13262a5698
新增功能： - 新增 Sora 账号管理和 OAuth 认证 - 新增 Sora 视频/图片生成 API 网关 - 新增 Sora 任务调度和缓存机制 - 新增 Sora 使用统计和计费支持 - 前端增加 Sora 平台配置界面 安全修复（代码审核）： - [SEC-001] 限制媒体下载响应体大小（图片 20MB、视频 200MB），防止 DoS 攻击 - [SEC-002] 限制 SDK API 响应大小（1MB），防止内存耗尽 - [SEC-003] 修复 SSRF 风险，添加 URL 验证并强制使用代理配置 BUG 修复（代码审核）： - [BUG-001] 修复 for 循环内 defer 累积导致的资源泄漏 - [BUG-002] 修复图片并发槽位获取失败时已持有锁未释放的永久泄漏 性能优化（代码审核）： - [PERF-001] 添加 Sentinel Token 缓存（3 分钟有效期），减少 PoW 计算开销 技术细节： - 使用 io.LimitReader 限制所有外部输入的大小 - 添加 urlvalidator 验证防止 SSRF 攻击 - 使用 sync.Map 实现线程安全的包级缓存 - 优化并发槽位管理，添加 releaseAll 模式防止泄漏 影响范围： - 后端：新增 Sora 相关数据模型、服务、网关和管理接口 - 前端：新增 Sora 平台配置、账号管理和监控界面 - 配置：新增 Sora 相关配置项和环境变量 Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
87 lines
3.3 KiB
Go
87 lines
3.3 KiB
Go
package routes
|
||
|
||
import (
|
||
"github.com/Wei-Shaw/sub2api/internal/config"
|
||
"github.com/Wei-Shaw/sub2api/internal/handler"
|
||
"github.com/Wei-Shaw/sub2api/internal/server/middleware"
|
||
"github.com/Wei-Shaw/sub2api/internal/service"
|
||
|
||
"github.com/gin-gonic/gin"
|
||
)
|
||
|
||
// RegisterGatewayRoutes 注册 API 网关路由（Claude/OpenAI/Gemini 兼容）
|
||
func RegisterGatewayRoutes(
|
||
r *gin.Engine,
|
||
h *handler.Handlers,
|
||
apiKeyAuth middleware.APIKeyAuthMiddleware,
|
||
apiKeyService *service.APIKeyService,
|
||
subscriptionService *service.SubscriptionService,
|
||
opsService *service.OpsService,
|
||
cfg *config.Config,
|
||
) {
|
||
bodyLimit := middleware.RequestBodyLimit(cfg.Gateway.MaxBodySize)
|
||
clientRequestID := middleware.ClientRequestID()
|
||
opsErrorLogger := handler.OpsErrorLoggerMiddleware(opsService)
|
||
|
||
// API网关（Claude API兼容）
|
||
gateway := r.Group("/v1")
|
||
gateway.Use(bodyLimit)
|
||
gateway.Use(clientRequestID)
|
||
gateway.Use(opsErrorLogger)
|
||
gateway.Use(gin.HandlerFunc(apiKeyAuth))
|
||
{
|
||
gateway.POST("/messages", h.Gateway.Messages)
|
||
gateway.POST("/messages/count_tokens", h.Gateway.CountTokens)
|
||
gateway.GET("/models", h.Gateway.Models)
|
||
gateway.POST("/chat/completions", h.SoraGateway.ChatCompletions)
|
||
gateway.GET("/usage", h.Gateway.Usage)
|
||
// OpenAI Responses API
|
||
gateway.POST("/responses", h.OpenAIGateway.Responses)
|
||
}
|
||
|
||
// Gemini 原生 API 兼容层（Gemini SDK/CLI 直连）
|
||
gemini := r.Group("/v1beta")
|
||
gemini.Use(bodyLimit)
|
||
gemini.Use(clientRequestID)
|
||
gemini.Use(opsErrorLogger)
|
||
gemini.Use(middleware.APIKeyAuthWithSubscriptionGoogle(apiKeyService, subscriptionService, cfg))
|
||
{
|
||
gemini.GET("/models", h.Gateway.GeminiV1BetaListModels)
|
||
gemini.GET("/models/:model", h.Gateway.GeminiV1BetaGetModel)
|
||
// Gin treats ":" as a param marker, but Gemini uses "{model}:{action}" in the same segment.
|
||
gemini.POST("/models/*modelAction", h.Gateway.GeminiV1BetaModels)
|
||
}
|
||
|
||
// OpenAI Responses API（不带v1前缀的别名）
|
||
r.POST("/responses", bodyLimit, clientRequestID, opsErrorLogger, gin.HandlerFunc(apiKeyAuth), h.OpenAIGateway.Responses)
|
||
|
||
// Antigravity 模型列表
|
||
r.GET("/antigravity/models", gin.HandlerFunc(apiKeyAuth), h.Gateway.AntigravityModels)
|
||
|
||
// Antigravity 专用路由（仅使用 antigravity 账户，不混合调度）
|
||
antigravityV1 := r.Group("/antigravity/v1")
|
||
antigravityV1.Use(bodyLimit)
|
||
antigravityV1.Use(clientRequestID)
|
||
antigravityV1.Use(opsErrorLogger)
|
||
antigravityV1.Use(middleware.ForcePlatform(service.PlatformAntigravity))
|
||
antigravityV1.Use(gin.HandlerFunc(apiKeyAuth))
|
||
{
|
||
antigravityV1.POST("/messages", h.Gateway.Messages)
|
||
antigravityV1.POST("/messages/count_tokens", h.Gateway.CountTokens)
|
||
antigravityV1.GET("/models", h.Gateway.AntigravityModels)
|
||
antigravityV1.GET("/usage", h.Gateway.Usage)
|
||
}
|
||
|
||
antigravityV1Beta := r.Group("/antigravity/v1beta")
|
||
antigravityV1Beta.Use(bodyLimit)
|
||
antigravityV1Beta.Use(clientRequestID)
|
||
antigravityV1Beta.Use(opsErrorLogger)
|
||
antigravityV1Beta.Use(middleware.ForcePlatform(service.PlatformAntigravity))
|
||
antigravityV1Beta.Use(middleware.APIKeyAuthWithSubscriptionGoogle(apiKeyService, subscriptionService, cfg))
|
||
{
|
||
antigravityV1Beta.GET("/models", h.Gateway.GeminiV1BetaListModels)
|
||
antigravityV1Beta.GET("/models/:model", h.Gateway.GeminiV1BetaGetModel)
|
||
antigravityV1Beta.POST("/models/*modelAction", h.Gateway.GeminiV1BetaModels)
|
||
}
|
||
}
|