wangxuming/NianAIGC
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add authenticated login and SSO protection

Browse Source
This commit is contained in:
inman
2026-05-29 15:54:13 +08:00
parent e36f28a668
commit 0648874801
50 changed files with 1853 additions and 63 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
app/api/generations/image/[id]/retry/route.ts
View File

@@ -1,4 +1,5 @@
import { jsonError, jsonOk } from "@/lib/server/api";
import { requireAppUser } from "@/lib/server/auth/current-user";
import { requestOrigin } from "@/lib/server/runtime";
import { retryImageJob } from "@/lib/server/generation-service";
@@ -6,8 +7,9 @@ export const runtime = "nodejs";
export async function POST(request: Request, context: { params: Promise<{ id: string }> }) {
try {
const user = await requireAppUser();
const { id } = await context.params;
const job = await retryImageJob(id, requestOrigin(request));
const job = await retryImageJob(id, requestOrigin(request), user.id);
return jsonOk({ job }, { status: 202 });
} catch (error) {
return jsonError(error);

7
app/api/generations/image/[id]/route.ts
View File

@@ -1,14 +1,16 @@
import { deleteAsset, deleteGenerationJob, getAsset, getGenerationJob } from "@/lib/server/data-store";
import { jsonError, jsonOk } from "@/lib/server/api";
import { requireAppUser } from "@/lib/server/auth/current-user";
import { deleteStoredAsset } from "@/lib/server/storage";
export const runtime = "nodejs";
export async function GET(_request: Request, context: { params: Promise<{ id: string }> }) {
try {
const user = await requireAppUser();
const { id } = await context.params;
const job = await getGenerationJob(id);
if (!job) return jsonError(new Error("Generation job not found."), 404);
if (!job || job.ownerId !== user.id) return jsonError(new Error("Generation job not found."), 404);
return jsonOk({ job });
} catch (error) {
return jsonError(error, 500);
@@ -17,9 +19,10 @@ export async function GET(_request: Request, context: { params: Promise<{ id: st
export async function DELETE(_request: Request, context: { params: Promise<{ id: string }> }) {
try {
const user = await requireAppUser();
const { id } = await context.params;
const job = await getGenerationJob(id);
if (!job || job.capability === "video.generate") return jsonError("任务不存在", 404);
if (!job || job.ownerId !== user.id || job.capability === "video.generate") return jsonError("任务不存在", 404);
const deletedAssetIds: string[] = [];
for (const assetId of job.outputAssetIds) {
const asset = await getAsset(assetId);

6
app/api/generations/image/route.ts
View File

@@ -1,5 +1,6 @@
import { getGenerationJob, listGenerationJobs } from "@/lib/server/data-store";
import { jsonError, jsonOk, readJsonBody } from "@/lib/server/api";
import { requireAppUser } from "@/lib/server/auth/current-user";
import { requestOrigin } from "@/lib/server/runtime";
import { submitImageJob } from "@/lib/server/generation-service";
import { assemblePrompt, type PromptAssemblyInput, type PromptMaterial } from "@/lib/prompt/assembler";
@@ -9,7 +10,8 @@ export const runtime = "nodejs";
export async function GET() {
try {
const jobs = (await listGenerationJobs()).filter((job) => job.capability !== "video.generate");
const user = await requireAppUser();
const jobs = (await listGenerationJobs(user.id)).filter((job) => job.capability !== "video.generate");
return jsonOk({ jobs });
} catch (error) {
return jsonError(error, 500);
@@ -18,6 +20,7 @@ export async function GET() {
export async function POST(request: Request) {
try {
const user = await requireAppUser();
const body = await readJsonBody<{
capability?: EnabledImageCapability;
prompt?: string;
@@ -41,6 +44,7 @@ export async function POST(request: Request) {
.filter((material) => material.type === "image")
.map((material) => material.url);
const job = await submitImageJob({
ownerId: user.id,
capability,
prompt: body.prompt || assembled?.prompt,
imageUrls: body.imageUrls || materialImages,

7
app/api/generations/video/[id]/route.ts
View File

@@ -1,14 +1,16 @@
import { deleteAsset, deleteGenerationJob, getAsset, getGenerationJob } from "@/lib/server/data-store";
import { jsonError, jsonOk } from "@/lib/server/api";
import { requireAppUser } from "@/lib/server/auth/current-user";
import { deleteStoredAsset } from "@/lib/server/storage";
export const runtime = "nodejs";
export async function GET(_request: Request, context: { params: Promise<{ id: string }> }) {
try {
const user = await requireAppUser();
const { id } = await context.params;
const job = await getGenerationJob(id);
if (!job) return jsonError(new Error("Generation job not found."), 404);
if (!job || job.ownerId !== user.id) return jsonError(new Error("Generation job not found."), 404);
return jsonOk({ job });
} catch (error) {
return jsonError(error, 500);
@@ -17,9 +19,10 @@ export async function GET(_request: Request, context: { params: Promise<{ id: st
export async function DELETE(_request: Request, context: { params: Promise<{ id: string }> }) {
try {
const user = await requireAppUser();
const { id } = await context.params;
const job = await getGenerationJob(id);
if (!job || job.capability !== "video.generate") return jsonError("任务不存在", 404);
if (!job || job.ownerId !== user.id || job.capability !== "video.generate") return jsonError("任务不存在", 404);
const deletedAssetIds: string[] = [];
for (const assetId of job.outputAssetIds) {
const asset = await getAsset(assetId);

7
app/api/generations/video/route.ts
View File

@@ -1,5 +1,6 @@
import { listGenerationJobs } from "@/lib/server/data-store";
import { jsonError, jsonOk, readJsonBody } from "@/lib/server/api";
import { requireAppUser } from "@/lib/server/auth/current-user";
import { requestOrigin } from "@/lib/server/runtime";
import { submitVideoJob, type SubmitVideoJobInput } from "@/lib/server/video-generation-service";
@@ -7,7 +8,8 @@ export const runtime = "nodejs";
export async function GET() {
try {
const jobs = (await listGenerationJobs()).filter((job) => job.capability === "video.generate");
const user = await requireAppUser();
const jobs = (await listGenerationJobs(user.id)).filter((job) => job.capability === "video.generate");
return jsonOk({ jobs });
} catch (error) {
return jsonError(error, 500);
@@ -16,8 +18,9 @@ export async function GET() {
export async function POST(request: Request) {
try {
const user = await requireAppUser();
const body = await readJsonBody<SubmitVideoJobInput & Record<string, unknown>>(request);
const job = await submitVideoJob(body, requestOrigin(request));
const job = await submitVideoJob({ ...body, ownerId: user.id }, requestOrigin(request));
return jsonOk({ job }, { status: 202 });
} catch (error) {
return jsonError(error);