Add configurable branding and login sessions

api/app.py

@@ -1,13 +1,15 @@
 from __future__ import annotations
 
 from contextlib import asynccontextmanager
+from html import escape
 from mimetypes import guess_type
 from pathlib import Path
+import re
 from threading import Event
 
 from fastapi import FastAPI, HTTPException, Request
 from fastapi.middleware.cors import CORSMiddleware
-from fastapi.responses import FileResponse
+from fastapi.responses import FileResponse, HTMLResponse, Response
 
 from api import accounts, ai, image_tasks, register, shop, system
 from api.errors import install_exception_handlers
@@ -19,6 +21,8 @@ STATIC_CACHE_CONTROL = "public, max-age=31536000, immutable"
 ASSET_CACHE_CONTROL = "public, max-age=86400"
 HTML_CACHE_CONTROL = "no-cache"
 COMPRESSIBLE_SUFFIXES = {".css", ".html", ".js", ".json", ".map", ".svg", ".txt", ".xml"}
+TITLE_RE = re.compile(r"<title>.*?</title>", re.IGNORECASE | re.DOTALL)
+ICON_LINK_RE = re.compile(r"<link\b[^>]*\brel=[\"'][^\"']*(?:icon|apple-touch-icon)[^\"']*[\"'][^>]*>", re.IGNORECASE)
 
 
 def _web_cache_headers(full_path: str, asset: Path) -> dict[str, str]:
@@ -55,6 +59,49 @@ def _is_api_like_path(full_path: str) -> bool:
     return clean_path.startswith(("api/", "auth/", "v1/"))
 
 
+def _guess_icon_type(href: str) -> str:
+    clean_href = href.split("?", 1)[0].split("#", 1)[0].lower()
+    if clean_href.endswith(".svg"):
+        return "image/svg+xml"
+    if clean_href.endswith((".jpg", ".jpeg")):
+        return "image/jpeg"
+    if clean_href.endswith(".webp"):
+        return "image/webp"
+    if clean_href.endswith(".ico"):
+        return "image/x-icon"
+    return "image/png"
+
+
+def _inject_branding_head(html_text: str) -> str:
+    branding = config.get_branding()
+    title = escape(str(branding.get("site_title") or "ChatGPT 号池管理"), quote=False)
+    raw_icon_href = str(branding.get("site_logo_url") or "/favicon.ico")
+    icon_href = escape(raw_icon_href, quote=True)
+    icon_type = escape(_guess_icon_type(raw_icon_href), quote=True)
+    icon_markup = (
+        f'<link rel="icon" href="{icon_href}" type="{icon_type}" data-branding-icon="favicon">'
+        f'<link rel="apple-touch-icon" href="{icon_href}" data-branding-icon="apple-touch-icon">'
+    )
+    next_html = TITLE_RE.sub(f"<title>{title}</title>", html_text, count=1)
+    if next_html == html_text and "</head>" in next_html:
+        next_html = next_html.replace("</head>", f"<title>{title}</title></head>", 1)
+    next_html = ICON_LINK_RE.sub("", next_html)
+    if "</head>" in next_html:
+        next_html = next_html.replace("</head>", f"{icon_markup}</head>", 1)
+    return next_html
+
+
+def _web_response(full_path: str, request: Request, asset: Path) -> Response:
+    if asset.suffix.lower() == ".html":
+        html_text = asset.read_text(encoding="utf-8")
+        return HTMLResponse(
+            _inject_branding_head(html_text),
+            headers=_web_cache_headers(full_path, asset),
+        )
+    selected_asset, headers, media_type = _select_web_asset(request, full_path, asset)
+    return FileResponse(selected_asset, headers=headers, media_type=media_type)
+
+
 def create_app() -> FastAPI:
     app_version = config.app_version
 
@@ -91,15 +138,13 @@ def create_app() -> FastAPI:
     async def serve_web(full_path: str, request: Request):
         asset = resolve_web_asset(full_path)
         if asset is not None:
-            selected_asset, headers, media_type = _select_web_asset(request, full_path, asset)
-            return FileResponse(selected_asset, headers=headers, media_type=media_type)
+            return _web_response(full_path, request, asset)
         if full_path.strip("/").startswith("_next/"):
             raise HTTPException(status_code=404, detail="Not Found")
         fallback = resolve_web_asset("")
         if fallback is None:
             raise HTTPException(status_code=404, detail="Not Found")
-        selected_asset, headers, media_type = _select_web_asset(request, "", fallback)
-        return FileResponse(selected_asset, headers=headers, media_type=media_type)
+        return _web_response("", request, fallback)
 
     @app.head("/{full_path:path}", include_in_schema=False)
     async def serve_web_head(full_path: str, request: Request):

api/system.py

@@ -63,6 +63,7 @@ def create_router(app_version: str) -> APIRouter:
             "subject_id": identity.get("id"),
             "name": identity.get("name"),
             "account_pool_enabled": bool(identity.get("role") == "admin" or identity.get("account_pool_enabled")),
+            "login_session_duration_hours": config.login_session_duration_hours_for_role(identity.get("role")),
         }
 
     @router.get("/api/auth/wechat/status")
@@ -70,8 +71,13 @@ def create_router(app_version: str) -> APIRouter:
         return {
             "enabled": config.wechat_login_enabled,
             "auto_register_enabled": config.wechat_auto_register_enabled,
+            "login_session_duration_hours": config.normal_user_login_session_duration_hours,
         }
 
