feat(sora): 新增 Sora 平台支持并修复高危安全和性能问题
新增功能： - 新增 Sora 账号管理和 OAuth 认证 - 新增 Sora 视频/图片生成 API 网关 - 新增 Sora 任务调度和缓存机制 - 新增 Sora 使用统计和计费支持 - 前端增加 Sora 平台配置界面 安全修复（代码审核）： - [SEC-001] 限制媒体下载响应体大小（图片 20MB、视频 200MB），防止 DoS 攻击 - [SEC-002] 限制 SDK API 响应大小（1MB），防止内存耗尽 - [SEC-003] 修复 SSRF 风险，添加 URL 验证并强制使用代理配置 BUG 修复（代码审核）： - [BUG-001] 修复 for 循环内 defer 累积导致的资源泄漏 - [BUG-002] 修复图片并发槽位获取失败时已持有锁未释放的永久泄漏 性能优化（代码审核）： - [PERF-001] 添加 Sentinel Token 缓存（3 分钟有效期），减少 PoW 计算开销 技术细节： - 使用 io.LimitReader 限制所有外部输入的大小 - 添加 urlvalidator 验证防止 SSRF 攻击 - 使用 sync.Map 实现线程安全的包级缓存 - 优化并发槽位管理，添加 releaseAll 模式防止泄漏 影响范围： - 后端：新增 Sora 相关数据模型、服务、网关和管理接口 - 前端：新增 Sora 平台配置、账号管理和监控界面 - 配置：新增 Sora 相关配置项和环境变量 Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
This commit is contained in:
yangjianbo
@@ -287,6 +287,72 @@ func ProxyWithAccountCountFromService(p *service.ProxyWithAccountCount) *ProxyWi
|
||||
}
|
||||
}
|
||||
|
||||
func SoraUsageStatFromService(stat *service.SoraUsageStat) *SoraUsageStat {
|
||||
if stat == nil {
|
||||
return nil
|
||||
}
|
||||
return &SoraUsageStat{
|
||||
AccountID: stat.AccountID,
|
||||
ImageCount: stat.ImageCount,
|
||||
VideoCount: stat.VideoCount,
|
||||
ErrorCount: stat.ErrorCount,
|
||||
LastErrorAt: timeToUnixSeconds(stat.LastErrorAt),
|
||||
TodayImageCount: stat.TodayImageCount,
|
||||
TodayVideoCount: stat.TodayVideoCount,
|
||||
TodayErrorCount: stat.TodayErrorCount,
|
||||
TodayDate: timeToUnixSeconds(stat.TodayDate),
|
||||
ConsecutiveErrorCount: stat.ConsecutiveErrorCount,
|
||||
CreatedAt: stat.CreatedAt,
|
||||
UpdatedAt: stat.UpdatedAt,
|
||||
}
|
||||
}
|
||||
|
||||
func SoraAccountFromService(account *service.Account, soraAcc *service.SoraAccount, usage *service.SoraUsageStat) *SoraAccount {
|
||||
if account == nil {
|
||||
return nil
|
||||
}
|
||||
out := &SoraAccount{
|
||||
AccountID: account.ID,
|
||||
AccountName: account.Name,
|
||||
AccountStatus: account.Status,
|
||||
AccountType: account.Type,
|
||||
AccountConcurrency: account.Concurrency,
|
||||
ProxyID: account.ProxyID,
|
||||
Usage: SoraUsageStatFromService(usage),
|
||||
CreatedAt: account.CreatedAt,
|
||||
UpdatedAt: account.UpdatedAt,
|
||||
}
|
||||
if soraAcc == nil {
|
||||
return out
|
||||
}
|
||||
out.AccessToken = soraAcc.AccessToken
|
||||
out.SessionToken = soraAcc.SessionToken
|
||||
out.RefreshToken = soraAcc.RefreshToken
|
||||
out.ClientID = soraAcc.ClientID
|
||||
out.Email = soraAcc.Email
|
||||
out.Username = soraAcc.Username
|
||||
out.Remark = soraAcc.Remark
|
||||
out.UseCount = soraAcc.UseCount
|
||||
out.PlanType = soraAcc.PlanType
|
||||
out.PlanTitle = soraAcc.PlanTitle
|
||||
out.SubscriptionEnd = timeToUnixSeconds(soraAcc.SubscriptionEnd)
|
||||
out.SoraSupported = soraAcc.SoraSupported
|
||||
out.SoraInviteCode = soraAcc.SoraInviteCode
|
||||
out.SoraRedeemedCount = soraAcc.SoraRedeemedCount
|
||||
out.SoraRemainingCount = soraAcc.SoraRemainingCount
|
||||
out.SoraTotalCount = soraAcc.SoraTotalCount
|
||||
out.SoraCooldownUntil = timeToUnixSeconds(soraAcc.SoraCooldownUntil)
|
||||
out.CooledUntil = timeToUnixSeconds(soraAcc.CooledUntil)
|
||||
out.ImageEnabled = soraAcc.ImageEnabled
|
||||
out.VideoEnabled = soraAcc.VideoEnabled
|
||||
out.ImageConcurrency = soraAcc.ImageConcurrency
|
||||
out.VideoConcurrency = soraAcc.VideoConcurrency
|
||||
out.IsExpired = soraAcc.IsExpired
|
||||
out.CreatedAt = soraAcc.CreatedAt
|
||||
out.UpdatedAt = soraAcc.UpdatedAt
|
||||
return out
|
||||
}
|
||||
|
||||
func ProxyAccountSummaryFromService(a *service.ProxyAccountSummary) *ProxyAccountSummary {
|
||||
if a == nil {
|
||||
return nil
|
||||
|
||||
@@ -46,6 +46,25 @@ type SystemSettings struct {
|
||||
EnableIdentityPatch bool `json:"enable_identity_patch"`
|
||||
IdentityPatchPrompt string `json:"identity_patch_prompt"`
|
||||
|
||||
// Sora configuration
|
||||
SoraBaseURL string `json:"sora_base_url"`
