huace-aigc-auth-client 1.1.25__tar.gz → 1.1.27__tar.gz

{huace_aigc_auth_client-1.1.25/huace_aigc_auth_client.egg-info → huace_aigc_auth_client-1.1.27}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: huace-aigc-auth-client
-Version: 1.1.25
+Version: 1.1.27
 Summary: 华策AIGC Auth Client - 提供 Token 验证、用户信息获取、权限检查、旧系统接入等功能
 Author-email: Huace <support@huace.com>
 License: MIT

{huace_aigc_auth_client-1.1.25 → huace_aigc_auth_client-1.1.27}/huace_aigc_auth_client/__init__.py

@@ -172,4 +172,4 @@ __all__ = [
     # 用户上下文
     "get_current_user",
 ]
-__version__ = "1.1.25"
+__version__ = "1.1.27"

{huace_aigc_auth_client-1.1.25 → huace_aigc_auth_client-1.1.27}/huace_aigc_auth_client/sdk.py

@@ -672,6 +672,14 @@ class AuthMiddleware:
             
             # 获取请求体（使用白名单方式，只处理已知安全的内容类型）
             content_type = request.headers.get("content-type", "").lower()
+            # 读取请求体（需要特殊处理以避免消耗流）
+            body = b""
+            if request.method in ["POST", "PUT", "PATCH"]:
+                try:
+                    body = await request.body()
+                except:
+                    pass
+            params["request_body"] = body.decode('utf-8', errors='ignore')
             
             if "application/json" in content_type:
                 try:
@@ -698,14 +706,6 @@ class AuthMiddleware:
                     params["form_params"] = form_params
                 except Exception:
                     pass
-            elif content_type.startswith('text/'):
-                # 只读取文本类型的请求体，且限制大小避免内存问题
-                try:
-                    body = await request.body()
-                    if body and len(body) < 10240:  # 限制10KB避免内存问题
-                        params["request_body"] = body.decode('utf-8')
-                except Exception:
-                    pass
             # 其他类型（如 application/octet-stream 等二进制流）直接跳过，不读取
             
             return params
@@ -852,9 +852,6 @@ class AuthMiddleware:
 
         path = request.url.path
         start_time = time.time()
-        
-        # 收集请求参数
-        request_params = await self._collect_fastapi_request_params(request) if self.enable_stats else None
 
         # 检查是否跳过
         if self._should_skip(path):
@@ -867,6 +864,8 @@ class AuthMiddleware:
         if not token:
             logger.warning("AuthMiddleware未提供认证信息")
             response_time = time.time() - start_time
+            # 收集请求参数
+            request_params = await self._collect_fastapi_request_params(request) if self.enable_stats else None
             self._collect_stats(path, request.method, 401, response_time, "", "未提供认证信息", request_params)
             return JSONResponse(
                 status_code=401,
@@ -885,6 +884,8 @@ class AuthMiddleware:
         except AigcAuthError as e:
             logger.error(f"AuthMiddleware认证失败: {e.message}")
             response_time = time.time() - start_time
+            # 收集请求参数
+            request_params = await self._collect_fastapi_request_params(request) if self.enable_stats else None
             self._collect_stats(path, request.method, 401, response_time, token, e.message, request_params)
             return JSONResponse(
                 status_code=401,
@@ -895,9 +896,13 @@ class AuthMiddleware:
         try:
             response = await call_next(request)
             response_time = time.time() - start_time
+            # 收集请求参数
+            request_params = await self._collect_fastapi_request_params(request) if self.enable_stats else None
             self._collect_stats(path, request.method, response.status_code, response_time, token, None, request_params)
             return response
         except Exception as e:
+            # 收集请求参数
+            request_params = await self._collect_fastapi_request_params(request) if self.enable_stats else None
             response_time = time.time() - start_time
             self._collect_stats(path, request.method, 500, response_time, token, str(e), request_params)
             raise

{huace_aigc_auth_client-1.1.25 → huace_aigc_auth_client-1.1.27/huace_aigc_auth_client.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: huace-aigc-auth-client
-Version: 1.1.25
+Version: 1.1.27
 Summary: 华策AIGC Auth Client - 提供 Token 验证、用户信息获取、权限检查、旧系统接入等功能
 Author-email: Huace <support@huace.com>
 License: MIT

{huace_aigc_auth_client-1.1.25 → huace_aigc_auth_client-1.1.27}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "huace-aigc-auth-client"
-version = "1.1.25"
+version = "1.1.27"
 description = "华策AIGC Auth Client - 提供 Token 验证、用户信息获取、权限检查、旧系统接入等功能"
 readme = "README.md"
 requires-python = ">=3.7"