216 lines
7.2 KiB
Python
216 lines
7.2 KiB
Python
"""路由: 管理面板
|
||
|
||
提供 Web 管理界面和 API：
|
||
- /admin — 管理面板页面
|
||
- /v1/models — 模型列表（供 Cursor 查询）
|
||
- /api/admin/* — 登录验证、全局设置 CRUD、模型映射 CRUD
|
||
"""
|
||
|
||
import os
|
||
import logging
|
||
|
||
from flask import Blueprint, request, jsonify, send_from_directory
|
||
|
||
import settings
|
||
from config import Config
|
||
|
||
logger = logging.getLogger(__name__)
|
||
|
||
_STATIC_DIR = os.path.join(os.path.dirname(os.path.dirname(os.path.abspath(__file__))), 'static')
|
||
|
||
bp = Blueprint('admin', __name__)
|
||
|
||
|
||
# ─── 静态页面 ─────────────────────────────────────
|
||
|
||
|
||
@bp.route('/admin')
|
||
@bp.route('/admin/')
|
||
def admin_page():
|
||
"""返回管理面板首页 HTML 页面，供浏览器进入配置界面。"""
|
||
return send_from_directory(_STATIC_DIR, 'admin.html')
|
||
|
||
|
||
@bp.route('/static/<path:filename>')
|
||
def static_files(filename):
|
||
"""提供管理面板所需的静态资源文件。"""
|
||
return send_from_directory(_STATIC_DIR, filename)
|
||
|
||
|
||
# ─── 模型列表 ─────────────────────────────────────
|
||
|
||
|
||
@bp.route('/v1/models', methods=['GET'])
|
||
def list_models():
|
||
"""返回当前配置的模型列表，供 Cursor 拉取可用模型。"""
|
||
mappings = settings.get().get('model_mappings', {})
|
||
models = [{
|
||
'id': name,
|
||
'object': 'model',
|
||
'owned_by': info.get('backend', 'custom'),
|
||
} for name, info in mappings.items()]
|
||
|
||
if not models:
|
||
models.append({
|
||
'id': 'claude-sonnet-4-5-20250929',
|
||
'object': 'model',
|
||
'owned_by': 'anthropic',
|
||
})
|
||
return jsonify({'object': 'list', 'data': models})
|
||
|
||
|
||
# ─── 登录验证 ─────────────────────────────────────
|
||
|
||
|
||
@bp.route('/api/admin/login', methods=['POST'])
|
||
def admin_login():
|
||
"""校验管理面板登录密钥，并返回是否允许进入后台。"""
|
||
data = request.get_json(force=True)
|
||
if not Config.ACCESS_API_KEY:
|
||
return jsonify({'ok': True, 'message': '未配置鉴权'})
|
||
if data.get('key', '') == Config.ACCESS_API_KEY:
|
||
return jsonify({'ok': True})
|
||
return jsonify({'ok': False, 'message': '密钥错误'}), 401
|
||
|
||
|
||
# ─── 全局设置 ─────────────────────────────────────
|
||
|
||
|
||
@bp.route('/api/admin/settings', methods=['GET'])
|
||
def get_settings():
|
||
"""读取当前生效的全局代理配置。"""
|
||
err = _check_auth()
|
||
if err:
|
||
return err
|
||
s = settings.get()
|
||
return jsonify({
|
||
'proxy_target_url': s.get('proxy_target_url', ''),
|
||
'proxy_api_key': s.get('proxy_api_key', ''),
|
||
'env_target_url': Config.PROXY_TARGET_URL,
|
||
'env_api_key': '***' if Config.PROXY_API_KEY else '',
|
||
})
|
||
|
||
|
||
@bp.route('/api/admin/settings', methods=['PUT'])
|
||
def update_settings():
|
||
"""更新全局上游地址与密钥配置。"""
|
||
err = _check_auth()
|
||
if err:
|
||
return err
|
||
data = request.get_json(force=True)
|
||
s = settings.get()
|
||
for key in ('proxy_target_url', 'proxy_api_key'):
|
||
if key in data:
|
||
s[key] = data[key]
|
||
return _save_and_respond(s, '全局设置已更新')
|
||
|
||
|
||
# ─── 模型映射 CRUD ────────────────────────────────
|
||
|
||
|
||
@bp.route('/api/admin/mappings', methods=['GET'])
|
||
def list_mappings():
|
||
"""列出所有模型映射配置，供管理面板读取和展示。"""
|
||
err = _check_auth()
|
||
if err:
|
||
return err
|
||
return jsonify(settings.get().get('model_mappings', {}))
|
||
|
||
|
||
