Update server.js

server.js

@@ -1,13 +1,20 @@
 import express from 'express';
 import { fal } from '@fal-ai/client';
 
-// 从环境变量读取 Fal AI API Key
+// 从环境变量读取 Fal AI API Key 和自定义 API Key
 const FAL_KEY = process.env.FAL_KEY;
+const API_KEY = process.env.API_KEY; // 添加自定义 API Key 环境变量
+
 if (!FAL_KEY) {
     console.error("Error: FAL_KEY environment variable is not set.");
     process.exit(1);
 }
 
+if (!API_KEY) {
+    console.error("Error: API_KEY environment variable is not set.");
+    process.exit(1);
+}
+
 // 配置 fal 客户端
 fal.config({
     credentials: FAL_KEY,
@@ -19,6 +26,33 @@ app.use(express.urlencoded({ extended: true, limit: '50mb' }));
 
 const PORT = process.env.PORT || 3000;
 
+// API Key 鉴权中间件
+const apiKeyAuth = (req, res, next) => {
+    const authHeader = req.headers['authorization'];
+    
+    if (!authHeader) {
+        console.warn('Unauthorized: No Authorization header provided');
+        return res.status(401).json({ error: 'Unauthorized: No API Key provided' });
+    }
+    
+    const authParts = authHeader.split(' ');
+    if (authParts.length !== 2 || authParts[0].toLowerCase() !== 'bearer') {
+        console.warn('Unauthorized: Invalid Authorization header format');
+        return res.status(401).json({ error: 'Unauthorized: Invalid Authorization header format' });
+    }
+    
+    const providedKey = authParts[1];
+    if (providedKey !== API_KEY) {
+        console.warn('Unauthorized: Invalid API Key');
+        return res.status(401).json({ error: 'Unauthorized: Invalid API Key' });
+    }
+    
+    next();
+};
+
+// 应用 API Key 鉴权中间件到所有 API 路由
+app.use(['/v1/models', '/v1/chat/completions'], apiKeyAuth);
+
 // === 全局定义限制 ===
 const PROMPT_LIMIT = 4800;
 const SYSTEM_PROMPT_LIMIT = 4800;
@@ -68,7 +102,6 @@ app.get('/v1/models', (req, res) => {
     }
 });
 
-
 // === 修改后的 convertMessagesToFalPrompt 函数 (System置顶 + 分隔符 + 对话历史Recency) ===
 function convertMessagesToFalPrompt(messages) {
     let fixed_system_prompt_content = "";
@@ -329,14 +362,15 @@ app.post('/v1/chat/completions', async (req, res) => {
     }
 });
 
-// 需要修改成嘅版本 (加咗 '0.0.0.0')
-app.listen(PORT, '0.0.0.0', () => {
+// 启动服务器 (更新启动信息)
+app.listen(PORT, () => {
     console.log(`===================================================`);
     console.log(` Fal OpenAI Proxy Server (System Top + Separator + Recency)`);
-    console.log(` Listening on host 0.0.0.0, port: ${PORT}`); // <-- 最好改埋 log 方便確認
+    console.log(` Listening on port: ${PORT}`);
     console.log(` Using Limits: System Prompt=${SYSTEM_PROMPT_LIMIT}, Prompt=${PROMPT_LIMIT}`);
     console.log(` Fal AI Key Loaded: ${FAL_KEY ? 'Yes' : 'No'}`);
-    console.log(` Chat Completions Endpoint: POST http://localhost:${PORT}/v1/chat/completions`); // Log 顯示 localhost 冇問題，實際監聽係 0.0.0.0
+    console.log(` API Key Auth Enabled: ${API_KEY ? 'Yes' : 'No'}`);
+    console.log(` Chat Completions Endpoint: POST http://localhost:${PORT}/v1/chat/completions`);
     console.log(` Models Endpoint: GET http://localhost:${PORT}/v1/models`);
     console.log(`===================================================`);
 });
@@ -344,4 +378,4 @@ app.listen(PORT, '0.0.0.0', () => {
 // 根路径响应 (更新信息)
 app.get('/', (req, res) => {
     res.send('Fal OpenAI Proxy (System Top + Separator + Recency Strategy) is running.');
-});
+});