优化结构

internal/server/middleware/cors.go

@@ -4,7 +4,7 @@ import (
 	"net/http"
 	"strings"
 
-	"kra/internal/conf"
+	"kra/internal/config"
 
 	"github.com/gin-gonic/gin"
 )
@@ -17,18 +17,19 @@ const (
 
 // CORS applies the current administration CORS rules on every request so a
 // configuration reload takes effect without rebuilding the Gin engine.
-func CORS(runtime *conf.Runtime) gin.HandlerFunc {
+func CORS(runtime *config.Store) gin.HandlerFunc {
 	return func(c *gin.Context) {
 		if runtime == nil {
 			c.Next()
 			return
 		}
-		config := runtime.Admin()
-		if config == nil || config.Cors == nil {
+		snapshot := runtime.Snapshot()
+		if snapshot == nil || snapshot.Admin == nil || snapshot.Admin.CORS == nil {
 			c.Next()
 			return
 		}
-		mode := strings.TrimSpace(config.Cors.Mode)
+		cors := snapshot.Admin.CORS
+		mode := strings.TrimSpace(cors.Mode)
 		origin := c.GetHeader("Origin")
 		corsHandled := false
 		if mode == "allow-all" {
@@ -36,7 +37,7 @@ func CORS(runtime *conf.Runtime) gin.HandlerFunc {
 				setCORSHeaders(c, origin, defaultCORSHeaders, defaultCORSMethods, defaultCORSExpose, true)
 				corsHandled = true
 			}
-		} else if rule := matchingCORSRule(config.Cors.Whitelist, origin); rule != nil {
+		} else if rule := matchingCORSRule(cors.Whitelist, origin); rule != nil {
 			setCORSHeaders(c, rule.AllowOrigin, rule.AllowHeaders, rule.AllowMethods, rule.ExposeHeaders, rule.AllowCredentials)
 			corsHandled = true
 		} else if mode == "strict-whitelist" && !(c.Request.Method == http.MethodGet && isHealthPath(c.Request.URL.Path)) {
@@ -56,7 +57,7 @@ func isHealthPath(path string) bool {
 	return path == "/health" || strings.HasSuffix(path, "/health")
 }
 
-func matchingCORSRule(rules []*conf.AdminBackend_CORSRule, origin string) *conf.AdminBackend_CORSRule {
+func matchingCORSRule(rules []*config.CORSRule, origin string) *config.CORSRule {
 	for _, rule := range rules {
 		if rule != nil && origin == rule.AllowOrigin {
 			return rule