twikoo-func 1.7.24 → 2.0.0-beta.2

package/utils/cap.js

@@ -1,311 +0,0 @@
-/**
- * Embedded Cap.js (https://capjs.js.org) — no external Cap Standalone required.
- * Storage adapters follow the same hooks as @cap.js/server / ink-battles.
- */
-
-const Cap = require('@cap.js/server')
-const logger = require('./logger')
-
-const CHALLENGE_OPTS = {
-  challengeCount: 50,
-  challengeSize: 32,
-  challengeDifficulty: 4,
-  expiresMs: 600000 // 10 min
-}
-
-function memoryStorage () {
-  const challenges = new Map()
-  const tokens = new Map()
-  return {
-    challenges: {
-      store: async (token, data) => { challenges.set(token, data) },
-      read: async (token) => challenges.get(token) || null,
-      delete: async (token) => { challenges.delete(token) },
-      deleteExpired: async () => {
-        const now = Date.now()
-        for (const [k, v] of challenges) {
-          if (!v || v.expires < now) challenges.delete(k)
-        }
-      }
-    },
-    tokens: {
-      store: async (key, expires) => { tokens.set(key, expires) },
-      get: async (key) => {
-        const exp = tokens.get(key)
-        if (!exp) return null
-        if (exp < Date.now()) {
-          tokens.delete(key)
-          return null
-        }
-        return exp
-      },
-      delete: async (key) => { tokens.delete(key) },
-      deleteExpired: async () => {
-        const now = Date.now()
-        for (const [k, v] of tokens) {
-          if (v < now) tokens.delete(k)
-        }
-      }
-    }
-  }
-}
-
-/** MongoDB (native driver) — Vercel / self-hosted mongo */
-function mongoStorage (db) {
-  const challenges = () => db.collection('cap_challenges')
-  const tokens = () => db.collection('cap_tokens')
-  let indexed = false
-  const ensureIndex = () => {
-    if (indexed) return
-    indexed = true
-    challenges().createIndex({ expiresAt: 1 }, { expireAfterSeconds: 0 }).catch(() => {})
-    tokens().createIndex({ expiresAt: 1 }, { expireAfterSeconds: 0 }).catch(() => {})
-  }
-  return {
-    challenges: {
-      store: async (token, data) => {
-        ensureIndex()
-        await challenges().updateOne(
-          { token },
-          { $set: { token, challenge: data.challenge, expiresAt: new Date(data.expires) } },
-          { upsert: true }
-        )
-      },
-      read: async (token) => {
-        const doc = await challenges().findOne({ token, expiresAt: { $gt: new Date() } })
-        return doc ? { challenge: doc.challenge, expires: doc.expiresAt.getTime() } : null
-      },
-      delete: async (token) => { await challenges().deleteOne({ token }) },
-      deleteExpired: async () => { await challenges().deleteMany({ expiresAt: { $lte: new Date() } }) }
-    },
-    tokens: {
-      store: async (key, expires) => {
-        ensureIndex()
-        await tokens().updateOne(
-          { key },
-          { $set: { key, expiresAt: new Date(expires) } },
-          { upsert: true }
-        )
-      },
-      get: async (key) => {
-        const doc = await tokens().findOne({ key, expiresAt: { $gt: new Date() } })
-        return doc ? doc.expiresAt.getTime() : null
-      },
-      delete: async (key) => { await tokens().deleteOne({ key }) },
-      deleteExpired: async () => { await tokens().deleteMany({ expiresAt: { $lte: new Date() } }) }
-    }
-  }
-}
-
-/** LokiJS — self-hosted default */
-function lokiStorage (db) {
-  const getCol = (name) => {
-    let col = db.getCollection(name)
-    if (!col) col = db.addCollection(name, { unique: ['key'] })
-    return col
-  }
-  // challenges use token field; tokens use key field
-  const getChallengeCol = () => {
-    let col = db.getCollection('cap_challenges')
-    if (!col) col = db.addCollection('cap_challenges', { unique: ['token'] })
-    return col
-  }
-  const getTokenCol = () => getCol('cap_tokens')
-  return {
-    challenges: {
-      store: async (token, data) => {
