初始化

backend/app/core/casdoor.py

@@ -0,0 +1,12 @@
+"""Casdoor 认证配置"""
+from casdoor import CasdoorSDK
+from app.core.config import settings
+
+casdoor_sdk = CasdoorSDK(
+    endpoint=settings.CASDOOR_ENDPOINT,
+    client_id=settings.CASDOOR_CLIENT_ID,
+    client_secret=settings.CASDOOR_CLIENT_SECRET,
+    certificate=settings.casdoor_cert_content,
+    org_name=settings.CASDOOR_ORG_NAME,
+    application_name=settings.CASDOOR_APP_NAME,
+)

backend/app/core/celery_app.py

@@ -0,0 +1,23 @@
+"""Celery 配置"""
+from celery import Celery
+from app.core.config import settings
+
+celery_app = Celery(
+    "h3c_onu_ms",
+    broker=settings.REDIS_URL,
+    backend=settings.REDIS_URL
+)
+
+celery_app.conf.update(
+    task_serializer='json',
+    result_serializer='json',
+    accept_content=['json'],
+    timezone='UTC',
+    enable_utc=True,
+    beat_schedule={
+        'check-devices-every-30-minutes': {
+            'task': 'app.tasks.check_tasks.check_all_devices',
+            'schedule': settings.CHECK_INTERVAL,
+        },
+    },
+)

backend/app/core/config.py

@@ -0,0 +1,50 @@
+"""应用配置"""
+import os
+from pathlib import Path
+from pydantic_settings import BaseSettings
+
+# 项目根目录（config.py 位于 backend/app/core/，parent.parent.parent 即 backend/）
+PROJECT_ROOT = Path(__file__).resolve().parent.parent.parent
+
+
+class Settings(BaseSettings):
+    APP_NAME: str = "H3C-ONU-MS"
+    DEBUG: bool = False
+    SECRET_KEY: str
+
+    DATABASE_URL: str
+    REDIS_URL: str
+
+    CASDOOR_ENDPOINT: str
+    CASDOOR_CLIENT_ID: str
+    CASDOOR_CLIENT_SECRET: str
+    CASDOOR_ORG_NAME: str
+    CASDOOR_APP_NAME: str
+    CASDOOR_CERTIFICATE: str = ""  # 支持文件路径或直接填 PEM 内容
+    CASDOOR_REDIRECT_URL: str = "http://localhost:5173/callback"
+
+    SSH_TIMEOUT: int = 30
+    CHECK_INTERVAL: int = 1800
+    MANUAL_COOLDOWN: int = 300
+
+    class Config:
+        env_file = str(PROJECT_ROOT / ".env")
+
+    @property
+    def casdoor_cert_content(self) -> str:
+        """读取证书文件内容或直接返回证书字符串"""
+        cert = self.CASDOOR_CERTIFICATE
+        if not cert:
+            return ""
+        cert_path = Path(cert)
+        if cert_path.is_absolute():
+            path = cert_path
+        else:
+            # 相对路径基于项目根目录解析
+            path = PROJECT_ROOT / cert
+        if path.is_file():
+            return path.read_text()
+        return cert  # 直接是 PEM 内容
+
+
+settings = Settings()

backend/app/core/database.py

@@ -0,0 +1,17 @@
+"""数据库配置"""
+from sqlalchemy import create_engine
+from sqlalchemy.ext.declarative import declarative_base
+from sqlalchemy.orm import sessionmaker
+from app.core.config import settings
+
+engine = create_engine(settings.DATABASE_URL, pool_pre_ping=True)
+SessionLocal = sessionmaker(autocommit=False, autoflush=False, bind=engine)
+Base = declarative_base()
+
+
+def get_db():
+    db = SessionLocal()
+    try:
+        yield db
+    finally:
+        db.close()

backend/app/core/security.py

@@ -0,0 +1,22 @@
+"""JWT 安全配置"""
+from datetime import datetime, timedelta
+from jose import JWTError, jwt
+from app.core.config import settings
+
+ALGORITHM = "HS256"
+ACCESS_TOKEN_EXPIRE_MINUTES = 60 * 24  # 24小时
+
+
+def create_access_token(data: dict):
+    to_encode = data.copy()
+    expire = datetime.utcnow() + timedelta(minutes=ACCESS_TOKEN_EXPIRE_MINUTES)
+    to_encode.update({"exp": expire})
+    return jwt.encode(to_encode, settings.SECRET_KEY, algorithm=ALGORITHM)
+
+
+def verify_token(token: str):
+    try:
+        payload = jwt.decode(token, settings.SECRET_KEY, algorithms=[ALGORITHM])
+        return payload
+    except JWTError:
+        return None