feat: 添加Web验证页面并优化密钥管理功能

app/main.py

@@ -1,17 +1,53 @@
-from fastapi import FastAPI
+from fastapi import FastAPI, Request
 from fastapi.middleware.cors import CORSMiddleware
+from fastapi.responses import HTMLResponse, RedirectResponse
+from fastapi.templating import Jinja2Templates
+from fastapi.staticfiles import StaticFiles
 from app.core.logger import get_main_logger
+from app.core.security import verify_auth_token
+from app.services.key_manager import get_key_manager_instance
+from app.core.config import settings
 
 from app.api import gemini_routes, openai_routes
 import uvicorn
 
-from app.middleware.request_logging_middleware import RequestLoggingMiddleware
 
 # 配置日志
 logger = get_main_logger()
 
 app = FastAPI()
 
+# 配置Jinja2模板
+templates = Jinja2Templates(directory="app/templates")
+
+# 创建 KeyManager 实例
+key_manager = None
+
+@app.on_event("startup")
+async def startup_event():
+    global key_manager
+    key_manager = await get_key_manager_instance(settings.API_KEYS)
+
+# 配置静态文件
+app.mount("/static", StaticFiles(directory="app/static"), name="static")
+
+# 添加中间件来处理未经身份验证的请求
+@app.middleware("http")
+async def auth_middleware(request: Request, call_next):
+    # 允许 gemini_routes 和 openai_routes 中的端点绕过身份验证
+    if (request.url.path not in ["/", "/auth"] and 
+        not request.url.path.startswith("/static") and
+        not request.url.path.startswith("/gemini") and
+        not request.url.path.startswith("/v1") and
+        not request.url.path.startswith("/v1beta") and
+        not request.url.path.startswith("/health") and
+        not request.url.path.startswith("/hf")):
+        auth_token = request.cookies.get("auth_token")
+        if not auth_token or not verify_auth_token(auth_token):
+            return RedirectResponse(url="/")
+    response = await call_next(request)
+    return response
+
 # 添加请求日志中间件
 # app.add_middleware(RequestLoggingMiddleware)
 
@@ -32,12 +68,49 @@ app.include_router(gemini_routes.router)
 app.include_router(gemini_routes.router_v1beta)
 
 
+@app.get("/", response_class=HTMLResponse)
+async def auth_page(request: Request):
+    return templates.TemplateResponse("auth.html", {"request": request})
+
+
+@app.post("/auth")
+async def authenticate(request: Request):
+    try:
+        form = await request.form()
+        auth_token = form.get("auth_token")
+        if not auth_token:
+            return RedirectResponse(url="/", status_code=302)
+        
+        if verify_auth_token(auth_token):
+            response = RedirectResponse(url="/keys", status_code=302)
+            response.set_cookie(key="auth_token", value=auth_token, httponly=True, max_age=3600)
+            return response
+        return RedirectResponse(url="/", status_code=302)
+    except Exception as e:
+        logger.error(f"Authentication error: {str(e)}")
+        return RedirectResponse(url="/", status_code=302)
+
+
+@app.get("/keys", response_class=HTMLResponse)
+async def keys_page(request: Request):
+    auth_token = request.cookies.get("auth_token")
+    if not auth_token or not verify_auth_token(auth_token):
+        return RedirectResponse(url="/", status_code=302)
+    keys_status = await key_manager.get_keys_by_status()
+    total = len(keys_status["valid_keys"]) + len(keys_status["invalid_keys"])
+    return templates.TemplateResponse("keys_status.html", {
+        "request": request,
+        "valid_keys": keys_status["valid_keys"],
+        "invalid_keys": keys_status["invalid_keys"],
+        "total": total
+    })
+
+
 @app.get("/health")
-@app.get("/")
-async def health_check():
+async def health_check(request: Request):
     logger.info("Health check endpoint called")
     return {"status": "healthy"}
-
+    
 
 if __name__ == "__main__":