62 lines
2.0 KiB
Python
62 lines
2.0 KiB
Python
"""Internal evaluation API：共享密钥鉴权，不依赖终端用户 JWT。"""
|
||
|
||
from typing import Annotated
|
||
|
||
from fastapi import Depends, Header, HTTPException, status
|
||
|
||
from app.core.config import settings
|
||
from app.core.logging import get_logger
|
||
|
||
logger = get_logger(__name__)
|
||
|
||
INTERNAL_HEADER = "X-Internal-Eval-Key"
|
||
|
||
|
||
class InternalEvalPrincipal:
|
||
"""已通过内部密钥校验的调用方（占位，便于后续扩展多密钥/审计）。"""
|
||
|
||
def __init__(self, *, key_id: str = "default") -> None:
|
||
self.key_id = key_id
|
||
|
||
|
||
def require_internal_eval_enabled() -> None:
|
||
if not (settings.internal_eval_api_key or "").strip():
|
||
logger.warning("internal_eval_api_key 未配置，内部评测 API 拒绝访问")
|
||
raise HTTPException(
|
||
status_code=status.HTTP_503_SERVICE_UNAVAILABLE,
|
||
detail="内部评测服务未启用（缺少 INTERNAL_EVAL_API_KEY）",
|
||
)
|
||
|
||
|
||
def verify_internal_eval_key(
|
||
*,
|
||
header_value: str | None = None,
|
||
query_value: str | None = None,
|
||
) -> InternalEvalPrincipal:
|
||
"""Header 或 query（供 EventSource 等无法带头场景）。"""
|
||
require_internal_eval_enabled()
|
||
expected = (settings.internal_eval_api_key or "").strip()
|
||
if not expected:
|
||
raise HTTPException(
|
||
status_code=status.HTTP_503_SERVICE_UNAVAILABLE,
|
||
detail="内部评测服务未启用",
|
||
)
|
||
provided = (header_value or query_value or "").strip()
|
||
if not provided or provided != expected:
|
||
raise HTTPException(
|
||
status_code=status.HTTP_401_UNAUTHORIZED,
|
||
detail="无效的内部评测密钥",
|
||
)
|
||
return InternalEvalPrincipal()
|
||
|
||
|
||
async def get_internal_eval_principal(
|
||
x_internal_eval_key: Annotated[str | None, Header(alias=INTERNAL_HEADER)] = None,
|
||
) -> InternalEvalPrincipal:
|
||
return verify_internal_eval_key(header_value=x_internal_eval_key)
|
||
|
||
|
||
InternalEvalAuth = Annotated[
|
||
InternalEvalPrincipal, Depends(get_internal_eval_principal)
|
||
]
|