MaxKB/apps/common/middleware/doc_headers_middleware.py at c0d5d6f2a8922f0313593edd001f8de1d997f8a7 · 1Panel-dev/MaxKB · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
# coding=utf-8
"""
    @project: maxkb
    @Author：虎
    @file： static_headers_middleware.py
    @date：2024/3/13 18:26
    @desc:
"""

from django.http import HttpResponse
from django.utils.deprecation import MiddlewareMixin

from common.auth import TokenDetails, handles
from maxkb.const import CONFIG

content = """
<!DOCTYPE html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <title>Document</title>
  </head>
  <style>
    /* 弹框内容样式 */
    .modal-content {
      background-color: #fefefe;
      margin: 15% auto; /* 15% 从顶部和自动水平居中 */
      padding: 20px;
      border: 1px solid #888;
      width: 80%; /* 宽度 */
    }
  </style>
  <body>
    <div class="modal-content">
      <input type="text" id="auth-input" />
      <button id="auth">认证</button>
      <button id="goLogin">去登录</button>
    </div>
    <script>
      const setCookie = (name, value, days) => {
        var expires = "";
        if (days) {
          var date = new Date();
          date.setTime(date.getTime() + days * 2);
          expires = "; expires=" + date.toUTCString();
        }
        document.cookie = name + "=" + (value || "") + expires + "; path=/";
      };
      const authToken = (token) => {
        return new Promise((resolve, reject) => {
          try {
            var xhr = new XMLHttpRequest();
            xhr.open("GET", "/api/user/profile", true);
            xhr.setRequestHeader("Content-Type", "application/json");
            const pathname = window.location.pathname;
            if (token) {
              xhr.setRequestHeader("Authorization", "Bearer " + token);
              xhr.onreadystatechange = function () {
                if (xhr.readyState === 4) {
                  if (xhr.status === 200) {
                    resolve(true);
                  } else {
                    reject(true);
                  }
                }
              };

              xhr.send();
            }
          } catch (e) {
            reject(false);
          }
        });
      };
      window.onload = () => {
        const token = localStorage.getItem("token");
        authToken(token)
          .then(() => {
            setCookie("Authorization", "Bearer " + token);
            window.location.href = window.location.pathname;
          })
          .catch((e) => {});
      };
      // 获取元素
      const auth = document.getElementById("auth");
      const goLogin = document.getElementById("goLogin");

      // 打开弹框函数
      auth.onclick = ()=> {
        const authInput = document.getElementById("auth-input");
        const token = authInput.value
        authToken(token)
          .then(() => {
            setCookie("Authorization", "Bearer " + token);
            window.location.href = window.location.pathname;
          })
          .catch((e) => {
            alert("令牌错误");
          });
      };

      // 去系统的登录页面
      goLogin.onclick =  ()=> {
        window.location.href = "/admin/login";
      };
    </script>
  </body>
</html>

""".replace("/api/user/profile", CONFIG.get_admin_path() + '/api/user/profile').replace('/admin/login',
                                                                                        CONFIG.get_admin_path() + '/login')


class DocHeadersMiddleware(MiddlewareMixin):
    def process_response(self, request, response):
        if request.path.startswith(CONFIG.get_admin_path() + '/api-doc/') or request.path.startswith(
                CONFIG.get_chat_path() + '/api-doc/'):
            auth = request.COOKIES.get('Authorization')
            if auth is None:
                return HttpResponse(content)
            else:
                if not auth.startswith("Bearer "):
                    return HttpResponse(content)
                try:
                    token = auth[7:]
                    token_details = TokenDetails(token)
                    for handle in handles:
                        if handle.support(request, token, token_details.get_token_details):
                            handle.handle(request, token, token_details.get_token_details)
                            return response
                    return HttpResponse(content)
                except Exception as e:
                    return HttpResponse(content)
        return response