ai-saas / saas-search

Commit b3ffdc72967001c04217b9f9e4c172e71be19668

Authored by tangwang
1 parent 89fa3f3c

Sync legacy frontend entrypoint from 0a440fb

Showing 1 changed file with 7 additions and 271 deletions   Show diff stats
Inline Side-by-side
scripts/frontend_server.py 100755 → 100644
  Show/Hide comments   View file @b3ffdc7
1 1 #!/usr/bin/env python3
2   -"""
3   -Simple HTTP server for saas-search frontend.
4   -"""
  2 +"""Backward-compatible frontend server entrypoint."""
5 3  
6   -import http.server
7   -import socketserver
8   -import os
9   -import sys
10   -import logging
11   -import time
12   -import urllib.request
13   -import urllib.error
14   -from collections import defaultdict, deque
15   -from pathlib import Path
16   -from dotenv import load_dotenv
17   -
18   -# Load .env file
19   -project_root = Path(__file__).parent.parent
20   -load_dotenv(project_root / '.env')
21   -
22   -# Get API_BASE_URL from environment（默认不注入，避免被旧 .env 覆盖同源策略）
23   -# 仅当显式设置 FRONTEND_INJECT_API_BASE_URL=1 时才注入 window.API_BASE_URL。
24   -API_BASE_URL = os.getenv('API_BASE_URL') or None
25   -INJECT_API_BASE_URL = os.getenv('FRONTEND_INJECT_API_BASE_URL', '0') == '1'
26   -# Backend proxy target for same-origin API forwarding
27   -BACKEND_PROXY_URL = os.getenv('BACKEND_PROXY_URL', 'http://127.0.0.1:6002').rstrip('/')
28   -
29   -# Change to frontend directory
30   -frontend_dir = os.path.join(os.path.dirname(__file__), '../frontend')
31   -os.chdir(frontend_dir)
32   -
33   -# FRONTEND_PORT is the canonical config; keep PORT as a secondary fallback.
34   -PORT = int(os.getenv('FRONTEND_PORT', os.getenv('PORT', 6003)))
35   -
36   -# Configure logging to suppress scanner noise
37   -logging.basicConfig(level=logging.ERROR, format='%(asctime)s - %(levelname)s - %(message)s')
38   -
39   -class RateLimitingMixin:
40   - """Mixin for rate limiting requests by IP address."""
41   - request_counts = defaultdict(deque)
42   - rate_limit = 100 # requests per minute
43   - window = 60 # seconds
44   -
45   - @classmethod
46   - def is_rate_limited(cls, ip):
47   - now = time.time()
48   -
49   - # Clean old requests
50   - while cls.request_counts[ip] and cls.request_counts[ip][0] < now - cls.window:
51   - cls.request_counts[ip].popleft()
52   -
53   - # Check rate limit
54   - if len(cls.request_counts[ip]) > cls.rate_limit:
55   - return True
56   -
57   - cls.request_counts[ip].append(now)
58   - return False
59   -
60   -class MyHTTPRequestHandler(http.server.SimpleHTTPRequestHandler, RateLimitingMixin):
61   - """Custom request handler with CORS support and robust error handling."""
62   -
63   - def _is_proxy_path(self, path: str) -> bool:
64   - """Return True for API paths that should be forwarded to backend service."""
65   - return path.startswith('/search/') or path.startswith('/admin/') or path.startswith('/indexer/')
66   -
67   - def _proxy_to_backend(self):
68   - """Proxy current request to backend service on the GPU server."""