+    @router.get("/api/branding")
+    async def get_branding():
+        return {"branding": config.get_branding()}
+
     @router.post("/api/auth/wechat/login")
     async def wechat_login(body: WechatLoginRequest):
         if not config.wechat_login_enabled:
@@ -121,6 +127,7 @@ def create_router(app_version: str) -> APIRouter:
             "account_pool_enabled": bool(item.get("account_pool_enabled")),
             "key": raw_key,
             "created": created,
+            "login_session_duration_hours": config.normal_user_login_session_duration_hours,
             "credits": auth_service.credit_summary(item),
             "wechat": {
                 "openid": openid,

services/config.py

@@ -47,6 +47,25 @@ DEFAULT_IMAGE_STORAGE = {
     "public_base_url": "",
 }
 
+BRANDING_KEYS = (
+    "site_title",
+    "site_logo_url",
+    "site_header_title",
+    "site_external_link_label",
+    "site_external_link_url",
+    "site_external_link_icon_url",
+    "site_external_link_icon_svg",
+)
+DEFAULT_BRANDING = {
+    "site_title": "ChatGPT 号池管理",
+    "site_logo_url": "",
+    "site_header_title": "chatgpt2api",
+    "site_external_link_label": "GitHub",
+    "site_external_link_url": "https://github.com/basketikun/chatgpt2api",
+    "site_external_link_icon_url": "",
+    "site_external_link_icon_svg": "",
+}
+
 ANNOUNCEMENT_TYPES = {"notice", "timeline"}
 ANNOUNCEMENT_TARGETS = {"internal", "normal", "all"}
 SHARED_ANNOUNCEMENTS_KEY = "announcements"
@@ -56,6 +75,8 @@ SHARED_SETTINGS_KEYS = (
     "normal_user_daily_credits",
     "wechat_login_enabled",
     "wechat_auto_register_enabled",
+    "internal_user_login_session_duration_hours",
+    "normal_user_login_session_duration_hours",
 )
 SHARED_SETTINGS_CACHE_SECONDS = 10.0
 
@@ -84,6 +105,26 @@ def _normalize_positive_int(value: object, default: int, minimum: int = 0) -> in
     return max(minimum, normalized)
 
 
+def _normalize_text(value: object, default: str = "", max_length: int = 500) -> str:
+    if value is None:
+        return default
+    normalized = str(value).strip()
+    return normalized[:max_length]
+
+
+def _normalize_branding_settings(value: dict[str, object] | None) -> dict[str, str]:
+    source = value if isinstance(value, dict) else {}
+    return {
+        "site_title": _normalize_text(source.get("site_title"), DEFAULT_BRANDING["site_title"], 80) or DEFAULT_BRANDING["site_title"],
+        "site_logo_url": _normalize_text(source.get("site_logo_url"), DEFAULT_BRANDING["site_logo_url"], 500),
+        "site_header_title": _normalize_text(source.get("site_header_title"), DEFAULT_BRANDING["site_header_title"], 40) or DEFAULT_BRANDING["site_header_title"],
+        "site_external_link_label": _normalize_text(source.get("site_external_link_label"), DEFAULT_BRANDING["site_external_link_label"], 40),
+        "site_external_link_url": _normalize_text(source.get("site_external_link_url"), DEFAULT_BRANDING["site_external_link_url"], 500),
+        "site_external_link_icon_url": _normalize_text(source.get("site_external_link_icon_url"), DEFAULT_BRANDING["site_external_link_icon_url"], 500),
+        "site_external_link_icon_svg": _normalize_text(source.get("site_external_link_icon_svg"), DEFAULT_BRANDING["site_external_link_icon_svg"], 6000),
+    }
+
+
 def _normalize_backup_include(value: object) -> dict[str, bool]:
     source = value if isinstance(value, dict) else {}
     normalized = dict(DEFAULT_BACKUP_INCLUDE)
@@ -222,6 +263,20 @@ def _normalize_shared_settings(value: object, fallback: dict[str, object] | None
             source.get("wechat_auto_register_enabled"),
             _normalize_bool(fallback.get("wechat_auto_register_enabled"), True),
         ),
+        "internal_user_login_session_duration_hours": _normalize_positive_int(
+            source.get("internal_user_login_session_duration_hours"),
+            _normalize_positive_int(fallback.get("internal_user_login_session_duration_hours"), 0, 0),
+            0,
+        ),
+        "normal_user_login_session_duration_hours": _normalize_positive_int(
+            source.get("normal_user_login_session_duration_hours"),
+            _normalize_positive_int(
+                fallback.get("normal_user_login_session_duration_hours", fallback.get("login_session_duration_hours")),
+                72,
+                0,
+            ),
+            0,
+        ),
     }
 
 
@@ -378,6 +433,20 @@ class ConfigStore:
     def wechat_auto_register_enabled(self) -> bool:
         return _normalize_bool(self._load_shared_settings().get("wechat_auto_register_enabled"), True)
 
