From fffd36018fce032cf3b6bf4564b3ece348c5c773 Mon Sep 17 00:00:00 2001 From: engigu Date: Sun, 8 Mar 2026 21:00:56 +0800 Subject: [PATCH] chore: remove api token function --- internal/constant/constant.go | 1 - internal/controllers/settings_controller.go | 30 -------- internal/middleware/auth.go | 56 --------------- internal/router/router.go | 1 - web/src/api/index.ts | 3 - web/src/views/settings/SiteSettings.vue | 79 +-------------------- 6 files changed, 1 insertion(+), 169 deletions(-) diff --git a/internal/constant/constant.go b/internal/constant/constant.go index 731d0c8..092656d 100644 --- a/internal/constant/constant.go +++ b/internal/constant/constant.go @@ -42,7 +42,6 @@ const ( KeyIcon = "icon" KeyPageSize = "page_size" KeyCookieDays = "cookie_days" - KeyApiToken = "api_token" KeyOpenapiToken = "openapi_token" // Security Settings Key 常量 diff --git a/internal/controllers/settings_controller.go b/internal/controllers/settings_controller.go index 0d5d93c..5a82ecc 100644 --- a/internal/controllers/settings_controller.go +++ b/internal/controllers/settings_controller.go @@ -89,15 +89,6 @@ func (sc *SettingsController) ChangePassword(c *gin.Context) { func (sc *SettingsController) GetSiteSettings(c *gin.Context) { settings := sc.settingsService.GetSection(constant.SectionSite) - // 解析 JSON 格式的 API Token - if tokenJson, ok := settings[constant.KeyApiToken]; ok && tokenJson != "" { - var tokenConfig vo.TokenConfig - if err := json.Unmarshal([]byte(tokenJson), &tokenConfig); err == nil { - settings["api_token"] = tokenConfig.Token - settings["api_token_expire"] = tokenConfig.ExpireAt - } - } - // 解析 JSON 格式的 OpenAPI Token if tokenJson, ok := settings[constant.KeyOpenapiToken]; ok && tokenJson != "" { var tokenConfig vo.TokenConfig @@ -135,8 +126,6 @@ func (sc *SettingsController) UpdateSiteSettings(c *gin.Context) { Icon string `json:"icon"` PageSize string `json:"page_size"` CookieDays string `json:"cookie_days"` - ApiToken string `json:"api_token"` - ApiTokenExpire string `json:"api_token_expire"` OpenapiEnabled bool `json:"openapi_enabled"` OpenapiToken string `json:"openapi_token"` OpenapiTokenExpire string `json:"openapi_token_expire"` @@ -147,17 +136,6 @@ func (sc *SettingsController) UpdateSiteSettings(c *gin.Context) { return } - apiTokenJson := "" - if req.ApiToken != "" || req.ApiTokenExpire != "" { - tokenConfig := vo.TokenConfig{ - Token: req.ApiToken, - ExpireAt: req.ApiTokenExpire, - } - if b, err := json.Marshal(tokenConfig); err == nil { - apiTokenJson = string(b) - } - } - openapiTokenJson := "" if req.OpenapiToken != "" || req.OpenapiTokenExpire != "" || req.OpenapiEnabled { tokenConfig := vo.TokenConfig{ @@ -176,7 +154,6 @@ func (sc *SettingsController) UpdateSiteSettings(c *gin.Context) { constant.KeyIcon: req.Icon, constant.KeyPageSize: req.PageSize, constant.KeyCookieDays: req.CookieDays, - constant.KeyApiToken: apiTokenJson, constant.KeyOpenapiToken: openapiTokenJson, } @@ -188,13 +165,6 @@ func (sc *SettingsController) UpdateSiteSettings(c *gin.Context) { utils.SuccessMsg(c, "保存成功") } -// GenerateApiToken 随机生成API Token -func (sc *SettingsController) GenerateApiToken(c *gin.Context) { - utils.Success(c, gin.H{ - "token": strings.ToLower(utils.RandomString(32)), - }) -} - // GenerateOpenapiToken 随机生成OpenAPI Token func (sc *SettingsController) GenerateOpenapiToken(c *gin.Context) { utils.Success(c, gin.H{ diff --git a/internal/middleware/auth.go b/internal/middleware/auth.go index 145012c..54b83ce 100644 --- a/internal/middleware/auth.go +++ b/internal/middleware/auth.go @@ -17,13 +17,7 @@ import ( // AuthRequired 认证中间件 func AuthRequired() gin.HandlerFunc { - settingsSvc := services.NewSettingsService() return func(c *gin.Context) { - // 校验 API Token (实验特性) - if checkApiToken(c, settingsSvc) { - return - } - token, err := c.Cookie(constant.CookieName) if err != nil || token == "" { utils.Unauthorized(c, "请先登录") @@ -56,56 +50,6 @@ func AuthRequired() gin.HandlerFunc { } } -// checkApiToken 校验 API Token (实验特性，后续可能移除或重构) -// 返回 true 表示校验通过并已放行请求 -func checkApiToken(c *gin.Context, settingsSvc *services.SettingsService) bool { - apiToken := c.GetHeader("X-API-Token") - if apiToken == "" { - return false - } - - siteConfig := settingsSvc.GetSection(constant.SectionSite) - tokenJson, ok := siteConfig[constant.KeyApiToken] - if !ok || tokenJson == "" { - return false - } - - var tokenConfig vo.TokenConfig - if err := json.Unmarshal([]byte(tokenJson), &tokenConfig); err != nil { - return false - } - - if tokenConfig.Token == "" || apiToken != tokenConfig.Token { - return false - } - - // 检查过期时间 - if tokenConfig.ExpireAt != "" { - // 前端传来的时间格式是 YYYY-MM-DD，使用 2006-01-02 解析 - expireDate, err := time.Parse("2006-01-02", tokenConfig.ExpireAt) - if err == nil { - // 将过期时间设为当天的 23:59:59 - expireDate = expireDate.Add(23*time.Hour + 59*time.Minute + 59*time.Second) - if time.Now().After(expireDate) { - return false - } - } - } - - // 模拟 Admin 角色，必须通过实际存在的 admin 用户 ID 来关联 - var adminUser models.User - if err := database.DB.Where("role = ?", "admin").First(&adminUser).Error; err != nil { - utils.Unauthorized(c, "未找到管理员账户，API Token 校验失败") - c.Abort() - return true // 返回 true 表示中间件已处理并截断了请求 - } - - c.Set("userID", adminUser.ID) - c.Set("username", adminUser.Username) - c.Next() - return true -} - // OpenapiRequired OpenAPI 认证中间件 func OpenapiRequired() gin.HandlerFunc { settingsSvc := services.NewSettingsService() diff --git a/internal/router/router.go b/internal/router/router.go index aec1c93..08ac6ff 100644 --- a/internal/router/router.go +++ b/internal/router/router.go @@ -343,7 +343,6 @@ func registerSettingsRoutes(g *gin.RouterGroup, c *Controllers) { settings.POST("/password", c.Settings.ChangePassword) settings.GET("/site", c.Settings.GetSiteSettings) settings.PUT("/site", c.Settings.UpdateSiteSettings) - settings.POST("/site/api-token/generate", c.Settings.GenerateApiToken) settings.POST("/site/openapi-token/generate", c.Settings.GenerateOpenapiToken) settings.GET("/paths", c.Settings.GetPaths) settings.GET("/scheduler", c.Settings.GetSchedulerSettings) diff --git a/web/src/api/index.ts b/web/src/api/index.ts index 3f34672..11bd046 100644 --- a/web/src/api/index.ts +++ b/web/src/api/index.ts @@ -132,7 +132,6 @@ export const api = { getPublicSite: () => request<{ title: string; subtitle: string; icon: string; demo_mode: boolean }>('/settings/public'), updateSite: (data: SiteSettings) => request('/settings/site', { method: 'PUT', body: JSON.stringify(data) }), - generateApiToken: () => request<{ token: string }>('/settings/site/api-token/generate', { method: 'POST' }), generateOpenapiToken: () => request<{ token: string }>('/settings/site/openapi-token/generate', { method: 'POST' }), getScheduler: () => request('/settings/scheduler'), updateScheduler: (data: SchedulerSettings) => @@ -437,8 +436,6 @@ export interface SiteSettings { openapi_enabled?: boolean openapi_token?: string openapi_token_expire?: string - api_token?: string - api_token_expire?: string } export interface SchedulerSettings { diff --git a/web/src/views/settings/SiteSettings.vue b/web/src/views/settings/SiteSettings.vue index 44f4122..3777f4d 100644 --- a/web/src/views/settings/SiteSettings.vue +++ b/web/src/views/settings/SiteSettings.vue @@ -32,13 +32,10 @@ const form = ref({ cookie_days: '7', openapi_enabled: false, openapi_token: '', - openapi_token_expire: '', - api_token: '', - api_token_expire: '' + openapi_token_expire: '' }) const loading = ref(false) const showOpenapiConfirmDialog = ref(false) -const showApiConfirmDialog = ref(false) const iconPreview = computed(() => { if (!form.value.icon) return '' @@ -92,21 +89,6 @@ async function generateOpenapiToken() { } } -async function generateToken() { - try { - const res = await api.settings.generateApiToken() - form.value.api_token = res.token - - // 如果没有设置过期时间，默认给一年后 - if (!form.value.api_token_expire) { - const d = new Date() - d.setFullYear(d.getFullYear() + 1) - form.value.api_token_expire = d.toISOString().split('T')[0] - } - } catch { - toast.error('生成 Token 失败') - } -} async function copyOpenapiToken() { if (!form.value.openapi_token) return @@ -118,15 +100,6 @@ async function copyOpenapiToken() { } } -async function copyToken() { - if (!form.value.api_token) return - try { - await navigator.clipboard.writeText(form.value.api_token) - toast.success('Token 已复制到剪贴板') - } catch { - toast.error('复制失败，请手动复制') - } -} onMounted(loadSettings) @@ -210,38 +183,6 @@ onMounted(loadSettings) -
-
-

API Token

- - 实验特性，可能变更，将会在后期下线 -
-

开启全局 API 直接访问能力，配置后可通过请求头 X-API-Token: <在此生成的Token> - 无需登录直接调用系统的所有接口，请妥善保管并设置合理的有效期。

- -
- -
- - - -
-
- -
- -
- -
超过此日期后该 Token 将失效，置空代表该特性完全关闭。
-
-
-