初始化项目：基础设施 + 用户认证 + 后台管理系统 + AGPL 3.0 许可

internal/common/helper.go

@@ -0,0 +1,44 @@
+package common
+
+import (
+	"metazone.cc/metalab/internal/model"
+
+	"github.com/gin-gonic/gin"
+)
+
+// BuildPageData 构建页面模板数据，自动注入登录状态与 CSRF token
+func BuildPageData(c *gin.Context, extra gin.H) gin.H {
+	data := gin.H{}
+	for k, v := range extra {
+		data[k] = v
+	}
+	if username, exists := c.Get("username"); exists {
+		data["IsLoggedIn"] = true
+		data["Username"] = username
+	}
+	// 注入 CSRF token（由 CSRF 中间件设置到上下文中）
+	if token, exists := c.Get("csrf_token"); exists {
+		data["CSRFToken"] = token
+	}
+	return data
+}
+
+// BuildAdminPageData 构建管理后台模板数据
+// 额外注入 UID、Role、CanManageUsers、CurrentPath 等权限信息
+func BuildAdminPageData(c *gin.Context, extra gin.H) gin.H {
+	data := BuildPageData(c, extra)
+	data["IsAdmin"] = true
+	data["CurrentPath"] = c.Request.URL.Path
+
+	if uid, exists := c.Get("uid"); exists {
+		data["UID"] = uid
+	}
+	if role, exists := c.Get("role"); exists {
+		roleStr := role.(string)
+		data["Role"] = roleStr
+		data["CanManageUsers"] = model.HasMinRole(roleStr, model.RoleAdmin)
+		data["CanManageSettings"] = model.HasMinRole(roleStr, model.RoleOwner)
+		data["IsOwner"] = model.HasMinRole(roleStr, model.RoleOwner)
+	}
+	return data
+}