sun
61431e00ba
1. 调整CORS中间件挂载位置，重构CORS处理逻辑 2. 重写IP获取逻辑，增加私有网络IP信任校验 3. 优化日志中间件，移除/health接口单独日志逻辑 4. 改进API密钥未配置时的提示信息 5. 重构volcano TTS调用，新增voice参数支持 6. 优化请求体过大错误处理 7. 完善统计服务，修复环形缓冲区遍历逻辑，新增去重错误日志功能
62 lines
1.4 KiB
Go
62 lines
1.4 KiB
Go
package middleware
|
|
|
|
import (
|
|
"crypto/subtle"
|
|
"encoding/json"
|
|
"log"
|
|
"net/http"
|
|
"os"
|
|
"strings"
|
|
)
|
|
|
|
var validAPIKeys []string
|
|
|
|
func InitAPIKeys() {
|
|
apiKey := os.Getenv("OPENAI_TTS_API_KEY")
|
|
if apiKey != "" {
|
|
validAPIKeys = strings.Split(apiKey, ",")
|
|
for i, k := range validAPIKeys {
|
|
validAPIKeys[i] = strings.TrimSpace(k)
|
|
}
|
|
log.Printf("宸查厤缃?%d 涓湁鏁堢殑API瀵嗛挜", len(validAPIKeys))
|
|
} else {
|
|
log.Println("警告: OPENAI_TTS_API_KEY环境变量未设置，所有请求将无需认证即可访问")
|
|
log.Println("如需启用API密钥验证，请设置 OPENAI_TTS_API_KEY 环境变量（多个密钥用逗号分隔）")
|
|
}
|
|
}
|
|
|
|
func ValidateAPIKey(r *http.Request) bool {
|
|
if len(validAPIKeys) == 0 {
|
|
return true
|
|
}
|
|
|
|
authHeader := r.Header.Get("Authorization")
|
|
if authHeader == "" {
|
|
return false
|
|
}
|
|
|
|
if !strings.HasPrefix(authHeader, "Bearer ") {
|
|
return false
|
|
}
|
|
|
|
token := strings.TrimPrefix(authHeader, "Bearer ")
|
|
for _, validKey := range validAPIKeys {
|
|
if subtle.ConstantTimeCompare([]byte(token), []byte(validKey)) == 1 {
|
|
return true
|
|
}
|
|
}
|
|
return false
|
|
}
|
|
|
|
func SendJSONError(w http.ResponseWriter, statusCode int, message string, errType string, code string) {
|
|
w.Header().Set("Content-Type", "application/json")
|
|
w.WriteHeader(statusCode)
|
|
json.NewEncoder(w).Encode(map[string]interface{}{
|
|
"error": map[string]interface{}{
|
|
"message": message,
|
|
"type": errType,
|
|
"code": code,
|
|
},
|
|
})
|
|
}
|