JiuContinent
ae5990eaef
feat(core): 添加API认证主体配置和安全验证 - 在Settings中添加api_actor字段，用于标识API调用方身份 - 创建ApiPrincipal数据类来表示服务主体 - 修改require_api_key函数返回认证的服务主体信息 - 更新配置文件引入ActorValue常量 feat(ai_agent): 增强OpenClaw工具调用的安全性检查 - 实现_openclaw_allowed_tools和openclaw_allowed_actions配置项 - 添加CSV列表解析验证器 - 实现工具和操作权限检查方法_ensure_tool_allowed - 在工具调用前验证允许的工具和操作类型 feat(security): 强化API密钥认证和审计安全性 - 更新require_api_key函数在缺少API_KEY时抛出异常 - 在AI代理、审批、飞书等模块的路由中统一使用ApiPrincipal获取调用方信息 - 替换硬编码的ActorValue.API为动态的principal.actor feat(audit): 实现安全审计负载脱敏处理 - 添加敏感键名集合AI_AUDIT_SENSITIVE_KEYS - 实现审计安全负载处理函数_audit_safe_payload - 支持深度遍历、文本截断、序列限制和敏感信息脱敏 - 在AI服务的审计日志中应用安全负载处理 feat(approval): 完善审批流程的申请人身份验证 - 更新审批创建接口使用认证主体作为申请人 - 使用utc_now替换datetime.utcnow确保时间一致性 - 修复审批逻辑中的条件判断问题 feat(business): 加强业务领域高风险操作的审批控制 - 为高风险域创建统一的审批验证方法_ensure_approved - 在创建和更新操作中强制要求审批票证 - 为项目同步功能添加认证主体参数 feat(config): 统一时间处理使用UTC时间函数 - 创建并使用utc_now函数替代datetime.utcnow - 在审批、审计、业务、遗留数据等模块中更新时间戳处理 feat(constants): 扩展风险事件类型和报告指标 - 添加新风险事件类型到GENERATED_RISK_EVENT_TYPES - 为报告模块添加外部开放和高风险事件指标 refactor(feishu): 增强飞书验证令牌安全检查 - 确保飞书验证令牌配置存在时才接受请求 - 修正令牌验证逻辑以提高安全性 ```
127 lines
2.8 KiB
Python
127 lines
2.8 KiB
Python
from enum import StrEnum
|
|
|
|
|
|
class StatusValue(StrEnum):
|
|
INITIATED = "立项"
|
|
TODO = "待办"
|
|
DRAFT = "草稿"
|
|
POLICY_DRAFT = "草案"
|
|
VALID = "有效"
|
|
APPROVING = "审批中"
|
|
PENDING_APPROVAL = "待审批"
|
|
PENDING = "pending"
|
|
ACCEPTED = "验收"
|
|
COMPLETED_CN = "已完成"
|
|
DONE_CN = "完成"
|
|
REVIEWED = "复盘"
|
|
ARCHIVED = "归档"
|
|
CLOSED_CN = "关闭"
|
|
CLOSED = "closed"
|
|
RESOLVED = "resolved"
|
|
DONE = "done"
|
|
COMPLETED = "completed"
|
|
GENERATED = "已生成"
|
|
UNKNOWN = "未知"
|
|
PAID = "已付款"
|
|
UNPAID = "未付款"
|
|
UNDELIVERED = "未到货"
|
|
INVOICE_NOT_RECEIVED = "未收票"
|
|
NORMAL = "normal"
|
|
NORMAL_CN = "正常"
|
|
LATE = "迟到"
|
|
LEAVE_EARLY = "早退"
|
|
MISSING_PUNCH = "缺卡"
|
|
ABSENT = "旷工"
|
|
ABNORMAL = "异常"
|
|
OPEN = "open"
|
|
RUNNING = "running"
|
|
DRY_RUN = "dry_run"
|
|
|
|
|
|
class RiskLevel(StrEnum):
|
|
LOW = "low"
|
|
MEDIUM = "medium"
|
|
HIGH = "high"
|
|
|
|
|
|
class PriorityValue(StrEnum):
|
|
P2 = "P2"
|
|
|
|
|
|
class SourceSystem(StrEnum):
|
|
INTERNAL = "internal"
|
|
LEGACY_MYSQL = "legacy_mysql"
|
|
|
|
|
|
class AccountType(StrEnum):
|
|
BANK = "bank"
|
|
|
|
|
|
class VersionValue(StrEnum):
|
|
V1_0 = "v1.0"
|
|
|
|
|
|
class BusinessDomain(StrEnum):
|
|
TASKS = "tasks"
|
|
PROJECTS = "projects"
|
|
FUND_ACCOUNTS = "fund-accounts"
|
|
SUPPLIERS = "suppliers"
|
|
|
|
|
|
class RiskEventType(StrEnum):
|
|
OVERDUE_TASK = "overdue_task"
|
|
DELAYED_PROJECT = "delayed_project"
|
|
OVER_BUDGET_PROJECT = "over_budget_project"
|
|
FUND_SAFETY_LINE = "fund_safety_line"
|
|
SUPPLIER_RISK = "supplier_risk"
|
|
|
|
|
|
DONE_STATUSES = frozenset(
|
|
{
|
|
StatusValue.DONE_CN,
|
|
StatusValue.COMPLETED_CN,
|
|
StatusValue.CLOSED_CN,
|
|
StatusValue.DONE,
|
|
StatusValue.COMPLETED,
|
|
StatusValue.CLOSED,
|
|
}
|
|
)
|
|
PENDING_APPROVAL_STATUSES = frozenset(
|
|
{
|
|
StatusValue.DRAFT,
|
|
StatusValue.APPROVING,
|
|
StatusValue.PENDING_APPROVAL,
|
|
StatusValue.PENDING,
|
|
}
|
|
)
|
|
PROJECT_CLOSED_STATUSES = frozenset(
|
|
{
|
|
StatusValue.ACCEPTED,
|
|
StatusValue.COMPLETED_CN,
|
|
StatusValue.REVIEWED,
|
|
StatusValue.ARCHIVED,
|
|
StatusValue.CLOSED_CN,
|
|
StatusValue.CLOSED,
|
|
}
|
|
)
|
|
ATTENDANCE_ABNORMAL_STATUSES = frozenset(
|
|
{
|
|
StatusValue.LATE,
|
|
StatusValue.LEAVE_EARLY,
|
|
StatusValue.MISSING_PUNCH,
|
|
StatusValue.ABSENT,
|
|
StatusValue.ABNORMAL,
|
|
}
|
|
)
|
|
SUPPLIER_RISK_LEVELS = frozenset({RiskLevel.MEDIUM, RiskLevel.HIGH})
|
|
CLOSED_RISK_STATUSES = frozenset({StatusValue.CLOSED, StatusValue.RESOLVED})
|
|
GENERATED_RISK_EVENT_TYPES = frozenset(
|
|
{
|
|
RiskEventType.OVERDUE_TASK,
|
|
RiskEventType.DELAYED_PROJECT,
|
|
RiskEventType.OVER_BUDGET_PROJECT,
|
|
RiskEventType.FUND_SAFETY_LINE,
|
|
RiskEventType.SUPPLIER_RISK,
|
|
}
|
|
)
|