8fdb25e6bd
后端： - 种子数据：超级管理员(admin/admin123)、super_admin 角色、22 条菜单(含按钮权限码)、角色绑定 - admin_menu 扩展 icon/component/hidden 字段(003_schema_ext.sql)，手动补齐 entity/do/table - auth 扩展：/auth/info、/auth/codes（仅登录），路由拆分公开/Profile/受保护三组 - 菜单路由：/menu/routes 返回 vben backend 动态路由树（按角色过滤、排序） - RBAC 管理：/admins、/roles、/menus CRUD（含角色绑定、重置密码、菜单授权） - 日志监控：/log/files、/log/tail（尾部读取+关键词过滤+路径穿越防护） - 安全加固：接口鉴权改为「方法+路径→权限码」自动映射，杜绝任意权限码越权 - 修复：gf v2.10.2 不自动替换→cmd 注入；MySQL driver 需显式引入 contrib - 全链路冒烟测试通过（含越权拒绝 30003）
61 lines
2.2 KiB
Go
61 lines
2.2 KiB
Go
package admin
|
|
|
|
import (
|
|
"context"
|
|
|
|
adminv1 "service.xpcool.com/api/admin/v1"
|
|
"service.xpcool.com/internal/model/dto"
|
|
"service.xpcool.com/internal/service"
|
|
)
|
|
|
|
// AdminList pages the administrators.
|
|
func (c *Controller) AdminList(ctx context.Context, req *adminv1.AdminListReq) (res *adminv1.AdminListRes, err error) {
|
|
items, total, err := service.AdminManage().List(ctx, dto.PageQuery{Page: req.Page, Size: req.Size, Keyword: req.Keyword})
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
list := make([]*adminv1.AdminItem, 0, len(items))
|
|
for _, it := range items {
|
|
list = append(list, &adminv1.AdminItem{
|
|
Id: it.Id, Username: it.Username, Nickname: it.Nickname, Status: it.Status,
|
|
RoleIds: it.RoleIds, RoleNames: it.RoleNames, CreatedAt: it.CreatedAt,
|
|
})
|
|
}
|
|
return &adminv1.AdminListRes{List: list, Total: total}, nil
|
|
}
|
|
|
|
// AdminCreate creates an administrator.
|
|
func (c *Controller) AdminCreate(ctx context.Context, req *adminv1.AdminCreateReq) (res *adminv1.AdminCreateRes, err error) {
|
|
id, err := service.AdminManage().Create(ctx, dto.AdminCreateInput{
|
|
Username: req.Username, Password: req.Password, Nickname: req.Nickname, RoleIds: req.RoleIds,
|
|
})
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
return &adminv1.AdminCreateRes{Id: id}, nil
|
|
}
|
|
|
|
// AdminUpdate updates an administrator.
|
|
func (c *Controller) AdminUpdate(ctx context.Context, req *adminv1.AdminUpdateReq) (res *adminv1.AdminUpdateRes, err error) {
|
|
if err = service.AdminManage().Update(ctx, dto.AdminUpdateInput{Id: req.Id, Nickname: req.Nickname, Status: req.Status, RoleIds: req.RoleIds}); err != nil {
|
|
return nil, err
|
|
}
|
|
return &adminv1.AdminUpdateRes{}, nil
|
|
}
|
|
|
|
// AdminResetPwd resets an administrator's password.
|
|
func (c *Controller) AdminResetPwd(ctx context.Context, req *adminv1.AdminResetPwdReq) (res *adminv1.AdminResetPwdRes, err error) {
|
|
if err = service.AdminManage().ResetPassword(ctx, req.Id, req.Password); err != nil {
|
|
return nil, err
|
|
}
|
|
return &adminv1.AdminResetPwdRes{}, nil
|
|
}
|
|
|
|
// AdminDelete deletes an administrator.
|
|
func (c *Controller) AdminDelete(ctx context.Context, req *adminv1.AdminDeleteReq) (res *adminv1.AdminDeleteRes, err error) {
|
|
if err = service.AdminManage().Delete(ctx, req.Id); err != nil {
|
|
return nil, err
|
|
}
|
|
return &adminv1.AdminDeleteRes{}, nil
|
|
}
|