refactor: CSP nonce替代unsafe-inline, HSTS始终启用, router/api拆分, 管理后台+用户设置页拆分, DB健康降级, 时区配置, UID统一解析, CI接入
Some checks failed
CI / Lint + Build (push) Has been cancelled
Some checks failed
CI / Lint + Build (push) Has been cancelled
审计修复: - CSP: unsafe-inline移除, nonce替代; unsafe-eval保留供Vditor使用 - HSTS: 始终启用(不再依赖release模式) - Controller Exp: common.GetGinExp包装, 不再直接读context - UID解析: common.ParseUIDParam统一, follow/admin controller改用 重构: - router/api.go(198行)拆为7个域文件: auth/settings/posts/comments/reactions/social/studio - 管理后台站点设置: 单页拆为4个子页(brand/security/registration/content)+子菜单 - 前台用户设置页: 1201行拆为6个独立模板+6个独立JS文件 新增: - DB健康检测中间件(middleware/db_health.go): 5s ping+降级页面 - 时区配置: config.yaml server.timezone→time.Local初始化 - .gitea/workflows/ci.yml: strict模式CI流水线
This commit is contained in:
36
.gitea/workflows/ci.yml
Normal file
36
.gitea/workflows/ci.yml
Normal file
@ -0,0 +1,36 @@
|
||||
name: CI
|
||||
|
||||
on:
|
||||
push:
|
||||
branches: [main]
|
||||
pull_request:
|
||||
branches: [main]
|
||||
|
||||
jobs:
|
||||
lint:
|
||||
name: Lint + Build
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- name: Checkout
|
||||
uses: actions/checkout@v4
|
||||
|
||||
- name: Setup Go
|
||||
uses: actions/setup-go@v5
|
||||
with:
|
||||
go-version: "1.26"
|
||||
|
||||
- name: Cache Go modules
|
||||
uses: actions/cache@v4
|
||||
with:
|
||||
path: ~/go/pkg/mod
|
||||
key: ${{ runner.os }}-go-${{ hashFiles('go.sum') }}
|
||||
restore-keys: ${{ runner.os }}-go-
|
||||
|
||||
- name: Install tools
|
||||
run: |
|
||||
go install github.com/golangci/golangci-lint/v2/cmd/golangci-lint@v2.12.2
|
||||
go install mvdan.cc/gofumpt@latest
|
||||
go install golang.org/x/tools/cmd/goimports@latest
|
||||
|
||||
- name: CI (strict)
|
||||
run: bash scripts/ci.sh --strict
|
||||
@ -6,6 +6,7 @@ import (
|
||||
|
||||
"metazone.cc/mce/internal/common"
|
||||
"metazone.cc/mce/internal/config"
|
||||
"metazone.cc/mce/internal/middleware"
|
||||
"metazone.cc/mce/internal/model"
|
||||
"metazone.cc/mce/internal/repository"
|
||||
"metazone.cc/mce/internal/router"
|
||||
@ -22,6 +23,16 @@ func main() {
|
||||
// 配置
|
||||
cfg := config.Load("config.yaml")
|
||||
|
||||
// 设置时区
|
||||
if cfg.Server.Timezone != "" {
|
||||
loc, err := time.LoadLocation(cfg.Server.Timezone)
|
||||
if err != nil {
|
||||
log.Printf("警告：时区 %s 无效，使用系统时区: %v", cfg.Server.Timezone, err)
|
||||
} else {
|
||||
time.Local = loc
|
||||
}
|
||||
}
|
||||
|
||||
// 从配置初始化角色系统（OCP：新增角色无需修改源代码）
|
||||
model.InitRoles(cfg.Roles.Levels, cfg.Roles.Names, cfg.Roles.Permissions.OperableRoles)
|
||||
|
||||
@ -98,6 +109,9 @@ func main() {
|
||||
log.Fatalf("初始化站点设置失败: %v", err)
|
||||
}
|
||||
|
||||
// 启动数据库健康检测（每 5s ping，失败自动降级）
|
||||
middleware.StartDBHealthCheck(db)
|
||||
|
||||
// 路由注册
|
||||
router.Setup(r, db, cfg, siteSettings, redisClient)
|
||||
|
||||
|
||||
@ -5,6 +5,7 @@ server:
|
||||
port: 8080
|
||||
mode: debug # debug | release | test
|
||||
cookie_secure: false # Cookie Secure 标志（生产环境应设为 true，部分反向代理环境下可能需要灵活控制）
|
||||
timezone: Asia/Shanghai # 时区（影响 time.Now() 和模板时间格式化）
|
||||
|
||||
database:
|
||||
host: 127.0.0.1
|
||||
|
||||
@ -1,7 +1,11 @@
|
||||
// Package common 提供通用工具函数、错误哨兵和响应辅助方法。
|
||||
package common
|
||||
|
||||
import "github.com/gin-gonic/gin"
|
||||
import (
|
||||
"strconv"
|
||||
|
||||
"github.com/gin-gonic/gin"
|
||||
)
|
||||
|
||||
// GetGinUser 从 Gin context 中提取当前登录用户的 uid 和 role
|
||||
// 如果用户未登录，ok 返回 false；role 可能为空字符串
|
||||
@ -19,3 +23,28 @@ func GetGinUser(c *gin.Context) (uid uint, role string, ok bool) {
|
||||
}
|
||||
return
|
||||
}
|
||||
|
||||
// GetGinExp 从 Gin context 中提取当前用户的经验值
|
||||
// 如果用户未登录或 exp 不存在，ok 返回 false
|
||||
func GetGinExp(c *gin.Context) (exp int, ok bool) {
|
||||
if v, exists := c.Get("exp"); exists {
|
||||
if e, isInt := v.(int); isInt {
|
||||
return e, true
|
||||
}
|
||||
}
|
||||
return 0, false
|
||||
}
|
||||
|
||||
// ParseUIDParam 从 URL 路径参数中提取 uint 类型的 UID
|
||||
// 统一 UID 解析逻辑，避免各 Controller 重复 strconv.ParseUint
|
||||
func ParseUIDParam(c *gin.Context, paramName string) (uint, error) {
|
||||
s := c.Param(paramName)
|
||||
if s == "" {
|
||||
return 0, ErrInvalidParam
|
||||
}
|
||||
v, err := strconv.ParseUint(s, 10, 64)
|
||||
if err != nil {
|
||||
return 0, ErrInvalidParam
|
||||
}
|
||||
return uint(v), nil
|
||||
}
|
||||
|
||||
@ -58,4 +58,7 @@ var (
|
||||
// 评论相关
|
||||
ErrCommentNotFound = errors.New("评论不存在")
|
||||
ErrCommentEmpty = errors.New("评论内容不能为空")
|
||||
|
||||
// 通用参数校验
|
||||
ErrInvalidParam = errors.New("参数无效")
|
||||
)
|
||||
|
||||
@ -33,6 +33,7 @@ type ServerConfig struct {
|
||||
Port string `mapstructure:"port"`
|
||||
Mode string `mapstructure:"mode"`
|
||||
CookieSecure bool `mapstructure:"cookie_secure"`
|
||||
Timezone string `mapstructure:"timezone"`
|
||||
}
|
||||
|
||||
type DatabaseConfig struct {
|
||||
|
||||
@ -134,11 +134,7 @@ func (ac *AdminController) ResetToken(c *gin.Context) {
|
||||
|
||||
// parseUIDParam 从 URL 路径参数解析 uid
|
||||
func parseUIDParam(c *gin.Context) (uint, error) {
|
||||
uid, err := strconv.ParseUint(c.Param("uid"), 10, 64)
|
||||
if err != nil {
|
||||
return 0, err
|
||||
}
|
||||
return uint(uid), nil
|
||||
return common.ParseUIDParam(c, "uid")
|
||||
}
|
||||
|
||||
// handleServiceError 统一处理 service 层返回的错误
|
||||
|
||||
@ -21,12 +21,48 @@ func NewSiteSettingController(settingService siteSettingUseCase, defaults *servi
|
||||
return &SiteSettingController{settingService: settingService, defaults: defaults}
|
||||
}
|
||||
|
||||
// SiteSettingsPage 站点设置管理页面
|
||||
// SiteSettingsPage 旧站点设置页 — 301 重定向到品牌页
|
||||
func (sc *SiteSettingController) SiteSettingsPage(c *gin.Context) {
|
||||
c.HTML(http.StatusOK, "admin/site-settings/index.html", common.BuildAdminPageData(c, gin.H{
|
||||
"Title": "站点设置",
|
||||
c.Redirect(http.StatusMovedPermanently, "/admin/settings/brand")
|
||||
}
|
||||
|
||||
// BrandPage 品牌与合规设置页
|
||||
func (sc *SiteSettingController) BrandPage(c *gin.Context) {
|
||||
c.HTML(http.StatusOK, "admin/site-settings/brand.html", common.BuildAdminPageData(c, gin.H{
|
||||
"Title": "站点设置 - 品牌与合规",
|
||||
"ExtraCSS": "/admin/static/css/site-settings.css",
|
||||
"ExtraJS": "/admin/static/js/site-settings.js",
|
||||
"ActiveSetting": "brand",
|
||||
}))
|
||||
}
|
||||
|
||||
// SecurityPage 安全与维护设置页
|
||||
func (sc *SiteSettingController) SecurityPage(c *gin.Context) {
|
||||
c.HTML(http.StatusOK, "admin/site-settings/security.html", common.BuildAdminPageData(c, gin.H{
|
||||
"Title": "站点设置 - 安全与维护",
|
||||
"ExtraCSS": "/admin/static/css/site-settings.css",
|
||||
"ExtraJS": "/admin/static/js/site-settings.js",
|
||||
"ActiveSetting": "security",
|
||||
}))
|
||||
}
|
||||
|
||||
// RegistrationPage 注册策略设置页
|
||||
func (sc *SiteSettingController) RegistrationPage(c *gin.Context) {
|
||||
c.HTML(http.StatusOK, "admin/site-settings/registration.html", common.BuildAdminPageData(c, gin.H{
|
||||
"Title": "站点设置 - 注册策略",
|
||||
"ExtraCSS": "/admin/static/css/site-settings.css",
|
||||
"ExtraJS": "/admin/static/js/site-settings.js",
|
||||
"ActiveSetting": "registration",
|
||||
}))
|
||||
}
|
||||
|
||||
// ContentPage 审核与内容设置页
|
||||
func (sc *SiteSettingController) ContentPage(c *gin.Context) {
|
||||
c.HTML(http.StatusOK, "admin/site-settings/content.html", common.BuildAdminPageData(c, gin.H{
|
||||
"Title": "站点设置 - 审核与内容",
|
||||
"ExtraCSS": "/admin/static/css/site-settings.css",
|
||||
"ExtraJS": "/admin/static/js/site-settings.js",
|
||||
"ActiveSetting": "content",
|
||||
}))
|
||||
}
|
||||
|
||||
|
||||
@ -28,12 +28,11 @@ func (ctrl *CommentController) UploadImage(c *gin.Context) {
|
||||
}
|
||||
|
||||
// LV4+ 检查（Exp ≥ 1500）
|
||||
expVal, exists := c.Get("exp")
|
||||
if !exists {
|
||||
exp, ok := common.GetGinExp(c)
|
||||
if !ok {
|
||||
common.Error(c, http.StatusForbidden, "无法获取经验值")
|
||||
return
|
||||
}
|
||||
exp := expVal.(int)
|
||||
if exp < 1500 {
|
||||
common.Error(c, http.StatusForbidden, "需 Lv4 以上才能上传评论图片")
|
||||
return
|
||||
|
||||
@ -29,13 +29,13 @@ func (fc *FollowController) Toggle(c *gin.Context) {
|
||||
return
|
||||
}
|
||||
|
||||
targetUID, err := strconv.ParseUint(c.Param("uid"), 10, 64)
|
||||
targetUID, err := common.ParseUIDParam(c, "uid")
|
||||
if err != nil {
|
||||
common.Error(c, http.StatusBadRequest, "无效的用户ID")
|
||||
return
|
||||
}
|
||||
|
||||
isFollowing, err := fc.followSvc.Toggle(uid, uint(targetUID))
|
||||
isFollowing, err := fc.followSvc.Toggle(uid, targetUID)
|
||||
if err != nil {
|
||||
if err.Error() == "不能关注自己" {
|
||||
common.Error(c, http.StatusBadRequest, err.Error())
|
||||
@ -46,7 +46,7 @@ func (fc *FollowController) Toggle(c *gin.Context) {
|
||||
}
|
||||
|
||||
// 获取最新状态
|
||||
status, _ := fc.followSvc.GetStatus(uid, uint(targetUID))
|
||||
status, _ := fc.followSvc.GetStatus(uid, targetUID)
|
||||
|
||||
common.Ok(c, gin.H{
|
||||
"is_following": isFollowing,
|
||||
@ -56,7 +56,7 @@ func (fc *FollowController) Toggle(c *gin.Context) {
|
||||
|
||||
// GetStatus 查询关注关系 GET /api/users/:uid/follow-status
|
||||
func (fc *FollowController) GetStatus(c *gin.Context) {
|
||||
targetUID, err := strconv.ParseUint(c.Param("uid"), 10, 64)
|
||||
targetUID, err := common.ParseUIDParam(c, "uid")
|
||||
if err != nil {
|
||||
common.Error(c, http.StatusBadRequest, "无效的用户ID")
|
||||
return
|
||||
@ -64,7 +64,7 @@ func (fc *FollowController) GetStatus(c *gin.Context) {
|
||||
|
||||
uid, _, _ := common.GetGinUser(c) // 允许未登录（返回全是 false）
|
||||
|
||||
status, err := fc.followSvc.GetStatus(uid, uint(targetUID))
|
||||
status, err := fc.followSvc.GetStatus(uid, targetUID)
|
||||
if err != nil {
|
||||
