

@@ -13,24 +13,30 @@ import (
 // authMiddleware validates JWT tokens and sets user context
 func authMiddleware(authHandler *auth.Handler) gin.HandlerFunc {
 	return func(c *gin.Context) {
-		// Extract token from Authorization header
+		var token string
+
+		// Try to extract token from Authorization header first
 		authHeader := c.GetHeader("Authorization")
-		if authHeader == "" {
-			c.JSON(http.StatusUnauthorized, gin.H{"error": "missing authorization header"})
+		if authHeader != "" {
+			// Parse Bearer token
+			parts := strings.SplitN(authHeader, " ", 2)
+			if len(parts) == 2 && parts[0] == "Bearer" {
+				token = parts[1]
+			}
+		}
+
+		// If no token from header, try query parameter (for WebSocket)
+		if token == "" {
+			token = c.Query("token")
+		}
+
+		// If still no token, return error
+		if token == "" {
+			c.JSON(http.StatusUnauthorized, gin.H{"error": "missing authorization token"})
 			c.Abort()
 			return
 		}
 
-		// Parse Bearer token
-		parts := strings.SplitN(authHeader, " ", 2)
-		if len(parts) != 2 || parts[0] != "Bearer" {
-			c.JSON(http.StatusUnauthorized, gin.H{"error": "invalid authorization header format"})
-			c.Abort()
-			return
-		}
-
-		token := parts[1]
-
 		// Validate token and get user
 		user, err := authHandler.ValidateToken(token)
 		if err != nil {

backend/internal/common/router/router.go

@@ -14,6 +14,7 @@ import (
 	"github.com/atlasos/calypso/internal/iam"
 	"github.com/atlasos/calypso/internal/monitoring"
 	"github.com/atlasos/calypso/internal/scst"
+	"github.com/atlasos/calypso/internal/shares"
 	"github.com/atlasos/calypso/internal/storage"
 	"github.com/atlasos/calypso/internal/system"
 	"github.com/atlasos/calypso/internal/tape_physical"
@@ -198,6 +199,18 @@ func NewRouter(cfg *config.Config, db *database.DB, log *logger.Logger) *gin.Eng
 				storageGroup.GET("/zfs/arc/stats", storageHandler.GetARCStats)
 			}
 
+			// Shares (CIFS/NFS)
+			sharesHandler := shares.NewHandler(db, log)
+			sharesGroup := protected.Group("/shares")
+			sharesGroup.Use(requirePermission("storage", "read"))
+			{
+				sharesGroup.GET("", sharesHandler.ListShares)
+				sharesGroup.GET("/:id", sharesHandler.GetShare)
+				sharesGroup.POST("", requirePermission("storage", "write"), sharesHandler.CreateShare)
+				sharesGroup.PUT("/:id", requirePermission("storage", "write"), sharesHandler.UpdateShare)
+				sharesGroup.DELETE("/:id", requirePermission("storage", "write"), sharesHandler.DeleteShare)
+			}
+
 			// SCST
 			scstHandler := scst.NewHandler(db, log)
 			scstGroup := protected.Group("/scst")
@@ -232,6 +245,9 @@ func NewRouter(cfg *config.Config, db *database.DB, log *logger.Logger) *gin.Eng
 				scstGroup.PUT("/initiator-groups/:id", requirePermission("iscsi", "write"), scstHandler.UpdateInitiatorGroup)
 				scstGroup.DELETE("/initiator-groups/:id", requirePermission("iscsi", "write"), scstHandler.DeleteInitiatorGroup)
 				scstGroup.POST("/initiator-groups/:id/initiators", requirePermission("iscsi", "write"), scstHandler.AddInitiatorToGroup)
+				// Config file management
+				scstGroup.GET("/config/file", requirePermission("iscsi", "read"), scstHandler.GetConfigFile)
+				scstGroup.PUT("/config/file", requirePermission("iscsi", "write"), scstHandler.UpdateConfigFile)
 			}
 
 			// Physical Tape Libraries
@@ -295,6 +311,7 @@ func NewRouter(cfg *config.Config, db *database.DB, log *logger.Logger) *gin.Eng
 				systemGroup.PUT("/interfaces/:name", systemHandler.UpdateNetworkInterface)
 				systemGroup.GET("/ntp", systemHandler.GetNTPSettings)
 				systemGroup.POST("/ntp", systemHandler.SaveNTPSettings)
+				systemGroup.POST("/execute", requirePermission("system", "write"), systemHandler.ExecuteCommand)
 			}
 
 			// IAM routes - GetUser can be accessed by user viewing own profile or admin