+    @property
+    def internal_user_login_session_duration_hours(self) -> int:
+        return int(self._load_shared_settings().get("internal_user_login_session_duration_hours") or 0)
+
+    @property
+    def normal_user_login_session_duration_hours(self) -> int:
+        return int(self._load_shared_settings().get("normal_user_login_session_duration_hours") or 0)
+
+    def login_session_duration_hours_for_role(self, role: object) -> int:
+        return self.normal_user_login_session_duration_hours if str(role or "").strip() == "normal" else self.internal_user_login_session_duration_hours
+
+    def get_branding(self) -> dict[str, str]:
+        return _normalize_branding_settings(self.data)
+
     @property
     def shop_purchase_url(self) -> str:
         return str(self.data.get("shop_purchase_url") or "").strip()
@@ -481,6 +550,9 @@ class ConfigStore:
         data["normal_user_daily_credits"] = self.normal_user_daily_credits
         data["wechat_login_enabled"] = self.wechat_login_enabled
         data["wechat_auto_register_enabled"] = self.wechat_auto_register_enabled
+        data["internal_user_login_session_duration_hours"] = self.internal_user_login_session_duration_hours
+        data["normal_user_login_session_duration_hours"] = self.normal_user_login_session_duration_hours
+        data.update(self.get_branding())
         data["shop_purchase_url"] = self.shop_purchase_url
         data["auto_remove_invalid_accounts"] = self.auto_remove_invalid_accounts
         data["auto_remove_rate_limited_accounts"] = self.auto_remove_rate_limited_accounts
@@ -509,6 +581,8 @@ class ConfigStore:
             _validate_image_storage_settings(next_data["image_storage"])
         if "image_proxy_base_url" in next_data:
             next_data["image_proxy_base_url"] = _normalize_image_proxy_base_url(next_data.get("image_proxy_base_url"))
+        if any(key in incoming_data for key in BRANDING_KEYS):
+            next_data.update(_normalize_branding_settings(next_data))
         if any(key in incoming_data for key in SHARED_SETTINGS_KEYS):
             next_data.update(self._save_shared_settings(_normalize_shared_settings(next_data, self.data)))
         if "announcements" in next_data:

web/src/app/login/page.tsx

@@ -11,7 +11,7 @@ import { Input } from "@/components/ui/input";
 import { fetchWechatLoginStatus, login, wechatLogin } from "@/lib/api";
 import { useRedirectIfAuthenticated } from "@/lib/use-auth-guard";
 import { cn } from "@/lib/utils";
-import { getDefaultRouteForRole, setStoredAuthSession } from "@/store/auth";
+import { buildSessionExpiresAt, getDefaultRouteForRole, setStoredAuthSession } from "@/store/auth";
 
 const WECHAT_QR_CODE_URL = "https://wx.z-l.top/qrcode.png";
 
@@ -66,6 +66,7 @@ export default function LoginPage() {
         subjectId: data.subject_id,
         name: data.name,
         accountPoolEnabled: Boolean(data.account_pool_enabled),
+        expiresAt: buildSessionExpiresAt(data.login_session_duration_hours),
       });
       router.replace(getDefaultRouteForRole(data.role));
     } catch (error) {
@@ -97,6 +98,7 @@ export default function LoginPage() {
         name: data.name,
         accountPoolEnabled: Boolean(data.account_pool_enabled),
         wechatOpenid: data.wechat?.openid,
+        expiresAt: buildSessionExpiresAt(data.login_session_duration_hours),
       });
       toast.success(data.created ? "微信登录成功，已自动创建账号" : "微信登录成功");
       router.replace(getDefaultRouteForRole(data.role));