-        const col = getChallengeCol()
-        const existing = col.findOne({ token })
-        const row = { token, challenge: data.challenge, expires: data.expires }
-        if (existing) {
-          Object.assign(existing, row)
-          col.update(existing)
-        } else col.insert(row)
-      },
-      read: async (token) => {
-        const doc = getChallengeCol().findOne({ token })
-        if (!doc || doc.expires < Date.now()) return null
-        return { challenge: doc.challenge, expires: doc.expires }
-      },
-      delete: async (token) => { getChallengeCol().findAndRemove({ token }) },
-      deleteExpired: async () => {
-        getChallengeCol().findAndRemove({ expires: { $lte: Date.now() } })
-      }
-    },
-    tokens: {
-      store: async (key, expires) => {
-        const col = getTokenCol()
-        const existing = col.findOne({ key })
-        const row = { key, expires }
-        if (existing) {
-          Object.assign(existing, row)
-          col.update(existing)
-        } else col.insert(row)
-      },
-      get: async (key) => {
-        const doc = getTokenCol().findOne({ key })
-        if (!doc || doc.expires < Date.now()) return null
-        return doc.expires
-      },
-      delete: async (key) => { getTokenCol().findAndRemove({ key }) },
-      deleteExpired: async () => {
-        getTokenCol().findAndRemove({ expires: { $lte: Date.now() } })
-      }
-    }
-  }
-}
-
-/** CloudBase / TCB database */
-function tcbStorage (db) {
-  const _ = db.command
-  return {
-    challenges: {
-      store: async (token, data) => {
-        const col = db.collection('cap_challenges')
-        try {
-          await col.doc(token).set({
-            token,
-            challenge: data.challenge,
-            expires: data.expires
-          })
-        } catch (e) {
-          // doc may exist
-          await col.doc(token).update({
-            challenge: data.challenge,
-            expires: data.expires
-          })
-        }
-      },
-      read: async (token) => {
-        try {
-          const res = await db.collection('cap_challenges').doc(token).get()
-          const doc = res.data && res.data[0]
-          if (!doc || doc.expires < Date.now()) return null
-          return { challenge: doc.challenge, expires: doc.expires }
-        } catch (e) {
-          return null
-        }
-      },
-      delete: async (token) => {
-        try { await db.collection('cap_challenges').doc(token).remove() } catch (e) {}
-      },
-      deleteExpired: async () => {
-        try {
-          await db.collection('cap_challenges').where({ expires: _.lte(Date.now()) }).remove()
-        } catch (e) {}
-      }
-    },
-    tokens: {
-      store: async (key, expires) => {
-        // CloudBase doc id cannot contain ':'
-        const id = key.replace(/:/g, '_')
-        try {
-          await db.collection('cap_tokens').doc(id).set({ key, expires })
-        } catch (e) {
-          await db.collection('cap_tokens').doc(id).update({ key, expires })
-        }
-      },
-      get: async (key) => {
-        try {
-          const id = key.replace(/:/g, '_')
-          const res = await db.collection('cap_tokens').doc(id).get()
-          const doc = res.data && res.data[0]
-          if (!doc || doc.expires < Date.now()) return null
-          return doc.expires
-        } catch (e) {
-          return null
-        }
-      },
-      delete: async (key) => {
-        try {
-          const id = key.replace(/:/g, '_')
-          await db.collection('cap_tokens').doc(id).remove()
-        } catch (e) {}
-      },
-      deleteExpired: async () => {
-        try {
-          await db.collection('cap_tokens').where({ expires: _.lte(Date.now()) }).remove()
-        } catch (e) {}
-      }
-    }
-  }
-}
-
-/**
- * EdgeOne Blob-style store: expects { get(key), set(key, value), del(key) }
- * value is JSON-serializable.
