0.10.1: 安全与业务逻辑加固、新品牌与部署加固

三轮审查修复(60+ 项),相对远端 main(b536672)的关键变更: - 安全: 数据面 SSRF 拨号防护(防 DNS rebinding)/上游凭据剥离/登录防枚举与锁定态统一/可信代理(X-Forwarded-For)限流加固/会话版本失效机制/ 撤销即时传播/弱密钥拒绝启动/脱敏字节级重写(保签名契约) - 业务逻辑: 裸 body 上传 panic/bootstrap 审计管线卡死/定价通配符优先级/ 全局工具可见性/调度器停机补跑/TOTP 挑战令牌消费顺序/熔断探针语义/ >4MB 响应 token 计量/管理员重置密码作废会话等 - 前端: 新 logo(语枢 AI 网关主题)/Provider 凭据异常警示/删除入口/ 后端错误消息透传/localStorage 敏感数据收敛 - 部署: CREDENTIAL_MASTER_KEY 持久化与弱值拒绝/Provider DELETE 接口/ nginx 安全头/worker 内存限制 - 新增迁移 000029(key_hash 索引)/000030(usage_daily 币种维度)
2026-08-13 10:50:51 +08:00
parent b536672000
commit 9501751792
136 changed files with 8024 additions and 1476 deletions
@@ -0,0 +1,173 @@
+package scheduler
+
+import (
+	"encoding/json"
+	"errors"
+	"net/http"
+	"strconv"
+
+	"aigateway.local/core/internal/identity"
+	"aigateway.local/core/internal/platform/apiresponse"
+)
+
+type AdminHTTPHandler struct {
+	service  *Service
+	identity *identity.Service
+	mux      *http.ServeMux
+}
+
+func NewAdminHTTPHandler(service *Service, identityService *identity.Service) *AdminHTTPHandler {
+	h := &AdminHTTPHandler{service: service, identity: identityService, mux: http.NewServeMux()}
+	h.mux.HandleFunc("GET /api/v1/admin/scheduled-tasks", h.list)
+	h.mux.HandleFunc("POST /api/v1/admin/scheduled-tasks", h.create)
+	h.mux.HandleFunc("GET /api/v1/admin/scheduled-tasks/{id}", h.get)
+	h.mux.HandleFunc("PUT /api/v1/admin/scheduled-tasks/{id}", h.update)
+	h.mux.HandleFunc("DELETE /api/v1/admin/scheduled-tasks/{id}", h.delete)
+	h.mux.HandleFunc("POST /api/v1/admin/scheduled-tasks/{id}/start", h.start)
+	h.mux.HandleFunc("POST /api/v1/admin/scheduled-tasks/{id}/pause", h.pause)
+	h.mux.HandleFunc("POST /api/v1/admin/scheduled-tasks/{id}/run", h.runNow)
+	h.mux.HandleFunc("GET /api/v1/admin/scheduled-tasks/{id}/runs", h.runs)
+	return h
+}
+
+func (h *AdminHTTPHandler) ServeHTTP(w http.ResponseWriter, r *http.Request) { h.mux.ServeHTTP(w, r) }
+
+func (h *AdminHTTPHandler) require(w http.ResponseWriter, r *http.Request, permission string) (identity.Account, bool) {
+	account, err := h.identity.Authenticate(r.Context(), identity.KindAdmin, r.Header.Get("Authorization"))
+	if err != nil {
+		apiresponse.Error(w, http.StatusUnauthorized, "登录状态无效")
+		return identity.Account{}, false
+	}
+	if !identity.HasPermission(account, permission) {
+		apiresponse.Error(w, http.StatusForbidden, "缺少定时任务权限")
+		return identity.Account{}, false
+	}
+	return account, true
+}
+
+func decodeTask(w http.ResponseWriter, r *http.Request, target any) bool {
+	decoder := json.NewDecoder(http.MaxBytesReader(w, r.Body, 2<<20))
+	decoder.DisallowUnknownFields()
+	if err := decoder.Decode(target); err != nil {
+		apiresponse.Error(w, http.StatusBadRequest, "请求格式无效")
+		return false
+	}
+	return true
+}
+
+func taskError(w http.ResponseWriter, err error) {
+	if errors.Is(err, ErrNotFound) {
+		apiresponse.Error(w, http.StatusNotFound, "定时任务不存在")
+		return
+	}
+	apiresponse.Error(w, http.StatusBadRequest, err.Error())
+}
+
