kdletters
d8dd2f1857
移除外部OpenAPI中的API Key管理接口暴露 补齐编辑器项目列表、最近项目、重命名和删除外部接口 补齐素材直传凭证、素材对象确认和签名读取外部接口 复用站内编辑器生成、素材库和项目资源链路并按API Key账号归属 更新外部OpenAPI、后端契约和项目共享记忆文档
76 lines
2.4 KiB
Rust
76 lines
2.4 KiB
Rust
use axum::{
|
|
Json,
|
|
extract::{Extension, Query, State},
|
|
http::StatusCode,
|
|
};
|
|
use serde_json::{Value, json};
|
|
use shared_contracts::assets::{
|
|
ConfirmAssetObjectRequest, CreateDirectUploadTicketRequest, GetReadUrlQuery,
|
|
};
|
|
|
|
use crate::{
|
|
assets::{
|
|
confirm_asset_object_for_owner, create_direct_upload_ticket_for_owner,
|
|
get_asset_read_url_with_query,
|
|
},
|
|
external_api_auth::ExternalApiPrincipal,
|
|
http_error::AppError,
|
|
request_context::RequestContext,
|
|
state::AppState,
|
|
};
|
|
|
|
const SCOPE_EDITOR_ASSET: &str = "editor:asset";
|
|
const EXTERNAL_ASSET_PROVIDER: &str = "external-assets-api";
|
|
|
|
pub async fn create_external_direct_upload_ticket(
|
|
State(state): State<AppState>,
|
|
Extension(request_context): Extension<RequestContext>,
|
|
Extension(principal): Extension<ExternalApiPrincipal>,
|
|
Json(payload): Json<CreateDirectUploadTicketRequest>,
|
|
) -> Result<Json<Value>, AppError> {
|
|
require_scope(&principal, SCOPE_EDITOR_ASSET)?;
|
|
create_direct_upload_ticket_for_owner(
|
|
&state,
|
|
&request_context,
|
|
principal.owner_user_id(),
|
|
payload,
|
|
)
|
|
.await
|
|
}
|
|
|
|
pub async fn confirm_external_asset_object(
|
|
State(state): State<AppState>,
|
|
Extension(request_context): Extension<RequestContext>,
|
|
Extension(principal): Extension<ExternalApiPrincipal>,
|
|
Json(mut payload): Json<ConfirmAssetObjectRequest>,
|
|
) -> Result<Json<Value>, AppError> {
|
|
require_scope(&principal, SCOPE_EDITOR_ASSET)?;
|
|
payload.owner_user_id = Some(principal.owner_user_id().to_string());
|
|
confirm_asset_object_for_owner(&state, &request_context, principal.owner_user_id(), payload)
|
|
.await
|
|
}
|
|
|
|
pub async fn get_external_asset_read_url(
|
|
State(state): State<AppState>,
|
|
Extension(request_context): Extension<RequestContext>,
|
|
Extension(principal): Extension<ExternalApiPrincipal>,
|
|
Query(query): Query<GetReadUrlQuery>,
|
|
) -> Result<Json<Value>, AppError> {
|
|
require_scope(&principal, SCOPE_EDITOR_ASSET)?;
|
|
get_asset_read_url_with_query(&state, &request_context, query).await
|
|
}
|
|
|
|
fn require_scope(principal: &ExternalApiPrincipal, scope: &str) -> Result<(), AppError> {
|
|
if principal.has_scope(scope) {
|
|
return Ok(());
|
|
}
|
|
Err(
|
|
AppError::from_status(StatusCode::FORBIDDEN).with_details(json!({
|
|
"provider": EXTERNAL_ASSET_PROVIDER,
|
|
"keyId": principal.key_id(),
|
|
"scope": scope,
|
|
"message": "API Key 缺少所需权限",
|
|
})),
|
|
)
|
|
}
|