- FastAPI backend with SQLModel, Alembic migrations, AgentScope agents - Next.js 15 frontend with React 19, Tailwind, Zustand, React Flow - Multi-provider AI system (DashScope, Kling, MiniMax, Volcengine, OpenAI, etc.) - All HTTP clients migrated from sync requests to async httpx - Admin-managed API keys via environment variables - SSRF vulnerability fixed in ensure_url()
42 lines
864 B
Python
42 lines
864 B
Python
"""
|
|
认证授权模块
|
|
|
|
提供 JWT Token 认证、OAuth2 集成和 HTTP 轮询状态查询。
|
|
"""
|
|
|
|
from src.auth.jwt import (
|
|
create_access_token,
|
|
create_refresh_token,
|
|
verify_token,
|
|
verify_refresh_token,
|
|
TokenPayload,
|
|
TokenPair,
|
|
)
|
|
from src.auth.dependencies import (
|
|
get_current_user,
|
|
get_current_active_user,
|
|
require_permissions,
|
|
)
|
|
from src.auth.middleware import AuthMiddleware
|
|
from src.auth.models import UserAuth, TokenData, RefreshTokenRequest
|
|
|
|
__all__ = [
|
|
# JWT
|
|
"create_access_token",
|
|
"create_refresh_token",
|
|
"verify_token",
|
|
"verify_refresh_token",
|
|
"TokenPayload",
|
|
"TokenPair",
|
|
# Dependencies
|
|
"get_current_user",
|
|
"get_current_active_user",
|
|
"require_permissions",
|
|
# Middleware
|
|
"AuthMiddleware",
|
|
# Models
|
|
"UserAuth",
|
|
"TokenData",
|
|
"RefreshTokenRequest",
|
|
]
|