Files
panel/routes/api-remote.php
Dane Everitt 7c9c56bf51 Scope the remote node token to limit the servers it can manage for backups/transfers (#5476)
Improves the security posture of things more by limiting the servers
that a node can even communicate about with the Panel.
2026-02-11 16:04:09 -08:00

26 lines
1.2 KiB
PHP

<?php
use Illuminate\Support\Facades\Route;
use Pterodactyl\Http\Controllers\Api\Remote;
// Routes for the Wings daemon.
Route::post('/sftp/auth', Remote\SftpAuthenticationController::class);
Route::get('/servers', [Remote\Servers\ServerDetailsController::class, 'list']);
Route::post('/servers/reset', [Remote\Servers\ServerDetailsController::class, 'resetState']);
Route::post('/activity', Remote\ActivityProcessingController::class);
Route::group(['prefix' => '/servers/{uuid}'], function () {
Route::get('/', Remote\Servers\ServerDetailsController::class);
Route::get('/install', [Remote\Servers\ServerInstallController::class, 'index']);
Route::post('/install', [Remote\Servers\ServerInstallController::class, 'store']);
Route::post('/transfer/failure', [Remote\Servers\ServerTransferController::class, 'failure']);
Route::post('/transfer/success', [Remote\Servers\ServerTransferController::class, 'success']);
});
Route::group(['prefix' => '/backups'], function () {
Route::get('/{backup}', Remote\Backups\BackupRemoteUploadController::class);
Route::post('/{backup}', [Remote\Backups\BackupStatusController::class, 'index']);
Route::post('/{backup}/restore', [Remote\Backups\BackupStatusController::class, 'restore']);
});