feat(plugins): Cookie 管理插件(账号/站点 + 刷新记录)

以插件方式新增 Cookie 管理模块,不改动 framework 业务逻辑。

数据层
- CookieUser / CookieSite 两个模型(applications/models/admin_cookie.py)
- 对应 ManageSchema(applications/schemas/admin_cookie.py)
- 模型与 schema 在 applications/{models,schemas}/__init__.py 中注册,便于 Alembic 跟踪
- 新增两个迁移脚本(cookie_site / cookie_user + cookie 站点表)

插件
- plugins/cookieManager/:入口 __init__.py + 三个视图(概览 / 账号 / 站点)
- 后台模板:cookie_user 与 cookie_site 各自的 main/add/edit
- 路由前缀 /system/cookie-user/*、/system/cookie-site/*
This commit is contained in:
bwstudio
2026-09-09 19:17:41 +08:00
parent 4f3f26e0ed
commit 3e8c490851
19 changed files with 1648 additions and 0 deletions
+220
View File
@@ -0,0 +1,220 @@
"""
Cookie管理视图 — 插件版
URL 前缀:/system/cookie
模型和Schema从插件内部导入,避免循环依赖。
"""
import os
import datetime
from flask import Blueprint, render_template, request
from flask_login import current_user
from applications.common import curd
from applications.common.utils.http import table_api, fail_api, success_api
from applications.common.utils.rights import authorize
from applications.common.utils.validate import str_escape
from applications.extensions import db
from applications.extensions.init_limit import limiter
# 从插件内部导入模型和Schema(避免在applications.models中导入导致循环依赖)
from plugins.cookieManager.models import CookieManager
from plugins.cookieManager.schemas import CookieManageSchema
dir_path = os.path.dirname(os.path.abspath(__file__))
bp = Blueprint(
'cookie_manager', __name__,
url_prefix='/system/cookie',
template_folder=os.path.join(dir_path, '..', 'templates'),
)
@bp.get('/')
@authorize("system:cookie:main")
def main():
return render_template('system/cookie/main.html')
@bp.get('/data')
@limiter.limit("60 per minute")
@authorize("system:cookie:main")
def data():
keyword = str_escape(request.args.get('keyword', type=str))
website_id = request.args.get('website_id', type=int)
query = CookieManager.query.filter()
if keyword:
query = query.filter(
db.or_(
CookieManager.name.contains(keyword),
CookieManager.website_name.contains(keyword),
CookieManager.website_url.contains(keyword),
)
)
if website_id:
query = query.filter(CookieManager.website_id == website_id)
items = query.order_by(CookieManager.id.desc()).layui_paginate()
return table_api(
msg="请求成功",
data=curd.model_to_dicts(schema=CookieManageSchema, data=items.items),
count=items.total,
)
@bp.get('/add')
@authorize("system:cookie:add", log=True)
def add():
return render_template('system/cookie/add.html')
@bp.post('/save')
@authorize("system:cookie:add", log=True)
def save():
req_json = request.get_json(force=True, silent=True) or {}
website_id = int(req_json.get('website_id') or 0)
website_name = str_escape(req_json.get('website_name') or '')
website_url = str_escape(req_json.get('website_url') or '')
name = str_escape(req_json.get('name') or '')
value = req_json.get('value') or ''
domain = str_escape(req_json.get('domain') or '')
path = str_escape(req_json.get('path') or '/')
expiry_str = req_json.get('expiry') or ''
secure = int(req_json.get('secure') or 0)
http_only = int(req_json.get('http_only') or 0)
enable = int(req_json.get('enable') or 1)
if not all([website_id, name, value]):
return fail_api(msg="网站ID/Cookie名称/值不得为空")
# 解析过期时间
expiry = None
if expiry_str:
try:
expiry = datetime.datetime.strptime(expiry_str, '%Y-%m-%d %H:%M:%S')
except ValueError:
try:
expiry = datetime.datetime.fromisoformat(expiry_str)
except ValueError:
pass
try:
cookie = CookieManager(
website_id=website_id,
website_name=website_name,
website_url=website_url,
name=name,
value=value,
domain=domain,
path=path,
expiry=expiry,
secure=secure,
http_only=http_only,
enable=enable,
create_by=current_user.username if current_user.is_authenticated else 'admin',
)
db.session.add(cookie)
db.session.commit()
except Exception as e:
db.session.rollback()
return fail_api(msg=f"新增失败:{e}")
return success_api(msg="新增成功")
@bp.get('/edit')
@authorize("system:cookie:edit", log=True)
def edit():
