581 lines
20 KiB
Python
581 lines
20 KiB
Python
|
# 新增的依赖项和工具函数
|
|||
|
|
from fastapi import APIRouter, Depends, HTTPException, status, Request, Response,Query,Header
|
|||
|
|
from fastapi.responses import StreamingResponse, JSONResponse
|
|||
|
|
import hmac
|
|||
|
|
import hashlib
|
|||
|
|
import time,logging,json,requests
|
|||
|
|
from typing import Dict, Any, Optional
|
|||
|
|
|
|||
|
|
# WPS应用配置 - 请替换为你的实际配置
|
|||
|
|
WPS_APP_ID = "SX20251002WTFLCP"
|
|||
|
|
WPS_APP_SECRET = "hoAGAXMTWXpkDxKFbTnSzjkckdFNNiSC"
|
|||
|
|
|
|||
|
|
class CustomJSONResponse(JSONResponse):
|
|||
|
|
"""
|
|||
|
|
自定义 JSON 响应类，处理特殊类型：
|
|||
|
|
- datetime: 转换为 ISO 8601 字符串
|
|||
|
|
- date: 转换为 ISO 8601 字符串
|
|||
|
|
- Decimal: 转换为 float
|
|||
|
|
"""
|
|||
|
|
|
|||
|
|
def render(self, content: any) -> bytes:
|
|||
|
|
"""
|
|||
|
|
重写渲染方法，使用自定义编码器
|
|||
|
|
"""
|
|||
|
|
class EnhancedJSONEncoder(json.JSONEncoder):
|
|||
|
|
def default(self, obj):
|
|||
|
|
"""
|
|||
|
|
增强型 JSON 编码器，处理多种特殊类型：
|
|||
|
|
- datetime: 转换为 ISO 8601 字符串
|
|||
|
|
- date: 转换为 ISO 8601 字符串
|
|||
|
|
- time: 转换为 ISO 8601 字符串
|
|||
|
|
- Decimal: 转换为 float
|
|||
|
|
- UUID: 转换为字符串
|
|||
|
|
- numpy 类型: 转换为 Python 原生类型
|
|||
|
|
"""
|
|||
|
|
# 处理日期时间类型
|
|||
|
|
if isinstance(obj, datetime):
|
|||
|
|
return obj.isoformat()
|
|||
|
|
|
|||
|
|
if isinstance(obj, date):
|
|||
|
|
return obj.isoformat()
|
|||
|
|
|
|||
|
|
# 处理 Decimal 类型
|
|||
|
|
if isinstance(obj, Decimal):
|
|||
|
|
return float(obj)
|
|||
|
|
|
|||
|
|
# 处理 UUID 类型
|
|||
|
|
if isinstance(obj, UUID):
|
|||
|
|
return str(obj)
|
|||
|
|
"""
|
|||
|
|
# 处理 numpy 类型
|
|||
|
|
if isinstance(obj, np.integer):
|
|||
|
|
return int(obj)
|
|||
|
|
if isinstance(obj, np.floating):
|
|||
|
|
return float(obj)
|
|||
|
|
if isinstance(obj, np.ndarray):
|
|||
|
|
return obj.tolist()
|
|||
|
|
"""
|
|||
|
|
# 处理其他自定义类型
|
|||
|
|
if hasattr(obj, '__json__'):
|
|||
|
|
return obj.__json__()
|
|||
|
|
|
|||
|
|
# 默认处理
|
|||
|
|
return super().default(obj)
|
|||
|
|
|
|||
|
|
return json.dumps(
|
|||
|
|
content,
|
|||
|
|
ensure_ascii=False,
|
|||
|
|
allow_nan=False,
|
|||
|
|
indent=None,
|
|||
|
|
separators=(",", ":"),
|
|||
|
|
cls=EnhancedJSONEncoder
|
|||
|
|
).encode("utf-8")
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
def verify_wps_signature(
|
|||
|
|
authorization: str = Header(...),
|
|||
|
|
date: str = Header(...),
|
|||
|
|
content_md5: str = Header(...),
|
|||
|
|
content_type: str = Header(...),
|
|||
|
|
x_app_id: str = Header(..., alias="X-App-Id"),
|
|||
|
|
x_weboffice_token: str = Header(..., alias="X-WebOffice-Token")
|
|||
|
|
) -> Dict[str, Any]:
|
|||
|
|
"""
|
|||
|
|
验证WPS请求签名:cite[1]:cite[6]
|
|||
|
|
"""
|
|||
|
|
try:
|
|||
|
|
# 检查AppId是否匹配
|
|||
|
|
if x_app_id != WPS_APP_ID:
|
|||
|
|
