mdbq 4.0.92__tar.gz → 4.0.94__tar.gz

{mdbq-4.0.92 → mdbq-4.0.94}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: mdbq
-Version: 4.0.92
+Version: 4.0.94
 Home-page: https://pypi.org/project/mdbq
 Author: xigua, 
 Author-email: 2587125111@qq.com

mdbq-4.0.94/mdbq/__version__.py

@@ -0,0 +1 @@
+VERSION = '4.0.94'

{mdbq-4.0.92 → mdbq-4.0.94}/mdbq/auth/auth_backend.py

@@ -116,7 +116,7 @@ class StandaloneAuthManager:
             'session_expires_hours': 24,  # 会话过期时间
             'max_login_attempts': 5,  # 最大登录尝试次数
             'lockout_duration': 15 * 60,  # 锁定时长
-            'max_concurrent_devices': 10,  # 最大并发设备数
+            'max_concurrent_devices': 20,  # 最大并发设备数
             'device_session_expires_days': 30,  # 设备会话过期时间
             'ip_max_attempts': 10,  # IP最大尝试次数
             'ip_window_minutes': 30,  # IP限制时间窗口
@@ -824,6 +824,14 @@ class StandaloneAuthManager:
         try:
             current_time_utc = datetime.now(timezone.utc)
             
+            # 先查询要登出的设备数量
+            cursor.execute('''
+                SELECT COUNT(*) as device_count FROM device_sessions 
+                WHERE user_id = %s AND is_active = 1
+            ''', (user_id,))
+            
+            device_count = cursor.fetchone()['device_count']
+            
             # 撤销用户的所有刷新令牌
             cursor.execute('''
                 UPDATE refresh_tokens 
@@ -838,7 +846,11 @@ class StandaloneAuthManager:
                 WHERE user_id = %s AND is_active = 1
             ''', (user_id,))
             
-            return {'success': True, 'message': '已成功登出所有设备'}
+            return {
+                'success': True, 
+                'message': '已成功登出所有设备',
+                'logged_out_devices': device_count
+            }
             
         except Exception as e:
             return {'success': False, 'message': f'登出失败: {str(e)}'}
@@ -915,6 +927,35 @@ class StandaloneAuthManager:
             cursor.close()
             conn.close()
     
+    def get_user_masked_email(self, username):
+        """根据用户名获取脱敏邮箱（用于忘记密码提示）"""
+        conn = self.pool.connection()
+        cursor = conn.cursor()
+        
+        try:
+            # 查找用户邮箱
+            cursor.execute('''
+                SELECT email, is_active
+                FROM users WHERE username = %s
+            ''', (username,))
+            
+            user = cursor.fetchone()
+            if not user or not user['is_active']:
+                return {'success': False, 'message': '用户不存在'}
+            
+            # 返回脱敏邮箱
+            masked_email = self._mask_email(user['email'])
+            return {
+                'success': True,
+                'masked_email': masked_email
+            }
+            
+        except Exception as e:
+            return {'success': False, 'message': f'查询用户邮箱失败: {str(e)}'}
+        finally:
+            cursor.close()
+            conn.close()
+
     def request_password_reset(self, username, email):
         """请求密码重置 - 需要同时验证用户名和邮箱"""
         conn = self.pool.connection()
@@ -1272,6 +1313,221 @@ class StandaloneAuthManager:
         
         return f"{masked_local}@{masked_domain}"
 