- */
-function kvStorage (kv) {
-  return {
-    challenges: {
-      store: async (token, data) => { await kv.set(`cap:c:${token}`, data) },
-      read: async (token) => {
-        const data = await kv.get(`cap:c:${token}`)
-        if (!data || data.expires < Date.now()) return null
-        return data
-      },
-      delete: async (token) => { await kv.del(`cap:c:${token}`) },
-      deleteExpired: async () => {}
-    },
-    tokens: {
-      store: async (key, expires) => { await kv.set(`cap:t:${key}`, { expires }) },
-      get: async (key) => {
-        const data = await kv.get(`cap:t:${key}`)
-        if (!data || data.expires < Date.now()) return null
-        return data.expires
-      },
-      delete: async (key) => { await kv.del(`cap:t:${key}`) },
-      deleteExpired: async () => {}
-    }
-  }
-}
-
-function createCap (storage) {
-  return new Cap({
-    noFSState: true,
-    storage: storage || memoryStorage()
-  })
-}
-
-async function createChallenge (cap) {
-  return cap.createChallenge(CHALLENGE_OPTS)
-}
-
-async function redeemChallenge (cap, body) {
-  const token = body && body.token
-  const solutions = body && body.solutions
-  if (!token || !solutions || !Array.isArray(solutions)) {
-    return { success: false, error: 'Missing token or solutions' }
-  }
-  return cap.redeemChallenge({ token, solutions })
-}
-
-async function validateToken (cap, token) {
-  if (!token) return false
-  try {
-    const { success } = await cap.validateToken(token)
-    return !!success
-  } catch (e) {
-    logger.error('Cap validateToken failed:', e)
-    return false
-  }
-}
-
-/** CAPTCHA_PROVIDER=Cap and no CAP_API_ENDPOINT → use embedded Cap */
-function isBuiltinCap (config) {
-  return config && config.CAPTCHA_PROVIDER === 'Cap' && !config.CAP_API_ENDPOINT
-}
-
-module.exports = {
-  createCap,
-  memoryStorage,
-  mongoStorage,
-  lokiStorage,
-  tcbStorage,
-  kvStorage,
-  createChallenge,
-  redeemChallenge,
-  validateToken,
-  isBuiltinCap,
-  CHALLENGE_OPTS
-}

package/utils/constants.js

@@ -1,20 +0,0 @@
-module.exports = {
-  RES_CODE: {
-    SUCCESS: 0,
-    NO_PARAM: 100,
-    FAIL: 1000,
-    EVENT_NOT_EXIST: 1001,
-    PASS_EXIST: 1010,
-    CONFIG_NOT_EXIST: 1020,
-    CREDENTIALS_NOT_EXIST: 1021,
-    CREDENTIALS_INVALID: 1025,
-    PASS_NOT_EXIST: 1022,
-    PASS_NOT_MATCH: 1023,
-    NEED_LOGIN: 1024,
-    FORBIDDEN: 1403,
-    AKISMET_ERROR: 1030,
-    UPLOAD_FAILED: 1040,
-    NSFW_REJECTED: 1041
-  },
-  MAX_REQUEST_TIMES: parseInt(process.env.TWIKOO_THROTTLE) || 250
-}

package/utils/image.js

@@ -1,376 +0,0 @@
-const crypto = require('crypto')
-const { isUrl } = require('.')
