鉴权：仅凭 X-Internal-Token（与容器 AIIMAGE_INTERNAL_TOKEN / 宿主机 + * ~/.aiimage/internal-token 同值）。/api/internal 前缀不在 AdminApiGuardFilter + * 的兜底名单内，controller 必须自校验令牌——18080 公网可达，漏校验即匿名泄露 + * 用户代理密钥。 + * + *
日志不落明文；proxyUrl 为空串表示该用户未配置代理（调用方退化为直连）。
+ */
+@RestController
+@RequiredArgsConstructor
+@Slf4j
+@RequestMapping("/api/internal")
+@Tag(name = "内部接口", description = "服务间调用（X-Internal-Token 鉴权）。")
+public class InternalUserProxyController {
+
+ private final UserApiSecretService userApiSecretService;
+ private final AdminAuthSupport adminAuthSupport;
+
+ @GetMapping("/user-proxy")
+ @Operation(summary = "按 uid 取用户代理提取链接",
+ description = "明文返回该用户的代理提取链接（仅内部令牌可调）；未配置返回空串。")
+ public ApiResponse 2026-09-13 修复：旧实现把提取链接直接交给 HttpClientPool 当静态代理使用，链接无
+ * 显式端口时解析失败会静默回退直连，探测到的是自家站点的直连响应——40 个用户全部
+ * 「假通过」（3-39ms + HTTP 301），余额不足 / 链接失效都测不出来。
*/
private CheckOutcome probeProxy(String proxyUrl) {
String normalized = proxyUrl == null ? "" : proxyUrl.trim();
@@ -105,31 +118,131 @@ public class UserApiSecretCheckService {
return new CheckOutcome(STATUS_FAILED, CODE_INVALID_KEY, "代理地址为空，请重新配置", null, true);
}
long startMillis = System.currentTimeMillis();
+
+ // 纯静态代理地址：直接经它探测（兼容旧配置）
+ if (looksLikeStaticProxy(normalized)) {
+ return probeThroughProxy(normalized, startMillis);
+ }
+
+ // 提取链接：先真实提取一次
+ String body;
+ try {
+ body = clientFor(null).get().uri(normalized).retrieve().body(String.class);
+ } catch (Exception ex) {
+ long latency = System.currentTimeMillis() - startMillis;
+ log.warn("[user-secret][check] 代理提取接口不可达 latency={}ms err={}", latency, ex.getMessage());
+ return new CheckOutcome(STATUS_FAILED, CODE_NETWORK_ERROR,
+ "代理提取接口不可达：" + rootCauseMessage(ex), (int) latency, false);
+ }
+ long extractLatency = System.currentTimeMillis() - startMillis;
+ if (isInsufficientBalance(body)) {
+ log.warn("[user-secret][check] 代理提取被拒：供应商余额不足 latency={}ms", extractLatency);
+ return new CheckOutcome(STATUS_FAILED, CODE_INSUFFICIENT_BALANCE,
+ INSUFFICIENT_BALANCE_MESSAGE, (int) extractLatency, false);
+ }
+ String extractedProxyUrl = extractProxyUrlFromBody(body);
+ if (extractedProxyUrl == null) {
+ log.warn("[user-secret][check] 代理提取响应未解析出 IP，响应前 150 字={}", abbreviate(body, 150));
+ return new CheckOutcome(STATUS_FAILED, CODE_INVALID_KEY,
+ "链接未返回可用 IP，请检查代理提取配置", (int) extractLatency, false);
+ }
+ return probeThroughProxy(extractedProxyUrl, startMillis);
+ }
+
+ /** 经指定代理请求自家域名：任意 HTTP 响应即转发可用；407 为代理自身认证失败；网络异常不可达。 */
+ private CheckOutcome probeThroughProxy(String proxyUrl, long startMillis) {
try {
RestClient client = RestClient.builder()
- .requestFactory(HttpClientPool.requestFactory(PROXY_READ_TIMEOUT_MILLIS, normalized))
+ .requestFactory(HttpClientPool.requestFactory(PROXY_READ_TIMEOUT_MILLIS, proxyUrl))
.build();
int statusCode = client.get()
.uri(PROXY_PROBE_TARGET_URL)
.exchange((request, response) -> response.getStatusCode().value());
long latency = System.currentTimeMillis() - startMillis;
if (statusCode == 407) {
+ log.warn("[user-secret][check] 代理认证失败（407） latency={}ms", latency);
return new CheckOutcome(STATUS_FAILED, CODE_FORBIDDEN,
"代理认证失败（407），请检查代理账号密码", (int) latency, true);
}
- CheckOutcome outcome = new CheckOutcome(STATUS_PASSED, CODE_OK,
- "代理连通正常（HTTP " + statusCode + "）", (int) latency, true);
log.info("[user-secret][check] 代理探测完成 status=passed code=ok httpStatus={} latency={}ms",
statusCode, latency);
- return outcome;
+ return new CheckOutcome(STATUS_PASSED, CODE_OK,
+ "代理可用（HTTP " + statusCode + "）", (int) latency, true);
} catch (Exception ex) {
long latency = System.currentTimeMillis() - startMillis;
- log.warn("[user-secret][check] 代理探测异常 latency={}ms err={}", latency, ex.getMessage());
+ log.warn("[user-secret][check] 代理转发失败 latency={}ms err={}", latency, ex.getMessage());
return new CheckOutcome(STATUS_FAILED, CODE_NETWORK_ERROR,
- "代理不可达：" + rootCauseMessage(ex), (int) latency, true);
+ "代理转发失败：" + rootCauseMessage(ex), (int) latency, true);
}
}
+ /** 纯静态代理形态判定：http(s)://[user:pass@]host:port 且无 path/query。 */
+ static boolean looksLikeStaticProxy(String url) {
+ try {
+ URI uri = URI.create(url.trim());
+ if (uri.getHost() == null || uri.getHost().isBlank() || uri.getPort() <= 0) {
+ return false;
+ }
+ String path = uri.getPath();
+ boolean blankPath = path == null || path.isEmpty() || "/".equals(path);
