a0f025aa96
新增 internal/logging，slog、标准库 log、GORM 与 Gin 访问日志共用同一 Handler，由 CANVAS_LOG_LEVEL / CANVAS_LOG_FORMAT 控制。info 级别不再输出成功的查询类请求、成功 SQL、message_end 等 Agent 流式事件和常规画布自动保存；4xx/5xx、慢请求、慢 SQL、SQL 失败与 panic 仍会记录，SQL 不内联参数值。
793 lines
22 KiB
Go
793 lines
22 KiB
Go
package handler
|
|
|
|
import (
|
|
"bytes"
|
|
"compress/gzip"
|
|
"encoding/json"
|
|
"errors"
|
|
"fmt"
|
|
"log/slog"
|
|
"net/http"
|
|
"strconv"
|
|
"strings"
|
|
"time"
|
|
|
|
"infinite-canvas/backend/internal/model"
|
|
"infinite-canvas/backend/internal/service"
|
|
|
|
"github.com/gin-gonic/gin"
|
|
)
|
|
|
|
func RegisterUserDataRoutes(r *gin.RouterGroup, svc *service.Service) {
|
|
r.POST("/resources/access", func(c *gin.Context) {
|
|
user, err := currentUser(c, svc)
|
|
if err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
c.Request.Body = http.MaxBytesReader(c.Writer, c.Request.Body, 64<<10)
|
|
var req []service.ResourceAccessRequest
|
|
if err := c.ShouldBindJSON(&req); err != nil {
|
|
fail(c, http.StatusBadRequest, err)
|
|
return
|
|
}
|
|
result, err := svc.ResourceAccessBatch(user.ID, req)
|
|
if err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
ok(c, gin.H{"items": result})
|
|
})
|
|
r.POST("/assets/batch-delete", func(c *gin.Context) {
|
|
user, err := currentUser(c, svc)
|
|
if err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
c.Request.Body = http.MaxBytesReader(c.Writer, c.Request.Body, 256<<10)
|
|
var ids []string
|
|
if err := c.ShouldBindJSON(&ids); err != nil {
|
|
fail(c, http.StatusBadRequest, err)
|
|
return
|
|
}
|
|
if err := svc.PurgeUserAssets(user.ID, ids); err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
ok(c, gin.H{"ids": ids})
|
|
})
|
|
r.POST("/assets/batch", func(c *gin.Context) {
|
|
user, err := currentUser(c, svc)
|
|
if err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
c.Request.Body = http.MaxBytesReader(c.Writer, c.Request.Body, 16<<10)
|
|
var req struct {
|
|
IDs []string `json:"ids"`
|
|
}
|
|
if err := c.ShouldBindJSON(&req); err != nil {
|
|
fail(c, http.StatusBadRequest, err)
|
|
return
|
|
}
|
|
assets, err := svc.UserAssetsByIDs(user.ID, req.IDs)
|
|
if err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
ok(c, gin.H{"assets": assets})
|
|
})
|
|
r.GET("/settings/prompt-templates", func(c *gin.Context) {
|
|
user, err := currentUser(c, svc)
|
|
if err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
preferences, err := svc.UserPromptPreferences(user)
|
|
if err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
ok(c, gin.H{"preferences": preferences})
|
|
})
|
|
r.PATCH("/settings/prompt-templates/:operation", func(c *gin.Context) {
|
|
user, err := currentUser(c, svc)
|
|
if err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
c.Request.Body = http.MaxBytesReader(c.Writer, c.Request.Body, 64<<10)
|
|
var req service.UserPromptCustomizationRequest
|
|
if err := c.ShouldBindJSON(&req); err != nil {
|
|
fail(c, http.StatusBadRequest, err)
|
|
return
|
|
}
|
|
customization, err := svc.UpdateUserPromptCustomization(user, c.Param("operation"), req)
|
|
if err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
ok(c, gin.H{"customization": customization})
|
|
})
|
|
r.DELETE("/settings/prompt-templates/:operation", func(c *gin.Context) {
|
|
user, err := currentUser(c, svc)
|
|
if err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
if err := svc.ResetUserPromptCustomization(user, c.Param("operation")); err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
