fix: add catch-all proxy route for /callback/*

image_proxy.py

@@ -69,17 +69,25 @@ def proxy_image(image_key):
         log(f"❌ 请求失败: {e}")
         return make_response(str(e), 502)
 
-@app.route('/open-apis/<path:path>', methods=['GET', 'POST', 'PUT', 'DELETE'])
-def proxy_other(path):
-    """代理其他飞书 API 请求（透传）"""
+@app.route('/open-apis/<path:path>', methods=['GET', 'POST', 'PUT', 'DELETE', 'PATCH'])
+def proxy_open_apis(path):
+    """代理 /open-apis/* 请求（透传，修复 token）"""
+    return _proxy_to_feishu(f"/open-apis/{path}")
+
+@app.route('/<path:path>', methods=['GET', 'POST', 'PUT', 'DELETE', 'PATCH'])
+def proxy_catch_all(path):
+    """catch-all: 透传所有其他请求（如 /callback/ws/endpoint）"""
+    return _proxy_to_feishu(f"/{path}")
+
+def _proxy_to_feishu(path):
+    """通用代理：转发请求到 open.feishu.cn"""
     token = request.args.get('tenant_access_token', '')
-    headers = dict(request.headers)
-    headers.pop('Host', None)
+    headers = {k: v for k, v in request.headers if k.lower() not in ('host', 'content-length')}
 
     if token and 'Authorization' not in headers:
         headers['Authorization'] = f'Bearer {token}'
 
-    url = f"{FEISHU_BASE}/{path}"
+    url = f"https://open.feishu.cn{path}"
     params = {k: v for k, v in request.args.items() if k != 'tenant_access_token'}
 
     try:
@@ -91,9 +99,14 @@ def proxy_other(path):
             data=request.get_data(),
             timeout=30
         )
+        # 透传所有响应 headers
+        excluded_headers = {'content-encoding', 'content-length', 'transfer-encoding', 'connection'}
+        response_headers = {k: v for k, v in resp.headers.items() if k.lower() not in excluded_headers}
         return Response(resp.content, status=resp.status_code,
+                       headers=response_headers,
                        content_type=resp.headers.get('Content-Type', 'application/json'))
     except Exception as e:
+        log(f"❌ 代理失败 {path}: {e}")
         return make_response(str(e), 502)
 
 @app.route('/health')