241 lines
7.0 KiB
Go
241 lines
7.0 KiB
Go
package handler
|
||
|
||
import (
|
||
"net/http"
|
||
"strconv"
|
||
"strings"
|
||
|
||
"soul-api/internal/database"
|
||
"soul-api/internal/middleware"
|
||
"soul-api/internal/model"
|
||
|
||
"github.com/gin-gonic/gin"
|
||
"golang.org/x/crypto/bcrypt"
|
||
"gorm.io/gorm"
|
||
)
|
||
|
||
// AdminUsersList GET /api/admin/users 管理员用户列表（仅 super_admin）
|
||
func AdminUsersList(c *gin.Context) {
|
||
claims := middleware.GetAdminClaims(c)
|
||
if claims == nil || claims.Role != "super_admin" {
|
||
c.JSON(http.StatusForbidden, gin.H{"success": false, "error": "无权限"})
|
||
return
|
||
}
|
||
db := database.DB()
|
||
page, _ := strconv.Atoi(c.Query("page"))
|
||
if page < 1 {
|
||
page = 1
|
||
}
|
||
pageSize, _ := strconv.Atoi(c.Query("pageSize"))
|
||
if pageSize < 1 {
|
||
pageSize = 10
|
||
}
|
||
if pageSize > 100 {
|
||
pageSize = 100
|
||
}
|
||
search := strings.TrimSpace(c.Query("search"))
|
||
var total int64
|
||
q := db.Model(&model.AdminUser{})
|
||
if search != "" {
|
||
q = q.Where("username LIKE ? OR name LIKE ?", "%"+search+"%", "%"+search+"%")
|
||
}
|
||
if err := q.Count(&total).Error; err != nil {
|
||
c.JSON(http.StatusOK, gin.H{"success": false, "error": err.Error()})
|
||
return
|
||
}
|
||
var list []model.AdminUser
|
||
offset := (page - 1) * pageSize
|
||
if err := q.Order("id ASC").Offset(offset).Limit(pageSize).Find(&list).Error; err != nil {
|
||
c.JSON(http.StatusOK, gin.H{"success": false, "error": err.Error()})
|
||
return
|
||
}
|
||
records := make([]gin.H, 0, len(list))
|
||
for _, u := range list {
|
||
records = append(records, gin.H{
|
||
"id": u.ID,
|
||
"username": u.Username,
|
||
"role": u.Role,
|
||
"name": u.Name,
|
||
"status": u.Status,
|
||
"createdAt": u.CreatedAt,
|
||
"updatedAt": u.UpdatedAt,
|
||
})
|
||
}
|
||
totalPages := (int(total) + pageSize - 1) / pageSize
|
||
c.JSON(http.StatusOK, gin.H{
|
||
"success": true,
|
||
"records": records,
|
||
"total": total,
|
||
"page": page,
|
||
"pageSize": pageSize,
|
||
"totalPages": totalPages,
|
||
})
|
||
}
|
||
|
||
// AdminUsersAction POST/PUT/DELETE /api/admin/users 管理员用户增删改（仅 super_admin）
|
||
func AdminUsersAction(c *gin.Context) {
|
||
claims := middleware.GetAdminClaims(c)
|
||
if claims == nil || claims.Role != "super_admin" {
|
||
c.JSON(http.StatusForbidden, gin.H{"success": false, "error": "无权限"})
|
||
return
|
||
}
|
||
db := database.DB()
|
||
switch c.Request.Method {
|
||
case http.MethodPost:
|
||
var body struct {
|
||
Username string `json:"username" binding:"required"`
|
||
Password string `json:"password" binding:"required"`
|
||
Name string `json:"name"`
|
||
Role string `json:"role"`
|
||
}
|
||
if err := c.ShouldBindJSON(&body); err != nil {
|
||
c.JSON(http.StatusBadRequest, gin.H{"success": false, "error": "参数错误"})
|
||
return
|
||
}
|
||
username := trimSpace(body.Username)
|
||
if len(username) < 2 {
|
||
c.JSON(http.StatusBadRequest, gin.H{"success": false, "error": "用户名至少 2 个字符"})
|
||
return
|
||
}
|
||
if len(body.Password) < 6 {
|
||
c.JSON(http.StatusBadRequest, gin.H{"success": false, "error": "密码至少 6 位"})
|
||
return
|
||
}
|
||
role := trimSpace(body.Role)
|
||
if role != "super_admin" && role != "admin" {
|
||
role = "admin"
|
||
}
|
||
hash, err := bcrypt.GenerateFromPassword([]byte(body.Password), bcrypt.DefaultCost)
|
||
if err != nil {
|
||
c.JSON(http.StatusInternalServerError, gin.H{"success": false, "error": "密码加密失败"})
|
||
return
|
||
}
|
||
u := model.AdminUser{
|
||
Username: username,
|
||
PasswordHash: string(hash),
|
||
Role: role,
|
||
Name: trimSpace(body.Name),
|
||
Status: "active",
|
||
}
|
||
if err := db.Create(&u).Error; err != nil {
|
||
if strings.Contains(err.Error(), "Duplicate") || strings.Contains(err.Error(), "1062") {
