mirror of
https://github.com/AstrBotDevs/AstrBot
synced 2026-07-16 01:40:15 +08:00
0d8e8682db
* refactor: migrate to fastapi * structure refactor * fix: pyright fix * refactor: improve error handling and public messages in plugin services * feat(api): refactor API client integration and enhance request handling - Updated API client configuration to use a dedicated HTTP client. - Introduced utility functions for generating options, queries, and form data for API requests. - Refactored multiple API methods to utilize the new utility functions for improved consistency and readability. - Renamed types for clarity and updated import statements accordingly. feat(docs): add script to update OpenAPI JSON from YAML spec - Created a Python script to convert OpenAPI YAML specification to JSON format. - The script supports customizable input and output paths. - Ensured the script handles directory creation for output paths and validates the YAML structure. * fix * feat(auth): implement rate limiting for v1 login endpoint and enhance request handling * Refactor dashboard API routers to use legacy_router for backward compatibility - Changed all instances of dashboard_router to legacy_router across multiple API modules including platform, plugins, providers, sessions, skills, stats, subagents, t2i, tools, updates, and asgi_runtime. - Updated route definitions to ensure existing endpoints remain functional under the new router structure. - Introduced support for Quart request context in asgi_runtime to enhance compatibility with existing Quart-based plugins. - Added a test case to validate the functionality of the new Quart request context handling in plugin extensions. * chore: remove cli test * fix: update dashboard tests for fastapi migration * chore: satisfy ruff checks * fix: update openapi api key scopes * fix: sync config scope chip selection * fix: restore quart dependency * docs: clarify quart plugin api compatibility * docs: update openapi scope documentation * fix: use singular skill openapi scope * fix: hide update service exception details * fix: address fastapi review comments * fix: address dashboard review findings * docs: revert unrelated package deployment changes * docs: update agent api generation guidance * feat: add plugin page web api helpers * docs: add plugin page bridge demo * fix: type plugin upload files * fix: stabilize plugin page uploads * fix: type plugin web request proxy * docs: remove plugin page docs example * fix: authenticate plugin page SSE bridge
65 lines
2.3 KiB
Python
65 lines
2.3 KiB
Python
from urllib.parse import unquote
|
|
|
|
PLUGIN_PAGE_CONTENT_PREFIX = "/api/plugin/page/content/"
|
|
PLUGIN_PAGE_BRIDGE_PATH = "/api/plugin/page/bridge-sdk.js"
|
|
PLUGIN_PAGE_TOKEN_TYPE = "plugin_page_asset"
|
|
|
|
|
|
class PluginPageAuth:
|
|
@staticmethod
|
|
def is_protected_path(path: str) -> bool:
|
|
return path.startswith(PLUGIN_PAGE_CONTENT_PREFIX) or path.startswith(
|
|
PLUGIN_PAGE_BRIDGE_PATH
|
|
)
|
|
|
|
@staticmethod
|
|
def is_asset_token(payload: dict) -> bool:
|
|
return payload.get("token_type") == PLUGIN_PAGE_TOKEN_TYPE
|
|
|
|
@staticmethod
|
|
def extract_asset_token(query_params) -> str | None:
|
|
query_asset_token = query_params.get("asset_token", "").strip()
|
|
return query_asset_token or None
|
|
|
|
@staticmethod
|
|
def extract_plugin_name_from_path(path: str) -> str | None:
|
|
if not path.startswith(PLUGIN_PAGE_CONTENT_PREFIX):
|
|
return None
|
|
remainder = path[len(PLUGIN_PAGE_CONTENT_PREFIX) :]
|
|
plugin_part = remainder.split("/", 1)[0] if remainder else ""
|
|
return unquote(plugin_part) if plugin_part else None
|
|
|
|
@staticmethod
|
|
def extract_page_name_from_path(path: str) -> str | None:
|
|
if not path.startswith(PLUGIN_PAGE_CONTENT_PREFIX):
|
|
return None
|
|
remainder = path[len(PLUGIN_PAGE_CONTENT_PREFIX) :]
|
|
parts = remainder.split("/", 2)
|
|
page_part = parts[1] if len(parts) > 1 else ""
|
|
return unquote(page_part) if page_part else None
|
|
|
|
@classmethod
|
|
def is_scope_valid(cls, payload: dict, path: str) -> bool:
|
|
if not cls.is_protected_path(path):
|
|
return False
|
|
if path.startswith(PLUGIN_PAGE_BRIDGE_PATH):
|
|
return True
|
|
|
|
token_plugin_name = payload.get("plugin_name")
|
|
token_page_name = payload.get("page_name")
|
|
request_plugin_name = cls.extract_plugin_name_from_path(path)
|
|
request_page_name = cls.extract_page_name_from_path(path)
|
|
if (
|
|
not isinstance(token_plugin_name, str)
|
|
or not token_plugin_name
|
|
or not isinstance(token_page_name, str)
|
|
or not token_page_name
|
|
or not request_plugin_name
|
|
or not request_page_name
|
|
):
|
|
return False
|
|
return (
|
|
token_plugin_name == request_plugin_name
|
|
and token_page_name == request_page_name
|
|
)
|