-const { RES_CODE } = require('./constants')
-const { getAxios, getFormData } = require('./lib')
-const axios = getAxios()
-const FormData = getFormData()
-const logger = require('./logger')
-
-const MAX_IMAGE_SIZE = 10 * 1024 * 1024
-const IMAGE_TYPES = [
-  {
-    mimeType: 'image/jpeg',
-    extension: 'jpg',
-    matches: (body) => body.length >= 3 && body[0] === 0xff && body[1] === 0xd8 && body[2] === 0xff
-  },
-  {
-    mimeType: 'image/png',
-    extension: 'png',
-    matches: (body) => body.length >= 8 && body.subarray(0, 8).equals(Buffer.from([0x89, 0x50, 0x4e, 0x47, 0x0d, 0x0a, 0x1a, 0x0a]))
-  },
-  {
-    mimeType: 'image/gif',
-    extension: 'gif',
-    matches: (body) => body.length >= 6 && (body.subarray(0, 6).equals(Buffer.from('GIF87a')) || body.subarray(0, 6).equals(Buffer.from('GIF89a')))
-  },
-  {
-    mimeType: 'image/webp',
-    extension: 'webp',
-    matches: (body) => body.length >= 12 && body.subarray(0, 4).equals(Buffer.from('RIFF')) && body.subarray(8, 12).equals(Buffer.from('WEBP'))
-  }
-]
-
-const fn = {
-  async uploadImage (event, config) {
-    const { photo } = event
-    const res = {}
-    const imageService = config.IMAGE_CDN
-    try {
-      if (imageService === 's3') {
-        // S3 图床只需要配置相关 S3 参数，不需要 IMAGE_CDN_TOKEN
-        if (!config.S3_BUCKET || !config.S3_ACCESS_KEY_ID || !config.S3_SECRET_ACCESS_KEY) {
-          throw new Error('未配置 S3 图床参数（S3_BUCKET、S3_ACCESS_KEY_ID、S3_SECRET_ACCESS_KEY）')
-        }
-      } else if (!imageService || !config.IMAGE_CDN_TOKEN) {
-        throw new Error('未配置图片上传服务')
-      }
-      const image = fn.parseImage(photo)
-      if (config.NSFW_API_URL) {
-        const nsfwResult = await fn.checkNsfw({ image, config })
-        if (nsfwResult.rejected) {
-          res.code = RES_CODE.NSFW_REJECTED
-          res.err = nsfwResult.message
-          return res
-        }
-      }
-      // tip: qcloud 图床走前端上传，其他图床走后端上传
-      if (imageService === '7bu') {
-        await fn.uploadImageToLskyPro({ image, config, res, imageCdn: 'https://7bu.top' })
-      } else if (imageService === 'see') {
-        await fn.uploadImageToSee({ image, config, res, imageCdn: 'https://s.ee/api/v1/file/upload' })
-      } else if (isUrl(imageService)) {
-        await fn.uploadImageToLskyPro({ image, config, res, imageCdn: imageService })
-      } else if (imageService === 'lskypro') {
-        await fn.uploadImageToLskyPro({ image, config, res, imageCdn: config.IMAGE_CDN_URL })
-      } else if (imageService === 'piclist') {
-        await fn.uploadImageToPicList({ image, config, res, imageCdn: config.IMAGE_CDN_URL })
-      } else if (imageService === 'easyimage') {
-        await fn.uploadImageToEasyImage({ image, config, res })
-      } else if (imageService === 'chevereto') {
-        await fn.uploadImageToChevereto({ image, config, res })
-      } else if (imageService === 's3') {
-        await fn.uploadImageToS3({ image, config, res })
-      } else {
-        throw new Error('不支持的图片上传服务')
-      }
-    } catch (e) {
-      logger.error(e)
-      res.code = RES_CODE.UPLOAD_FAILED
-      res.err = e.message
-    }
-    return res
-  },
-  async checkNsfw ({ image, config }) {
-    const result = { rejected: false, message: '' }
-    try {
-      const threshold = parseFloat(config.NSFW_THRESHOLD) || 0.5
-      const apiUrl = config.NSFW_API_URL.replace(/\/$/, '')
-      const formData = new FormData()
