From 832ed063a0539d1a6a294d28fc0fa2dddc93df0d Mon Sep 17 00:00:00 2001 From: zhilv Date: Mon, 4 May 2026 19:01:32 +0800 Subject: [PATCH] =?UTF-8?q?=F0=9F=94=92=20fix(auth):=20=E7=AE=A1=E7=90=86?= =?UTF-8?q?=E9=9D=A2=E6=9D=BF=E6=B7=BB=E5=8A=A0=20API=20Key=20=E9=89=B4?= =?UTF-8?q?=E6=9D=83?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - 移除 /api/ 路由的鉴权豁免，所有数据接口必须携带 API Key - 仅 /healthz 和 /admin/（HTML 页面壳）免鉴权 - 前端新增登录遮罩层，401 时弹出 API Key 输入框 - Key 存储在 sessionStorage，所有 API 请求自动附加 X-API-Key header - 支持 ?apiKey=xxx URL 参数自动登录（登录后从 URL 移除避免泄露） --- .gitignore | 3 ++ handlers/admin.py | 78 ++++++++++++++++++++++++++++++++++++++++++----- middleware.py | 5 ++- 3 files changed, 76 insertions(+), 10 deletions(-) diff --git a/.gitignore b/.gitignore index 89d7581..64581c9 100644 --- a/.gitignore +++ b/.gitignore @@ -7,6 +7,9 @@ wheels/ *.egg-info .claude +CLAUDE.md +codestable + # Virtual environments .venv diff --git a/handlers/admin.py b/handlers/admin.py index 1782de5..f8fa9d2 100644 --- a/handlers/admin.py +++ b/handlers/admin.py @@ -498,6 +498,21 @@ body { + + +