feat: add /reset-password page

app.py

@@ -96,22 +96,31 @@ _user_profile_cache: dict = {}
 # 最後に解決された source を保持（Gradio WebSocket スレッドは ContextVar が伝播しないため）
 _last_known_source: dict = {}
 
+# 内部プロキシホスト（ログ対象外）
+_INTERNAL_PROXY_DOMAINS = {
+    "proxy.spaces.internal.huggingface.tech",
+}
+
 # --- Request Logging Middleware ---
-def _resolve_source(request: Request) -> dict:
-    """リクエストヘッダから流入元を判定して source_channel / source_domain を返す。
+def _resolve_source(request: Request) -> dict | None:
+    """リクエストヘッダから流入元を判定して source_domain を返す。
+    内部プロキシホストの場合は None を返してログを除外する。
     判定優先順:
-      1. Referer に huggingface.co/spaces/ を含む → hf_embed（HF UI 経由の埋め込み表示）
-      2. ホストが *.hf.space → hf_space（Space への直接アクセス）
-      3. それ以外 → unknown
+      1. ホストが内部プロキシ → None（ログ除外）
+      2. Referer に huggingface.co/spaces/ を含む → source_domain="huggingface.co"
+      3. ホストが *.hf.space → source_domain=host
+      4. それ以外 → source_domain=host or None
     """
     headers = request.headers
     referer = (headers.get("referer") or "").lower()
     host = (headers.get("x-forwarded-host") or headers.get("host") or "").lower()
+    if host in _INTERNAL_PROXY_DOMAINS:
+        return None
     if "huggingface.co/spaces/" in referer:
-        return {"source_channel": "hf_embed", "source_domain": "huggingface.co"}
+        return {"source_domain": "huggingface.co"}
     if host.endswith(".hf.space"):
-        return {"source_channel": "hf_space", "source_domain": host}
-    return {"source_channel": "unknown", "source_domain": host or None}
+        return {"source_domain": host}
+    return {"source_domain": host or None}
 
 
 class RequestLoggingMiddleware(BaseHTTPMiddleware):
@@ -128,7 +137,8 @@ class RequestLoggingMiddleware(BaseHTTPMiddleware):
         # Resolve source (flow-in channel) and store in contextvars
         source_info = _resolve_source(request)
         set_request_source(source_info)
-        _last_known_source.update(source_info)
+        if source_info is not None:
+            _last_known_source.update(source_info)
 
         # print(f"[REQUEST] method={method} path={path}{user_tag}")
         # log_event("request", f"{method} {path}", metadata={"method": method, "path": path})