common.Error(c, http.StatusInternalServerError, "查询失败")
|
||||
return
|
||||
@ -75,7 +75,7 @@ func (fc *FollowController) GetStatus(c *gin.Context) {
|
||||
|
||||
// Followers 粉丝列表 GET /api/users/:uid/followers
|
||||
func (fc *FollowController) Followers(c *gin.Context) {
|
||||
targetUID, err := strconv.ParseUint(c.Param("uid"), 10, 64)
|
||||
targetUID, err := common.ParseUIDParam(c, "uid")
|
||||
if err != nil {
|
||||
common.Error(c, http.StatusBadRequest, "无效的用户ID")
|
||||
return
|
||||
@ -86,7 +86,7 @@ func (fc *FollowController) Followers(c *gin.Context) {
|
||||
|
||||
uid, _, _ := common.GetGinUser(c) // 允许未登录
|
||||
|
||||
result, err := fc.followSvc.ListFollowers(uint(targetUID), uid, page, pageSize)
|
||||
result, err := fc.followSvc.ListFollowers(targetUID, uid, page, pageSize)
|
||||
if err != nil {
|
||||
common.Error(c, http.StatusInternalServerError, "查询失败")
|
||||
return
|
||||
@ -97,7 +97,7 @@ func (fc *FollowController) Followers(c *gin.Context) {
|
||||
|
||||
// Following 关注列表 GET /api/users/:uid/following
|
||||
func (fc *FollowController) Following(c *gin.Context) {
|
||||
targetUID, err := strconv.ParseUint(c.Param("uid"), 10, 64)
|
||||
targetUID, err := common.ParseUIDParam(c, "uid")
|
||||
if err != nil {
|
||||
common.Error(c, http.StatusBadRequest, "无效的用户ID")
|
||||
return
|
||||
@ -108,7 +108,7 @@ func (fc *FollowController) Following(c *gin.Context) {
|
||||
|
||||
uid, _, _ := common.GetGinUser(c)
|
||||
|
||||
result, err := fc.followSvc.ListFollowing(uint(targetUID), uid, page, pageSize)
|
||||
result, err := fc.followSvc.ListFollowing(targetUID, uid, page, pageSize)
|
||||
if err != nil {
|
||||
common.Error(c, http.StatusInternalServerError, "查询失败")
|
||||
return
|
||||
@ -129,7 +129,7 @@ func NewFollowPageController(followSvc followUseCase) *FollowPageController {
|
||||
|
||||
// FollowersPage 粉丝列表页面
|
||||
func (fpc *FollowPageController) FollowersPage(c *gin.Context) {
|
||||
targetUID, err := strconv.ParseUint(c.Param("uid"), 10, 64)
|
||||
targetUID, err := common.ParseUIDParam(c, "uid")
|
||||
if err != nil {
|
||||
common.Error(c, http.StatusBadRequest, "无效的用户ID")
|
||||
return
|
||||
@ -138,7 +138,7 @@ func (fpc *FollowPageController) FollowersPage(c *gin.Context) {
|
||||
page, _ := strconv.Atoi(c.DefaultQuery("page", "1"))
|
||||
|
||||
uid, _, _ := common.GetGinUser(c)
|
||||
result, err := fpc.followSvc.ListFollowers(uint(targetUID), uid, page, 20)
|
||||
result, err := fpc.followSvc.ListFollowers(targetUID, uid, page, 20)
|
||||
if err != nil {
|
||||
result = &service.FollowListResult{Items: []model.UserFollow{}, Total: 0, Accessible: true}
|
||||
}
|
||||
@ -159,7 +159,7 @@ func (fpc *FollowPageController) FollowersPage(c *gin.Context) {
|
||||
|
||||
// FollowingPage 关注列表页面
|
||||
func (fpc *FollowPageController) FollowingPage(c *gin.Context) {
|
||||
targetUID, err := strconv.ParseUint(c.Param("uid"), 10, 64)
|
||||
targetUID, err := common.ParseUIDParam(c, "uid")
|
||||
if err != nil {
|
||||
common.Error(c, http.StatusBadRequest, "无效的用户ID")
|
||||
return
|
||||
@ -168,7 +168,7 @@ func (fpc *FollowPageController) FollowingPage(c *gin.Context) {
|
||||
page, _ := strconv.Atoi(c.DefaultQuery("page", "1"))
|
||||
|
||||
uid, _, _ := common.GetGinUser(c)
|
||||
result, err := fpc.followSvc.ListFollowing(uint(targetUID), uid, page, 20)
|
||||
result, err := fpc.followSvc.ListFollowing(targetUID, uid, page, 20)
|
||||
if err != nil {
|
||||
result = &service.FollowListResult{Items: []model.UserFollow{}, Total: 0, Accessible: true}
|
||||
}
|
||||
|
||||
@ -68,6 +68,7 @@ func (sc *SettingsController) SettingsPage(c *gin.Context) {
|
||||
data := gin.H{
|
||||
"Title": "个人设置",
|
||||
"ExtraCSS": "/static/css/settings.css",
|
||||
"ExtraJS": "/static/js/settings-" + tab + ".js",
|
||||
"ActiveTab": tab,
|
||||
"User": user,
|
||||
"RoleName": model.RoleDisplayNames[user.Role],
|
||||
@ -113,5 +114,22 @@ func (sc *SettingsController) SettingsPage(c *gin.Context) {
|
||||
data["CurrentSID"] = currentSID
|
||||
}
|
||||
|
||||
c.HTML(http.StatusOK, "settings/index.html", common.BuildPageData(c, data))
|
||||
// 按 tab 渲染独立模板
|
||||
tplName := "settings/index.html"
|
||||
switch tab {
|
||||
case "profile":
|
||||
tplName = "settings/profile.html"
|
||||
case "account":
|
||||
tplName = "settings/account.html"
|
||||
case "sessions":
|
||||
tplName = "settings/sessions.html"
|
||||
case "energy":
|
||||
tplName = "settings/energy.html"
|
||||
case "favorites":
|
||||
tplName = "settings/favorites.html"
|
||||
case "notify":
|
||||
tplName = "settings/notify.html"
|
||||
}
|
||||
|
||||
c.HTML(http.StatusOK, tplName, common.BuildPageData(c, data))
|
||||
}
|
||||
|
||||
84
internal/middleware/db_health.go
Normal file
84
internal/middleware/db_health.go
Normal file
@ -0,0 +1,84 @@
|
||||
package middleware
|
||||
|
||||
import (
|
||||
"log"
|
||||
"net/http"
|
||||
"sync/atomic"
|
||||
"time"
|
||||
|
||||
"github.com/gin-gonic/gin"
|
||||
"gorm.io/gorm"
|
||||
)
|
||||
|
||||
// dbHealthy 全局数据库健康状态（原子读写，默认为健康）
|
||||
var dbHealthy atomic.Bool
|
||||
|
||||
func init() {
|
||||
dbHealthy.Store(true)
|
||||
}
|
||||
|
||||
// StartDBHealthCheck 启动定时 DB 健康检测（在 main goroutine 中调用）
|
||||
// 每 5 秒 ping 一次，失败则标记不健康，恢复则重新标记健康
|
||||
func StartDBHealthCheck(db *gorm.DB) {
|
||||
go func() {
|
||||
ticker := time.NewTicker(5 * time.Second)
|
||||
defer ticker.Stop()
|
||||
for range ticker.C {
|
||||
sqlDB, err := db.DB()
|
||||
if err != nil {
|
||||
dbHealthy.Store(false)
|
||||
log.Printf("[DBHealth] 获取底层连接失败: %v", err)
|
||||
continue
|
||||
}
|
||||
if err := sqlDB.Ping(); err != nil {
|
||||
if dbHealthy.Swap(false) {
|
||||
log.Printf("[DBHealth] 数据库不可达，整站进入降级模式: %v", err)
|
||||
}
|
||||
} else {
|
||||
if !dbHealthy.Swap(true) {
|
||||
log.Println("[DBHealth] 数据库已恢复，退出降级模式")
|
||||
}
|
||||
}
|
||||
}
|
||||
}()
|
||||
}
|
||||
|
||||
// DBHealthGuard 数据库健康检查中间件
|
||||
// 检测到 DB 不可达时，返回固定维护页面，避免暴露内部堆栈信息
|
||||
func DBHealthGuard() gin.HandlerFunc {
|
||||
return func(c *gin.Context) {
|
||||
if dbHealthy.Load() {
|
||||
c.Next()
|
||||
return
|
||||
}
|
||||
|
||||
path := c.Request.URL.Path
|
||||
// 静态资源和 API 直接返回错误，不渲染页面
|
||||
if isStaticPath(path) {
|
||||
c.AbortWithStatusJSON(http.StatusServiceUnavailable, gin.H{
|
||||
"success": false,
|
||||
"message": "服务暂时不可用，请稍后重试",
|
||||
})
|
||||
return
|
||||
}
|
||||
// 页面请求返回友好 HTML
|
||||
c.AbortWithStatus(http.StatusServiceUnavailable)
|
||||
c.Header("Content-Type", "text/html; charset=utf-8")
|
||||
_, _ = c.Writer.WriteString(`<!DOCTYPE html>
|
||||
<html lang="zh-CN">
|
||||
<head><meta charset="UTF-8"><title>服务暂时不可用</title>
|
||||
<style>body{font-family:system-ui,sans-serif;display:flex;align-items:center;justify-content:center;min-height:100vh;margin:0;background:#f5f5f5}
|
||||
div{text-align:center;padding:2rem} h1{color:#333} p{color:#666}</style></head>
|
||||
<body><div><h1>服务暂时不可用</h1><p>数据库连接异常，请稍后刷新页面重试</p></div></body></html>`)
|
||||
}
|
||||
}
|
||||
|
||||
// isStaticPath 判断是否为静态资源或 API 路径
|
||||
func isStaticPath(path string) bool {
|
||||
for _, prefix := range []string{"/static/", "/shared/", "/admin/static/", "/api/"} {
|
||||
if len(path) >= len(prefix) && path[:len(prefix)] == prefix {
|
||||
return true
|
||||
}
|
||||
}
|
||||
return false
|
||||
}
|
||||
@ -3,8 +3,7 @@ package middleware
|
||||
import (
|
||||
"crypto/rand"
|
||||
"encoding/base64"
|
||||
|
||||
"metazone.cc/mce/internal/config"
|
||||
"fmt"
|
||||
|
||||
"github.com/gin-gonic/gin"
|
||||
)
|
||||
@ -28,12 +27,13 @@ func SecurityHeaders() gin.HandlerFunc {
|
||||
c.Set("csp_nonce", nonce)
|
||||
|
||||
// Content-Security-Policy
|
||||
// script-src/style-src: 本站 + nonce（替代 unsafe-inline）
|
||||
// script-src: 本站 + nonce（替代 unsafe-inline），保留 unsafe-eval 供 Vditor 使用
|
||||
// style-src: 本站（所有内联样式已使用 nonce）
|
||||
// img-src: 本站 + data: URI（头像裁切）+ blob:（粘贴图片）
|
||||
c.Header("Content-Security-Policy",
|
||||
"default-src 'self'; "+
|
||||
"script-src 'self' 'unsafe-inline' 'unsafe-eval'; "+
|
||||
"style-src 'self' 'unsafe-inline'; "+
|
||||
fmt.Sprintf("script-src 'self' 'unsafe-eval' 'nonce-%s'; ", nonce)+
|
||||
"style-src 'self' 'nonce-"+nonce+"'; "+
|
||||
"img-src 'self' data: blob:; "+
|
||||
"connect-src 'self'")
|
||||
|
||||
@ -46,10 +46,8 @@ func SecurityHeaders() gin.HandlerFunc {
|
||||
// 引用策略
|
||||
c.Header("Referrer-Policy", "strict-origin-when-cross-origin")
|
||||
|
||||
// HSTS：仅在 release 模式启用，避免开发环境 localhost 证书问题
|
||||
if config.App != nil && config.App.Server.Mode == "release" {
|
||||
// HSTS：始终启用（max-age=1年，含子域名，允许 preload 列表收录）
|
||||
c.Header("Strict-Transport-Security", "max-age=31536000; includeSubDomains; preload")
|
||||
}
|
||||
|
||||
c.Next()
|
||||
}
|
||||
|
||||
@ -28,6 +28,14 @@ func setupAdminRoutes(r *gin.Engine, cfg *config.Config, d *dependencies) {
|
||||
adminPages.GET("/posts", d.adminPostCtrl.PostsPage)
|
||||
adminPages.GET("/site-settings", d.siteSettingCtrl.SiteSettingsPage,
|
||||
middleware.RequirePageRole(model.RoleOwner))
|
||||
adminPages.GET("/settings/brand", d.siteSettingCtrl.BrandPage,
|
||||
middleware.RequirePageRole(model.RoleOwner))
|
||||
adminPages.GET("/settings/security", d.siteSettingCtrl.SecurityPage,
|
||||
middleware.RequirePageRole(model.RoleOwner))
|
||||
adminPages.GET("/settings/registration", d.siteSettingCtrl.RegistrationPage,
|
||||
middleware.RequirePageRole(model.RoleOwner))
|
||||
adminPages.GET("/settings/content", d.siteSettingCtrl.ContentPage,
|
||||
middleware.RequirePageRole(model.RoleOwner))
|
||||
adminPages.GET("/energy", d.adminEnergyCtrl.EnergyPage)
|
||||
adminPages.GET("/energy/logs", d.adminEnergyCtrl.EnergyLogPage)
