52 lines
2.1 KiB
Python
52 lines
2.1 KiB
Python
from fastapi import APIRouter, Depends, HTTPException
|
||
from sqlalchemy.orm import Session
|
||
|
||
from app import models, schemas
|
||
from app.config import get_settings
|
||
from app.database import get_db
|
||
|
||
router = APIRouter(prefix="/settings", tags=["settings"])
|
||
|
||
SENSITIVE_MARKERS = {"secret", "token", "key", "password", "api_key"}
|
||
|
||
|
||
@router.get("", response_model=schemas.SafeSettingsRead)
|
||
def read_settings(db: Session = Depends(get_db)) -> schemas.SafeSettingsRead:
|
||
settings = get_settings()
|
||
rows = db.query(models.SystemSetting).order_by(models.SystemSetting.key.asc()).all()
|
||
driver = settings.resolved_database_url.split(":", 1)[0]
|
||
return schemas.SafeSettingsRead(
|
||
feishu_configured=settings.feishu_configured,
|
||
openai_configured=settings.openai_configured,
|
||
model_name=settings.model_name,
|
||
schedule_cron=settings.schedule_cron,
|
||
schedule_timezone=settings.schedule_timezone,
|
||
mock_mode=settings.mock_mode or not settings.feishu_configured,
|
||
database_url=f"{driver}://***",
|
||
feishu_tables_configured={
|
||
"session": bool(settings.feishu_table_id_session),
|
||
"raw_qa": bool(settings.feishu_table_id_raw_qa),
|
||
"standard_qa": bool(settings.feishu_table_id_standard_qa),
|
||
},
|
||
system_settings=[
|
||
{"key": row.key, "value": row.value, "description": row.description, "updated_at": row.updated_at}
|
||
for row in rows
|
||
],
|
||
)
|
||
|
||
|
||
@router.patch("", response_model=schemas.SafeSettingsRead)
|
||
def patch_settings(payload: schemas.SettingsPatch, db: Session = Depends(get_db)) -> schemas.SafeSettingsRead:
|
||
for key, value in payload.settings.items():
|
||
lower = key.lower()
|
||
if any(marker in lower for marker in SENSITIVE_MARKERS):
|
||
raise HTTPException(status_code=400, detail="敏感密钥不能写入 system_settings，请使用 .env")
|
||
row = db.query(models.SystemSetting).filter(models.SystemSetting.key == key).first()
|
||
if row:
|
||
row.value = value
|
||
else:
|
||
db.add(models.SystemSetting(key=key, value=value, description="后台页面写入的非敏感配置"))
|
||
db.commit()
|
||
return read_settings(db)
|
||
|