feat(auth, account, oauth): 添加账号设置和授权认证处理器，支持密码登录、更新信息及第三方OAuth集成

Author: v833

internal/handler/account_handler.py

@@ -0,0 +1,66 @@
+from dataclasses import dataclass
+
+from flask_login import login_required, current_user
+from injector import inject
+
+from internal.schema.account_schema import (
+    GetCurrentUserResp,
+    UpdatePasswordReq,
+    UpdateNameReq,
+    UpdateAvatarReq,
+)
+from internal.service import AccountService
+from pkg.response import success_json, validate_error_json, success_message
+
+
+@inject
+@dataclass
+class AccountHandler:
+    """账号设置处理器"""
+
+    account_service: AccountService
+
+    @login_required
+    def get_current_user(self):
+        """获取当前登录账号信息"""
+        resp = GetCurrentUserResp()
+        return success_json(resp.dump(current_user))
+
+    @login_required
+    def update_password(self):
+        """更新当前登录账号密码"""
+        # 1.提取请求数据并校验
+        req = UpdatePasswordReq()
+        if not req.validate():
+            return validate_error_json(req.errors)
+
+        # 2.调用服务更新账号密码
+        self.account_service.update_password(req.password.data, current_user)
+
+        return success_message("更新账号密码成功")
+
+    @login_required
+    def update_name(self):
+        """更新当前登录账号名称"""
+        # 1.提取请求数据并校验
+        req = UpdateNameReq()
+        if not req.validate():
+            return validate_error_json(req.errors)
+
+        # 2.调用服务更新账号名称
+        self.account_service.update_account(current_user, name=req.name.data)
+
+        return success_message("更新账号名称成功")
+
+    @login_required
+    def update_avatar(self):
+        """更新当前账号头像信息"""
+        # 1.提取请求数据并校验
+        req = UpdateAvatarReq()
+        if not req.validate():
+            return validate_error_json(req.errors)
+
+        # 2.调用服务更新账号名称
+        self.account_service.update_account(current_user, avatar=req.avatar.data)
+
+        return success_message("更新账号头像成功")

internal/handler/auth_handler.py

@@ -0,0 +1,39 @@
+from dataclasses import dataclass
+
+from flask_login import logout_user, login_required
+from injector import inject
+
+from internal.schema.auth_schema import PasswordLoginReq, PasswordLoginResp
+from internal.service import AccountService
+from pkg.response import success_message, validate_error_json, success_json
+
+
+@inject
+@dataclass
+class AuthHandler:
+    """LLMOps平台自有授权认证处理器"""
+
+    account_service: AccountService
+
+    def password_login(self):
+        """账号密码登录"""
+        # 1.提取请求并校验数据
+        req = PasswordLoginReq()
+        if not req.validate():
+            return validate_error_json(req.errors)
+
+        # 2.调用服务登录账号
+        credential = self.account_service.password_login(
+            req.email.data, req.password.data
+        )
+
+        # 3.创建响应结构并返回
+        resp = PasswordLoginResp()
+
+        return success_json(resp.dump(credential))
+
+    @login_required
+    def logout(self):
+        """退出登录，用于提示前端清除授权凭证"""
+        logout_user()
+        return success_message("退出登陆成功")

internal/handler/oauth_handler.py

@@ -0,0 +1,37 @@
+from dataclasses import dataclass
+
+from injector import inject
+
+from internal.schema.oauth_schema import AuthorizeReq, AuthorizeResp
+from internal.service import OAuthService
+from pkg.response import success_json, validate_error_json
+
+
+@inject
+@dataclass
+class OAuthHandler:
+    """第三方授权认证处理器"""
+
+    oauth_service: OAuthService
+
+    def provider(self, provider_name: str):
+        """根据传递的提供商名字获取授权认证重定向地址"""
+        # 1.根据provider_name获取授权服务提供商
+        oauth = self.oauth_service.get_oauth_by_provider_name(provider_name)
+
+        # 2.调用函数获取授权地址
+        redirect_url = oauth.get_authorization_url()
+
+        return success_json({"redirect_url": redirect_url})
+
+    def authorize(self, provider_name: str):
+        """根据传递的提供商名字+code获取第三方授权信息"""
+        # 1.提取请求数据并校验
+        req = AuthorizeReq()
+        if not req.validate():
+            return validate_error_json(req.errors)
+
+        # 2.调用服务登录账号
+        credential = self.oauth_service.oauth_login(provider_name, req.code.data)
+
+        return success_json(AuthorizeResp().dump(credential))