web/src/app/settings/components/config-card.tsx

@@ -30,6 +30,14 @@ export function ConfigCard() {
   const setNormalUserDailyCredits = useSettingsStore((state) => state.setNormalUserDailyCredits);
   const setWechatLoginEnabled = useSettingsStore((state) => state.setWechatLoginEnabled);
   const setWechatAutoRegisterEnabled = useSettingsStore((state) => state.setWechatAutoRegisterEnabled);
+  const setInternalUserLoginSessionDurationHours = useSettingsStore((state) => state.setInternalUserLoginSessionDurationHours);
+  const setNormalUserLoginSessionDurationHours = useSettingsStore((state) => state.setNormalUserLoginSessionDurationHours);
+  const setSiteTitle = useSettingsStore((state) => state.setSiteTitle);
+  const setSiteLogoUrl = useSettingsStore((state) => state.setSiteLogoUrl);
+  const setSiteHeaderTitle = useSettingsStore((state) => state.setSiteHeaderTitle);
+  const setSiteExternalLinkLabel = useSettingsStore((state) => state.setSiteExternalLinkLabel);
+  const setSiteExternalLinkUrl = useSettingsStore((state) => state.setSiteExternalLinkUrl);
+  const setSiteExternalLinkIconSvg = useSettingsStore((state) => state.setSiteExternalLinkIconSvg);
   const setShopPurchaseUrl = useSettingsStore((state) => state.setShopPurchaseUrl);
   const setAutoRemoveInvalidAccounts = useSettingsStore((state) => state.setAutoRemoveInvalidAccounts);
   const setAutoRemoveRateLimitedAccounts = useSettingsStore((state) => state.setAutoRemoveRateLimitedAccounts);
@@ -88,6 +96,72 @@ export function ConfigCard() {
           管理员登录密钥继续从部署配置读取，不再在此页面展示；如需分发给其他人，请在下方创建内部用户密钥。
         </div>
         <div className="grid gap-4 md:grid-cols-2">
+          <div className="space-y-3 rounded-xl border border-stone-200 bg-white px-4 py-3 md:col-span-2">
+            <div>
+              <div className="text-sm font-medium text-stone-900">网站品牌显示</div>
+              <p className="mt-1 text-xs leading-5 text-stone-500">
+                可自定义浏览器标题、Logo/favicon、左上角名称，以及旁边链接的文字和地址。
+              </p>
+            </div>
+            <div className="grid gap-4 md:grid-cols-2">
+              <div className="space-y-2">
+                <label className="text-sm text-stone-700">网站标题</label>
+                <Input
+                  value={String(config?.site_title || "")}
+                  onChange={(event) => setSiteTitle(event.target.value)}
+                  placeholder="ChatGPT 号池管理"
+                  className="h-10 rounded-xl border-stone-200 bg-white"
+                />
+              </div>
+              <div className="space-y-2">
+                <label className="text-sm text-stone-700">网站 Logo 地址</label>
+                <Input
+                  value={String(config?.site_logo_url || "")}
+                  onChange={(event) => setSiteLogoUrl(event.target.value)}
+                  placeholder="/favicon.ico 或 https://example.com/logo.png"
+                  className="h-10 rounded-xl border-stone-200 bg-white"
+                />
+              </div>
+              <div className="space-y-2">
+                <label className="text-sm text-stone-700">左上角名称</label>
+                <Input
+                  value={String(config?.site_header_title || "")}
+                  onChange={(event) => setSiteHeaderTitle(event.target.value)}
+                  placeholder="chatgpt2api"
+                  className="h-10 rounded-xl border-stone-200 bg-white"
+                />
+              </div>
+              <div className="space-y-2">
+                <label className="text-sm text-stone-700">旁边链接文字</label>
+                <Input
+                  value={String(config?.site_external_link_label ?? "")}
+                  onChange={(event) => setSiteExternalLinkLabel(event.target.value)}
+                  placeholder="GitHub"
+                  className="h-10 rounded-xl border-stone-200 bg-white"
+                />
+              </div>
+              <div className="space-y-2">
+                <label className="text-sm text-stone-700">旁边链接 SVG 图标代码</label>
+                <Textarea
+                  value={String(config?.site_external_link_icon_svg || "")}
+                  onChange={(event) => setSiteExternalLinkIconSvg(event.target.value)}
+                  placeholder={'<svg viewBox="0 0 24 24" fill="none" stroke="currentColor">...</svg>'}
+                  className="min-h-24 rounded-xl border-stone-200 bg-white font-mono text-xs"
+                />
+                <p className="text-xs text-stone-500">建议使用 currentColor 作为 fill 或 stroke，这样 hover 时图标会跟随文字一起变色；留空则使用默认图标。</p>
+              </div>
+              <div className="space-y-2">
+                <label className="text-sm text-stone-700">旁边链接地址</label>
+                <Input
+                  value={String(config?.site_external_link_url ?? "")}
+                  onChange={(event) => setSiteExternalLinkUrl(event.target.value)}
+                  placeholder="https://github.com/basketikun/chatgpt2api"
+                  className="h-10 rounded-xl border-stone-200 bg-white"
+                />
+                <p className="text-xs text-stone-500">链接文字或地址留空时，顶部不会显示这个链接。</p>
+              </div>
+            </div>
+          </div>
           <div className="space-y-2">
             <label className="text-sm text-stone-700">账号刷新间隔</label>
             <Input
@@ -252,6 +326,30 @@ export function ConfigCard() {
               </span>
             </span>
           </label>
+          <div className="space-y-2">
+            <label className="text-sm text-stone-700">内部用户登录会话时长</label>
+            <Input
+              value={String(config?.internal_user_login_session_duration_hours ?? 0)}
+              onChange={(event) => setInternalUserLoginSessionDurationHours(event.target.value)}
+              type="number"
+              min="0"
+              placeholder="0"
+              className="h-10 rounded-xl border-stone-200 bg-white"
+            />
+            <p className="text-xs text-stone-500">单位小时，0 表示长期有效；适用于管理员和内部密钥登录。</p>
+          </div>
+          <div className="space-y-2">
+            <label className="text-sm text-stone-700">微信/普通用户登录会话时长</label>
+            <Input
+              value={String(config?.normal_user_login_session_duration_hours ?? 72)}
+              onChange={(event) => setNormalUserLoginSessionDurationHours(event.target.value)}
+              type="number"
+              min="0"
+              placeholder="72"
+              className="h-10 rounded-xl border-stone-200 bg-white"
+            />
+            <p className="text-xs text-stone-500">单位小时，默认 72 小时（3 天）；过期后需要重新用公众号验证码或密钥登录。</p>
+          </div>
           <div className="space-y-2">
             <label className="text-sm text-stone-700">卡密购买地址</label>
             <Input

