diff --git a/.env.example b/.env.example new file mode 100644 index 0000000..a7a6682 --- /dev/null +++ b/.env.example @@ -0,0 +1,10 @@ +# Discourse SSO 配置 +# Discourse 网站地址 +DISCOURSE_URL=https://discourse.example.com + +# SSO 密钥 (必需) +# 可以使用以下命令生成: openssl rand -hex 32 +DISCOURSE_SSO_SECRET=your_sso_secret_here + +# 服务器配置 +PORT=8000 \ No newline at end of file diff --git a/.gitignore b/.gitignore index f7d95e9..e83a6d2 100644 --- a/.gitignore +++ b/.gitignore @@ -1 +1,31 @@ kaifa.md + +# 环境变量配置 +.env +.env.local +.env.*.local + +# 系统文件 +.DS_Store +Thumbs.db + +# IDE 配置 +.idea/ +.vscode/ +*.sublime-project +*.sublime-workspace + +# 依赖目录 +node_modules/ +npm-debug.log* +yarn-debug.log* +yarn-error.log* + +# 构建输出 +dist/ +build/ +out/ + +# 日志文件 +*.log +logs/ diff --git a/main.ts b/main.ts index 11e6d3c..5b059b6 100644 --- a/main.ts +++ b/main.ts @@ -1,12 +1,125 @@ import { serve } from "https://deno.land/std@0.220.1/http/server.ts"; +import { createHmac } from "crypto"; + +// 类型定义 +interface Vendor { + id: number; + name: string; + icon: string; +} + +interface VendorResponse { + data: { + [key: string]: Vendor; + }; +} -// 在文件开头添加接口定义 interface Price { + id?: string; model: string; - type: string; + billing_type: 'tokens' | 'times'; channel_type: number; - input: number; - output: number; + currency: 'CNY' | 'USD'; + input_price: number; + output_price: number; + input_ratio: number; + output_ratio: number; + price_source: string; + status: 'pending' | 'approved' | 'rejected'; + created_by: string; + created_at: string; + reviewed_by?: string; + reviewed_at?: string; +} + +// 缓存供应商数据 +let vendorsCache: VendorResponse | null = null; +let vendorsCacheTime: number = 0; +const CACHE_DURATION = 1000 * 60 * 5; // 5分钟缓存 + +// 获取供应商数据 +async function getVendors(): Promise { + const now = Date.now(); + if (vendorsCache && (now - vendorsCacheTime) < CACHE_DURATION) { + return vendorsCache; + } + + try { + const response = await fetch('https://oapi.czl.net/api/ownedby'); + const data = await response.json() as VendorResponse; + vendorsCache = data; + vendorsCacheTime = now; + return data; + } catch (error) { + console.error('获取供应商数据失败:', error); + throw new Error('获取供应商数据失败'); + } +} + +// 计算倍率 +function calculateRatio(price: number, currency: 'CNY' | 'USD'): number { + return currency === 'USD' ? price / 2 : price / 14; +} + +// 验证价格数据 +function validatePrice(data: any): string | null { + if (!data.model || !data.billing_type || !data.channel_type || + !data.currency || data.input_price === undefined || data.output_price === undefined || + !data.price_source) { + return "所有字段都是必需的"; + } + + if (data.billing_type !== 'tokens' && data.billing_type !== 'times') { + return "计费类型必须是 tokens 或 times"; + } + + if (data.currency !== 'CNY' && data.currency !== 'USD') { + return "币种必须是 CNY 或 USD"; + } + + if (isNaN(data.input_price) || isNaN(data.output_price)) { + return "价格必须是数字"; + } + + if (data.input_price < 0 || data.output_price < 0) { + return "价格不能为负数"; + } + + return null; +} + +// 添加 Discourse SSO 配置 +const DISCOURSE_URL = Deno.env.get('DISCOURSE_URL') || 'https://discourse.czl.net'; +const DISCOURSE_SSO_SECRET = Deno.env.get('DISCOURSE_SSO_SECRET'); + +// 验证必需的环境变量 +if (!DISCOURSE_SSO_SECRET) { + console.error('错误: 必须设置 DISCOURSE_SSO_SECRET 环境变量'); + Deno.exit(1); +} + +// 添加认证相关函数 +async function verifyDiscourseSSO(request: Request): Promise { + const cookie = request.headers.get('cookie'); + if (!cookie) return null; + + const sessionMatch = cookie.match(/session=([^;]+)/); + if (!sessionMatch) return