raise HTTPException(status_code=401, detail="Invalid AppId")
|
|||
|
|
|
|||
|
|
# 解析Authorization头
|
|||
|
|
if not authorization.startswith("WPS-2:"):
|
|||
|
|
raise HTTPException(status_code=401, detail="Invalid signature format")
|
|||
|
|
|
|||
|
|
parts = authorization.split(":")
|
|||
|
|
if len(parts) != 3:
|
|||
|
|
raise HTTPException(status_code=401, detail="Invalid authorization header")
|
|||
|
|
|
|||
|
|
_, app_id, signature = parts
|
|||
|
|
|
|||
|
|
# 计算期望签名
|
|||
|
|
string_to_sign = WPS_APP_SECRET + content_md5 + content_type + date
|
|||
|
|
expected_signature = hashlib.sha1(string_to_sign.encode()).hexdigest()
|
|||
|
|
|
|||
|
|
# 验证签名
|
|||
|
|
if not hmac.compare_digest(signature, expected_signature):
|
|||
|
|
raise HTTPException(status_code=401, detail="Signature verification failed")
|
|||
|
|
|
|||
|
|
return {
|
|||
|
|
"app_id": app_id,
|
|||
|
|
"token": x_weboffice_token
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
except Exception as e:
|
|||
|
|
if isinstance(e, HTTPException):
|
|||
|
|
raise e
|
|||
|
|
raise HTTPException(status_code=401, detail="Signature verification error")
|
|||
|
|
|
|||
|
|
|
|||
|
|
def parse_user_token(token: str) -> Optional[Dict[str, Any]]:
|
|||
|
|
"""
|
|||
|
|
解析用户Token - 根据你的业务逻辑实现
|
|||
|
|
"""
|
|||
|
|
try:
|
|||
|
|
# 这里可以根据你的业务逻辑解析token
|
|||
|
|
# 例如JWT解码或其他验证方式
|
|||
|
|
payload = jwt.decode(token, JWT_SECRET_KEY, algorithms=[ALGORITHM])
|
|||
|
|
return {
|
|||
|
|
"user_id": payload.get("sub"),
|
|||
|
|
"permissions": payload.get("permissions", [])
|
|||
|
|
}
|
|||
|
|
except Exception:
|
|||
|
|
return None
|
|||
|
|
|
|||
|
|
|
|||
|
|
# WPS回调路由
|
|||
|
|
wps_router = APIRouter()
|
|||
|
|
|
|||
|
|
#三阶段保存的第一步主要用于 WebOffice 与接入方进行参数协商，目前主要协商摘要算法。
|
|||
|
|
@wps_router.get("/v3/3rd/files/{file_id}/upload/prepare", response_class=CustomJSONResponse)
|
|||
|
|
async def upload_prepare_v3(
|
|||
|
|
file_id: str,
|
|||
|
|
):
|
|||
|
|
return {
|
|||
|
|
"code": 0,
|
|||
|
|
"data": {
|
|||
|
|
"digest_types": ["md5"]
|
|||
|
|
},
|
|||
|
|
"message": ""
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
@wps_router.post("/v3/3rd/files/{file_id}/upload/address", response_class=CustomJSONResponse)
|
|||
|
|
async def upload_address_v3(
|
|||
|
|
file_id: str,
|
|||
|
|
):
|
|||
|
|
return {
|
|||
|
|
"code": 0,
|
|||
|
|
"data": {
|
|||
|
|
"method": "PUT",
|
|||
|
|
"url": f"https://ragflow.szzysztech.com/apitest2/wps/v3/3rd/files/{file_id}/upload"
|
|||
|
|
},
|
|||
|
|
"message": ""
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
BASE_API_URL= "http://1.13.185.116:9380/api/v1"
|
|||
|
|
|
|||
|
|
@wps_router.put("/v3/3rd/files/{file_id}/upload", response_class=CustomJSONResponse)
|
|||
|
|
async def receive_upload_file_v3(
|
|||
|
|
file_id: str,
|
|||
|
|
request: Request
|
|||
