xpcool/service.xpcool.com
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
38 Commits 2 Branches 0 Tags 85 MiB
GO 100%
06484774ad
Go to file
夏犀麟 06484774ad feat(auth): 登录密码 RSA+AES 混合加密传输与加密字段支持 
- 新增 internal/library/crypto：RSA-OAEP(SHA-256)+AES-256-GCM 混合解密，
  私钥按 配置PEM > data/crypto/rsa_private.pem > 自动生成 三级来源，公钥 SPKI 输出
- 公开接口 POST /system/auth/public-key；LoginReq 支持 encryptedKey/encryptedData
- AdminCreate/AdminResetPwd 密码字段支持加密传输（allowPlain 仅开发联调）
- 配置 encrypt.privateKey/allowPlain；data/ 加入 gitignore 防止私钥入库
2026-08-27 23:43:41 +08:00
.gitea/workflows FIX: workflow Go 下载源改 aliyun 镜像（go.dev 偶发 SSL 错误 exitcode 35）+ 3 次重试 2026-08-27 00:54:33 +08:00
.workbuddy/memory feat(auth): 登录密码 RSA+AES 混合加密传输与加密字段支持 2026-08-27 23:43:41 +08:00
api feat(auth): 登录密码 RSA+AES 混合加密传输与加密字段支持 2026-08-27 23:43:41 +08:00
common feat(house): 实现看房模块后端功能 2026-08-26 23:42:38 +08:00
deploy CFG: Gitea act_runner 自动部署（Go 交叉编译 + Docker 重建容器）+ 生产镜像 Dockerfile 2026-08-26 23:55:46 +08:00
docs feat(house): 实现看房模块后端功能 2026-08-26 23:42:38 +08:00
hack feat(house): 扩充看房数据并增强服务器日志功能 2026-08-27 01:47:32 +08:00
internal feat(auth): 登录密码 RSA+AES 混合加密传输与加密字段支持 2026-08-27 23:43:41 +08:00
manifest feat(auth): 登录密码 RSA+AES 混合加密传输与加密字段支持 2026-08-27 23:43:41 +08:00
resource feat(dev): 项目初始化。 2026-07-17 17:58:08 +08:00
utility feat(dev): 项目初始化。 2026-07-17 17:58:08 +08:00
.gitattributes feat(dev): 项目初始化。 2026-07-17 17:58:08 +08:00
.gitignore feat(auth): 登录密码 RSA+AES 混合加密传输与加密字段支持 2026-08-27 23:43:41 +08:00
AGENTS.md chore: CHANGELOG 纳入 git 管理；AGENTS.md 中央工作空间路径改相对引用 ../workbuddy.xpcool.com 2026-08-26 19:07:23 +08:00
go.mod feat(admin): 后台登录/菜单/按钮级权限/RBAC管理与服务器日志监控 2026-08-24 22:35:54 +08:00
go.sum feat(house): 扩充看房数据并增强服务器日志功能 2026-08-27 01:47:32 +08:00
main.go feat(admin): 后台登录/菜单/按钮级权限/RBAC管理与服务器日志监控 2026-08-24 22:35:54 +08:00
Makefile feat(dev): 项目初始化。 2026-07-17 17:58:08 +08:00
PROJECT_STRUCTURE.md refactor(api): 契约文件 index.go 重命名为 <功能名>.go 2026-08-24 18:07:33 +08:00
README.MD feat(house): 实现看房模块后端功能 2026-08-26 23:42:38 +08:00

README.MD

Personal multi-client service

Layout

api → internal/controller → internal/service → internal/dao → internal/model(entity/do) is enforced. DTO and VO live in internal/model/dto and internal/model/vo; neither API types nor entities cross that boundary.

Database model generation

Run manifest/sql/001_core.sql on MySQL, set DB_DSN, then run:

gf gen dao -p internal -g default -gt -c

The command is intentionally the only source of internal/dao, internal/model/do, and internal/model/entity.

API isolation

  • /api/v1/*: user API, terminal header/body supports mini, h5, and app.
  • /admin/v1/*: admin API. Protected endpoints require both an admin access token and an X-Permission identifier.

Use GF_GCFG_FILE=config.dev.yaml (or config.test.yaml / config.prod.yaml) and set DB_DSN plus a strong JWT_SECRET before startup.

Local startup

  • Terminal: source .env.dev && go run main.go (.env.dev is gitignored, holds local DSN + secret).
  • GoLand: run configuration .run/service-dev.run.xml (project-level, auto-detected after reloading the project) already injects GF_GCFG_FILE / DB_DSN / JWT_SECRET; pick it in the run dropdown. The file is gitignored because it contains the DB password.