+    def get_user_devices(self, user_id, current_device_fingerprint=None):
+        """获取用户的所有设备"""
+        conn = self.pool.connection()
+        cursor = conn.cursor()
+        
+        try:
+            cursor.execute('''
+                SELECT device_id, device_fingerprint, device_name, device_type, platform, browser,
+                       ip_address, last_activity, created_at, is_active
+                FROM device_sessions 
+                WHERE user_id = %s AND is_active = 1
+                ORDER BY last_activity DESC
+            ''', (user_id,))
+            
+            devices = cursor.fetchall()
+            current_device_id = None
+            
+            devices_list = []
+            for device in devices:
+                is_current = device['device_fingerprint'] == current_device_fingerprint
+                if is_current:
+                    current_device_id = device['device_id']
+                
+                devices_list.append({
+                    'device_id': device['device_id'],
+                    'device_name': device['device_name'],
+                    'device_type': device['device_type'],
+                    'platform': device['platform'],
+                    'browser': device['browser'],
+                    'ip_address': device['ip_address'],
+                    'last_activity': device['last_activity'].isoformat() if device['last_activity'] else None,
+                    'created_at': device['created_at'].isoformat() if device['created_at'] else None,
+                    'is_current': is_current
+                })
+            
+            return {
+                'devices': devices_list,
+                'total_count': len(devices_list),
+                'current_device_id': current_device_id
+            }
+            
+        finally:
+            cursor.close()
+            conn.close()
+
+    def logout_device(self, user_id, device_id):
+        """登出指定设备"""
+        conn = self.pool.connection()
+        cursor = conn.cursor()
+        
+        try:
+            current_time_utc = datetime.now(timezone.utc)
+            
+            # 查找设备
+            cursor.execute('''
+                SELECT id, device_name FROM device_sessions 
+                WHERE user_id = %s AND device_id = %s AND is_active = 1
+            ''', (user_id, device_id))
+            
+            device = cursor.fetchone()
+            
+            if not device:
+                return {'success': False, 'message': '设备不存在或已登出'}
+            
+            device_session_id = device['id']
+            device_name = device['device_name']
+            
+            # 撤销该设备的刷新令牌
+            cursor.execute('''
+                UPDATE refresh_tokens 
+                SET is_revoked = 1, revoked_at = %s, revoked_reason = 'single_device_logout' 
+                WHERE device_session_id = %s AND is_revoked = 0
+            ''', (current_time_utc, device_session_id))
+            
+            # 停用设备会话
+            cursor.execute('''
+                UPDATE device_sessions 
+                SET is_active = 0 
+                WHERE id = %s
+            ''', (device_session_id,))
+            
+            return {'success': True, 'message': f'设备 "{device_name}" 已成功登出'}
+            
+        except Exception as e:
+            return {'success': False, 'message': f'登出设备失败: {str(e)}'}
+        finally:
+            cursor.close()
+            conn.close()
+
+    def get_user_profile_stats(self, user_id):
+        """获取用户资料统计信息"""
+        conn = self.pool.connection()
+        cursor = conn.cursor()
+        
+        try:
+            # 获取用户基本信息
+            cursor.execute('''
+                SELECT username, email, role, permissions, created_at, last_login, is_active
+                FROM users WHERE id = %s
+            ''', (user_id,))
+            
+            user_info = cursor.fetchone()
+            
+            if not user_info:
+                return {'error': '用户不存在'}
+            
+            # 获取活跃设备数
+            cursor.execute('''
+                SELECT COUNT(*) as active_devices FROM device_sessions 
+                WHERE user_id = %s AND is_active = 1
+            ''', (user_id,))
+            
+            active_devices = cursor.fetchone()['active_devices']
+            
+            # 获取登录次数（成功的登录）
+            cursor.execute('''
+                SELECT COUNT(*) as login_count FROM login_logs 
+                WHERE user_id = %s AND login_result = 'success'
+            ''', (user_id,))
+            
+            login_count = cursor.fetchone()['login_count']
+            
+            # 获取最近登录记录
+            cursor.execute('''
+                SELECT ip_address, user_agent, login_time FROM login_logs 
+                WHERE user_id = %s AND login_result = 'success'
+                ORDER BY login_time DESC LIMIT 5
+            ''', (user_id,))
+            
+            recent_logins = cursor.fetchall()
+            
+            return {
+                'user_info': {
+                    'username': user_info['username'],
+                    'email': user_info['email'],
+                    'role': user_info['role'],
+                    'permissions': self._safe_json_parse(user_info['permissions']),
+                    'created_at': user_info['created_at'].isoformat() if user_info['created_at'] else None,
+                    'last_login': user_info['last_login'].isoformat() if user_info['last_login'] else None,
+                    'is_active': user_info['is_active']
+                },
+                'statistics': {
+                    'active_devices': active_devices,
+                    'total_login_count': login_count,
+                    'max_concurrent_devices': self.auth_config['max_concurrent_devices']
+                },
+                'recent_logins': [
+                    {
+                        'ip_address': login['ip_address'],
+                        'user_agent': login['user_agent'],
+                        'login_time': login['login_time'].isoformat() if login['login_time'] else None
+                    }
+                    for login in recent_logins
+                ]
+            }
+            
+        except Exception as e:
+            return {'error': f'获取用户统计信息失败: {str(e)}'}
+        finally:
+            cursor.close()
+            conn.close()
+
+    def cleanup_inactive_devices(self, user_id, days_threshold=30):
+        """清理不活跃设备"""
+        conn = self.pool.connection()
+        cursor = conn.cursor()
+        
+        try:
+            current_time_utc = datetime.now(timezone.utc)
+            threshold_time = current_time_utc - timedelta(days=days_threshold)
+            
+            # 查找不活跃的设备
+            cursor.execute('''
+                SELECT id, device_name FROM device_sessions 
+                WHERE user_id = %s AND is_active = 1 
+                  AND last_activity < %s
+            ''', (user_id, threshold_time))
+            
+            inactive_devices = cursor.fetchall()
+            cleaned_count = len(inactive_devices)
+            
+            if cleaned_count > 0:
+                # 撤销这些设备的令牌
+                device_session_ids = [device['id'] for device in inactive_devices]
+                cursor.execute('''
+                    UPDATE refresh_tokens 
+                    SET is_revoked = 1, revoked_at = %s, revoked_reason = 'inactive_cleanup' 
+                    WHERE device_session_id IN ({})
+                      AND is_revoked = 0
+                '''.format(','.join(['%s'] * len(device_session_ids))), 
+                [current_time_utc] + device_session_ids)
+                
+                # 停用设备会话
+                cursor.execute('''
+                    UPDATE device_sessions 
+                    SET is_active = 0 
+                    WHERE id IN ({})
+                '''.format(','.join(['%s'] * len(device_session_ids))), device_session_ids)
+            
+            return {
+                'success': True,
+                'cleaned_count': cleaned_count,
+                'message': f'成功清理 {cleaned_count} 个不活跃设备'
+            }
+            
+        except Exception as e:
+            return {
+                'success': False, 
+                'cleaned_count': 0, 
+                'message': f'清理不活跃设备失败: {str(e)}'
+            }
+        finally:
+            cursor.close()
+            conn.close()
+
 