|
|
):
|
|||
|
|
"""
|
|||
|
|
接收WPS服务器通过PUT请求传来的文件流。
|
|||
|
|
WPS服务器在收到您第一个接口返回的url后，会将文件实体放在请求体(Body)中PUT到此接口。
|
|||
|
|
"""
|
|||
|
|
# 从请求头中获取文件大小（如果提供了）
|
|||
|
|
content_length = request.headers.get("content-length")
|
|||
|
|
file_size = 0
|
|||
|
|
if content_length:
|
|||
|
|
try:
|
|||
|
|
file_size = int(content_length)
|
|||
|
|
# 这里可以添加文件大小校验逻辑，例如限制文件不能过大
|
|||
|
|
except ValueError:
|
|||
|
|
raise HTTPException(status_code=400, detail="Invalid Content-Length header")
|
|||
|
|
|
|||
|
|
# 获取请求体中的原始文件流数据
|
|||
|
|
file_data = await request.body()
|
|||
|
|
file_name = ""
|
|||
|
|
if file_id == "demo_file_001":
|
|||
|
|
file_name = "gv9014-bom.xlsx"
|
|||
|
|
if file_id == "demo_file_002":
|
|||
|
|
file_name = "GCDS100900040001.xlsx"
|
|||
|
|
# 调用MINIO中转API上传文件
|
|||
|
|
try:
|
|||
|
|
# 准备表单数据
|
|||
|
|
files = {
|
|||
|
|
'file': (file_id, file_data) # 使用file_id作为文件名
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
data = {
|
|||
|
|
'bucket': 'wps-web-office-files', # 替换为实际的bucket名称
|
|||
|
|
'file_name': file_name
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
headers = {
|
|||
|
|
"Authorization": "Bearer ragflow-NhZTY5Y2M4YWQ1MzExZWY4Zjc3MDI0Mm"
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
# 发送请求到MINIO中转API
|
|||
|
|
minio_api_url = f"{BASE_API_URL}/minio/put" # 确保BASE_API_URL已定义
|
|||
|
|
|
|||
|
|
response = requests.post(
|
|||
|
|
minio_api_url,
|
|||
|
|
files=files,
|
|||
|
|
data=data,
|
|||
|
|
headers=headers
|
|||
|
|
)
|
|||
|
|
|
|||
|
|
# 检查响应状态
|
|||
|
|
if response.status_code == 200:
|
|||
|
|
logging.info(f"File {file_id} successfully uploaded to MINIO")
|
|||
|
|
return {
|
|||
|
|
"code": 0,
|
|||
|
|
"message": "File uploaded and processed successfully"
|
|||
|
|
}
|
|||
|
|
else:
|
|||
|
|
logging.error(f"MINIO upload failed for {file_id}: {response.status_code} - {response.text}")
|
|||
|
|
raise HTTPException(
|
|||
|
|
status_code=500,
|
|||
|
|
detail=f"Failed to upload file to storage: {response.text}"
|
|||
|
|
)
|
|||
|
|
|
|||
|
|
except Exception as e:
|
|||
|
|
logging.error(f"Error uploading file {file_id} to MINIO: {str(e)}")
|
|||
|
|
raise HTTPException(
|
|||
|
|
status_code=500,
|
|||
|
|
detail=f"Internal server error during file upload: {str(e)}"
|
|||
|
|
)
|
|||
|
|
|
|||
|
|
@wps_router.post("/v3/3rd/files/{file_id}/upload/complete", response_class=CustomJSONResponse)
|
|||
|
|
async def upload_complete_v3(
|
|||
|
|
file_id: str,
|
|||
|
|
):
|
|||
|
|
file_name = "GCDS100900040001.xlsx"
|
|||
|
|
if file_id == "demo_file_001":
|
|||
|
|
file_name = "GV9014-BOM.xlsx"
|
|||
|
|
return {
|
|||
|
|
"code": 0,
|
|||
|
|
"data": {
|
|||
|
|
"create_time": 1670218748,
|
|||
|
|
"creator_id": "404",
|
|||
|
|
"id": "9",
|
|||
|
|
"modifier_id": "404",
|
|||
|
|
"modify_time": 1670328304,