ok(c, gin.H{"ok": true})
|
|
})
|
|
r.GET("/settings/oss", func(c *gin.Context) {
|
|
user, err := currentUser(c, svc)
|
|
if err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
setting, err := svc.UserOSSSetting(user)
|
|
if err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
ok(c, gin.H{"setting": setting})
|
|
})
|
|
r.PATCH("/settings/oss", func(c *gin.Context) {
|
|
user, err := currentUser(c, svc)
|
|
if err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
c.Request.Body = http.MaxBytesReader(c.Writer, c.Request.Body, 64<<10)
|
|
var req service.OSSSettingRequest
|
|
if err := c.ShouldBindJSON(&req); err != nil {
|
|
fail(c, http.StatusBadRequest, err)
|
|
return
|
|
}
|
|
setting, err := svc.UpdateUserOSSSetting(user, req)
|
|
if err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
ok(c, gin.H{"setting": setting})
|
|
})
|
|
r.POST("/settings/oss/test", func(c *gin.Context) {
|
|
user, err := currentUser(c, svc)
|
|
if err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
if !enforceRateLimit(c, "user-storage-test:"+user.ID, 6, time.Minute) {
|
|
return
|
|
}
|
|
c.Request.Body = http.MaxBytesReader(c.Writer, c.Request.Body, 64<<10)
|
|
var req service.OSSSettingRequest
|
|
if err := c.ShouldBindJSON(&req); err != nil {
|
|
fail(c, http.StatusBadRequest, err)
|
|
return
|
|
}
|
|
result, err := svc.TestUserOSSSetting(user, req)
|
|
if err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
ok(c, result)
|
|
})
|
|
r.GET("/resources", func(c *gin.Context) {
|
|
user, err := currentUser(c, svc)
|
|
if err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
pageSize, err := parsePositiveQueryInt(c.Query("pageSize"), 200)
|
|
if err != nil {
|
|
fail(c, http.StatusBadRequest, err)
|
|
return
|
|
}
|
|
resources, err := svc.Resources(user.ID, pageSize)
|
|
if err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
ok(c, gin.H{"resources": resources})
|
|
})
|
|
r.GET("/resources/storage-usage", func(c *gin.Context) {
|
|
user, err := currentUser(c, svc)
|
|
if err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
usage, err := svc.AccountFileStorageUsage(user.ID)
|
|
if err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
ok(c, gin.H{"usage": usage})
|
|
})
|
|
r.POST("/resources/:id/ark-private-asset", func(c *gin.Context) {
|
|
user, err := currentUser(c, svc)
|
|
if err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
policy, available := loadRuntimePolicy(c, svc)
|
|
if !available || !enforceRateLimit(c, "resources-ark-private-asset:"+user.ID, policy.Request.ResourceImportPerMinute, time.Minute) {
|
|
return
|
|
}
|
|
result, err := svc.SyncResourceToArkPrivateAsset(c.Request.Context(), user, c.Param("id"))
|
|
if err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
ok(c, gin.H{"sync": result})
|
|
})
|
|
r.POST("/resources", func(c *gin.Context) {
|
|
user, err := currentUser(c, svc)
|
|
if err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
policy, available := loadRuntimePolicy(c, svc)
|
|
if !available || !enforceRateLimit(c, "resources-upload:"+user.ID, policy.Request.ResourceUploadPerMinute, time.Minute) {
|
|
return
|
|
}
|
|
c.Request.Body = http.MaxBytesReader(c.Writer, c.Request.Body, (policy.Resource.ResourceUploadMB<<20)+(1<<20))
|
|
file, err := c.FormFile("file")
|
|
if err != nil {
|
|
var maxErr *http.MaxBytesError
|
|
if errors.As(err, &maxErr) {
|
|