69   - target_url = f"{BACKEND_PROXY_URL}{self.path}"
70   - method = self.command.upper()
71   -
72   - try:
73   - content_length = int(self.headers.get('Content-Length', '0'))
74   - except ValueError:
75   - content_length = 0
76   - body = self.rfile.read(content_length) if content_length > 0 else None
  4 +from __future__ import annotations
77 5  
78   - forward_headers = {}
79   - for key, value in self.headers.items():
80   - lk = key.lower()
81   - if lk in ('host', 'content-length', 'connection'):
82   - continue
83   - forward_headers[key] = value
84   -
85   - req = urllib.request.Request(
86   - target_url,
87   - data=body,
88   - headers=forward_headers,
89   - method=method,
90   - )
91   -
92   - try:
93   - with urllib.request.urlopen(req, timeout=30) as resp:
94   - resp_body = resp.read()
95   - self.send_response(resp.getcode())
96   - for header, value in resp.getheaders():
97   - lh = header.lower()
98   - if lh in ('transfer-encoding', 'connection', 'content-length'):
99   - continue
100   - self.send_header(header, value)
101   - self.end_headers()
102   - self.wfile.write(resp_body)
103   - except urllib.error.HTTPError as e:
104   - err_body = e.read() if hasattr(e, 'read') else b''
105   - self.send_response(e.code)
106   - if e.headers:
107   - for header, value in e.headers.items():
108   - lh = header.lower()
109   - if lh in ('transfer-encoding', 'connection', 'content-length'):
110   - continue
111   - self.send_header(header, value)
112   - self.end_headers()
113   - if err_body:
114   - self.wfile.write(err_body)
115   - except Exception as e:
116   - logging.error(f"Backend proxy error for {method} {self.path}: {e}")
117   - self.send_response(502)
118   - self.send_header('Content-Type', 'application/json; charset=utf-8')
119   - self.end_headers()
120   - self.wfile.write(b'{"error":"Bad Gateway: backend proxy failed"}')
121   -
122   - def do_GET(self):
123   - """Handle GET requests with API config injection."""
124   - path = self.path.split('?')[0]
125   -
126   - # Proxy API paths to backend first
127   - if self._is_proxy_path(path):
128   - self._proxy_to_backend()
129   - return
130   -
131   - # Route / to index.html
132   - if path == '/' or path == '':
133   - self.path = '/index.html' + (self.path.split('?', 1)[1] if '?' in self.path else '')
134   -
135   - # Inject API config for HTML files
136   - if self.path.endswith('.html'):
137   - self._serve_html_with_config()
138   - else:
139   - super().do_GET()
140   -
141   - def _serve_html_with_config(self):
142   - """Serve HTML with optional API_BASE_URL injected."""
143   - try:
144   - file_path = self.path.lstrip('/')
145   - if not os.path.exists(file_path):
146   - self.send_error(404)
147   - return
148   -
149   - with open(file_path, 'r', encoding='utf-8') as f:
150   - html = f.read()
151   -
152   - # 默认不注入 API_BASE_URL，避免历史 .env（如 http://xx:6002）覆盖同源调用。
153   - # 仅当 FRONTEND_INJECT_API_BASE_URL=1 且 API_BASE_URL 有值时才注入。
154   - if INJECT_API_BASE_URL and API_BASE_URL:
155   - config_script = f'<script>window.API_BASE_URL="{API_BASE_URL}";</script>\n '
156   - html = html.replace('<script src="/static/js/app.js', config_script + '<script src="/static/js/app.js', 1)
157   -
158   - self.send_response(200)
159   - self.send_header('Content-Type', 'text/html; charset=utf-8')
160   - self.end_headers()
161   - self.wfile.write(html.encode('utf-8'))
162   - except Exception as e:
163   - logging.error(f"Error serving HTML: {e}")
164   - self.send_error(500)
165   -
166   - def do_POST(self):
167   - """Handle POST requests. Proxy API requests to backend."""
168   - path = self.path.split('?')[0]
169   - if self._is_proxy_path(path):
170   - self._proxy_to_backend()
171   - return
172   - self.send_error(405, "Method Not Allowed")
173   -
174   - def setup(self):
175   - """Setup with error handling."""