|
|||
|
|
"name": file_name,
|
|||
|
|
"size": 18961,
|
|||
|
|
"version": 180
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
|
|||
|
|
@wps_router.get("/v3/3rd/files/{file_id}/permission", response_class=CustomJSONResponse)
|
|||
|
|
async def get_file_id_permission_v3(
|
|||
|
|
file_id: str,
|
|||
|
|
):
|
|||
|
|
return {
|
|||
|
|
"code": 0,
|
|||
|
|
"data": {
|
|||
|
|
"comment": 1,
|
|||
|
|
"copy": 1,
|
|||
|
|
"download": 1,
|
|||
|
|
"history": 0,
|
|||
|
|
"print": 1,
|
|||
|
|
"read": 1,
|
|||
|
|
"rename": 0,
|
|||
|
|
"saveas": 1,
|
|||
|
|
"update": 1,
|
|||
|
|
"user_id": "404"
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
#GET
|
|||
|
|
#
|
|||
|
|
@wps_router.get("/v3/3rd/users", response_class=CustomJSONResponse)
|
|||
|
|
async def get_users_info_v3(
|
|||
|
|
user_ids: list[str] = Query(..., description="多个用户ID", alias="user_ids")
|
|||
|
|
):
|
|||
|
|
"""
|
|||
|
|
批量获取用户信息 - 调试版本
|
|||
|
|
直接返回示例数据，不进行验证
|
|||
|
|
"""
|
|||
|
|
logging.info(f"批量获取用户信息调试: user_ids={user_ids}")
|
|||
|
|
|
|||
|
|
# 去重处理
|
|||
|
|
unique_user_ids = list(set(user_ids))
|
|||
|
|
|
|||
|
|
# 构建用户信息列表
|
|||
|
|
users_info = []
|
|||
|
|
|
|||
|
|
for user_id in unique_user_ids:
|
|||
|
|
# 为每个用户ID生成对应的示例数据
|
|||
|
|
user_info = {
|
|||
|
|
"id": user_id,
|
|||
|
|
"name": f"用户{user_id}",
|
|||
|
|
# "avatar_url": f"https://example.com/avatars/{user_id}.jpg"
|
|||
|
|
}
|
|||
|
|
users_info.append(user_info)
|
|||
|
|
|
|||
|
|
logging.info(f"返回用户信息: {len(users_info)}个用户")
|
|||
|
|
|
|||
|
|
return {
|
|||
|
|
"code": 0,
|
|||
|
|
"data": users_info
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
|
|||
|
|
@wps_router.get("/v3/3rd/files/{file_id}", response_class=CustomJSONResponse)
|
|||
|
|
async def get_file_info_v3(
|
|||
|
|
file_id: str,
|
|||
|
|
):
|
|||
|
|
logging.info(f"获取文件信息 /v3/3rd/files/{file_id}")
|
|||
|
|
"""
|
|||
|
|
获取文件基本信息 - V3版本接口
|
|||
|
|
遵循WPS WebOffice文件ID一致性原则
|
|||
|
|
"""
|
|||
|
|
try:
|
|||
|
|
# 验证WPS签名
|
|||
|
|
"""
|
|||
|
|
signature_data = verify_wps_signature_direct(
|
|||
|
|
authorization, date, content_md5 or "", content_type or "", x_app_id, x_weboffice_token
|
|||
|
|
)
|
|||
|
|
|
|||
|
|
# 解析用户token验证权限
|
|||
|
|
user_info = parse_user_token(signature_data["token"])
|
|||
|
|
if not user_info:
|
|||
|
|
raise HTTPException(status_code=401, detail="Invalid user token")
|
|||
|
|
"""
|
|||
|
|
#logging.info(f"获取文件信息: file_id={file_id}, user_id={user_info['user_id']}")
|
|||
|
|
logging.info(f"获取文件信息: file_id={file_id}")
|
|||
|
|
# 获取文件信息 - 替换为你的实际数据库查询逻辑
|
|||
|
|
file_info = get_file_by_id_v3(file_id, None)
|
|||
|
|
if not file_info:
|
|||
|
|
logging.warning(f"文件不存在: file_id={file_id}")
|
|||
|
|
raise HTTPException(status_code=404, detail="File not found")
|
|||
|
|
