Merge pull request #1037 from xinnan-tech/hot-fix

update:获取差异化配置时，不输出敏感信息

main/manager-api/src/main/java/xiaozhi/modules/device/controller/OTAController.java

@@ -28,7 +28,6 @@ import xiaozhi.modules.device.dto.DeviceReportReqDTO;
 import xiaozhi.modules.device.dto.DeviceReportRespDTO;
 import xiaozhi.modules.device.entity.DeviceEntity;
 import xiaozhi.modules.device.service.DeviceService;
-import xiaozhi.modules.device.utils.NetworkUtil;
 import xiaozhi.modules.sys.service.SysParamsService;
 
 @Tag(name = "设备管理", description = "OTA 相关接口")
@@ -53,9 +52,8 @@ public class OTAController {
             clientId = deviceId;
         }
         String macAddress = deviceReportReqDTO.getMacAddress();
-        boolean macAddressValid = NetworkUtil.isMacAddressValid(macAddress);
         // 设备Id和Mac地址应是一致的, 并且必须需要application字段
-        if (!deviceId.equals(macAddress) || !macAddressValid || deviceReportReqDTO.getApplication() == null) {
+        if (!deviceId.equals(macAddress) || deviceReportReqDTO.getApplication() == null) {
             return createResponse(DeviceReportRespDTO.createError("Invalid OTA request"));
         }
         return createResponse(deviceService.checkDeviceActive(macAddress, clientId, deviceReportReqDTO));

main/manager-api/src/main/java/xiaozhi/modules/device/utils/NetworkUtil.java

@@ -1,34 +0,0 @@
-package xiaozhi.modules.device.utils;
-
-import java.util.regex.Pattern;
-
-import org.apache.commons.lang3.StringUtils;
-
-/**
- * 网络工具类
- */
-public class NetworkUtil {
-    /**
-     * MAC地址正则表达式
-     */
-    private static final Pattern macPattern = Pattern.compile("^([0-9A-Fa-f]{2}[:-]){5}([0-9A-Fa-f]{2})$");
-
-    /**
-     * 判断MAC地址是否合法
-     */
-    public static boolean isMacAddressValid(String mac) {
-        if (StringUtils.isBlank(mac)) {
-            return false;
-        }
-        // 正则校验格式
-        if (!macPattern.matcher(mac).matches()) {
-            return false;
-        }
-        // 校验MAC地址是否为单播地址
-        String normalized = mac.toLowerCase();
-        String[] parts = normalized.split("[:-]");
-        int firstByte = Integer.parseInt(parts[0], 16);
-        return (firstByte & 1) == 0; // 最低位为0表示单播地址，合法
-    }
-
-}

main/xiaozhi-server/core/connection.py

@@ -241,7 +241,7 @@ class ConnectionHandler:
             )
             private_config["delete_audio"] = bool(self.config.get("delete_audio", True))
             self.logger.bind(tag=TAG).info(
-                f"{time.time() - begin_time} 秒，获取差异化配置成功: {private_config}"
+                f"{time.time() - begin_time} 秒，获取差异化配置成功: {json.dumps(filter_sensitive_info(private_config), ensure_ascii=False)}"
             )
         except DeviceNotFoundException as e:
             self.need_bind = True
@@ -448,7 +448,7 @@ class ConnectionHandler:
                 pos = current_text.rfind(punct)
                 prev_char = current_text[pos - 1] if pos - 1 >= 0 else ""
                 # 如果.前面是数字统一判断为小数
-                if prev_char.isdigit() and punct == '.':
+                if prev_char.isdigit() and punct == ".":
                     number_flag = False
                 if pos > last_punct_pos and number_flag:
                     last_punct_pos = pos
@@ -579,7 +579,7 @@ class ConnectionHandler:
                         pos = current_text.rfind(punct)
                         prev_char = current_text[pos - 1] if pos - 1 >= 0 else ""
                         # 如果.前面是数字统一判断为小数
-                        if prev_char.isdigit() and punct == '.':
+                        if prev_char.isdigit() and punct == ".":
                             number_flag = False
                         if pos > last_punct_pos and number_flag:
                             last_punct_pos = pos
@@ -945,3 +945,36 @@ class ConnectionHandler:
                     break
         except Exception as e:
             self.logger.bind(tag=TAG).error(f"超时检查任务出错: {e}")
+
+
+def filter_sensitive_info(config: dict) -> dict:
+    """
+    过滤配置中的敏感信息
+    Args:
+        config: 原始配置字典
+    Returns:
+        过滤后的配置字典
+    """
+    sensitive_keys = [
+        "api_key",
+        "personal_access_token",
+        "access_token",
+        "token",
+        "access_key_secret",
+        "secret_key",
+    ]
+
+    def _filter_dict(d: dict) -> dict:
+        filtered = {}
+        for k, v in d.items():
+            if any(sensitive in k.lower() for sensitive in sensitive_keys):
+                filtered[k] = "***"
+            elif isinstance(v, dict):
+                filtered[k] = _filter_dict(v)
+            elif isinstance(v, list):
+                filtered[k] = [_filter_dict(i) if isinstance(i, dict) else i for i in v]
+            else:
+                filtered[k] = v
+        return filtered
+
+    return _filter_dict(copy.deepcopy(config))

