NeteaseUrl/web/routers/admin.py

# -*- coding: utf-8 -*-
"""管理员扫码登录 / Cookie 管理 / 操作记录。

端点：
- POST /api/v1/admin/qr/create      ↔ Flask /admin/qr/create
- POST /api/v1/admin/qr/check       ↔ Flask /admin/qr/check
- POST /api/v1/admin/cookie/status  ↔ Flask /admin/cookie/status
- POST /api/v1/admin/cookie/delete  ↔ Flask /admin/cookie/delete
- POST /api/v1/admin/logs           ↔ Flask /admin/logs

鉴权：管理员密码闸（文案"需要管理员权限，请使用管理员账号登录"），
与 auth_system.admin_required 的文案不同，故本模块用本地 admin 闸保持逐字对齐。

说明：QRLoginManager 已异步化（直接 await）；QRLoginClient 的 save_cookie/logout/
_get_cookie_info 仍为同步文件操作，经 asyncio.to_thread 执行。
"""
import asyncio
import logging
from typing import Annotated

from fastapi import APIRouter, Depends, Request

from core.state import GLOBAL_MUSIC_U_CACHE, REQ_LOG, VIP_CACHE
from web import ratelimit
from web.deps import SiteUser, current_user
from web.errors import AppError
from web.request_utils import request_data as _request_data
from web.request_utils import safe_int as _safe_int
from web.response import error, success

router = APIRouter()

logger = logging.getLogger('web.admin')


async def _require_admin(user: Annotated[SiteUser | None, Depends(current_user)]) -> SiteUser:
    """管理员闸（文案与历史实现逐字对齐）。"""
    if user is None or not user.is_admin:
        raise AppError('需要管理员权限，请使用管理员账号登录', 403)
    return user


AdminUser = Annotated[SiteUser, Depends(_require_admin)]





def _admin_client():
    from music_api.qr_client import QRLoginClient
    return QRLoginClient()


def _reset_caches() -> None:
    """Cookie 变更后清 VIP 探测缓存与全局 MUSIC_U 缓存。"""
    VIP_CACHE['data'] = None
    VIP_CACHE['ts'] = 0.0
    GLOBAL_MUSIC_U_CACHE['v'] = None
    GLOBAL_MUSIC_U_CACHE['ts'] = 0.0


async def _render_qr_svg(unikey: str) -> str:
    def _build() -> str:
        import qrcode
        from qrcode.image.svg import SvgPathImage
        qr = qrcode.QRCode(error_correction=qrcode.constants.ERROR_CORRECT_M)  # type: ignore[attr-defined]
        qr.add_data(f'https://music.163.com/login?codekey={unikey}')
        qr.make(fit=True)
        svg = qr.make_image(image_factory=SvgPathImage).to_string()
        return svg.decode('utf-8') if isinstance(svg, bytes) else svg

    return await asyncio.to_thread(_build)


@router.post('/admin/qr/create')
async def admin_qr_create(_admin: AdminUser, request: Request):
    """生成管理员登录二维码（返回 SVG）。"""
    await ratelimit.guard(request, bucket='free', limit=30, window=60)
    try:
        client = _admin_client()
        unikey = await client.qr_manager.generate_qr_key()
    except Exception:
        return error('服务暂时不可用，请稍后再试', 500)
    if not unikey:
        return error('生成二维码失败', 500)
    try:
        svg = await _render_qr_svg(unikey)
    except Exception:
        return error('服务暂时不可用，请稍后再试', 500)
    return success({'unikey': unikey, 'qr_svg': svg, 'expires_in': 180}, '二维码生成成功')


@router.post('/admin/qr/check')
async def admin_qr_check(_admin: AdminUser, request: Request):
    """轮询二维码登录状态，成功时自动保存 Cookie。"""
    await ratelimit.guard(request, bucket='free', limit=30, window=60)
    data = await _request_data(request)
    unikey = data.get('unikey')
    if not unikey:
        return error('缺少 unikey 参数')
    try:
        client = _admin_client()
        code, cookie_dict = await client.qr_manager.check_qr_login(unikey)
    except Exception:
        return error('服务暂时不可用，请稍后再试', 500)

    if code == 803:
        musu_u = cookie_dict.get('MUSIC_U', '')
        if not musu_u:
            return error('登录成功但未获取到 Cookie', 500)
        cookie = f'MUSIC_U={musu_u};os=pc;appver=8.9.70;'
        if cookie_dict.get('__csrf'):
            cookie += f"__csrf={cookie_dict['__csrf']};"
        saved = await asyncio.to_thread(client.save_cookie, cookie)
        if not saved:
            return error('登录成功但 Cookie 保存失败', 500)
        _reset_caches()
        logger.info('二维码登录成功，Cookie 已自动保存')
        info = await asyncio.to_thread(client._get_cookie_info)
        return success({'status': 'success', 'cookie_info': info}, '登录成功，Cookie 已保存')
    if code == 801:
        return success({'status': 'waiting'}, '等待扫码')
    if code == 802:
        return success({'status': 'scanned'}, '已扫码，请在手机上确认登录')
    if code == 800:
        return success({'status': 'expired'}, '二维码已过期')
    return success({'status': 'error', 'code': code}, f'登录状态异常（{code}）')


@router.post('/admin/cookie/status')
async def admin_cookie_status(_admin: AdminUser, request: Request):
    """获取当前 Cookie 状态。"""
    await ratelimit.guard(request, bucket='free', limit=30, window=60)
    try:
        client = _admin_client()
        info = await asyncio.to_thread(client._get_cookie_info)
        return success(info, '获取 Cookie 状态成功')
    except Exception:
        return error('服务暂时不可用，请稍后再试', 500)


@router.post('/admin/cookie/delete')
async def admin_cookie_delete(_admin: AdminUser, request: Request):
    """删除（清除）Cookie，备份后删除，可重新扫码登录。"""
    await ratelimit.guard(request, bucket='free', limit=30, window=60)
    try:
        client = _admin_client()
        ok = await asyncio.to_thread(client.logout)
        if not ok:
            info = await asyncio.to_thread(client._get_cookie_info)
            return error(
                f"Cookie 清除失败（文件仍存在：{info.get('file_exists')}，"
                f"可能被占用或为挂载点，请手动删除）", 500)
        _reset_caches()
        logger.info('管理员已清除 Cookie')
        info = await asyncio.to_thread(client._get_cookie_info)
        return success(info, 'Cookie 已清除')
    except Exception:
        return error('服务暂时不可用，请稍后再试', 500)


@router.post('/admin/logs')
async def admin_logs(_admin: AdminUser, request: Request):
    """用户 IP 解析/下载记录（分页，最新在前）。"""
    await ratelimit.guard(request, bucket='free', limit=30, window=60)
    data = await _request_data(request)
    try:
        page = max(1, _safe_int(data.get('page'), 1))
        page_size = max(1, min(50, _safe_int(data.get('page_size'), 10)))
    except ValueError:
        return error('参数格式错误')
    logs = list(reversed(REQ_LOG))
    total = len(logs)
    start = (page - 1) * page_size
    items = logs[start:start + page_size]
    return success({
        'total': total,
        'page': page,
        'page_size': page_size,
        'pages': max(1, (total + page_size - 1) // page_size),
        'items': items,
    }, '获取操作记录成功')