config.toml

['dev.cloud.shuosc.com']
superuser = "17120238"

[['dev.cloud.shuosc.com'.urls]]
prefix = "/api/semester"
read = { everybody = true } # 对每个人：可读
write = { superuser = true } # 对管理员：可写

[['dev.cloud.shuosc.com'.urls]]
prefix = "/api/course"
read = { authed = true } # 对所有合法登录用户可读
write = { superuser = true }

[['dev.cloud.shuosc.com'.urls]]
prefix = "/api/student"
['dev.cloud.shuosc.com'.urls.write.authed]
url_segment = 2 # 将 url 的第2段（从0开始计数）和 header 中的 jwt token 中的 id 比较，相等则允许访问
['dev.cloud.shuosc.com'.urls.read.authed]
url_segment = 2

[['dev.cloud.shuosc.com'.urls]]
prefix = "/api/course-selection"
write = { superuser = true }
['dev.cloud.shuosc.com'.urls.read]
superuser = true
['dev.cloud.shuosc.com'.urls.read.authed]
query = "student_id"

[['dev.cloud.shuosc.com'.urls]]
prefix = "/api/todo"
['dev.cloud.shuosc.com'.urls.write]
superuser = true
authed = { query = "student_id" } # 将 query 中的 student_id 和 header 中的 jwt token 中的 id 比较，相等则允许访问
['dev.cloud.shuosc.com'.urls.read]
superuser = true
['dev.cloud.shuosc.com'.urls.read.authed]
query = "student_id"

['cloud.shuosc.com']
superuser = "17120238"
[['cloud.shuosc.com'.urls]]
prefix = "/api/semester"
read = { everybody = true }
write = { everybody = true }

[['dev.cloud.shuosc.com'.urls]]
prefix = "/api/xxx"
redirect_location = "/ping"
read = { everybody = true } # 对每个人：可读
write = { superuser = true } # 对管理员：可写