GithubBackup/MoviePilot
1
0
Fork 0
mirror of https://github.com/jxxghp/MoviePilot.git synced 2026-08-25 02:00:13 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix

Browse Source
This commit is contained in:
jxxghp
2025-04-29 14:53:04 +08:00
parent b50599b71f
commit 1614eebc47
1 changed files with 5 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
app/api/endpoints/system.py
View File

@@ -171,20 +171,17 @@ def cache_img(
@router.get("/global", summary="查询非敏感系统设置", response_model=schemas.Response) @router.get("/global", summary="查询非敏感系统设置", response_model=schemas.Response)
def get_global_setting(request: Request): def get_global_setting(token: str):
""" """
查询非敏感系统设置（仅允许本地调用，无需鉴权） 查询非敏感系统设置（默认鉴权）
""" """
# 检查请求来源是否为本地地址 if token != "moviepilot":
client_host = request.client.host raise HTTPException(status_code=403, detail="Forbidden")
if client_host not in {"127.0.0.1", "::1"}:
raise HTTPException(status_code=403, detail="Access forbidden: Only local requests are allowed")
# FIXME: 新增敏感配置项时要在此处添加排除项 # FIXME: 新增敏感配置项时要在此处添加排除项
info = settings.dict( info = settings.dict(
exclude={"SECRET_KEY", "RESOURCE_SECRET_KEY", "API_TOKEN", "TMDB_API_KEY", "TVDB_API_KEY", "FANART_API_KEY", exclude={"SECRET_KEY", "RESOURCE_SECRET_KEY", "API_TOKEN", "TMDB_API_KEY", "TVDB_API_KEY", "FANART_API_KEY",
"COOKIECLOUD_KEY", "COOKIECLOUD_PASSWORD", "GITHUB_TOKEN", "REPO_GITHUB_TOKEN", "U115_APP_ID", "COOKIECLOUD_KEY", "COOKIECLOUD_PASSWORD", "GITHUB_TOKEN", "REPO_GITHUB_TOKEN"}
"ALIPAN_APP_ID", }
) )
# 追加用户唯一ID和订阅分享管理权限 # 追加用户唯一ID和订阅分享管理权限
info.update({ info.update({