web/src/app/settings/store.ts

@@ -92,6 +92,15 @@ function normalizeConfig(config: SettingsConfig): SettingsConfig {
     normal_user_daily_credits: Number(config.normal_user_daily_credits || 0),
     wechat_login_enabled: config.wechat_login_enabled !== false,
     wechat_auto_register_enabled: config.wechat_auto_register_enabled !== false,
+    internal_user_login_session_duration_hours: Math.max(0, Number(config.internal_user_login_session_duration_hours) || 0),
+    normal_user_login_session_duration_hours: Math.max(0, Number(config.normal_user_login_session_duration_hours ?? config.login_session_duration_hours ?? 72)),
+    site_title: String(config.site_title || "ChatGPT 号池管理"),
+    site_logo_url: String(config.site_logo_url || ""),
+    site_header_title: String(config.site_header_title || "chatgpt2api"),
+    site_external_link_label: String(config.site_external_link_label ?? "GitHub"),
+    site_external_link_url: String(config.site_external_link_url ?? "https://github.com/basketikun/chatgpt2api"),
+    site_external_link_icon_url: String(config.site_external_link_icon_url || ""),
+    site_external_link_icon_svg: String(config.site_external_link_icon_svg || ""),
     shop_purchase_url: String(config.shop_purchase_url || ""),
     announcements: normalizeAnnouncements(config.announcements),
     auto_remove_invalid_accounts: Boolean(config.auto_remove_invalid_accounts),
@@ -239,6 +248,15 @@ type SettingsStore = {
   setNormalUserDailyCredits: (value: string) => void;
   setWechatLoginEnabled: (value: boolean) => void;
   setWechatAutoRegisterEnabled: (value: boolean) => void;
+  setInternalUserLoginSessionDurationHours: (value: string) => void;
+  setNormalUserLoginSessionDurationHours: (value: string) => void;
+  setSiteTitle: (value: string) => void;
+  setSiteLogoUrl: (value: string) => void;
+  setSiteHeaderTitle: (value: string) => void;
+  setSiteExternalLinkLabel: (value: string) => void;
+  setSiteExternalLinkUrl: (value: string) => void;
+  setSiteExternalLinkIconUrl: (value: string) => void;
+  setSiteExternalLinkIconSvg: (value: string) => void;
   setShopPurchaseUrl: (value: string) => void;
   setAnnouncements: (items: Announcement[]) => void;
   setAutoRemoveInvalidAccounts: (value: boolean) => void;
@@ -383,6 +401,15 @@ export const useSettingsStore = create<SettingsStore>((set, get) => ({
         normal_user_daily_credits: Math.max(0, Number(config.normal_user_daily_credits) || 0),
         wechat_login_enabled: config.wechat_login_enabled !== false,
         wechat_auto_register_enabled: config.wechat_auto_register_enabled !== false,
+        internal_user_login_session_duration_hours: Math.max(0, Number(config.internal_user_login_session_duration_hours) || 0),
+        normal_user_login_session_duration_hours: Math.max(0, Number(config.normal_user_login_session_duration_hours) || 0),
+        site_title: String(config.site_title || "").trim(),
+        site_logo_url: String(config.site_logo_url || "").trim(),
+        site_header_title: String(config.site_header_title || "").trim(),
+        site_external_link_label: String(config.site_external_link_label ?? "").trim(),
+        site_external_link_url: String(config.site_external_link_url ?? "").trim(),
+        site_external_link_icon_url: String(config.site_external_link_icon_url || "").trim(),
+        site_external_link_icon_svg: String(config.site_external_link_icon_svg || "").trim(),
         shop_purchase_url: String(config.shop_purchase_url || "").trim(),
         announcements: normalizeAnnouncements(config.announcements).map((item) => ({
           ...item,
@@ -480,6 +507,42 @@ export const useSettingsStore = create<SettingsStore>((set, get) => ({
     set((state) => state.config ? { config: { ...state.config, wechat_auto_register_enabled: value } } : {});
   },
 
+  setInternalUserLoginSessionDurationHours: (value) => {
+    set((state) => state.config ? { config: { ...state.config, internal_user_login_session_duration_hours: value } } : {});
+  },
+
+  setNormalUserLoginSessionDurationHours: (value) => {
+    set((state) => state.config ? { config: { ...state.config, normal_user_login_session_duration_hours: value } } : {});
+  },
+
+  setSiteTitle: (value) => {
+    set((state) => state.config ? { config: { ...state.config, site_title: value } } : {});
+  },
+
+  setSiteLogoUrl: (value) => {
+    set((state) => state.config ? { config: { ...state.config, site_logo_url: value } } : {});
+  },
+
+  setSiteHeaderTitle: (value) => {
+    set((state) => state.config ? { config: { ...state.config, site_header_title: value } } : {});
+  },
+
+  setSiteExternalLinkLabel: (value) => {
+    set((state) => state.config ? { config: { ...state.config, site_external_link_label: value } } : {});
+  },
+
+  setSiteExternalLinkUrl: (value) => {
+    set((state) => state.config ? { config: { ...state.config, site_external_link_url: value } } : {});
+  },
+
+  setSiteExternalLinkIconUrl: (value) => {
+    set((state) => state.config ? { config: { ...state.config, site_external_link_icon_url: value } } : {});
+  },
+
+  setSiteExternalLinkIconSvg: (value) => {
+    set((state) => state.config ? { config: { ...state.config, site_external_link_icon_svg: value } } : {});
+  },
+
   setShopPurchaseUrl: (value) => {
     set((state) => state.config ? { config: { ...state.config, shop_purchase_url: value } } : {});
   },

web/src/components/app-shell.tsx

@@ -4,9 +4,11 @@ import { usePathname } from "next/navigation";
 import type { ReactNode } from "react";
 
 import { TopNav } from "@/components/top-nav";
+import { useBranding } from "@/lib/branding";
 
 export function AppShell({ children }: { children: ReactNode }) {
   const pathname = usePathname();
+  const branding = useBranding({ applyDocument: true });
   const normalizedPath = pathname.replace(/\/+$/, "") || "/";
   const isLoginPage = normalizedPath === "/login";
   const isImagePage = normalizedPath === "/image";
@@ -20,7 +22,7 @@ export function AppShell({ children }: { children: ReactNode }) {
       <main className="app-page-background min-h-screen overflow-x-hidden px-4 pt-0 pb-2 text-stone-900 sm:px-6 lg:px-8">
         <div className="app-page-background fixed inset-x-0 top-0 z-40 px-4 pt-[env(safe-area-inset-top)] pb-2 sm:px-6 sm:pt-2 lg:px-8">
           <div className="mx-auto max-w-[1440px]">
-            <TopNav />
+            <TopNav branding={branding} />
           </div>
         </div>
         <div className="mx-auto box-border flex min-h-screen max-w-[1440px] flex-col gap-2 pt-[calc(env(safe-area-inset-top)+4.5rem)] sm:gap-5 sm:pt-[5.25rem]">
@@ -33,7 +35,7 @@ export function AppShell({ children }: { children: ReactNode }) {
   return (
     <main className="min-h-screen overflow-x-hidden bg-[radial-gradient(circle_at_top_left,_rgba(255,255,255,0.92),_rgba(245,239,231,0.96)_42%,_rgba(240,235,227,0.99)_100%)] px-4 pt-0 pb-2 text-stone-900 sm:px-6 sm:pt-2 lg:px-8">
       <div className="mx-auto box-border flex min-h-screen max-w-[1440px] flex-col gap-2 pt-[env(safe-area-inset-top)] sm:gap-5 sm:pt-0">
-        <TopNav />
+        <TopNav branding={branding} />
         {children}
       </div>
     </main>

