新增功能: - 支持 Google Authenticator 等应用进行 TOTP 二次验证 - 用户可在个人设置中启用/禁用 2FA - 登录时支持 TOTP 验证流程 - 管理后台可全局开关 TOTP 功能 安全增强: - TOTP 密钥使用 AES-256-GCM 加密存储 - 添加 TOTP_ENCRYPTION_KEY 配置项,必须手动配置才能启用功能 - 防止服务重启导致加密密钥变更使用户无法登录 - 验证失败次数限制,防止暴力破解 配置说明: - Docker 部署:在 .env 中设置 TOTP_ENCRYPTION_KEY - 非 Docker 部署:在 config.yaml 中设置 totp.encryption_key - 生成密钥命令:openssl rand -hex 32
48 lines
1.4 KiB
Go
48 lines
1.4 KiB
Go
package handler
|
|
|
|
import (
|
|
"github.com/Wei-Shaw/sub2api/internal/handler/admin"
|
|
)
|
|
|
|
// AdminHandlers contains all admin-related HTTP handlers
|
|
type AdminHandlers struct {
|
|
Dashboard *admin.DashboardHandler
|
|
User *admin.UserHandler
|
|
Group *admin.GroupHandler
|
|
Account *admin.AccountHandler
|
|
OAuth *admin.OAuthHandler
|
|
OpenAIOAuth *admin.OpenAIOAuthHandler
|
|
GeminiOAuth *admin.GeminiOAuthHandler
|
|
AntigravityOAuth *admin.AntigravityOAuthHandler
|
|
Proxy *admin.ProxyHandler
|
|
Redeem *admin.RedeemHandler
|
|
Promo *admin.PromoHandler
|
|
Setting *admin.SettingHandler
|
|
Ops *admin.OpsHandler
|
|
System *admin.SystemHandler
|
|
Subscription *admin.SubscriptionHandler
|
|
Usage *admin.UsageHandler
|
|
UserAttribute *admin.UserAttributeHandler
|
|
}
|
|
|
|
// Handlers contains all HTTP handlers
|
|
type Handlers struct {
|
|
Auth *AuthHandler
|
|
User *UserHandler
|
|
APIKey *APIKeyHandler
|
|
Usage *UsageHandler
|
|
Redeem *RedeemHandler
|
|
Subscription *SubscriptionHandler
|
|
Admin *AdminHandlers
|
|
Gateway *GatewayHandler
|
|
OpenAIGateway *OpenAIGatewayHandler
|
|
Setting *SettingHandler
|
|
Totp *TotpHandler
|
|
}
|
|
|
|
// BuildInfo contains build-time information
|
|
type BuildInfo struct {
|
|
Version string
|
|
BuildType string // "source" for manual builds, "release" for CI builds
|
|
}
|