lesscode-flask 0.2.114__tar.gz → 0.2.116__tar.gz

{lesscode_flask-0.2.114 → lesscode_flask-0.2.116}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: lesscode-flask
-Version: 0.2.114
+Version: 0.2.116
 Summary: lesscode-flask 是基于flask的web开发脚手架项目，该项目初衷为简化开发过程，让研发人员更加关注业务。
 Home-page: https://lesscode-flask
 Author: Chao.yy
@@ -11,7 +11,7 @@ Classifier: Operating System :: OS Independent
 Requires-Python: >=3.9
 Description-Content-Type: text/markdown
 Requires-Dist: Flask==3.0.3
-Requires-Dist: lesscode-utils==0.0.95
+Requires-Dist: lesscode-utils==0.0.96
 Requires-Dist: Flask-Login==0.6.3
 Requires-Dist: redis==5.1.1
 Requires-Dist: flask-swagger-ui==4.11.1

{lesscode_flask-0.2.114 → lesscode_flask-0.2.116}/lesscode_flask/__init__.py

@@ -1,4 +1,4 @@
-__version__ = "0.2.114"
+__version__ = "0.2.116"
 
 import functools
 import logging

{lesscode_flask-0.2.114 → lesscode_flask-0.2.116}/lesscode_flask/setting/__init__.py

@@ -100,7 +100,7 @@ class BaseConfig:
     SIGN_NONCE_ENABLE: bool = True
     # nonce缓存时长（秒）
     SIGN_NONCE_TTL_SEC: int = 300
-    # 签名白名单路径前缀
+    # 签名白名单路径，普通配置按前缀匹配；带 * 时支持任意内容通配，例如 /a/*/b
     SIGN_WHITE_LIST: list = [SWAGGER_URL, SWAGGER_API_URL, f"{ROUTE_PREFIX}/oauth/token", f"{ROUTE_PREFIX}/oauth/captcha"]
     # 签名IP白名单（支持单IP或CIDR，命中后跳过签名校验）
     SIGN_IP_WHITE_LIST: list = []

{lesscode_flask-0.2.114 → lesscode_flask-0.2.116}/lesscode_flask/utils/sign/signature.py

@@ -2,6 +2,7 @@ import hashlib
 import hmac
 import ipaddress
 import logging
+import re
 import time
 
 from flask import request
@@ -70,13 +71,23 @@ def _canonical_sign_content(timestamp: str, nonce: str) -> str:
     return f"{method}\n{path}\n{query_string}\n{body_hash}\n{timestamp}\n{nonce}"
 
 
+def _match_sign_white_path(request_path: str, white_item: str) -> bool:
+    white_path = (white_item or "").strip()
+    if not white_path:
+        return False
+    if "*" not in white_path:
+        return request_path.startswith(white_path)
+    pattern = re.escape(white_path).replace(r"\*", ".*")
+    return re.match(f"^{pattern}", request_path) is not None
+
+
 def _in_sign_white_list(white_list: list) -> bool:
-    # 白名单匹配规则：只要请求路径以前缀命中就跳过签名校验。
+    # 白名单匹配规则：普通配置按前缀匹配；带 * 时支持任意内容通配。
     if not white_list:
         return False
     request_path = request.path or ""
     for white_item in white_list:
-        if white_item and request_path.startswith(white_item):
+        if _match_sign_white_path(request_path, white_item):
             return True
     return False
 

{lesscode_flask-0.2.114 → lesscode_flask-0.2.116}/lesscode_flask.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: lesscode-flask
-Version: 0.2.114
+Version: 0.2.116
 Summary: lesscode-flask 是基于flask的web开发脚手架项目，该项目初衷为简化开发过程，让研发人员更加关注业务。
 Home-page: https://lesscode-flask
 Author: Chao.yy
@@ -11,7 +11,7 @@ Classifier: Operating System :: OS Independent
 Requires-Python: >=3.9
 Description-Content-Type: text/markdown
 Requires-Dist: Flask==3.0.3
-Requires-Dist: lesscode-utils==0.0.95
+Requires-Dist: lesscode-utils==0.0.96
 Requires-Dist: Flask-Login==0.6.3
 Requires-Dist: redis==5.1.1
 Requires-Dist: flask-swagger-ui==4.11.1

{lesscode_flask-0.2.114 → lesscode_flask-0.2.116}/lesscode_flask.egg-info/requires.txt

@@ -1,5 +1,5 @@
 Flask==3.0.3
-lesscode-utils==0.0.95
+lesscode-utils==0.0.96
 Flask-Login==0.6.3
 redis==5.1.1
 flask-swagger-ui==4.11.1