web/src/components/top-nav.tsx

@@ -2,12 +2,13 @@
 
 import Link from "next/link";
 import { useEffect, useState } from "react";
-import { Github } from "lucide-react";
+import { ExternalLink, Github } from "lucide-react";
 import { usePathname } from "next/navigation";
 
 import webConfig from "@/constants/common-env";
 import { AnnouncementsPopover } from "@/components/announcements-popover";
 import { getValidatedAuthSession } from "@/lib/auth-session";
+import { DEFAULT_BRANDING, type normalizeBranding } from "@/lib/branding";
 import { cn } from "@/lib/utils";
 import { clearStoredAuthSession, type StoredAuthSession } from "@/store/auth";
 
@@ -35,7 +36,58 @@ function getRoleLabel(role: StoredAuthSession["role"]) {
   return "内部用户";
 }
 
-export function TopNav() {
+function sanitizeSvgMarkup(markup: string) {
+  const trimmed = markup.trim();
+  if (!/^\s*<svg[\s>][\s\S]*<\/svg>\s*$/i.test(trimmed)) {
+    return "";
+  }
+  const safeMarkup = trimmed
+    .replace(/<\s*(script|foreignObject)\b[\s\S]*?<\s*\/\s*\1\s*>/gi, "")
+    .replace(/\s+on[a-z]+\s*=\s*(?:"[^"]*"|'[^']*'|[^\s>]+)/gi, "")
+    .replace(/\s+(?:href|xlink:href)\s*=\s*(?:"\s*javascript:[^"]*"|'\s*javascript:[^']*'|javascript:[^\s>]+)/gi, "");
+  return colorizeSvgForHover(addMissingViewBox(safeMarkup));
+}
+
+function readSvgAttribute(markup: string, name: string) {
+  const match = markup.match(new RegExp(`<svg\\b[^>]*\\s${name}=["']?([^"'\\s>]+)`, "i"));
+  return match?.[1] || "";
+}
+
+function addMissingViewBox(markup: string) {
+  if (/\sviewBox\s*=/i.test(markup)) {
+    return markup;
+  }
+  const width = Number.parseFloat(readSvgAttribute(markup, "width"));
+  const height = Number.parseFloat(readSvgAttribute(markup, "height"));
+  if (!Number.isFinite(width) || !Number.isFinite(height) || width <= 0 || height <= 0) {
+    return markup;
+  }
+  return markup.replace(/<svg\b/i, `<svg viewBox="0 0 ${width} ${height}"`);
+}
+
+function colorizeSvgForHover(markup: string) {
+  return markup
+    .replace(/\s(fill|stroke)=["'](?!none\b|currentColor\b|url\()[^"']+["']/gi, ' $1="currentColor"')
+    .replace(/\b(fill|stroke)\s*:\s*(?!none\b|currentColor\b|url\()[^;"']+/gi, "$1:currentColor");
+}
+
+function InlineSvgIcon({ svg }: { svg: string }) {
+  const safeSvg = sanitizeSvgMarkup(svg);
+  if (!safeSvg) {
+    return null;
+  }
+  return (
+    <span
+      className="inline-flex size-4 shrink-0 items-center justify-center overflow-visible text-current leading-none [&_svg]:block [&_svg]:size-full [&_svg]:shrink-0 [&_svg]:overflow-visible"
+      aria-hidden="true"
+      dangerouslySetInnerHTML={{ __html: safeSvg }}
+    />
+  );
+}
+
+type Branding = ReturnType<typeof normalizeBranding>;
+
+export function TopNav({ branding = DEFAULT_BRANDING }: { branding?: Branding }) {
   const pathname = usePathname();
   const [session, setSession] = useState<StoredAuthSession | null | undefined>(undefined);
 
@@ -91,6 +143,13 @@ export function TopNav() {
         : userNavItems.filter((item) => item.href !== "/accounts");
   const roleLabel = getRoleLabel(session.role);
   const displayName = session.name.trim() || roleLabel;
+  const headerTitle = branding.site_header_title.trim() || DEFAULT_BRANDING.site_header_title;
+  const logoUrl = branding.site_logo_url.trim();
+  const externalLinkLabel = branding.site_external_link_label.trim();
+  const externalLinkUrl = branding.site_external_link_url.trim();
+  const externalLinkIconUrl = branding.site_external_link_icon_url.trim();
+  const externalLinkIconSvg = branding.site_external_link_icon_svg.trim();
+  const ExternalLinkIcon = /github/i.test(`${externalLinkLabel} ${externalLinkUrl}`) ? Github : ExternalLink;
 