main/xiaozhi-server/core/handle/sendAudioHandle.py

@@ -2,51 +2,52 @@ from config.logger import setup_logging
 import json
 import asyncio
 import time
-from core.utils.util import (
+from core.utils.util import get_string_no_punctuation_or_emoji, analyze_emotion
-    get_string_no_punctuation_or_emoji,
-    analyze_emotion
-)
 
 TAG = __name__
 logger = setup_logging()
 
 emoji_map = {
-    'neutral': '😶',
+    "neutral": "😶",
-    'happy': '🙂',
+    "happy": "🙂",
-    'laughing': '😆',
+    "laughing": "😆",
-    'funny': '😂',
+    "funny": "😂",
-    'sad': '😔',
+    "sad": "😔",
-    'angry': '😠',
+    "angry": "😠",
-    'crying': '😭',
+    "crying": "😭",
-    'loving': '😍',
+    "loving": "😍",
-    'embarrassed': '😳',
+    "embarrassed": "😳",
-    'surprised': '😲',
+    "surprised": "😲",
-    'shocked': '😱',
+    "shocked": "😱",
-    'thinking': '🤔',
+    "thinking": "🤔",
-    'winking': '😉',
+    "winking": "😉",
-    'cool': '😎',
+    "cool": "😎",
-    'relaxed': '😌',
+    "relaxed": "😌",
-    'delicious': '🤤',
+    "delicious": "🤤",
-    'kissy': '😘',
+    "kissy": "😘",
-    'confident': '😏',
+    "confident": "😏",
-    'sleepy': '😴',
+    "sleepy": "😴",
-    'silly': '😜',
+    "silly": "😜",
-    'confused': '🙄'
+    "confused": "🙄",
 }
 
+
 async def sendAudioMessage(conn, audios, text, text_index=0):
     # 发送句子开始消息
-    emotion = analyze_emotion(text)
+    if text is not None:
-    emoji = emoji_map.get(emotion, '🙂')  # 默认使用笑脸
+        emotion = analyze_emotion(text)
-    await conn.websocket.send(json.dumps(
+        emoji = emoji_map.get(emotion, "🙂")  # 默认使用笑脸
-            {
+        await conn.websocket.send(
-                "type": "llm",
+            json.dumps(
-                "text": emoji,
+                {
-                "emotion": emotion,
+                    "type": "llm",
-                "session_id": conn.session_id,
+                    "text": emoji,
-            }
+                    "emotion": emotion,
+                    "session_id": conn.session_id,
+                }
+            )
         )
-    )
+
     if text_index == conn.tts_first_text_index:
         logger.bind(tag=TAG).info(f"发送第一段语音: {text}")
     await send_tts_message(conn, "sentence_start", text)