null; + + const sessionId = sessionMatch[1]; + const session = await kv.get(['sessions', sessionId]); + + if (!session.value) return null; + return session.value.username; +} + +// 添加登录和登出函数 +function generateSSO(returnUrl: string): string { + const payload = Buffer.from(`return_sso_url=${encodeURIComponent(returnUrl)}`).toString('base64'); + const sig = createHmac('sha256', DISCOURSE_SSO_SECRET) + .update(payload) + .digest('hex'); + return `${DISCOURSE_URL}/session/sso_provider?sso=${encodeURIComponent(payload)}&sig=${sig}`; } // HTML 页面 @@ -14,105 +127,415 @@ const html = ` AI Models Price API + + +
-

AI Models Price API

- -
-
📊 模型价格表格
- - 在飞书多维表格中查看完整价格表 - -
- 查看所有 AI 模型的详细价格信息，包括输入输出价格、通道类型等 + + +
+
+ + +
+
+
+
+
+ + + + + + + + + + + + + + + + + + + + + +
模型名称计费类型供应商币种输入价格(M)输出价格(M)输入倍率输出倍率价格依据状态操作
+ +
+
+
+
+
+ +
+
+
+
+
+
+ + +
+
+ + +
+
+ + +
+
+ + +
+
+ + +
+
+ + +
+
+ + +
+
+ +
+
+
+
+
-
-
🔄 JSON API 接口
- - 获取价格数据的 JSON 格式 - -
- 用于程序接入的 JSON 格式数据，支持实时获取最新价格信息 + +
+
- -
-
📝 提交/更新价格
- - 提交新的模型价格信息 - -
- 通过飞书表单提交新的模型价格或更新现有模型的价格信息 -
-
- -
- © ${new Date().getFullYear()} AI Models Price API - Powered by Deno Deploy -
+ + + `; @@ -160,146 +583,292 @@ async function handler(req: Request): Promise { const headers = { "Access-Control-Allow-Origin": "*", "Access-Control-Allow-Methods": "GET, POST, OPTIONS", - "Access-Control-Allow-Headers": "Content-Type", + "Access-Control-Allow-Headers": "Content-Type, Cookie", + "Access-Control-Allow-Credentials": "true" }; if (req.method === "OPTIONS") { return new Response(null, { headers }); } - - if (url.pathname === "/api/prices") { - if (req.method === "POST") { - try { - let rawData; - const contentType = req.headers.get("content-type") || ""; - - // 获取原始数据 - if (contentType.includes("application/json")) { - rawData = await req.json(); - } else if (contentType.includes("application/x-www-form-urlencoded")) { - const formData = await req.formData(); - rawData = {}; - for (const [key, value] of formData.entries()) { - rawData[key] = value; - } - } else { - throw new Error("不支持的内容类型"); - } - - console.log("Received raw data:", rawData); - // 修改数组声明 - let dataArray: Price[] = []; - - // 如果数据中的字段包含逗号，说明是批量数据 - if (typeof rawData.model === 'string' && rawData.model.includes(',')) { - const models = rawData.model.split(','); - const types = rawData.type.split(','); - const channelTypes = rawData.channel_type.split(','); - const inputs = rawData.input.split(','); - const outputs = rawData.output.split(','); - - // 确保所有数组长度一致 - const length = Math.min( - models.length, - types.length, - channelTypes.length, - inputs.length, - outputs.length - ); - - // 构建数据数组 - for (let i = 0; i < length; i++) { - if (models[i] && types[i] && channelTypes[i] && inputs[i] && outputs[i]) { - dataArray.push({ - model: models[i].trim(), - type: types[i].trim(), - channel_type: Number(channelTypes[i]), - input: Number(inputs[i]), - output: Number(outputs[i]) - }); - } - } - } else { - // 单条数据 - dataArray.push({ - model: String(rawData.model).trim(), - type: String(rawData.type).trim(), - channel_type: Number(rawData.channel_type), - input: Number(rawData.input), - output: Number(rawData.output) - }); + // 登录处理 + if (url.pathname === "/api/auth/login") { + const params = new URLSearchParams(url.search); + const returnUrl = params.get('return_url'); + if (!returnUrl) { + return new Response(JSON.stringify({ error: "缺少 return_url 参数" }), { + status: 400, + headers: { + "Content-Type": "application/json", + ...headers } - - console.log("Processed data array:", dataArray); - - // 