cookie_id = request.args.get('cookieId', type=int)
cookie = curd.get_one_by_id(CookieManager, cookie_id)
if not cookie:
return fail_api(msg="Cookie不存在")
return render_template('system/cookie/edit.html', cookie=cookie)
@bp.put('/update')
@authorize("system:cookie:edit", log=True)
def update():
req_json = request.get_json(force=True, silent=True) or {}
cookie_id = req_json.get('cookieId')
cookie = curd.get_one_by_id(CookieManager, cookie_id)
if not cookie:
return fail_api(msg="Cookie不存在")
website_id = int(req_json.get('website_id') or cookie.website_id)
website_name = str_escape(req_json.get('website_name') or cookie.website_name)
website_url = str_escape(req_json.get('website_url') or cookie.website_url)
name = str_escape(req_json.get('name') or '')
value = req_json.get('value') or ''
domain = str_escape(req_json.get('domain') or cookie.domain)
path = str_escape(req_json.get('path') or cookie.path)
secure = int(req_json.get('secure') or cookie.secure)
http_only = int(req_json.get('http_only') or cookie.http_only)
enable = int(req_json.get('enable') or cookie.enable)
if not all([website_id, name, value]):
return fail_api(msg="网站ID/Cookie名称/值不得为空")
# 解析过期时间
expiry_str = req_json.get('expiry') or ''
expiry = None
if expiry_str:
try:
expiry = datetime.datetime.strptime(expiry_str, '%Y-%m-%d %H:%M:%S')
except ValueError:
try:
expiry = datetime.datetime.fromisoformat(expiry_str)
except ValueError:
pass
try:
cookie.website_id = website_id
cookie.website_name = website_name
cookie.website_url = website_url
cookie.name = name
cookie.value = value
cookie.domain = domain
cookie.path = path
cookie.expiry = expiry
cookie.secure = secure
cookie.http_only = http_only
cookie.enable = enable
db.session.commit()
except Exception as e:
db.session.rollback()
return fail_api(msg=f"更新失败:{e}")
return success_api(msg="更新成功")
@bp.delete('/remove/<int:cookie_id>')
@authorize("system:cookie:remove", log=True)
def remove(cookie_id):
res = curd.delete_one_by_id(CookieManager, cookie_id)
if not res:
return fail_api(msg="删除失败")
return success_api(msg="删除成功")
@bp.put('/enable')
@authorize("system:cookie:edit", log=True)
def enable():
req_json = request.get_json(force=True, silent=True) or {}
cookie_id = req_json.get('cookieId')
if not cookie_id:
return fail_api(msg="数据错误")
res = curd.enable_status(CookieManager, cookie_id)
if not res:
return fail_api(msg="操作失败")
return success_api(msg="已启用")
@bp.put('/disable')
@authorize("system:cookie:edit", log=True)
def dis_enable():
req_json = request.get_json(force=True, silent=True) or {}
cookie_id = req_json.get('cookieId')
if not cookie_id:
return fail_api(msg="数据错误")
res = curd.disable_status(CookieManager, cookie_id)
if not res:
return fail_api(msg="操作失败")
return success_api(msg="已禁用")
+160
View File
@@ -0,0 +1,160 @@
"""
Cookie管理 - 登录网站视图
URL: /system/cookie-site
"""
import os
from flask import Blueprint, render_template, request
from flask_login import current_user
from applications.common import curd
from applications.common.utils.http import table_api, fail_api, success_api
from applications.common.utils.rights import authorize
from applications.common.utils.validate import str_escape
from applications.extensions import db
from applications.extensions.init_limit import limiter
from applications.models import CookieSite
from applications.schemas import CookieSiteManageSchema
dir_path = os.path.dirname(os.path.abspath(__file__))
bp = Blueprint('cookie_site', __name__,
url_prefix='/system/cookie-site',
template_folder=os.path.join(dir_path, '..', 'templates'))
@bp.get('/')
@authorize("system:cookie-site:main")
def main():
return render_template('system/cookie_site/main.html')
@bp.get('/data')
@limiter.limit("60 per minute")
@authorize("system:cookie-site:main")
def data():
keyword = str_escape(request.args.get('keyword', type=str))
query = CookieSite.query.filter()
if keyword:
query = query.filter(
db.or_(
CookieSite.name.contains(keyword),
CookieSite.url.contains(keyword),
)
)
