Add Redis-based one-time download token support

Integrate Redis as a backend for one-time download token validation, with in-memory fallback. Added RedisManager for connection lifecycle, TokenStore for atomic token usage checks, and related configuration via environment variables. Updated download flow to ensure tokens are single-use, and improved API robustness for batch operations. Updated dependencies to include redis and cachetools.
2025-12-26 18:47:46 +08:00
parent 3088a9d548
commit d8a229fccd
13 changed files with 302 additions and 15 deletions
--- a/routers/api/v1/directory/init.py
+++ b/routers/api/v1/directory/init.py
@@ -32,7 +32,8 @@ async def router_directory_get(
    """
    获取目录内容

-    路径必须以用户名开头，如 /api/directory/admin 或 /api/directory/admin/docs
+    路径必须以用户名或 `.crash` 开头，如 /api/directory/admin 或 /api/directory/admin/docs
+    `.crash` 代表回收站，也就意味着用户名禁止为 `.crash`

    :param session: 数据库会话
    :param user: 当前登录用户