|
||||
adminPages.GET("/energy/fund-logs", d.adminEnergyCtrl.FundLogPage)
|
||||
|
||||
@ -2,197 +2,17 @@ package router
|
||||
|
||||
import (
|
||||
"metazone.cc/mce/internal/config"
|
||||
"metazone.cc/mce/internal/middleware"
|
||||
|
||||
"github.com/gin-gonic/gin"
|
||||
)
|
||||
|
||||
// setupAPIRoutes 注册 API 路由
|
||||
// setupAPIRoutes 按域分发 API 路由注册
|
||||
func setupAPIRoutes(r *gin.Engine, cfg *config.Config, d *dependencies) {
|
||||
// --- 设置页 API（需登录） ---
|
||||
settingsAPI := r.Group("/api/settings")
|
||||
settingsAPI.Use(d.authMdw.Required())
|
||||
settingsAPI.Use(d.authMdw.BannedWriteGuard())
|
||||
settingsAPI.Use(middleware.CSRF(cfg))
|
||||
{
|
||||
settingsAPI.PUT("/profile", d.settingsCtrl.UpdateProfile)
|
||||
settingsAPI.POST("/avatar", d.settingsCtrl.UploadAvatar)
|
||||
settingsAPI.PUT("/password", middleware.SensitiveRateLimit(d.rateLimiter), d.settingsCtrl.ChangePassword)
|
||||
settingsAPI.POST("/delete-account", middleware.SensitiveRateLimit(d.rateLimiter), d.settingsCtrl.DeleteAccount)
|
||||
settingsAPI.GET("/audit-status", d.settingsCtrl.AuditStatus)
|
||||
// 登录管理
|
||||
settingsAPI.GET("/sessions", d.settingsCtrl.ListSessions)
|
||||
settingsAPI.DELETE("/sessions/:sid", d.settingsCtrl.DestroySession)
|
||||
settingsAPI.POST("/sessions/destroy-others", d.settingsCtrl.DestroyOtherSessions)
|
||||
settingsAPI.PUT("/sessions/:sid/remark", d.settingsCtrl.UpdateSessionRemark)
|
||||
// 通知偏好
|
||||
settingsAPI.GET("/notify-prefs", d.settingsCtrl.GetNotifyPrefs)
|
||||
settingsAPI.PUT("/notify-prefs", d.settingsCtrl.UpdateNotifyPref)
|
||||
}
|
||||
|
||||
// --- 消息中心 API（需登录） ---
|
||||
messagesAPI := r.Group("/api/messages")
|
||||
messagesAPI.Use(d.authMdw.Required())
|
||||
messagesAPI.Use(d.authMdw.BannedWriteGuard())
|
||||
messagesAPI.Use(middleware.CSRF(cfg))
|
||||
{
|
||||
messagesAPI.GET("/unread", d.messageCtrl.UnreadCount)
|
||||
messagesAPI.POST("/:id/read", d.messageCtrl.MarkRead)
|
||||
messagesAPI.POST("/read-all", d.messageCtrl.MarkAllRead)
|
||||
}
|
||||
|
||||
// --- 积分/等级 API（需登录） ---
|
||||
levelAPI := r.Group("/api/level")
|
||||
levelAPI.Use(d.authMdw.Required())
|
||||
levelAPI.Use(d.authMdw.BannedWriteGuard())
|
||||
levelAPI.Use(middleware.CSRF(cfg))
|
||||
{
|
||||
levelAPI.POST("/checkin", middleware.SensitiveRateLimit(d.rateLimiter), d.levelCtrl.CheckIn)
|
||||
levelAPI.GET("/info", d.levelCtrl.GetLevel)
|
||||
}
|
||||
|
||||
// --- 认证 API ---
|
||||
api := r.Group("/api")
|
||||
api.Use(middleware.CSRF(cfg))
|
||||
{
|
||||
api.POST("/auth/check-email", d.authCtrl.CheckEmail)
|
||||
api.POST("/auth/register", d.authCtrl.Register)
|
||||
api.POST("/auth/login", d.authCtrl.Login)
|
||||
api.POST("/auth/confirm-restore", d.authCtrl.ConfirmRestore)
|
||||
api.POST("/auth/logout", d.authCtrl.Logout)
|
||||
api.POST("/auth/refresh", d.authCtrl.RefreshToken)
|
||||
|
||||
// 帖子公开 API（无需登录）
|
||||
api.GET("/posts", d.postCtrl.ListAPI)
|
||||
api.GET("/posts/:id", d.postCtrl.ShowAPI)
|
||||
}
|
||||
|
||||
// --- 帖子 API（需登录） ---
|
||||
postsAPI := r.Group("/api/posts")
|
||||
postsAPI.Use(d.authMdw.Required())
|
||||
postsAPI.Use(d.authMdw.BannedWriteGuard())
|
||||
postsAPI.Use(middleware.CSRF(cfg))
|
||||
{
|
||||
postsAPI.POST("/:id/submit", d.postCtrl.Submit)
|
||||
postsAPI.POST("/upload-image", d.postCtrl.UploadImage)
|
||||
}
|
||||
|
||||
// --- 创作中心 API（需登录） ---
|
||||
studioAPI := r.Group("/api/studio")
|
||||
studioAPI.Use(d.authMdw.Required())
|
||||
studioAPI.Use(d.authMdw.BannedWriteGuard())
|
||||
studioAPI.Use(middleware.CSRF(cfg))
|
||||
{
|
||||
studioAPI.GET("/overview", d.studioCtrl.OverviewAPI)
|
||||
studioAPI.GET("/posts", d.studioCtrl.ListPostsAPI)
|
||||
studioAPI.POST("/posts", d.studioCtrl.Create)
|
||||
studioAPI.PUT("/posts/:id", d.studioCtrl.Update)
|
||||
studioAPI.DELETE("/posts/:id", d.studioCtrl.Delete)
|
||||
studioAPI.POST("/posts/:id/submit", d.studioCtrl.Submit)
|
||||
}
|
||||
|
||||
// --- 域能 API（需登录） ---
|
||||
energyAPI := r.Group("/api/energy")
|
||||
energyAPI.Use(d.authMdw.Required())
|
||||
energyAPI.Use(d.authMdw.BannedWriteGuard())
|
||||
energyAPI.Use(middleware.CSRF(cfg))
|
||||
{
|
||||
energyAPI.POST("/energize", d.energyCtrl.Energize)
|
||||
energyAPI.GET("/info", d.energyCtrl.GetEnergyInfo)
|
||||
energyAPI.GET("/logs", d.energyCtrl.GetEnergyLogs)
|
||||
}
|
||||
|
||||
// --- 评论 API（部分需登录） ---
|
||||
// 公开读取
|
||||
commentsPublic := r.Group("/api/posts/:id/comments")
|
||||
{
|
||||
commentsPublic.GET("", d.commentCtrl.ListRootComments)
|
||||
commentsPublic.GET("/:root_id/replies", d.commentCtrl.ListReplies)
|
||||
}
|
||||
// 需要登录的操作
|
||||
commentsAPI := r.Group("/api")
|
||||
commentsAPI.Use(d.authMdw.Required())
|
||||
commentsAPI.Use(d.authMdw.BannedWriteGuard())
|
||||
commentsAPI.Use(middleware.CSRF(cfg))
|
||||
{
|
||||
commentsAPI.POST("/posts/:id/comments", d.commentCtrl.CreateRoot)
|
||||
commentsAPI.POST("/comments/:id/reply", d.commentCtrl.CreateReply)
|
||||
commentsAPI.DELETE("/comments/:id", d.commentCtrl.Delete)
|
||||
commentsAPI.GET("/users/search", d.commentCtrl.SearchUsers)
|
||||
commentsAPI.POST("/comments/upload-image", d.commentCtrl.UploadImage)
|
||||
}
|
||||
|
||||
// --- 赞/踩 API ---
|
||||
// 公开：查询反应状态（未登录返回 none + 点赞数）
|
||||
r.GET("/api/posts/:id/reaction", d.reactionCtrl.GetReaction)
|
||||
// 需登录：切换赞/踩
|
||||
reactionAPI := r.Group("/api/posts/:id")
|
||||
reactionAPI.Use(d.authMdw.Required())
|
||||
reactionAPI.Use(d.authMdw.BannedWriteGuard())
|
||||
reactionAPI.Use(middleware.CSRF(cfg))
|
||||
{
|
||||
reactionAPI.POST("/like", d.reactionCtrl.ToggleLike)
|
||||
reactionAPI.POST("/dislike", d.reactionCtrl.ToggleDislike)
|
||||
}
|
||||
|
||||
// --- 关注 API ---
|
||||
// 公开（Optional 认证以获取当前用户关注状态，未登录返回 false）
|
||||
followPublic := r.Group("/api/users/:uid")
|
||||
followPublic.Use(d.authMdw.Optional())
|
||||
{
|
||||
followPublic.GET("/follow-status", d.followCtrl.GetStatus)
|
||||
followPublic.GET("/followers", d.followCtrl.Followers)
|
||||
followPublic.GET("/following", d.followCtrl.Following)
|
||||
}
|
||||
// 需登录：切换关注
|
||||
followAPI := r.Group("/api/users/:uid")
|
||||
followAPI.Use(d.authMdw.Required())
|
||||
followAPI.Use(d.authMdw.BannedWriteGuard())
|
||||
followAPI.Use(middleware.CSRF(cfg))
|
||||
{
|
||||
followAPI.POST("/follow", d.followCtrl.Toggle)
|
||||
}
|
||||
|
||||
// --- 收藏夹 API ---
|
||||
// 公开：文章收藏状态（未登录返回 false）
|
||||
r.GET("/api/posts/:id/folder-status", d.favoriteCtrl.GetPostStatus)
|
||||
// 公开：查看公开收藏夹内容
|
||||
r.GET("/api/folders/:id/posts", d.favoriteCtrl.ListFolderItems)
|
||||
// 需登录：收藏操作
|
||||
folderAPI := r.Group("/api/folders")
|
||||
folderAPI.Use(d.authMdw.Required())
|
||||
folderAPI.Use(d.authMdw.BannedWriteGuard())
|
||||
folderAPI.Use(middleware.CSRF(cfg))
|
||||
{
|
||||
folderAPI.GET("", d.favoriteCtrl.ListFolders)
|
||||
folderAPI.POST("", d.favoriteCtrl.CreateFolder)
|
||||
folderAPI.PUT("/:id", d.favoriteCtrl.UpdateFolder)
|
||||
folderAPI.DELETE("/:id", d.favoriteCtrl.DeleteFolder)
|
||||
folderAPI.POST("/:id/posts", d.favoriteCtrl.AddToFolder)
|
||||
folderAPI.DELETE("/:id/posts/:postId", d.favoriteCtrl.RemoveFromFolder)
|
||||
}
|
||||
// 需登录：切换收藏（Toggle）
|
||||
favToggleAPI := r.Group("/api/posts/:id")
|
||||
favToggleAPI.Use(d.authMdw.Required())
|
||||
favToggleAPI.Use(d.authMdw.BannedWriteGuard())
|
||||
favToggleAPI.Use(middleware.CSRF(cfg))
|
||||
{
|
||||
favToggleAPI.POST("/favorite", d.favoriteCtrl.ToggleFavorite)
|
||||
}
|
||||
|
||||
// --- 空间/隐私设置 API（需登录） ---
|
||||
spaceAPI := r.Group("/api/space")
|
||||
spaceAPI.Use(d.authMdw.Required())
|
||||
spaceAPI.Use(d.authMdw.BannedWriteGuard())
|
||||
spaceAPI.Use(middleware.CSRF(cfg))
|
||||
{
|
||||
spaceAPI.PUT("/privacy", d.spaceCtrl.UpdatePrivacy)
|
||||
}
|
||||
|
||||
// --- Studio 趋势 API（需登录） ---
|
||||
trendsAPI := r.Group("/api/studio")
|
||||
trendsAPI.Use(d.authMdw.Required())
|
||||
{
|
||||
trendsAPI.GET("/trends", d.studioCtrl.TrendsAPI)
|
||||
}
|
||||
setupAuthAPIRoutes(r, cfg, d)
|
||||
setupSettingsAPIRoutes(r, cfg, d)
|
||||
setupPostsAPIRoutes(r, cfg, d)
|
||||
setupCommentsAPIRoutes(r, cfg, d)
|
||||
setupStudioAPIRoutes(r, cfg, d)
|
||||
setupReactionsAPIRoutes(r, cfg, d)
|
||||
setupSocialAPIRoutes(r, cfg, d)
|
||||
}
|
||||
|
||||
27
internal/router/api_auth.go
Normal file
27
internal/router/api_auth.go
Normal file
@ -0,0 +1,27 @@
|
||||
package router
|
||||
|
||||
import (
|
||||
"metazone.cc/mce/internal/config"
|
||||
"metazone.cc/mce/internal/middleware"
|
||||
|
||||
"github.com/gin-gonic/gin"
|
||||
)
|
||||
|
||||
// setupAuthAPIRoutes 注册认证相关 API 路由
|
||||
func setupAuthAPIRoutes(r *gin.Engine, cfg *config.Config, d *dependencies) {
|
||||
api := r.Group("/api")
|
||||
api.Use(middleware.CSRF(cfg))
|
||||
{
|
||||
// 认证
|
||||
api.POST("/auth/check-email", d.authCtrl.CheckEmail)
|
||||
api.POST("/auth/register", d.authCtrl.Register)
|
||||
api.POST("/auth/login", d.authCtrl.Login)
|
||||
api.POST("/auth/confirm-restore", d.authCtrl.ConfirmRestore)
|
||||
api.POST("/auth/logout", d.authCtrl.Logout)
|
||||
api.POST("/auth/refresh", d.authCtrl.RefreshToken)
|
||||
|
||||
// 帖子公开 API（无需登录）
|
||||
api.GET("/posts", d.postCtrl.ListAPI)
|
||||
api.GET("/posts/:id", d.postCtrl.ShowAPI)
|
||||
}
|
||||
}
|
||||
31
internal/router/api_comments.go
Normal file
31
internal/router/api_comments.go
Normal file
@ -0,0 +1,31 @@
|
||||
package router
|
||||
|
||||
import (
|
||||
"metazone.cc/mce/internal/config"
|
||||
"metazone.cc/mce/internal/middleware"
|
||||
|
||||
"github.com/gin-gonic/gin"
|
||||
)
|
||||
|
||||
// setupCommentsAPIRoutes 注册评论相关 API 路由
|
||||
