photo-gallery
yf
e32cb17edf
- Static frontend (gallery, lightbox, drag-drop upload) - Function API (upload/list/delete/share/ai-caption) - PG + object_storage + model_router via ref:
261 行
12 KiB
JavaScript
261 行
12 KiB
JavaScript
// 相册 API function —— WeHub FaaS 契约: exports.handler
|
|
const crypto = require("crypto");
|
|
const { GetObjectCommand, PutObjectCommand, DeleteObjectCommand, S3Client } = require("@aws-sdk/client-s3");
|
|
const { getSignedUrl } = require("@aws-sdk/s3-request-presigner");
|
|
const { Pool } = require("pg");
|
|
|
|
const corsHeaders = {
|
|
"access-control-allow-methods": "GET,POST,DELETE,OPTIONS",
|
|
"access-control-allow-headers": "content-type",
|
|
"access-control-max-age": "86400",
|
|
};
|
|
const jsonHeaders = { ...corsHeaders, "content-type": "application/json; charset=utf-8" };
|
|
|
|
let pool, schemaReady = false, cachedCreds, storageClient;
|
|
|
|
const MIGRATION_SQL = `
|
|
create schema if not exists app;
|
|
create table if not exists app.photos (
|
|
id bigserial primary key,
|
|
filename text not null,
|
|
original_name text not null,
|
|
content_type text not null default 'image/jpeg',
|
|
size_bytes bigint not null default 0,
|
|
object_key text not null,
|
|
share_token text,
|
|
ai_caption text,
|
|
created_at timestamptz not null default now()
|
|
);
|
|
`;
|
|
|
|
function hasValue(v) { return typeof v === "string" && v.length > 0; }
|
|
function requiredEnv(name) { const v = process.env[name]; if (!hasValue(v)) throw new Error(name + " not configured"); return v; }
|
|
|
|
function json(code, body) {
|
|
return { statusCode: code, headers: jsonHeaders, body: JSON.stringify(body) };
|
|
}
|
|
|
|
function requestPath(e) { return (e && (e.path || e.rawPath)) || "/api/cloud/health"; }
|
|
function requestMethod(e) { return (e && (e.method || e.httpMethod)) || "GET"; }
|
|
|
|
function parseBody(e) {
|
|
if (!e || !e.body) return {};
|
|
const raw = e.isBase64Encoded ? Buffer.from(e.body, "base64").toString("utf8") : e.body;
|
|
return JSON.parse(raw);
|
|
}
|
|
|
|
function safeFileName(name) { return (name || "image").replace(/[\/\\]+/g, "").replace(/\s+/g, "-").slice(0, 200) || "image"; }
|
|
|
|
function objectKey(name) {
|
|
const prefix = process.env.OBJECT_PREFIX || "";
|
|
const base = prefix && !prefix.endsWith("/") ? prefix + "/" : prefix;
|
|
return base + "photos/" + Date.now() + "-" + crypto.randomBytes(8).toString("hex") + "-" + name;
|
|
}
|
|
|
|
function getPool() {
|
|
const cs = process.env.DATABASE_URL;
|
|
if (!hasValue(cs)) throw new Error("DATABASE_URL not configured");
|
|
if (!pool) pool = new Pool({ connectionString: cs });
|
|
return pool;
|
|
}
|
|
|
|
async function ensureSchema() {
|
|
if (schemaReady) return;
|
|
await getPool().query(MIGRATION_SQL);
|
|
schemaReady = true;
|
|
}
|
|
|
|
function parseCredentials(raw) {
|
|
const p = typeof raw === "string" ? JSON.parse(raw) : raw;
|
|
const c = {
|
|
accessKeyId: p.accessKeyId || p.access_key_id || p.AccessKeyId,
|
|
secretAccessKey: p.secretAccessKey || p.secret_access_key || p.SecretAccessKey,
|
|
sessionToken: p.sessionToken || p.session_token || p.SessionToken,
|
|
region: p.region || p.Region,
|
|
expiresAt: p.expiresAt || p.expires_at || p.Expiration,
|
|
};
|
|
if (!hasValue(c.accessKeyId) || !hasValue(c.secretAccessKey)) throw new Error("missing keys");
|
|
return c;
|
|
}
|
|
|
|
function credsExpired(c) {
|
|
if (!c || !c.expiresAt) return !c;
|
|
const exp = Date.parse(c.expiresAt);
|
|
return !Number.isFinite(exp) || Date.now() + 60000 >= exp;
|
|
}
|
|
|
|
async function getCredentials() {
|
|
if (cachedCreds && !credsExpired(cachedCreds)) return cachedCreds;
|
|
const token = process.env.OBJECT_CREDENTIALS_TOKEN || process.env.NANOHUB_RUNTIME_TOKEN;
|
|
if (process.env.OBJECT_CREDENTIALS_URL && token) {
|
|
const r = await fetch(process.env.OBJECT_CREDENTIALS_URL, { method: "POST", headers: { authorization: "Bearer " + token } });
|
|
if (!r.ok) throw new Error("refresh credentials failed: " + r.status);
|
|
cachedCreds = parseCredentials(await r.json());
|
|
return cachedCreds;
|
|
}
|
|
cachedCreds = parseCredentials(requiredEnv("OBJECT_CREDENTIALS"));
|
|
