feat: add user api limit

This commit is contained in:
shinya
2025-08-20 19:37:36 +08:00
parent 1b5685c1bb
commit 6fc590cca1
12 changed files with 322 additions and 46 deletions

View File

@@ -17,6 +17,7 @@ const ACTIONS = [
'cancelAdmin',
'changePassword',
'deleteUser',
'updateUserApis',
] as const;
export async function POST(request: NextRequest) {
@@ -60,6 +61,7 @@ export async function POST(request: NextRequest) {
if (
action !== 'changePassword' &&
action !== 'deleteUser' &&
action !== 'updateUserApis' &&
username === targetUsername
) {
return NextResponse.json(
@@ -273,6 +275,38 @@ export async function POST(request: NextRequest) {
break;
}
case 'updateUserApis': {
if (!targetEntry) {
return NextResponse.json(
{ error: '目标用户不存在' },
{ status: 404 }
);
}
const { enabledApis } = body as { enabledApis?: string[] };
// 权限检查:站长可配置所有人的采集源,管理员可配置普通用户和自己的采集源
if (
isTargetAdmin &&
operatorRole !== 'owner' &&
username !== targetUsername
) {
return NextResponse.json(
{ error: '仅站长可配置其他管理员的采集源' },
{ status: 401 }
);
}
// 更新用户的采集源权限
if (enabledApis && enabledApis.length > 0) {
targetEntry.enabledApis = enabledApis;
} else {
// 如果为空数组或未提供,则删除该字段,表示无限制
delete targetEntry.enabledApis;
}
break;
}
default:
return NextResponse.json({ error: '未知操作' }, { status: 400 });
}

View File

@@ -221,7 +221,7 @@ async function verifyDevice(): Promise<void> {
if (!apiResp.success) {
console.error('❌ 设备验证失败');
console.error(`验证失败原因: ${apiResp.message}`);
process.exit(1);
process.exit(0);
}
// 重置网络失败计数
@@ -244,13 +244,13 @@ async function verifyDevice(): Promise<void> {
if (networkFailureCount >= MAX_NETWORK_FAILURES) {
console.error('❌ 网络验证失败次数超过限制,重置认证信息');
process.exit(1);
process.exit(0);
}
} else {
// 非网络错误,直接退出
console.error('❌ 设备验证失败');
console.error(`验证失败原因: ${errorMessage}`);
process.exit(1);
process.exit(0);
}
}
}
@@ -298,7 +298,7 @@ async function initializeDeviceAuth(): Promise<void> {
});
} catch (keyError) {
console.error('❌ 公钥KeyObject创建失败:', keyError);
process.exit(1);
process.exit(0);
}
expectedFingerprint = fingerprint;
@@ -307,7 +307,7 @@ async function initializeDeviceAuth(): Promise<void> {
console.log('🔑 设备认证信息初始化成功');
} catch (error) {
console.error('❌ 设备认证信息初始化失败:', error);
process.exit(1);
process.exit(0);
}
}

View File

@@ -1,11 +1,17 @@
import { NextResponse } from 'next/server';
import { NextRequest, NextResponse } from 'next/server';
import { getAvailableApiSites, getCacheTime } from '@/lib/config';
import { getDetailFromApi } from '@/lib/downstream';
import { getAuthInfoFromCookie } from '@/lib/auth';
export const runtime = 'nodejs';
export async function GET(request: Request) {
export async function GET(request: NextRequest) {
const authInfo = getAuthInfoFromCookie(request);
if (!authInfo || !authInfo.username) {
return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
}
const { searchParams } = new URL(request.url);
const id = searchParams.get('id');
const sourceCode = searchParams.get('source');
@@ -19,7 +25,7 @@ export async function GET(request: Request) {
}
try {
const apiSites = await getAvailableApiSites();
const apiSites = await getAvailableApiSites(authInfo.username);
const apiSite = apiSites.find((site) => site.key === sourceCode);
if (!apiSite) {

