JiuContinent
e3a4a6d426
feat: 添加审批系统和遗留查询功能支持 - 添加审批系统，包括审批请求模型、服务和路由，支持创建、批准和拒绝操作 - 实现审批API密钥验证机制，区分普通API和审批API访问权限 - 添加Alembic数据库迁移支持，更新初始schema版本并添加降级保护 - 配置遗留MySQL查询白名单机制，支持命名查询和参数化查询 - 更新业务服务以集成审批流程，高风险操作需要审批票证 - 调整安全认证使用常量定义的HTTP头，增强安全性比较 - 优化.gitignore配置，添加日志目录排除和文档文件包含规则 - 更新Dockerfile添加alembic依赖包，修复OpenClaw适配器错误处理 ```
55 lines
1.5 KiB
Python
55 lines
1.5 KiB
Python
from logging.config import fileConfig
|
|
|
|
from alembic import context
|
|
from sqlalchemy import engine_from_config, pool
|
|
|
|
from app.core.config import get_settings
|
|
from app.core.db_base import Base
|
|
from app.modules.approvals import models as approval_models
|
|
from app.modules.audit import models as audit_models
|
|
from app.modules.business import models as business_models
|
|
|
|
config = context.config
|
|
|
|
if config.config_file_name is not None:
|
|
fileConfig(config.config_file_name)
|
|
|
|
target_metadata = Base.metadata
|
|
settings = get_settings()
|
|
|
|
# Keep imports referenced so SQLAlchemy model classes register with Base.metadata.
|
|
_REGISTERED_MODEL_MODULES = (approval_models, audit_models, business_models)
|
|
|
|
|
|
def run_migrations_offline() -> None:
|
|
context.configure(
|
|
url=settings.database_url,
|
|
target_metadata=target_metadata,
|
|
literal_binds=True,
|
|
dialect_opts={"paramstyle": "named"},
|
|
)
|
|
|
|
with context.begin_transaction():
|
|
context.run_migrations()
|
|
|
|
|
|
def run_migrations_online() -> None:
|
|
configuration = config.get_section(config.config_ini_section, {})
|
|
configuration["sqlalchemy.url"] = settings.database_url
|
|
connectable = engine_from_config(
|
|
configuration,
|
|
prefix="sqlalchemy.",
|
|
poolclass=pool.NullPool,
|
|
)
|
|
|
|
with connectable.connect() as connection:
|
|
context.configure(connection=connection, target_metadata=target_metadata)
|
|
with context.begin_transaction():
|
|
context.run_migrations()
|
|
|
|
|
|
if context.is_offline_mode():
|
|
run_migrations_offline()
|
|
else:
|
|
run_migrations_online()
|