13262a5698
新增功能： - 新增 Sora 账号管理和 OAuth 认证 - 新增 Sora 视频/图片生成 API 网关 - 新增 Sora 任务调度和缓存机制 - 新增 Sora 使用统计和计费支持 - 前端增加 Sora 平台配置界面 安全修复（代码审核）： - [SEC-001] 限制媒体下载响应体大小（图片 20MB、视频 200MB），防止 DoS 攻击 - [SEC-002] 限制 SDK API 响应大小（1MB），防止内存耗尽 - [SEC-003] 修复 SSRF 风险，添加 URL 验证并强制使用代理配置 BUG 修复（代码审核）： - [BUG-001] 修复 for 循环内 defer 累积导致的资源泄漏 - [BUG-002] 修复图片并发槽位获取失败时已持有锁未释放的永久泄漏 性能优化（代码审核）： - [PERF-001] 添加 Sentinel Token 缓存（3 分钟有效期），减少 PoW 计算开销 技术细节： - 使用 io.LimitReader 限制所有外部输入的大小 - 添加 urlvalidator 验证防止 SSRF 攻击 - 使用 sync.Map 实现线程安全的包级缓存 - 优化并发槽位管理，添加 releaseAll 模式防止泄漏 影响范围： - 后端：新增 Sora 相关数据模型、服务、网关和管理接口 - 前端：新增 Sora 平台配置、账号管理和监控界面 - 配置：新增 Sora 相关配置项和环境变量 Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
285 lines
8.9 KiB
Go
285 lines
8.9 KiB
Go
package admin
|
||
|
||
import (
|
||
"strconv"
|
||
"strings"
|
||
|
||
"github.com/Wei-Shaw/sub2api/internal/handler/dto"
|
||
"github.com/Wei-Shaw/sub2api/internal/pkg/response"
|
||
"github.com/Wei-Shaw/sub2api/internal/service"
|
||
|
||
"github.com/gin-gonic/gin"
|
||
)
|
||
|
||
// GroupHandler handles admin group management
|
||
type GroupHandler struct {
|
||
adminService service.AdminService
|
||
}
|
||
|
||
// NewGroupHandler creates a new admin group handler
|
||
func NewGroupHandler(adminService service.AdminService) *GroupHandler {
|
||
return &GroupHandler{
|
||
adminService: adminService,
|
||
}
|
||
}
|
||
|
||
// CreateGroupRequest represents create group request
|
||
type CreateGroupRequest struct {
|
||
Name string `json:"name" binding:"required"`
|
||
Description string `json:"description"`
|
||
Platform string `json:"platform" binding:"omitempty,oneof=anthropic openai gemini antigravity sora"`
|
||
RateMultiplier float64 `json:"rate_multiplier"`
|
||
IsExclusive bool `json:"is_exclusive"`
|
||
SubscriptionType string `json:"subscription_type" binding:"omitempty,oneof=standard subscription"`
|
||
DailyLimitUSD *float64 `json:"daily_limit_usd"`
|
||
WeeklyLimitUSD *float64 `json:"weekly_limit_usd"`
|
||
MonthlyLimitUSD *float64 `json:"monthly_limit_usd"`
|
||
// 图片生成计费配置（antigravity 和 gemini 平台使用，负数表示清除配置）
|
||
ImagePrice1K *float64 `json:"image_price_1k"`
|
||
ImagePrice2K *float64 `json:"image_price_2k"`
|
||
ImagePrice4K *float64 `json:"image_price_4k"`
|
||
ClaudeCodeOnly bool `json:"claude_code_only"`
|
||
FallbackGroupID *int64 `json:"fallback_group_id"`
|
||
// 模型路由配置（仅 anthropic 平台使用）
|
||
ModelRouting map[string][]int64 `json:"model_routing"`
|
||
ModelRoutingEnabled bool `json:"model_routing_enabled"`
|
||
}
|
||
|
||
// UpdateGroupRequest represents update group request
|
||
type UpdateGroupRequest struct {
|
||
Name string `json:"name"`
|
||
Description string `json:"description"`
|
||
Platform string `json:"platform" binding:"omitempty,oneof=anthropic openai gemini antigravity sora"`
|
||
RateMultiplier *float64 `json:"rate_multiplier"`
|
||
IsExclusive *bool `json:"is_exclusive"`
|
||
Status string `json:"status" binding:"omitempty,oneof=active inactive"`
|
||
SubscriptionType string `json:"subscription_type" binding:"omitempty,oneof=standard subscription"`
|
||
DailyLimitUSD *float64 `json:"daily_limit_usd"`
|
||
WeeklyLimitUSD *float64 `json:"weekly_limit_usd"`
|
||
MonthlyLimitUSD *float64 `json:"monthly_limit_usd"`
|
||
// 图片生成计费配置（antigravity 和 gemini 平台使用，负数表示清除配置）
|
||
ImagePrice1K *float64 `json:"image_price_1k"`
|
||
ImagePrice2K *float64 `json:"image_price_2k"`
|
||
ImagePrice4K *float64 `json:"image_price_4k"`
|
||
