8fdb25e6bd
后端： - 种子数据：超级管理员(admin/admin123)、super_admin 角色、22 条菜单(含按钮权限码)、角色绑定 - admin_menu 扩展 icon/component/hidden 字段(003_schema_ext.sql)，手动补齐 entity/do/table - auth 扩展：/auth/info、/auth/codes（仅登录），路由拆分公开/Profile/受保护三组 - 菜单路由：/menu/routes 返回 vben backend 动态路由树（按角色过滤、排序） - RBAC 管理：/admins、/roles、/menus CRUD（含角色绑定、重置密码、菜单授权） - 日志监控：/log/files、/log/tail（尾部读取+关键词过滤+路径穿越防护） - 安全加固：接口鉴权改为「方法+路径→权限码」自动映射，杜绝任意权限码越权 - 修复：gf v2.10.2 不自动替换→cmd 注入；MySQL driver 需显式引入 contrib - 全链路冒烟测试通过（含越权拒绝 30003）
74 lines
2.5 KiB
Go
74 lines
2.5 KiB
Go
package v1
|
|
|
|
import "github.com/gogf/gf/v2/frame/g"
|
|
|
|
// AdminItem is one row of the admin list.
|
|
type AdminItem struct {
|
|
Id uint64 `json:"id"`
|
|
Username string `json:"username"`
|
|
Nickname string `json:"nickname"`
|
|
Status int `json:"status"`
|
|
RoleIds []uint64 `json:"roleIds"`
|
|
RoleNames []string `json:"roleNames"`
|
|
CreatedAt string `json:"createdAt"`
|
|
}
|
|
|
|
// AdminListReq pages the administrators.
|
|
type AdminListReq struct {
|
|
g.Meta `path:"/admins" method:"get" tags:"Admin/Admin" summary:"Admin list"`
|
|
Page int `json:"page" d:"1" v:"min:1"`
|
|
Size int `json:"size" d:"10" v:"min:1|max:100"`
|
|
Keyword string `json:"keyword"` // matches username or nickname
|
|
}
|
|
|
|
// AdminListRes is the response of AdminListReq.
|
|
type AdminListRes struct {
|
|
List []*AdminItem `json:"list"`
|
|
Total int `json:"total"`
|
|
}
|
|
|
|
// AdminCreateReq creates an administrator.
|
|
type AdminCreateReq struct {
|
|
g.Meta `path:"/admins" method:"post" tags:"Admin/Admin" summary:"Create admin"`
|
|
Username string `json:"username" v:"required"`
|
|
Password string `json:"password" v:"required|min-length:6#password required|password too short"`
|
|
Nickname string `json:"nickname"`
|
|
RoleIds []uint64 `json:"roleIds"`
|
|
}
|
|
|
|
// AdminCreateRes is the response of AdminCreateReq.
|
|
type AdminCreateRes struct {
|
|
Id uint64 `json:"id"`
|
|
}
|
|
|
|
// AdminUpdateReq updates profile/status/roles of an administrator.
|
|
type AdminUpdateReq struct {
|
|
g.Meta `path:"/admins/{id}" method:"put" tags:"Admin/Admin" summary:"Update admin"`
|
|
Id uint64 `json:"id" in:"path" v:"required"`
|
|
Nickname string `json:"nickname"`
|
|
Status int `json:"status"`
|
|
RoleIds []uint64 `json:"roleIds"`
|
|
}
|
|
|
|
// AdminUpdateRes is the response of AdminUpdateReq.
|
|
type AdminUpdateRes struct{}
|
|
|
|
// AdminResetPwdReq resets an administrator's password.
|
|
type AdminResetPwdReq struct {
|
|
g.Meta `path:"/admins/{id}/password" method:"put" tags:"Admin/Admin" summary:"Reset admin password"`
|
|
Id uint64 `json:"id" in:"path" v:"required"`
|
|
Password string `json:"password" v:"required|min-length:6#password required|password too short"`
|
|
}
|
|
|
|
// AdminResetPwdRes is the response of AdminResetPwdReq.
|
|
type AdminResetPwdRes struct{}
|
|
|
|
// AdminDeleteReq deletes an administrator (soft delete).
|
|
type AdminDeleteReq struct {
|
|
g.Meta `path:"/admins/{id}" method:"delete" tags:"Admin/Admin" summary:"Delete admin"`
|
|
Id uint64 `json:"id" in:"path" v:"required"`
|
|
}
|
|
|
|
// AdminDeleteRes is the response of AdminDeleteReq.
|
|
type AdminDeleteRes struct{}
|