c0mrade
9a2aea038a
- Add pyproject.toml with uv and ruff configuration - Pin Python version to 3.13 via .python-version - Add Makefile commands: lint, format, fix - Apply ruff formatting to entire codebase - Remove unused imports (base64 in yookassa/simple_subscription) - Update .gitignore for new config files
119 lines
4.5 KiB
Python
119 lines
4.5 KiB
Python
from __future__ import annotations
|
|
|
|
import json
|
|
import logging
|
|
|
|
from fastapi import APIRouter, WebSocket, WebSocketDisconnect
|
|
from fastapi.security import APIKeyHeader
|
|
|
|
from app.database.database import AsyncSessionLocal
|
|
from app.services.event_emitter import event_emitter
|
|
from app.services.web_api_token_service import web_api_token_service
|
|
|
|
|
|
logger = logging.getLogger(__name__)
|
|
|
|
router = APIRouter()
|
|
|
|
api_key_header_scheme = APIKeyHeader(name='X-API-Key', auto_error=False)
|
|
|
|
|
|
async def verify_websocket_token(
|
|
websocket: WebSocket,
|
|
token: str | None = None,
|
|
) -> bool:
|
|
"""Проверить токен для WebSocket подключения."""
|
|
if not token:
|
|
# Пытаемся получить токен из query параметров
|
|
token = websocket.query_params.get('token') or websocket.query_params.get('api_key')
|
|
|
|
if not token:
|
|
return False
|
|
|
|
async with AsyncSessionLocal() as db:
|
|
try:
|
|
webhook_token = await web_api_token_service.authenticate(
|
|
db,
|
|
token,
|
|
remote_ip=websocket.client.host if websocket.client else None,
|
|
)
|
|
if webhook_token:
|
|
logger.debug('WebSocket token authenticated successfully')
|
|
else:
|
|
logger.warning('WebSocket token authentication failed: token not found or invalid')
|
|
return webhook_token is not None
|
|
except Exception as error:
|
|
logger.warning('WebSocket authentication error: %s', error, exc_info=True)
|
|
return False
|
|
|
|
|
|
@router.websocket('/ws')
|
|
async def websocket_endpoint(websocket: WebSocket):
|
|
"""WebSocket endpoint для real-time обновлений."""
|
|
client_host = websocket.client.host if websocket.client else 'unknown'
|
|
logger.debug('WebSocket connection attempt from %s', client_host)
|
|
|
|
# Сначала проверяем авторизацию ДО принятия соединения
|
|
token = websocket.query_params.get('token') or websocket.query_params.get('api_key')
|
|
|
|
if not token:
|
|
logger.debug('WebSocket: No token provided from %s', client_host)
|
|
# Принимаем и сразу закрываем с кодом ошибки
|
|
await websocket.accept()
|
|
await websocket.close(code=1008, reason='Unauthorized: No token provided')
|
|
return
|
|
|
|
if not await verify_websocket_token(websocket, token):
|
|
logger.debug('WebSocket: Invalid token from %s', client_host)
|
|
# Принимаем и сразу закрываем с кодом ошибки
|
|
await websocket.accept()
|
|
await websocket.close(code=1008, reason='Unauthorized: Invalid token')
|
|
return
|
|
|
|
# Только после успешной проверки принимаем соединение
|
|
try:
|
|
await websocket.accept()
|
|
logger.debug('WebSocket connection accepted from %s', client_host)
|
|
except Exception as e:
|
|
logger.error('WebSocket: Failed to accept connection from %s: %s', client_host, e)
|
|
return
|
|
|
|
# Регистрируем подключение
|
|
event_emitter.register_websocket(websocket)
|
|
|
|
try:
|
|
# Отправляем приветственное сообщение
|
|
await websocket.send_json(
|
|
{
|
|
'type': 'connection',
|
|
'status': 'connected',
|
|
'message': 'WebSocket connection established',
|
|
}
|
|
)
|
|
|
|
# Обрабатываем входящие сообщения (ping/pong для keepalive)
|
|
while True:
|
|
try:
|
|
data = await websocket.receive_text()
|
|
message = json.loads(data)
|
|
|
|
# Обработка ping
|
|
if message.get('type') == 'ping':
|
|
await websocket.send_json({'type': 'pong'})
|
|
# Можно добавить другие типы сообщений (подписки на конкретные события и т.д.)
|
|
|
|
except json.JSONDecodeError:
|
|
logger.warning('Invalid JSON received from WebSocket client')
|
|
except WebSocketDisconnect:
|
|
break
|
|
except Exception as error:
|
|
logger.exception('Error processing WebSocket message: %s', error)
|
|
|
|
except WebSocketDisconnect:
|
|
logger.debug('WebSocket client disconnected')
|
|
except Exception as error:
|
|
logger.exception('WebSocket error: %s', error)
|
|
finally:
|
|
# Отменяем регистрацию при отключении
|
|
event_emitter.unregister_websocket(websocket)
|