| """统一错误响应、上游报文脱敏与错误分类。 |
| |
| 目的：杜绝把含 JWT / token / 上游原始响应体的字符串回吐给客户端， |
| 同时为 OpenAI / Claude 两种方言提供规范错误体，并按类驱动 token 冷却。 |
| """ |
| import re |
| from fastapi.responses import JSONResponse |
|
|
| |
| _STATUS_RE = re.compile(r"(upstream API error \d{3}|Tabbit API error \d{3}|error \d{3})", re.I) |
|
|
|
|
| def safe_upstream_message(e: Exception) -> str: |
| """只保留上游状态码语义，丢弃可能含密钥 / JWT / 响应体的原始字符串。""" |
| msg = str(e) |
| m = _STATUS_RE.search(msg) |
| if m: |
| return m.group(1) |
| low = msg.lower() |
| if "session" in low: |
| return "failed to create upstream chat session" |
| if "timeout" in low or "timed out" in low: |
| return "upstream request timed out" |
| if "connect" in low or "connection" in low: |
| return "failed to connect to upstream" |
| return "upstream request failed" |
|
|
|
|
| def classify_upstream_error(e: Exception) -> str: |
| """错误分类：auth / rate_limit / signature / transient。""" |
| msg = str(e) |
| m = re.search(r"\b(\d{3})\b", msg) |
| status = int(m.group(1)) if m else None |
| if status in (401, 403): |
| return "auth" |
| if status == 429: |
| return "rate_limit" |
| if status in (492, 493): |
| return "signature" |
| return "transient" |
|
|
|
|
| def openai_error(status: int, message: str, etype: str = "upstream_error", code=None) -> JSONResponse: |
| """OpenAI 风格错误体：{"error": {...}}。""" |
| return JSONResponse( |
| status_code=status, |
| content={"error": {"message": message, "type": etype, "code": code, "param": None}}, |
| ) |
|
|
|
|
| def claude_error(status: int, message: str, etype: str = "api_error") -> JSONResponse: |
| """Anthropic 风格错误体：{"type":"error","error":{...}}。""" |
| return JSONResponse( |
| status_code=status, |
| content={"type": "error", "error": {"type": etype, "message": message}}, |
| ) |
|
|