func setupCommentsAPIRoutes(r *gin.Engine, cfg *config.Config, d *dependencies) {
|
||||
// 公开读取
|
||||
commentsPublic := r.Group("/api/posts/:id/comments")
|
||||
{
|
||||
commentsPublic.GET("", d.commentCtrl.ListRootComments)
|
||||
commentsPublic.GET("/:root_id/replies", d.commentCtrl.ListReplies)
|
||||
}
|
||||
|
||||
// 需要登录的操作
|
||||
commentsAPI := r.Group("/api")
|
||||
commentsAPI.Use(d.authMdw.Required())
|
||||
commentsAPI.Use(d.authMdw.BannedWriteGuard())
|
||||
commentsAPI.Use(middleware.CSRF(cfg))
|
||||
{
|
||||
commentsAPI.POST("/posts/:id/comments", d.commentCtrl.CreateRoot)
|
||||
commentsAPI.POST("/comments/:id/reply", d.commentCtrl.CreateReply)
|
||||
commentsAPI.DELETE("/comments/:id", d.commentCtrl.Delete)
|
||||
commentsAPI.GET("/users/search", d.commentCtrl.SearchUsers)
|
||||
commentsAPI.POST("/comments/upload-image", d.commentCtrl.UploadImage)
|
||||
}
|
||||
}
|
||||
20
internal/router/api_posts.go
Normal file
20
internal/router/api_posts.go
Normal file
@ -0,0 +1,20 @@
|
||||
package router
|
||||
|
||||
import (
|
||||
"metazone.cc/mce/internal/config"
|
||||
"metazone.cc/mce/internal/middleware"
|
||||
|
||||
"github.com/gin-gonic/gin"
|
||||
)
|
||||
|
||||
// setupPostsAPIRoutes 注册帖子相关 API 路由
|
||||
func setupPostsAPIRoutes(r *gin.Engine, cfg *config.Config, d *dependencies) {
|
||||
postsAPI := r.Group("/api/posts")
|
||||
postsAPI.Use(d.authMdw.Required())
|
||||
postsAPI.Use(d.authMdw.BannedWriteGuard())
|
||||
postsAPI.Use(middleware.CSRF(cfg))
|
||||
{
|
||||
postsAPI.POST("/:id/submit", d.postCtrl.Submit)
|
||||
postsAPI.POST("/upload-image", d.postCtrl.UploadImage)
|
||||
}
|
||||
}
|
||||
24
internal/router/api_reactions.go
Normal file
24
internal/router/api_reactions.go
Normal file
@ -0,0 +1,24 @@
|
||||
package router
|
||||
|
||||
import (
|
||||
"metazone.cc/mce/internal/config"
|
||||
"metazone.cc/mce/internal/middleware"
|
||||
|
||||
"github.com/gin-gonic/gin"
|
||||
)
|
||||
|
||||
// setupReactionsAPIRoutes 注册赞/踩相关 API 路由
|
||||
func setupReactionsAPIRoutes(r *gin.Engine, cfg *config.Config, d *dependencies) {
|
||||
// 公开：查询反应状态
|
||||
r.GET("/api/posts/:id/reaction", d.reactionCtrl.GetReaction)
|
||||
|
||||
// 需登录：切换赞/踩
|
||||
reactionAPI := r.Group("/api/posts/:id")
|
||||
reactionAPI.Use(d.authMdw.Required())
|
||||
reactionAPI.Use(d.authMdw.BannedWriteGuard())
|
||||
reactionAPI.Use(middleware.CSRF(cfg))
|
||||
{
|
||||
reactionAPI.POST("/like", d.reactionCtrl.ToggleLike)
|
||||
reactionAPI.POST("/dislike", d.reactionCtrl.ToggleDislike)
|
||||
}
|
||||
}
|
||||
51
internal/router/api_settings.go
Normal file
51
internal/router/api_settings.go
Normal file
@ -0,0 +1,51 @@
|
||||
package router
|
||||
|
||||
import (
|
||||
"metazone.cc/mce/internal/config"
|
||||
"metazone.cc/mce/internal/middleware"
|
||||
|
||||
"github.com/gin-gonic/gin"
|
||||
)
|
||||
|
||||
// setupSettingsAPIRoutes 注册设置、消息、等级相关 API 路由
|
||||
func setupSettingsAPIRoutes(r *gin.Engine, cfg *config.Config, d *dependencies) {
|
||||
// 设置页 API
|
||||
settingsAPI := r.Group("/api/settings")
|
||||
settingsAPI.Use(d.authMdw.Required())
|
||||
settingsAPI.Use(d.authMdw.BannedWriteGuard())
|
||||
settingsAPI.Use(middleware.CSRF(cfg))
|
||||
{
|
||||
settingsAPI.PUT("/profile", d.settingsCtrl.UpdateProfile)
|
||||
settingsAPI.POST("/avatar", d.settingsCtrl.UploadAvatar)
|
||||
settingsAPI.PUT("/password", middleware.SensitiveRateLimit(d.rateLimiter), d.settingsCtrl.ChangePassword)
|
||||
settingsAPI.POST("/delete-account", middleware.SensitiveRateLimit(d.rateLimiter), d.settingsCtrl.DeleteAccount)
|
||||
settingsAPI.GET("/audit-status", d.settingsCtrl.AuditStatus)
|
||||
settingsAPI.GET("/sessions", d.settingsCtrl.ListSessions)
|
||||
settingsAPI.DELETE("/sessions/:sid", d.settingsCtrl.DestroySession)
|
||||
settingsAPI.POST("/sessions/destroy-others", d.settingsCtrl.DestroyOtherSessions)
|
||||
settingsAPI.PUT("/sessions/:sid/remark", d.settingsCtrl.UpdateSessionRemark)
|
||||
settingsAPI.GET("/notify-prefs", d.settingsCtrl.GetNotifyPrefs)
|
||||
settingsAPI.PUT("/notify-prefs", d.settingsCtrl.UpdateNotifyPref)
|
||||
}
|
||||
|
||||
// 消息中心 API
|
||||
messagesAPI := r.Group("/api/messages")
|
||||
messagesAPI.Use(d.authMdw.Required())
|
||||
messagesAPI.Use(d.authMdw.BannedWriteGuard())
|
||||
messagesAPI.Use(middleware.CSRF(cfg))
|
||||
{
|
||||
messagesAPI.GET("/unread", d.messageCtrl.UnreadCount)
|
||||
messagesAPI.POST("/:id/read", d.messageCtrl.MarkRead)
|
||||
messagesAPI.POST("/read-all", d.messageCtrl.MarkAllRead)
|
||||
}
|
||||
|
||||
// 积分/等级 API
|
||||
levelAPI := r.Group("/api/level")
|
||||
levelAPI.Use(d.authMdw.Required())
|
||||
levelAPI.Use(d.authMdw.BannedWriteGuard())
|
||||
levelAPI.Use(middleware.CSRF(cfg))
|
||||
{
|
||||
levelAPI.POST("/checkin", middleware.SensitiveRateLimit(d.rateLimiter), d.levelCtrl.CheckIn)
|
||||
levelAPI.GET("/info", d.levelCtrl.GetLevel)
|
||||
}
|
||||
}
|
||||
64
internal/router/api_social.go
Normal file
64
internal/router/api_social.go
Normal file
@ -0,0 +1,64 @@
|
||||
package router
|
||||
|
||||
import (
|
||||
"metazone.cc/mce/internal/config"
|
||||
"metazone.cc/mce/internal/middleware"
|
||||
|
||||
"github.com/gin-gonic/gin"
|
||||
)
|
||||
|
||||
// setupSocialAPIRoutes 注册关注、收藏夹、空间相关 API 路由
|
||||
func setupSocialAPIRoutes(r *gin.Engine, cfg *config.Config, d *dependencies) {
|
||||
// 关注 — 公开（Optional 认证）
|
||||
followPublic := r.Group("/api/users/:uid")
|
||||
followPublic.Use(d.authMdw.Optional())
|
||||
{
|
||||
followPublic.GET("/follow-status", d.followCtrl.GetStatus)
|
||||
followPublic.GET("/followers", d.followCtrl.Followers)
|
||||
followPublic.GET("/following", d.followCtrl.Following)
|
||||
}
|
||||
// 需登录：切换关注
|
||||
followAPI := r.Group("/api/users/:uid")
|
||||
followAPI.Use(d.authMdw.Required())
|
||||
followAPI.Use(d.authMdw.BannedWriteGuard())
|
||||
followAPI.Use(middleware.CSRF(cfg))
|
||||
{
|
||||
followAPI.POST("/follow", d.followCtrl.Toggle)
|
||||
}
|
||||
|
||||
// 收藏夹 — 公开
|
||||
r.GET("/api/posts/:id/folder-status", d.favoriteCtrl.GetPostStatus)
|
||||
r.GET("/api/folders/:id/posts", d.favoriteCtrl.ListFolderItems)
|
||||
|
||||
// 收藏夹 — 需登录
|
||||
folderAPI := r.Group("/api/folders")
|
||||
folderAPI.Use(d.authMdw.Required())
|
||||
folderAPI.Use(d.authMdw.BannedWriteGuard())
|
||||
folderAPI.Use(middleware.CSRF(cfg))
|
||||
{
|
||||
folderAPI.GET("", d.favoriteCtrl.ListFolders)
|
||||
folderAPI.POST("", d.favoriteCtrl.CreateFolder)
|
||||
folderAPI.PUT("/:id", d.favoriteCtrl.UpdateFolder)
|
||||
folderAPI.DELETE("/:id", d.favoriteCtrl.DeleteFolder)
|
||||
folderAPI.POST("/:id/posts", d.favoriteCtrl.AddToFolder)
|
||||
folderAPI.DELETE("/:id/posts/:postId", d.favoriteCtrl.RemoveFromFolder)
|
||||
}
|
||||
|
||||
// 切换收藏 Toggle
|
||||
favToggleAPI := r.Group("/api/posts/:id")
|
||||
favToggleAPI.Use(d.authMdw.Required())
|
||||
favToggleAPI.Use(d.authMdw.BannedWriteGuard())
|
||||
favToggleAPI.Use(middleware.CSRF(cfg))
|
||||
{
|
||||
favToggleAPI.POST("/favorite", d.favoriteCtrl.ToggleFavorite)
|
||||
}
|
||||
|
||||
// 空间/隐私设置
|
||||
spaceAPI := r.Group("/api/space")
|
||||
spaceAPI.Use(d.authMdw.Required())
|
||||
spaceAPI.Use(d.authMdw.BannedWriteGuard())
|
||||
spaceAPI.Use(middleware.CSRF(cfg))
|
||||
{
|
||||
spaceAPI.PUT("/privacy", d.spaceCtrl.UpdatePrivacy)
|
||||
}
|
||||
}
|
||||
43
internal/router/api_studio.go
Normal file
43
internal/router/api_studio.go
Normal file
@ -0,0 +1,43 @@
|
||||
package router
|
||||
|
||||
import (
|
||||
"metazone.cc/mce/internal/config"
|
||||
"metazone.cc/mce/internal/middleware"
|
||||
|
||||
"github.com/gin-gonic/gin"
|
||||
)
|
||||
|
||||
// setupStudioAPIRoutes 注册创作中心、域能、趋势相关 API 路由
|
||||
func setupStudioAPIRoutes(r *gin.Engine, cfg *config.Config, d *dependencies) {
|
||||
// 创作中心
|
||||
studioAPI := r.Group("/api/studio")
|
||||
studioAPI.Use(d.authMdw.Required())
|
||||
studioAPI.Use(d.authMdw.BannedWriteGuard())
|
||||
studioAPI.Use(middleware.CSRF(cfg))
|
||||
{
|
||||
studioAPI.GET("/overview", d.studioCtrl.OverviewAPI)
|
||||
studioAPI.GET("/posts", d.studioCtrl.ListPostsAPI)
|
||||
studioAPI.POST("/posts", d.studioCtrl.Create)
|
||||
studioAPI.PUT("/posts/:id", d.studioCtrl.Update)
|
||||
studioAPI.DELETE("/posts/:id", d.studioCtrl.Delete)
|
||||
studioAPI.POST("/posts/:id/submit", d.studioCtrl.Submit)
|
||||
}
|
||||
|
||||
// 域能
|
||||
energyAPI := r.Group("/api/energy")
|
||||
energyAPI.Use(d.authMdw.Required())
|
||||
energyAPI.Use(d.authMdw.BannedWriteGuard())
|
||||
energyAPI.Use(middleware.CSRF(cfg))
|
||||
{
|
||||
energyAPI.POST("/energize", d.energyCtrl.Energize)
|
||||
energyAPI.GET("/info", d.energyCtrl.GetEnergyInfo)
|
||||
energyAPI.GET("/logs", d.energyCtrl.GetEnergyLogs)
|
||||
}
|
||||
|
||||
// 趋势
|
||||
trendsAPI := r.Group("/api/studio")
|
||||
trendsAPI.Use(d.authMdw.Required())
|
||||
{
|
||||
trendsAPI.GET("/trends", d.studioCtrl.TrendsAPI)
|
||||
}
|
||||
}
|
||||
@ -14,6 +14,7 @@ import (
|
||||
func Setup(r *gin.Engine, db *gorm.DB, cfg *config.Config, siteSettings *config.SiteSettings, redisClient *redis.Client) {
|
||||
r.Use(middleware.SecurityHeaders())
|
||||
r.Use(middleware.InjectSiteInfo(siteSettings))
|
||||
r.Use(middleware.DBHealthGuard())
|
||||
|
||||
deps := buildDeps(db, cfg, siteSettings, redisClient)
|
||||
|
||||
|
||||
5
templates/MetaLab-2026/html/settings/_footer.html
Normal file
5
templates/MetaLab-2026/html/settings/_footer.html
Normal file
@ -0,0 +1,5 @@
|
||||
</main>
|
||||
</div>
|
||||
{{template "layout/footer.html" .}}
|
||||
</body>
|
||||
</html>
|
||||
56
templates/MetaLab-2026/html/settings/_header.html
Normal file
56
templates/MetaLab-2026/html/settings/_header.html
