admin_minimax.go

package main

import (
	"bytes"
	"encoding/json"
	"io"
	"net/http"
	"strings"
)

// serveMinimaxAdmin routes MiniMax admin requests (auth already checked by router)
func (h *proxyHandler) serveMinimaxAdmin(w http.ResponseWriter, r *http.Request) {
	path := strings.TrimPrefix(r.URL.Path, "/admin/minimax")
	if path == "" {
		path = "/"
	}

	switch {
	case path == "/" && r.Method == http.MethodGet:
		h.handleAPIKeyList(w, AccountTypeMinimax)

	case path == "/add" && r.Method == http.MethodPost:
		h.handleMinimaxAdd(w, r)

	case strings.HasSuffix(path, "/remove") && r.Method == http.MethodPost:
		id := strings.TrimPrefix(path, "/")
		id = strings.TrimSuffix(id, "/remove")
		h.handleAPIKeyRemove(w, AccountTypeMinimax, id)

	default:
		http.NotFound(w, r)
	}
}

// POST /admin/minimax/add - add a MiniMax API key
func (h *proxyHandler) handleMinimaxAdd(w http.ResponseWriter, r *http.Request) {
	var req struct {
		APIKey string `json:"api_key"`
	}

	if r.Header.Get("Content-Type") == "application/json" {
		if err := json.NewDecoder(r.Body).Decode(&req); err != nil {
			respondJSONError(w, http.StatusBadRequest, "invalid json: "+err.Error())
			return
		}
	} else {
		req.APIKey = r.FormValue("api_key")
	}

	apiKey := strings.TrimSpace(req.APIKey)
	if apiKey == "" {
		respondJSONError(w, http.StatusBadRequest, "api_key is required")
		return
	}

	// Validate key by sending a minimal completion request
	validationURL := h.cfg.minimaxBase.String() + "/v1/messages"
	body := map[string]any{
		"model":      "MiniMax-M2.5",
		"max_tokens": 1,
		"messages": []map[string]string{
			{"role": "user", "content": "hi"},
		},
	}
	bodyBytes, _ := json.Marshal(body)

	validReq, _ := http.NewRequest(http.MethodPost, validationURL, bytes.NewReader(bodyBytes))
	validReq.Header.Set("Authorization", "Bearer "+apiKey)
	validReq.Header.Set("Content-Type", "application/json")
	validReq.Header.Set("anthropic-version", ccAnthropicVersion)

	resp, err := h.transport.RoundTrip(validReq)
	if err != nil {
		respondJSONError(w, http.StatusBadGateway, "failed to validate key: "+err.Error())
		return
	}
	io.Copy(io.Discard, resp.Body)
	resp.Body.Close()

	if resp.StatusCode == http.StatusUnauthorized || resp.StatusCode == http.StatusForbidden {
		respondJSONError(w, http.StatusBadRequest, "invalid API key (authentication failed)")
		return
	}

	h.saveAPIKeyAccountFile(w, AccountTypeMinimax, "minimax", apiKey)
}