mirror of
https://github.com/sipeed/picoclaw.git
synced 2026-06-12 18:08:54 +00:00
6ea364e67d
Add token-based authentication for the Launcher's embedded Web Dashboard. - Ephemeral token generated in-memory each run (or via PICOCLAW_LAUNCHER_TOKEN env var) - HMAC-SHA256 session cookie (HttpOnly, SameSite=Lax, Secure when HTTPS) - Bearer token support for API/script access - Rate limiting on login (10 attempts/IP/min) - Referrer-Policy: no-referrer on all responses - POST-only logout with JSON content-type (CSRF-safe) - System tray "Copy dashboard token" action - Login page shows contextual help (console/tray/log file path) - Path traversal protection via path.Clean - X-Forwarded-Host/Port/Proto support for reverse proxy deployments - Full i18n support (English, Chinese) Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
110 lines
2.8 KiB
TypeScript
110 lines
2.8 KiB
TypeScript
// API client for channels navigation and channel-specific config flows.
|
|
|
|
import { launcherFetch } from "@/api/http"
|
|
|
|
export type ChannelConfig = Record<string, unknown>
|
|
export type AppConfig = Record<string, unknown>
|
|
|
|
export interface SupportedChannel {
|
|
name: string
|
|
display_name?: string
|
|
config_key: string
|
|
variant?: string
|
|
}
|
|
|
|
interface ChannelsCatalogResponse {
|
|
channels: SupportedChannel[]
|
|
}
|
|
|
|
interface ConfigActionResponse {
|
|
status: string
|
|
errors?: string[]
|
|
}
|
|
|
|
const BASE_URL = ""
|
|
|
|
async function request<T>(path: string, options?: RequestInit): Promise<T> {
|
|
const res = await launcherFetch(`${BASE_URL}${path}`, options)
|
|
if (!res.ok) {
|
|
let message = `API error: ${res.status} ${res.statusText}`
|
|
try {
|
|
const body = (await res.json()) as {
|
|
error?: string
|
|
errors?: string[]
|
|
status?: string
|
|
}
|
|
if (Array.isArray(body.errors) && body.errors.length > 0) {
|
|
message = body.errors.join("; ")
|
|
} else if (typeof body.error === "string" && body.error.trim() !== "") {
|
|
message = body.error
|
|
}
|
|
} catch {
|
|
// Keep default fallback message if response body is not JSON.
|
|
}
|
|
throw new Error(message)
|
|
}
|
|
return res.json() as Promise<T>
|
|
}
|
|
|
|
export async function getChannelsCatalog(): Promise<ChannelsCatalogResponse> {
|
|
return request<ChannelsCatalogResponse>("/api/channels/catalog")
|
|
}
|
|
|
|
export async function getAppConfig(): Promise<AppConfig> {
|
|
return request<AppConfig>("/api/config")
|
|
}
|
|
|
|
export async function patchAppConfig(
|
|
patch: Record<string, unknown>,
|
|
): Promise<ConfigActionResponse> {
|
|
return request<ConfigActionResponse>("/api/config", {
|
|
method: "PATCH",
|
|
headers: { "Content-Type": "application/json" },
|
|
body: JSON.stringify(patch),
|
|
})
|
|
}
|
|
|
|
// WeChat QR login flow API
|
|
|
|
export interface WeixinFlowResponse {
|
|
flow_id: string
|
|
status: "wait" | "scaned" | "confirmed" | "expired" | "error"
|
|
qr_data_uri?: string
|
|
account_id?: string
|
|
error?: string
|
|
}
|
|
|
|
export interface WecomFlowResponse {
|
|
flow_id: string
|
|
status: "wait" | "scaned" | "confirmed" | "expired" | "error"
|
|
qr_data_uri?: string
|
|
bot_id?: string
|
|
error?: string
|
|
}
|
|
|
|
export async function startWeixinFlow(): Promise<WeixinFlowResponse> {
|
|
return request<WeixinFlowResponse>("/api/weixin/flows", { method: "POST" })
|
|
}
|
|
|
|
export async function pollWeixinFlow(
|
|
flowID: string,
|
|
): Promise<WeixinFlowResponse> {
|
|
return request<WeixinFlowResponse>(
|
|
`/api/weixin/flows/${encodeURIComponent(flowID)}`,
|
|
)
|
|
}
|
|
|
|
export async function startWecomFlow(): Promise<WecomFlowResponse> {
|
|
return request<WecomFlowResponse>("/api/wecom/flows", { method: "POST" })
|
|
}
|
|
|
|
export async function pollWecomFlow(
|
|
flowID: string,
|
|
): Promise<WecomFlowResponse> {
|
|
return request<WecomFlowResponse>(
|
|
`/api/wecom/flows/${encodeURIComponent(flowID)}`,
|
|
)
|
|
}
|
|
|
|
export type { ChannelsCatalogResponse, ConfigActionResponse }
|