ClaudeCodeOnly *bool `json:"claude_code_only"`
|
||
FallbackGroupID *int64 `json:"fallback_group_id"`
|
||
// 模型路由配置（仅 anthropic 平台使用）
|
||
ModelRouting map[string][]int64 `json:"model_routing"`
|
||
ModelRoutingEnabled *bool `json:"model_routing_enabled"`
|
||
}
|
||
|
||
// List handles listing all groups with pagination
|
||
// GET /api/v1/admin/groups
|
||
func (h *GroupHandler) List(c *gin.Context) {
|
||
page, pageSize := response.ParsePagination(c)
|
||
platform := c.Query("platform")
|
||
status := c.Query("status")
|
||
search := c.Query("search")
|
||
// 标准化和验证 search 参数
|
||
search = strings.TrimSpace(search)
|
||
if len(search) > 100 {
|
||
search = search[:100]
|
||
}
|
||
isExclusiveStr := c.Query("is_exclusive")
|
||
|
||
var isExclusive *bool
|
||
if isExclusiveStr != "" {
|
||
val := isExclusiveStr == "true"
|
||
isExclusive = &val
|
||
}
|
||
|
||
groups, total, err := h.adminService.ListGroups(c.Request.Context(), page, pageSize, platform, status, search, isExclusive)
|
||
if err != nil {
|
||
response.ErrorFrom(c, err)
|
||
return
|
||
}
|
||
|
||
outGroups := make([]dto.AdminGroup, 0, len(groups))
|
||
for i := range groups {
|
||
outGroups = append(outGroups, *dto.GroupFromServiceAdmin(&groups[i]))
|
||
}
|
||
response.Paginated(c, outGroups, total, page, pageSize)
|
||
}
|
||
|
||
// GetAll handles getting all active groups without pagination
|
||
// GET /api/v1/admin/groups/all
|
||
func (h *GroupHandler) GetAll(c *gin.Context) {
|
||
platform := c.Query("platform")
|
||
|
||
var groups []service.Group
|
||
var err error
|
||
|
||
if platform != "" {
|
||
groups, err = h.adminService.GetAllGroupsByPlatform(c.Request.Context(), platform)
|
||
} else {
|
||
groups, err = h.adminService.GetAllGroups(c.Request.Context())
|
||
}
|
||
|
||
if err != nil {
|
||
response.ErrorFrom(c, err)
|
||
return
|
||
}
|
||
|
||
outGroups := make([]dto.AdminGroup, 0, len(groups))
|
||
for i := range groups {
|
||
outGroups = append(outGroups, *dto.GroupFromServiceAdmin(&groups[i]))
|
||
}
|
||
response.Success(c, outGroups)
|
||
}
|
||
|
||
// GetByID handles getting a group by ID
|
||
// GET /api/v1/admin/groups/:id
|
||
func (h *GroupHandler) GetByID(c *gin.Context) {
|
||
groupID, err := strconv.ParseInt(c.Param("id"), 10, 64)
|
||
if err != nil {
|
||
response.BadRequest(c, "Invalid group ID")
|
||
return
|
||
}
|
||
|
||
group, err := h.adminService.GetGroup(c.Request.Context(), groupID)
|
||
if err != nil {
|
||
response.ErrorFrom(c, err)
|
||
return
|
||
}
|
||
|
||
response.Success(c, dto.GroupFromServiceAdmin(group))
|
||
}
|
||
|
||
// Create handles creating a new group
|
||
// POST /api/v1/admin/groups
|
||
func (h *GroupHandler) Create(c *gin.Context) {
|
||
var req CreateGroupRequest
|
||
if err := c.ShouldBindJSON(&req); err != nil {
|
||
response.BadRequest(c, "Invalid request: "+err.Error())
|
||
return
|
||
}
|
||
|
||
group, err := h.adminService.CreateGroup(c.Request.Context(), &service.CreateGroupInput{
|
||
Name: req.Name,
|
||
Description: req.Description,
|
||
Platform: req.Platform,
|
||
RateMultiplier: req.RateMultiplier,
|
||
IsExclusive: req.IsExclusive,
|
||
SubscriptionType: req.SubscriptionType,
|
||
DailyLimitUSD: req.DailyLimitUSD,
|
||
WeeklyLimitUSD: req.WeeklyLimitUSD,
|
||
MonthlyLimitUSD: req.MonthlyLimitUSD,
|
||
ImagePrice1K: req.ImagePrice1K,
|
||
ImagePrice2K: req.ImagePrice2K,
|
||
ImagePrice4K: req.ImagePrice4K,
|
||
ClaudeCodeOnly: req.ClaudeCodeOnly,
|
||
