feat: 添加 WebUI 模块及相关 API 路由和 Token 管理功能

src/webui/routes.py

@@ -0,0 +1,154 @@
+"""WebUI API 路由"""
+from fastapi import APIRouter, HTTPException, Header
+from pydantic import BaseModel, Field
+from typing import Optional
+from src.common.logger import get_logger
+from .token_manager import get_token_manager
+
+logger = get_logger("webui.api")
+
+# 创建路由器
+router = APIRouter(prefix="/api/webui", tags=["WebUI"])
+
+
+class TokenVerifyRequest(BaseModel):
+    """Token 验证请求"""
+    token: str = Field(..., description="访问令牌")
+
+
+class TokenVerifyResponse(BaseModel):
+    """Token 验证响应"""
+    valid: bool = Field(..., description="Token 是否有效")
+    message: str = Field(..., description="验证结果消息")
+
+
+class TokenUpdateRequest(BaseModel):
+    """Token 更新请求"""
+    new_token: str = Field(..., description="新的访问令牌", min_length=10)
+
+
+class TokenUpdateResponse(BaseModel):
+    """Token 更新响应"""
+    success: bool = Field(..., description="是否更新成功")
+    message: str = Field(..., description="更新结果消息")
+
+
+class TokenRegenerateResponse(BaseModel):
+    """Token 重新生成响应"""
+    success: bool = Field(..., description="是否生成成功")
+    token: str = Field(..., description="新生成的令牌")
+    message: str = Field(..., description="生成结果消息")
+
+
+@router.get("/health")
+async def health_check():
+    """健康检查"""
+    return {"status": "healthy", "service": "MaiBot WebUI"}
+
+
+@router.post("/auth/verify", response_model=TokenVerifyResponse)
+async def verify_token(request: TokenVerifyRequest):
+    """
+    验证访问令牌
+    
+    Args:
+        request: 包含 token 的验证请求
+        
+    Returns:
+        验证结果
+    """
+    try:
+        token_manager = get_token_manager()
+        is_valid = token_manager.verify_token(request.token)
+        
+        if is_valid:
+            return TokenVerifyResponse(
+                valid=True,
+                message="Token 验证成功"
+            )
+        else:
+            return TokenVerifyResponse(
+                valid=False,
+                message="Token 无效或已过期"
+            )
+    except Exception as e:
+        logger.error(f"Token 验证失败: {e}")
+        raise HTTPException(status_code=500, detail="Token 验证失败") from e
+
+
+@router.post("/auth/update", response_model=TokenUpdateResponse)
+async def update_token(
+    request: TokenUpdateRequest,
+    authorization: Optional[str] = Header(None)
+):
+    """
+    更新访问令牌（需要当前有效的 token）
+    
+    Args:
+        request: 包含新 token 的更新请求
+        authorization: Authorization header (Bearer token)
+        
+    Returns:
+        更新结果
+    """
+    try:
+        # 验证当前 token
+        if not authorization or not authorization.startswith("Bearer "):
+            raise HTTPException(status_code=401, detail="未提供有效的认证信息")
+        
+        current_token = authorization.replace("Bearer ", "")
+        token_manager = get_token_manager()
+        
+        if not token_manager.verify_token(current_token):
+            raise HTTPException(status_code=401, detail="当前 Token 无效")
+        
+        # 更新 token
+        success, message = token_manager.update_token(request.new_token)
+        
+        return TokenUpdateResponse(
+            success=success,
+            message=message
+        )
+    except HTTPException:
+        raise
+    except Exception as e:
+        logger.error(f"Token 更新失败: {e}")
+        raise HTTPException(status_code=500, detail="Token 更新失败") from e
+
+
+@router.post("/auth/regenerate", response_model=TokenRegenerateResponse)
+async def regenerate_token(authorization: Optional[str] = Header(None)):
+    """
+    重新生成访问令牌（需要当前有效的 token）
+    
+    Args:
+        authorization: Authorization header (Bearer token)
+        
+    Returns:
+        新生成的 token
+    """
+    try:
+        # 验证当前 token
+        if not authorization or not authorization.startswith("Bearer "):
+            raise HTTPException(status_code=401, detail="未提供有效的认证信息")
+        
+        current_token = authorization.replace("Bearer ", "")
+        token_manager = get_token_manager()
+        
+        if not token_manager.verify_token(current_token):
+            raise HTTPException(status_code=401, detail="当前 Token 无效")
+        
+        # 重新生成 token
+        new_token = token_manager.regenerate_token()
+        
+        return TokenRegenerateResponse(
+            success=True,
+            token=new_token,
+            message="Token 已重新生成"
+        )
+    except HTTPException:
+        raise
+    except Exception as e:
+        logger.error(f"Token 重新生成失败: {e}")
+        raise HTTPException(status_code=500, detail="Token 重新生成失败") from e
+