后端: - 种子数据:超级管理员(admin/admin123)、super_admin 角色、22 条菜单(含按钮权限码)、角色绑定 - admin_menu 扩展 icon/component/hidden 字段(003_schema_ext.sql),手动补齐 entity/do/table - auth 扩展:/auth/info、/auth/codes(仅登录),路由拆分公开/Profile/受保护三组 - 菜单路由:/menu/routes 返回 vben backend 动态路由树(按角色过滤、排序) - RBAC 管理:/admins、/roles、/menus CRUD(含角色绑定、重置密码、菜单授权) - 日志监控:/log/files、/log/tail(尾部读取+关键词过滤+路径穿越防护) - 安全加固:接口鉴权改为「方法+路径→权限码」自动映射,杜绝任意权限码越权 - 修复:gf v2.10.2 不自动替换→cmd 注入;MySQL driver 需显式引入 contrib - 全链路冒烟测试通过(含越权拒绝 30003)
78 lines
2.6 KiB
Go
78 lines
2.6 KiB
Go
package v1
|
|
|
|
import "github.com/gogf/gf/v2/frame/g"
|
|
|
|
// MenuItem is one node of the full menu tree (type 1 menu / 2 button).
|
|
type MenuItem struct {
|
|
Id uint64 `json:"id"`
|
|
ParentId uint64 `json:"parentId"`
|
|
Name string `json:"name"`
|
|
Icon string `json:"icon"`
|
|
Type int `json:"type"` // 1 menu, 2 button/api
|
|
Path string `json:"path"`
|
|
Component string `json:"component"`
|
|
Permission string `json:"permission"`
|
|
Sort int `json:"sort"`
|
|
Status int `json:"status"`
|
|
Hidden bool `json:"hidden"`
|
|
Children []*MenuItem `json:"children,omitempty"`
|
|
}
|
|
|
|
// MenuTreeReq returns the full menu tree for management.
|
|
type MenuTreeReq struct {
|
|
g.Meta `path:"/menus/tree" method:"get" tags:"Admin/Menu" summary:"Full menu tree"`
|
|
}
|
|
|
|
// MenuTreeRes is the response of MenuTreeReq.
|
|
type MenuTreeRes struct {
|
|
Tree []*MenuItem `json:"tree"`
|
|
}
|
|
|
|
// MenuCreateReq creates a menu or button node.
|
|
type MenuCreateReq struct {
|
|
g.Meta `path:"/menus" method:"post" tags:"Admin/Menu" summary:"Create menu"`
|
|
ParentId uint64 `json:"parentId"`
|
|
Name string `json:"name" v:"required"`
|
|
Icon string `json:"icon"`
|
|
Type int `json:"type" v:"in:1,2#type must be 1 or 2"`
|
|
Path string `json:"path"`
|
|
Component string `json:"component"`
|
|
Permission string `json:"permission" v:"required"`
|
|
Sort int `json:"sort"`
|
|
Status int `json:"status"`
|
|
Hidden bool `json:"hidden"`
|
|
}
|
|
|
|
// MenuCreateRes is the response of MenuCreateReq.
|
|
type MenuCreateRes struct {
|
|
Id uint64 `json:"id"`
|
|
}
|
|
|
|
// MenuUpdateReq updates a menu or button node.
|
|
type MenuUpdateReq struct {
|
|
g.Meta `path:"/menus/{id}" method:"put" tags:"Admin/Menu" summary:"Update menu"`
|
|
Id uint64 `json:"id" in:"path" v:"required"`
|
|
ParentId uint64 `json:"parentId"`
|
|
Name string `json:"name" v:"required"`
|
|
Icon string `json:"icon"`
|
|
Type int `json:"type" v:"in:1,2#type must be 1 or 2"`
|
|
Path string `json:"path"`
|
|
Component string `json:"component"`
|
|
Permission string `json:"permission" v:"required"`
|
|
Sort int `json:"sort"`
|
|
Status int `json:"status"`
|
|
Hidden bool `json:"hidden"`
|
|
}
|
|
|
|
// MenuUpdateRes is the response of MenuUpdateReq.
|
|
type MenuUpdateRes struct{}
|
|
|
|
// MenuDeleteReq deletes a menu node (soft delete).
|
|
type MenuDeleteReq struct {
|
|
g.Meta `path:"/menus/{id}" method:"delete" tags:"Admin/Menu" summary:"Delete menu"`
|
|
Id uint64 `json:"id" in:"path" v:"required"`
|
|
}
|
|
|
|
// MenuDeleteRes is the response of MenuDeleteReq.
|
|
type MenuDeleteRes struct{}
|