8fdb25e6bd
后端： - 种子数据：超级管理员(admin/admin123)、super_admin 角色、22 条菜单(含按钮权限码)、角色绑定 - admin_menu 扩展 icon/component/hidden 字段(003_schema_ext.sql)，手动补齐 entity/do/table - auth 扩展：/auth/info、/auth/codes（仅登录），路由拆分公开/Profile/受保护三组 - 菜单路由：/menu/routes 返回 vben backend 动态路由树（按角色过滤、排序） - RBAC 管理：/admins、/roles、/menus CRUD（含角色绑定、重置密码、菜单授权） - 日志监控：/log/files、/log/tail（尾部读取+关键词过滤+路径穿越防护） - 安全加固：接口鉴权改为「方法+路径→权限码」自动映射，杜绝任意权限码越权 - 修复：gf v2.10.2 不自动替换→cmd 注入；MySQL driver 需显式引入 contrib - 全链路冒烟测试通过（含越权拒绝 30003）
65 lines
2.3 KiB
Go
65 lines
2.3 KiB
Go
package admin
|
|
|
|
import (
|
|
"context"
|
|
|
|
adminv1 "service.xpcool.com/api/admin/v1"
|
|
"service.xpcool.com/internal/model/dto"
|
|
"service.xpcool.com/internal/service"
|
|
)
|
|
|
|
// MenuTree returns the full menu tree (menus + button permissions).
|
|
func (c *Controller) MenuTree(ctx context.Context, req *adminv1.MenuTreeReq) (res *adminv1.MenuTreeRes, err error) {
|
|
tree, err := service.MenuManage().Tree(ctx)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
out := make([]*adminv1.MenuItem, 0, len(tree))
|
|
for _, n := range tree {
|
|
out = append(out, menuNodeToV1(n))
|
|
}
|
|
return &adminv1.MenuTreeRes{Tree: out}, nil
|
|
}
|
|
|
|
// MenuCreate creates a menu or button node.
|
|
func (c *Controller) MenuCreate(ctx context.Context, req *adminv1.MenuCreateReq) (res *adminv1.MenuCreateRes, err error) {
|
|
id, err := service.MenuManage().Create(ctx, dto.MenuCreateInput{
|
|
ParentId: req.ParentId, Name: req.Name, Icon: req.Icon, Type: req.Type, Path: req.Path,
|
|
Component: req.Component, Permission: req.Permission, Sort: req.Sort, Status: req.Status, Hidden: req.Hidden,
|
|
})
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
return &adminv1.MenuCreateRes{Id: id}, nil
|
|
}
|
|
|
|
// MenuUpdate updates a menu or button node.
|
|
func (c *Controller) MenuUpdate(ctx context.Context, req *adminv1.MenuUpdateReq) (res *adminv1.MenuUpdateRes, err error) {
|
|
if err = service.MenuManage().Update(ctx, dto.MenuUpdateInput{
|
|
Id: req.Id, ParentId: req.ParentId, Name: req.Name, Icon: req.Icon, Type: req.Type, Path: req.Path,
|
|
Component: req.Component, Permission: req.Permission, Sort: req.Sort, Status: req.Status, Hidden: req.Hidden,
|
|
}); err != nil {
|
|
return nil, err
|
|
}
|
|
return &adminv1.MenuUpdateRes{}, nil
|
|
}
|
|
|
|
// MenuDelete deletes a menu node.
|
|
func (c *Controller) MenuDelete(ctx context.Context, req *adminv1.MenuDeleteReq) (res *adminv1.MenuDeleteRes, err error) {
|
|
if err = service.MenuManage().Delete(ctx, req.Id); err != nil {
|
|
return nil, err
|
|
}
|
|
return &adminv1.MenuDeleteRes{}, nil
|
|
}
|
|
|
|
func menuNodeToV1(n *dto.MenuNode) *adminv1.MenuItem {
|
|
item := &adminv1.MenuItem{
|
|
Id: n.Id, ParentId: n.ParentId, Name: n.Name, Icon: n.Icon, Type: n.Type, Path: n.Path,
|
|
Component: n.Component, Permission: n.Permission, Sort: n.Sort, Status: n.Status, Hidden: n.Hidden,
|
|
}
|
|
for _, c := range n.Children {
|
|
item.Children = append(item.Children, menuNodeToV1(c))
|
|
}
|
|
return item
|
|
}
|