Normal file
@ -0,0 +1,56 @@
|
||||
{{template "layout/header.html" .}}
|
||||
<body>
|
||||
{{template "layout/nav.html" .}}
|
||||
<div class="settings-toast" id="settingsToast"></div>
|
||||
<div class="settings-layout">
|
||||
<aside class="settings-sidebar">
|
||||
<nav class="settings-nav">
|
||||
<a href="/settings/profile"
|
||||
class="settings-nav-item {{if eq .ActiveTab "profile"}}active{{end}}">
|
||||
<svg class="settings-nav-icon" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2">
|
||||
<circle cx="12" cy="8" r="4"/><path d="M4 20c0-4 4-7 8-7s8 3 8 7"/>
|
||||
</svg>
|
||||
个人资料
|
||||
</a>
|
||||
<a href="/settings/account"
|
||||
class="settings-nav-item {{if eq .ActiveTab "account"}}active{{end}}">
|
||||
<svg class="settings-nav-icon" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2">
|
||||
<rect x="3" y="11" width="18" height="11" rx="2" ry="2"/>
|
||||
<path d="M7 11V7a5 5 0 0 1 10 0v4"/>
|
||||
<circle cx="12" cy="16" r="1"/>
|
||||
</svg>
|
||||
账号信息
|
||||
</a>
|
||||
<a href="/settings/sessions"
|
||||
class="settings-nav-item {{if eq .ActiveTab "sessions"}}active{{end}}">
|
||||
<svg class="settings-nav-icon" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2">
|
||||
<rect x="2" y="3" width="20" height="14" rx="2" ry="2"/>
|
||||
<line x1="8" y1="21" x2="16" y2="21"/>
|
||||
<line x1="12" y1="17" x2="12" y2="21"/>
|
||||
</svg>
|
||||
登录管理
|
||||
</a>
|
||||
<a href="/settings/energy"
|
||||
class="settings-nav-item {{if eq .ActiveTab "energy"}}active{{end}}">
|
||||
<svg class="settings-nav-icon" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2">
|
||||
<polygon points="13 2 3 14 12 14 11 22 21 10 12 10 13 2"/>
|
||||
</svg>
|
||||
我的域能
|
||||
</a>
|
||||
<a href="/settings/favorites"
|
||||
class="settings-nav-item {{if eq .ActiveTab "favorites"}}active{{end}}">
|
||||
<svg class="settings-nav-icon" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2">
|
||||
<path d="M19 21l-7-5-7 5V5a2 2 0 0 1 2-2h10a2 2 0 0 1 2 2z"/>
|
||||
</svg>
|
||||
我的收藏夹
|
||||
</a>
|
||||
<a href="/settings/notify"
|
||||
class="settings-nav-item {{if eq .ActiveTab "notify"}}active{{end}}">
|
||||
<svg class="settings-nav-icon" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2">
|
||||
<path d="M18 8A6 6 0 0 0 6 8c0 7-3 9-3 9h18s-3-2-3-9"/><path d="M13.73 21a2 2 0 0 1-3.46 0"/>
|
||||
</svg>
|
||||
通知偏好
|
||||
</a>
|
||||
</nav>
|
||||
</aside>
|
||||
<main class="settings-main">
|
||||
85
templates/MetaLab-2026/html/settings/account.html
Normal file
85
templates/MetaLab-2026/html/settings/account.html
Normal file
@ -0,0 +1,85 @@
|
||||
{{template "settings/_header.html" .}}
|
||||
<!-- 账号信息 -->
|
||||
<div class="settings-card">
|
||||
<div class="settings-card-header">
|
||||
<h2>账号信息</h2>
|
||||
<p class="settings-card-desc">账号安全和基本状态</p>
|
||||
</div>
|
||||
<div class="settings-card-body">
|
||||
<div class="info-row">
|
||||
<span class="info-label">用户 ID</span>
|
||||
<span class="info-value">{{.User.ID}}</span>
|
||||
</div>
|
||||
<div class="info-row">
|
||||
<span class="info-label">邮箱</span>
|
||||
<span class="info-value">{{.User.Email}}</span>
|
||||
</div>
|
||||
<div class="info-row">
|
||||
<span class="info-label">账号状态</span>
|
||||
<span class="info-value">
|
||||
<span class="status-badge status-{{.User.Status}}">{{.StatusName}}</span>
|
||||
</span>
|
||||
</div>
|
||||
<div class="info-row">
|
||||
<span class="info-label">注册时间</span>
|
||||
<span class="info-value">{{.User.CreatedAt.Format "2006-01-02 15:04:05"}}</span>
|
||||
</div>
|
||||
{{if .User.LastLoginAt}}
|
||||
<div class="info-row">
|
||||
<span class="info-label">上次登录</span>
|
||||
<span class="info-value">{{.User.LastLoginAt.Format "2006-01-02 15:04:05"}}</span>
|
||||
</div>
|
||||
{{end}}
|
||||
<div class="info-row">
|
||||
<span class="info-label">最后更新</span>
|
||||
<span class="info-value">{{.User.UpdatedAt.Format "2006-01-02 15:04:05"}}</span>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<!-- 修改密码 -->
|
||||
<div class="settings-card">
|
||||
<div class="settings-card-header">
|
||||
<h2>修改密码</h2>
|
||||
<p class="settings-card-desc">修改密码后需重新登录</p>
|
||||
</div>
|
||||
<div class="settings-card-body">
|
||||
<div class="form-group">
|
||||
<label class="form-label" for="currentPassword">当前密码</label>
|
||||
<input type="password" id="currentPassword" class="settings-text-input" placeholder="输入当前密码" autocomplete="current-password">
|
||||
</div>
|
||||
<div class="form-group">
|
||||
<label class="form-label" for="newPassword">新密码</label>
|
||||
<input type="password" id="newPassword" class="settings-text-input" placeholder="至少 8 位，包含大小写字母和数字" autocomplete="new-password">
|
||||
</div>
|
||||
<div class="settings-card-footer">
|
||||
<button id="changePwdBtn" class="settings-save-btn">修改密码</button>
|
||||
<span class="form-hint">修改成功后需重新登录</span>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<!-- 注销账号 -->
|
||||
<div class="settings-card settings-card-danger">
|
||||
<div class="settings-card-header">
|
||||
<h2>注销账号</h2>
|
||||
<p class="settings-card-desc">账号将在 7 天后正式注销，期间可随时重新登录撤销注销</p>
|
||||
</div>
|
||||
<div class="settings-card-body">
|
||||
<div class="form-group">
|
||||
<label class="form-label" for="deletePassword">确认密码</label>
|
||||
<input type="password" id="deletePassword" class="settings-text-input" placeholder="输入密码确认" autocomplete="current-password">
|
||||
</div>
|
||||
<div class="form-group">
|
||||
<label class="form-label" for="deleteReason">注销原因（选填）</label>
|
||||
<textarea id="deleteReason" class="settings-textarea" maxlength="500" placeholder="可以告诉我们为什么要离开吗？"></textarea>
|
||||
</div>
|
||||
<div class="settings-card-footer">
|
||||
<button id="deleteAccountBtn" class="settings-danger-btn">确认注销</button>
|
||||
<span class="form-hint">此操作不可逆，请谨慎处理</span>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
{{end}}
|
||||
{{template "settings/_footer.html" .}}
|
||||
<script src="/static/js/settings-account.js?v={{assetV "/static/js/settings-account.js"}}" nonce="{{.CSPNonce}}"></script>
|
||||
29
templates/MetaLab-2026/html/settings/energy.html
Normal file
29
templates/MetaLab-2026/html/settings/energy.html
Normal file
@ -0,0 +1,29 @@
|
||||
{{template "settings/_header.html" .}}
|
||||
<!-- 我的域能 -->
|
||||
<div class="settings-card">
|
||||
<div class="settings-card-header">
|
||||
<h2>我的域能</h2>
|
||||
<p class="settings-card-desc">域能余额和经验</p>
|
||||
</div>
|
||||
<div class="settings-card-body">
|
||||
<div class="energy-summary">
|
||||
<div class="energy-stat">
|
||||
<span class="energy-label">域能余额</span>
|
||||
<span class="energy-value" id="energyBalance">加载中...</span>
|
||||
</div>
|
||||
<div class="energy-stat">
|
||||
<span class="energy-label">经验</span>
|
||||
<span class="energy-value" id="energyExp">加载中...</span>
|
||||
</div>
|
||||
<div class="energy-stat">
|
||||
<span class="energy-label">等级</span>
|
||||
<span class="energy-value" id="energyLevel">加载中...</span>
|
||||
</div>
|
||||
</div>
|
||||
<div class="energy-log-list" id="energyLogList">
|
||||
<div class="energy-log-empty">加载中...</div>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
{{template "settings/_footer.html" .}}
|
||||
<script src="/static/js/settings-energy.js?v={{assetV "/static/js/settings-energy.js"}}" nonce="{{.CSPNonce}}"></script>
|
||||
18
templates/MetaLab-2026/html/settings/favorites.html
Normal file
18
templates/MetaLab-2026/html/settings/favorites.html
Normal file
@ -0,0 +1,18 @@
|
||||
{{template "settings/_header.html" .}}
|
||||
<!-- 我的收藏夹 -->
|
||||
<div class="settings-card">
|
||||
<div class="settings-card-header">
|
||||
<h2>我的收藏夹</h2>
|
||||
<p class="settings-card-desc">管理和查看你的收藏夹</p>
|
||||
</div>
|
||||
<div class="settings-card-body">
|
||||
<div class="fav-toolbar">
|
||||
<button class="settings-save-btn" id="createFolderBtn">+ 新建收藏夹</button>
|
||||
</div>
|
||||
<div class="fav-list" id="favFolderList">
|
||||
<div class="energy-log-empty">加载中...</div>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
{{template "settings/_footer.html" .}}
|
||||
<script src="/static/js/settings-favorites.js?v={{assetV "/static/js/settings-favorites.js"}}" nonce="{{.CSPNonce}}"></script>
|
||||
13
templates/MetaLab-2026/html/settings/notify.html
Normal file
13
templates/MetaLab-2026/html/settings/notify.html
Normal file
@ -0,0 +1,13 @@
|
||||
{{template "settings/_header.html" .}}
|
||||
<!-- 通知偏好 -->
|
||||
<div class="settings-card">
|
||||
<div class="settings-card-header">
|
||||
<h2>通知偏好</h2>
|
||||
<p class="settings-card-desc">管理你的通知推送偏好，关闭后不影响通知记录存储</p>
|
||||
</div>
|
||||
<div class="settings-card-body" id="notifyPrefsBody">
|
||||
<div class="energy-log-empty">加载中...</div>
|
||||
</div>
|
||||
</div>
|
||||
{{template "settings/_footer.html" .}}
|
||||
<script src="/static/js/settings-notify.js?v={{assetV "/static/js/settings-notify.js"}}" nonce="{{.CSPNonce}}"></script>
|
||||
61
templates/MetaLab-2026/html/settings/profile.html
Normal file
61
templates/MetaLab-2026/html/settings/profile.html
Normal file
@ -0,0 +1,61 @@
|
||||
{{template "settings/_header.html" .}}
|
||||
<!-- 个人资料 -->
|
||||
<div class="settings-card">
|
||||
<div class="settings-card-header">
|
||||
<h2>个人资料</h2>
|
||||
<p class="settings-card-desc">你的公开信息和基本资料</p>
|
||||
</div>
|
||||
{{if .PendingTypes}}
|
||||
<div class="settings-audit-notice">
|
||||
<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" width="16" height="16">
|
||||
<circle cx="12" cy="12" r="10"/><line x1="12" y1="8" x2="12" y2="12"/><line x1="12" y1="16" x2="12.01" y2="16"/>
|
||||
</svg>
|
||||
<span>
|
||||
