# 中转服务器

**Repository Path**: Blight001/server_middle

## Basic Information

- **Project Name**: 中转服务器
- **Description**: 临时中转服务器
- **Primary Language**: Unknown
- **License**: Not specified
- **Default Branch**: master
- **Homepage**: None
- **GVP Project**: No

## Statistics

- **Stars**: 0
- **Forks**: 0
- **Created**: 2026-05-13
- **Last Updated**: 2026-07-28

## Categories & Tags

**Categories**: Uncategorized

**Tags**: None

## README

# Unified middle backend

`server_middle` is the control plane. It owns the one browser login, the platform
catalog and cross-platform card routing. Tenant business data remains in each
`server_main/tenants/<tenant_id>` directory.

```text
app.py
  └─ control_plane/
     ├─ core.py          shared Flask app, DB/session and repositories
     ├─ auth_routes.py   global login/logout/session introspection
     ├─ routes.py        platform catalog, settings and account administration
     └─ card_routing.py  service-to-service card ownership lookup
```

The root `middle_core.py`, `middle_routes.py` and `card_status_search.py` files
are compatibility imports only. New business logic belongs in `control_plane`.

Authentication flow:

```text
browser -> middle login -> gateway session introspection
        -> tenant permission check -> signed request -> tenant backend
```

There is no tenant passphrase endpoint and tenant services do not issue browser
tokens. Internal card lookup uses a runtime secret injected by
`service_registry.py`; it is not a user-facing credential.