JiuContinent
e3a4a6d426
feat: 添加审批系统和遗留查询功能支持 - 添加审批系统，包括审批请求模型、服务和路由，支持创建、批准和拒绝操作 - 实现审批API密钥验证机制，区分普通API和审批API访问权限 - 添加Alembic数据库迁移支持，更新初始schema版本并添加降级保护 - 配置遗留MySQL查询白名单机制，支持命名查询和参数化查询 - 更新业务服务以集成审批流程，高风险操作需要审批票证 - 调整安全认证使用常量定义的HTTP头，增强安全性比较 - 优化.gitignore配置，添加日志目录排除和文档文件包含规则 - 更新Dockerfile添加alembic依赖包，修复OpenClaw适配器错误处理 ```
59 lines
2.0 KiB
Python
59 lines
2.0 KiB
Python
from fastapi import APIRouter, Depends
|
|
from sqlalchemy.orm import Session
|
|
|
|
from app.core.database import get_db
|
|
from app.core.security import ApiPrincipal, require_api_key
|
|
from app.modules.legacy_mysql.schemas import (
|
|
LegacyProjectSyncRequest,
|
|
LegacyProjectSyncResult,
|
|
QueryResult,
|
|
ReadonlyQueryRequest,
|
|
)
|
|
from app.modules.legacy_mysql.service import LegacyMySQLService
|
|
|
|
router = APIRouter(dependencies=[Depends(require_api_key)])
|
|
|
|
|
|
@router.get("/health")
|
|
def mysql_health(db: Session = Depends(get_db)) -> dict[str, str]:
|
|
return LegacyMySQLService(db).health()
|
|
|
|
|
|
@router.get("/tables")
|
|
def list_tables(db: Session = Depends(get_db)) -> dict[str, list[str]]:
|
|
return {"tables": LegacyMySQLService(db).list_tables()}
|
|
|
|
|
|
@router.get("/tables/{table_name}")
|
|
def describe_table(table_name: str, db: Session = Depends(get_db)) -> dict:
|
|
return {"table": table_name, "columns": LegacyMySQLService(db).describe_table(table_name)}
|
|
|
|
|
|
@router.post("/query", response_model=QueryResult)
|
|
def readonly_query(payload: ReadonlyQueryRequest, db: Session = Depends(get_db)) -> dict:
|
|
service = LegacyMySQLService(db)
|
|
if payload.sql:
|
|
return service.execute_readonly(payload.sql, payload.params, payload.limit)
|
|
return service.execute_allowed_query(payload.query_name, payload.params, payload.limit)
|
|
|
|
|
|
@router.get("/projects", response_model=QueryResult)
|
|
def default_project_query(limit: int = 100, db: Session = Depends(get_db)) -> dict:
|
|
return LegacyMySQLService(db).fetch_default_projects(limit=limit)
|
|
|
|
|
|
@router.post("/projects/sync", response_model=LegacyProjectSyncResult)
|
|
def sync_projects(
|
|
payload: LegacyProjectSyncRequest,
|
|
db: Session = Depends(get_db),
|
|
principal: ApiPrincipal = Depends(require_api_key),
|
|
) -> dict:
|
|
return LegacyMySQLService(db).sync_projects(
|
|
source_query=payload.source_query,
|
|
source_query_name=payload.source_query_name,
|
|
field_map=payload.field_map,
|
|
limit=payload.limit,
|
|
dry_run=payload.dry_run,
|
|
actor=principal.actor,
|
|
)
|