JiuContinent
9b87c6a7a3
feat: 添加飞书集成和改进安全配置 - 集成 lark-oapi 库以支持飞书功能 - 改进 CORS 配置验证器以支持 JSON 格式输入 - 添加安全凭证检查逻辑以防止跨域安全问题 - 在 DirectLLMAdapter 中增加响应解析异常处理 fix: 增强查询参数验证和分页限制 - 为多个路由添加 Query 参数验证器 - 实现 bounded_limit 和 bounded_offset 辅助函数 - 设置查询限制范围为 1-500 之间 - 使用 secrets.compare_digest 提升令牌验证安全性 refactor: 调整文档忽略规则和测试配置 - 更新 .gitignore 文件中的文档路径配置 - 在 smoke 测试中添加必要的环境变量配置 - 重构配置验证器以提高类型兼容性 ```
79 lines
2.5 KiB
Python
79 lines
2.5 KiB
Python
from fastapi import APIRouter, Depends, HTTPException, Query
|
|
from sqlalchemy.orm import Session
|
|
|
|
from app.core.database import get_db
|
|
from app.core.security import ApiPrincipal, require_api_key
|
|
from app.modules.business.registry import DOMAIN_MODELS
|
|
from app.modules.business.schemas import DomainListRead, DomainRecordCreate, DomainRecordUpdate
|
|
from app.modules.business.service import BusinessService
|
|
|
|
router = APIRouter(dependencies=[Depends(require_api_key)])
|
|
|
|
|
|
@router.get("/domains")
|
|
def list_domains() -> dict[str, list[str]]:
|
|
return {"domains": sorted(DOMAIN_MODELS)}
|
|
|
|
|
|
@router.get("/{domain}", response_model=DomainListRead)
|
|
def list_records(
|
|
domain: str,
|
|
limit: int = Query(default=50, ge=1, le=500),
|
|
offset: int = Query(default=0, ge=0),
|
|
status: str | None = None,
|
|
db: Session = Depends(get_db),
|
|
) -> dict:
|
|
try:
|
|
total, items = BusinessService(db).list_records(domain, limit, offset, status)
|
|
except KeyError as exc:
|
|
raise HTTPException(status_code=404, detail=str(exc)) from exc
|
|
return {"domain": domain, "total": total, "items": items}
|
|
|
|
|
|
@router.get("/{domain}/{record_id}")
|
|
def get_record(domain: str, record_id: int, db: Session = Depends(get_db)) -> dict:
|
|
try:
|
|
return {"domain": domain, "data": BusinessService(db).get_record(domain, record_id)}
|
|
except KeyError as exc:
|
|
raise HTTPException(status_code=404, detail=str(exc)) from exc
|
|
|
|
|
|
@router.post("/{domain}")
|
|
def create_record(
|
|
domain: str,
|
|
payload: DomainRecordCreate,
|
|
db: Session = Depends(get_db),
|
|
principal: ApiPrincipal = Depends(require_api_key),
|
|
) -> dict:
|
|
try:
|
|
data = BusinessService(db).create_record(
|
|
domain,
|
|
payload.data,
|
|
principal.actor,
|
|
payload.approval_ticket_id,
|
|
)
|
|
except KeyError as exc:
|
|
raise HTTPException(status_code=404, detail=str(exc)) from exc
|
|
return {"domain": domain, "data": data}
|
|
|
|
|
|
@router.patch("/{domain}/{record_id}")
|
|
def update_record(
|
|
domain: str,
|
|
record_id: int,
|
|
payload: DomainRecordUpdate,
|
|
db: Session = Depends(get_db),
|
|
principal: ApiPrincipal = Depends(require_api_key),
|
|
) -> dict:
|
|
try:
|
|
data = BusinessService(db).update_record(
|
|
domain,
|
|
record_id,
|
|
payload.data,
|
|
actor=principal.actor,
|
|
approval_ticket_id=payload.approval_ticket_id,
|
|
)
|
|
except KeyError as exc:
|
|
raise HTTPException(status_code=404, detail=str(exc)) from exc
|
|
return {"domain": domain, "data": data}
|