huangzd1997
8241cd704e
Build Backend JAR / build (push) Has been cancelled
- Java 补齐后台全部迁移差集:shopduplicatecheck 店铺数据重复检查模块(V108 扫描表+查询/扫描服务)、 PinyinAbbrUtil 拼音缩写、ImageHistory 接口调整为内部可用、AdminUser 支持内部令牌操作并放宽列表上限 - Flask 后台 admin_api.py 路由收敛转发 Java、admin.html/admin.js 适配新后台形态 - AdminApiGuardFilter 对可信 X-Internal-Token 放行(controller 自校验兜底),修复客户端仅凭 内部令牌调用 /api/admin/shop-manages/credential 被误拦 401 - 测试:AdminApiGuardFilterTest 补可信/假令牌用例;AdminUserServiceTest 补菜单权限 mock; shopduplicatecheck 新增查询/聚合/CSV 单测
58 lines
1.7 KiB
Python
58 lines
1.7 KiB
Python
"""
|
|
卖相AI - Flask 后端
|
|
按功能拆分为蓝图：认证(auth)、主页面(main)、管理员API(admin_api)、版本(version)
|
|
"""
|
|
import os
|
|
import secrets
|
|
from datetime import timedelta
|
|
|
|
from flask import Flask
|
|
from flask_cors import CORS
|
|
|
|
from utils.db import init_db
|
|
from blueprints.auth import auth
|
|
from blueprints.main import main
|
|
from blueprints.admin_api import admin_api
|
|
from blueprints.version import version_bp
|
|
|
|
BASE_DIR = os.path.dirname(os.path.abspath(__file__))
|
|
app = Flask(__name__, template_folder=BASE_DIR, static_folder=BASE_DIR)
|
|
|
|
# CORS配置：限制为可信域名
|
|
CORS(app, resources={
|
|
r"/api/*": {
|
|
"origins": [
|
|
"http://localhost:*",
|
|
"http://127.0.0.1:*",
|
|
"https://*.aishufu.top",
|
|
"http://*.aishufu.top"
|
|
],
|
|
"methods": ["GET", "POST", "PUT", "DELETE", "OPTIONS"],
|
|
"allow_headers": ["Authorization", "Content-Type", "X-Requested-With", "X-Device-Id"],
|
|
"supports_credentials": True
|
|
}
|
|
})
|
|
app.secret_key = os.environ.get('SECRET_KEY', secrets.token_hex(32))
|
|
app.config['PERMANENT_SESSION_LIFETIME'] = timedelta(days=7)
|
|
# 文件上传大小限制：2GB（数字人 ZIP 包等大文件）
|
|
app.config['MAX_CONTENT_LENGTH'] = 2 * 1024 * 1024 * 1024
|
|
# 会话安全配置
|
|
app.config['SESSION_COOKIE_SECURE'] = os.environ.get('SESSION_COOKIE_SECURE', 'false').lower() == 'true'
|
|
app.config['SESSION_COOKIE_HTTPONLY'] = True
|
|
app.config['SESSION_COOKIE_SAMESITE'] = 'Lax'
|
|
|
|
# 注册蓝图
|
|
app.register_blueprint(auth)
|
|
app.register_blueprint(main)
|
|
app.register_blueprint(admin_api)
|
|
app.register_blueprint(version_bp)
|
|
|
|
|
|
def run_app(host='0.0.0.0', port=15124):
|
|
init_db()
|
|
app.run(host=host, port=port, threaded=True, use_reloader=False)
|
|
|
|
|
|
if __name__ == '__main__':
|
|
run_app()
|