|
||||
SoraTimeout int `json:"sora_timeout"`
|
||||
SoraMaxRetries int `json:"sora_max_retries"`
|
||||
SoraPollInterval float64 `json:"sora_poll_interval"`
|
||||
SoraCallLogicMode string `json:"sora_call_logic_mode"`
|
||||
SoraCacheEnabled bool `json:"sora_cache_enabled"`
|
||||
SoraCacheBaseDir string `json:"sora_cache_base_dir"`
|
||||
SoraCacheVideoDir string `json:"sora_cache_video_dir"`
|
||||
SoraCacheMaxBytes int64 `json:"sora_cache_max_bytes"`
|
||||
SoraCacheAllowedHosts []string `json:"sora_cache_allowed_hosts"`
|
||||
SoraCacheUserDirEnabled bool `json:"sora_cache_user_dir_enabled"`
|
||||
SoraWatermarkFreeEnabled bool `json:"sora_watermark_free_enabled"`
|
||||
SoraWatermarkFreeParseMethod string `json:"sora_watermark_free_parse_method"`
|
||||
SoraWatermarkFreeCustomParseURL string `json:"sora_watermark_free_custom_parse_url"`
|
||||
SoraWatermarkFreeCustomParseToken string `json:"sora_watermark_free_custom_parse_token"`
|
||||
SoraWatermarkFreeFallbackOnFailure bool `json:"sora_watermark_free_fallback_on_failure"`
|
||||
SoraTokenRefreshEnabled bool `json:"sora_token_refresh_enabled"`
|
||||
|
||||
// Ops monitoring (vNext)
|
||||
OpsMonitoringEnabled bool `json:"ops_monitoring_enabled"`
|
||||
OpsRealtimeMonitoringEnabled bool `json:"ops_realtime_monitoring_enabled"`
|
||||
|
||||
@@ -141,6 +141,56 @@ type Account struct {
|
||||
Groups []*Group `json:"groups,omitempty"`
|
||||
}
|
||||
|
||||
type SoraUsageStat struct {
|
||||
AccountID int64 `json:"account_id"`
|
||||
ImageCount int `json:"image_count"`
|
||||
VideoCount int `json:"video_count"`
|
||||
ErrorCount int `json:"error_count"`
|
||||
LastErrorAt *int64 `json:"last_error_at"`
|
||||
TodayImageCount int `json:"today_image_count"`
|
||||
TodayVideoCount int `json:"today_video_count"`
|
||||
TodayErrorCount int `json:"today_error_count"`
|
||||
TodayDate *int64 `json:"today_date"`
|
||||
ConsecutiveErrorCount int `json:"consecutive_error_count"`
|
||||
CreatedAt time.Time `json:"created_at"`
|
||||
UpdatedAt time.Time `json:"updated_at"`
|
||||
}
|
||||
|
||||
type SoraAccount struct {
|
||||
AccountID int64 `json:"account_id"`
|
||||
AccountName string `json:"account_name"`
|
||||
AccountStatus string `json:"account_status"`
|
||||
AccountType string `json:"account_type"`
|
||||
AccountConcurrency int `json:"account_concurrency"`
|
||||
ProxyID *int64 `json:"proxy_id"`
|
||||
AccessToken string `json:"access_token"`
|
||||
SessionToken string `json:"session_token"`
|
||||
RefreshToken string `json:"refresh_token"`
|
||||
ClientID string `json:"client_id"`
|
||||
Email string `json:"email"`
|
||||
Username string `json:"username"`
|
||||
Remark string `json:"remark"`
|
||||
UseCount int `json:"use_count"`
|
||||
PlanType string `json:"plan_type"`
|
||||
PlanTitle string `json:"plan_title"`
|
||||
SubscriptionEnd *int64 `json:"subscription_end"`
|
||||
SoraSupported bool `json:"sora_supported"`
|
||||
SoraInviteCode string `json:"sora_invite_code"`
|
||||
SoraRedeemedCount int `json:"sora_redeemed_count"`
|
||||
SoraRemainingCount int `json:"sora_remaining_count"`
|
||||
SoraTotalCount int `json:"sora_total_count"`
|
||||
SoraCooldownUntil *int64 `json:"sora_cooldown_until"`
|
||||
CooledUntil *int64 `json:"cooled_until"`
|
||||
ImageEnabled bool `json:"image_enabled"`
|
||||
VideoEnabled bool `json:"video_enabled"`
|
||||
ImageConcurrency int `json:"image_concurrency"`
|
||||
VideoConcurrency int `json:"video_concurrency"`
|
||||
IsExpired bool `json:"is_expired"`
|
||||
Usage *SoraUsageStat `json:"usage,omitempty"`
|
||||
CreatedAt time.Time `json:"created_at"`
|
||||
UpdatedAt time.Time `json:"updated_at"`
|
||||
}
|
||||
|
||||
type AccountGroup struct {
|
||||
AccountID int64 `json:"account_id"`
|
||||
GroupID int64 `json:"group_id"`
|
||||
|
||||
Reference in New Issue
Block a user