 # Flask集成装饰器
 def require_auth(auth_manager):

{mdbq-4.0.92 → mdbq-4.0.94}/mdbq/route/analytics.py

@@ -1,6 +1,5 @@
 """
-路由监控数据分析工具
-提供专业的监控数据查询、分析和报告功能
+数据分析工具
 
 主要功能：
 1. 实时监控数据查询
@@ -23,8 +22,9 @@ from mdbq.myconf import myconf
 class MonitorAnalytics:
     """监控数据分析类"""
     
-    def __init__(self):
+    def __init__(self, database='api_monitor_logs'):
         """初始化分析工具"""
+        self.database = database
         self.init_database_pool()
     
     def init_database_pool(self):
@@ -49,6 +49,7 @@ class MonitorAnalytics:
             port=int(port),
             user=username,
             password=password,
+            database=self.database,
             ping=1,
             charset='utf8mb4',
             cursorclass=pymysql.cursors.DictCursor,

{mdbq-4.0.92 → mdbq-4.0.94}/mdbq/route/monitor.py

@@ -1,6 +1,5 @@
 """
-路由监控系统
-专业的API接口访问监控、记录和统计系统
+核心监控模块
 
 主要功能：
 1. 监控所有路由接口的访问请求

{mdbq-4.0.92 → mdbq-4.0.94}/mdbq/route/routes.py

@@ -1,6 +1,5 @@
 """
-路由监控管理界面
-提供完整的监控数据查看和管理功能的Flask路由
+管理路由API
 
 主要功能：
 1. 实时监控面板
@@ -24,6 +23,216 @@ import json
 monitor_bp = Blueprint('monitor', __name__, url_prefix='/admin/monitor')
 
