chengcheng
46bac51703
浏览器只通过 HttpOnly Cookie 恢复统一认证状态，不再访问认证中心 Token Endpoint 或保存 OIDC Token。同步更新错误提示、部署配置和接入文档。
107 lines
3.9 KiB
Bash
Executable File
107 lines
3.9 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
set -euo pipefail
|
|
|
|
PROJECT_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
|
|
|
|
load_local_env() {
|
|
local env_file
|
|
for env_file in "${PROJECT_ROOT}/.env" "${PROJECT_ROOT}/.env.local"; do
|
|
[[ -f "$env_file" ]] || continue
|
|
while IFS= read -r line || [[ -n "$line" ]]; do
|
|
[[ -z "$line" || "$line" == \#* || "$line" != *=* ]] && continue
|
|
local key="${line%%=*}"
|
|
local value="${line#*=}"
|
|
[[ "$key" =~ ^[A-Za-z_][A-Za-z0-9_]*$ ]] || continue
|
|
if [[ "$value" == \"*\" && "$value" == *\" ]]; then
|
|
value="${value:1:${#value}-2}"
|
|
elif [[ "$value" == \'*\' && "$value" == *\' ]]; then
|
|
value="${value:1:${#value}-2}"
|
|
fi
|
|
export "$key=$value"
|
|
done < "$env_file"
|
|
done
|
|
|
|
export VITE_OIDC_ENABLED="${VITE_OIDC_ENABLED:-${OIDC_ENABLED:-false}}"
|
|
export VITE_OIDC_BROWSER_SESSION_ENABLED="${VITE_OIDC_BROWSER_SESSION_ENABLED:-${OIDC_BROWSER_SESSION_ENABLED:-true}}"
|
|
}
|
|
|
|
load_local_env
|
|
|
|
stop_stale_api_processes() {
|
|
local api_port="${HTTP_ADDR:-:8088}"
|
|
api_port="${api_port##*:}"
|
|
local api_cwd="${PROJECT_ROOT}/apps/api"
|
|
|
|
if command -v pgrep >/dev/null 2>&1; then
|
|
while read -r pid; do
|
|
[[ -z "$pid" || "$pid" == "$$" ]] && continue
|
|
local cwd
|
|
cwd="$(lsof -a -p "$pid" -d cwd -Fn 2>/dev/null | awk '/^n/ {print substr($0, 2); exit}')"
|
|
if [[ "$cwd" == "$api_cwd" ]]; then
|
|
echo "[ai-gateway] stopping stale go-watch process: ${pid}"
|
|
kill "$pid" 2>/dev/null || true
|
|
fi
|
|
done < <(pgrep -f "go-watch\\.mjs -- go run ./cmd/gateway" || true)
|
|
fi
|
|
|
|
if ! command -v lsof >/dev/null 2>&1; then
|
|
return
|
|
fi
|
|
|
|
local pids
|
|
pids="$(lsof -tiTCP:"$api_port" -sTCP:LISTEN 2>/dev/null || true)"
|
|
[[ -z "$pids" ]] && return
|
|
|
|
while read -r pid; do
|
|
[[ -z "$pid" ]] && continue
|
|
local cwd command
|
|
cwd="$(lsof -a -p "$pid" -d cwd -Fn 2>/dev/null | awk '/^n/ {print substr($0, 2); exit}')"
|
|
command="$(ps -p "$pid" -o command= 2>/dev/null || true)"
|
|
if [[ "$cwd" == "$api_cwd" || "$command" == *"easyai-ai-gateway"* ]]; then
|
|
echo "[ai-gateway] freeing API port ${api_port}, stopping stale process: ${pid}"
|
|
kill "$pid" 2>/dev/null || true
|
|
else
|
|
echo "[ai-gateway] port ${api_port} is used by an unrelated process: ${pid} ${command}" >&2
|
|
exit 1
|
|
fi
|
|
done <<< "$pids"
|
|
|
|
sleep 0.5
|
|
}
|
|
|
|
if [[ -z "${AI_GATEWAY_PG_CONTAINER:-}" ]]; then
|
|
if docker inspect easyai-pgvector >/dev/null 2>&1; then
|
|
export AI_GATEWAY_PG_CONTAINER="easyai-pgvector"
|
|
elif docker inspect postgres >/dev/null 2>&1; then
|
|
export AI_GATEWAY_PG_CONTAINER="postgres"
|
|
else
|
|
export AI_GATEWAY_PG_CONTAINER="easyai-pgvector"
|
|
fi
|
|
fi
|
|
export AI_GATEWAY_PG_USER="${AI_GATEWAY_PG_USER:-easyai}"
|
|
if [[ -z "${AI_GATEWAY_PG_PASSWORD:-}" ]] && docker inspect "$AI_GATEWAY_PG_CONTAINER" >/dev/null 2>&1; then
|
|
AI_GATEWAY_PG_PASSWORD="$(
|
|
docker inspect "$AI_GATEWAY_PG_CONTAINER" --format '{{range .Config.Env}}{{println .}}{{end}}' \
|
|
| awk -F= '$1 == "POSTGRES_PASSWORD" {print $2; exit}'
|
|
)"
|
|
export AI_GATEWAY_PG_PASSWORD
|
|
fi
|
|
export AI_GATEWAY_PG_PASSWORD="${AI_GATEWAY_PG_PASSWORD:-easyai2025}"
|
|
export AI_GATEWAY_DATABASE_NAME="${AI_GATEWAY_DATABASE_NAME:-easyai_ai_gateway}"
|
|
if docker inspect "$AI_GATEWAY_PG_CONTAINER" >/dev/null 2>&1; then
|
|
export AI_GATEWAY_DATABASE_URL="postgresql://${AI_GATEWAY_PG_USER}:${AI_GATEWAY_PG_PASSWORD}@localhost:5432/${AI_GATEWAY_DATABASE_NAME}?sslmode=disable"
|
|
else
|
|
export AI_GATEWAY_DATABASE_URL="${AI_GATEWAY_DATABASE_URL:-postgresql://${AI_GATEWAY_PG_USER}:${AI_GATEWAY_PG_PASSWORD}@localhost:5432/${AI_GATEWAY_DATABASE_NAME}?sslmode=disable}"
|
|
fi
|
|
|
|
echo "[ai-gateway] using configured local database connection (credentials redacted)"
|
|
|
|
if [[ "${AI_GATEWAY_SKIP_DB_CREATE:-}" == "1" ]]; then
|
|
echo "[ai-gateway] skipping Docker database creation"
|
|
else
|
|
scripts/create-database.sh
|
|
fi
|
|
pnpm nx run api:migrate
|
|
stop_stale_api_processes
|
|
exec pnpm nx run-many -t dev -p api web --parallel=2
|