import json import os from datetime import datetime, timezone from fastapi import APIRouter, Depends, HTTPException, Request from app.core.config import ENV_FILE_PATH from app.core.security import persist_env_value, require_permission, set_admin_token, token_digest from app.repositories import app_channel_repository, license_repository from app.schemas.admin_config import ChangeAdminTokenRequest, ClientConfigGenerateRequest from app.services.admin_config_service import ( PUBLISH_MAX_FIELDS, PUBLISH_MAX_FILES, PUBLISH_MAX_REQUEST_BYTES, RELEASE_MAIN_EXECUTABLE, TARGET_ARCH, TARGET_PLATFORM, default_client_config_values, crash_report_test_values, crash_report_test_text, normalize_executable_name, platform_executable_path, public_api_base_url, ) from app.services.common_service import validate_channel_code router = APIRouter(tags=["admin-config"]) def client_config_license_warning(license_key: str, app_id: str, channel: str) -> str: if not license_key: return "" license_row = license_repository.get_license_by_hash_with_usage(token_digest(license_key)) if not license_row: return "当前 License 不存在或已删除，生成的客户端配置未写入 License，请创建或申请新的 License。" if license_row["app_id"] != app_id or license_row["channel_code"] != channel: return "当前 License 不属于所选应用或渠道，生成的客户端配置未写入 License，请选择匹配的 License。" if license_row["status"] != "active": return "当前 License 已禁用，生成的客户端配置未写入 License，请启用该 License 或创建新的 License。" try: expiry = datetime.fromisoformat(str(license_row["valid_until"]).replace("Z", "+00:00")) except ValueError: expiry = datetime.now(timezone.utc) if expiry.tzinfo is None: expiry = expiry.replace(tzinfo=timezone.utc) if expiry <= datetime.now(timezone.utc): return "当前 License 已过期，生成的客户端配置未写入 License，请创建或申请新的 License。" used_devices = int(license_row["used_devices"] or 0) max_devices = int(license_row["max_devices"] or 0) if used_devices >= max_devices: return f"当前 License 已绑定 {used_devices}/{max_devices} 台设备，已达到上限。生成的客户端配置未写入 License，请创建或申请新的 License。" return "" def normalize_install_root(value: str, fallback: str = "..") -> str: normalized = str(value or fallback).strip().replace("\\", "/") if normalized in ("", "."): return "." if normalized == "..": return ".." raise HTTPException(status_code=400, detail="install_root 目前仅支持 . 或 ..") @router.post("/admin/token/change") def admin_change_token(body: ChangeAdminTokenRequest, auth=Depends(require_permission("admin:manage"))): new_token = body.new_token.strip() if len(new_token) < 8: raise HTTPException(status_code=400, detail="新兼容令牌至少需要 8 个字符") if len(new_token) > 128: raise HTTPException(status_code=400, detail="新兼容令牌不能超过 128 个字符") try: persist_env_value(ENV_FILE_PATH, "ADMIN_TOKEN", new_token) except Exception as exc: raise HTTPException(status_code=500, detail=f"令牌已通过校验，但写入 .env 失败: {exc}") set_admin_token(new_token) os.environ["ADMIN_TOKEN"] = new_token return {"code": 0, "msg": f"兼容管理员令牌已更新，并已写入 {ENV_FILE_PATH}"} @router.get("/admin/runtime-config") def admin_runtime_config(request: Request, auth=Depends(require_permission("config:view"))): return { "release_main_executable": RELEASE_MAIN_EXECUTABLE, "target_platform": TARGET_PLATFORM, "target_arch": TARGET_ARCH, "publish_max_request_bytes": PUBLISH_MAX_REQUEST_BYTES, "publish_max_files": PUBLISH_MAX_FILES, "publish_max_fields": PUBLISH_MAX_FIELDS, "api_base_url": public_api_base_url(request), "default_client_config": default_client_config_values(request), } @router.post("/admin/client-config/generate") def admin_generate_client_config(body: ClientConfigGenerateRequest, request: Request, auth=Depends(require_permission("config:view"))): app_id = body.app_id.strip() channel = body.channel.strip() or "stable" current_version = body.current_version.strip() or "1.0.0" client_protocol = max(1, int(body.client_protocol or 3)) api_base_url = (body.api_base_url.strip() or public_api_base_url(request)).rstrip("/") if not app_id: raise HTTPException(status_code=400, detail="请先选择或填写 App ID") if not validate_channel_code(channel): raise HTTPException(status_code=400, detail="渠道代码无效") if not api_base_url.startswith(("http://", "https://")): raise HTTPException(status_code=400, detail="api_base_url 必须以 http:// 或 https:// 开头") app_row = app_channel_repository.get_app(app_id) if not app_row: raise HTTPException(status_code=404, detail="应用不存在，请先在应用管理中创建") channel_row = app_channel_repository.get_channel(app_id, channel) if not channel_row: raise HTTPException(status_code=400, detail={"error": "channel_not_found", "msg": f"渠道 {channel} 不存在"}) defaults = default_client_config_values(request) install_root = normalize_install_root(body.install_root, defaults["install_root"]) main_executable = platform_executable_path( normalize_executable_name(body.main_executable), defaults["main_executable"], ) license_key = body.license_key.strip() license_warning = client_config_license_warning(license_key, app_id, channel) if license_warning: license_key = "" config = { "app_id": app_id, "app_name": app_row["app_name"], "channel": channel, "current_version": current_version, "client_protocol": str(client_protocol), "launch_token": defaults["launch_token"], "license_key": license_key, "client_token": defaults["client_token"], "request_timeout_ms": defaults["request_timeout_ms"], "temp_folder": defaults["temp_folder"], "device_id": "", "install_root": install_root, "main_executable": main_executable, "launcher_executable": defaults["launcher_executable"], "updater_executable": defaults["updater_executable"], "bootstrap_executable": defaults["bootstrap_executable"], "health_check_timeout_ms": defaults["health_check_timeout_ms"], "platform": defaults["platform"], "arch": defaults["arch"], } crash_test_config = crash_report_test_values(api_base_url) server_config = { "api_base_url": api_base_url, } return { "config": config, "json_text": json.dumps(config, ensure_ascii=False, indent=2), "license_warning": license_warning, "server_config": server_config, "server_config_text": json.dumps(server_config, ensure_ascii=False, indent=2), "crash_test_config": crash_test_config, "crash_test_text": crash_report_test_text(api_base_url), }