Upload 8 files

router_posts.py

@@ -515,14 +515,14 @@ async def tip_post(request: Request, post_id: str, amount: int, is_anon: bool =
         db_session.commit()
         
         # 📝 审计日志
-        logger.info(f"POST_TIP | post={post_id}")
+        logger.info("POST_TIP")
         
     except HTTPException:
         db_session.rollback()
         raise
     except Exception as e:
         db_session.rollback()
-        logger.error(f"POST_TIP_ERROR | post={post_id} | error_type={type(e).__name__}")
+        logger.error("POST_TIP_ERROR | error_type=%s", type(e).__name__)
         raise HTTPException(status_code=500, detail="打赏处理失败，请稍后重试")
     
     def notify_tip():
@@ -564,7 +564,7 @@ async def tip_post(request: Request, post_id: str, amount: int, is_anon: bool =
     try:
         db.atomic_update("posts.json", board_updater, default_data=[])
     except Exception as e:
-        logger.error(f"POST_TIP_BOARD_ERROR | post={post_id} | error_type={type(e).__name__}")
+        logger.error("POST_TIP_BOARD_ERROR | error_type=%s", type(e).__name__)
     
     return {"status": "success", "message": f"成功打赏 {amount} 积分"}
 

router_prompts.py

@@ -744,14 +744,14 @@ async def tip_prompt(request: Request, prompt_id: str, amount: int, is_anon: boo
         db_session.commit()
 
         # 📝 审计日志
-        logger.info(f"PROMPT_TIP | prompt={prompt_id}")
+        logger.info("PROMPT_TIP")
 
     except HTTPException:
         db_session.rollback()
         raise
     except Exception as e:
         db_session.rollback()
-        logger.error(f"PROMPT_TIP_ERROR | prompt={prompt_id} | error_type={type(e).__name__}")
+        logger.error("PROMPT_TIP_ERROR | error_type=%s", type(e).__name__)
         raise HTTPException(status_code=500, detail="打赏处理失败，请稍后重试")
 
     def notify_tip():
@@ -793,7 +793,7 @@ async def tip_prompt(request: Request, prompt_id: str, amount: int, is_anon: boo
     try:
         db.atomic_update("prompts.json", board_updater, default_data=[])
     except Exception as e:
-        logger.error(f"PROMPT_TIP_BOARD_ERROR | prompt={prompt_id} | error_type={type(e).__name__}")
+        logger.error("PROMPT_TIP_BOARD_ERROR | error_type=%s", type(e).__name__)
 
     return {"status": "success", "message": f"成功打赏 {amount} 积分"}
 

router_tasks.py

@@ -93,7 +93,7 @@ def create_task_transaction(db_session: Session, account: str, tx_type: str, amo
     )
     db_session.add(new_tx)
     
-    logger.info(f"TASK_TX | type={tx_type} | task={task_id} | tx={tx_id}")
+    logger.info("TASK_TX")
     return tx_id
 
 # ==========================================
@@ -1029,14 +1029,14 @@ async def tip_task(request: Request, task_id: str, amount: int, is_anon: bool =
         db_session.commit()
         
         # 📝 审计日志
-        logger.info(f"TASK_TIP | task={task_id}")
+        logger.info("TASK_TIP")
         
     except HTTPException:
         db_session.rollback()
         raise
     except Exception as e:
         db_session.rollback()
-        logger.error(f"TASK_TIP_ERROR | task={task_id} | error_type={type(e).__name__}")
+        logger.error("TASK_TIP_ERROR | error_type=%s", type(e).__name__)
         raise HTTPException(status_code=500, detail="打赏处理失败，请稍后重试")
     
     def notify_tip():
@@ -1078,7 +1078,7 @@ async def tip_task(request: Request, task_id: str, amount: int, is_anon: bool =
     try:
         db.atomic_update("tasks.json", board_updater, default_data=[])
     except Exception as e:
-        logger.error(f"TASK_TIP_BOARD_ERROR | task={task_id} | error_type={type(e).__name__}")
+        logger.error("TASK_TIP_BOARD_ERROR | error_type=%s", type(e).__name__)
     
     return {"status": "success", "message": f"成功打赏 {amount} 积分"}
 

router_users_auth.py

@@ -23,7 +23,7 @@ from models import UserRegister, UserLogin, SendCodeRequest
 from verify_code_engine import send_email_code, send_sms_code, cleanup_expired_codes, check_send_cooldown
 
 # 🔒 P0安全增强：导入密码哈希和 JWT 工具
-from 安全认证 import hash_password, verify_password, create_token, require_password_match
+from 安全认证 import hash_password, verify_password, create_token, require_password_match, require_auth
 
 from user_store import read_user, check_registration, create_user, finish_login, reset_user_password, get_password_version
 
@@ -52,7 +52,20 @@ def _find_contact_account(contact, contact_type):
         raise HTTPException(status_code=503, detail="用户数据暂不可用") from None
 