+func (h *AdminHTTPHandler) list(w http.ResponseWriter, r *http.Request) {
+	if _, ok := h.require(w, r, identity.PermissionScheduledTaskRead); !ok {
+		return
+	}
+	items, err := h.service.List(r.Context())
+	if err != nil {
+		taskError(w, err)
+		return
+	}
+	apiresponse.OK(w, items)
+}
+
+func (h *AdminHTTPHandler) get(w http.ResponseWriter, r *http.Request) {
+	if _, ok := h.require(w, r, identity.PermissionScheduledTaskRead); !ok {
+		return
+	}
+	item, err := h.service.Get(r.Context(), r.PathValue("id"))
+	if err != nil {
+		taskError(w, err)
+		return
+	}
+	apiresponse.OK(w, item)
+}
+
+func (h *AdminHTTPHandler) create(w http.ResponseWriter, r *http.Request) {
+	account, ok := h.require(w, r, identity.PermissionScheduledTaskManage)
+	if !ok {
+		return
+	}
+	var input TaskInput
+	if !decodeTask(w, r, &input) {
+		return
+	}
+	item, err := h.service.Save(r.Context(), "", input, account.ID)
+	if err != nil {
+		taskError(w, err)
+		return
+	}
+	apiresponse.OK(w, item)
+}
+
+func (h *AdminHTTPHandler) update(w http.ResponseWriter, r *http.Request) {
+	account, ok := h.require(w, r, identity.PermissionScheduledTaskManage)
+	if !ok {
+		return
+	}
+	var input TaskInput
+	if !decodeTask(w, r, &input) {
+		return
+	}
+	item, err := h.service.Save(r.Context(), r.PathValue("id"), input, account.ID)
+	if err != nil {
+		taskError(w, err)
+		return
+	}
+	apiresponse.OK(w, item)
+}
+
+func (h *AdminHTTPHandler) delete(w http.ResponseWriter, r *http.Request) {
+	if _, ok := h.require(w, r, identity.PermissionScheduledTaskManage); !ok {
+		return
+	}
+	if err := h.service.Delete(r.Context(), r.PathValue("id")); err != nil {
+		taskError(w, err)
+		return
+	}
+	apiresponse.OK(w, map[string]bool{"deleted": true})
+}
+
+func (h *AdminHTTPHandler) setEnabled(w http.ResponseWriter, r *http.Request, enabled bool) {
+	if _, ok := h.require(w, r, identity.PermissionScheduledTaskManage); !ok {
+		return
+	}
+	item, err := h.service.SetEnabled(r.Context(), r.PathValue("id"), enabled)
+	if err != nil {
+		taskError(w, err)
+		return
+	}
+	apiresponse.OK(w, item)
+}
+
+func (h *AdminHTTPHandler) start(w http.ResponseWriter, r *http.Request) { h.setEnabled(w, r, true) }
+func (h *AdminHTTPHandler) pause(w http.ResponseWriter, r *http.Request) { h.setEnabled(w, r, false) }
+
+func (h *AdminHTTPHandler) runNow(w http.ResponseWriter, r *http.Request) {
+	if _, ok := h.require(w, r, identity.PermissionScheduledTaskManage); !ok {
+		return
+	}
+	run, err := h.service.QueueManual(r.Context(), r.PathValue("id"))
+	if err != nil {
+		taskError(w, err)
+		return
+	}
+	apiresponse.OK(w, run)
+}
+
+func (h *AdminHTTPHandler) runs(w http.ResponseWriter, r *http.Request) {
+	if _, ok := h.require(w, r, identity.PermissionScheduledTaskRead); !ok {
+		return
+	}
+	limit, _ := strconv.Atoi(r.URL.Query().Get("limit"))
+	items, err := h.service.Runs(r.Context(), r.PathValue("id"), limit)
+	if err != nil {
+		taskError(w, err)
+		return
+	}
+	apiresponse.OK(w, items)
+}