// 超 MaxBytesReader 上限时 FormFile 返回英文 http 错误，转成与 service 配额校验一致的中文文案。
|
|
fail(c, http.StatusBadRequest, fmt.Errorf("单个上传文件必须小于 %dMB", policy.Resource.ResourceUploadMB))
|
|
return
|
|
}
|
|
fail(c, http.StatusBadRequest, err)
|
|
return
|
|
}
|
|
width, _ := strconv.Atoi(c.PostForm("width"))
|
|
height, _ := strconv.Atoi(c.PostForm("height"))
|
|
durationMs, _ := strconv.ParseInt(c.PostForm("durationMs"), 10, 64)
|
|
resource, err := svc.UploadResource(user.ID, file, c.PostForm("kind"), width, height, durationMs, c.GetHeader("X-Idempotency-Key"))
|
|
if err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
ok(c, gin.H{"resource": resource})
|
|
})
|
|
r.POST("/resources/import", func(c *gin.Context) {
|
|
user, err := currentUser(c, svc)
|
|
if err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
policy, available := loadRuntimePolicy(c, svc)
|
|
if !available || !enforceRateLimit(c, "resources-import:"+user.ID, policy.Request.ResourceImportPerMinute, time.Minute) {
|
|
return
|
|
}
|
|
c.Request.Body = http.MaxBytesReader(c.Writer, c.Request.Body, 64<<10)
|
|
var req struct {
|
|
URL string `json:"url"`
|
|
Kind string `json:"kind"`
|
|
Width int `json:"width"`
|
|
Height int `json:"height"`
|
|
DurationMs int64 `json:"durationMs"`
|
|
}
|
|
if err := c.ShouldBindJSON(&req); err != nil {
|
|
fail(c, http.StatusBadRequest, err)
|
|
return
|
|
}
|
|
resource, err := svc.ImportResourceURL(user.ID, req.URL, req.Kind, req.Width, req.Height, req.DurationMs, c.GetHeader("X-Idempotency-Key"))
|
|
if err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
ok(c, gin.H{"resource": resource})
|
|
})
|
|
r.GET("/resources/:id", func(c *gin.Context) {
|
|
user, err := currentUser(c, svc)
|
|
if err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
resource, err := svc.Resource(user.ID, c.Param("id"))
|
|
if err != nil {
|
|
fail(c, http.StatusNotFound, err)
|
|
return
|
|
}
|
|
ok(c, gin.H{"resource": resource})
|
|
})
|
|
r.GET("/resources/:id/file", func(c *gin.Context) {
|
|
user, err := currentUser(c, svc)
|
|
if err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
options := resourceAccessOptions(c)
|
|
delivery, err := svc.PrepareResourceDelivery(user.ID, c.Param("id"), options, c.GetHeader("Range"))
|
|
if err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
serveResourceDelivery(c, delivery, "private, no-cache", "")
|
|
})
|
|
publicResourceHandler := func(c *gin.Context) {
|
|
options := resourceAccessOptions(c)
|
|
delivery, err := svc.PreparePublicResourceDelivery(c.Param("id"), c.Query("expires"), c.Query("signature"), options, c.GetHeader("Range"))
|
|
if err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
serveResourceDelivery(c, delivery, "public, max-age=0, must-revalidate", "")
|
|
}
|
|
r.GET("/public/resources/:id/file", publicResourceHandler)
|
|
r.GET("/public/resources/:id/file/:filename", publicResourceHandler)
|
|
r.GET("/assets", func(c *gin.Context) {
|
|
user, err := currentUser(c, svc)
|
|
if err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
if _, paged := c.GetQuery("page"); paged || hasUserAssetPageFilters(c) {
|
|
page, pageSize, pageErr := parsePaginationQuery(c, 40)
|
|
if pageErr != nil {
|
|
fail(c, http.StatusBadRequest, pageErr)
|
|
return
|
|
}
|
|
var folderID *string
|
|
if value, present := c.GetQuery("folderId"); present {
|
|
folderID = &value
|
|
}
|
|
assets, pageErr := svc.UserAssetsPage(user.ID, page, pageSize, service.UserAssetPageFilter{
|
