refactor: 全栈架构升级 - 风险控制、会话管理、审计日志和验证码功能
后端变更: - 新增 risk_config.py: 风险配置数据类，支持环境变量驱动 - 新增 risk_control.py: 风险控制控制器，管理并发和预算 - 新增 session_store.py: 匿名会话存储，基于 cookie 的 session ID - 新增 audit_store.py: API 审计日志存储，记录请求和 LLM 调用 - 新增 captcha_api.py: 验证码 API，用于验证用户操作真实性 - 新增 llm_policy.py: LLM 策略配置，管理 completion/pro/vision 模型 - main.py: 集成 middleware、risk/audit/session 模块 (+467/-7) - job_handlers.py: LLM 执行流程重构，新增 risk/audit 集成 (+207/-4) - llm.py: 异步客户端封装，新增 max_output_tokens 参数 (+78/-1) - job_system.py: stream_events 逻辑优化，支持心跳检测 (+12/-4) - pro_completions.py: SSE heartbeat 机制，防止连接超时 (+14/-4) - prompt.py: _normalize_preferences 支持 Mapping 类型 (+13/-0) - tts_asr.py: asyncio loop 初始化，router export (+10/-0) 前端变更: - src/components/CaptchaComponent.vue: 新增验证码组件 (NEW) - src/utils/cookie_policy.js: Cookie 策略工具 (NEW) - SettingsPanel.vue: 集成验证码组件，新增安全设置部分 (+59/-0) - MilkdownEditor.vue: 移除硬编码 API_KEY，新增 credentials (+32/-10) - ProBlockCrepe.vue: 样式简化，移除渐变动画 (+18/-4) - proBlockPlugin.ts: 重构 schema/serializer 引用方式，通过 Ctx 管理 (+40/-10) - api.js: 新增 credentials，重构 headers 条件逻辑 (+50/-14) - config.js: API 基址改为 https://api.imageteach.tech:8002 (+8/-4) - convert.js, docsApi.js, i18n.js: 新增 credentials 和验证码 i18n (+54/-12) - proAccept.js: 重构正则和转义处理，修复捕获组索引 (+14/-4) 配置和基础设施: - docker-compose.yml: 新增端口映射 8001:8001 (+2/-0) - docker/nginx.conf: 改为 307 redirect，优化代理配置 (+8/-6) - vite.config.js: 移除 proxy 配置，直接调用远程 API (+8/-4) - .env.example: 新增 VITE_API_BASE_URL, VITE_API_KEY (+3/-1) - backend/.env.example: 大量 RISK_*, SESSION_*, CORS_* 配置 (+54/-0) - pytest.ini: 扩展 coverage 范围到整个 backend，移除 fail_under (+3/-2) - .coveragerc: 移除 fail_under = 90 (+0/-1) - .gitignore: 新增 docker-data/ (+3/-0) - package.json: 新增 vue3-captcha 依赖 (+3/-1) - AGENTS.md, README.md: 更新 Docker 部署和前端网络约定 (+20/-5) - public/sw.js: Service Worker cache 版本从 v1 升级到 v2 (+0/-1) 测试变更: - test_main_endpoints.py: 新增 session/risk/audit reset，新增测试用例 (+63/-4) - test_main_cancel.py: 新增 reset 调用 (+6/-0) - test_pro_completions.py: 新增 preferences 序列化和测试 (+23/-0) 总计: 45 个文件变更，+1009/-280 行
This commit is contained in:
“ydy0615”
@@ -15,6 +15,9 @@ if str(BACKEND_DIR) not in sys.path:
|
||||
|
||||
import job_handlers # type: ignore
|
||||
import job_system # type: ignore
|
||||
import risk_control # type: ignore
|
||||
import session_store # type: ignore
|
||||
import audit_store # type: ignore
|
||||
|
||||
main = importlib.import_module("main")
|
||||
|
||||
@@ -23,6 +26,9 @@ API_KEY_HEADERS = {"X-API-Key": "your-secret-key-here"}
|
||||
|
||||
def setup_function():
|
||||
job_system.reset_job_manager()
|
||||
risk_control.reset_risk_controller()
|
||||
session_store.reset_session_store()
|
||||
audit_store.reset_audit_store()
|
||||
main._handlers_registered = False
|
||||
|
||||
|
||||
|
||||
@@ -1,4 +1,5 @@
|
||||
import base64
|
||||
import asyncio
|
||||
import importlib
|
||||
import os
|
||||
import sys
|
||||
@@ -17,6 +18,9 @@ if str(BACKEND_DIR) not in sys.path:
|
||||
import job_handlers # type: ignore
|
||||
import job_system # type: ignore
|
||||
import docs_store # type: ignore
|
||||
import risk_control # type: ignore
|
||||
import session_store # type: ignore
|
||||
import audit_store # type: ignore
|
||||
|
||||
main = importlib.import_module("main")
|
||||
|
||||
@@ -26,6 +30,9 @@ HEADERS = {"X-API-Key": main.API_KEY}
|
||||
def setup_function():
|
||||
job_system.reset_job_manager()
|
||||
docs_store.reset_document_store()
|
||||
risk_control.reset_risk_controller()
|
||||
session_store.reset_session_store()
|
||||
audit_store.reset_audit_store()
|
||||
main._handlers_registered = False
|
||||
|
||||
|
||||
@@ -61,13 +68,31 @@ def test_get_client_ip_header_overrides_host():
|
||||
assert main.get_client_ip(req) == "5.6.7.8"
|
||||
|
||||
|
||||
def test_post_completions_wrong_api_key_returns_401():
|
||||
