RDCA/Incidents-Data-Portal
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

修改SSO

Browse Source
This commit is contained in:
ZhuJW
2026-07-10 21:10:17 +08:00
parent fce40c7d6c
commit 6ebd45d894
14 changed files with 66 additions and 76 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/.env
+2 -1
View File
@@ -13,7 +13,7 @@ JWT_SECRET_KEY=dev_mb_project_2025_xyz123 # 开发环境可随意，生产环
SECRET_KEY=dev_mb_2025_abc789
# 数据库配置
DATABASE_URL=mysql+pymysql://root:Tsystems_2026@150.158.121.95:3306/incident?charset=utf8mb4
DATABASE_URL=mysql+pymysql://root:Tsystems_2026@150.158.121.95:3306/incid_db?charset=utf8mb4
# oauth2配置
CLIENT_ID=A17336FC-A8D7-4CEA-8777-384BFEABABC1
@@ -24,6 +24,7 @@ SS0_HOST = https://ssoalpha.dvb.corpinter.net.cn/
REDIRECT_URL = http://localhost:5221/report
# 用户登录成功后，最终重定向到的前端页面地址
DOMAIN = http://localhost:3001
IMAGE_BASE_URL=http://localhost:5221
# 前端请求头的key
HEADERS_SECRET_KEY=mbincid-server12
backend/app/__init__.py
+1 -1
View File
@@ -74,7 +74,7 @@ def create_app():
domain_prefix='accidentportal/api'
app.register_blueprint(auth_bp, url_prefix=f"/{domain_prefix}/api/auth")
app.register_blueprint(auth_bp, url_prefix=f"/{domain_prefix}/auth")
app.register_blueprint(login_bp, url_prefix=f"/{domain_prefix}/user")
app.register_blueprint(incident_gen5_bp, url_prefix=f"/{domain_prefix}/gen5")
app.register_blueprint(incident_gen6_bp, url_prefix=f"/{domain_prefix}/gen6")
backend/app/blueprints/oauth/routes.py
+2 -2
View File
@@ -84,7 +84,7 @@ def authorized():
decoded_jwt = jwt.decode(access_token, options={"verify_signature": False})
# 5. 验证和清理 state 参数 (防止开放重定向攻击)
safe_state = "/callback"
safe_state = current_app.config["FRONTEND_CALLBACK_PATH"]
print(f"Redirecting to: {DOMAIN}{safe_state}")
# 6. 设置 Cookie
@@ -227,7 +227,7 @@ def authorized_test():
decoded_jwt = jwt.decode(access_token, options={"verify_signature": False})
# 5. 验证和清理 state 参数 (防止开放重定向攻击)
safe_state = "/callback"
safe_state = current_app.config["FRONTEND_CALLBACK_PATH"]
print(f"Redirecting to: {DOMAIN}{safe_state}")
# 6. 设置 Cookie
backend/app/config.py
+6 -2
View File
@@ -51,6 +51,8 @@ class DevelopmentConfig(Config):
SS0_HOST = os.getenv("SS0_HOST","https://ssoalpha.dvb.corpinter.net.cn/")
REDIRECT_URL = os.getenv("REDIRECT_URL","http://localhost:5221/report")
DOMAIN = os.getenv("DOMAIN","http://localhost:3001")
# 前端回调路由（dev 根路径）
FRONTEND_CALLBACK_PATH = os.getenv("FRONTEND_CALLBACK_PATH", "/callback")
# 2. 开发模式开关
DEBUG = True
TESTING = True
@@ -69,8 +71,10 @@ class ProductionConfig(Config):
