8fdb25e6bd
后端： - 种子数据：超级管理员(admin/admin123)、super_admin 角色、22 条菜单(含按钮权限码)、角色绑定 - admin_menu 扩展 icon/component/hidden 字段(003_schema_ext.sql)，手动补齐 entity/do/table - auth 扩展：/auth/info、/auth/codes（仅登录），路由拆分公开/Profile/受保护三组 - 菜单路由：/menu/routes 返回 vben backend 动态路由树（按角色过滤、排序） - RBAC 管理：/admins、/roles、/menus CRUD（含角色绑定、重置密码、菜单授权） - 日志监控：/log/files、/log/tail（尾部读取+关键词过滤+路径穿越防护） - 安全加固：接口鉴权改为「方法+路径→权限码」自动映射，杜绝任意权限码越权 - 修复：gf v2.10.2 不自动替换→cmd 注入；MySQL driver 需显式引入 contrib - 全链路冒烟测试通过（含越权拒绝 30003）
57 lines
1.6 KiB
Go
57 lines
1.6 KiB
Go
package service
|
|
|
|
import (
|
|
"context"
|
|
"service.xpcool.com/internal/model/dto"
|
|
)
|
|
|
|
type IUserAuth interface {
|
|
Login(context.Context, dto.UserLoginInput) (*dto.TokenPair, uint64, error)
|
|
Refresh(context.Context, string) (*dto.TokenPair, uint64, error)
|
|
}
|
|
type IAdminAuth interface {
|
|
Login(context.Context, dto.AdminLoginInput) (*dto.TokenPair, uint64, error)
|
|
HasPermission(context.Context, uint64, string) (bool, error)
|
|
Info(context.Context, uint64) (*dto.AdminInfo, error)
|
|
Codes(context.Context, uint64) ([]string, error)
|
|
// PermissionForPath resolves the permission code required by an endpoint
|
|
// from admin_menu (type=2 rows) by matching "<METHOD> <path>".
|
|
PermissionForPath(context.Context, string, string) (string, error)
|
|
}
|
|
type AuditEvent struct {
|
|
AdminID uint64
|
|
Permission, Method, Path, IP, Param string
|
|
DurationMS, StatusCode int
|
|
}
|
|
type IAdminAudit interface {
|
|
Record(context.Context, AuditEvent)
|
|
}
|
|
|
|
var (
|
|
localUserAuth IUserAuth
|
|
localAdminAuth IAdminAuth
|
|
localAdminAudit IAdminAudit
|
|
)
|
|
|
|
func UserAuth() IUserAuth {
|
|
if localUserAuth == nil {
|
|
panic("UserAuth implementation not registered")
|
|
}
|
|
return localUserAuth
|
|
}
|
|
func RegisterUserAuth(i IUserAuth) { localUserAuth = i }
|
|
func AdminAuth() IAdminAuth {
|
|
if localAdminAuth == nil {
|
|
panic("AdminAuth implementation not registered")
|
|
}
|
|
return localAdminAuth
|
|
}
|
|
func RegisterAdminAuth(i IAdminAuth) { localAdminAuth = i }
|
|
func AdminAudit() IAdminAudit {
|
|
if localAdminAudit == nil {
|
|
panic("AdminAudit implementation not registered")
|
|
}
|
|
return localAdminAudit
|
|
}
|
|
func RegisterAdminAudit(i IAdminAudit) { localAdminAudit = i }
|