supabase_logger.py

@@ -1,123 +1,133 @@
-"""
-Supabase structured logger with per-request user context.
-
-Usage:
-    from supabase_logger import init_logger, log_event, set_user_context, get_user_context, set_request_source
-
-    # At startup
-    init_logger(supabase_client)
-
-    # In middleware / auth
-    set_user_context({"user_id": "...", "email": "..."})
-    set_request_source({"source_channel": "hf_space", "source_domain": "dlpo-mbok-dev.hf.space"})
-
-    # Anywhere
-    log_event("user", "click_step01", session_id="abc123", metadata={"force": False})
-"""
-
-from __future__ import annotations
-
-import threading
-import traceback
-from contextvars import ContextVar
-from datetime import datetime, timezone
-from typing import Any, Dict, Optional
-
-from supabase import Client
-
-_supabase: Optional[Client] = None
-
-_current_user: ContextVar[Optional[Dict[str, Any]]] = ContextVar(
-    "current_user", default=None
-)
-_request_source: ContextVar[Optional[Dict[str, str]]] = ContextVar(
-    "request_source", default=None
-)
-
-
-def init_logger(client: Client) -> None:
-    global _supabase
-    _supabase = client
-
-
-def set_user_context(user: Optional[Dict[str, Any]]) -> None:
-    _current_user.set(user)
-
-
-def get_user_context() -> Optional[Dict[str, Any]]:
-    return _current_user.get()
-
-
-def set_request_source(source: Optional[Dict[str, str]]) -> None:
-    """リクエストの流入元情報をセット（FastAPI middleware から呼ぶ）"""
-    _request_source.set(source)
-
-
-def log_event(
-    event_type: str,
-    message: str,
-    *,
-    level: str = "INFO",
-    metadata: Optional[Dict[str, Any]] = None,
-    user_override: Optional[Dict[str, Any]] = None,
-    session_id: Optional[str] = None,
-    source: Optional[Dict[str, str]] = None,
-) -> None:
-    """
-    Insert a structured log row into Supabase ``activity_logs``.
-
-    Source resolution priority:
-      1. Explicit ``source`` argument
-      2. ContextVar set by middleware (``set_request_source``)
-      3. ``source_channel`` / ``source_domain`` keys inside ``metadata``
-
-    Resolved values are stored in the dedicated columns; any ``source_*``
-    keys are stripped from ``metadata`` to avoid duplication.
-
-    Falls back to stdout if the insert fails so the main request is
-    never blocked by a logging error.
-    """
-    user = user_override or _current_user.get()
-
-    # --- source resolution ---
-    clean_meta: Dict[str, Any] = dict(metadata) if metadata else {}
-    resolved_source: Dict[str, Any] = {}
-
-    if source:
-        resolved_source = source
-    elif _request_source.get():
-        resolved_source = _request_source.get()  # type: ignore[assignment]
-    else:
-        # Fall back to keys embedded in metadata
-        ch = clean_meta.pop("source_channel", None)
-        dm = clean_meta.pop("source_domain", None)
-        if ch or dm:
-            resolved_source = {"source_channel": ch, "source_domain": dm}
-
-    # Strip source_* from metadata even when source came from arg/ContextVar
-    clean_meta.pop("source_channel", None)
-    clean_meta.pop("source_domain", None)
-
-    row = {
-        "event_type": event_type,
-        "level": level,
-        "message": message,
-        "user_id": user.get("user_id") if user else None,
-        "user_email": user.get("email") if user else None,
-        "session_id": session_id,
-        "source_channel": resolved_source.get("source_channel"),
-        "source_domain": resolved_source.get("source_domain"),
-        "metadata": clean_meta,
-        "created_at": datetime.now(timezone.utc).isoformat(),
-    }
-
-    def _insert():
-        try:
-            if _supabase is not None:
-                _supabase.table("activity_logs").insert(row).execute()
-        except Exception:
-            print(f"[SUPABASE_LOG_ERROR] insert failed: {traceback.format_exc()}")
-            print(f"[SUPABASE_LOG_ERROR] row: {row}")
-
-    # Fire-and-forget so the request is never delayed
-    threading.Thread(target=_insert, daemon=True).start()
+"""
+Supabase structured logger with per-request user context.
+
+Usage:
+    from supabase_logger import init_logger, log_event, set_user_context, get_user_context, set_request_source
+
+    # At startup
+    init_logger(supabase_client)
+
+    # In middleware / auth
+    set_user_context({"user_id": "...", "email": "..."})
+    set_request_source({"source_domain": "dlpo-mbok-dev.hf.space"})
+
+    # Anywhere
+    log_event("user", "click_step01", session_id="abc123", metadata={"force": False})
+"""
+
+from __future__ import annotations
+
+import threading
+import traceback
+from contextvars import ContextVar
+from datetime import datetime, timezone
+from typing import Any, Dict, Optional
+
+from supabase import Client
+
+_supabase: Optional[Client] = None
+
+_current_user: ContextVar[Optional[Dict[str, Any]]] = ContextVar(
+    "current_user", default=None
+)
+_request_source: ContextVar[Optional[Dict[str, str]]] = ContextVar(
+    "request_source", default=None
+)
+
+# Domains whose events are never persisted (internal HF proxy health checks etc.)
+_BLOCKED_SOURCE_DOMAINS = {
+    "proxy.spaces.internal.huggingface.tech",
+}
+
+
+def init_logger(client: Client) -> None:
+    global _supabase
+    _supabase = client
+
+
+def set_user_context(user: Optional[Dict[str, Any]]) -> None:
+    _current_user.set(user)
+
+
+def get_user_context() -> Optional[Dict[str, Any]]:
+    return _current_user.get()
+
+
+def set_request_source(source: Optional[Dict[str, str]]) -> None:
+    """リクエストの流入元情報をセット（FastAPI middleware から呼ぶ）"""
+    _request_source.set(source)
+
+
+def log_event(
+    event_type: str,
+    message: str,
+    *,
+    level: str = "INFO",
+    metadata: Optional[Dict[str, Any]] = None,
+    user_override: Optional[Dict[str, Any]] = None,
+    session_id: Optional[str] = None,
+    source: Optional[Dict[str, str]] = None,
+) -> None:
+    """
+    Insert a structured log row into Supabase ``activity_logs``.
+
+    Source resolution priority:
+      1. Explicit ``source`` argument
+      2. ContextVar set by middleware (``set_request_source``)
+      3. ``source_domain`` key inside ``metadata``
+
+    If the resolved ``source_domain`` is an internal proxy domain the event is
+    silently dropped (not persisted).
+
+    Falls back to stdout if the insert fails so the main request is
+    never blocked by a logging error.
+    """
+    user = user_override or _current_user.get()
+
+    # --- source resolution ---
+    clean_meta: Dict[str, Any] = dict(metadata) if metadata else {}
+    resolved_source: Dict[str, Any] = {}
+
+    if source:
+        resolved_source = source
+    elif _request_source.get():
+        resolved_source = _request_source.get()  # type: ignore[assignment]
+    else:
+        # Fall back to key embedded in metadata
+        dm = clean_meta.pop("source_domain", None)
+        if dm:
+            resolved_source = {"source_domain": dm}
+
+    # Strip source_domain from metadata to avoid duplication
+    clean_meta.pop("source_domain", None)
+    # Also strip legacy source_channel if still present in older metadata
+    clean_meta.pop("source_channel", None)
+
+    source_domain = resolved_source.get("source_domain")
+
+    # Drop events from internal proxy domains
+    if source_domain in _BLOCKED_SOURCE_DOMAINS:
+        return
+
+    row = {
+        "event_type": event_type,
+        "level": level,
+        "message": message,
+        "user_id": user.get("user_id") if user else None,
+        "user_email": user.get("email") if user else None,
+        "session_id": session_id,
+        "source_domain": source_domain,
+        "metadata": clean_meta,
+        "created_at": datetime.now(timezone.utc).isoformat(),
+    }
+
+    def _insert():
+        try:
+            if _supabase is not None:
+                _supabase.table("activity_logs").insert(row).execute()
+        except Exception:
+            print(f"[SUPABASE_LOG_ERROR] insert failed: {traceback.format_exc()}")
+            print(f"[SUPABASE_LOG_ERROR] row: {row}")
+
+    # Fire-and-forget so the request is never delayed
+    threading.Thread(target=_insert, daemon=True).start()