-      fn.appendImage(formData, 'image', image)
-      const response = await axios.post(`${apiUrl}/classify`, formData, {
-        headers: {
-          ...formData.getHeaders()
-        },
-        timeout: 30000
-      })
-      const scores = response.data
-      if (scores && typeof scores === 'object') {
-        const nsfwScore = (scores.porn || 0) + (scores.hentai || 0) + (scores.sexy || 0)
-        logger.info('NSFW检测分数:', nsfwScore, '阈值:', threshold)
-        if (nsfwScore > threshold) {
-          result.rejected = true
-          result.message = `图片包含不当内容，检测分数 ${nsfwScore.toFixed(3)} 超过阈值 ${threshold}`
-        }
-      }
-    } catch (e) {
-      logger.error('NSFW检测失败:', e.message)
-    }
-    return result
-  },
-  async uploadImageToSee ({ image, config, res, imageCdn }) {
-    // S.EE 图床 https://s.ee (原 SM.MS)
-    const formData = new FormData()
-    fn.appendImage(formData, 'smfile', image)
-    const uploadResult = await axios.post(imageCdn, formData, {
-      headers: {
-        ...formData.getHeaders(),
-        Authorization: config.IMAGE_CDN_TOKEN
-      }
-    })
-    if (uploadResult.data.success) {
-      res.data = uploadResult.data.data
-    } else {
-      throw new Error(uploadResult.data.message)
-    }
-  },
-  async uploadImageToLskyPro ({ image, config, res, imageCdn }) {
-    // 自定义兰空图床（v2）URL
-    const formData = new FormData()
-    fn.appendImage(formData, 'file', image)
-    if (process.env.TWIKOO_LSKY_STRATEGY_ID) {
-      formData.append('strategy_id', parseInt(process.env.TWIKOO_LSKY_STRATEGY_ID))
-    }
-    const url = `${imageCdn}/api/v1/upload`
-    let token = config.IMAGE_CDN_TOKEN
-    if (!token.startsWith('Bearer')) {
-      token = `Bearer ${token}`
-    }
-    const uploadResult = await axios.post(url, formData, {
-      headers: {
-        ...formData.getHeaders(),
-        Authorization: token
-      }
-    })
-    if (uploadResult.data.status) {
-      res.data = uploadResult.data.data
-      res.data.url = res.data.links.url
-    } else {
-      throw new Error(uploadResult.data.message)
-    }
-  },
-  async uploadImageToPicList ({ image, config, res, imageCdn }) {
-    // PicList https://piclist.cn/ 高效的云存储和图床平台管理工具
-    // 鉴权使用 query 参数 key
-    const formData = new FormData()
-    fn.appendImage(formData, 'file', image)
-    let url = `${imageCdn}/upload`
-    // 如果填写了 key 则拼接 url
-    if (config.IMAGE_CDN_TOKEN) {
-      url += `?key=${config.IMAGE_CDN_TOKEN}`
-    }
-    const uploadResult = await axios.post(url, formData)
-    if (uploadResult.data.success) {
-      res.data = uploadResult.data
-      res.data.url = uploadResult.data.result[0]
-    } else {
-      throw new Error(uploadResult.data.message)
-    }
-  },
-  async uploadImageToEasyImage ({ image, config, res }) {
-    // EasyImage2.0 https://github.com/icret/EasyImages2.0 简单图床 - 一款功能强大无数据库的图床 2.0版
-    try {
-      // 参数校验
-      if (!config.IMAGE_CDN_URL) {
-        throw new Error('未配置 EasyImage2.0 的 API 地址 (IMAGE_CDN_URL)')
-      }
-      if (!config.IMAGE_CDN_TOKEN) {
-        throw new Error('未配置 EasyImage2.0 的 Token (IMAGE_CDN_TOKEN)')
-      }
-      // 构建固定格式的 FormData
-      const formData = new FormData()
-      // 添加 token 参数到 Body
-      formData.append('token', config.IMAGE_CDN_TOKEN)
-      // 添加图片文件（固定参数名 image）
-      fn.appendImage(formData, 'image', image)
-      // 发送请求
