121 lines
3.6 KiB
Python
121 lines
3.6 KiB
Python
"""FastAPI 入口"""
|
|
|
|
import os
|
|
from pathlib import Path
|
|
import uvicorn
|
|
from contextlib import asynccontextmanager
|
|
from fastapi import FastAPI, Request
|
|
from fastapi.middleware.cors import CORSMiddleware
|
|
from fastapi.staticfiles import StaticFiles
|
|
from fastapi.responses import FileResponse
|
|
from starlette.middleware.base import BaseHTTPMiddleware
|
|
|
|
from .database import init_db
|
|
from .routers import auth, users, accounts, login, proxy, cookies
|
|
from .schemas import AppInfo
|
|
from .version import get_app_version
|
|
from utils import setup_logger
|
|
|
|
|
|
@asynccontextmanager
|
|
async def lifespan(app: FastAPI):
|
|
# 初始化日志（控制台 + 按天命名文件）
|
|
_log_level = os.getenv("LOG_LEVEL", "DEBUG")
|
|
_log_dir = Path(__file__).resolve().parents[2] / "logs"
|
|
setup_logger(level=_log_level, log_dir=str(_log_dir))
|
|
|
|
init_db()
|
|
yield
|
|
|
|
|
|
app = FastAPI(
|
|
title="斗鱼批量登录后台",
|
|
version=get_app_version(),
|
|
lifespan=lifespan,
|
|
)
|
|
|
|
# CORS（支持通过环境变量配置，逗号分隔；默认开发环境）
|
|
_cors_env = os.getenv("CORS_ORIGINS", "")
|
|
if _cors_env:
|
|
_cors_origins = [o.strip() for o in _cors_env.split(",") if o.strip()]
|
|
else:
|
|
_cors_origins = ["http://localhost:5173", "http://localhost:3000"]
|
|
|
|
app.add_middleware(
|
|
CORSMiddleware,
|
|
allow_origins=_cors_origins,
|
|
allow_credentials=True,
|
|
allow_methods=["*"],
|
|
allow_headers=["*"],
|
|
)
|
|
|
|
|
|
# 安全响应头中间件
|
|
class SecurityHeadersMiddleware(BaseHTTPMiddleware):
|
|
async def dispatch(self, request: Request, call_next):
|
|
response = await call_next(request)
|
|
response.headers["X-Content-Type-Options"] = "nosniff"
|
|
response.headers["X-Frame-Options"] = "DENY"
|
|
response.headers["Referrer-Policy"] = "strict-origin-when-cross-origin"
|
|
return response
|
|
|
|
|
|
app.add_middleware(SecurityHeadersMiddleware)
|
|
|
|
# 注册路由
|
|
app.include_router(auth.router)
|
|
app.include_router(users.router)
|
|
app.include_router(accounts.router)
|
|
app.include_router(login.router)
|
|
app.include_router(proxy.router)
|
|
app.include_router(cookies.router)
|
|
|
|
|
|
@app.get("/api/health")
|
|
def health():
|
|
return {"status": "ok"}
|
|
|
|
|
|
@app.get("/api/app-info", response_model=AppInfo)
|
|
def app_info():
|
|
return AppInfo(version=get_app_version())
|
|
|
|
|
|
# ---- 生产环境：serve 前端静态文件 ----
|
|
# Docker 部署时前端构建产物会被复制到 web/frontend/dist
|
|
_FRONTEND_DIST = Path(__file__).resolve().parents[2] / "web" / "frontend" / "dist"
|
|
_INDEX_HTML = _FRONTEND_DIST / "index.html"
|
|
|
|
if _INDEX_HTML.exists():
|
|
# 挂载静态资源目录（js/css/图片等）
|
|
_ASSETS_DIR = _FRONTEND_DIST / "assets"
|
|
if _ASSETS_DIR.exists():
|
|
app.mount("/assets", StaticFiles(directory=str(_ASSETS_DIR)), name="assets")
|
|
|
|
@app.get("/{full_path:path}")
|
|
async def serve_spa(full_path: str, request: Request):
|
|
"""SPA fallback：非 /api 路径返回 index.html"""
|
|
# 排除 API 路径
|
|
if full_path.startswith("api"):
|
|
return {"detail": "Not Found"}
|
|
# 尝试返回静态文件（防护路径遍历）
|
|
file_path = (_FRONTEND_DIST / full_path).resolve()
|
|
try:
|
|
file_path.relative_to(_FRONTEND_DIST.resolve())
|
|
except ValueError:
|
|
# 路径逃逸出 dist 目录，拒绝访问
|
|
return {"detail": "Not Found"}
|
|
if file_path.is_file():
|
|
return FileResponse(str(file_path))
|
|
# SPA fallback 到 index.html
|
|
return FileResponse(str(_INDEX_HTML))
|
|
|
|
|
|
def run():
|
|
_reload = os.getenv("UVICORN_RELOAD", "false").lower() == "true"
|
|
uvicorn.run("web.backend.main:app", host="0.0.0.0", port=8000, reload=_reload)
|
|
|
|
|
|
if __name__ == "__main__":
|
|
run()
|