   return (
     <header className="border-b border-stone-100/50">
@@ -98,20 +157,29 @@ export function TopNav() {
         <div className="flex items-center justify-between gap-2 sm:justify-start sm:gap-3">
           <Link
             href="/image"
-            className="shrink-0 py-1 text-[15px] font-bold tracking-tight text-stone-950 transition hover:text-stone-700"
+            className="inline-flex shrink-0 items-center gap-1.5 py-1 text-[15px] font-bold tracking-tight text-stone-950 transition hover:text-stone-700"
           >
-            chatgpt2api
+            {logoUrl ? <img src={logoUrl} alt="" className="size-5 rounded-md object-cover" /> : null}
+            <span>{headerTitle}</span>
           </Link>
-          <a
-            href="https://github.com/basketikun/chatgpt2api"
-            target="_blank"
-            rel="noreferrer"
-            className="inline-flex items-center gap-1.5 py-1 text-sm text-stone-400 transition hover:text-stone-700"
-            aria-label="GitHub repository"
-          >
-            <Github className="size-4" />
-            <span className="hidden md:inline">GitHub</span>
-          </a>
+          {externalLinkUrl && externalLinkLabel ? (
+            <a
+              href={externalLinkUrl}
+              target="_blank"
+              rel="noreferrer"
+              className="inline-flex items-center gap-1.5 py-1 text-sm text-stone-400 transition hover:text-stone-700"
+              aria-label={externalLinkLabel}
+            >
+              {externalLinkIconSvg ? (
+                <InlineSvgIcon svg={externalLinkIconSvg} />
+              ) : externalLinkIconUrl ? (
+                <img src={externalLinkIconUrl} alt="" className="size-4 rounded-sm object-cover" />
+              ) : (
+                <ExternalLinkIcon className="size-4" />
+              )}
+              <span className="hidden md:inline">{externalLinkLabel}</span>
+            </a>
+          ) : null}
           <button
             type="button"
             className="ml-auto shrink-0 py-1 text-xs text-stone-400 transition hover:text-stone-700 sm:hidden"

web/src/lib/api.ts

@@ -107,6 +107,16 @@ export type SettingsConfig = {
   normal_user_daily_credits?: number | string;
   wechat_login_enabled?: boolean;
   wechat_auto_register_enabled?: boolean;
+  internal_user_login_session_duration_hours?: number | string;
+  normal_user_login_session_duration_hours?: number | string;
+  login_session_duration_hours?: number | string;
+  site_title?: string;
+  site_logo_url?: string;
+  site_header_title?: string;
+  site_external_link_label?: string;
+  site_external_link_url?: string;
+  site_external_link_icon_url?: string;
+  site_external_link_icon_svg?: string;
   shop_purchase_url?: string;
   auto_remove_invalid_accounts?: boolean;
   auto_remove_rate_limited_accounts?: boolean;
@@ -266,10 +276,21 @@ export type LoginResponse = {
   subject_id: string;
   name: string;
   account_pool_enabled: boolean;
+  login_session_duration_hours?: number;
   key?: string;
   created?: boolean;
 };
 
+export type BrandingConfig = {
+  site_title?: string;
+  site_logo_url?: string;
+  site_header_title?: string;
+  site_external_link_label?: string;
+  site_external_link_url?: string;
+  site_external_link_icon_url?: string;
+  site_external_link_icon_svg?: string;
+};
+
 export type UserKey = {
   id: string;
   name: string;
@@ -792,7 +813,13 @@ export async function wechatLogin(code: string) {
 }
 
 export async function fetchWechatLoginStatus() {
-  return httpRequest<{ enabled: boolean; auto_register_enabled?: boolean }>("/api/auth/wechat/status", {
+  return httpRequest<{ enabled: boolean; auto_register_enabled?: boolean; login_session_duration_hours?: number }>("/api/auth/wechat/status", {
+    redirectOnUnauthorized: false,
+  });
+}
+
+export async function fetchBranding() {
+  return httpRequest<{ branding: BrandingConfig }>("/api/branding", {
     redirectOnUnauthorized: false,
   });
 }

web/src/lib/auth-session.ts

@@ -1,7 +1,7 @@
 "use client";
 
 import { login } from "@/lib/api";
-import { clearStoredAuthSession, getStoredAuthSession, setStoredAuthSession, type StoredAuthSession } from "@/store/auth";
+import { buildSessionExpiresAt, clearStoredAuthSession, getStoredAuthSession, setStoredAuthSession, type StoredAuthSession } from "@/store/auth";
 
 const VALIDATION_CACHE_MS = 10_000;
 let cachedSession: StoredAuthSession | null = null;
@@ -52,6 +52,7 @@ async function validateStoredSession(storedSession: StoredAuthSession): Promise<
       name: data.name,
       accountPoolEnabled: Boolean(data.account_pool_enabled),
       wechatOpenid: storedSession.wechatOpenid,
+      expiresAt: storedSession.expiresAt || buildSessionExpiresAt(data.login_session_duration_hours),
     };
     await setStoredAuthSession(nextSession);
     cachedSession = nextSession;