internal/router/router.py

@@ -8,6 +8,9 @@
 from internal.handler.document_handler import DocumentHandler
 from internal.handler.segment_handler import SegmentHandler
 from internal.handler.upload_file_handler import UploadFileHandler
+from internal.handler.oauth_handler import OAuthHandler
+from internal.handler.account_handler import AccountHandler
+from internal.handler.auth_handler import AuthHandler
 
 
 @inject
@@ -22,6 +25,9 @@ class Router:
     dataset_handler: DatasetHandler
     document_handler: DocumentHandler
     segment_handler: SegmentHandler
+    oauth_handler: OAuthHandler
+    account_handler: AccountHandler
+    auth_handler: AuthHandler
 
     def register_router(self, app: Flask):
         """注册路由"""
@@ -215,5 +221,44 @@ def register_router(self, app: Flask):
             view_func=self.segment_handler.update_segment,
         )
 
+        # 授权认证模块
+        bp.add_url_rule(
+            "/oauth/<string:provider_name>",
+            view_func=self.oauth_handler.provider,
+        )
+        bp.add_url_rule(
+            "/oauth/authorize/<string:provider_name>",
+            methods=["POST"],
+            view_func=self.oauth_handler.authorize,
+        )
+        bp.add_url_rule(
+            "/auth/password-login",
+            methods=["POST"],
+            view_func=self.auth_handler.password_login,
+        )
+        bp.add_url_rule(
+            "/auth/logout",
+            methods=["POST"],
+            view_func=self.auth_handler.logout,
+        )
+
+        # 账号设置模块
+        bp.add_url_rule("/account", view_func=self.account_handler.get_current_user)
+        bp.add_url_rule(
+            "/account/password",
+            methods=["POST"],
+            view_func=self.account_handler.update_password,
+        )
+        bp.add_url_rule(
+            "/account/name",
+            methods=["POST"],
+            view_func=self.account_handler.update_name,
+        )
+        bp.add_url_rule(
+            "/account/avatar",
+            methods=["POST"],
+            view_func=self.account_handler.update_avatar,
+        )
+
         # 在应用上去注册蓝图
         app.register_blueprint(bp)

internal/schema/account_schema.py

@@ -0,0 +1,72 @@
+#!/usr/bin/env python
+from flask_wtf import FlaskForm
+from marshmallow import Schema, fields, pre_dump
+from wtforms import StringField
+from wtforms.validators import DataRequired, regexp, Length, URL
+
+from internal.lib.helper import datetime_to_timestamp
+from internal.model import Account
+from pkg.password import password_pattern
+
+
+class GetCurrentUserResp(Schema):
+    """获取当前登录账号信息响应"""
+
+    id = fields.UUID(dump_default="")
+    name = fields.String(dump_default="")
+    email = fields.String(dump_default="")
+    avatar = fields.String(dump_default="")
+    last_login_at = fields.Integer(dump_default=0)
+    last_login_ip = fields.String(dump_default="")
+    created_at = fields.Integer(dump_default=0)
+
+    @pre_dump
+    def process_data(self, data: Account, **kwargs):
+        return {
+            "id": data.id,
+            "name": data.name,
+            "email": data.email,
+            "avatar": data.avatar,
+            "last_login_at": datetime_to_timestamp(data.last_login_at),
+            "last_login_ip": data.last_login_ip,
+            "created_at": datetime_to_timestamp(data.created_at),
+        }
+
+
+class UpdatePasswordReq(FlaskForm):
+    """更新账号密码请求"""
+
+    password = StringField(
+        "password",
+        validators=[
+            DataRequired("登录密码不能为空"),
+            regexp(
+                regex=password_pattern,
+                message="密码最少包含一个字母、一个数字，并且长度是8-16",
+            ),
+        ],
+    )
+
+
+class UpdateNameReq(FlaskForm):
+    """更新账号名称请求"""
+
+    name = StringField(
+        "name",
+        validators=[
+            DataRequired("账号名字不能为空"),
+            Length(min=3, max=30, message="账号名称长度在3-30位"),
+        ],
+    )
+
+
+class UpdateAvatarReq(FlaskForm):
+    """更新账号头像请求"""
+
+    avatar = StringField(
+        "avatar",
+        validators=[
+            DataRequired("账号头像不能为空"),
+            URL("账号头像必须是URL图片地址"),
+        ],
+    )