|
Kind: c.Query("kind"), Category: c.Query("category"), FolderID: folderID,
|
|
Uncategorized: c.Query("uncategorized") == "1", Status: c.Query("status"), Query: c.Query("q"),
|
|
})
|
|
if pageErr != nil {
|
|
failService(c, pageErr)
|
|
return
|
|
}
|
|
ok(c, assets)
|
|
return
|
|
}
|
|
assets, err := svc.UserAssetSummaries(user.ID)
|
|
if err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
ok(c, gin.H{"assets": assets})
|
|
})
|
|
r.GET("/asset-folders", func(c *gin.Context) {
|
|
user, err := currentUser(c, svc)
|
|
if err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
folders, err := svc.AssetFolders(user.ID)
|
|
if err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
ok(c, gin.H{"folders": folders})
|
|
})
|
|
r.POST("/asset-folders", func(c *gin.Context) {
|
|
user, err := currentUser(c, svc)
|
|
if err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
var req service.CreateAssetFolderRequest
|
|
if err := c.ShouldBindJSON(&req); err != nil {
|
|
fail(c, http.StatusBadRequest, err)
|
|
return
|
|
}
|
|
folder, err := svc.CreateAssetFolder(user.ID, req)
|
|
if err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
ok(c, gin.H{"folder": folder})
|
|
})
|
|
r.PATCH("/asset-folders/:id", func(c *gin.Context) {
|
|
user, err := currentUser(c, svc)
|
|
if err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
var req service.UpdateAssetFolderRequest
|
|
if err := c.ShouldBindJSON(&req); err != nil {
|
|
fail(c, http.StatusBadRequest, err)
|
|
return
|
|
}
|
|
folder, err := svc.UpdateAssetFolder(user.ID, c.Param("id"), req)
|
|
if err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
ok(c, gin.H{"folder": folder})
|
|
})
|
|
r.DELETE("/asset-folders/:id", func(c *gin.Context) {
|
|
user, err := currentUser(c, svc)
|
|
if err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
if err := svc.DeleteAssetFolder(user.ID, c.Param("id")); err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
ok(c, gin.H{"id": c.Param("id")})
|
|
})
|
|
r.PATCH("/assets/folder", func(c *gin.Context) {
|
|
user, err := currentUser(c, svc)
|
|
if err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
var req service.MoveUserAssetsRequest
|
|
if err := c.ShouldBindJSON(&req); err != nil {
|
|
fail(c, http.StatusBadRequest, err)
|
|
return
|
|
}
|
|
if err := svc.MoveUserAssetsToFolder(user.ID, req); err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
ok(c, gin.H{"assetIds": req.AssetIDs, "folderId": req.FolderID})
|
|
})
|
|
r.GET("/user-data/snapshot", func(c *gin.Context) {
|
|
user, err := currentUser(c, svc)
|
|
if err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
snapshot, err := svc.UserDataSnapshot(user.ID)
|
|
if err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
ok(c, snapshot)
|
|
})
|
|
r.GET("/assets/:id", func(c *gin.Context) {
|
|
user, err := currentUser(c, svc)
|
|
if err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
asset, err := svc.UserAsset(user.ID, c.Param("id"))
|
|
if err != nil {
|
|
fail(c, http.StatusNotFound, err)
|
|
return
|
|
}
|
|
ok(c, gin.H{"asset": asset})
|
|
})
|
|
r.PUT("/assets/:id", func(c *gin.Context) {
|
|
user, err := currentUser(c, svc)
|
|
if err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
policy, available := loadRuntimePolicy(c, svc)
|
|
if !available || !enforceRateLimit(c, "assets-write:"+user.ID, policy.Request.AssetWritePerMinute, time.Minute) {
|
|
return
|
|
}
|
|
