klinsmaya/SQLBot
1
0
Fork 0
mirror of https://gh-proxy.org/https://github.com/klinsmaya/SQLBot.git synced 2026-11-11 02:36:54 +08:00
Code Issues Packages Projects Releases Wiki Activity

perf: Multiple Domain Validation for Embedded Systems #388

Browse Source
This commit is contained in:
fit2cloud-chenyw
2025-11-25 21:43:21 +08:00
committed by fit2cloud-chenyw
parent a5ba14275e
commit c7693fc880
10 changed files with 86 additions and 27 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/apps/system/api/assistant.py
+8 -5
View File
@@ -17,7 +17,7 @@ from common.core.config import settings
from common.core.deps import SessionDep, Trans
from common.core.security import create_access_token
from common.core.sqlbot_cache import clear_cache
from common.utils.utils import get_origin_from_referer
from common.utils.utils import get_origin_from_referer, origin_match_domain
router = APIRouter(tags=["system/assistant"], prefix="/system/assistant")
@@ -30,13 +30,15 @@ async def info(request: Request, response: Response, session: SessionDep, trans:
if not db_model:
raise RuntimeError(f"assistant application not exist")
db_model = AssistantModel.model_validate(db_model)
response.headers["Access-Control-Allow-Origin"] = db_model.domain
origin = request.headers.get("origin") or get_origin_from_referer(request)
if not origin:
raise RuntimeError(trans('i18n_embedded.invalid_origin', origin=origin or ''))
origin = origin.rstrip('/')
if origin != db_model.domain:
if not origin_match_domain(origin, db_model.domain):
raise RuntimeError(trans('i18n_embedded.invalid_origin', origin=origin or ''))
response.headers["Access-Control-Allow-Origin"] = origin
return db_model
@@ -48,13 +50,14 @@ async def getApp(request: Request, response: Response, session: SessionDep, tran
if not db_model:
raise RuntimeError(f"assistant application not exist")
db_model = AssistantModel.model_validate(db_model)
response.headers["Access-Control-Allow-Origin"] = db_model.domain
origin = request.headers.get("origin") or get_origin_from_referer(request)
if not origin:
raise RuntimeError(trans('i18n_embedded.invalid_origin', origin=origin or ''))
origin = origin.rstrip('/')
if origin != db_model.domain:
if not origin_match_domain(origin, db_model.domain):
raise RuntimeError(trans('i18n_embedded.invalid_origin', origin=origin or ''))
response.headers["Access-Control-Allow-Origin"] = origin
return db_model