@bp.route('/api/admin/mappings', methods=['POST'])
|
||
def add_mapping():
|
||
"""新增一条模型映射，并写入持久化配置。"""
|
||
err = _check_auth()
|
||
if err:
|
||
return err
|
||
data = request.get_json(force=True)
|
||
name = data.get('name', '').strip()
|
||
if not name:
|
||
return jsonify({'error': '名称不能为空'}), 400
|
||
|
||
s = settings.get()
|
||
mappings = s.setdefault('model_mappings', {})
|
||
mappings[name] = {
|
||
'upstream_model': data.get('upstream_model', name),
|
||
'backend': data.get('backend', 'auto'),
|
||
'target_url': data.get('target_url', ''),
|
||
'api_key': data.get('api_key', ''),
|
||
'custom_instructions': data.get('custom_instructions', ''),
|
||
'instructions_position': data.get('instructions_position', 'prepend'),
|
||
'body_modifications': data.get('body_modifications') or {},
|
||
'header_modifications': data.get('header_modifications') or {},
|
||
}
|
||
return _save_and_respond(s, f'映射已添加: {name}')
|
||
|
||
|
||
@bp.route('/api/admin/mappings/<path:name>', methods=['PUT'])
|
||
def update_mapping(name):
|
||
"""更新指定名称的模型映射，必要时支持重命名。"""
|
||
err = _check_auth()
|
||
if err:
|
||
return err
|
||
data = request.get_json(force=True)
|
||
s = settings.get()
|
||
mappings = s.get('model_mappings', {})
|
||
if name not in mappings:
|
||
return jsonify({'error': '映射不存在'}), 404
|
||
|
||
new_name = data.get('name', name).strip()
|
||
entry = {
|
||
'upstream_model': data.get('upstream_model', name),
|
||
'backend': data.get('backend', 'auto'),
|
||
'target_url': data.get('target_url', ''),
|
||
'api_key': data.get('api_key', ''),
|
||
'custom_instructions': data.get('custom_instructions', ''),
|
||
'instructions_position': data.get('instructions_position', 'prepend'),
|
||
'body_modifications': data.get('body_modifications') or {},
|
||
'header_modifications': data.get('header_modifications') or {},
|
||
}
|
||
if new_name != name:
|
||
del mappings[name]
|
||
mappings[new_name] = entry
|
||
s['model_mappings'] = mappings
|
||
return _save_and_respond(s, f'映射已更新: {name} → {new_name}')
|
||
|
||
|
||
@bp.route('/api/admin/mappings/<path:name>', methods=['DELETE'])
|
||
def delete_mapping(name):
|
||
"""删除指定名称的模型映射，并在存在时同步保存配置。"""
|
||
err = _check_auth()
|
||
if err:
|
||
return err
|
||
s = settings.get()
|
||
mappings = s.get('model_mappings', {})
|
||
if name in mappings:
|
||
del mappings[name]
|
||
s['model_mappings'] = mappings
|
||
return _save_and_respond(s, f'映射已删除: {name}')
|
||
return jsonify({'ok': True})
|
||
|
||
|
||
# ─── 内部辅助 ─────────────────────────────────────
|
||
|
||
|
||
def _check_auth():
|
||
"""Admin API 鉴权，返回 None 表示通过"""
|
||
if not Config.ACCESS_API_KEY:
|
||
return None
|
||
auth = request.headers.get('Authorization', '')
|
||
token = auth[7:] if auth.startswith('Bearer ') else request.headers.get('x-api-key', '')
|
||
if token != Config.ACCESS_API_KEY:
|
||
return jsonify({'error': '未授权'}), 401
|
||
return None
|
||
|
||
|
||
def _save_and_respond(data, log_msg):
|
||
"""保存配置并返回统一成功响应。
|
||
|
||
当写盘失败时，这里也负责把异常转成结构化的 JSON 错误返回。
|
||
"""
|
||
try:
|
||
settings.save(data)
|
||
except OSError as e:
|
||
logger.error(f'保存失败: {e}')
|
||
return jsonify({'error': {'message': f'保存失败: {e}', 'type': 'save_error'}}), 500
|
||
logger.info(log_msg)
|
||
return jsonify({'ok': True})
|