CLIENT_ID = os.getenv("CLIENT_ID","A17336FC-A8D7-4CEA-8777-384BFEABABC1")
CLIENT_PASSWORD = os.getenv("CLIENT_PASSWORD","U7-C1BZQdL8V5c.z~qA_64SO2l9F3J0o")
SS0_HOST = os.getenv("SS0_HOST","https://ssoalpha.dvb.corpinter.net.cn/")
REDIRECT_URL = os.getenv("REDIRECT_URL","http://localhost:5221/report")
DOMAIN = os.getenv("DOMAIN","http://localhost:3001")
REDIRECT_URL = os.getenv("REDIRECT_URL","https://cadb.dvb.corpinter.net.cn/accidentportal/api/incident/authorized")
DOMAIN = os.getenv("DOMAIN","https://cadb.dvb.corpinter.net.cn")
# 前端回调路由（prod 带域名前缀）
FRONTEND_CALLBACK_PATH = os.getenv("FRONTEND_CALLBACK_PATH", "/accidentportal/callback")
DEBUG = False # 禁用调试（关键！避免生产环境暴露敏感信息）
TESTING = False
backend/prod.env
+25 -17
View File
@@ -1,32 +1,40 @@
# 集群配置
DATABRICKS_TOKEN=dapi188523cfb1cf34ad5a605fd75c5c0d31
CLUSTER_ID=1203-054146-wkjf95i0
DATABRICKS_HOST=https://adb-3035612432650494.2.databricks.azure.cn
# 运行环境（决定加载 ProductionConfig；容器必须以环境变量注入）
FLASK_ENV=production
FLASK_APP=run:app
# gen5 spark表的配置
# Databricks（注意：entrypoint.sh 用的是 DATABRICKS_CLUSTER_ID，config.py 用的是 CLUSTER_ID，两个都给）
DATABRICKS_TOKEN=dapi188523cfb1cf34ad5a605fd75c5c0d31
DATABRICKS_HOST=https://adb-3035612432650494.2.databricks.azure.cn
DATABRICKS_CLUSTER_ID=1203-054146-wkjf95i0
CLUSTER_ID=1203-054146-wkjf95i0
# gen5 spark 表
GEN5_TABLE_NAME=hive_metastore.taf_level_two_plus.accident_report_data
# JWT配置
JWT_SECRET_KEY=dev_mb_project_2025_xyz123 # 开发环境可随意，生产环境需复杂密钥
# 安全密钥（生产请换成强随机值）
JWT_SECRET_KEY=dev_mb_project_2025_xyz123
SECRET_KEY=dev_mb_2025_abc789
# 数据库配置
# 数据库
DATABASE_URL=mysql+pymysql://root:V2OuCHPL%40changeit@10.200.10.193:3306/incid_db?charset=utf8mb4
# oauth2配置
# OAuth2 / SSO
CLIENT_ID=B7E86ADC-A8F7-4462-87FC-A04DFDF3C58F
CLIENT_PASSWORD=AWd408ETS_V~j-yt.763P1D9ovC25fbe
SS0_HOST=https://ssoalpha.dvb.corpinter.net.cn/
# 授权成功后，SSO 服务器重定向回你的应用的地址 (必须与 SSO 服务器上配置的一致)
REDIRECT_URL=http://150.158.236.152:5221/incident/authorized
# 用户登录成功后，最终重定向到的前端页面地址
DOMAIN=http://150.158.236.152:5000
# 图片上传的配置
# SSO 回调地址（必须与 SSO 平台登记的完全一致；经 nginx 反代到后端 /incident/authorized）
REDIRECT_URL=https://cadb.dvb.corpinter.net.cn/accidentportal/api/incident/authorized
# 登录成功后浏览器最终跳转的前端域名
DOMAIN=https://cadb.dvb.corpinter.net.cn
# 前端回调路由（带前缀）
FRONTEND_CALLBACK_PATH=/accidentportal/callback
# 图片上传
UPLOAD_FOLDER=/app/uploads
MAX_CONTENT_LENGTH=5242880
IMAGE_BASE_URL=http://150.158.236.152:5221
IMAGE_BASE_URL=https://cadb.dvb.corpinter.net.cn/accidentportal
# 前端请求头的key
# 前端请求头 key
HEADERS_SECRET_KEY=mbincid-server12