{{range $i, $t := .PendingTypes}}{{if $i}}、{{end}}{{index $.AuditTypes $t}}{{end}}审核中
|
||||
</span>
|
||||
</div>
|
||||
{{end}}
|
||||
<div class="settings-card-body">
|
||||
<div class="info-row">
|
||||
<span class="info-label">用户名</span>
|
||||
<span class="info-value">
|
||||
<input type="text" id="usernameInput" class="settings-text-input" value="{{.User.Username}}" maxlength="16" autocomplete="off" data-has-completed-rename="{{.HasCompletedRename}}">
|
||||
<span class="char-counter" id="usernameCounter"></span>
|
||||
</span>
|
||||
</div>
|
||||
<div class="info-row">
|
||||
<span class="info-label">头像</span>
|
||||
<span class="info-value">
|
||||
<div class="avatar-upload-wrap" id="avatarWrap">
|
||||
{{if .User.Avatar}}
|
||||
<img src="{{.User.Avatar}}?v={{.User.UpdatedAt.Unix}}" alt="avatar" class="avatar-preview" id="avatarPreview">
|
||||
{{else}}
|
||||
<div class="avatar-placeholder" id="avatarPreview">
|
||||
<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.5" width="24" height="24"><circle cx="12" cy="8" r="4"/><path d="M4 20c0-4 4-7 8-7s8 3 8 7"/></svg>
|
||||
</div>
|
||||
{{end}}
|
||||
<span class="avatar-hint">点击更换</span>
|
||||
</div>
|
||||
<input type="file" id="avatarInput" class="avatar-input-hidden" accept="image/jpeg,image/png,image/webp">
|
||||
</span>
|
||||
</div>
|
||||
<div class="info-row">
|
||||
<span class="info-label">个性签名</span>
|
||||
<span class="info-value">
|
||||
<textarea id="bioInput" class="settings-textarea" maxlength="128" placeholder="写一句话介绍自己...">{{.User.Bio}}</textarea>
|
||||
<div class="char-counter" id="bioCounter"></div>
|
||||
</span>
|
||||
</div>
|
||||
<div class="info-row">
|
||||
<span class="info-label">角色</span>
|
||||
<span class="info-value">
|
||||
<span class="role-tag role-{{.User.Role}}">{{.RoleName}}</span>
|
||||
</span>
|
||||
</div>
|
||||
<div class="settings-card-footer">
|
||||
<button id="saveProfileBtn" class="settings-save-btn">保存</button>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
{{template "settings/_footer.html" .}}
|
||||
<script src="/static/js/settings-profile.js?v={{assetV "/static/js/settings-profile.js"}}" nonce="{{.CSPNonce}}"></script>
|
||||
53
templates/MetaLab-2026/html/settings/sessions.html
Normal file
53
templates/MetaLab-2026/html/settings/sessions.html
Normal file
@ -0,0 +1,53 @@
|
||||
{{template "settings/_header.html" .}}
|
||||
<!-- 登录管理 -->
|
||||
<div class="settings-card">
|
||||
<div class="settings-card-header">
|
||||
<h2>登录管理</h2>
|
||||
<p class="settings-card-desc">查看和管理你的登录设备，保护账号安全</p>
|
||||
</div>
|
||||
<div class="settings-card-body">
|
||||
<div class="session-list" id="sessionList">
|
||||
{{range .Sessions}}
|
||||
<div class="session-item{{if .IsCurrent}} session-current{{end}}" data-sid="{{.ID}}">
|
||||
<div class="session-icon">
|
||||
{{if eq .DeviceInfo.Device "Mobile"}}<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" width="24" height="24"><rect x="5" y="2" width="14" height="20" rx="2" ry="2"/><line x1="12" y1="18" x2="12.01" y2="18"/></svg>
|
||||
{{else if eq .DeviceInfo.Device "Tablet"}}<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" width="24" height="24"><rect x="4" y="2" width="16" height="20" rx="2" ry="2"/><line x1="12" y1="18" x2="12.01" y2="18"/></svg>
|
||||
{{else}}<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" width="24" height="24"><rect x="2" y="3" width="20" height="14" rx="2" ry="2"/><line x1="8" y1="21" x2="16" y2="21"/><line x1="12" y1="17" x2="12" y2="21"/></svg>
|
||||
{{end}}
|
||||
</div>
|
||||
<div class="session-info">
|
||||
<div class="session-title">
|
||||
<span class="session-browser">{{.DeviceInfo.Browser}}</span>
|
||||
<span class="session-os">/ {{.DeviceInfo.OS}}</span>
|
||||
{{if .IsCurrent}}<span class="session-badge">当前设备</span>{{end}}
|
||||
{{if not .RememberMe}}<span class="session-badge session-badge-temp">临时会话</span>{{end}}
|
||||
</div>
|
||||
<div class="session-meta">
|
||||
<span class="session-ip">IP: {{.IP}}</span>
|
||||
<span class="session-time">登录于 {{.CreatedAt.Format "2006-01-02 15:04"}}</span>
|
||||
<span class="session-time">最后活动 {{.LastAccess.Format "2006-01-02 15:04"}}</span>
|
||||
{{if not .IsCurrent}}<span class="session-ttl">剩余约 {{formatTTL .TTLMinutes}}</span>{{end}}
|
||||
</div>
|
||||
<div class="session-remark-row">
|
||||
<input type="text" class="session-remark-input" value="{{.Remark}}" placeholder="添加备注（如 我的笔记本）" maxlength="32" data-sid="{{.ID}}" data-current="{{.IsCurrent}}">
|
||||
</div>
|
||||
</div>
|
||||
<div class="session-action">
|
||||
{{if not .IsCurrent}}
|
||||
<button class="session-kick-btn" data-sid="{{.ID}}">踢出</button>
|
||||
{{end}}
|
||||
</div>
|
||||
</div>
|
||||
{{end}}
|
||||
{{if not .Sessions}}
|
||||
<div class="session-empty">暂无活跃的登录会话</div>
|
||||
{{end}}
|
||||
</div>
|
||||
</div>
|
||||
<div class="settings-card-footer">
|
||||
<button id="kickOthersBtn" class="settings-danger-btn">一键踢出其他设备</button>
|
||||
<span class="form-hint">将强制退出除当前设备外的所有登录会话</span>
|
||||
</div>
|
||||
</div>
|
||||
{{template "settings/_footer.html" .}}
|
||||
<script src="/static/js/settings-sessions.js?v={{assetV "/static/js/settings-sessions.js"}}" nonce="{{.CSPNonce}}"></script>
|
||||
111
templates/MetaLab-2026/static/js/settings-account.js
Normal file
111
templates/MetaLab-2026/static/js/settings-account.js
Normal file
@ -0,0 +1,111 @@
|
||||
(function(){'use strict';
|
||||
<script nonce="{{.CSPNonce}}">
|
||||
(function () {
|
||||
'use strict';
|
||||
|
||||
var toastEl = document.getElementById('settingsToast');
|
||||
var toastTimer = null;
|
||||
|
||||
function showSettingsToast(msg, isError) {
|
||||
if (!toastEl) return;
|
||||
clearTimeout(toastTimer);
|
||||
toastEl.textContent = msg;
|
||||
toastEl.className = 'settings-toast' + (isError ? ' error' : '');
|
||||
void toastEl.offsetWidth;
|
||||
toastEl.classList.add('show');
|
||||
toastTimer = setTimeout(function () {
|
||||
toastEl.classList.remove('show');
|
||||
}, 5000);
|
||||
}
|
||||
// 修改密码
|
||||
// ---- 修改密码 ----
|
||||
var currentPwd = document.getElementById('currentPassword');
|
||||
var newPwd = document.getElementById('newPassword');
|
||||
var changePwdBtn = document.getElementById('changePwdBtn');
|
||||
if (currentPwd && newPwd && changePwdBtn) {
|
||||
changePwdBtn.addEventListener('click', function () {
|
||||
if (!currentPwd.value) {
|
||||
showSettingsToast('请输入当前密码', true);
|
||||
return;
|
||||
}
|
||||
if (!newPwd.value || !/[a-z]/.test(newPwd.value) || !/[A-Z]/.test(newPwd.value) || !/\d/.test(newPwd.value) || newPwd.value.length < 8) {
|
||||
showSettingsToast('新密码至少 8 位，包含大小写字母和数字', true);
|
||||
return;
|
||||
}
|
||||
changePwdBtn.disabled = true;
|
||||
changePwdBtn.textContent = '修改中...';
|
||||
|
||||
var xhr = new XMLHttpRequest();
|
||||
xhr.open('PUT', '/api/settings/password', true);
|
||||
xhr.setRequestHeader('Content-Type', 'application/json');
|
||||
xhr.onreadystatechange = function () {
|
||||
if (xhr.readyState !== 4) return;
|
||||
changePwdBtn.disabled = false;
|
||||
changePwdBtn.textContent = '修改密码';
|
||||
try {
|
||||
var res = JSON.parse(xhr.responseText);
|
||||
if (res.success) {
|
||||
showSettingsToast('密码已修改，请重新登录');
|
||||
currentPwd.value = '';
|
||||
newPwd.value = '';
|
||||
setTimeout(function () {
|
||||
window.location.href = '/';
|
||||
}, 2000);
|
||||
} else {
|
||||
showSettingsToast(res.message || '修改失败', true);
|
||||
}
|
||||
} catch (e) {
|
||||
showSettingsToast('修改失败', true);
|
||||
}
|
||||
};
|
||||
xhr.send(JSON.stringify({
|
||||
current_password: currentPwd.value,
|
||||
new_password: newPwd.value
|
||||
}));
|
||||
});
|
||||
}
|
||||
// 注销账号
|
||||
// ---- 注销账号 ----
|
||||
var deletePwd = document.getElementById('deletePassword');
|
||||
var deleteReason = document.getElementById('deleteReason');
|
||||
var deleteAccountBtn = document.getElementById('deleteAccountBtn');
|
||||
if (deletePwd && deleteAccountBtn) {
|
||||
deleteAccountBtn.addEventListener('click', function () {
|
||||
if (!deletePwd.value) {
|
||||
showSettingsToast('请输入密码确认', true);
|
||||
return;
|
||||
}
|
||||
showConfirm('注销账号', '确定要注销账号吗？\n\n注销后 7 天内重新登录可撤销注销，期满后将永久删除。').then(function(ok) {
|
||||
if (!ok) return;
|
||||
deleteAccountBtn.disabled = true;
|
||||
deleteAccountBtn.textContent = '注销中...';
|
||||
|
||||
var xhr = new XMLHttpRequest();
|
||||
xhr.open('POST', '/api/settings/delete-account', true);
|
||||
xhr.setRequestHeader('Content-Type', 'application/json');
|
||||
xhr.onreadystatechange = function () {
|
||||
if (xhr.readyState !== 4) return;
|
||||
deleteAccountBtn.disabled = false;
|
||||
deleteAccountBtn.textContent = '确认注销';
|
||||
try {
|
||||
var res = JSON.parse(xhr.responseText);
|
||||
if (res.success) {
|
||||
showSettingsToast(res.message || '账号已注销');
|
||||
setTimeout(function () {
|
||||
window.location.href = '/';
|
||||
}, 2000);
|
||||
} else {
|
||||
showSettingsToast(res.message || '操作失败', true);
|
||||
}
|
||||
} catch (e) {
|
||||
showSettingsToast('操作失败', true);
|
||||
}
|
||||
};
|
||||
xhr.send(JSON.stringify({
|
||||
password: deletePwd.value,
|
||||
reason: deleteReason ? deleteReason.value : ''
|
||||
}));
|
||||
});
|
||||
});
|
||||
}
|
||||
})();
|
||||
91
templates/MetaLab-2026/static/js/settings-energy.js
Normal file
91
templates/MetaLab-2026/static/js/settings-energy.js
Normal file
@ -0,0 +1,91 @@
|
||||
(function(){'use strict';
|
||||
<script nonce="{{.CSPNonce}}">
|
||||
(function () {
|
||||
'use strict';
|
||||
|
||||
var toastEl = document.getElementById('settingsToast');
|
||||
var toastTimer = null;
|
||||
|
||||
function showSettingsToast(msg, isError) {
|
||||