items = query.order_by(CookieSite.id.desc()).layui_paginate()
return table_api(
msg="请求成功",
data=curd.model_to_dicts(schema=CookieSiteManageSchema, data=items.items),
count=items.total,
)
@bp.get('/add')
@authorize("system:cookie-site:add", log=True)
def add():
return render_template('system/cookie_site/add.html')
@bp.post('/save')
@authorize("system:cookie-site:add", log=True)
def save():
req_json = request.get_json(force=True, silent=True) or {}
name = str_escape(req_json.get('name'))
url = str_escape(req_json.get('url'))
cookie_value = str_escape(req_json.get('cookie_value'))
if not all([name, url, cookie_value]):
return fail_api(msg="名称/网址/Cookie值不得为空")
try:
obj = CookieSite(
name=name,
url=url,
cookie_value=cookie_value,
domain=str_escape(req_json.get('domain')),
path=str_escape(req_json.get('path')) or '/',
expiry=req_json.get('expiry'),
secure=int(req_json.get('secure') or 0),
http_only=int(req_json.get('http_only') or 0),
enable=int(req_json.get('enable') or 1),
create_by=current_user.username if current_user.is_authenticated else 'admin',
)
db.session.add(obj)
db.session.commit()
except Exception as e:
db.session.rollback()
return fail_api(msg=f"新增失败:{e}")
return success_api(msg="新增成功")
@bp.get('/edit')
@authorize("system:cookie-site:edit", log=True)
def edit():
sid = request.args.get('cookieSiteId', type=int)
obj = curd.get_one_by_id(CookieSite, sid)
if not obj:
return fail_api(msg="记录不存在")
return render_template('system/cookie_site/edit.html', obj=obj)
@bp.put('/update')
@authorize("system:cookie-site:edit", log=True)
def update():
req_json = request.get_json(force=True, silent=True) or {}
sid = req_json.get('cookieSiteId')
obj = curd.get_one_by_id(CookieSite, sid)
if not obj:
return fail_api(msg="记录不存在")
name = str_escape(req_json.get('name'))
url = str_escape(req_json.get('url'))
cookie_value = str_escape(req_json.get('cookie_value'))
if not all([name, url, cookie_value]):
return fail_api(msg="名称/网址/Cookie值不得为空")
try:
obj.name = name
obj.url = url
obj.cookie_value = cookie_value
obj.domain = str_escape(req_json.get('domain'))
obj.path = str_escape(req_json.get('path')) or '/'
obj.expiry = req_json.get('expiry')
obj.secure = int(req_json.get('secure') or 0)
obj.http_only = int(req_json.get('http_only') or 0)
obj.enable = int(req_json.get('enable') or 1)
db.session.commit()
except Exception as e:
db.session.rollback()
return fail_api(msg=f"更新失败:{e}")
return success_api(msg="更新成功")
@bp.delete('/remove/<int:sid>')
@authorize("system:cookie-site:remove", log=True)
def remove(sid):
res = curd.delete_one_by_id(CookieSite, sid)
if not res:
return fail_api(msg="删除失败")
return success_api(msg="删除成功")
@bp.put('/enable')
@authorize("system:cookie-site:edit", log=True)
def enable():
req_json = request.get_json(force=True, silent=True) or {}
sid = req_json.get('cookieSiteId')
if not sid:
return fail_api(msg="数据错误")
res = curd.enable_status(CookieSite, sid)
if not res:
return fail_api(msg="操作失败")
return success_api(msg="已启用")
@bp.put('/disable')
@authorize("system:cookie-site:edit", log=True)
def disable():
req_json = request.get_json(force=True, silent=True) or {}
sid = req_json.get('cookieSiteId')
if not sid:
return fail_api(msg="数据错误")
res = curd.disable_status(CookieSite, sid)
if not res:
return fail_api(msg="操作失败")
return success_api(msg="已禁用")
+159
View File
@@ -0,0 +1,159 @@
"""
Cookie管理 - 登录用户视图
URL: /system/cookie-user
"""
import os
from flask import Blueprint, render_template, request
from flask_login import current_user
from applications.common import curd
from applications.common.utils.http import table_api, fail_api, success_api
from applications.common.utils.rights import authorize
from applications.common.utils.validate import str_escape
from applications.extensions import db
from applications.extensions.init_limit import limiter
from applications.models import CookieUser
from applications.schemas import CookieUserManageSchema
dir_path = os.path.dirname(os.path.abspath(__file__))
