新增功能: - 新增 Sora 账号管理和 OAuth 认证 - 新增 Sora 视频/图片生成 API 网关 - 新增 Sora 任务调度和缓存机制 - 新增 Sora 使用统计和计费支持 - 前端增加 Sora 平台配置界面 安全修复(代码审核): - [SEC-001] 限制媒体下载响应体大小(图片 20MB、视频 200MB),防止 DoS 攻击 - [SEC-002] 限制 SDK API 响应大小(1MB),防止内存耗尽 - [SEC-003] 修复 SSRF 风险,添加 URL 验证并强制使用代理配置 BUG 修复(代码审核): - [BUG-001] 修复 for 循环内 defer 累积导致的资源泄漏 - [BUG-002] 修复图片并发槽位获取失败时已持有锁未释放的永久泄漏 性能优化(代码审核): - [PERF-001] 添加 Sentinel Token 缓存(3 分钟有效期),减少 PoW 计算开销 技术细节: - 使用 io.LimitReader 限制所有外部输入的大小 - 添加 urlvalidator 验证防止 SSRF 攻击 - 使用 sync.Map 实现线程安全的包级缓存 - 优化并发槽位管理,添加 releaseAll 模式防止泄漏 影响范围: - 后端:新增 Sora 相关数据模型、服务、网关和管理接口 - 前端:新增 Sora 平台配置、账号管理和监控界面 - 配置:新增 Sora 相关配置项和环境变量 Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
292 lines
7.7 KiB
TypeScript
292 lines
7.7 KiB
TypeScript
/**
|
|
* Admin Settings API endpoints
|
|
* Handles system settings management for administrators
|
|
*/
|
|
|
|
import { apiClient } from '../client'
|
|
|
|
/**
|
|
* System settings interface
|
|
*/
|
|
export interface SystemSettings {
|
|
// Registration settings
|
|
registration_enabled: boolean
|
|
email_verify_enabled: boolean
|
|
promo_code_enabled: boolean
|
|
// Default settings
|
|
default_balance: number
|
|
default_concurrency: number
|
|
// OEM settings
|
|
site_name: string
|
|
site_logo: string
|
|
site_subtitle: string
|
|
api_base_url: string
|
|
contact_info: string
|
|
doc_url: string
|
|
home_content: string
|
|
hide_ccs_import_button: boolean
|
|
// SMTP settings
|
|
smtp_host: string
|
|
smtp_port: number
|
|
smtp_username: string
|
|
smtp_password_configured: boolean
|
|
smtp_from_email: string
|
|
smtp_from_name: string
|
|
smtp_use_tls: boolean
|
|
// Cloudflare Turnstile settings
|
|
turnstile_enabled: boolean
|
|
turnstile_site_key: string
|
|
turnstile_secret_key_configured: boolean
|
|
|
|
// LinuxDo Connect OAuth settings
|
|
linuxdo_connect_enabled: boolean
|
|
linuxdo_connect_client_id: string
|
|
linuxdo_connect_client_secret_configured: boolean
|
|
linuxdo_connect_redirect_url: string
|
|
|
|
// Model fallback configuration
|
|
enable_model_fallback: boolean
|
|
fallback_model_anthropic: string
|
|
fallback_model_openai: string
|
|
fallback_model_gemini: string
|
|
fallback_model_antigravity: string
|
|
|
|
// Identity patch configuration (Claude -> Gemini)
|
|
enable_identity_patch: boolean
|
|
identity_patch_prompt: string
|
|
|
|
// Sora configuration
|
|
sora_base_url: string
|
|
sora_timeout: number
|
|
sora_max_retries: number
|
|
sora_poll_interval: number
|
|
sora_call_logic_mode: string
|
|
sora_cache_enabled: boolean
|
|
sora_cache_base_dir: string
|
|
sora_cache_video_dir: string
|
|
sora_cache_max_bytes: number
|
|
sora_cache_allowed_hosts: string[]
|
|
sora_cache_user_dir_enabled: boolean
|
|
sora_watermark_free_enabled: boolean
|
|
sora_watermark_free_parse_method: string
|
|
sora_watermark_free_custom_parse_url: string
|
|
sora_watermark_free_custom_parse_token: string
|
|
sora_watermark_free_fallback_on_failure: boolean
|
|
sora_token_refresh_enabled: boolean
|
|
|
|
// Ops Monitoring (vNext)
|
|
ops_monitoring_enabled: boolean
|
|
ops_realtime_monitoring_enabled: boolean
|
|
