web

Dockerfile

@@ -47,6 +47,7 @@ RUN mkdir -p  /opt/data/chinese_celeb_dataset /opt/data/faiss /opt/data/models /
 WORKDIR /app
 COPY requirements.txt .
 COPY *.py /app/
+COPY facelist-web /app/facelist-web
 
 # 安装必要的系统工具和依赖
 RUN apt-get update && apt-get install -y --no-install-recommends \
@@ -73,4 +74,3 @@ RUN pip install --upgrade pip
 RUN pip install --no-cache-dir -r requirements.txt
 EXPOSE 7860
 CMD ["uvicorn", "app:app", "--workers", "1", "--loop", "asyncio", "--http", "httptools", "--host", "0.0.0.0", "--port", "7860", "--timeout-keep-alive", "600"]
-

app.py

@@ -2,8 +2,14 @@ import os
 import time
 from contextlib import asynccontextmanager
 
+import base64
+import secrets
+
 from fastapi import FastAPI
+from fastapi.staticfiles import StaticFiles
 from starlette.middleware.cors import CORSMiddleware
+from starlette.middleware.base import BaseHTTPMiddleware
+from starlette.responses import Response, PlainTextResponse
 
 from cleanup_scheduler import start_cleanup_scheduler, stop_cleanup_scheduler
 from config import (
@@ -137,6 +143,58 @@ app.add_middleware(
 # 注册路由
 app.include_router(api_router)
 
+
+_default_frontend_dir = os.path.abspath(
+    os.path.join(os.path.dirname(__file__), "facelist-web")
+)
+FRONTEND_DIR = os.path.abspath(
+    os.path.expanduser(os.environ.get("FACELIST_FRONTEND_DIR", _default_frontend_dir))
+)
+
+_basic_user = os.environ.get("FACELIST_BASIC_USER", "admin")
+_basic_pass = os.environ.get("FACELIST_BASIC_PASS", "admin")
+_basic_secret = f"{_basic_user}:{_basic_pass}"
+_basic_token = "Basic " + base64.b64encode(_basic_secret.encode()).decode()
+
+
+class FacelistBasicAuthMiddleware(BaseHTTPMiddleware):
+    """仅保护 /facelist 前缀的 Basic Auth"""
+
+    async def dispatch(self, request, call_next):
+        path = request.url.path
+        if path.startswith("/facelist"):
+            auth = request.headers.get("Authorization", "")
+            if not secrets.compare_digest(auth, _basic_token):
+                return PlainTextResponse(
+                    "Unauthorized",
+                    status_code=401,
+                    headers={"WWW-Authenticate": 'Basic realm="facelist"'},
+                )
+        return await call_next(request)
+
+
+class SPAStaticFiles(StaticFiles):
+    """支持SPA路由回退到index.html的静态文件服务"""
+
+    async def get_response(self, path: str, scope):
+        response = await super().get_response(path, scope)
+        if response.status_code == 404:
+            # 未匹配到具体文件时回退到前端入口
+            response = await super().get_response("index.html", scope)
+        return response
+
+app.add_middleware(FacelistBasicAuthMiddleware)
+
+if os.path.isdir(FRONTEND_DIR):
+    app.mount(
+        "/facelist",
+        SPAStaticFiles(directory=FRONTEND_DIR, html=True),
+        name="facelist",
+    )
+    logger.info("前端静态资源已挂载在 /facelist ，目录: %s", FRONTEND_DIR)
+else:
+    logger.warning("未找到前端目录 %s ，跳过前端静态资源挂载", FRONTEND_DIR)
+
 # 添加根路径处理
 @app.get("/")
 async def root():