验证所有数据 - const errors = []; - const validData = []; - - for (const data of dataArray) { - const error = validateData(data); - if (error) { - errors.push({ data, error }); - } else { - validData.push(data); - } - } - - if (errors.length > 0) { - return new Response(JSON.stringify({ - error: "部分数据验证失败", - details: errors - }), { - status: 400, - headers: { - "Content-Type": "application/json", - ...headers - } - }); - } - - // 读取现有数据 - const prices = await readPrices(); - - // 添加新数据 - prices.push(...validData); - - // 保存数据 - await writePrices(prices); - - return new Response(JSON.stringify({ - success: true, - processed: validData.length, - data: validData - }), { - headers: { - "Content-Type": "application/json", - ...headers - } - }); - } catch (error) { - console.error("Processing error:", error); - return new Response(JSON.stringify({ - error: error.message, - details: "数据处理失败，请检查输入格式" - }), { - status: 500, - headers: { - "Content-Type": "application/json", - ...headers - } - }); + }); + } + + const ssoUrl = generateSSO(returnUrl); + return new Response(null, { + status: 302, + headers: { + ...headers, + "Location": ssoUrl } - } else if (req.method === "GET") { - const prices = await readPrices(); - return new Response(JSON.stringify(prices), { + }); + } + + // SSO 回调处理 + if (url.pathname === "/auth/callback") { + const params = new URLSearchParams(url.search); + const sso = params.get('sso'); + const sig = params.get('sig'); + + if (!sso || !sig) { + return new Response("Invalid SSO parameters", { + status: 400, + headers: { + "Content-Type": "text/plain", + ...headers + } + }); + } + + try { + // 验证签名 + const expectedSig = createHmac('sha256', DISCOURSE_SSO_SECRET) + .update(sso) + .digest('hex'); + + if (sig !== expectedSig) { + throw new Error('Invalid signature'); + } + + // 解码 payload + const payload = Buffer.from(sso, 'base64').toString(); + const payloadParams = new URLSearchParams(payload); + const username = payloadParams.get('username'); + + if (!username) { + throw new Error('Missing username'); + } + + // 设置 session cookie + const sessionId = crypto.randomUUID(); + await kv.set(['sessions', sessionId], { + username, + created_at: new Date().toISOString() + }, { expireIn: 24 * 60 * 60 * 1000 }); // 24小时过期 + + return new Response(null, { + status: 302, + headers: { + ...headers, + "Location": "/", + "Set-Cookie": `session=${sessionId}; Path=/; HttpOnly; SameSite=Lax; Max-Age=86400` + } + }); + } catch (error) { + console.error('SSO 回调处理失败:', error); + return new Response("SSO verification failed", { + status: 400, + headers: { + "Content-Type": "text/plain", + ...headers + } + }); + } + } + + // 登出处理 + if (url.pathname === "/api/auth/logout" && req.method === "POST") { + const cookie = req.headers.get('cookie'); + if (cookie) { + const sessionMatch = cookie.match(/session=([^;]+)/); + if (sessionMatch) { + const sessionId = sessionMatch[1]; + await kv.delete(['sessions', sessionId]); + } + } + + return new Response(JSON.stringify({ success: true }), { + headers: { + ...headers, + "Content-Type": "application/json", + "Set-Control-Allow-Credentials": "true", + "Set-Cookie": "session=; Path=/; HttpOnly; SameSite=Lax; Max-Age=0" + } + }); + } + + // 认证状态检查 + if (url.pathname === "/api/auth/status") { + const username = await verifyDiscourseSSO(req); + return new Response(JSON.stringify({ + authenticated: !!username, + user: username + }), { + headers: { + "Content-Type": "application/json", + ...headers + } + }); + } + + // 价格审核 + if (url.pathname.match(/^\/api\/prices\/\d+\/review$/)) { + const username = await verifyDiscourseSSO(req); + if (!username || username !