feat(platform): 开源发布 - 初始化 Open AI Canvas

2026-07-22 14:18:14 +08:00
commit aea35896eb
365 changed files with 66410 additions and 0 deletions
--- a/backend/internal/handler/security.go
+++ b/backend/internal/handler/security.go
@@ -0,0 +1,149 @@
+package handler
+
+import (
+	"bytes"
+	"encoding/json"
+	"errors"
+	"io"
+	"mime"
+	"mime/multipart"
+	"net/http"
+	"net/url"
+	"path"
+	"regexp"
+	"strings"
+	"time"
+
+	"infinite-canvas/backend/internal/model"
+	"infinite-canvas/backend/internal/service"
+
+	"github.com/gin-gonic/gin"
+)
+
+const maxSystemProxyBodyBytes int64 = 64 << 20
+
+var (
+	runtimeService      *service.Service
+	geminiGeneratePath  = regexp.MustCompile(`^/models/([^/:]+):(generateContent|streamGenerateContent)$`)
+	openAIPostEndpoints = map[string]bool{
+		"/responses": true, "/chat/completions": true, "/images/generations": true, "/images/edits": true,
+		"/audio/speech": true,
+	}
+)
+
+func ConfigureRuntime(svc *service.Service) {
+	runtimeService = svc
+}
+
+func enforceRateLimit(c *gin.Context, key string, limit int, window time.Duration) bool {
+	if runtimeService == nil {
+		fail(c, http.StatusServiceUnavailable, errors.New("请求协调器尚未初始化"))
+		return false
+	}
+	allowed, err := runtimeService.AllowRequest(c.Request.Context(), key, limit, window)
+	if err != nil {
+		fail(c, http.StatusServiceUnavailable, errors.New("请求协调服务暂时不可用"))
+		return false
+	}
+	if allowed {
+		return true
+	}
+	c.Header("Retry-After", "60")
+	fail(c, http.StatusTooManyRequests, errors.New("请求过于频繁，请稍后再试"))
+	return false
+}
+
+func authorizeSystemProxy(channel *model.ModelChannel, method string, requestPath string, contentType string, body []byte) error {
+	requestPath, err := normalizedProxyPath(requestPath)
+	if err != nil {
+		return err
+	}
+	if method == http.MethodGet && requestPath == "/models" {
+		return nil
+	}
+	if channel.APIFormat == "gemini" {
+		matches := geminiGeneratePath.FindStringSubmatch(requestPath)
+		if method != http.MethodPost || len(matches) != 3 {
+			return errors.New("系统渠道不允许访问该上游接口")
+		}
+		modelName, err := url.PathUnescape(matches[1])
+		if err != nil || !channelAllowsModel(channel, modelName) {
+			return errors.New("当前系统渠道未授权该模型")
+		}
+		return nil
+	}
+	if method != http.MethodPost || !openAIPostEndpoints[requestPath] {
+		return errors.New("系统渠道不允许访问该上游接口")
+	}
+	if channel.InterfaceType != "" && !interfaceAllowsProxyPath(channel.InterfaceType, requestPath) {
+		return errors.New("当前接口类型不允许访问该上游接口")
+	}
+	modelName := proxyRequestModel(contentType, body)
+	if modelName == "" || !channelAllowsModel(channel, modelName) {
+		return errors.New("当前系统渠道未授权该模型")
+	}
+	return nil
+}
+
+func interfaceAllowsProxyPath(interfaceType model.ChannelInterfaceType, requestPath string) bool {
+	switch interfaceType {
+	case model.ChannelInterfaceChatCompletion:
+		return requestPath == "/chat/completions"
+	case model.ChannelInterfaceOpenAIResponse:
+		return requestPath == "/responses"
+	case model.ChannelInterfaceOpenAIImage:
+		return requestPath == "/images/generations" || requestPath == "/images/edits"
+	case model.ChannelInterfaceNewAPIVideo, model.ChannelInterfaceNewAPIChannel1, model.ChannelInterfaceNewAPIChannel2:
+		return false
+	default:
+		return true
+	}
+}
+
+func normalizedProxyPath(value string) (string, error) {
+	decoded, err := url.PathUnescape(value)
+	if err != nil || strings.Contains(decoded, "\\") || strings.Contains(decoded, "\x00") {
+		return "", errors.New("系统渠道请求路径无效")
+	}
+	cleaned := path.Clean("/" + strings.TrimPrefix(decoded, "/"))
+	if cleaned != decoded && cleaned != "/"+strings.TrimPrefix(decoded, "/") {
+		return "", errors.New("系统渠道请求路径无效")
+	}
+	return cleaned, nil
+}
+
+func channelAllowsModel(channel *model.ModelChannel, requested string) bool {
+	requested = strings.TrimPrefix(strings.TrimSpace(requested), "models/")
+	var models []string
+	_ = json.Unmarshal([]byte(channel.ModelsJSON), &models)
+	for _, configured := range models {
+		if strings.TrimPrefix(strings.TrimSpace(configured), "models/") == requested {
+			return true
+		}
+	}
+	return false
+}
+
+func proxyRequestModel(contentType string, body []byte) string {
+	mediaType, params, _ := mime.ParseMediaType(contentType)
+	if strings.HasPrefix(mediaType, "multipart/") {
+		reader := multipart.NewReader(bytes.NewReader(body), params["boundary"])
+		for {
+			part, err := reader.NextPart()
+			if err != nil {
+				return ""
+			}
+			if part.FormName() == "model" {
+				value, _ := io.ReadAll(io.LimitReader(part, 1024))
+				return strings.TrimSpace(string(value))
+			}
+			_ = part.Close()
+		}
+	}
+	var payload map[string]interface{}
+	if json.Unmarshal(body, &payload) != nil {
+		return ""
+	}
+	modelName, _ := payload["model"].(string)
+	return strings.TrimSpace(modelName)
+}