 
+@monitor_bp.route('/', methods=['GET'])
+@monitor_request
+def monitor_ui():
+    """监控面板可视化界面（前端页面）"""
+    return render_template_string("""
+<!doctype html>
+<html lang=\"zh-CN\">
+<head>
+  <meta charset=\"utf-8\" />
+  <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\" />
+  <title>API监控面板</title>
+  <style>
+    :root { --bg:#0b1220; --card:#111a2b; --text:#e6edf3; --sub:#a0a8b3; --ok:#16a34a; --warn:#f59e0b; --err:#ef4444; --muted:#22304a; }
+    * { box-sizing: border-box; }
+    body { margin:0; font-family: -apple-system,BlinkMacSystemFont,Segoe UI,Roboto,Helvetica,Arial; background: var(--bg); color: var(--text); }
+    header { padding: 16px 24px; border-bottom: 1px solid var(--muted); display:flex; align-items:center; justify-content:space-between; }
+    header h1 { margin: 0; font-size: 18px; }
+    .wrap { padding: 20px; max-width: 1200px; margin: 0 auto; }
+    .grid { display: grid; grid-template-columns: repeat(4, minmax(0,1fr)); gap: 16px; }
+    .card { background: var(--card); border: 1px solid var(--muted); border-radius: 12px; padding: 16px; }
+    .kpi { font-size: 12px; color: var(--sub); margin-bottom: 6px; }
+    .val { font-size: 22px; font-weight: 700; }
+    .row { display:flex; gap: 16px; margin-top: 16px; }
+    .row .card { flex: 1; }
+    table { width: 100%; border-collapse: collapse; font-size: 13px; }
+    th, td { border-bottom: 1px solid var(--muted); padding: 8px 6px; text-align: left; }
+    th { color: var(--sub); font-weight: 600; }
+    .badge { display:inline-block; padding:2px 8px; border-radius: 999px; font-size: 12px; }
+    .badge.ok { background:#14351f; color:#4ade80; }
+    .badge.warn { background:#3a2f16; color:#facc15; }
+    .badge.err { background:#3b1112; color:#fda4af; }
+    .muted { color: var(--sub); }
+    .controls { display:flex; gap:10px; align-items:center; }
+    input, select, button { background: #0e1626; color: var(--text); border:1px solid var(--muted); padding:8px 10px; border-radius: 8px; }
+    button.primary { background: #1f2937; border-color:#2b3a55; cursor:pointer; }
+    button.primary:hover { background:#263349; }
+    .footer { color: var(--sub); font-size: 12px; margin-top: 12px; }
+    @media (max-width: 960px) { .grid { grid-template-columns: repeat(2, minmax(0,1fr)); } }
+    @media (max-width: 640px) { .grid { grid-template-columns: 1fr; } }
+  </style>
+</head>
+<body>
+  <header>
+    <h1>API监控面板</h1>
+    <div class=\"controls\">
+      <label class=\"muted\">自动刷新</label>
+      <select id=\"autoRefresh\">
+        <option value=\"0\">关闭</option>
+        <option value=\"15\">15s</option>
+        <option value=\"30\" selected>30s</option>
+        <option value=\"60\">60s</option>
+      </select>
+      <button class=\"primary\" id=\"refreshBtn\">立即刷新</button>
+    </div>
+  </header>
+  <div class=\"wrap\">
+    <section class=\"grid\">
+      <div class=\"card\"><div class=\"kpi\">近1小时请求数</div><div class=\"val\" id=\"k_requests_hour\">-</div></div>
+      <div class=\"card\"><div class=\"kpi\">近24小时请求数</div><div class=\"val\" id=\"k_requests_day\">-</div></div>
+      <div class=\"card\"><div class=\"kpi\">平均响应时间(ms)</div><div class=\"val\" id=\"k_avg_rt\">-</div></div>
+      <div class=\"card\"><div class=\"kpi\">错误率(%)</div><div class=\"val\" id=\"k_err_rate\">-</div></div>
+    </section>
+
+    <div class=\"row\">
+      <div class=\"card\">
+        <h3 class=\"muted\">热门端点（近1小时）</h3>
+        <table id=\"tbl_top_endpoints\"><thead><tr><th>端点</th><th>请求数</th><th>平均耗时(ms)</th></tr></thead><tbody></tbody></table>
