113 lines
4.3 KiB
Python
113 lines
4.3 KiB
Python
# Copyright 2026 zhaoxi826
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
from typing import List
|
|
|
|
from kilostar.core.postgres_database.model.provider import ProviderModel
|
|
from sqlalchemy import select
|
|
from kilostar.core.postgres_database.database_exception import database_exception
|
|
from kilostar.utils.crypto import (
|
|
CryptoError,
|
|
decrypt_secret,
|
|
encrypt_secret,
|
|
is_encrypted,
|
|
)
|
|
from kilostar.utils.logger import get_logger
|
|
|
|
logger = get_logger("provider_dao")
|
|
|
|
|
|
def _decrypt_apikey(value):
|
|
if not value:
|
|
return value
|
|
if not is_encrypted(value):
|
|
return value
|
|
try:
|
|
return decrypt_secret(value)
|
|
except CryptoError as e:
|
|
logger.error(f"Provider apikey 解密失败: {e}")
|
|
return value
|
|
|
|
|
|
def _encrypt_apikey(value):
|
|
if not value or is_encrypted(value):
|
|
return value
|
|
return encrypt_secret(value)
|
|
|
|
|
|
class ProviderDatabase:
|
|
"""Provider 表的 DAO：模型 Provider 的增删查改；``provider_apikey`` 透明 Fernet 加解密。"""
|
|
|
|
def __init__(self, async_session_maker):
|
|
self.async_session_maker = async_session_maker
|
|
|
|
@database_exception
|
|
async def get_provider(self) -> List[ProviderModel]:
|
|
"""返回全部 Provider，并将每行重新构造为新的 ``ProviderModel`` 实例（脱离 session）。"""
|
|
async with self.async_session_maker() as session:
|
|
statement = select(ProviderModel)
|
|
results = await session.execute(statement)
|
|
results = results.scalars().all()
|
|
providers = [
|
|
ProviderModel(
|
|
provider_id=provider.provider_id,
|
|
provider_title=provider.provider_title,
|
|
provider_url=provider.provider_url,
|
|
provider_apikey=_decrypt_apikey(provider.provider_apikey),
|
|
provider_models=provider.provider_models,
|
|
provider_type=provider.provider_type,
|
|
provider_owner=provider.provider_owner,
|
|
is_active=provider.is_active,
|
|
)
|
|
for provider in results
|
|
]
|
|
return providers
|
|
|
|
@database_exception
|
|
async def add_provider(self, **kwargs) -> None:
|
|
"""新建一条 Provider 记录；``provider_apikey`` 写入前自动加密。"""
|
|
if "provider_apikey" in kwargs:
|
|
kwargs["provider_apikey"] = _encrypt_apikey(kwargs["provider_apikey"])
|
|
async with self.async_session_maker() as session:
|
|
provider = ProviderModel(**kwargs)
|
|
session.add(provider)
|
|
await session.commit()
|
|
|
|
@database_exception
|
|
async def delete_provider(self, provider_id: str) -> None:
|
|
"""删除指定 ID 的 Provider；不存在时静默返回。"""
|
|
async with self.async_session_maker() as session:
|
|
provider = await session.get(ProviderModel, provider_id)
|
|
if provider is not None:
|
|
session.delete(provider)
|
|
await session.commit()
|
|
|
|
@database_exception
|
|
async def update_provider(self, provider_id: str, **kwargs) -> None:
|
|
"""部分更新指定 Provider 的字段；``provider_apikey`` 写入前自动加密。"""
|
|
if "provider_apikey" in kwargs:
|
|
kwargs["provider_apikey"] = _encrypt_apikey(kwargs["provider_apikey"])
|
|
async with self.async_session_maker() as session:
|
|
provider = await session.get(ProviderModel, provider_id)
|
|
if provider is not None:
|
|
for key, value in kwargs.items():
|
|
setattr(provider, key, value)
|
|
session.add(provider)
|
|
await session.commit()
|
|
await session.refresh(provider)
|
|
# 解密返回，方便上游使用
|
|
provider.provider_apikey = _decrypt_apikey(provider.provider_apikey)
|
|
return provider
|
|
return None
|