return cachedCreds;
|
|
}
|
|
|
|
function getStorageClient() {
|
|
if (storageClient) return storageClient;
|
|
storageClient = new S3Client({
|
|
endpoint: requiredEnv("OBJECT_ENDPOINT"),
|
|
region: requiredEnv("OBJECT_REGION"),
|
|
requestChecksumCalculation: "WHEN_REQUIRED",
|
|
credentials: async () => {
|
|
const c = await getCredentials();
|
|
return { accessKeyId: c.accessKeyId, secretAccessKey: c.secretAccessKey, sessionToken: c.sessionToken, expiration: c.expiresAt ? new Date(c.expiresAt) : undefined };
|
|
},
|
|
});
|
|
return storageClient;
|
|
}
|
|
|
|
async function presignedURL(method, key, expiresIn) {
|
|
const input = { Bucket: requiredEnv("OBJECT_BUCKET"), Key: key };
|
|
const cmd = method === "PUT" ? new PutObjectCommand(input) : new GetObjectCommand(input);
|
|
return getSignedUrl(getStorageClient(), cmd, { expiresIn });
|
|
}
|
|
|
|
async function deleteObject(key) {
|
|
await getStorageClient().send(new DeleteObjectCommand({ Bucket: requiredEnv("OBJECT_BUCKET"), Key: key }));
|
|
}
|
|
|
|
function rowToPhoto(r) {
|
|
return {
|
|
id: Number(r.id), filename: r.original_name, content_type: r.content_type,
|
|
size: Number(r.size_bytes), created_at: r.created_at instanceof Date ? r.created_at.toISOString() : r.created_at,
|
|
share_token: r.share_token, ai_caption: r.ai_caption,
|
|
};
|
|
}
|
|
|
|
// ── handlers ──
|
|
|
|
async function health() {
|
|
let migrated = false;
|
|
if (hasValue(process.env.DATABASE_URL)) { try { await ensureSchema(); migrated = true; } catch (_) {} }
|
|
return json(200, {
|
|
ok: true, service: "photo-album", migrated,
|
|
bindings: {
|
|
database: hasValue(process.env.DATABASE_URL),
|
|
object_storage: hasValue(process.env.OBJECT_BUCKET && process.env.OBJECT_ENDPOINT),
|
|
model_router: hasValue(process.env.OPENAI_BASE_URL && process.env.OPENAI_API_KEY && process.env.OPENAI_MODEL),
|
|
},
|
|
});
|
|
}
|
|
|
|
async function upload(event) {
|
|
await ensureSchema();
|
|
const body = parseBody(event);
|
|
const contentType = typeof body.content_type === "string" && body.content_type.trim() ? body.content_type.trim() : "image/jpeg";
|
|
const origName = safeFileName(typeof body.filename === "string" && body.filename ? body.filename : "image.jpg");
|
|
const size = typeof body.size === "number" ? body.size : 0;
|
|
const key = objectKey(origName);
|
|
return json(200, { ok: true, upload_url: await presignedURL("PUT", key, 300), object_key: key, filename: origName, content_type: contentType, size });
|
|
}
|
|
|
|
async function createPhoto(event) {
|
|
await ensureSchema();
|
|
const body = parseBody(event);
|
|
const objKey = typeof body.object_key === "string" ? body.object_key : null;
|
|
if (!objKey) return json(400, { ok: false, error: "object_key is required" });
|
|
const origName = safeFileName(typeof body.filename === "string" ? body.filename : "image.jpg");
|
|
const contentType = typeof body.content_type === "string" ? body.content_type : "image/jpeg";
|
|
const size = typeof body.size === "number" ? body.size : 0;
|
|
const shareToken = crypto.randomBytes(12).toString("hex");
|
|
const result = await getPool().query(
|
|
"insert into app.photos (filename, original_name, content_type, size_bytes, object_key, share_token) values ($1,$2,$3,$4,$5,$6) returning id, original_name, content_type, size_bytes, created_at, share_token, ai_caption",
|
|
[origName, origName, contentType, size, objKey, shareToken]
|
|
);
|
|
return json(201, { ok: true, photo: rowToPhoto(result.rows[0]) });
|
|
}
|
|
|
|
async function listPhotos() {
|
|
await ensureSchema();
|
|
const result = await getPool().query("select id, original_name, content_type, size_bytes, created_at, share_token, ai_caption from app.photos order by created_at desc limit 500");
|
|
return json(200, { ok: true, photos: result.rows.map(rowToPhoto) });
|
|
}
|
|
|
|
async function photoUrl(id) {
|
|
await ensureSchema();
|
|
const result = await getPool().query("select object_key from app.photos where id = $1", [id]);
|
|
if (result.rows.length === 0) return json(404, { ok: false, error: "not found" });
|
|
return json(200, { ok: true, url: await presignedURL("GET", result.rows[0].object_key, 3600), expires_in: 3600 });