-      const uploadResult = await axios.post(config.IMAGE_CDN_URL, formData, {
-        headers: {
-          ...formData.getHeaders(),
-          'User-Agent': 'Twikoo'
-        }
-      })
-      // 解析响应
-      const response = uploadResult.data
-      // 检查业务状态码
-      if (response.code !== 200 || response.result !== 'success') {
-        throw new Error(`API 返回错误 (CODE: ${response.code})`)
-      }
-      // 提取图片 URL（固定 JSON 路径 url）
-      if (!response.url) {
-        throw new Error('未找到有效图片 URL')
-      }
-      // 返回标准化结构
-      res.data = {
-        url: response.url,
-        thumb: response.thumb, // 可选返回缩略图
-        del: response.del // 可选返回删除链接
-      }
-    } catch (e) {
-      let errorMsg = `EasyImage2.0 上传失败: ${e.message}`
-      // 追加 API 返回的错误详情
-      if (e.response?.data) {
-        errorMsg += ` | 错误类型: ${e.response.data.message || '未知'}`
-      }
-      throw new Error(errorMsg)
-    }
-  },
-  async uploadImageToChevereto ({ image, config, res }) {
-    if (!config.IMAGE_CDN_URL) {
-      throw new Error('未配置 Chevereto 站点地址 (IMAGE_CDN_URL)')
-    }
-    if (!config.IMAGE_CDN_TOKEN) {
-      throw new Error('未配置 Chevereto API Key (IMAGE_CDN_TOKEN)')
-    }
-    const formData = new FormData()
-    formData.append('key', config.IMAGE_CDN_TOKEN)
-    fn.appendImage(formData, 'source', image)
-    formData.append('format', 'json')
-    const apiUrl = config.IMAGE_CDN_URL.replace(/\/$/, '') + '/api/1/upload'
-    const uploadResult = await axios.post(apiUrl, formData, {
-      headers: {
-        ...formData.getHeaders()
-      }
-    })
-    const data = uploadResult.data
-    if (data.status_code === 200 && data.image && data.image.url) {
-      res.data = {
-        url: data.image.url,
-        thumb: data.image.thumb ? data.image.thumb.url : data.image.url,
-        del: data.image.delete_url
-      }
-    } else {
-      const errMsg = (data.error && data.error.message) || JSON.stringify(data)
-      throw new Error(`Chevereto 上传失败: ${errMsg}`)
-    }
-  },
-  async uploadImageToS3 ({ image, config, res }) {
-    // 使用原生 crypto + axios 实现 AWS Signature V4，无需引入 SDK
-    if (!config.S3_BUCKET) {
-      throw new Error('未配置 S3 存储桶名称 (S3_BUCKET)')
-    }
-    if (!config.S3_ACCESS_KEY_ID) {
-      throw new Error('未配置 S3 Access Key ID (S3_ACCESS_KEY_ID)')
-    }
-    if (!config.S3_SECRET_ACCESS_KEY) {
-      throw new Error('未配置 S3 Secret Access Key (S3_SECRET_ACCESS_KEY)')
-    }
-    const region = config.S3_REGION || 'us-east-1'
-    const { body, mimeType, fileName } = image
-    // 构建对象 key
-    const prefix = config.S3_PATH_PREFIX ? config.S3_PATH_PREFIX.replace(/\/$/, '') + '/' : ''
-    const key = `${prefix}${fileName}`
-    const forcePathStyle = String(config.S3_FORCE_PATH_STYLE).trim().toLowerCase() !== 'false'
-    let endpoint
-    let s3Base
-    if (config.S3_ENDPOINT) {
-      // 自定义 S3 Endpoint
-      const endpointBase = config.S3_ENDPOINT.replace(/\/$/, '')
-      s3Base = forcePathStyle ? `${endpointBase}/${config.S3_BUCKET}` : endpointBase
-      endpoint = `${s3Base}/${key}`
-    } else {
-      // 标准 AWS S3：virtual-hosted-style URL
-      s3Base = `https://${config.S3_BUCKET}.s3.${region}.amazonaws.com`
-      endpoint = `${s3Base}/${key}`
-    }
-    const endpointUrl = new URL(endpoint)
-    const host = endpointUrl.host
-    const pathname = endpointUrl.pathname
-    const now = new Date()
-    const dateStamp = now.toISOString().slice(0, 10).replace(/-/g, '')