ops_query_mode_default: 'auto' | 'raw' | 'preagg' | string
|
|
ops_metrics_interval_seconds: number
|
|
}
|
|
|
|
export interface UpdateSettingsRequest {
|
|
registration_enabled?: boolean
|
|
email_verify_enabled?: boolean
|
|
promo_code_enabled?: boolean
|
|
default_balance?: number
|
|
default_concurrency?: number
|
|
site_name?: string
|
|
site_logo?: string
|
|
site_subtitle?: string
|
|
api_base_url?: string
|
|
contact_info?: string
|
|
doc_url?: string
|
|
home_content?: string
|
|
hide_ccs_import_button?: boolean
|
|
smtp_host?: string
|
|
smtp_port?: number
|
|
smtp_username?: string
|
|
smtp_password?: string
|
|
smtp_from_email?: string
|
|
smtp_from_name?: string
|
|
smtp_use_tls?: boolean
|
|
turnstile_enabled?: boolean
|
|
turnstile_site_key?: string
|
|
turnstile_secret_key?: string
|
|
linuxdo_connect_enabled?: boolean
|
|
linuxdo_connect_client_id?: string
|
|
linuxdo_connect_client_secret?: string
|
|
linuxdo_connect_redirect_url?: string
|
|
enable_model_fallback?: boolean
|
|
fallback_model_anthropic?: string
|
|
fallback_model_openai?: string
|
|
fallback_model_gemini?: string
|
|
fallback_model_antigravity?: string
|
|
enable_identity_patch?: boolean
|
|
identity_patch_prompt?: string
|
|
sora_base_url?: string
|
|
sora_timeout?: number
|
|
sora_max_retries?: number
|
|
sora_poll_interval?: number
|
|
sora_call_logic_mode?: string
|
|
sora_cache_enabled?: boolean
|
|
sora_cache_base_dir?: string
|
|
sora_cache_video_dir?: string
|
|
sora_cache_max_bytes?: number
|
|
sora_cache_allowed_hosts?: string[]
|
|
sora_cache_user_dir_enabled?: boolean
|
|
sora_watermark_free_enabled?: boolean
|
|
sora_watermark_free_parse_method?: string
|
|
sora_watermark_free_custom_parse_url?: string
|
|
sora_watermark_free_custom_parse_token?: string
|
|
sora_watermark_free_fallback_on_failure?: boolean
|
|
sora_token_refresh_enabled?: boolean
|
|
ops_monitoring_enabled?: boolean
|
|
ops_realtime_monitoring_enabled?: boolean
|
|
ops_query_mode_default?: 'auto' | 'raw' | 'preagg' | string
|
|
ops_metrics_interval_seconds?: number
|
|
}
|
|
|
|
/**
|
|
* Get all system settings
|
|
* @returns System settings
|
|
*/
|
|
export async function getSettings(): Promise<SystemSettings> {
|
|
const { data } = await apiClient.get<SystemSettings>('/admin/settings')
|
|
return data
|
|
}
|
|
|
|
/**
|
|
* Update system settings
|
|
* @param settings - Partial settings to update
|
|
* @returns Updated settings
|
|
*/
|
|
export async function updateSettings(settings: UpdateSettingsRequest): Promise<SystemSettings> {
|
|
const { data } = await apiClient.put<SystemSettings>('/admin/settings', settings)
|
|
return data
|
|
}
|
|
|
|
/**
|
|
* Test SMTP connection request
|
|
*/
|
|
export interface TestSmtpRequest {
|
|
smtp_host: string
|
|
smtp_port: number
|
|
smtp_username: string
|
|
smtp_password: string
|
|
smtp_use_tls: boolean
|
|
}
|
|
|
|
/**
|
|
* Test SMTP connection with provided config
|
|
* @param config - SMTP configuration to test
|
|
* @returns Test result message
|
|
*/
|
|
export async function testSmtpConnection(config: TestSmtpRequest): Promise<{ message: string }> {
|
|
