mirror of
https://github.com/langgenius/dify.git
synced 2025-11-04 04:43:09 +00:00
111 lines
2.8 KiB
Python
111 lines
2.8 KiB
Python
# -*- coding:utf-8 -*-
|
|
import uuid
|
|
from functools import wraps
|
|
|
|
from flask import request, session
|
|
from flask_restful import Resource
|
|
from werkzeug.exceptions import NotFound, Unauthorized
|
|
|
|
from extensions.ext_database import db
|
|
from models.model import App, Site, EndUser
|
|
|
|
|
|
def validate_token(view=None):
|
|
def decorator(view):
|
|
@wraps(view)
|
|
def decorated(*args, **kwargs):
|
|
site = validate_and_get_site()
|
|
|
|
app_model = db.session.query(App).filter(App.id == site.app_id).first()
|
|
if not app_model:
|
|
raise NotFound()
|
|
|
|
if app_model.status != 'normal':
|
|
raise NotFound()
|
|
|
|
if not app_model.enable_site:
|
|
raise NotFound()
|
|
|
|
end_user = create_or_update_end_user_for_session(app_model)
|
|
|
|
return view(app_model, end_user, *args, **kwargs)
|
|
return decorated
|
|
|
|
if view:
|
|
return decorator(view)
|
|
return decorator
|
|
|
|
|
|
def validate_and_get_site():
|
|
"""
|
|
Validate and get API token.
|
|
"""
|
|
auth_header = request.headers.get('Authorization')
|
|
if auth_header is None:
|
|
raise Unauthorized('Authorization header is missing.')
|
|
|
|
if ' ' not in auth_header:
|
|
raise Unauthorized('Invalid Authorization header format. Expected \'Bearer <api-key>\' format.')
|
|
|
|
auth_scheme, auth_token = auth_header.split(None, 1)
|
|
auth_scheme = auth_scheme.lower()
|
|
|
|
if auth_scheme != 'bearer':
|
|
raise Unauthorized('Invalid Authorization header format. Expected \'Bearer <api-key>\' format.')
|
|
|
|
site = db.session.query(Site).filter(
|
|
Site.code == auth_token,
|
|
Site.status == 'normal'
|
|
).first()
|
|
|
|
if not site:
|
|
raise NotFound()
|
|
|
|
return site
|
|
|
|
|
|
def create_or_update_end_user_for_session(app_model):
|
|
"""
|
|
Create or update session terminal based on session ID.
|
|
"""
|
|
if 'session_id' not in session:
|
|
session['session_id'] = generate_session_id()
|
|
|
|
session_id = session.get('session_id')
|
|
end_user = db.session.query(EndUser) \
|
|
.filter(
|
|
EndUser.session_id == session_id,
|
|
EndUser.type == 'browser'
|
|
).first()
|
|
|
|
if end_user is None:
|
|
end_user = EndUser(
|
|
tenant_id=app_model.tenant_id,
|
|
app_id=app_model.id,
|
|
type='browser',
|
|
is_anonymous=True,
|
|
session_id=session_id
|
|
)
|
|
db.session.add(end_user)
|
|
db.session.commit()
|
|
|
|
return end_user
|
|
|
|
|
|
def generate_session_id():
|
|
"""
|
|
Generate a unique session ID.
|
|
"""
|
|
count = 1
|
|
session_id = ''
|
|
while count != 0:
|
|
session_id = str(uuid.uuid4())
|
|
count = db.session.query(EndUser) \
|
|
.filter(EndUser.session_id == session_id).count()
|
|
|
|
return session_id
|
|
|
|
|
|
class WebApiResource(Resource):
|
|
method_decorators = [validate_token]
|