gavindiaz/PolyWeather
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ops 代理路由直接使用 entitlement token 作为 Bearer 鉴权

Browse Source
This commit is contained in:
2569718930@qq.com
2026-05-20 22:11:57 +08:00
parent 0f8d160c54
commit cb625a2b0e
2 changed files with 14 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
frontend/app/api/ops/subscriptions/extend/route.ts
+6 -1
View File
@@ -3,14 +3,19 @@ import { applyAuthResponseCookies, buildBackendRequestHeaders } from "@/lib/back
import { buildProxyExceptionResponse } from "@/lib/api-proxy"; import { buildProxyExceptionResponse } from "@/lib/api-proxy";
const API_BASE = process.env.POLYWEATHER_API_BASE_URL; const API_BASE = process.env.POLYWEATHER_API_BASE_URL;
const ENTITLEMENT_TOKEN = process.env.POLYWEATHER_BACKEND_ENTITLEMENT_TOKEN?.trim() || "";
export async function POST(req: NextRequest) { export async function POST(req: NextRequest) {
if (!API_BASE) return NextResponse.json({ error: "API_BASE not configured" }, { status: 500 }); if (!API_BASE) return NextResponse.json({ error: "API_BASE not configured" }, { status: 500 });
try { try {
const auth = await buildBackendRequestHeaders(req); const auth = await buildBackendRequestHeaders(req);
const body = await req.text(); const body = await req.text();
const headers: Record<string, string> = { ...auth.headers as Record<string, string>, "Content-Type": "application/json" };
if (ENTITLEMENT_TOKEN) {
headers.Authorization = `Bearer ${ENTITLEMENT_TOKEN}`;
}
const res = await fetch(`${API_BASE}/api/ops/subscriptions/extend`, { const res = await fetch(`${API_BASE}/api/ops/subscriptions/extend`, {
method: "POST", headers: { ...auth.headers, "Content-Type": "application/json" }, body, cache: "no-store", method: "POST", headers, body, cache: "no-store",
}); });
const raw = await res.text(); const raw = await res.text();
const response = new NextResponse(raw, { status: res.status, headers: { "Content-Type": "application/json", "Cache-Control": "no-store" } }); const response = new NextResponse(raw, { status: res.status, headers: { "Content-Type": "application/json", "Cache-Control": "no-store" } });
frontend/app/api/ops/subscriptions/grant/route.ts
+8 -2
View File
@@ -1,16 +1,22 @@
import { NextRequest, NextResponse } from "next/server"; import { NextRequest, NextResponse } from "next/server";
import { applyAuthResponseCookies, buildBackendRequestHeaders } from "@/lib/backend-auth"; import { applyAuthResponseCookies, buildBackendRequestHeaders, BACKEND_ENTITLEMENT_HEADER } from "@/lib/backend-auth";
import { buildProxyExceptionResponse } from "@/lib/api-proxy"; import { buildProxyExceptionResponse } from "@/lib/api-proxy";
const API_BASE = process.env.POLYWEATHER_API_BASE_URL; const API_BASE = process.env.POLYWEATHER_API_BASE_URL;
const ENTITLEMENT_TOKEN = process.env.POLYWEATHER_BACKEND_ENTITLEMENT_TOKEN?.trim() || "";
export async function POST(req: NextRequest) { export async function POST(req: NextRequest) {
if (!API_BASE) return NextResponse.json({ error: "API_BASE not configured" }, { status: 500 }); if (!API_BASE) return NextResponse.json({ error: "API_BASE not configured" }, { status: 500 });
try { try {
const auth = await buildBackendRequestHeaders(req); const auth = await buildBackendRequestHeaders(req);
const body = await req.text(); const body = await req.text();
const headers: Record<string, string> = { ...auth.headers as Record<string, string>, "Content-Type": "application/json" };
// Ops endpoints: pass entitlement token as Bearer for robust admin auth.
if (ENTITLEMENT_TOKEN) {
headers.Authorization = `Bearer ${ENTITLEMENT_TOKEN}`;
}
const res = await fetch(`${API_BASE}/api/ops/subscriptions/grant`, { const res = await fetch(`${API_BASE}/api/ops/subscriptions/grant`, {
method: "POST", headers: { ...auth.headers, "Content-Type": "application/json" }, body, cache: "no-store", method: "POST", headers, body, cache: "no-store",
}); });
const raw = await res.text(); const raw = await res.text();
const response = new NextResponse(raw, { status: res.status, headers: { "Content-Type": "application/json", "Cache-Control": "no-store" } }); const response = new NextResponse(raw, { status: res.status, headers: { "Content-Type": "application/json", "Cache-Control": "no-store" } });