From 546bfb96276258eff37466337d81ac94d4135319 Mon Sep 17 00:00:00 2001 From: wxy Date: Mon, 27 Apr 2026 14:05:06 +0800 Subject: [PATCH] fix(api_key): bypass publication check for SERVICE type API keys - Exclude SERVICE type keys from application publication validation since their resource_id targets the workspace instead of an application. --- api/app/services/api_key_service.py | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/api/app/services/api_key_service.py b/api/app/services/api_key_service.py index e4367e98..9044af37 100644 --- a/api/app/services/api_key_service.py +++ b/api/app/services/api_key_service.py @@ -9,7 +9,7 @@ from sqlalchemy.orm import Session from sqlalchemy import select from app.aioRedis import aio_redis -from app.models.api_key_model import ApiKey +from app.models.api_key_model import ApiKey, ApiKeyType from app.repositories.api_key_repository import ApiKeyRepository, ApiKeyLogRepository from app.schemas import api_key_schema from app.schemas.response_schema import PageData, PageMeta @@ -65,7 +65,8 @@ class ApiKeyService: BizCode.BAD_REQUEST ) - if data.resource_id: + # SERVICE 类型的 resource_id 指向 workspace，非应用，跳过应用发布校验 + if data.resource_id and data.type != ApiKeyType.SERVICE.value: app = db.get(App, data.resource_id) if not app or not app.current_release_id: raise BusinessException("该应用未发布", BizCode.APP_NOT_PUBLISHED) @@ -452,9 +453,12 @@ class ApiKeyAuthService: def check_app_published(db: Session, api_key_obj: ApiKey) -> None: """ 检查应用是否已发布，未发布则抛出异常 + SERVICE 类型的 api_key 不绑定应用（resource_id 指向 workspace），跳过校验 """ if not api_key_obj.resource_id: return + if api_key_obj.type == ApiKeyType.SERVICE.value: + return app = db.get(App, api_key_obj.resource_id) if not app or not app.current_release_id: raise BusinessException("应用未发布，不可用", BizCode.APP_NOT_PUBLISHED)