176   - try:
177   - super().setup()
178   - except Exception:
179   - pass # Silently handle setup errors from scanners
180   -
181   - def handle_one_request(self):
182   - """Handle single request with error catching."""
183   - try:
184   - # Check rate limiting
185   - client_ip = self.client_address[0]
186   - if self.is_rate_limited(client_ip):
187   - logging.warning(f"Rate limiting IP: {client_ip}")
188   - self.send_error(429, "Too Many Requests")
189   - return
190   -
191   - super().handle_one_request()
192   - except (ConnectionResetError, BrokenPipeError):
193   - # Client disconnected prematurely - common with scanners
194   - pass
195   - except UnicodeDecodeError:
196   - # Binary data received - not HTTP
197   - pass
198   - except Exception as e:
199   - # Log unexpected errors but don't crash
200   - logging.debug(f"Request handling error: {e}")
201   -
202   - def log_message(self, format, *args):
203   - """Suppress logging for malformed requests from scanners."""
204   - message = format % args
205   - # Filter out scanner noise
206   - noise_patterns = [
207   - "code 400",
208   - "Bad request",
209   - "Bad request version",
210   - "Bad HTTP/0.9 request type",
211   - "Bad request syntax"
212   - ]
213   - if any(pattern in message for pattern in noise_patterns):
214   - return
215   - # Only log legitimate requests
216   - if message and not message.startswith(" ") and len(message) > 10:
217   - super().log_message(format, *args)
218   -
219   - def end_headers(self):
220   - # Add CORS headers
221   - self.send_header('Access-Control-Allow-Origin', '*')
222   - self.send_header('Access-Control-Allow-Methods', 'GET, POST, OPTIONS')
223   - self.send_header('Access-Control-Allow-Headers', 'Content-Type')
224   - # Add security headers
225   - self.send_header('X-Content-Type-Options', 'nosniff')
226   - self.send_header('X-Frame-Options', 'DENY')
227   - self.send_header('X-XSS-Protection', '1; mode=block')
228   - super().end_headers()
229   -
230   - def do_OPTIONS(self):
231   - """Handle OPTIONS requests."""
232   - try:
233   - path = self.path.split('?')[0]
234   - if self._is_proxy_path(path):
235   - self.send_response(204)
236   - self.end_headers()
237   - return
238   - self.send_response(200)
239   - self.end_headers()
240   - except Exception:
241   - pass
242   -
243   -class ThreadedTCPServer(socketserver.ThreadingMixIn, socketserver.TCPServer):
244   - """Threaded TCP server with better error handling."""
245   - allow_reuse_address = True
246   - daemon_threads = True
  6 +import runpy
  7 +from pathlib import Path
247 8  
248   -if __name__ == '__main__':
249   - # Check if port is already in use
250   - import socket
251   - sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
252   - try:
253   - sock.bind(("", PORT))
254   - sock.close()
255   - except OSError:
256   - print(f"ERROR: Port {PORT} is already in use.")
257   - print(f"Please stop the existing server or use a different port.")
258   - print(f"To stop existing server: kill $(lsof -t -i:{PORT})")
259   - sys.exit(1)
260   -
261   - # Create threaded server for better concurrency
262   - with ThreadedTCPServer(("", PORT), MyHTTPRequestHandler) as httpd:
263   - print(f"Frontend server started at http://localhost:{PORT}")
264   - print(f"Serving files from: {os.getcwd()}")
265   - print("\nPress Ctrl+C to stop the server")
266 9  
267   - try:
268   - httpd.serve_forever()
269   - except KeyboardInterrupt:
270   - print("\nShutting down server...")
271   - httpd.shutdown()
272   - print("Server stopped")
273   - sys.exit(0)
274   - except Exception as e:
275   - print(f"Server error: {e}")
276   - sys.exit(1)
  10 +if __name__ == "__main__":
  11 + target = Path(__file__).resolve().parent / "frontend" / "frontend_server.py"
  12 + runpy.run_path(str(target), run_name="__main__")
... ...