|
||
c.JSON(http.StatusBadRequest, gin.H{"success": false, "error": "用户名已存在"})
|
||
return
|
||
}
|
||
c.JSON(http.StatusOK, gin.H{"success": false, "error": err.Error()})
|
||
return
|
||
}
|
||
c.JSON(http.StatusOK, gin.H{
|
||
"success": true,
|
||
"data": gin.H{
|
||
"id": u.ID,
|
||
"username": u.Username,
|
||
"role": u.Role,
|
||
"name": u.Name,
|
||
"status": u.Status,
|
||
"createdAt": u.CreatedAt,
|
||
},
|
||
})
|
||
case http.MethodPut:
|
||
var body struct {
|
||
ID uint `json:"id" binding:"required"`
|
||
Password string `json:"password"`
|
||
Name string `json:"name"`
|
||
Role string `json:"role"`
|
||
Status string `json:"status"`
|
||
}
|
||
if err := c.ShouldBindJSON(&body); err != nil {
|
||
c.JSON(http.StatusBadRequest, gin.H{"success": false, "error": "参数错误"})
|
||
return
|
||
}
|
||
var u model.AdminUser
|
||
if err := db.First(&u, body.ID).Error; err != nil {
|
||
if err == gorm.ErrRecordNotFound {
|
||
c.JSON(http.StatusNotFound, gin.H{"success": false, "error": "用户不存在"})
|
||
return
|
||
}
|
||
c.JSON(http.StatusOK, gin.H{"success": false, "error": err.Error()})
|
||
return
|
||
}
|
||
updates := make(map[string]interface{})
|
||
updates["name"] = trimSpace(body.Name)
|
||
if body.Role == "super_admin" || body.Role == "admin" {
|
||
updates["role"] = body.Role
|
||
}
|
||
if body.Status == "active" || body.Status == "disabled" {
|
||
updates["status"] = body.Status
|
||
}
|
||
if body.Password != "" {
|
||
if len(body.Password) < 6 {
|
||
c.JSON(http.StatusBadRequest, gin.H{"success": false, "error": "新密码至少 6 位"})
|
||
return
|
||
}
|
||
hash, err := bcrypt.GenerateFromPassword([]byte(body.Password), bcrypt.DefaultCost)
|
||
if err != nil {
|
||
c.JSON(http.StatusInternalServerError, gin.H{"success": false, "error": "密码加密失败"})
|
||
return
|
||
}
|
||
updates["password_hash"] = string(hash)
|
||
}
|
||
if len(updates) > 0 {
|
||
if err := db.Model(&u).Updates(updates).Error; err != nil {
|
||
c.JSON(http.StatusOK, gin.H{"success": false, "error": err.Error()})
|
||
return
|
||
}
|
||
}
|
||
var updated model.AdminUser
|
||
_ = db.First(&updated, u.ID)
|
||
c.JSON(http.StatusOK, gin.H{
|
||
"success": true,
|
||
"data": gin.H{
|
||
"id": updated.ID,
|
||
"username": updated.Username,
|
||
"role": updated.Role,
|
||
"name": updated.Name,
|
||
"status": updated.Status,
|
||
"updatedAt": updated.UpdatedAt,
|
||
},
|
||
})
|
||
case http.MethodDelete:
|
||
id := c.Query("id")
|
||
if id == "" {
|
||
c.JSON(http.StatusBadRequest, gin.H{"success": false, "error": "缺少 id"})
|
||
return
|
||
}
|
||
uid64, err := strconv.ParseUint(strings.TrimSpace(id), 10, 32)
|
||
if err != nil {
|
||
c.JSON(http.StatusBadRequest, gin.H{"success": false, "error": "id 无效"})
|
||
return
|
||
}
|
||
uid := uint(uid64)
|
||
var u model.AdminUser
|
||
if err := db.First(&u, uid).Error; err != nil {
|
||
if err == gorm.ErrRecordNotFound {
|
||
c.JSON(http.StatusOK, gin.H{"success": true})
|
||
return
|
||
}
|
||
c.JSON(http.StatusOK, gin.H{"success": false, "error": err.Error()})
|
||
return
|
||
}
|
||
if u.Username == claims.Username {
|
||
c.JSON(http.StatusBadRequest, gin.H{"success": false, "error": "不能删除当前登录账号"})
|
||
return
|
||
}
|
||
if u.Role == "super_admin" {
|
||
var cnt int64
|
||
db.Model(&model.AdminUser{}).Where("role = ?", "super_admin").Count(&cnt)
|
||
if cnt <= 1 {
|
||
c.JSON(http.StatusBadRequest, gin.H{"success": false, "error": "至少保留一个超级管理员"})
|
||
return
|
||
}
|
||
}
|
||
if err := db.Delete(&u).Error; err != nil {
|
||
c.JSON(http.StatusOK, gin.H{"success": false, "error": err.Error()})
|
||
return
|
||
}
|
||
c.JSON(http.StatusOK, gin.H{"success": true})
|
||
default:
|
||
c.JSON(http.StatusMethodNotAllowed, gin.H{"success": false, "error": "方法不支持"})
|
||
}
|
||
}
|