93 lines
2.7 KiB
Go
93 lines
2.7 KiB
Go
|
package handler
|
|||
|
|
|
|||
|
|
import (
|
|||
|
|
"net/http"
|
|||
|
|
|
|||
|
|
"soul-api/internal/auth"
|
|||
|
|
"soul-api/internal/config"
|
|||
|
|
|
|||
|
|
"github.com/gin-gonic/gin"
|
|||
|
|
)
|
|||
|
|
|
|||
|
|
// AdminCheck GET /api/admin 鉴权检查（JWT：Authorization Bearer 或 Cookie），已登录返回 success 或概览占位
|
|||
|
|
func AdminCheck(c *gin.Context) {
|
|||
|
|
cfg := config.Get()
|
|||
|
|
if cfg == nil {
|
|||
|
|
c.JSON(http.StatusOK, gin.H{"success": true})
|
|||
|
|
return
|
|||
|
|
}
|
|||
|
|
token := auth.GetAdminJWTFromRequest(c.Request)
|
|||
|
|
if _, ok := auth.ParseAdminJWT(token, cfg.AdminSessionSecret); !ok {
|
|||
|
|
c.AbortWithStatusJSON(http.StatusUnauthorized, gin.H{"success": false, "error": "未授权访问，请先登录"})
|
|||
|
|
return
|
|||
|
|
}
|
|||
|
|
c.JSON(http.StatusOK, gin.H{
|
|||
|
|
"success": true,
|
|||
|
|
"content": gin.H{
|
|||
|
|
"totalChapters": 0, "totalWords": 0, "publishedChapters": 0, "draftChapters": 0,
|
|||
|
|
"lastUpdate": nil,
|
|||
|
|
},
|
|||
|
|
"payment": gin.H{
|
|||
|
|
"totalRevenue": 0, "todayRevenue": 0, "totalOrders": 0, "todayOrders": 0, "averagePrice": 0,
|
|||
|
|
},
|
|||
|
|
"referral": gin.H{
|
|||
|
|
"totalReferrers": 0, "activeReferrers": 0, "totalCommission": 0, "paidCommission": 0, "pendingCommission": 0,
|
|||
|
|
},
|
|||
|
|
"users": gin.H{
|
|||
|
|
"totalUsers": 0, "purchasedUsers": 0, "activeUsers": 0, "todayNewUsers": 0,
|
|||
|
|
},
|
|||
|
|
})
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// AdminLogin POST /api/admin 登录（校验 ADMIN_USERNAME/PASSWORD，返回 JWT，前端存 token 并带 Authorization: Bearer）
|
|||
|
|
func AdminLogin(c *gin.Context) {
|
|||
|
|
cfg := config.Get()
|
|||
|
|
if cfg == nil {
|
|||
|
|
c.JSON(http.StatusInternalServerError, gin.H{"success": false, "error": "配置未加载"})
|
|||
|
|
return
|
|||
|
|
}
|
|||
|
|
var body struct {
|
|||
|
|
Username string `json:"username" binding:"required"`
|
|||
|
|
Password string `json:"password" binding:"required"`
|
|||
|
|
}
|
|||
|
|
if err := c.ShouldBindJSON(&body); err != nil {
|
|||
|
|
c.JSON(http.StatusBadRequest, gin.H{"success": false, "error": "参数错误"})
|
|||
|
|
return
|
|||
|
|
}
|
|||
|
|
username := trimSpace(body.Username)
|
|||
|
|
password := body.Password
|
|||
|
|
if username != cfg.AdminUsername || password != cfg.AdminPassword {
|
|||
|
|
c.JSON(http.StatusUnauthorized, gin.H{"success": false, "error": "用户名或密码错误"})
|
|||
|
|
return
|
|||
|
|
}
|
|||
|
|
token, err := auth.IssueAdminJWT(cfg.AdminSessionSecret, username)
|
|||
|
|
if err != nil {
|
|||
|
|
c.JSON(http.StatusInternalServerError, gin.H{"success": false, "error": "签发失败"})
|
|||
|
|
return
|
|||
|
|
}
|
|||
|
|
c.JSON(http.StatusOK, gin.H{
|
|||
|
|
"success": true,
|
|||
|
|
"token": token,
|
|||
|
|
"user": gin.H{
|
|||
|
|
"id": "admin", "username": cfg.AdminUsername, "role": "admin", "name": "卡若",
|
|||
|
|
},
|
|||
|
|
})
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// AdminLogout POST /api/admin/logout 服务端无状态，仅返回成功；前端需清除本地 token
|
|||
|
|
func AdminLogout(c *gin.Context) {
|
|||
|
|
c.JSON(http.StatusOK, gin.H{"success": true})
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
func trimSpace(s string) string {
|
|||
|
|
start := 0
|
|||
|
|
for start < len(s) && (s[start] == ' ' || s[start] == '\t') {
|
|||
|
|
start++
|
|||
|
|
}
|
|||
|
|
end := len(s)
|
|||
|
|
for end > start && (s[end-1] == ' ' || s[end-1] == '\t') {
|
|||
|
|
end--
|
|||
|
|
}
|
|||
|
|
return s[start:end]
|
|||
|
|
}
|