logging.info(f"获取文件信息 /v3/3rd/files/{file_info}")
|
|||
|
|
# 检查用户对文件的访问权限
|
|||
|
|
if not check_file_permission_v3(file_id, None): # user_info["user_id"]):
|
|||
|
|
logging.warning(f"用户无权限访问文件: file_id={file_id}")
|
|||
|
|
raise HTTPException(status_code=403, detail="Insufficient permissions")
|
|||
|
|
|
|||
|
|
# 构建响应数据，严格遵循WPS规范
|
|||
|
|
response_data = {
|
|||
|
|
"id": file_info["id"], # 必须与传入的file_id一致
|
|||
|
|
"name": file_info["name"],
|
|||
|
|
"version": file_info["version"],
|
|||
|
|
"size": file_info["size"],
|
|||
|
|
"create_time": file_info["create_time"],
|
|||
|
|
"modify_time": file_info["modify_time"],
|
|||
|
|
"creator_id": "404", #file_info["creator_id"],
|
|||
|
|
"modifier_id": file_info["modifier_id"]
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
# 验证响应数据格式
|
|||
|
|
validation_error = validate_file_info_response(response_data)
|
|||
|
|
if validation_error:
|
|||
|
|
logging.error(f"文件信息响应数据验证失败: {validation_error}")
|
|||
|
|
raise HTTPException(status_code=500, detail="Internal server error: invalid file data format")
|
|||
|
|
|
|||
|
|
logging.info(f"成功获取文件信息: file_id={file_id}")
|
|||
|
|
|
|||
|
|
return {
|
|||
|
|
"code": 0,
|
|||
|
|
"data": response_data
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
except HTTPException:
|
|||
|
|
raise
|
|||
|
|
except Exception as e:
|
|||
|
|
logging.error(f"获取文件信息异常: {str(e)}")
|
|||
|
|
raise HTTPException(status_code=500, detail="Internal server error")
|
|||
|
|
|
|||
|
|
|
|||
|
|
@wps_router.get("/v3/3rd/files/{file_id}/download", response_class=CustomJSONResponse)
|
|||
|
|
async def get_file_download_url(
|
|||
|
|
file_id: str
|
|||
|
|
):
|
|||
|
|
"""
|
|||
|
|
获取文件下载地址 - 调试版本
|
|||
|
|
返回文件的下载URL，供WPS在线协同服务使用
|
|||
|
|
"""
|
|||
|
|
logging.info(f"获取文件下载地址: file_id={file_id}")
|
|||
|
|
|
|||
|
|
# 构建下载URL - 这里使用示例URL，实际使用时替换为你的真实文件下载地址
|
|||
|
|
if file_id == "demo_file_001":
|
|||
|
|
download_url = f"http://1.13.185.116:9000/wps-web-office-files/gv9014-bom.xlsx"
|
|||
|
|
elif file_id == "demo_file_002":
|
|||
|
|
download_url = f"http://1.13.185.116:9000/wps-web-office-files/GCDS100900040001.xlsx"
|
|||
|
|
elif file_id == "hanjie_sop":
|
|||
|
|
download_url = f"http://1.13.185.116:9000/wps-web-office-files/hanjie_sop.xls"
|
|||
|
|
else:
|
|||
|
|
download_url = f"http://1.13.185.116:9000/wps-web-office-files/GCDS100900040001.xlsx"
|
|||
|
|
# 构建响应数据
|
|||
|
|
response_data = {
|
|||
|
|
"url": download_url
|
|||
|
|
# digest 和 digest_type 可选，用于文件校验
|
|||
|
|
# "digest": "a1b2c3d4e5f6...", # 文件的MD5或SHA1值
|
|||
|
|
# "digest_type": "md5", # 校验算法: md5 或 sha1
|
|||
|
|
|
|||
|
|
# headers 可选，用于需要额外请求头的场景（如防盗链）
|
|||
|
|
# "headers": {
|
|||
|
|
# "Referer": "https://your-domain.com",
|
|||
|
|
# "Authorization": "Bearer your-token"
|
|||
|
|
# }
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