if (!toastEl) return;
|
||||
clearTimeout(toastTimer);
|
||||
toastEl.textContent = msg;
|
||||
toastEl.className = 'settings-toast' + (isError ? ' error' : '');
|
||||
void toastEl.offsetWidth;
|
||||
toastEl.classList.add('show');
|
||||
toastTimer = setTimeout(function () {
|
||||
toastEl.classList.remove('show');
|
||||
}, 5000);
|
||||
}
|
||||
// ===== 域能 Tab =====
|
||||
(function () {
|
||||
var balanceEl = document.getElementById('energyBalance');
|
||||
var expEl = document.getElementById('energyExp');
|
||||
var levelEl = document.getElementById('energyLevel');
|
||||
var logListEl = document.getElementById('energyLogList');
|
||||
if (!balanceEl || !logListEl) return;
|
||||
|
||||
// 获取域能信息
|
||||
fetch('/api/energy/info')
|
||||
.then(function (r) { return r.json(); })
|
||||
.then(function (d) {
|
||||
if (d.success && d.data) {
|
||||
balanceEl.textContent = d.data.energy_display + ' 域能';
|
||||
} else {
|
||||
balanceEl.textContent = '获取失败';
|
||||
}
|
||||
})
|
||||
.catch(function () { balanceEl.textContent = '获取失败'; });
|
||||
|
||||
// 获取经验和等级
|
||||
if (expEl && levelEl) {
|
||||
fetch('/api/level/info')
|
||||
.then(function (r) { return r.json(); })
|
||||
.then(function (d) {
|
||||
if (d.success && d.data) {
|
||||
expEl.textContent = d.data.exp;
|
||||
levelEl.textContent = 'Lv' + d.data.level;
|
||||
} else {
|
||||
expEl.textContent = '获取失败';
|
||||
levelEl.textContent = '获取失败';
|
||||
}
|
||||
})
|
||||
.catch(function () {
|
||||
expEl.textContent = '获取失败';
|
||||
levelEl.textContent = '获取失败';
|
||||
});
|
||||
}
|
||||
|
||||
// 获取域能流水
|
||||
fetch('/api/energy/logs?days=7&page=1&page_size=50')
|
||||
.then(function (r) { return r.json(); })
|
||||
.then(function (d) {
|
||||
if (!d.success || !d.data || !d.data.items || d.data.items.length === 0) {
|
||||
logListEl.innerHTML = '<div class="energy-log-empty">近7天无变更记录</div>';
|
||||
return;
|
||||
}
|
||||
|
||||
var html = '';
|
||||
d.data.items.forEach(function (item) {
|
||||
var cls = item.amount > 0 ? 'energy-log-plus' : 'energy-log-minus';
|
||||
var sign = item.amount > 0 ? '+' : '';
|
||||
html += '<div class="energy-log-item ' + cls + '">'
|
||||
+ '<div class="energy-log-meta">'
|
||||
+ '<span class="energy-log-type">' + escapeHtml(item.type_name) + '</span>'
|
||||
+ '<span class="energy-log-time">' + formatTime(item.created_at) + '</span>'
|
||||
+ '</div>'
|
||||
+ '<div class="energy-log-info">'
|
||||
+ '<span class="energy-log-desc">' + escapeHtml(item.description) + '</span>'
|
||||
+ '<span class="energy-log-amount">' + sign + item.amount_display + ' 域能</span>'
|
||||
+ '</div>'
|
||||
+ '</div>';
|
||||
});
|
||||
logListEl.innerHTML = html;
|
||||
})
|
||||
.catch(function () {
|
||||
logListEl.innerHTML = '<div class="energy-log-empty">加载失败</div>';
|
||||
});
|
||||
|
||||
// escapeHtml / formatTime 由 shared/utils.js 统一提供
|
||||
})();
|
||||
})();
|
||||
108
templates/MetaLab-2026/static/js/settings-favorites.js
Normal file
108
templates/MetaLab-2026/static/js/settings-favorites.js
Normal file
@ -0,0 +1,108 @@
|
||||
(function(){'use strict';
|
||||
<script nonce="{{.CSPNonce}}">
|
||||
(function () {
|
||||
'use strict';
|
||||
|
||||
var toastEl = document.getElementById('settingsToast');
|
||||
var toastTimer = null;
|
||||
|
||||
function showSettingsToast(msg, isError) {
|
||||
if (!toastEl) return;
|
||||
clearTimeout(toastTimer);
|
||||
toastEl.textContent = msg;
|
||||
toastEl.className = 'settings-toast' + (isError ? ' error' : '');
|
||||
void toastEl.offsetWidth;
|
||||
toastEl.classList.add('show');
|
||||
toastTimer = setTimeout(function () {
|
||||
toastEl.classList.remove('show');
|
||||
}, 5000);
|
||||
}
|
||||
// ===== 收藏夹 Tab =====
|
||||
(function () {
|
||||
var listEl = document.getElementById('favFolderList');
|
||||
var createBtn = document.getElementById('createFolderBtn');
|
||||
if (!listEl) return;
|
||||
|
||||
// escapeHtml / api 由 shared/utils.js 统一提供
|
||||
|
||||
function loadFolders() {
|
||||
listEl.innerHTML = '<div class="energy-log-empty">加载中...</div>';
|
||||
api('GET', '/api/folders')
|
||||
.then(function (d) {
|
||||
if (!d.success) {
|
||||
listEl.innerHTML = '<div class="energy-log-empty">' + escapeHtml(d.message || '加载失败') + '</div>';
|
||||
return;
|
||||
}
|
||||
if (!d.data || !d.data.folders || d.data.folders.length === 0) {
|
||||
listEl.innerHTML = '<div class="energy-log-empty">暂无收藏夹</div>';
|
||||
return;
|
||||
}
|
||||
var html = '';
|
||||
d.data.folders.forEach(function (f) {
|
||||
var isDefault = f.is_default ? ' (默认)' : '';
|
||||
var pub = f.is_public ? '公开' : '私密';
|
||||
html += '<div class="fav-folder-card">'
|
||||
+ '<div class="fav-folder-info">'
|
||||
+ '<span class="fav-folder-name">' + escapeHtml(f.name) + isDefault + '</span>'
|
||||
+ '<span class="fav-folder-meta">' + (f.item_count || 0) + ' 篇文章 · ' + pub + '</span>'
|
||||
+ '</div>'
|
||||
+ '<div class="fav-folder-actions">'
|
||||
+ (f.is_default ? '' : '<button class="fav-folder-del" data-id="' + f.id + '">删除</button>')
|
||||
+ '</div>'
|
||||
+ '</div>';
|
||||
});
|
||||
listEl.innerHTML = html;
|
||||
|
||||
listEl.querySelectorAll('.fav-folder-del').forEach(function (btn) {
|
||||
btn.addEventListener('click', function () {
|
||||
var id = btn.getAttribute('data-id');
|
||||
showConfirm('确认', '确定要删除此收藏夹？其中的收藏内容也将被清除。').then(function(ok) {
|
||||
if (!ok) return;
|
||||
api('DELETE', '/api/folders/' + id)
|
||||
.then(function (r) {
|
||||
if (r.success) {
|
||||
showSettingsToast('收藏夹已删除');
|
||||
loadFolders();
|
||||
} else {
|
||||
showSettingsToast(r.message || '删除失败', true);
|
||||
}
|
||||
})
|
||||
.catch(function () {
|
||||
showSettingsToast('删除失败', true);
|
||||
});
|
||||
});
|
||||
});
|
||||
});
|
||||
})
|
||||
.catch(function () {
|
||||
listEl.innerHTML = '<div class="energy-log-empty">加载失败，请刷新页面重试</div>';
|
||||
});
|
||||
}
|
||||
|
||||
if (createBtn) {
|
||||
createBtn.addEventListener('click', function () {
|
||||
showPrompt('请输入收藏夹名称（最多50个字符）：').then(function(name) {
|
||||
if (!name || !name.trim()) return;
|
||||
if (name.trim().length > 50) {
|
||||
showSettingsToast('收藏夹名称不能超过 50 个字符', true);
|
||||
return;
|
||||
}
|
||||
api('POST', '/api/folders', { name: name.trim(), description: '', is_public: false })
|
||||
.then(function (r) {
|
||||
if (r.success) {
|
||||
showSettingsToast('收藏夹已创建');
|
||||
loadFolders();
|
||||
} else {
|
||||
showSettingsToast(r.message || '创建失败', true);
|
||||
}
|
||||
})
|
||||
.catch(function () {
|
||||
showSettingsToast('创建失败', true);
|
||||
});
|
||||
});
|
||||
});
|
||||
}
|
||||
|
||||
loadFolders();
|
||||
})();
|
||||
})();
|
||||
90
templates/MetaLab-2026/static/js/settings-notify.js
Normal file
90
templates/MetaLab-2026/static/js/settings-notify.js
Normal file
@ -0,0 +1,90 @@
|
||||
(function(){'use strict';
|
||||
<script nonce="{{.CSPNonce}}">
|
||||
(function () {
|
||||
'use strict';
|
||||
|
||||
var toastEl = document.getElementById('settingsToast');
|
||||
var toastTimer = null;
|
||||
|
||||
function showSettingsToast(msg, isError) {
|
||||
if (!toastEl) return;
|
||||
clearTimeout(toastTimer);
|
||||
toastEl.textContent = msg;
|
||||
toastEl.className = 'settings-toast' + (isError ? ' error' : '');
|
||||
void toastEl.offsetWidth;
|
||||
toastEl.classList.add('show');
|
||||
toastTimer = setTimeout(function () {
|
||||
toastEl.classList.remove('show');
|
||||
}, 5000);
|
||||
}
|
||||
// ===== 通知偏好 Tab =====
|
||||
(function () {
|
||||
var bodyEl = document.getElementById('notifyPrefsBody');
|
||||
if (!bodyEl) return;
|
||||
|
||||
function loadPrefs() {
|
||||
fetch('/api/settings/notify-prefs')
|
||||
.then(function (r) { return r.json(); })
|
||||
.then(function (d) {
|
||||
if (!d.success || !d.data) {
|
||||
bodyEl.innerHTML = '<div class="energy-log-empty">加载失败</div>';
|
||||
return;
|
||||
}
|
||||
var prefs = d.data;
|
||||
var items = [
|
||||
{ key: 'comment', label: '评论通知', desc: '有人评论我的文章时通知我' },
|
||||
{ key: 'comment_reply', label: '回复通知', desc: '有人回复我的评论时通知我' },
|
||||
{ key: 'like_aggregated', label: '点赞通知', desc: '每日汇总的点赞通知' },
|
||||
{ key: 'follow', label: '关注通知', desc: '有人关注我时通知我' }
|
||||
];
|
||||
var html = '';
|
||||
items.forEach(function (item) {
|
||||
var checked = prefs[item.key] ? 'checked' : '';
|
||||
html += '<div class="notify-pref-row">'
|
||||
+ '<div class="notify-pref-info">'
|
||||
+ '<span class="notify-pref-label">' + item.label + '</span>'
|
||||
+ '<span class="notify-pref-desc">' + item.desc + '</span>'
|
||||
+ '</div>'
|
||||
+ '<label class="notify-pref-toggle">'
|
||||
+ '<input type="checkbox" class="notify-pref-cb" data-key="' + item.key + '" ' + checked + '>'
|
||||
+ '<span class="notify-pref-slider"></span>'
|
||||
+ '</label>'
|
||||
+ '</div>';
|
||||
});
|
||||
bodyEl.innerHTML = html;
|
||||
|
||||
// 绑定切换事件
|
||||
bodyEl.querySelectorAll('.notify-pref-cb').forEach(function (cb) {
|
||||
cb.addEventListener('change', function () {
|
||||
var key = cb.getAttribute('data-key');
|
||||
var enabled = cb.checked;
|
||||
var xhr = new XMLHttpRequest();
|
||||
xhr.open('PUT', '/api/settings/notify-prefs', true);
|
||||
xhr.setRequestHeader('Content-Type', 'application/json');
|
||||
xhr.onreadystatechange = function () {
|
||||
if (xhr.readyState !== 4) return;
|
||||
try {
|
||||
var r = JSON.parse(xhr.responseText);
|
||||
if (r.success) {
|
||||
showSettingsToast('通知偏好已更新');
|
||||
} else {
|
||||
showSettingsToast(r.message || '更新失败', true);
|
||||
cb.checked = !enabled;
|
||||
}
|
||||
} catch (e) {
|
||||
showSettingsToast('更新失败', true);
|
||||
cb.checked = !enabled;
|
||||
}
|
||||
};
|
||||
