auth.py 8.9 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215
  1. import json
  2. from fastapi import APIRouter, Depends
  3. from sqlalchemy.orm import Session
  4. from sqlalchemy.ext.asyncio import AsyncSession
  5. from app.api import Response, pwd_context, get_current_user
  6. from app.config.config import settings
  7. from app.config.const import chat_server, RAGFLOW, workflow_server, DIFY, TMP_DICT
  8. from app.models.app_token_model import AppToken
  9. from app.models.base_model import get_db
  10. from app.models.postgresql_base_model import get_pdb
  11. from app.models.token_model import upsert_token
  12. from app.models.user import UserCreate, LoginData
  13. from app.models.user_model import UserModel, UserTokenModel
  14. from app.service.auth import authenticate_user, create_access_token, is_valid_password, save_register_user, password_rsa
  15. from app.service.service_token import get_token
  16. from app.service.ragflow import RagflowService
  17. from sqlalchemy.future import select
  18. router = APIRouter()
  19. @router.post("/register", response_model=Response)
  20. async def register(user: UserCreate, db=Depends(get_db)):
  21. db_user = db.query(UserModel).filter(UserModel.username == user.username).first()
  22. if db_user:
  23. return Response(code=200, msg="Username already registered")
  24. # bisheng_service = BishengService(settings.sgb_base_url)
  25. ragflow_service = RagflowService(settings.fwr_base_url)
  26. # 注册到毕昇
  27. # try:
  28. # bisheng_info = await bisheng_service.register(user.username, user.password)
  29. # except Exception as e:
  30. # return Response(code=500, msg=f"Failed to register with Bisheng: {str(e)}")
  31. # 注册到ragflow
  32. try:
  33. ragflow_info = await ragflow_service.register(user.username, user.password)
  34. except Exception as e:
  35. return Response(code=500, msg=f"Failed to register with Ragflow: {str(e)}")
  36. # 存储用户信息
  37. hashed_password = pwd_context.hash(user.password)
  38. db_user = UserModel(username=user.username, hashed_password=hashed_password, email=ragflow_info.get("email", f"{user.username}@example.com"),ragflow_id=ragflow_info.get("id"),bisheng_id="")
  39. db_user.password = db_user.encrypted_password(user.password)
  40. db.add(db_user)
  41. db.commit()
  42. db.refresh(db_user)
  43. return Response(code=200, msg="User registered successfully",data={"username": db_user.username})
  44. @router.post("/login", response_model=Response)
  45. async def login(login_data: LoginData, db: Session = Depends(get_db)):
  46. user = authenticate_user(db, login_data.username, login_data.password)
  47. if not user:
  48. return Response(code=400, msg="Incorrect username or password")
  49. # bisheng_service = BishengService(settings.sgb_base_url)
  50. ragflow_service = RagflowService(settings.fwr_base_url)
  51. # 登录到毕昇
  52. # try:
  53. # bisheng_token = await bisheng_service.login(login_data.username, login_data.password)
  54. # except Exception as e:
  55. # return Response(code=500, msg=f"Failed to login with Bisheng: {str(e)}")
  56. # 登录到ragflow
  57. try:
  58. ragflow_token = await ragflow_service.login(login_data.username, login_data.password)
  59. except Exception as e:
  60. return Response(code=500, msg=f"Failed to login with Ragflow: {str(e)}")
  61. # 创建本地token
  62. access_token = create_access_token(data={"sub": user.username, "user_id": user.id})
  63. upsert_token(db, user.id, access_token, "bisheng_token", ragflow_token)
  64. # print(111)
  65. return Response(code=200, msg="Login successful", data={
  66. "access_token": access_token,
  67. "token_type": "bearer",
  68. "username": user.username,
  69. "nickname": "",
  70. # "user": user.to_login_json()
  71. })
  72. @router.get("/token", response_model=Response)
  73. async def token_api(db: Session = Depends(get_db), current_user: UserModel = Depends(get_current_user)):
  74. # 查询现有记录
  75. token = await get_token(db, current_user.id)
  76. if token is None:
  77. return Response(code=400, msg="token not found")
  78. return Response(code=200, msg="success", data=token)
  79. @router.post("/v2/login", response_model=Response)
  80. async def login_v2(login_data: LoginData, db: Session = Depends(get_db), pdb: AsyncSession = Depends(get_pdb)):
  81. password = await password_rsa(login_data.password)
  82. user = authenticate_user(db, login_data.username, password)
  83. if not user:
  84. return Response(code=400, msg="Incorrect username or password")
  85. """
  86. app_register = AppRegisterDao(db).get_apps()