c.Request.Body = http.MaxBytesReader(c.Writer, c.Request.Body, 5<<20)
|
|
var req struct {
|
|
Asset json.RawMessage `json:"asset"`
|
|
}
|
|
if err := c.ShouldBindJSON(&req); err != nil {
|
|
fail(c, http.StatusBadRequest, err)
|
|
return
|
|
}
|
|
var identity struct {
|
|
ID string `json:"id"`
|
|
}
|
|
if json.Unmarshal(req.Asset, &identity) != nil || identity.ID != c.Param("id") {
|
|
fail(c, http.StatusBadRequest, service.BadAuthRequest("素材 ID 与请求路径不一致"))
|
|
return
|
|
}
|
|
asset, err := svc.UpsertUserAsset(user.ID, req.Asset)
|
|
if err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
ok(c, gin.H{"asset": asset})
|
|
})
|
|
r.DELETE("/assets/:id", func(c *gin.Context) {
|
|
user, err := currentUser(c, svc)
|
|
if err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
if err := svc.PurgeUserAsset(user.ID, c.Param("id")); err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
ok(c, gin.H{"id": c.Param("id")})
|
|
})
|
|
r.GET("/canvas-projects", func(c *gin.Context) {
|
|
user, err := currentUser(c, svc)
|
|
if err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
if c.Query("page") != "" {
|
|
page, pageSize, pageErr := parsePaginationQuery(c, 40)
|
|
if pageErr != nil {
|
|
fail(c, http.StatusBadRequest, pageErr)
|
|
return
|
|
}
|
|
result, pageErr := svc.UserCanvasProjectsPage(user.ID, page, pageSize, c.Query("projectId"), c.Query("q"), c.Query("sort"))
|
|
if pageErr != nil {
|
|
failService(c, pageErr)
|
|
return
|
|
}
|
|
ok(c, result)
|
|
return
|
|
}
|
|
projects, err := svc.UserCanvasProjectSummaries(user.ID)
|
|
if err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
ok(c, gin.H{"projects": projects})
|
|
})
|
|
r.GET("/canvas-projects/:id", func(c *gin.Context) {
|
|
user, err := currentUser(c, svc)
|
|
if err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
metadata, err := svc.UserCanvasProjectMetadata(user.ID, c.Param("id"))
|
|
if err != nil {
|
|
fail(c, http.StatusNotFound, err)
|
|
return
|
|
}
|
|
etag := canvasProjectResponseETag(metadata)
|
|
c.Header("ETag", etag)
|
|
c.Header("Cache-Control", "private, no-cache")
|
|
addVaryHeader(c, "Accept-Encoding")
|
|
if ifNoneMatch(c.GetHeader("If-None-Match"), etag) {
|
|
c.Status(http.StatusNotModified)
|
|
return
|
|
}
|
|
project, err := svc.UserCanvasProject(user.ID, c.Param("id"))
|
|
if err != nil {
|
|
fail(c, http.StatusNotFound, err)
|
|
return
|
|
}
|
|
okCanvasProject(c, project)
|
|
})
|
|
r.GET("/canvas-projects/:id/history", func(c *gin.Context) {
|
|
user, err := currentUser(c, svc)
|
|
if err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
result, err := svc.CanvasHistory(user.ID, c.Param("id"))
|
|
if err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
ok(c, result)
|
|
})
|
|
r.GET("/canvas-projects/:id/history/:snapshotId", func(c *gin.Context) {
|
|
user, err := currentUser(c, svc)
|
|
if err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
snapshot, err := svc.CanvasHistorySnapshot(user.ID, c.Param("id"), c.Param("snapshotId"))
|
|
if err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
ok(c, gin.H{"snapshot": snapshot, "project": json.RawMessage(snapshot.PayloadJSON)})
|
|
})
|
|
r.POST("/canvas-projects/:id/history/:snapshotId/restore", func(c *gin.Context) {
|
|
user, err := currentUser(c, svc)
|
|
if err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
policy, available := loadRuntimePolicy(c, svc)
|
|
if !available || !enforceRateLimit(c, "canvas-write:"+user.ID, policy.Request.CanvasWritePerMinute, time.Minute) {