+ return blankPath && uri.getQuery() == null;
+ } catch (Exception ex) {
+ return false;
+ }
+ }
+
+ /** 提取响应解析：JSON data.list[0] 的 ip/port（账密可选）优先，正文 ip:port 正则兜底。 */
+ String extractProxyUrlFromBody(String body) {
+ String text = body == null ? "" : body.trim();
+ if (text.isEmpty()) {
+ return null;
+ }
+ if (text.charAt(0) == '{' || text.charAt(0) == '[') {
+ JsonNode root = parseJson(text);
+ if (root != null) {
+ JsonNode list = root.path("data").path("list");
+ if (list.isArray() && list.size() > 0) {
+ JsonNode first = list.get(0);
+ String ip = text(first.get("ip"));
+ String port = text(first.get("port"));
+ if (ip != null && !ip.isBlank() && port != null && !port.isBlank()) {
+ String account = text(first.get("account"));
+ String password = text(first.get("password"));
+ if (account != null && !account.isBlank() && password != null && !password.isBlank()) {
+ return "http://" + account + ":" + password + "@" + ip + ":" + port;
+ }
+ return "http://" + ip + ":" + port;
+ }
+ }
+ }
+ }
+ Matcher matcher = IP_PORT_PATTERN.matcher(text);
+ if (matcher.find()) {
+ return "http://" + matcher.group(1) + ":" + matcher.group(2);
+ }
+ return null;
+ }
+
+ /** 提取响应是否表明供应商欠费（如 jikip {"code":-1,"data":null,"message":"余额不足"}）。 */
+ boolean isInsufficientBalance(String body) {
+ String text = body == null ? "" : body.trim();
+ if (text.isEmpty()) {
+ return false;
+ }
+ JsonNode root = parseJson(text);
+ if (root != null && root.isObject()) {
+ String message = root.path("message").asText("");
+ if (message.contains("余额不足")) {
+ return true;
+ }
+ JsonNode code = root.get("code");
+ if (code != null && !code.isNull() && code.asDouble(Double.NaN) == -1D) {
+ return true;
+ }
+ }
+ return text.contains("余额不足");
+ }
+
private CheckOutcome probeOnce(UserSecretModule module, String plainApiKey, String proxyUrl, boolean viaProxy) {
UserSecretModule.LlmTarget target = module.resolveLlmTarget(appearancePatentProperties, similarAsinProperties);
String url = joinUrl(target.host(), "/v1/chat/completions");
diff --git a/backend-java/src/test/java/com/nanri/aiimage/modules/usersecret/controller/InternalUserProxyControllerTest.java b/backend-java/src/test/java/com/nanri/aiimage/modules/usersecret/controller/InternalUserProxyControllerTest.java
new file mode 100644
index 00000000..e2ff32dd
--- /dev/null
+++ b/backend-java/src/test/java/com/nanri/aiimage/modules/usersecret/controller/InternalUserProxyControllerTest.java
@@ -0,0 +1,76 @@
+package com.nanri.aiimage.modules.usersecret.controller;
+
+import com.nanri.aiimage.common.api.ApiResponse;
+import com.nanri.aiimage.common.exception.BusinessException;
+import com.nanri.aiimage.modules.admin.support.AdminAuthSupport;
+import com.nanri.aiimage.modules.usersecret.service.UserApiSecretService;
+import jakarta.servlet.http.HttpServletRequest;
+import org.junit.jupiter.api.Test;
+
+import java.util.Map;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.assertj.core.api.Assertions.assertThatThrownBy;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.anyLong;
+import static org.mockito.ArgumentMatchers.anyString;
+import static org.mockito.Mockito.mock;
+import static org.mockito.Mockito.never;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+
+class InternalUserProxyControllerTest {
+
+ private final UserApiSecretService userApiSecretService = mock(UserApiSecretService.class);
+ private final AdminAuthSupport adminAuthSupport = mock(AdminAuthSupport.class);
+
+ private InternalUserProxyController newController() {
+ return new InternalUserProxyController(userApiSecretService, adminAuthSupport);
+ }
+
+ private HttpServletRequest request() {
+ return mock(HttpServletRequest.class);
+ }
+
+ @Test
+ void rejectsRequestWithoutTrustedInternalTokenAndSkipsLookup() {
+ when(adminAuthSupport.isTrustedInternalToken(any())).thenReturn(false);
+
+ assertThatThrownBy(() -> newController().userProxy(request(), 1098L))
+ .isInstanceOf(BusinessException.class)
+ .hasMessageContaining("未授权");
+ verify(userApiSecretService, never()).findPlainValue(anyLong(), anyString());
+ }
+
+ @Test
+ void returnsProxyUrlForConfiguredUser() {
+ when(adminAuthSupport.isTrustedInternalToken(any())).thenReturn(true);
+ when(userApiSecretService.findPlainValue(1098L, "proxy")).thenReturn("http://p.example/x");
+
+ ApiResponse