 
-async def _check_code_contact(req):
+async def _check_code_contact(req, request=None):
+    if req.action_type == "withdraw":
+        if request is None:
+            raise HTTPException(status_code=401, detail="请先登录")
+        account = await require_auth(request.headers.get("Authorization"))
+        if req.account is not None and req.account != account:
+            raise HTTPException(status_code=403, detail="无权为其他账号请求提现验证码")
+        user = await asyncio.to_thread(read_user, account)
+        contact = user.get("email") or user.get("phone", "")
+        contact_type = "email" if user.get("email") else "phone"
+        if (not isinstance(contact, str) or not contact.strip() or
+                req.contact_type != contact_type or req.contact != contact):
+            raise HTTPException(status_code=400, detail="联系方式与当前账号绑定信息不匹配")
+        return True
     if req.action_type == "recover":
         account, _ = await asyncio.to_thread(_find_contact_account, req.contact, req.contact_type)
         return account is not None
@@ -83,7 +96,7 @@ async def send_verify_code(request: Request, req: SendCodeRequest, bg_tasks: Bac
         - action_type: "register" 注册 / "reset" 重置密码 / "recover" 找回账号
         - account: (仅重置密码时必填) 用户账号
     """
-    if not await _check_code_contact(req):
+    if not await _check_code_contact(req, request):
         return {"status": "success", "message": "如果该联系方式已绑定账号，验证码已发送"}
 
     # 🔒 检查发送频率限制（同一联系方式60秒内只能发送1条）
@@ -121,7 +134,7 @@ async def send_verify_code(request: Request, req: SendCodeRequest, bg_tasks: Bac
 @shared_limit(5)  # 🔒 安全限流：与异步版对齐，每分钟最多5次
 async def send_code_api(request: Request, req: SendCodeRequest):
     """发送验证码接口（同步版本，直接等待发送结果）"""
-    if not await _check_code_contact(req):
+    if not await _check_code_contact(req, request):
         return {"status": "success", "message": "如果该联系方式已绑定账号，验证码已发送"}
 
     # 🔒 检查发送频率限制（同一联系方式60秒内只能发送1条）

workflow_download_service.py

@@ -40,7 +40,7 @@ async def prepare_workflow_download(item, item_id, *, store, source_authorizer,
     close_owned_resources = resources.close
 
     try:
-        print(f"🔍 开始下载资源 [{item_id}]")
+        print("WORKFLOW_DOWNLOAD_STARTED")
         for redirect_count in range(6):
             host = await validate_target(target_url)
             headers = {"User-Agent": "ComfyUI-Ranking-SaaS", "Accept-Encoding": "identity"}
@@ -107,5 +107,5 @@ async def prepare_workflow_download(item, item_id, *, store, source_authorizer,
         return error_response(content={"error": "下载超时，请稍后重试"}, status_code=504)
     except Exception as e:
         await close_owned_resources()
-        print(f"❌ 代理下载异常 [{item_id}]: {type(e).__name__}")
+        print(f"WORKFLOW_DOWNLOAD_FAILED | error_type={type(e).__name__}")
         return error_response(content={"error": "代理下载失败，请检查资源链接后重试"}, status_code=502)

安全认证.py

@@ -34,15 +34,21 @@ import bcrypt
 _DEFAULT_JWT_SECRET = "ComfyUI-Ranking-JWT-Secret-v2-beta-2026"
 _DEFAULT_PASSWORD_SALT = "ComfyUI-Ranking-Salt-v1"
 
-JWT_SECRET = os.environ.get("JWT_SECRET") or _DEFAULT_JWT_SECRET
+_CONFIGURED_JWT_SECRET = os.environ.get("JWT_SECRET")
+JWT_SECRET = _CONFIGURED_JWT_SECRET or _DEFAULT_JWT_SECRET
 PASSWORD_SALT = os.environ.get("PASSWORD_SALT") or _DEFAULT_PASSWORD_SALT
 
 # 🔒 生产环境必须使用部署密钥：公开默认值只允许本地开发使用。
 # HF Spaces 或显式生产部署缺少密钥时拒绝启动，避免继续签发可伪造 Token。
-_IS_PRODUCTION = bool(os.environ.get("SPACE_ID")) or os.environ.get("APP_ENV", "").lower() == "production"
-if _IS_PRODUCTION and not os.environ.get("JWT_SECRET"):
-    raise RuntimeError("生产环境必须配置随机 JWT_SECRET；拒绝使用源码内置默认密钥启动")
-if not os.environ.get("JWT_SECRET"):
+_IS_PRODUCTION = bool(os.environ.get("SPACE_ID")) or os.environ.get("APP_ENV", "").strip().lower() == "production"
+if _IS_PRODUCTION and (
+    not _CONFIGURED_JWT_SECRET
+    or not _CONFIGURED_JWT_SECRET.strip()
+    or _CONFIGURED_JWT_SECRET.strip() == _DEFAULT_JWT_SECRET
+    or len(_CONFIGURED_JWT_SECRET.encode("utf-8")) < 32
+):
+    raise RuntimeError("生产环境 JWT_SECRET 无效：必须使用至少32字节的独立随机密钥，禁止公开开发密钥或空白值")
+if not _CONFIGURED_JWT_SECRET:
     print("⚠️ [安全提示] 未设置 JWT_SECRET，当前使用仅供本地开发的默认密钥")
 
 # Token 有效期配置（单位：秒）