efed29647c
- system_settings 单行 CRUD：GET/PUT（AdminUser）+ GET /public（无鉴权， SettingPublicOut 白名单仅 company_name/logo_url 两字段，短缓存 300s） - logo 上传：后缀+magic bytes+2MB 三重校验，固定名覆盖落盘 uploads/logo/ （不使用上传方文件名，杜绝路径拼接）；旧扩展名文件清理；文件流端点 no-cache，URL 带 update_time 版本参数破缓存 - logo 存目录不存库：图片入 DB 让每次读取与 mysqldump 放大传输且无法 独立替换；DB 只持一行相对路径 - 新增依赖 python-multipart（FastAPI UploadFile 必备传输层）；.gitignore 增 backend/uploads/ 与 db/backups/ - 集成 11 例：单行语义/白名单字段/三重校验/越权 403/匿名 401/审计留痕 Co-Authored-By: Claude Code <noreply@anthropic.com>
61 lines
2.4 KiB
Python
61 lines
2.4 KiB
Python
"""API 路由汇总。
|
||
|
||
各业务模块的路由在此挂载。业务接口统一放在 `/api/v1/` 之下，
|
||
健康检查作为运维探针不带版本号，直接位于 `/api/health`。
|
||
"""
|
||
|
||
from fastapi import APIRouter
|
||
|
||
from app.api import health
|
||
from app.api.v1 import auth
|
||
from app.api.v1.base import customers as base_customers
|
||
from app.api.v1.base import personnel as base_personnel
|
||
from app.api.v1.base import products as base_products
|
||
from app.api.v1.business import businesses as business_businesses
|
||
from app.api.v1.business import ratings as business_ratings
|
||
from app.api.v1.business import receipts as business_receipts
|
||
from app.api.v1.business import shipments as business_shipments
|
||
from app.api.v1.system import business_roles as system_business_roles
|
||
from app.api.v1.system import logs as system_logs
|
||
from app.api.v1.system import params as system_params
|
||
from app.api.v1.system import roles as system_roles
|
||
from app.api.v1.system import settings as system_settings
|
||
from app.api.v1.system import users as system_users
|
||
|
||
api_router = APIRouter()
|
||
|
||
# 运维探针：/api/health
|
||
api_router.include_router(health.router)
|
||
|
||
# 业务接口：/api/v1/*
|
||
v1_router = APIRouter(prefix="/v1")
|
||
v1_router.include_router(auth.router)
|
||
|
||
# 系统管理（需求 2.5.1）：/api/v1/system/*
|
||
system_router = APIRouter(prefix="/system")
|
||
system_router.include_router(system_users.router)
|
||
system_router.include_router(system_roles.router)
|
||
system_router.include_router(system_business_roles.router)
|
||
system_router.include_router(system_params.router)
|
||
system_router.include_router(system_settings.router)
|
||
system_router.include_router(system_logs.operation_router)
|
||
system_router.include_router(system_logs.login_router)
|
||
v1_router.include_router(system_router)
|
||
|
||
# 基础数据（需求 2.1）：/api/v1/base/*，业务操作登录即可访问
|
||
base_router = APIRouter(prefix="/base")
|
||
base_router.include_router(base_personnel.router)
|
||
base_router.include_router(base_products.router)
|
||
base_router.include_router(base_customers.router)
|
||
v1_router.include_router(base_router)
|
||
|
||
# 业务数据（需求 2.2）：/api/v1/business/*，业务操作登录即可访问
|
||
business_router = APIRouter(prefix="/business")
|
||
business_router.include_router(business_businesses.router)
|
||
business_router.include_router(business_shipments.router)
|
||
business_router.include_router(business_receipts.router)
|
||
business_router.include_router(business_ratings.router)
|
||
v1_router.include_router(business_router)
|
||
|
||
api_router.include_router(v1_router)
|