为现有业务系统增加一层
可管理的安全接入防线

# Flask · 一行挂载，路由装饰器复用
from flask import Flask
from yixin_zhijie import ZhiJieSDK
from yixin_zhijie.adapters.flask import mount_zhijie, zhijie_required

app = Flask(__name__)
sdk = ZhiJieSDK()

mount_zhijie(app, sdk, prefix="/_zhijie")

@app.get("/admin")
@zhijie_required(sdk, prefix="/_zhijie", level="advanced")
def admin():
    return "verified"

# FastAPI · 依赖注入，路由函数保持纯净
from fastapi import Depends, FastAPI
from yixin_zhijie import ZhiJieSDK
from yixin_zhijie.adapters.fastapi import mount_zhijie, require_zhijie

app = FastAPI()
sdk = ZhiJieSDK()
mount_zhijie(app, sdk, prefix="/_zhijie")

@app.get("/admin")
async def admin(_: bool = Depends(require_zhijie(sdk))):
    return {"ok": True}

# WSGI · 中间件透明包外层
from yixin_zhijie import ZhiJieSDK
from yixin_zhijie.adapters.wsgi import ZhiJieWSGIMiddleware

application = ZhiJieWSGIMiddleware(
    application,
    ZhiJieSDK(),
    prefix="/_zhijie",
    protected_prefixes=["/admin", "/console"],
)

# ASGI · 中间件透明包外层
from yixin_zhijie import ZhiJieSDK
from yixin_zhijie.adapters.asgi import ZhiJieASGIMiddleware

app = ZhiJieASGIMiddleware(
    app,
    ZhiJieSDK(),
    prefix="/_zhijie",
    protected_prefixes=["/admin", "/console"],
)

# Nginx · 反代前置 auth_request 拦截
location / {
    auth_request /_zhijie_edge_check;
    proxy_pass http://origin_backend;
}

location = /_zhijie_edge_check {
    internal;
    proxy_pass http://127.0.0.1:8099/_zhijie/api/edge/check;
    proxy_set_header X-Original-URI $request_uri;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}