+      </div>
+      <div class=\"card\">
+        <h3 class=\"muted\">告警</h3>
+        <table id=\"tbl_alerts\"><thead><tr><th>类型</th><th>级别</th><th>消息</th><th>时间</th></tr></thead><tbody></tbody></table>
+      </div>
+    </div>
+
+    <div class=\"card\" style=\"margin-top:16px;\">
+      <div style=\"display:flex; align-items:center; justify-content:space-between;\">
+        <h3 class=\"muted\">流量趋势（日）</h3>
+        <div class=\"controls\">
+          <label class=\"muted\">天数</label>
+          <select id=\"days\">
+            <option value=\"7\" selected>7</option>
+            <option value=\"14\">14</option>
+            <option value=\"30\">30</option>
+          </select>
+        </div>
+      </div>
+      <table id=\"tbl_daily\"><thead><tr><th>日期</th><th>请求数</th><th>唯一IP</th><th>平均响应(ms)</th><th>错误数</th></tr></thead><tbody></tbody></table>
+    </div>
+
+    <div class=\"card\" style=\"margin-top:16px;\">
+      <h3 class=\"muted\">请求搜索</h3>
+      <div class=\"controls\" style=\"margin-bottom:10px; flex-wrap:wrap;\">
+        <input id=\"q_endpoint\" placeholder=\"端点包含...\" style=\"min-width:200px;\" />
+        <input id=\"q_client_ip\" placeholder=\"客户端IP\" />
+        <select id=\"q_method\"><option value=\"\">方法</option><option>GET</option><option>POST</option><option>PUT</option><option>DELETE</option></select>
+        <input id=\"q_status\" placeholder=\"状态码\" type=\"number\" style=\"width:120px;\" />
+        <input id=\"q_min_rt\" placeholder=\"最小耗时(ms)\" type=\"number\" style=\"width:140px;\" />
+        <button class=\"primary\" id=\"btn_search\">搜索</button>
+      </div>
+      <table id=\"tbl_requests\"><thead><tr><th>时间</th><th>请求ID</th><th>方法</th><th>端点</th><th>状态</th><th>耗时(ms)</th><th>IP</th></tr></thead><tbody></tbody></table>
+      <div class=\"footer\" id=\"pg_info\"></div>
+    </div>
+  </div>
+
+  <script>
+    async function fetchJSON(url, options) {
+      const res = await fetch(url, options);
+      if (!res.ok) throw new Error('请求失败');
+      const data = await res.json();
+      if (data && data.data) return data.data;
+      return data;
+    }
+
+    function setText(id, val) { document.getElementById(id).textContent = val ?? '-'; }
+
+    async function loadRealtime() {
+      const data = await fetchJSON('/admin/monitor/metrics/realtime');
+      const m = data.realtime_metrics || {};
+      setText('k_requests_hour', m.requests_per_hour ?? '-');
+      setText('k_requests_day', m.requests_per_day ?? '-');
+      setText('k_avg_rt', m.avg_response_time ?? '-');
+      setText('k_err_rate', m.error_rate ?? '-');
+      const tbody = document.querySelector('#tbl_top_endpoints tbody');
+      tbody.innerHTML = '';
+      (data.top_endpoints || []).forEach(row => {
+        const tr = document.createElement('tr');
+        tr.innerHTML = `<td>${row.endpoint || '-'}</td><td>${row.request_count || 0}</td><td>${(row.avg_time||0).toFixed ? (row.avg_time||0).toFixed(2) : row.avg_time||0}</td>`;
+        tbody.appendChild(tr);
+      });
+    }
+
+    async function loadAlerts() {
+      const data = await fetchJSON('/admin/monitor/alerts');
+      const tbody = document.querySelector('#tbl_alerts tbody');
+      tbody.innerHTML = '';
+      (data.alerts || []).forEach(a => {
+        const tr = document.createElement('tr');
+        const sev = (a.severity||'').toUpperCase();
+        const cls = sev === 'HIGH' ? 'err' : (sev === 'MEDIUM' ? 'warn' : 'ok');