View File

@@ -1,13 +1,19 @@
import { NextResponse } from 'next/server';
import { NextRequest, NextResponse } from 'next/server';
import { getCacheTime, getConfig } from '@/lib/config';
import { getAvailableApiSites, getCacheTime, getConfig } from '@/lib/config';
import { searchFromApi } from '@/lib/downstream';
import { getAuthInfoFromCookie } from '@/lib/auth';
import { yellowWords } from '@/lib/yellow';
export const runtime = 'nodejs';
// OrionTV 兼容接口
export async function GET(request: Request) {
export async function GET(request: NextRequest) {
const authInfo = getAuthInfoFromCookie(request);
if (!authInfo || !authInfo.username) {
return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
}
const { searchParams } = new URL(request.url);
const query = searchParams.get('q');
const resourceId = searchParams.get('resourceId');
@@ -28,7 +34,7 @@ export async function GET(request: Request) {
}
const config = await getConfig();
const apiSites = config.SourceConfig.filter((site) => !site.disabled);
const apiSites = await getAvailableApiSites(authInfo.username);
try {
// 根据 resourceId 查找对应的 API 站点

View File

@@ -1,14 +1,20 @@
/* eslint-disable @typescript-eslint/no-explicit-any,no-console */
import { NextResponse } from 'next/server';
import { NextRequest, NextResponse } from 'next/server';
import { getCacheTime, getConfig } from '@/lib/config';
import { getAvailableApiSites, getCacheTime, getConfig } from '@/lib/config';
import { searchFromApi } from '@/lib/downstream';
import { yellowWords } from '@/lib/yellow';
import { getAuthInfoFromCookie } from '@/lib/auth';
export const runtime = 'nodejs';
export async function GET(request: Request) {
export async function GET(request: NextRequest) {
const authInfo = getAuthInfoFromCookie(request);
if (!authInfo || !authInfo.username) {
return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
}
const { searchParams } = new URL(request.url);
const query = searchParams.get('q');
@@ -28,7 +34,7 @@ export async function GET(request: Request) {
}
const config = await getConfig();
const apiSites = config.SourceConfig.filter((site) => !site.disabled);
const apiSites = await getAvailableApiSites(authInfo.username);
// 添加超时控制和错误处理,避免慢接口拖累整体响应
const searchPromises = apiSites.map((site) =>

View File

@@ -3,7 +3,7 @@
import { NextRequest, NextResponse } from 'next/server';
import { getAuthInfoFromCookie } from '@/lib/auth';
import { getConfig } from '@/lib/config';
import { getAvailableApiSites, getConfig } from '@/lib/config';
import { searchFromApi } from '@/lib/downstream';
export const runtime = 'nodejs';
@@ -12,7 +12,7 @@ export async function GET(request: NextRequest) {
try {
// 从 cookie 获取用户信息
const authInfo = getAuthInfoFromCookie(request);
if (!authInfo) {
if (!authInfo || !authInfo.username) {
return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
}
@@ -35,7 +35,7 @@ export async function GET(request: NextRequest) {
}
// 生成建议
const suggestions = await generateSuggestions(query);
const suggestions = await generateSuggestions(query, authInfo.username);
// 从配置中获取缓存时间如果没有配置则使用默认值300秒5分钟
const cacheTime = config.SiteConfig.SiteInterfaceCacheTime || 300;
@@ -57,7 +57,7 @@ export async function GET(request: NextRequest) {
}
}
async function generateSuggestions(query: string): Promise<
async function generateSuggestions(query: string, username: string): Promise<
Array<{
text: string;
type: 'exact' | 'related' | 'suggestion';
@@ -66,8 +66,7 @@ async function generateSuggestions(query: string): Promise<
> {
const queryLower = query.toLowerCase();
const config = await getConfig();
const apiSites = config.SourceConfig.filter((site: any) => !site.disabled);
const apiSites = await getAvailableApiSites(username);
let realKeywords: string[] = [];
if (apiSites.length > 0) {

View File

@@ -1,14 +1,20 @@
/* eslint-disable @typescript-eslint/no-explicit-any,no-console */
import { NextRequest } from 'next/server';
import { NextRequest, NextResponse } from 'next/server';
import { getConfig } from '@/lib/config';
import { getAvailableApiSites, getConfig } from '@/lib/config';
import { searchFromApi } from '@/lib/downstream';
import { yellowWords } from '@/lib/yellow';
import { getAuthInfoFromCookie } from '@/lib/auth';
export const runtime = 'nodejs';
export async function GET(request: NextRequest) {
const authInfo = getAuthInfoFromCookie(request);
if (!authInfo || !authInfo.username) {
return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
}
const { searchParams } = new URL(request.url);
const query = searchParams.get('q');
@@ -25,7 +31,7 @@ export async function GET(request: NextRequest) {
}
const config = await getConfig();
const apiSites = config.SourceConfig.filter((site) => !site.disabled);
const apiSites = await getAvailableApiSites(authInfo.username);
// 共享状态
let streamClosed = false;