== 'wood') { + return new Response(JSON.stringify({ error: "未授权" }), { + status: 403, headers: { "Content-Type": "application/json", ...headers } }); } + + if (req.method === "POST") { + try { + const id = url.pathname.split('/')[3]; + const { status } = await req.json(); + + if (status !== 'approved' && status !== 'rejected') { + throw new Error("无效的状态"); + } + + const prices = await readPrices(); + const priceIndex = prices.findIndex(p => p.id === id); + + if (priceIndex === -1) { + throw new Error("价格记录不存在"); + } + + prices[priceIndex].status = status; + prices[priceIndex].reviewed_by = username; + prices[priceIndex].reviewed_at = new Date().toISOString(); + + await writePrices(prices); + + return new Response(JSON.stringify({ success: true }), { + headers: { + "Content-Type": "application/json", + ...headers + } + }); + } catch (error) { + return new Response(JSON.stringify({ + error: error.message || "审核失败" + }), { + status: 400, + headers: { + "Content-Type": "application/json", + ...headers + } + }); + } + } + } + + // 提交新价格 + if (url.pathname === "/api/prices" && req.method === "POST") { + const username = await verifyDiscourseSSO(req); + if (!username) { + return new Response(JSON.stringify({ error: "请先登录" }), { + status: 401, + headers: { + "Content-Type": "application/json", + ...headers + } + }); + } + + try { + let rawData; + const contentType = req.headers.get("content-type") || ""; + + if (contentType.includes("application/json")) { + rawData = await req.json(); + } else if (contentType.includes("application/x-www-form-urlencoded")) { + const formData = await req.formData(); + rawData = {}; + for (const [key, value] of formData.entries()) { + rawData[key] = value; + } + } else { + throw new Error("不支持的内容类型"); + } + + // 处理数据 + const newPrice: Price = { + model: String(rawData.model).trim(), + billing_type: rawData.billing_type as 'tokens' | 'times', + channel_type: Number(rawData.channel_type), + currency: rawData.currency as 'CNY' | 'USD', + input_price: Number(rawData.input_price), + output_price: Number(rawData.output_price), + input_ratio: calculateRatio(Number(rawData.input_price), rawData.currency as 'CNY' | 'USD'), + output_ratio: calculateRatio(Number(rawData.output_price), rawData.currency as 'CNY' | 'USD'), + price_source: String(rawData.price_source), + status: 'pending', + created_by: username, + created_at: new Date().toISOString() + }; + + // 验证数据 + const error = validatePrice(newPrice); + if (error) { + return new Response(JSON.stringify({ error }), { + status: 400, + headers: { + "Content-Type": "application/json", + ...headers + } + }); + } + + // 读取现有数据 + const prices = await readPrices(); + + // 生成唯一ID + newPrice.id = Date.now().toString(); + + // 添加新数据 + prices.push(newPrice); + + // 保存数据 + await writePrices(prices); + + return new Response(JSON.stringify({ + success: true, + data: newPrice + }), { + headers: { + "Content-Type": "application/json", + ...headers + } + }); + } catch (error) { + console.error("Processing error:", error); + return new Response(JSON.stringify({ + error: error.message, + details: "数据处理失败，请检查输入格式" + }), { + status: 500, + headers: { + "Content-Type": "application/json", + ...headers + } + }); + } + } + + // 获取价格列表 + if (url.pathname === "/api/prices" && req.method === "GET") { + const prices = await readPrices(); + return new Response(JSON.stringify(prices), { + headers: { + "Content-Type": "application/json", + ...headers + } + }); } // 提供静态页面