Files
RuoYi-Vue3-FastAPI/ruoyi-fastapi-backend/module_plugin/controller/plugin_browser_controller.py
T
insistence 4bd83bc7cd feat: 支持 v2 插件、独立前端和签名制品发布 (#130)
* feat: 支持 v2 插件、原生扩展与签名发布

* fix: 修复测试

* feat: 增强宿主 SDK、运行观测与制品维护能力

* feat: 增强文件传输、配置观测与本地开发能力

* feat: 支持 SSE 实时事件流并完善开发脚手架

* feat: 完善长连接鉴权复核与关闭回收

* feat: 增强生命周期与任务关闭可靠性

* feat: 收紧健康检查契约并补齐前端与真实网络验收

* feat: 增加SDK溯源与离线更新工具并验证跨版本兼容

* feat: 增加持久化业务示例与受控 Python 交付

* feat: 增加统一运行诊断与多worker状态观测

* feat: 增加固定目标发布等待与自动验收

* fix: 修复多环境插件部署前缀与代理配置不一致

* fix: 修复测试
2026-10-09 23:49:45 +08:00

75 lines
3.1 KiB
Python

from typing import Annotated
from fastapi import Depends, HTTPException, Path, Request, Response
from sqlalchemy.ext.asyncio import AsyncSession
from common.aspect.db_session import DBSessionDependency
from common.aspect.pre_auth import CurrentUserDependency
from common.router import APIRouterPro
from common.vo import DataResponseModel
from module_admin.entity.vo.user_vo import CurrentUserModel
from module_admin.service.login_service import oauth2_scheme
from plugins.core.runtime.browser_session import COOKIE_NAME_PREFIX, issue_browser_session, plugin_browser_base
from plugins.core.runtime.explicit import ExplicitPluginRuntime
from utils.response_util import ResponseUtil
plugin_browser_controller = APIRouterPro(prefix='/plugin/runtime', tags=['插件浏览器会话'])
@plugin_browser_controller.post(
'/{plugin_id}/session',
summary='创建插件浏览器会话接口',
description='用于为当前登录用户创建插件页面访问会话,并返回访问地址和防跨站请求令牌',
response_model=DataResponseModel[dict],
)
async def create_plugin_browser_session(
request: Request,
plugin_id: Annotated[str, Path(description='插件ID')],
current_user: Annotated[CurrentUserModel, CurrentUserDependency()],
token: Annotated[str, Depends(oauth2_scheme)],
query_db: Annotated[AsyncSession, DBSessionDependency()],
) -> Response:
runtime = getattr(request.app.state, 'plugin_explicit_runtime', None)
loaded = runtime.loaded.get(plugin_id) if isinstance(runtime, ExplicitPluginRuntime) else None
if loaded is None or loaded.plugin.discovered_plugin.manifest.frontend.delivery.type != 'bundle':
raise HTTPException(status_code=404, detail='插件页面不存在')
if not loaded.active or loaded.lifespan is None or not loaded.lifespan.ready:
raise HTTPException(status_code=503, detail='插件页面尚未就绪')
try:
if not await runtime.route_state_gateway.is_plugin_enabled(query_db, plugin_id):
raise PermissionError('插件未启用')
runtime._request_context(loaded, current_user)
cookie, csrf, seconds = await issue_browser_session(
request,
plugin_id=plugin_id,
version=loaded.plugin.discovered_plugin.manifest.version,
main_token=token,
user_id=current_user.user.user_id,
)
except PermissionError as exc:
raise HTTPException(status_code=403, detail=str(exc)) from exc
except LookupError as exc:
raise HTTPException(status_code=401, detail=str(exc)) from exc
base = plugin_browser_base(request, plugin_id)
response = ResponseUtil.success(
data={
'pluginId': plugin_id,
'uiBase': f'{base}ui/',
'apiBase': f'{base}api/',
'bridgeVersion': 1,
'csrfToken': csrf,
'expiresIn': seconds,
},
headers={'Cache-Control': 'no-store'},
)
response.set_cookie(
f'{COOKIE_NAME_PREFIX}{plugin_id}',
cookie,
max_age=seconds,
path=base,
httponly=True,
secure=request.url.scheme == 'https',
samesite='strict',
)
return response