于小丘
729773cae3
- Extract AuthIdentity model for multi-provider authentication (email_password, OAuth, Passkey, Magic Link) - Remove password field from User model, credentials now stored in AuthIdentity - Refactor unified login/register to use AuthIdentity-based provider checking - Add site config fields: footer_code, tos_url, privacy_url, auth_methods - Add auth settings defaults in migration (email_password enabled by default) - Update admin user creation to create AuthIdentity records - Update all tests to use AuthIdentity model Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
126 lines
4.4 KiB
Python
126 lines
4.4 KiB
Python
from fastapi import APIRouter
|
|
|
|
from middleware.dependencies import SessionDep
|
|
from sqlmodels import (
|
|
ResponseBase, Setting, SettingsType, SiteConfigResponse,
|
|
ThemePreset, ThemePresetResponse, ThemePresetListResponse,
|
|
AuthMethodConfig,
|
|
)
|
|
from sqlmodels.auth_identity import AuthProviderType
|
|
from sqlmodels.setting import CaptchaType
|
|
from utils import http_exceptions
|
|
|
|
site_router = APIRouter(
|
|
prefix="/site",
|
|
tags=["site"],
|
|
)
|
|
|
|
@site_router.get(
|
|
path="/ping",
|
|
summary="测试用路由",
|
|
description="A simple endpoint to check if the site is up and running.",
|
|
response_model=ResponseBase,
|
|
)
|
|
def router_site_ping() -> ResponseBase:
|
|
"""
|
|
Ping the site to check if it is up and running.
|
|
|
|
Returns:
|
|
str: A message indicating the site is running.
|
|
"""
|
|
return ResponseBase()
|
|
|
|
|
|
@site_router.get(
|
|
path='/captcha',
|
|
summary='验证码',
|
|
description='Get a Base64 captcha image.',
|
|
response_model=ResponseBase,
|
|
)
|
|
def router_site_captcha():
|
|
"""
|
|
Get a Base64 captcha image.
|
|
|
|
Returns:
|
|
str: A Base64 encoded string of the captcha image.
|
|
"""
|
|
http_exceptions.raise_not_implemented()
|
|
|
|
@site_router.get(
|
|
path='/themes',
|
|
summary='获取主题预设列表',
|
|
)
|
|
async def router_site_themes(session: SessionDep) -> ThemePresetListResponse:
|
|
"""
|
|
获取所有主题预设列表
|
|
|
|
无需认证，前端初始化时调用。
|
|
"""
|
|
presets: list[ThemePreset] = await ThemePreset.get(session, fetch_mode="all")
|
|
return ThemePresetListResponse(
|
|
themes=[ThemePresetResponse.from_preset(p) for p in presets]
|
|
)
|
|
|
|
|
|
@site_router.get(
|
|
path='/config',
|
|
summary='站点全局配置',
|
|
description='获取站点全局配置，包括验证码设置、注册开关等。',
|
|
)
|
|
async def router_site_config(session: SessionDep) -> SiteConfigResponse:
|
|
"""
|
|
获取站点全局配置
|
|
|
|
无需认证。前端在初始化时调用此端点获取验证码类型、
|
|
登录/注册/找回密码是否需要验证码、可用的认证方式等配置。
|
|
"""
|
|
# 批量查询所需设置
|
|
settings: list[Setting] = await Setting.get(
|
|
session,
|
|
(Setting.type == SettingsType.BASIC) |
|
|
(Setting.type == SettingsType.LOGIN) |
|
|
(Setting.type == SettingsType.REGISTER) |
|
|
(Setting.type == SettingsType.CAPTCHA) |
|
|
(Setting.type == SettingsType.AUTH) |
|
|
(Setting.type == SettingsType.OAUTH),
|
|
fetch_mode="all",
|
|
)
|
|
|
|
# 构建 name→value 映射
|
|
s: dict[str, str | None] = {item.name: item.value for item in settings}
|
|
|
|
# 根据 captcha_type 选择对应的 public key
|
|
captcha_type_str = s.get("captcha_type", "default")
|
|
captcha_type = CaptchaType(captcha_type_str) if captcha_type_str else CaptchaType.DEFAULT
|
|
captcha_key: str | None = None
|
|
if captcha_type == CaptchaType.GCAPTCHA:
|
|
captcha_key = s.get("captcha_ReCaptchaKey") or None
|
|
elif captcha_type == CaptchaType.CLOUD_FLARE_TURNSTILE:
|
|
captcha_key = s.get("captcha_CloudflareKey") or None
|
|
|
|
# 构建认证方式列表
|
|
auth_methods: list[AuthMethodConfig] = [
|
|
AuthMethodConfig(provider=AuthProviderType.EMAIL_PASSWORD, is_enabled=s.get("auth_email_password_enabled") == "1"),
|
|
AuthMethodConfig(provider=AuthProviderType.PHONE_SMS, is_enabled=s.get("auth_phone_sms_enabled") == "1"),
|
|
AuthMethodConfig(provider=AuthProviderType.GITHUB, is_enabled=s.get("github_enabled") == "1"),
|
|
AuthMethodConfig(provider=AuthProviderType.QQ, is_enabled=s.get("qq_enabled") == "1"),
|
|
AuthMethodConfig(provider=AuthProviderType.PASSKEY, is_enabled=s.get("auth_passkey_enabled") == "1"),
|
|
AuthMethodConfig(provider=AuthProviderType.MAGIC_LINK, is_enabled=s.get("auth_magic_link_enabled") == "1"),
|
|
]
|
|
|
|
return SiteConfigResponse(
|
|
title=s.get("siteName") or "DiskNext",
|
|
register_enabled=s.get("register_enabled") == "1",
|
|
login_captcha=s.get("login_captcha") == "1",
|
|
reg_captcha=s.get("reg_captcha") == "1",
|
|
forget_captcha=s.get("forget_captcha") == "1",
|
|
captcha_type=captcha_type,
|
|
captcha_key=captcha_key,
|
|
auth_methods=auth_methods,
|
|
password_required=s.get("auth_password_required") == "1",
|
|
phone_binding_required=s.get("auth_phone_binding_required") == "1",
|
|
email_binding_required=s.get("auth_email_binding_required") == "1",
|
|
footer_code=s.get("footer_code"),
|
|
tos_url=s.get("tos_url"),
|
|
privacy_url=s.get("privacy_url"),
|
|
) |