Neo
6f8f12314f
包含多个会话的累积代码变更： - backend: AI 聊天服务、触发器调度、认证增强、WebSocket、调度器最小间隔 - admin-web: ETL 状态页、任务管理、调度配置、登录优化 - miniprogram: 看板页面、聊天集成、UI 组件、导航更新 - etl: DWS 新任务（finance_area_daily/board_cache）、连接器增强 - tenant-admin: 项目初始化 - db: 19 个迁移脚本（etl_feiqiu 11 + zqyy_app 8） - packages/shared: 枚举和工具函数更新 - tools: 数据库工具、报表生成、健康检查 - docs: PRD/架构/部署/合约文档更新 Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
49 lines
1.3 KiB
Python
49 lines
1.3 KiB
Python
# -*- coding: utf-8 -*-
|
||
"""
|
||
通用 Internal-Token 认证依赖。
|
||
|
||
从环境变量 INTERNAL_API_TOKEN 读取期望 token，
|
||
供 /api/internal/* 端点使用（不依赖 AIConfig）。
|
||
"""
|
||
|
||
from __future__ import annotations
|
||
|
||
import os
|
||
|
||
from fastapi import Header, HTTPException, status
|
||
|
||
|
||
def verify_internal_token(authorization: str = Header(...)) -> str:
|
||
"""校验 Internal-Token 认证。
|
||
|
||
Header 格式：Authorization: Internal-Token {token}
|
||
"""
|
||
prefix = "Internal-Token "
|
||
if not authorization.startswith(prefix):
|
||
raise HTTPException(
|
||
status_code=status.HTTP_401_UNAUTHORIZED,
|
||
detail="无效的认证格式，需要 Internal-Token",
|
||
)
|
||
|
||
token = authorization[len(prefix):]
|
||
if not token:
|
||
raise HTTPException(
|
||
status_code=status.HTTP_401_UNAUTHORIZED,
|
||
detail="Token 不能为空",
|
||
)
|
||
|
||
expected = os.environ.get("INTERNAL_API_TOKEN", "")
|
||
if not expected:
|
||
raise HTTPException(
|
||
status_code=status.HTTP_500_INTERNAL_SERVER_ERROR,
|
||
detail="INTERNAL_API_TOKEN 未配置",
|
||
)
|
||
|
||
if token != expected:
|
||
raise HTTPException(
|
||
status_code=status.HTTP_401_UNAUTHORIZED,
|
||
detail="Token 不匹配",
|
||
)
|
||
|
||
return token
|