bp = Blueprint('cookie_user', __name__,
url_prefix='/system/cookie-user',
template_folder=os.path.join(dir_path, '..', 'templates'))
@bp.get('/')
@authorize("system:cookie-user:main")
def main():
return render_template('system/cookie_user/main.html')
@bp.get('/data')
@limiter.limit("60 per minute")
@authorize("system:cookie-user:main")
def data():
keyword = str_escape(request.args.get('keyword', type=str))
query = CookieUser.query.filter()
if keyword:
query = query.filter(
db.or_(
CookieUser.username.contains(keyword),
CookieUser.website_name.contains(keyword),
CookieUser.website_url.contains(keyword),
)
)
items = query.order_by(CookieUser.id.desc()).layui_paginate()
return table_api(
msg="请求成功",
data=curd.model_to_dicts(schema=CookieUserManageSchema, data=items.items),
count=items.total,
)
@bp.get('/add')
@authorize("system:cookie-user:add", log=True)
def add():
return render_template('system/cookie_user/add.html')
@bp.post('/save')
@authorize("system:cookie-user:add", log=True)
def save():
req_json = request.get_json(force=True, silent=True) or {}
username = str_escape(req_json.get('username'))
website_url = str_escape(req_json.get('website_url'))
cookie_value = str_escape(req_json.get('cookie_value'))
if not all([username, website_url, cookie_value]):
return fail_api(msg="用户名/网站URL/Cookie值不得为空")
try:
obj = CookieUser(
username=username,
nickname=str_escape(req_json.get('nickname')),
website_url=website_url,
website_name=str_escape(req_json.get('website_name')),
cookie_value=cookie_value,
domain=str_escape(req_json.get('domain')),
expiry=req_json.get('expiry'),
enable=int(req_json.get('enable') or 1),
create_by=current_user.username if current_user.is_authenticated else 'admin',
)
db.session.add(obj)
db.session.commit()
except Exception as e:
db.session.rollback()
return fail_api(msg=f"新增失败:{e}")
return success_api(msg="新增成功")
@bp.get('/edit')
@authorize("system:cookie-user:edit", log=True)
def edit():
cid = request.args.get('cookieUserId', type=int)
obj = curd.get_one_by_id(CookieUser, cid)
if not obj:
return fail_api(msg="记录不存在")
return render_template('system/cookie_user/edit.html', obj=obj)
@bp.put('/update')
@authorize("system:cookie-user:edit", log=True)
def update():
req_json = request.get_json(force=True, silent=True) or {}
cid = req_json.get('cookieUserId')
obj = curd.get_one_by_id(CookieUser, cid)
if not obj:
return fail_api(msg="记录不存在")
username = str_escape(req_json.get('username'))
website_url = str_escape(req_json.get('website_url'))
cookie_value = str_escape(req_json.get('cookie_value'))
if not all([username, website_url, cookie_value]):
return fail_api(msg="用户名/网站URL/Cookie值不得为空")
try:
obj.username = username
obj.nickname = str_escape(req_json.get('nickname'))
obj.website_url = website_url
obj.website_name = str_escape(req_json.get('website_name'))
obj.cookie_value = cookie_value
obj.domain = str_escape(req_json.get('domain'))
obj.expiry = req_json.get('expiry')
obj.enable = int(req_json.get('enable') or 1)
db.session.commit()
except Exception as e:
db.session.rollback()
return fail_api(msg=f"更新失败:{e}")
return success_api(msg="更新成功")
@bp.delete('/remove/<int:cid>')
@authorize("system:cookie-user:remove", log=True)
def remove(cid):
res = curd.delete_one_by_id(CookieUser, cid)
if not res:
return fail_api(msg="删除失败")
return success_api(msg="删除成功")
@bp.put('/enable')
@authorize("system:cookie-user:edit", log=True)
def enable():
req_json = request.get_json(force=True, silent=True) or {}
cid = req_json.get('cookieUserId')
if not cid:
return fail_api(msg="数据错误")
res = curd.enable_status(CookieUser, cid)
if not res:
return fail_api(msg="操作失败")
return success_api(msg="已启用")
@bp.put('/disable')
@authorize("system:cookie-user:edit", log=True)
def disable():
req_json = request.get_json(force=True, silent=True) or {}
cid = req_json.get('cookieUserId')
if not cid:
return fail_api(msg="数据错误")
res = curd.disable_status(CookieUser, cid)
if not res:
return fail_api(msg="操作失败")
return success_api(msg="已禁用")