|
|
}
|
|
|
|
async function share(token) {
|
|
await ensureSchema();
|
|
const result = await getPool().query("select id, original_name, content_type, size_bytes, object_key, ai_caption from app.photos where share_token = $1", [token]);
|
|
if (result.rows.length === 0) return json(404, { ok: false, error: "not found" });
|
|
const row = result.rows[0];
|
|
return json(200, { ok: true, photo: { id: Number(row.id), filename: row.original_name, content_type: row.content_type, size: Number(row.size_bytes), ai_caption: row.ai_caption }, url: await presignedURL("GET", row.object_key, 3600), expires_in: 3600 });
|
|
}
|
|
|
|
async function deletePhoto(id) {
|
|
await ensureSchema();
|
|
const result = await getPool().query("select object_key from app.photos where id = $1", [id]);
|
|
if (result.rows.length === 0) return json(404, { ok: false, error: "not found" });
|
|
try { await deleteObject(result.rows[0].object_key); } catch (_) {}
|
|
await getPool().query("delete from app.photos where id = $1", [id]);
|
|
return json(200, { ok: true, deleted: Number(id) });
|
|
}
|
|
|
|
async function aiCaption(id) {
|
|
await ensureSchema();
|
|
const result = await getPool().query("select object_key from app.photos where id = $1", [id]);
|
|
if (result.rows.length === 0) return json(404, { ok: false, error: "not found" });
|
|
const imgUrl = await presignedURL("GET", result.rows[0].object_key, 300);
|
|
const baseURL = requiredEnv("OPENAI_BASE_URL").replace(/\/+$/, "");
|
|
const apiKey = requiredEnv("OPENAI_API_KEY");
|
|
const model = requiredEnv("OPENAI_MODEL");
|
|
|
|
let response;
|
|
try {
|
|
response = await fetch(baseURL + "/chat/completions", {
|
|
method: "POST",
|
|
headers: { authorization: "Bearer " + apiKey, "content-type": "application/json" },
|
|
body: JSON.stringify({
|
|
model,
|
|
messages: [
|
|
{ role: "system", content: "你是图片描述专家。用中文简洁描述图片内容，包括场景、主体、颜色、风格，不超过100字。" },
|
|
{ role: "user", content: [{ type: "text", text: "请描述这张图片。" }, { type: "image_url", image_url: { url: imgUrl } }] }
|
|
],
|
|
max_tokens: 200,
|
|
}),
|
|
signal: AbortSignal.timeout(60000),
|
|
});
|
|
} catch (e) {
|
|
return json(502, { ok: false, error: "model failed: " + (e instanceof Error ? e.message : String(e)) });
|
|
}
|
|
if (!response.ok) return json(502, { ok: false, error: "model returned " + response.status });
|
|
const payload = await response.json();
|
|
const caption = payload?.choices?.[0]?.message?.content;
|
|
if (typeof caption !== "string" || !caption.trim()) return json(502, { ok: false, error: "empty caption" });
|
|
await getPool().query("update app.photos set ai_caption = $1 where id = $2", [caption.trim(), id]);
|
|
return json(200, { ok: true, caption: caption.trim() });
|
|
}
|
|
|
|
exports.handler = async function (event) {
|
|
const path = requestPath(event);
|
|
const method = requestMethod(event).toUpperCase();
|
|
try {
|
|
if (method === "OPTIONS") return { statusCode: 204, headers: corsHeaders, body: "" };
|
|
if (method === "GET" && path.endsWith("/health")) return await health();
|
|
if (method === "POST" && path.endsWith("/upload")) return await upload(event);
|
|
if (method === "POST" && path.endsWith("/photos")) return await createPhoto(event);
|
|
if (method === "GET" && path.endsWith("/photos")) return await listPhotos();
|
|
|
|
let m;
|
|
if (method === "GET" && (m = path.match(/\/photos\/(\d+)\/url$/))) return await photoUrl(m[1]);
|
|
if (method === "POST" && (m = path.match(/\/photos\/(\d+)\/ai-caption$/))) return await aiCaption(m[1]);
|
|
if (method === "DELETE" && (m = path.match(/\/photos\/(\d+)$/))) return await deletePhoto(m[1]);
|
|
|
|
const s = path.match(/\/share\/([a-f0-9]+)$/);
|
|
if (method === "GET" && s) return await share(s[1]);
|
|
|
|
return json(200, { ok: true, routes: ["GET /api/cloud/health", "POST /api/cloud/upload", "POST /api/cloud/photos", "GET /api/cloud/photos", "GET /api/cloud/photos/:id/url", "POST /api/cloud/photos/:id/ai-caption", "DELETE /api/cloud/photos/:id", "GET /api/cloud/share/:token"] });
|
|
} catch (error) {
|
|
return json(500, { ok: false, error: error instanceof Error ? error.message : String(error) });
|
|
}
|
|
};
|