  87. token_dict = {}
  88. for app in app_register:
  89. if app["id"] == RAGFLOW:
  90. service = RagflowService(settings.fwr_base_url)
  91. elif app["id"] == BISHENG:
  92. service = BishengService(settings.sgb_base_url)
  93. elif app["id"] == DIFY:
  94. service = DifyService(settings.dify_base_url)
  95. else:
  96. logger.error("未知注册应用---")
  97. continue
  98. try:
  99. name = login_data.username
  100. app_password = login_data.password
  101. user_app = await UserAppDao(db).get_data_by_id(user.id, app["id"])
  102. if user_app:
  103. name = user_app.username
  104. app_password = user_app.decrypted_password(user_app.password)
  105. else:
  106. await update_user_info(db, user.id)
  107. token = await service.login(name, app_password)
  108. token_dict[app["id"]] = token
  109. except Exception as e:
  110. return Response(code=500, msg=f"Failed to login with {app['id']}: {str(e)}")
  111. """
  112. # 创建本地token
  113. access_token = create_access_token(data={"sub": user.username, "user_id": user.id})
  114. # await update_token(db, user.id, access_token, token_dict)
  115. # await update_user_token(db, user.id, token_dict)
  116. token_dict = {}
  117. user_tokens = db.query(UserTokenModel).all()
  118. for user_token in user_tokens:
  119. token_dict[TMP_DICT[user_token.id]] = user_token.access_token
  120. result = await pdb.execute(select(AppToken).where(AppToken.id == user.id))
  121. db_app_token = result.scalars().first()
  122. if isinstance(access_token, bytes):
  123. access_token = access_token.decode()
  124. if not db_app_token:
  125. app_token = AppToken(id=user.id, token=access_token, app_token=json.dumps(token_dict))
  126. pdb.add(app_token)
  127. await pdb.commit()
  128. await pdb.refresh(app_token)
  129. else:
  130. db_app_token.token = access_token
  131. db_app_token.app_token = json.dumps(token_dict)
  132. await pdb.commit()
  133. await pdb.refresh(db_app_token)
  134. return Response(code=200, msg="Login successful", data={
  135. "access_token": access_token,
  136. "token_type": "bearer",
  137. "username": user.username,
  138. "nickname": "",
  139. # "user": user.to_login_json()
  140. })
  141. @router.post("/v2/register", response_model=Response)
  142. async def register_v2(user: UserCreate, db=Depends(get_db)):
  143. if "@" in user.username:
  144. return Response(code=400, msg="Username cannot contain @")
  145. password = await password_rsa(user.password)
  146. if not is_valid_password(password):
  147. return Response(code=400, msg="The password must be at least 8 and contain both numbers and letters")
  148. db_user = db.query(UserModel).filter(UserModel.username == user.username).first()
  149. if db_user:
  150. return Response(code=200, msg="Username already registered")
  151. """
  152. app_register = AppRegisterDao(db).get_apps()
  153. register_dict = {}
  154. token = ""
  155. app_password = await generate_password(10)
  156. for app in app_register:
  157. if app["id"] == RAGFLOW:
  158. service = RagflowService(settings.fwr_base_url)
  159. elif app["id"] == BISHENG:
  160. service = BishengService(settings.sgb_base_url)
  161. elif app["id"] == DIFY:
  162. admin_user = db.query(UserModel).filter(UserModel.permission == "admin").first()
  163. token = await get_new_token(db, admin_user.id, DIFY)
  164. if not token:
  165. logger.error("用户注册获取dftoken失败!")
  166. return Response(code=500, msg=f"Failed to register with app")
  167. service = DifyService(settings.dify_base_url)
  168. else:
  169. logger.error("未知注册应用---")
  170. continue
  171. try:
  172. name = app["id"] + str(int(time.time()))
  173. register_info = await service.register(name, app_password, token)
  174. # print(register_info)
  175. register_dict[app['id']] = {"id":register_info.get("id"), "name": name, "email": register_info.get("email")}
  176. except Exception as e:
  177. return Response(code=500, msg=f"Failed to register with {app['id']}: {str(e)}")
  178. """
  179. user_id = await save_register_user(db, user.username, password, user.email, "", {})
  180. if not user_id:
  181. return Response(code=500, msg=f"Failed to register with app")
  182. return Response(code=200, msg="User registered successfully",data={"userFlag": user_id})
  183. @router.get("/v2/sync", response_model=Response)
  184. async def sync_user_tenant(userFlag: str, db=Depends(get_db)):
  185. # app_register = AppRegisterDao(db).get_app_by_id(RAGFLOW)
  186. # if app_register:
  187. # is_update = await update_user_group(db, userFlag)
  188. return Response(code=200, msg="success", data={})