186 lines
6.4 KiB
Python
186 lines
6.4 KiB
Python
#
|
||
# Copyright 2024 The InfiniFlow Authors. All Rights Reserved.
|
||
#
|
||
# Licensed under the Apache License, Version 2.0 (the "License");
|
||
# you may not use this file except in compliance with the License.
|
||
# You may obtain a copy of the License at
|
||
#
|
||
# http://www.apache.org/licenses/LICENSE-2.0
|
||
#
|
||
# Unless required by applicable law or agreed to in writing, software
|
||
# distributed under the License is distributed on an "AS IS" BASIS,
|
||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||
# See the License for the specific language governing permissions and
|
||
# limitations under the License.
|
||
#
|
||
import os
|
||
import sys
|
||
import logging
|
||
from importlib.util import module_from_spec, spec_from_file_location
|
||
from pathlib import Path
|
||
from fastapi import FastAPI
|
||
from fastapi.middleware.cors import CORSMiddleware
|
||
from fastapi.middleware.trustedhost import TrustedHostMiddleware
|
||
from starlette.middleware.sessions import SessionMiddleware
|
||
try:
|
||
from itsdangerous.url_safe import URLSafeTimedSerializer as Serializer
|
||
except ImportError:
|
||
# 如果没有itsdangerous，使用jwt作为替代
|
||
import jwt
|
||
Serializer = jwt
|
||
|
||
from api.db import StatusEnum
|
||
from api.db.db_models import close_connection
|
||
from api.db.services import UserService
|
||
from api.utils.json import CustomJSONEncoder
|
||
from api.utils import commands
|
||
|
||
from api import settings
|
||
from api.utils.api_utils import server_error_response
|
||
from api.constants import API_VERSION
|
||
|
||
__all__ = ["app"]
|
||
|
||
def create_app() -> FastAPI:
|
||
"""创建FastAPI应用实例"""
|
||
app = FastAPI(
|
||
title="RAGFlow API",
|
||
description="RAGFlow API Server",
|
||
version="1.0.0",
|
||
docs_url="/apidocs/",
|
||
redoc_url="/redoc/",
|
||
openapi_url="/apispec.json"
|
||
)
|
||
|
||
# 添加CORS中间件
|
||
app.add_middleware(
|
||
CORSMiddleware,
|
||
allow_origins=["*"], # 生产环境中应该设置具体的域名
|
||
allow_credentials=True,
|
||
allow_methods=["*"],
|
||
allow_headers=["*"],
|
||
max_age=2592000
|
||
)
|
||
|
||
# 添加信任主机中间件
|
||
app.add_middleware(
|
||
TrustedHostMiddleware,
|
||
allowed_hosts=["*"] # 生产环境中应该设置具体的域名
|
||
)
|
||
|
||
# 添加会话中间件
|
||
app.add_middleware(
|
||
SessionMiddleware,
|
||
secret_key=settings.SECRET_KEY,
|
||
max_age=2592000
|
||
)
|
||
|
||
# 设置错误处理器
|
||
@app.exception_handler(Exception)
|
||
async def global_exception_handler(request, exc):
|
||
return server_error_response(exc)
|
||
|
||
return app
|
||
|
||
def search_pages_path(pages_dir):
|
||
"""搜索页面路径"""
|
||
app_path_list = [
|
||
path for path in pages_dir.glob("*_app_fastapi.py") if not path.name.startswith(".")
|
||
]
|
||
api_path_list = [
|
||
path for path in pages_dir.glob("*sdk/*.py") if not path.name.startswith(".")
|
||
]
|
||
app_path_list.extend(api_path_list)
|
||
return app_path_list
|
||
|
||
def register_page(app: FastAPI, page_path):
|
||
"""注册页面路由"""
|
||
path = f"{page_path}"
|
||
|
||
page_name = page_path.stem.removesuffix("_app_fastapi")
|
||
module_name = ".".join(
|
||
page_path.parts[page_path.parts.index("api"): -1] + (page_name,)
|
||
)
|
||
|
||
spec = spec_from_file_location(module_name, page_path)
|
||
page = module_from_spec(spec)
|
||
page.app = app
|
||
page.router = None # FastAPI使用router而不是Blueprint
|
||
sys.modules[module_name] = page
|
||
spec.loader.exec_module(page)
|
||
page_name = getattr(page, "page_name", page_name)
|
||
sdk_path = "\\sdk\\" if sys.platform.startswith("win") else "/sdk/"
|
||
url_prefix = (
|
||
f"/api/{API_VERSION}" if sdk_path in path else f"/{API_VERSION}/{page_name}"
|
||
)
|
||
|
||
# 在FastAPI中，我们需要检查是否有router属性
|
||
if hasattr(page, 'router') and page.router:
|
||
app.include_router(page.router, prefix=url_prefix)
|
||
return url_prefix
|
||
|
||
def setup_routes(app: FastAPI):
|
||
"""设置路由 - 注册所有接口"""
|
||
from api.apps.user_app_fastapi import router as user_router
|
||
from api.apps.kb_app import router as kb_router
|
||
from api.apps.document_app import router as document_router
|
||
from api.apps.file_app import router as file_router
|
||
from api.apps.file2document_app import router as file2document_router
|
||
from api.apps.mcp_server_app import router as mcp_router
|
||
from api.apps.tenant_app import router as tenant_router
|
||
|
||
app.include_router(user_router, prefix=f"/{API_VERSION}/user", tags=["User"])
|
||
app.include_router(kb_router, prefix=f"/{API_VERSION}/kb", tags=["KB"])
|
||
app.include_router(document_router, prefix=f"/{API_VERSION}/document", tags=["Document"])
|
||
app.include_router(file_router, prefix=f"/{API_VERSION}/file", tags=["File"])
|
||
app.include_router(file2document_router, prefix=f"/{API_VERSION}/file2document", tags=["File2Document"])
|
||
app.include_router(mcp_router, prefix=f"/{API_VERSION}/mcp", tags=["MCP"])
|
||
app.include_router(tenant_router, prefix=f"/{API_VERSION}/tenant", tags=["Tenant"])
|
||
|
||
def get_current_user_from_token(authorization: str):
|
||
"""从token获取当前用户"""
|
||
jwt = Serializer(secret_key=settings.SECRET_KEY)
|
||
|
||
if authorization:
|
||
try:
|
||
access_token = str(jwt.loads(authorization))
|
||
|
||
if not access_token or not access_token.strip():
|
||
logging.warning("Authentication attempt with empty access token")
|
||
return None
|
||
|
||
# Access tokens should be UUIDs (32 hex characters)
|
||
if len(access_token.strip()) < 32:
|
||
logging.warning(f"Authentication attempt with invalid token format: {len(access_token)} chars")
|
||
return None
|
||
|
||
user = UserService.query(
|
||
access_token=access_token, status=StatusEnum.VALID.value
|
||
)
|
||
if user:
|
||
if not user[0].access_token or not user[0].access_token.strip():
|
||
logging.warning(f"User {user[0].email} has empty access_token in database")
|
||
return None
|
||
return user[0]
|
||
else:
|
||
return None
|
||
except Exception as e:
|
||
logging.warning(f"load_user got exception {e}")
|
||
return None
|
||
else:
|
||
return None
|
||
|
||
# 创建应用实例
|
||
app = create_app()
|
||
|
||
@app.middleware("http")
|
||
async def db_close_middleware(request, call_next):
|
||
"""数据库连接关闭中间件"""
|
||
try:
|
||
response = await call_next(request)
|
||
return response
|
||
finally:
|
||
close_connection()
|
||
|
||
setup_routes(app)
|