web/src/lib/branding.ts

@@ -0,0 +1,108 @@
+"use client";
+
+import { useEffect, useState } from "react";
+
+import { fetchBranding, type BrandingConfig } from "@/lib/api";
+
+export const DEFAULT_BRANDING: Required<BrandingConfig> = {
+  site_title: "ChatGPT 号池管理",
+  site_logo_url: "",
+  site_header_title: "chatgpt2api",
+  site_external_link_label: "GitHub",
+  site_external_link_url: "https://github.com/basketikun/chatgpt2api",
+  site_external_link_icon_url: "",
+  site_external_link_icon_svg: "",
+};
+
+function normalizeText(value: unknown, fallback: string) {
+  const normalized = String(value ?? "").trim();
+  return normalized || fallback;
+}
+
+export function normalizeBranding(value: BrandingConfig | null | undefined): Required<BrandingConfig> {
+  return {
+    site_title: normalizeText(value?.site_title, DEFAULT_BRANDING.site_title),
+    site_logo_url: String(value?.site_logo_url ?? "").trim(),
+    site_header_title: normalizeText(value?.site_header_title, DEFAULT_BRANDING.site_header_title),
+    site_external_link_label: String(value?.site_external_link_label ?? DEFAULT_BRANDING.site_external_link_label).trim(),
+    site_external_link_url: String(value?.site_external_link_url ?? DEFAULT_BRANDING.site_external_link_url).trim(),
+    site_external_link_icon_url: String(value?.site_external_link_icon_url ?? "").trim(),
+    site_external_link_icon_svg: String(value?.site_external_link_icon_svg ?? "").trim(),
+  };
+}
+
+function updateFavicon(href: string) {
+  const targetHref = href || "/favicon.ico";
+  let icon = document.querySelector<HTMLLinkElement>("link[data-branding-icon='favicon']");
+  if (!icon) {
+    icon = document.createElement("link");
+    icon.rel = "icon";
+    icon.setAttribute("data-branding-icon", "favicon");
+    document.head.appendChild(icon);
+  }
+  icon.rel = "icon";
+  icon.href = targetHref;
+  icon.type = guessIconType(targetHref);
+
+  let appleIcon = document.querySelector<HTMLLinkElement>("link[data-branding-icon='apple-touch-icon']");
+  if (!appleIcon) {
+    appleIcon = document.createElement("link");
+    appleIcon.rel = "apple-touch-icon";
+    appleIcon.setAttribute("data-branding-icon", "apple-touch-icon");
+    document.head.appendChild(appleIcon);
+  }
+  appleIcon.rel = "apple-touch-icon";
+  appleIcon.href = targetHref;
+}
+
+function guessIconType(href: string) {
+  const cleanHref = href.split(/[?#]/, 1)[0]?.toLowerCase() || "";
+  if (cleanHref.endsWith(".svg")) {
+    return "image/svg+xml";
+  }
+  if (cleanHref.endsWith(".jpg") || cleanHref.endsWith(".jpeg")) {
+    return "image/jpeg";
+  }
+  if (cleanHref.endsWith(".webp")) {
+    return "image/webp";
+  }
+  if (cleanHref.endsWith(".ico")) {
+    return "image/x-icon";
+  }
+  return "image/png";
+}
+
+function applyBrandingToDocument(branding: Required<BrandingConfig>) {
+  document.title = branding.site_title;
+  updateFavicon(branding.site_logo_url);
+}
+
+export function useBranding(options: { applyDocument?: boolean } = {}) {
+  const [branding, setBranding] = useState(() => normalizeBranding(null));
+
+  useEffect(() => {
+    let active = true;
+    void fetchBranding()
+      .then((data) => {
+        if (active) {
+          setBranding(normalizeBranding(data.branding));
+        }
+      })
+      .catch(() => {
+        if (active) {
+          setBranding(normalizeBranding(null));
+        }
+      });
+    return () => {
+      active = false;
+    };
+  }, []);
+
+  useEffect(() => {
+    if (options.applyDocument) {
+      applyBrandingToDocument(branding);
+    }
+  }, [branding, options.applyDocument]);
+
+  return branding;
+}

web/src/store/auth.ts

@@ -11,6 +11,7 @@ export type StoredAuthSession = {
   name: string;
   accountPoolEnabled?: boolean;
   wechatOpenid?: string;
+  expiresAt?: string;
 };
 
 export const AUTH_KEY_STORAGE_KEY = "chatgpt2api_auth_key";
@@ -49,9 +50,26 @@ function normalizeSession(value: unknown, fallbackKey = ""): StoredAuthSession |
     name: String(candidate.name || "").trim(),
     accountPoolEnabled: candidate.accountPoolEnabled === true,
     wechatOpenid: String(candidate.wechatOpenid || "").trim(),
+    expiresAt: String(candidate.expiresAt || "").trim(),
   };
 }
 
+function isSessionExpired(session: StoredAuthSession | null) {
+  if (!session?.expiresAt) {
+    return false;
+  }
+  const expiresAt = new Date(session.expiresAt).getTime();
+  return Number.isFinite(expiresAt) && expiresAt <= Date.now();
+}
+
+export function buildSessionExpiresAt(durationHours: unknown) {
+  const hours = Number(durationHours);
+  if (!Number.isFinite(hours) || hours <= 0) {
+    return "";
+  }
+  return new Date(Date.now() + hours * 60 * 60 * 1000).toISOString();
+}
+
 export function getDefaultRouteForRole(role: AuthRole) {
   return role === "admin" ? "/accounts" : "/image";
 }
@@ -63,8 +81,16 @@ export async function getStoredAuthKey() {
   if (authSessionClearedInMemory) {
     return "";
   }
-  const value = await authStorage.getItem<string>(AUTH_KEY_STORAGE_KEY);
-  return String(value || "").trim();
+  const [storedKey, storedSession] = await Promise.all([
+    authStorage.getItem<string>(AUTH_KEY_STORAGE_KEY),
+    authStorage.getItem<StoredAuthSession>(AUTH_SESSION_STORAGE_KEY),
+  ]);
+  const normalizedSession = normalizeSession(storedSession, String(storedKey || ""));
+  if (isSessionExpired(normalizedSession)) {
+    await clearStoredAuthSession();
+    return "";
+  }
+  return String(normalizedSession?.key || storedKey || "").trim();
 }
 
 export async function getStoredAuthSession() {
@@ -82,6 +108,10 @@ export async function getStoredAuthSession() {
 
   const normalizedSession = normalizeSession(storedSession, String(storedKey || ""));
   if (normalizedSession) {
+    if (isSessionExpired(normalizedSession)) {
+      await clearStoredAuthSession();
+      return null;
+    }
     if (normalizedSession.key !== String(storedKey || "").trim()) {
       await authStorage.setItem(AUTH_KEY_STORAGE_KEY, normalizedSession.key);
     }