internal/schema/auth_schema.py

@@ -0,0 +1,36 @@
+from flask_wtf import FlaskForm
+from marshmallow import Schema, fields
+from wtforms import StringField
+from wtforms.validators import DataRequired, Email, Length, regexp
+
+from pkg.password import password_pattern
+
+
+class PasswordLoginReq(FlaskForm):
+    """账号密码登录请求结构"""
+
+    email = StringField(
+        "email",
+        validators=[
+            DataRequired("登录邮箱不能为空"),
+            Email("登录邮箱格式错误"),
+            Length(min=5, max=254, message="登录邮箱长度在5-254个字符"),
+        ],
+    )
+    password = StringField(
+        "password",
+        validators=[
+            DataRequired("账号密码不能为空"),
+            regexp(
+                regex=password_pattern,
+                message="密码最少包含一个字母，一个数字，并且长度为8-16",
+            ),
+        ],
+    )
+
+
+class PasswordLoginResp(Schema):
+    """账号密码授权认证响应结构"""
+
+    access_token = fields.String()
+    expire_at = fields.Integer()

internal/schema/oauth_schema.py

@@ -0,0 +1,17 @@
+from flask_wtf import FlaskForm
+from marshmallow import Schema, fields
+from wtforms import StringField
+from wtforms.validators import DataRequired
+
+
+class AuthorizeReq(FlaskForm):
+    """第三方授权认证请求体"""
+
+    code = StringField("code", validators=[DataRequired("code代码不能为空")])
+
+
+class AuthorizeResp(Schema):
+    """第三方授权认证响应结构"""
+
+    access_token = fields.String()
+    expire_at = fields.Integer()

internal/server/http.py

@@ -56,7 +56,7 @@ def __init__(
             },
         )
 
-        self.before_request(middleware.request_loader)
+        login_manager.request_loader(middleware.request_loader)
 
         router.register_router(self)
 

internal/service/__init__.py

@@ -17,6 +17,7 @@
 from .conversation_service import ConversationService
 from .jwt_service import JwtService
 from .account_service import AccountService
+from .oauth_service import OAuthService
 
 __all__ = [
     "BuiltinToolService",
@@ -38,4 +39,5 @@
     "ConversationService",
     "JwtService",
     "AccountService",
+    "OAuthService",
 ]

internal/service/dataset_service.py

@@ -1,5 +1,7 @@
 from dataclasses import dataclass
 from uuid import UUID
+
+from flask_login import login_required
 from internal.lib.helper import datetime_to_timestamp
 from injector import inject
 from sqlalchemy import desc
@@ -179,6 +181,7 @@ def update_dataset(self, dataset_id: UUID, req: UpdateDatasetReq):
 
         return dataset
 
+    @login_required
     def get_datasets_with_page(self, req: GetDatasetsWithPageReq):
         """根据传递的信息获取知识库列表分页数据"""