const { data } = await apiClient.post<{ message: string }>('/admin/settings/test-smtp', config)
|
|
return data
|
|
}
|
|
|
|
/**
|
|
* Send test email request
|
|
*/
|
|
export interface SendTestEmailRequest {
|
|
email: string
|
|
smtp_host: string
|
|
smtp_port: number
|
|
smtp_username: string
|
|
smtp_password: string
|
|
smtp_from_email: string
|
|
smtp_from_name: string
|
|
smtp_use_tls: boolean
|
|
}
|
|
|
|
/**
|
|
* Send test email with provided SMTP config
|
|
* @param request - Email address and SMTP config
|
|
* @returns Test result message
|
|
*/
|
|
export async function sendTestEmail(request: SendTestEmailRequest): Promise<{ message: string }> {
|
|
const { data } = await apiClient.post<{ message: string }>(
|
|
'/admin/settings/send-test-email',
|
|
request
|
|
)
|
|
return data
|
|
}
|
|
|
|
/**
|
|
* Admin API Key status response
|
|
*/
|
|
export interface AdminApiKeyStatus {
|
|
exists: boolean
|
|
masked_key: string
|
|
}
|
|
|
|
/**
|
|
* Get admin API key status
|
|
* @returns Status indicating if key exists and masked version
|
|
*/
|
|
export async function getAdminApiKey(): Promise<AdminApiKeyStatus> {
|
|
const { data } = await apiClient.get<AdminApiKeyStatus>('/admin/settings/admin-api-key')
|
|
return data
|
|
}
|
|
|
|
/**
|
|
* Regenerate admin API key
|
|
* @returns The new full API key (only shown once)
|
|
*/
|
|
export async function regenerateAdminApiKey(): Promise<{ key: string }> {
|
|
const { data } = await apiClient.post<{ key: string }>('/admin/settings/admin-api-key/regenerate')
|
|
return data
|
|
}
|
|
|
|
/**
|
|
* Delete admin API key
|
|
* @returns Success message
|
|
*/
|
|
export async function deleteAdminApiKey(): Promise<{ message: string }> {
|
|
const { data } = await apiClient.delete<{ message: string }>('/admin/settings/admin-api-key')
|
|
return data
|
|
}
|
|
|
|
/**
|
|
* Stream timeout settings interface
|
|
*/
|
|
export interface StreamTimeoutSettings {
|
|
enabled: boolean
|
|
action: 'temp_unsched' | 'error' | 'none'
|
|
temp_unsched_minutes: number
|
|
threshold_count: number
|
|
threshold_window_minutes: number
|
|
}
|
|
|
|
/**
|
|
* Get stream timeout settings
|
|
* @returns Stream timeout settings
|
|
*/
|
|
export async function getStreamTimeoutSettings(): Promise<StreamTimeoutSettings> {
|
|
const { data } = await apiClient.get<StreamTimeoutSettings>('/admin/settings/stream-timeout')
|
|
return data
|
|
}
|
|
|
|
/**
|
|
* Update stream timeout settings
|
|
* @param settings - Stream timeout settings to update
|
|
* @returns Updated settings
|
|
*/
|
|
export async function updateStreamTimeoutSettings(
|
|
settings: StreamTimeoutSettings
|
|
): Promise<StreamTimeoutSettings> {
|
|
const { data } = await apiClient.put<StreamTimeoutSettings>(
|
|
'/admin/settings/stream-timeout',
|
|
settings
|
|
)
|
|
return data
|
|
}
|
|
|
|
export const settingsAPI = {
|
|
getSettings,
|
|
updateSettings,
|
|
testSmtpConnection,
|
|
sendTestEmail,
|
|
getAdminApiKey,
|
|
regenerateAdminApiKey,
|
|
deleteAdminApiKey,
|
|
getStreamTimeoutSettings,
|
|
updateStreamTimeoutSettings
|
|
}
|
|
|
|
export default settingsAPI
|