FallbackGroupID: req.FallbackGroupID,
|
||
ModelRouting: req.ModelRouting,
|
||
ModelRoutingEnabled: req.ModelRoutingEnabled,
|
||
})
|
||
if err != nil {
|
||
response.ErrorFrom(c, err)
|
||
return
|
||
}
|
||
|
||
response.Success(c, dto.GroupFromServiceAdmin(group))
|
||
}
|
||
|
||
// Update handles updating a group
|
||
// PUT /api/v1/admin/groups/:id
|
||
func (h *GroupHandler) Update(c *gin.Context) {
|
||
groupID, err := strconv.ParseInt(c.Param("id"), 10, 64)
|
||
if err != nil {
|
||
response.BadRequest(c, "Invalid group ID")
|
||
return
|
||
}
|
||
|
||
var req UpdateGroupRequest
|
||
if err := c.ShouldBindJSON(&req); err != nil {
|
||
response.BadRequest(c, "Invalid request: "+err.Error())
|
||
return
|
||
}
|
||
|
||
group, err := h.adminService.UpdateGroup(c.Request.Context(), groupID, &service.UpdateGroupInput{
|
||
Name: req.Name,
|
||
Description: req.Description,
|
||
Platform: req.Platform,
|
||
RateMultiplier: req.RateMultiplier,
|
||
IsExclusive: req.IsExclusive,
|
||
Status: req.Status,
|
||
SubscriptionType: req.SubscriptionType,
|
||
DailyLimitUSD: req.DailyLimitUSD,
|
||
WeeklyLimitUSD: req.WeeklyLimitUSD,
|
||
MonthlyLimitUSD: req.MonthlyLimitUSD,
|
||
ImagePrice1K: req.ImagePrice1K,
|
||
ImagePrice2K: req.ImagePrice2K,
|
||
ImagePrice4K: req.ImagePrice4K,
|
||
ClaudeCodeOnly: req.ClaudeCodeOnly,
|
||
FallbackGroupID: req.FallbackGroupID,
|
||
ModelRouting: req.ModelRouting,
|
||
ModelRoutingEnabled: req.ModelRoutingEnabled,
|
||
})
|
||
if err != nil {
|
||
response.ErrorFrom(c, err)
|
||
return
|
||
}
|
||
|
||
response.Success(c, dto.GroupFromServiceAdmin(group))
|
||
}
|
||
|
||
// Delete handles deleting a group
|
||
// DELETE /api/v1/admin/groups/:id
|
||
func (h *GroupHandler) Delete(c *gin.Context) {
|
||
groupID, err := strconv.ParseInt(c.Param("id"), 10, 64)
|
||
if err != nil {
|
||
response.BadRequest(c, "Invalid group ID")
|
||
return
|
||
}
|
||
|
||
err = h.adminService.DeleteGroup(c.Request.Context(), groupID)
|
||
if err != nil {
|
||
response.ErrorFrom(c, err)
|
||
return
|
||
}
|
||
|
||
response.Success(c, gin.H{"message": "Group deleted successfully"})
|
||
}
|
||
|
||
// GetStats handles getting group statistics
|
||
// GET /api/v1/admin/groups/:id/stats
|
||
func (h *GroupHandler) GetStats(c *gin.Context) {
|
||
groupID, err := strconv.ParseInt(c.Param("id"), 10, 64)
|
||
if err != nil {
|
||
response.BadRequest(c, "Invalid group ID")
|
||
return
|
||
}
|
||
|
||
// Return mock data for now
|
||
response.Success(c, gin.H{
|
||
"total_api_keys": 0,
|
||
"active_api_keys": 0,
|
||
"total_requests": 0,
|
||
"total_cost": 0.0,
|
||
})
|
||
_ = groupID // TODO: implement actual stats
|
||
}
|
||
|
||
// GetGroupAPIKeys handles getting API keys in a group
|
||
// GET /api/v1/admin/groups/:id/api-keys
|
||
func (h *GroupHandler) GetGroupAPIKeys(c *gin.Context) {
|
||
groupID, err := strconv.ParseInt(c.Param("id"), 10, 64)
|
||
if err != nil {
|
||
response.BadRequest(c, "Invalid group ID")
|
||
return
|
||
}
|
||
|
||
page, pageSize := response.ParsePagination(c)
|
||
|
||
keys, total, err := h.adminService.GetGroupAPIKeys(c.Request.Context(), groupID, page, pageSize)
|
||
if err != nil {
|
||
response.ErrorFrom(c, err)
|
||
return
|
||
}
|
||
|
||
outKeys := make([]dto.APIKey, 0, len(keys))
|
||
for i := range keys {
|
||
outKeys = append(outKeys, *dto.APIKeyFromService(&keys[i]))
|
||
}
|
||
response.Paginated(c, outKeys, total, page, pageSize)
|
||
}
|