|
|
return
|
|
}
|
|
c.Request.Body = http.MaxBytesReader(c.Writer, c.Request.Body, 1024)
|
|
var req struct {
|
|
Revision *int64 `json:"revision"`
|
|
}
|
|
if err := c.ShouldBindJSON(&req); err != nil {
|
|
fail(c, http.StatusBadRequest, service.BadAuthRequest("恢复请求格式错误"))
|
|
return
|
|
}
|
|
project, err := svc.RestoreCanvasHistory(user.ID, c.Param("id"), c.Param("snapshotId"), req.Revision)
|
|
if err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
slog.Info("canvas_restore", "request_id", RequestID(c), "trace_id", TraceID(c), "actor", user.ID, "canvas", c.Param("id"), "snapshot", c.Param("snapshotId"), "base_revision", *req.Revision, "revision", project.Revision)
|
|
ok(c, gin.H{"project": project})
|
|
})
|
|
r.PUT("/canvas-projects/:id", func(c *gin.Context) {
|
|
user, err := currentUser(c, svc)
|
|
if err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
policy, available := loadRuntimePolicy(c, svc)
|
|
if !available || !enforceRateLimit(c, "canvas-write:"+user.ID, policy.Request.CanvasWritePerMinute, time.Minute) {
|
|
return
|
|
}
|
|
c.Request.Body = http.MaxBytesReader(c.Writer, c.Request.Body, 5<<20)
|
|
var req struct {
|
|
Project json.RawMessage `json:"project"`
|
|
RepairMissingResources bool `json:"repairMissingResources"`
|
|
}
|
|
if err := c.ShouldBindJSON(&req); err != nil {
|
|
fail(c, http.StatusBadRequest, err)
|
|
return
|
|
}
|
|
var identity struct {
|
|
ID string `json:"id"`
|
|
}
|
|
if json.Unmarshal(req.Project, &identity) != nil || identity.ID != c.Param("id") {
|
|
fail(c, http.StatusBadRequest, service.BadAuthRequest("画布 ID 与请求路径不一致"))
|
|
return
|
|
}
|
|
var audit struct {
|
|
Revision *int64 `json:"revision"`
|
|
Nodes []json.RawMessage `json:"nodes"`
|
|
Connections []json.RawMessage `json:"connections"`
|
|
}
|
|
_ = json.Unmarshal(req.Project, &audit)
|
|
baseRevision := int64(-1)
|
|
if audit.Revision != nil {
|
|
baseRevision = *audit.Revision
|
|
}
|
|
var project service.UserDataSummary
|
|
if req.RepairMissingResources {
|
|
project, err = svc.RepairUserCanvasProject(user.ID, req.Project)
|
|
} else {
|
|
project, err = svc.UpsertUserCanvasProject(user.ID, req.Project)
|
|
}
|
|
defer func() {
|
|
nodesBefore, nodesAfter := -1, len(audit.Nodes)
|
|
if project.SaveAudit != nil {
|
|
nodesBefore, nodesAfter = project.SaveAudit.NodesBefore, project.SaveAudit.NodesAfter
|
|
}
|
|
// Metadata only: never log prompts, media URLs, cookies, or the canvas payload.
|
|
// 自动保存非常频繁：常规保存只在 debug 输出；节点减少（可能丢数据）或保存失败才提升级别。
|
|
level := slog.LevelDebug
|
|
switch {
|
|
case c.Writer.Status() >= http.StatusBadRequest:
|
|
level = slog.LevelWarn
|
|
case nodesBefore >= 0 && nodesAfter < nodesBefore:
|
|
level = slog.LevelInfo
|
|
}
|
|
slog.Log(c.Request.Context(), level, "canvas_save", "request_id", RequestID(c), "trace_id", TraceID(c), "actor", user.ID, "canvas", identity.ID, "base_revision", baseRevision, "revision", project.Revision, "nodes_before", nodesBefore, "nodes_after", nodesAfter, "connections", len(audit.Connections), "status", c.Writer.Status())
|
|
}()
|
|
if err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
ok(c, gin.H{"project": project})
|
|
})
|
|
r.DELETE("/canvas-projects/:id", func(c *gin.Context) {
|
|
user, err := currentUser(c, svc)
|
|
if err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
if err := svc.DeleteUserCanvasProject(user.ID, c.Param("id")); err != nil {
|
|
