.dockerignore

@@ -6,6 +6,6 @@ __pycache__
 frontend/node_modules
 frontend/dist
 docker-compose.yml
-.env.template
+.env
 .env.example
 .idea

main.py

@@ -11,13 +11,8 @@ from pretor.core.workflow.workflow_runner import WorkflowRunningEngine
 from pretor.core.api import PretorGateway
 from ray import serve
 import os
-import secrets
 
-_secret_key = os.getenv("SECRET_KEY")
-if not _secret_key or _secret_key in {"secret", "114514"}:
-    _secret_key = secrets.token_urlsafe(32)
-    os.environ["SECRET_KEY"] = _secret_key
-    print("⚠️ 警告: 未提供有效的 SECRET_KEY 或使用了不安全的默认值，已生成并设置随机密钥。")
+
 
 async def start_system():
     env_vars = {
@@ -26,7 +21,7 @@ async def start_system():
         "POSTGRES_HOST": os.getenv("POSTGRES_HOST", "db"),
         "POSTGRES_PORT": os.getenv("POSTGRES_PORT", "5432"),
         "POSTGRES_DB": os.getenv("POSTGRES_DB", "postgres"),
-        "SECRET_KEY": os.getenv("SECRET_KEY"),
+        "SECRET_KEY": os.getenv("SECRET_KEY", "secret"),
     }
 
     ray.init(ignore_reinit_error=True,

pretor/api/platform/frontend.py

@@ -18,10 +18,9 @@ from pretor.utils.access import Accessor, TokenData
 from pretor.api.platform.event import PretorEvent
 from pretor.utils.ray_hook import ray_actor_hook
 import os
-import anyio
+import shutil
+
 from pretor.utils.logger import get_logger
-
-
 logger = get_logger('frontend')
 client_router = APIRouter(prefix="/api/v1/adapter/client", tags=["client"])
 
@@ -55,9 +54,8 @@ async def upload_file(file: UploadFile = File(...),
         upload_dir = "uploads"
         os.makedirs(upload_dir, exist_ok=True)
         file_path = os.path.join(upload_dir, file.filename)
-        async with await anyio.open_file(file_path, "wb") as buffer:
-            while chunk := await file.read(64 * 1024):  # 64KB chunks
-                await buffer.write(chunk)
+        with open(file_path, "wb") as buffer:
+            shutil.copyfileobj(file.file, buffer)
         logger.info(f"用户 {token_data.username} 上传了文件: {file.filename}")
         return {"filename": file.filename, "message": f"File {file.filename} uploaded successfully"}
     except Exception as e:

pretor/utils/access.py

@@ -31,9 +31,6 @@ SECRET_KEY = os.getenv("SECRET_KEY")
 ALGORITHM = "HS256"
 ACCESS_TOKEN_EXPIRE_MINUTES = 60 * 24
 
-if not SECRET_KEY or SECRET_KEY in {"secret", "114514"}:
-    raise RuntimeError("未提供有效的 SECRET_KEY 或使用了不安全的默认值")
-
 password_hasher = PasswordHash.recommended()