-    const amzDate = now.toISOString().replace(/[:-]/g, '').slice(0, 15) + 'Z'
-    const payloadHash = crypto.createHash('sha256').update(body).digest('hex')
-    const signedHeaders = 'content-type;host;x-amz-content-sha256;x-amz-date'
-    const canonicalHeaders = [
-      `content-type:${mimeType}`,
-      `host:${host}`,
-      `x-amz-content-sha256:${payloadHash}`,
-      `x-amz-date:${amzDate}`
-    ].join('\n') + '\n'
-    const canonicalRequest = [
-      'PUT',
-      pathname,
-      '', // query string
-      canonicalHeaders,
-      signedHeaders,
-      payloadHash
-    ].join('\n')
-    const credentialScope = `${dateStamp}/${region}/s3/aws4_request`
-    const stringToSign = [
-      'AWS4-HMAC-SHA256',
-      amzDate,
-      credentialScope,
-      crypto.createHash('sha256').update(canonicalRequest).digest('hex')
-    ].join('\n')
-    const hmac = (key, data) => crypto.createHmac('sha256', key).update(data).digest()
-    const signingKey = hmac(
-      hmac(
-        hmac(
-          hmac(Buffer.from('AWS4' + config.S3_SECRET_ACCESS_KEY), dateStamp),
-          region
-        ),
-        's3'
-      ),
-      'aws4_request'
-    )
-    const signature = crypto.createHmac('sha256', signingKey).update(stringToSign).digest('hex')
-    const authorization = `AWS4-HMAC-SHA256 Credential=${config.S3_ACCESS_KEY_ID}/${credentialScope}, SignedHeaders=${signedHeaders}, Signature=${signature}`
-    await axios.put(endpoint, body, {
-      headers: {
-        'Content-Type': mimeType,
-        'x-amz-content-sha256': payloadHash,
-        'x-amz-date': amzDate,
-        Authorization: authorization
-      },
-      maxBodyLength: Infinity
-    })
-    // 构建访问 URL
-    let fileUrl
-    if (config.S3_CDN_URL) {
-      fileUrl = `${config.S3_CDN_URL.replace(/\/$/, '')}/${key}`
-    } else {
-      fileUrl = `${s3Base}/${key}`
-    }
-    res.data = { url: fileUrl }
-  },
-  parseImage (photo) {
-    if (typeof photo !== 'string' || photo.length > Math.ceil(MAX_IMAGE_SIZE / 3) * 4 + 64) {
-      throw new Error('图片大小不能超过 10 MB')
-    }
-    const header = /^data:([a-z0-9.+-]+\/[a-z0-9.+-]+);base64,/i.exec(photo)
-    if (!header) {
-      throw new Error('图片数据格式不合法')
-    }
-    const declaredMimeType = header[1].toLowerCase()
-    const base64 = photo.slice(header[0].length)
-    if (!base64 || base64.length % 4 !== 0 || !/^[a-z0-9+/]*={0,2}$/i.test(base64)) {
-      throw new Error('图片数据格式不合法')
-    }
-    const padding = base64.endsWith('==') ? 2 : (base64.endsWith('=') ? 1 : 0)
-    const decodedSize = base64.length * 3 / 4 - padding
-    if (decodedSize > MAX_IMAGE_SIZE) {
-      throw new Error('图片大小不能超过 10 MB')
-    }
-    const body = Buffer.from(base64, 'base64')
-    const imageType = IMAGE_TYPES.find((type) => type.matches(body))
-    if (!imageType) {
-      throw new Error('仅支持 JPEG、PNG、GIF 和 WebP 图片')
-    }
-    if (declaredMimeType !== imageType.mimeType) {
-      throw new Error('图片 MIME 类型与文件内容不匹配')
-    }
-    return {
-      body,
-      mimeType: imageType.mimeType,
-      fileName: `${crypto.randomBytes(16).toString('hex')}.${imageType.extension}`
-    }
-  },
-  appendImage (formData, fieldName, image) {
-    formData.append(fieldName, image.body, {
-      filename: image.fileName,
-      contentType: image.mimeType,
-      knownLength: image.body.length
-    })
-  }
-}
-
-module.exports = fn