Added implementation

cmd/api/main.go

@@ -0,0 +1,117 @@
+package main
+
+import (
+	"fmt"
+	"os"
+	"os/signal"
+	"syscall"
+
+	"github.com/gofiber/fiber/v2"
+	"github.com/gofiber/fiber/v2/middleware/compress"
+	"github.com/gofiber/fiber/v2/middleware/cors"
+	"github.com/gofiber/fiber/v2/middleware/helmet"
+	"github.com/gofiber/fiber/v2/middleware/limiter"
+	"github.com/gofiber/fiber/v2/middleware/recover"
+	"github.com/thijsherman/vaultwarden-api/internal/auth"
+	"github.com/thijsherman/vaultwarden-api/internal/config"
+	"github.com/thijsherman/vaultwarden-api/internal/handlers"
+	"github.com/thijsherman/vaultwarden-api/internal/vaultwarden"
+	"github.com/thijsherman/vaultwarden-api/pkg/logger"
+)
+
+func main() {
+	// Load configuration
+	cfg, err := config.Load()
+	if err != nil {
+		logger.Error.Fatalf("Failed to load configuration: %v", err)
+	}
+
+	logger.Info.Printf("Starting Vaultwarden API on port %s (environment: %s)", cfg.Port, cfg.Environment)
+
+	// Initialize Vaultwarden client
+	vaultClient := vaultwarden.NewClient(cfg.VaultwardenURL, cfg.VaultwardenToken, cfg.CacheTTL)
+
+	// Initialize handlers
+	h := handlers.NewHandler(vaultClient)
+
+	// Create Fiber app with security configurations
+	app := fiber.New(fiber.Config{
+		AppName:               "Vaultwarden API v1.0",
+		DisableStartupMessage: false,
+		ReadTimeout:           cfg.ReadTimeout,
+		WriteTimeout:          cfg.WriteTimeout,
+		// Disable server header for security
+		ServerHeader: "",
+		// Don't expose stack traces in production
+		ErrorHandler: customErrorHandler(cfg.IsProd()),
+	})
+
+	// Security middleware
+	app.Use(helmet.New()) // Security headers
+	app.Use(recover.New()) // Recover from panics
+	app.Use(compress.New(compress.Config{
+		Level: compress.LevelBestSpeed,
+	}))
+
+	// CORS configuration - adjust as needed
+	app.Use(cors.New(cors.Config{
+		AllowOrigins: "*", // Restrict this in production to specific domains
+		AllowMethods: "GET,POST",
+		AllowHeaders: "Authorization,Content-Type",
+	}))
+
+	// Rate limiting to prevent abuse
+	app.Use(limiter.New(limiter.Config{
+		Max: 100, // 100 requests per minute per IP
+	}))
+
+	// Public routes (no authentication required)
+	app.Get("/health", h.HealthCheck)
+
+	// Protected routes (authentication required)
+	api := app.Group("/", auth.Middleware(cfg.APIKey))
+	api.Get("/secret/:name", h.GetSecret)
+	api.Post("/refresh", h.RefreshCache)
+
+	// Graceful shutdown
+	go func() {
+		sigChan := make(chan os.Signal, 1)
+		signal.Notify(sigChan, os.Interrupt, syscall.SIGTERM)
+		<-sigChan
+
+		logger.Info.Println("Shutting down gracefully...")
+		if err := app.Shutdown(); err != nil {
+			logger.Error.Printf("Error during shutdown: %v", err)
+		}
+	}()
+
+	// Start server
+	addr := fmt.Sprintf(":%s", cfg.Port)
+	if err := app.Listen(addr); err != nil {
+		logger.Error.Fatalf("Failed to start server: %v", err)
+	}
+}
+
+// customErrorHandler creates a custom error handler
+func customErrorHandler(isProd bool) fiber.ErrorHandler {
+	return func(c *fiber.Ctx, err error) error {
+		code := fiber.StatusInternalServerError
+
+		if e, ok := err.(*fiber.Error); ok {
+			code = e.Code
+		}
+
+		// Log the error
+		logger.Error.Printf("Request error (status %d): %v", code, err)
+
+		// Don't expose internal errors in production
+		message := "Internal Server Error"
+		if !isProd {
+			message = err.Error()
+		}
+
+		return c.Status(code).JSON(fiber.Map{
+			"error": message,
+		})
+	}
+}