logging.info(f"返回文件下载地址: {download_url}")
|
|||
|
|
|
|||
|
|
return {
|
|||
|
|
"code": 0,
|
|||
|
|
"data": response_data
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
|
|||
|
|
def get_file_by_id_v3(file_id: str, user_id: str) -> Optional[Dict[str, Any]]:
|
|||
|
|
"""
|
|||
|
|
根据文件ID获取文件信息 - V3版本
|
|||
|
|
需要你根据实际业务逻辑实现
|
|||
|
|
"""
|
|||
|
|
try:
|
|||
|
|
# 这里替换为你的实际数据库查询逻辑
|
|||
|
|
# 示例实现：
|
|||
|
|
|
|||
|
|
# 1. 查询数据库获取文件基本信息
|
|||
|
|
# file_record = query_file_from_database(file_id)
|
|||
|
|
|
|||
|
|
# 2. 如果文件不存在，返回None
|
|||
|
|
# if not file_record:
|
|||
|
|
# return None
|
|||
|
|
|
|||
|
|
# 3. 返回符合WPS规范的数据结构
|
|||
|
|
# return {
|
|||
|
|
# "id": file_record["file_id"], # 必须与传入的file_id一致
|
|||
|
|
# "name": file_record["file_name"],
|
|||
|
|
# "version": file_record["version"],
|
|||
|
|
# "size": file_record["file_size"],
|
|||
|
|
# "create_time": int(file_record["create_time"].timestamp()), # 转换为纪元秒
|
|||
|
|
# "modify_time": int(file_record["update_time"].timestamp()), # 转换为纪元秒
|
|||
|
|
# "creator_id": file_record["creator_id"],
|
|||
|
|
# "modifier_id": file_record["last_modifier_id"]
|
|||
|
|
# }
|
|||
|
|
|
|||
|
|
# 临时示例数据 - 请替换为实际实现
|
|||
|
|
if file_id in ["example_file_123","dale_123","demo_file_001","demo_file_002","hanjie_sop"]:
|
|||
|
|
return {
|
|||
|
|
"id": file_id, # 必须与传入的file_id一致
|
|||
|
|
"name": "统计月报.xlsx",
|
|||
|
|
"version": 201,
|
|||
|
|
"size": 18961,
|
|||
|
|
"create_time": 1670218748, # 纪元秒
|
|||
|
|
"modify_time": 1759478858, # 纪元秒
|
|||
|
|
"creator_id": "user_404",
|
|||
|
|
"modifier_id": "user_404"
|
|||
|
|
}
|
|||
|
|
else:
|
|||
|
|
# 文件不存在
|
|||
|
|
return None
|
|||
|
|
|
|||
|
|
except Exception as e:
|
|||
|
|
logging.error(f"查询文件信息失败: {str(e)}")
|
|||
|
|
return None
|
|||
|
|
|
|||
|
|
|
|||
|
|
def check_file_permission_v3(file_id: str, user_id: str) -> bool:
|
|||
|
|
"""
|
|||
|
|
检查用户对文件的访问权限 - V3版本
|
|||
|
|
需要你根据实际业务逻辑实现
|
|||
|
|
"""
|
|||
|
|
try:
|
|||
|
|
# 这里替换为你的实际权限检查逻辑
|
|||
|
|
# 示例实现：
|
|||
|
|
|
|||
|
|
# 1. 查询用户对文件的权限
|
|||
|
|
# permission = query_file_permission(file_id, user_id)
|
|||
|
|
|
|||
|
|
# 2. 返回是否有访问权限
|
|||
|
|
# return permission.get("can_read", False)
|
|||
|
|
|
|||
|
|
# 临时示例 - 请替换为实际实现
|
|||
|
|
return True
|
|||
|
|
|
|||
|
|
except Exception as e:
|
|||
|
|
logging.error(f"检查文件权限失败: {str(e)}")
|
|||
|
|
return False
|
|||
|
|
|
|||
|
|
|
|||
|
|
def validate_file_info_response(file_data: Dict[str, Any]) -> Optional[str]:
|
|||
|
|
"""
|
|||
|
|
验证文件信息响应数据是否符合WPS规范
|
|||
|
|
"""
|
|||
|
|
# 检查必需字段
|
|||
|
|
required_fields = ["id", "name", "version", "size", "create_time", "modify_time", "creator_id", "modifier_id"]
|
|||
|
|
for field in required_fields:
|
|||
|
|
if field not in file_data:
|
|||
|
|
