New

internal/repository/key_crypto.go

@@ -0,0 +1,62 @@
+// Filename: internal/repository/key_crypto.go
+package repository
+
+import (
+	"fmt"
+	"gemini-balancer/internal/models"
+)
+
+func (r *gormKeyRepository) decryptKey(key *models.APIKey) error {
+	if key == nil || key.EncryptedKey == "" {
+		return nil // Nothing to decrypt
+	}
+	// Avoid re-decrypting if plaintext already exists
+	if key.APIKey != "" {
+		return nil
+	}
+	plaintext, err := r.crypto.Decrypt(key.EncryptedKey)
+	if err != nil {
+		return fmt.Errorf("failed to decrypt key ID %d: %w", key.ID, err)
+	}
+	key.APIKey = plaintext
+	return nil
+}
+
+func (r *gormKeyRepository) decryptKeys(keys []models.APIKey) error {
+	for i := range keys {
+		if err := r.decryptKey(&keys[i]); err != nil {
+			// In a batch operation, we log the error but allow the rest to proceed.
+			r.logger.Errorf("Batch decrypt error for key index %d: %v", i, err)
+		}
+	}
+	return nil
+}
+
+// Decrypt 实现了 KeyRepository 接口
+func (r *gormKeyRepository) Decrypt(key *models.APIKey) error {
+	if key == nil || len(key.EncryptedKey) == 0 {
+		return nil // Nothing to decrypt
+	}
+	// Avoid re-decrypting if plaintext already exists
+	if key.APIKey != "" {
+		return nil
+	}
+	plaintext, err := r.crypto.Decrypt(key.EncryptedKey)
+	if err != nil {
+		return fmt.Errorf("failed to decrypt key ID %d: %w", key.ID, err)
+	}
+	key.APIKey = plaintext
+	return nil
+}
+
+// DecryptBatch 实现了 KeyRepository 接口
+func (r *gormKeyRepository) DecryptBatch(keys []models.APIKey) error {
+	for i := range keys {
+		// This delegates to the robust single-key decryption logic.
+		if err := r.Decrypt(&keys[i]); err != nil {
+			// In a batch operation, we log the error but allow the rest to proceed.
+			r.logger.Errorf("Batch decrypt error for key index %d (ID: %d): %v", i, keys[i].ID, err)
+		}
+	}
+	return nil
+}