huace-aigc-auth-client 1.1.23__tar.gz → 1.1.25__tar.gz

{huace_aigc_auth_client-1.1.23/huace_aigc_auth_client.egg-info → huace_aigc_auth_client-1.1.25}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: huace-aigc-auth-client
-Version: 1.1.23
+Version: 1.1.25
 Summary: 华策AIGC Auth Client - 提供 Token 验证、用户信息获取、权限检查、旧系统接入等功能
 Author-email: Huace <support@huace.com>
 License: MIT

{huace_aigc_auth_client-1.1.23 → huace_aigc_auth_client-1.1.25}/huace_aigc_auth_client/__init__.py

@@ -172,4 +172,4 @@ __all__ = [
     # 用户上下文
     "get_current_user",
 ]
-__version__ = "1.1.23"
+__version__ = "1.1.25"

{huace_aigc_auth_client-1.1.23 → huace_aigc_auth_client-1.1.25}/huace_aigc_auth_client/sdk.py

@@ -689,8 +689,13 @@ class AuthMiddleware:
                 # 只收集表单字段（非文件字段）
                 try:
                     form = await request.form()
-                    # 只收集非文件字段（通过检查是否有filename属性判断是否为文件）
-                    params["form_params"] = {k: v for k, v in form.items() if not hasattr(v, 'filename')}
+                    form_params = {}
+                    for k, v in form.items():
+                        if hasattr(v, "filename"):
+                            # 跳过文件字段
+                            continue
+                        form_params[k] = v
+                    params["form_params"] = form_params
                 except Exception:
                     pass
             elif content_type.startswith('text/'):
@@ -755,9 +760,83 @@ class AuthMiddleware:
             return None
         return authorization[7:]
 
+    def get_fastapi_middleware_class(self, user_info_callback: Callable = None):
+        """
+        获取 FastAPI 中间件类（推荐使用，避免请求体读取问题）
+        
+        使用方法:
+            from starlette.middleware.base import BaseHTTPMiddleware
+            app.add_middleware(auth_middleware.get_fastapi_middleware_class())
+        
+        Returns:
+            继承于 BaseHTTPMiddleware 的中间件类
+        """
+        from fastapi.responses import JSONResponse
+        from starlette.middleware.base import BaseHTTPMiddleware
+        
+        auth_middleware_instance = self
+        
+        class AuthHTTPMiddleware(BaseHTTPMiddleware):
+            async def dispatch(self, request, call_next):
+                path = request.url.path
+                start_time = time.time()
+                
+                # 收集请求参数
+                request_params = await auth_middleware_instance._collect_fastapi_request_params(request) if auth_middleware_instance.enable_stats else None
+
+                # 检查是否跳过
+                if auth_middleware_instance._should_skip(path):
+                    return await call_next(request)
+
+                # 获取 Authorization header
+                authorization = request.headers.get("Authorization")
+                token = auth_middleware_instance._extract_token(authorization)
+
+                if not token:
+                    logger.warning("AuthMiddleware未提供认证信息")
+                    response_time = time.time() - start_time
+                    auth_middleware_instance._collect_stats(path, request.method, 401, response_time, "", "未提供认证信息", request_params)
+                    return JSONResponse(
+                        status_code=401,
+                        content={"code": 401, "message": "未提供认证信息", "data": None}
+                    )
+
+                # 验证 token
+                try:
+                    user_info = auth_middleware_instance.client.get_user_info(token)
+                    # 将用户信息存储到 request.state
+                    request.state.user_info = user_info
+                    # 设置上下文
+                    set_current_user(dataclasses.asdict(user_info))
+                    if user_info_callback:
+                        await user_info_callback(request, user_info)
+                except AigcAuthError as e:
+                    logger.error(f"AuthMiddleware认证失败: {e.message}")
+                    response_time = time.time() - start_time
+                    auth_middleware_instance._collect_stats(path, request.method, 401, response_time, token, e.message, request_params)
+                    return JSONResponse(
+                        status_code=401,
+                        content={"code": e.code, "message": e.message, "data": None}
+                    )
+                
+                # 处理请求
+                try:
+                    response = await call_next(request)
+                    response_time = time.time() - start_time
+                    auth_middleware_instance._collect_stats(path, request.method, response.status_code, response_time, token, None, request_params)
+                    return response
+                except Exception as e:
+                    response_time = time.time() - start_time
+                    auth_middleware_instance._collect_stats(path, request.method, 500, response_time, token, str(e), request_params)
+                    raise
+                finally:
+                    clear_current_user()
+        
+        return AuthHTTPMiddleware
+
     async def fastapi_middleware(self, request, call_next, user_info_callback: Callable = None):
         """
-        FastAPI 中间件
+        FastAPI 中间件（旧方法，推荐使用 get_fastapi_middleware_class）
 
         使用方法:
             @app.middleware("http")

{huace_aigc_auth_client-1.1.23 → huace_aigc_auth_client-1.1.25/huace_aigc_auth_client.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: huace-aigc-auth-client
-Version: 1.1.23
+Version: 1.1.25
 Summary: 华策AIGC Auth Client - 提供 Token 验证、用户信息获取、权限检查、旧系统接入等功能
 Author-email: Huace <support@huace.com>
 License: MIT

{huace_aigc_auth_client-1.1.23 → huace_aigc_auth_client-1.1.25}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "huace-aigc-auth-client"
-version = "1.1.23"
+version = "1.1.25"
 description = "华策AIGC Auth Client - 提供 Token 验证、用户信息获取、权限检查、旧系统接入等功能"
 readme = "README.md"
 requires-python = ">=3.7"