refactor: 移除独立 hub/proxy/executor/gateway crate，统一为 gateway tunnel 架构

- 删除 aether-hub、aether-proxy 独立项目及其 Dockerfile/配置 - 删除 crates/aether-executor 和 crates/aether-gateway 全部模块 - 新增 apps/ 目录作为应用入口 - 将 hub 概念重构为 gateway tunnel transport - 将 executor 重构为 execution runtime - 新增 tunnel.rs 合约定义和 testkit tunnel/execution_runtime 模块 - 更新 Python 服务层和测试适配新架构命名
2026-09-02 09:20:22 +08:00 · 2026-04-03 14:59:58 +08:00
parent ddf18fed9a
commit 8f26e1a31f
983 changed files with 103098 additions and 105837 deletions
--- a/apps/aether-gateway/src/middleware/frontdoor_cors.rs
+++ b/apps/aether-gateway/src/middleware/frontdoor_cors.rs
@@ -0,0 +1,111 @@
+use axum::body::Body;
+use axum::extract::{Request, State};
+use axum::http::{self, HeaderValue, Response};
+use axum::middleware::Next;
+
+use crate::gateway::headers::header_value_str;
+use crate::gateway::{AppState, FrontdoorCorsConfig};
+
+fn append_vary(headers: &mut http::HeaderMap, value: &'static str) {
+    headers.append(http::header::VARY, HeaderValue::from_static(value));
+}
+
+fn apply_frontdoor_cors_headers(
+    headers: &mut http::HeaderMap,
+    cors: &FrontdoorCorsConfig,
+    origin: &str,
+    requested_headers: Option<&str>,
+) {
+    if cors.allow_any_origin() {
+        headers.insert(
+            http::header::ACCESS_CONTROL_ALLOW_ORIGIN,
+            HeaderValue::from_static("*"),
+        );
+    } else if let Ok(value) = HeaderValue::from_str(origin) {
+        headers.insert(http::header::ACCESS_CONTROL_ALLOW_ORIGIN, value);
+        append_vary(headers, "Origin");
+    }
+    headers.insert(
+        http::header::ACCESS_CONTROL_ALLOW_METHODS,
+        HeaderValue::from_static("GET, POST, PUT, DELETE, PATCH, OPTIONS"),
+    );
+    headers.insert(
+        http::header::ACCESS_CONTROL_EXPOSE_HEADERS,
+        HeaderValue::from_static("*"),
+    );
+    if let Some(value) = requested_headers {
+        if let Ok(value) = HeaderValue::from_str(value) {
+            headers.insert(http::header::ACCESS_CONTROL_ALLOW_HEADERS, value);
+        }
+        append_vary(headers, "Access-Control-Request-Headers");
+    } else {
+        headers.insert(
+            http::header::ACCESS_CONTROL_ALLOW_HEADERS,
+            HeaderValue::from_static("*"),
+        );
+    }
+    if cors.allow_credentials() {
+        headers.insert(
+            http::header::ACCESS_CONTROL_ALLOW_CREDENTIALS,
+            HeaderValue::from_static("true"),
+        );
+    }
+}
+
+pub(crate) async fn frontdoor_cors_middleware(
+    State(state): State<AppState>,
+    request: Request,
+    next: Next,
+) -> Response<Body> {
+    let Some(cors) = state.frontdoor_cors() else {
+        return next.run(request).await;
+    };
+
+    let origin = header_value_str(request.headers(), http::header::ORIGIN.as_str());
+    let requested_headers = header_value_str(
+        request.headers(),
+        http::header::ACCESS_CONTROL_REQUEST_HEADERS.as_str(),
+    );
+    let is_preflight = request.method() == http::Method::OPTIONS
+        && request
+            .headers()
+            .contains_key(http::header::ACCESS_CONTROL_REQUEST_METHOD);
+
+    let Some(origin) = origin else {
+        return next.run(request).await;
+    };
+
+    if !cors.allows_origin(&origin) {
+        if is_preflight {
+            return Response::builder()
+                .status(http::StatusCode::FORBIDDEN)
+                .body(Body::empty())
+                .expect("cors preflight response should build");
+        }
+        return next.run(request).await;
+    }
+
+    if is_preflight {
+        let mut response = Response::builder()
+            .status(http::StatusCode::NO_CONTENT)
+            .body(Body::empty())
+            .expect("cors preflight response should build");
+        apply_frontdoor_cors_headers(
+            response.headers_mut(),
+            &cors,
+            &origin,
+            requested_headers.as_deref(),
+        );
+        append_vary(response.headers_mut(), "Access-Control-Request-Method");
+        return response;
+    }
+
+    let mut response = next.run(request).await;
+    apply_frontdoor_cors_headers(
+        response.headers_mut(),
+        &cors,
+        &origin,
+        requested_headers.as_deref(),
+    );
+    response
+}
--- a/apps/aether-gateway/src/middleware/mod.rs
+++ b/apps/aether-gateway/src/middleware/mod.rs
@@ -0,0 +1,3 @@
+mod frontdoor_cors;
+
+pub(crate) use frontdoor_cors::frontdoor_cors_middleware;