return f"Missing required field: {field}"
|
|||
|
|
|
|||
|
|
# 验证文件ID长度
|
|||
|
|
if len(file_data["id"]) > 47:
|
|||
|
|
return "File ID exceeds maximum length of 47 characters"
|
|||
|
|
|
|||
|
|
# 验证文件名长度和特殊字符
|
|||
|
|
if len(file_data["name"]) > 240:
|
|||
|
|
return "File name exceeds maximum length of 240 characters"
|
|||
|
|
|
|||
|
|
invalid_chars = ['\\', '/', '|', '"', ':', '*', '?', '<', '>']
|
|||
|
|
for char in invalid_chars:
|
|||
|
|
if char in file_data["name"]:
|
|||
|
|
return f"File name contains invalid character: {char}"
|
|||
|
|
|
|||
|
|
# 验证版本号
|
|||
|
|
if not isinstance(file_data["version"], int) or file_data["version"] < 1:
|
|||
|
|
return "Version must be a positive integer"
|
|||
|
|
|
|||
|
|
# 验证文件大小
|
|||
|
|
if not isinstance(file_data["size"], int) or file_data["size"] < 0:
|
|||
|
|
return "Size must be a non-negative integer"
|
|||
|
|
|
|||
|
|
# 验证时间戳
|
|||
|
|
if not isinstance(file_data["create_time"], int) or file_data["create_time"] < 0:
|
|||
|
|
return "Create time must be a non-negative integer"
|
|||
|
|
|
|||
|
|
if not isinstance(file_data["modify_time"], int) or file_data["modify_time"] < 0:
|
|||
|
|
return "Modify time must be a non-negative integer"
|
|||
|
|
|
|||
|
|
return None
|
|||
|
|
|
|||
|
|
|
|||
|
|
def verify_wps_signature_direct(
|
|||
|
|
authorization: str,
|
|||
|
|
date: str,
|
|||
|
|
content_md5: str,
|
|||
|
|
content_type: str,
|
|||
|
|
x_app_id: str,
|
|||
|
|
x_weboffice_token: str
|
|||
|
|
) -> Dict[str, Any]:
|
|||
|
|
"""
|
|||
|
|
直接验证WPS请求签名
|
|||
|
|
"""
|
|||
|
|
try:
|
|||
|
|
# 检查AppId是否匹配
|
|||
|
|
if x_app_id != WPS_APP_ID:
|
|||
|
|
raise HTTPException(status_code=401, detail="Invalid AppId")
|
|||
|
|
|
|||
|
|
# 解析Authorization头
|
|||
|
|
if not authorization.startswith("WPS-2:"):
|
|||
|
|
raise HTTPException(status_code=401, detail="Invalid signature format")
|
|||
|
|
|
|||
|
|
parts = authorization.split(":")
|
|||
|
|
if len(parts) != 3:
|
|||
|
|
raise HTTPException(status_code=401, detail="Invalid authorization header")
|
|||
|
|
|
|||
|
|
_, app_id, signature = parts
|
|||
|
|
|
|||
|
|
# 计算期望签名
|
|||
|
|
string_to_sign = WPS_APP_SECRET + content_md5 + content_type + date
|
|||
|
|
expected_signature = hashlib.sha1(string_to_sign.encode()).hexdigest()
|
|||
|
|
|
|||
|
|
# 验证签名
|
|||
|
|
if not hmac.compare_digest(signature, expected_signature):
|
|||
|
|
raise HTTPException(status_code=401, detail="Signature verification failed")
|
|||
|
|
|
|||
|
|
return {
|
|||
|
|
"app_id": app_id,
|
|||
|
|
"token": x_weboffice_token
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
except HTTPException:
|
|||
|
|
raise
|
|||
|
|
except Exception as e:
|
|||
|
|
logging.error(f"WPS签名验证异常: {str(e)}")
|
|||
|
|
raise HTTPException(status_code=401, detail="Signature verification error")
|