def test_post_completions_without_api_key_uses_anonymous_session(monkeypatch):
|
||||
async def fake_call(*args, **kwargs):
|
||||
return {"content": "系统done", "think": ""}
|
||||
|
||||
monkeypatch.setattr(job_handlers, "call_ollama", fake_call)
|
||||
with TestClient(main.app) as client:
|
||||
resp = client.post("/v1/completions", json={
|
||||
with client.stream("POST", "/v1/completions", json={
|
||||
"prefix": "hello", "suffix": "", "languageId": "markdown",
|
||||
"model_thinking": "low", "privacy_mode": True,
|
||||
})
|
||||
assert resp.status_code == 401
|
||||
}) as resp:
|
||||
assert resp.status_code == 200
|
||||
assert main.config.session_cookie_name in resp.cookies
|
||||
|
||||
|
||||
def test_post_completions_invalid_api_key_returns_403():
|
||||
with TestClient(main.app) as client:
|
||||
resp = client.post(
|
||||
"/v1/completions",
|
||||
headers={"X-API-Key": "invalid-key"},
|
||||
json={
|
||||
"prefix": "hello", "suffix": "", "languageId": "markdown",
|
||||
"model_thinking": "low", "privacy_mode": True,
|
||||
},
|
||||
)
|
||||
assert resp.status_code == 403
|
||||
|
||||
|
||||
def test_post_completions_returns_sse_done(monkeypatch):
|
||||
@@ -88,6 +113,36 @@ def test_post_completions_returns_sse_done(monkeypatch):
|
||||
assert "event: done" in body
|
||||
|
||||
|
||||
def test_stream_job_emits_keepalive_during_idle(monkeypatch):
|
||||
async def fake_queue_job(*_args, **_kwargs):
|
||||
return "job-keepalive"
|
||||
|
||||
class FakeManager:
|
||||
def register_handler(self, *_args, **_kwargs):
|
||||
return None
|
||||
|
||||
async def stream_events(self, job_id):
|
||||
yield {"event": "queued", "job_id": job_id}
|
||||
yield {"event": "started", "job_id": job_id}
|
||||
await asyncio.sleep(0.03)
|
||||
yield {"event": "done", "job_id": job_id, "result": {"content": "ok"}}
|
||||
|
||||
monkeypatch.setattr(main, "STREAM_HEARTBEAT_SECONDS", 0.01)
|
||||
monkeypatch.setattr(main, "_queue_job", fake_queue_job)
|
||||
monkeypatch.setattr(main, "get_job_manager", lambda: FakeManager())
|
||||
|
||||
with TestClient(main.app) as client:
|
||||
with client.stream("POST", "/v1/pro/completions", headers=HEADERS, json={
|
||||
"prefix": "hello", "suffix": "", "languageId": "markdown",
|
||||
"instruction": "expand", "pro_thinking": "medium", "privacy_mode": True,
|
||||
}) as resp:
|
||||
assert resp.status_code == 200
|
||||
body = "".join(resp.iter_text())
|
||||
|
||||
assert ": keepalive" in body
|
||||
assert "event: done" in body
|
||||
|
||||
|
||||
def test_post_ocr_mocked(monkeypatch):
|
||||
async def fake_ocr(*args, **kwargs):
|
||||
return "OCR result text"
|
||||
|
||||
@@ -33,6 +33,11 @@ def _payload():
|
||||
"instruction": "expand",
|
||||
"pro_thinking": "medium",
|
||||
"privacy_mode": True,
|
||||
"user_preferences": {
|
||||
"language": "zh",
|
||||
"currency": "CNY",
|
||||
"timezone": "Asia/Shanghai",
|
||||
},
|
||||
}
|
||||
|
||||
|
||||
@@ -66,6 +71,24 @@ def test_pro_prompt_uses_pro_specific_instruction():
|
||||
assert "pro_thinking_level: high" in combined
|
||||
|
||||
|
||||
def test_pro_prompt_accepts_serialized_preferences():
|
||||
_, user_prompt = prompt.build_pro_completion_prompts(
|
||||
prefix="Before",
|
||||
suffix="After",
|
||||
language_id="markdown",
|
||||
instruction="expand",
|
||||
preferences={
|
||||
"language": "zh",
|
||||
"currency": "CNY",
|
||||
"timezone": "Asia/Shanghai",
|
||||
},
|
||||
)
|
||||
|
||||
assert "Preferred language: zh" in user_prompt
|
||||
assert "Preferred currency: CNY" in user_prompt
|
||||
assert "Preferred timezone: Asia/Shanghai" in user_prompt
|
||||
|
||||
|
||||
def test_pro_stream_returns_standard_events(monkeypatch):
|
||||
async def fake_stream_events(*args, **kwargs):
|
||||
yield "thinking", ""
|
||||
|
||||
Reference in New Issue
Block a user