failService(c, err)
|
|
return
|
|
}
|
|
ok(c, gin.H{"id": c.Param("id")})
|
|
})
|
|
}
|
|
|
|
func hasUserAssetPageFilters(c *gin.Context) bool {
|
|
for _, key := range []string{"pageSize", "kind", "category", "folderId", "uncategorized", "status", "q"} {
|
|
if _, present := c.GetQuery(key); present {
|
|
return true
|
|
}
|
|
}
|
|
return false
|
|
}
|
|
|
|
func okCanvasProject(c *gin.Context, project json.RawMessage) {
|
|
payload, err := json.Marshal(gin.H{
|
|
"code": service.CodeOK,
|
|
"data": gin.H{"project": project},
|
|
"msg": "ok",
|
|
})
|
|
if err != nil {
|
|
failInternal(c, http.StatusInternalServerError, err)
|
|
return
|
|
}
|
|
if len(payload) >= 1024 && acceptsGzip(c.GetHeader("Accept-Encoding")) {
|
|
var compressed bytes.Buffer
|
|
writer, err := gzip.NewWriterLevel(&compressed, gzip.BestSpeed)
|
|
if err != nil {
|
|
failInternal(c, http.StatusInternalServerError, err)
|
|
return
|
|
}
|
|
_, writeErr := writer.Write(payload)
|
|
closeErr := writer.Close()
|
|
if writeErr != nil || closeErr != nil {
|
|
failInternal(c, http.StatusInternalServerError, errors.Join(writeErr, closeErr))
|
|
return
|
|
}
|
|
c.Header("Content-Encoding", "gzip")
|
|
c.Header("Content-Length", strconv.Itoa(compressed.Len()))
|
|
c.Data(http.StatusOK, "application/json; charset=utf-8", compressed.Bytes())
|
|
return
|
|
}
|
|
c.Data(http.StatusOK, "application/json; charset=utf-8", payload)
|
|
}
|
|
|
|
func acceptsGzip(header string) bool {
|
|
wildcardAccepted := false
|
|
for _, item := range strings.Split(header, ",") {
|
|
parts := strings.Split(item, ";")
|
|
encoding := strings.TrimSpace(strings.ToLower(parts[0]))
|
|
accepted := true
|
|
for _, parameter := range parts[1:] {
|
|
name, value, found := strings.Cut(strings.TrimSpace(parameter), "=")
|
|
if found && strings.EqualFold(strings.TrimSpace(name), "q") {
|
|
quality, err := strconv.ParseFloat(strings.TrimSpace(value), 64)
|
|
accepted = err == nil && quality > 0
|
|
}
|
|
}
|
|
if encoding == "gzip" {
|
|
return accepted
|
|
}
|
|
if encoding == "*" {
|
|
wildcardAccepted = accepted
|
|
}
|
|
}
|
|
return wildcardAccepted
|
|
}
|
|
|
|
func addVaryHeader(c *gin.Context, value string) {
|
|
for _, existing := range c.Writer.Header().Values("Vary") {
|
|
for _, token := range strings.Split(existing, ",") {
|
|
if strings.EqualFold(strings.TrimSpace(token), value) {
|
|
return
|
|
}
|
|
}
|
|
}
|
|
c.Header("Vary", strings.Join(append(c.Writer.Header().Values("Vary"), value), ", "))
|
|
}
|
|
|
|
func canvasProjectResponseETag(project *model.CanvasProject) string {
|
|
return `W/` + strconv.Quote(fmt.Sprintf("canvas-%d", project.Revision))
|
|
}
|
|
|
|
func resourceResponseETag(resource *model.Resource) string {
|
|
value := strings.Trim(strings.TrimSpace(resource.ETag), `"`)
|
|
if value == "" {
|
|
value = fmt.Sprintf("%s-%d-%d", resource.ID, resource.Size, resource.UpdatedAt.UnixNano())
|
|
}
|
|
return strconv.Quote(value)
|
|
}
|
|
|
|
func ifNoneMatch(header string, etag string) bool {
|
|
normalize := func(value string) string {
|
|
value = strings.TrimSpace(value)
|
|
if len(value) >= 2 && strings.EqualFold(value[:2], "W/") {
|
|
return strings.TrimSpace(value[2:])
|
|
}
|
|
return value
|
|
}
|
|
etag = normalize(etag)
|
|
for _, candidate := range strings.Split(header, ",") {
|
|
candidate = normalize(candidate)
|
|
if candidate == "*" || candidate == etag {
|
|
return true
|
|
}
|
|
}
|
|
return false
|
|
}
|