+        tr.innerHTML = `<td>${a.type||'-'}</td><td><span class=\"badge ${cls}\">${sev}</span></td><td>${a.message||'-'}</td><td>${a.timestamp||''}</td>`;
+        tbody.appendChild(tr);
+      });
+    }
+
+    async function loadTrend() {
+      const days = document.getElementById('days').value || 7;
+      const data = await fetchJSON(`/admin/monitor/traffic/trend?days=${days}`);
+      const tbody = document.querySelector('#tbl_daily tbody');
+      tbody.innerHTML = '';
+      (data.daily_data || []).forEach(r => {
+        const tr = document.createElement('tr');
+        tr.innerHTML = `<td>${r.date}</td><td>${r.requests}</td><td>${r.unique_ips}</td><td>${Number(r.avg_response_time||0).toFixed(2)}</td><td>${r.errors}</td>`;
+        tbody.appendChild(tr);
+      });
+    }
+
+    async function searchRequests(page=1, page_size=20) {
+      const body = {
+        page, page_size,
+        filters: {
+          endpoint: document.getElementById('q_endpoint').value || undefined,
+          client_ip: document.getElementById('q_client_ip').value || undefined,
+          method: document.getElementById('q_method').value || undefined,
+          status_code: document.getElementById('q_status').value ? Number(document.getElementById('q_status').value) : undefined,
+          min_response_time: document.getElementById('q_min_rt').value ? Number(document.getElementById('q_min_rt').value) : undefined,
+        }
+      };
+      const data = await fetchJSON('/admin/monitor/requests/search', { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify(body) });
+      const list = (data.requests || []);
+      const tbody = document.querySelector('#tbl_requests tbody');
+      tbody.innerHTML = '';
+      list.forEach(x => {
+        const tr = document.createElement('tr');
+        tr.innerHTML = `<td>${x.timestamp || ''}</td><td>${x.request_id || ''}</td><td>${x.method || ''}</td><td>${x.endpoint || ''}</td><td>${x.response_status || ''}</td><td>${x.process_time || ''}</td><td>${x.client_ip || ''}</td>`;
+        tbody.appendChild(tr);
+      });
+      const pg = data.pagination || {}; 
+      document.getElementById('pg_info').textContent = `第 ${pg.current_page||1}/${pg.total_pages||1} 页，共 ${pg.total_count||0} 条`;
+    }
+
+    async function refreshAll() {
+      await Promise.all([
+        loadRealtime(),
+        loadAlerts(),
+        loadTrend(),
+        searchRequests(1, 20)
+      ]);
+    }
+
+    let timer = null;
+    function applyAutoRefresh() {
+      if (timer) { clearInterval(timer); timer = null; }
+      const sec = Number(document.getElementById('autoRefresh').value || 0);
+      if (sec > 0) timer = setInterval(refreshAll, sec * 1000);
+    }
+
+    document.getElementById('refreshBtn').addEventListener('click', refreshAll);
+    document.getElementById('autoRefresh').addEventListener('change', () => { applyAutoRefresh(); refreshAll(); });
+    document.getElementById('days').addEventListener('change', loadTrend);
+    document.getElementById('btn_search').addEventListener('click', () => searchRequests(1, 20));
+
+    // 首次加载
+    refreshAll().catch(console.error);
+    applyAutoRefresh();
+  </script>
+</body>
+</html>
+    """)
+
+
 @monitor_bp.route('/dashboard', methods=['GET'])
 @monitor_request
 def dashboard():

{mdbq-4.0.92 → mdbq-4.0.94}/mdbq.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: mdbq
-Version: 4.0.92
+Version: 4.0.94
 Home-page: https://pypi.org/project/mdbq
 Author: xigua, 
 Author-email: 2587125111@qq.com

mdbq-4.0.92/mdbq/__version__.py

@@ -1 +0,0 @@
-VERSION = '4.0.92'