fix(extensions): 内容审核管理端测试可绕过启用开关

后台测试此前受 content_audit_enabled/text_enabled 与 on_failure=allow 短路,未启用时恒为通过;强制 live 调用并返回可读失败原因。
This commit is contained in:
2026-07-12 14:36:23 +08:00
parent 3675b7dcef
commit ab9bb9a145
3 changed files with 90 additions and 10 deletions
@@ -346,6 +346,9 @@ class AKSRT_Admin_Extension_Controller extends AKSRT_Admin_Controller_Base {
/**
* POST /extensions/audit-test — test text content against current audit provider.
*
* Admin tests force a live provider call (skip enable gates + failure allow policy)
* so operators can verify credentials before flipping runtime switches.
*/
public function test_content_audit(WP_REST_Request $request): WP_REST_Response {
$params = $this->get_json_params($request);
@@ -359,12 +362,72 @@ class AKSRT_Admin_Extension_Controller extends AKSRT_Admin_Controller_Base {
return $this->error(__('内容审核服务不可用', 'aksrt'), 500);
}
$result = AKSRT_Content_Audit::get_instance()->audit_text($text);
$audit = AKSRT_Content_Audit::get_instance();
$status = $audit->get_status();
$result = $audit->audit_text($text, true);
$reason = (string) ($result['reason'] ?? '');
$message = '';
$ok = !empty($result['passed']);
// config/api 错误时 passed=false 且 reason 是机器码,需要可读提示
$error_reasons = ['config_missing', 'api_error', 'file_error', 'disabled'];
$is_error = in_array($reason, $error_reasons, true)
|| (str_starts_with($reason, 'config_') && $reason !== '');
if ($is_error || (!$ok && $reason !== '')) {
switch ($reason) {
case 'config_missing':
if (!empty($status['missing_fields'])) {
$message = sprintf(
/* translators: %s: missing config field keys */
__('当前审核服务商凭据不完整(缺少:%s),请先在「扩展 → 内容审核」补全配置。', 'aksrt'),
implode(', ', (array) $status['missing_fields'])
);
} else {
$message = __('审核服务商凭据缺失,请先补全 API Key / Secret。', 'aksrt');
}
$ok = false;
break;
case 'api_error':
$message = __('调用审核接口失败,请检查凭据、网络出口或服务商状态。', 'aksrt');
$ok = false;
break;
case 'disabled':
$message = __('内容审核功能未启用。', 'aksrt');
$ok = false;
break;
case 'non_compliant':
$message = __('审核结论:不合规(已拦截)。', 'aksrt');
break;
case 'suspected':
$message = __('审核结论:疑似违规。', 'aksrt');
break;
case 'review_failed':
$message = __('审核结论:服务商审核失败。', 'aksrt');
break;
default:
if (!$ok) {
$message = $reason !== ''
? sprintf(/* translators: %s: provider reason */ __('审核未通过:%s', 'aksrt'), $reason)
: __('审核未通过。', 'aksrt');
}
}
} elseif ($ok) {
if ($reason === 'passthrough' || $reason === '') {
$message = __('审核通过。', 'aksrt');
} else {
$message = sprintf(/* translators: %s: provider reason */ __('审核通过(%s)。', 'aksrt'), $reason);
}
}
return $this->success([
'data' => [
'text' => $text,
'result' => $result,
'text' => $text,
'ok' => $ok,
'message' => $message,
'status' => $status,
'result' => $result,
],
]);
}