xhr.send(JSON.stringify({ key: key, enabled: enabled }));
|
||||
});
|
||||
});
|
||||
})
|
||||
.catch(function () {
|
||||
bodyEl.innerHTML = '<div class="energy-log-empty">加载失败</div>';
|
||||
});
|
||||
}
|
||||
|
||||
loadPrefs();
|
||||
})();
|
||||
})();
|
||||
413
templates/MetaLab-2026/static/js/settings-profile.js
Normal file
413
templates/MetaLab-2026/static/js/settings-profile.js
Normal file
@ -0,0 +1,413 @@
|
||||
(function(){'use strict';
|
||||
<script nonce="{{.CSPNonce}}">
|
||||
(function () {
|
||||
'use strict';
|
||||
|
||||
var toastEl = document.getElementById('settingsToast');
|
||||
var toastTimer = null;
|
||||
|
||||
function showSettingsToast(msg, isError) {
|
||||
if (!toastEl) return;
|
||||
clearTimeout(toastTimer);
|
||||
toastEl.textContent = msg;
|
||||
toastEl.className = 'settings-toast' + (isError ? ' error' : '');
|
||||
void toastEl.offsetWidth;
|
||||
toastEl.classList.add('show');
|
||||
toastTimer = setTimeout(function () {
|
||||
toastEl.classList.remove('show');
|
||||
}, 5000);
|
||||
}
|
||||
// ===== 个人资料 Tab =====
|
||||
(function () {
|
||||
var usernameInput = document.getElementById('usernameInput');
|
||||
var bioInput = document.getElementById('bioInput');
|
||||
var btn = document.getElementById('saveProfileBtn');
|
||||
if (!usernameInput || !bioInput || !btn) return;
|
||||
|
||||
// ---- 字符计数器 ----
|
||||
var usernameCounter = document.getElementById('usernameCounter');
|
||||
var bioCounterEl = document.getElementById('bioCounter');
|
||||
|
||||
function updateCounters() {
|
||||
if (usernameCounter) {
|
||||
usernameCounter.textContent = usernameInput.value.length + '/16';
|
||||
}
|
||||
if (bioCounterEl) {
|
||||
bioCounterEl.textContent = bioInput.value.length + '/128';
|
||||
}
|
||||
}
|
||||
|
||||
usernameInput.addEventListener('input', updateCounters);
|
||||
bioInput.addEventListener('input', updateCounters);
|
||||
updateCounters();
|
||||
|
||||
// ---- 原始值（用于判断是否变更） ----
|
||||
var origUsername = usernameInput.value.trim();
|
||||
var origBio = bioInput.value;
|
||||
var hasCompletedRename = usernameInput.getAttribute('data-has-completed-rename') === 'true';
|
||||
|
||||
// 与后端一致的合法字符集：中文、英文大小写、数字、下划线、连字符
|
||||
var usernameRe = /^[\u4e00-\u9fffa-zA-Z0-9_-]+$/;
|
||||
|
||||
btn.addEventListener('click', function () {
|
||||
var username = usernameInput.value.trim();
|
||||
var bio = bioInput.value;
|
||||
|
||||
// 用户名校验
|
||||
if (!username) {
|
||||
showSettingsToast('用户名不能为空', true);
|
||||
return;
|
||||
}
|
||||
if (username.length > 16) {
|
||||
showSettingsToast('用户名不能超过 16 个字符', true);
|
||||
return;
|
||||
}
|
||||
if (!usernameRe.test(username)) {
|
||||
showSettingsToast('用户名仅支持中英文、数字、下划线、连字符', true);
|
||||
return;
|
||||
}
|
||||
|
||||
// 个性签名校验
|
||||
if (bio.length > 128) {
|
||||
showSettingsToast('个性签名不能超过 128 个字符', true);
|
||||
return;
|
||||
}
|
||||
|
||||
// 无变更判断
|
||||
if (username === origUsername && bio === origBio) {
|
||||
showSettingsToast('内容未变更，无需保存');
|
||||
return;
|
||||
}
|
||||
|
||||
// 用户名有变更时弹出消耗确认
|
||||
if (username !== origUsername) {
|
||||
var confirmMsg = hasCompletedRename
|
||||
? '确认修改用户名？\n\n本次将消耗 6 域能，是否继续？'
|
||||
: '确认修改用户名？\n\n首次更名无需消耗域能。';
|
||||
showConfirm('修改用户名', confirmMsg).then(function(ok) {
|
||||
if (ok) doSave(username, bio);
|
||||
});
|
||||
return;
|
||||
}
|
||||
|
||||
doSave(username, bio);
|
||||
});
|
||||
|
||||
function doSave(username, bio) {
|
||||
btn.disabled = true;
|
||||
btn.textContent = '保存中...';
|
||||
|
||||
var xhr = new XMLHttpRequest();
|
||||
xhr.open('PUT', '/api/settings/profile', true);
|
||||
xhr.setRequestHeader('Content-Type', 'application/json');
|
||||
xhr.onreadystatechange = function () {
|
||||
if (xhr.readyState !== 4) return;
|
||||
btn.disabled = false;
|
||||
btn.textContent = '保存';
|
||||
|
||||
try {
|
||||
var res = JSON.parse(xhr.responseText);
|
||||
if (res.success) {
|
||||
showSettingsToast(res.message || '个人资料已更新');
|
||||
origUsername = username;
|
||||
origBio = bio;
|
||||
} else {
|
||||
showSettingsToast(res.message || '保存失败', true);
|
||||
}
|
||||
} catch (e) {
|
||||
showSettingsToast('保存失败', true);
|
||||
}
|
||||
};
|
||||
xhr.send(JSON.stringify({ username: username, bio: bio }));
|
||||
}
|
||||
|
||||
// ---- 头像裁切上传 ----
|
||||
var avatarWrap = document.getElementById('avatarWrap');
|
||||
var avatarInput = document.getElementById('avatarInput');
|
||||
var avatarPreview = document.getElementById('avatarPreview');
|
||||
var cropOverlay = document.getElementById('cropOverlay');
|
||||
var cropStage = document.getElementById('cropStage');
|
||||
var cropImageEl = document.getElementById('cropImageEl');
|
||||
var cropFrame = document.getElementById('cropFrame');
|
||||
var cropMask = document.getElementById('cropMask');
|
||||
var cropCancelBtn = document.getElementById('cropCancelBtn');
|
||||
var cropConfirmBtn = document.getElementById('cropConfirmBtn');
|
||||
|
||||
var pendingFile = null;
|
||||
var imgNW, imgNH; // 原图像素尺寸
|
||||
var imgDW, imgDH; // 图片缩放后显示尺寸（zoom=1 基准）
|
||||
var zoom = 1; // 图片缩放系数
|
||||
var minZoom = 1; // 最小缩放系数（超大图限制选区不超过 3840px）
|
||||
var panX = 0, panY = 0; // 图片平移偏移量
|
||||
var fSize, fLeft, fTop; // 裁切框的固定屏幕像素：边长、左、顶
|
||||
var CROP_MAX_PX = 3840; // 选区最大像素限制
|
||||
|
||||
// 更新裁切框固定参数（图片加载时计算一次，之后不变）
|
||||
function initFrame() {
|
||||
var sw = cropStage.clientWidth, sh = cropStage.clientHeight;
|
||||
fSize = Math.min(imgDW, imgDH); // 短边长度填满可见区域
|
||||
fLeft = Math.round((sw - fSize) / 2);
|
||||
fTop = Math.round((sh - fSize) / 2);
|
||||
}
|
||||
|
||||
// 约束 panX/panY，确保裁切框始终在图片范围内
|
||||
function clampPan() {
|
||||
var sw = cropStage.clientWidth, sh = cropStage.clientHeight;
|
||||
var iw = imgDW * zoom, ih = imgDH * zoom;
|
||||
var cx = Math.round((sw - iw) / 2); // 图片居中时的基准偏移
|
||||
var cy = Math.round((sh - ih) / 2);
|
||||
panX = Math.max(fLeft + fSize - cx - iw, Math.min(panX, fLeft - cx));
|
||||
panY = Math.max(fTop + fSize - cy - ih, Math.min(panY, fTop - cy));
|
||||
}
|
||||
|
||||
function renderCrop() {
|
||||
var sw = cropStage.clientWidth, sh = cropStage.clientHeight;
|
||||
var iw = imgDW * zoom, ih = imgDH * zoom;
|
||||
var ox = Math.round((sw - iw) / 2) + panX;
|
||||
var oy = Math.round((sh - ih) / 2) + panY;
|
||||
|
||||
cropImageEl.style.width = iw + 'px';
|
||||
cropImageEl.style.height = ih + 'px';
|
||||
cropImageEl.style.left = ox + 'px';
|
||||
cropImageEl.style.top = oy + 'px';
|
||||
|
||||
cropFrame.style.left = fLeft + 'px';
|
||||
cropFrame.style.top = fTop + 'px';
|
||||
cropFrame.style.width = fSize + 'px';
|
||||
cropFrame.style.height = fSize + 'px';
|
||||
|
||||
cropMask.style.left = fLeft + 'px';
|
||||
cropMask.style.top = fTop + 'px';
|
||||
cropMask.style.width = fSize + 'px';
|
||||
cropMask.style.height = fSize + 'px';
|
||||
|
||||
// 实时显示选区像素尺寸
|
||||
var p = getCropParams();
|
||||
var infoEl = document.getElementById('cropInfo');
|
||||
if (infoEl) infoEl.textContent = p.size + ' × ' + p.size + ' px';
|
||||
}
|
||||
|
||||
function openCrop(file) {
|
||||
var reader = new FileReader();
|
||||
reader.onload = function (e) {
|
||||
cropImageEl.src = e.target.result;
|
||||
cropImageEl.onload = function () {
|
||||
imgNW = cropImageEl.naturalWidth;
|
||||
imgNH = cropImageEl.naturalHeight;
|
||||
var sw = cropStage.clientWidth, sh = cropStage.clientHeight;
|
||||
var fit = Math.min(sw / imgNW, sh / imgNH);
|
||||
imgDW = Math.round(imgNW * fit);
|
||||
imgDH = Math.round(imgNH * fit);
|
||||
// 限制选框最大像素：原图短边超过 3840 时，抬高最小缩放
|
||||
minZoom = Math.min(imgNW, imgNH) > CROP_MAX_PX
|
||||
? Math.min(imgNW, imgNH) / CROP_MAX_PX
|
||||
: 1;
|
||||
zoom = minZoom;
|
||||
panX = 0;
|
||||
panY = 0;
|
||||
initFrame();
|
||||
renderCrop();
|
||||
};
|
||||
};
|
||||
reader.readAsDataURL(file);
|
||||
cropOverlay.classList.add('active');
|
||||
}
|
||||
|
||||
function closeCrop() {
|
||||
cropOverlay.classList.remove('active');
|
||||
avatarInput.value = '';
|
||||
pendingFile = null;
|
||||
}
|
||||
|
||||
function getCropParams() {
|
||||
var sw = cropStage.clientWidth, sh = cropStage.clientHeight;
|
||||
var iw = imgDW * zoom, ih = imgDH * zoom;
|
||||
var ox = Math.round((sw - iw) / 2) + panX;
|
||||
var oy = Math.round((sh - ih) / 2) + panY;
|
||||
var cx = (fLeft + fSize / 2 - ox) / zoom;
|
||||
var cy = (fTop + fSize / 2 - oy) / zoom;
|
||||
var cs = fSize / zoom;
|
||||
var sx = imgNW / imgDW, sy = imgNH / imgDH;
|
||||
return {
|
||||
x: Math.round((cx - cs / 2) * sx),
|
||||
y: Math.round((cy - cs / 2) * sy),
|
||||
size: Math.round(cs * sx)
|
||||
};
|
||||
}
|
||||
|
||||
// ---- 图片平移 ----
|
||||
var panning = false, panStartX = 0, panStartY = 0, panInitX = 0, panInitY = 0;
|
||||
|
||||
function startPan(clientX, clientY) {
|
||||
panning = true;
|
||||
panStartX = clientX;
|
||||
panStartY = clientY;
|
||||
panInitX = panX;
|
||||
panInitY = panY;
|
||||
cropStage.style.cursor = 'grabbing';
|
||||
}
|
||||
|
||||
function movePan(clientX, clientY) {
|
||||
panX = panInitX + (clientX - panStartX);
|
||||
panY = panInitY + (clientY - panStartY);
|
||||
clampPan();
|
||||
renderCrop();
|
||||
}
|
||||
|
||||
cropStage.addEventListener('mousedown', function (e) {
|
||||
e.preventDefault();
|
||||
startPan(e.clientX, e.clientY);
|
||||
});
|
||||
document.addEventListener('mousemove', function (e) {
|
||||
if (!panning) return;
|
||||
movePan(e.clientX, e.clientY);
|
||||
});
|
||||
document.addEventListener('mouseup', function () {
|
||||
panning = false;
|
||||
cropStage.style.cursor = 'grab';
|
||||
});
|
||||
|
||||
cropStage.addEventListener('touchstart', function (e) {
|
||||
e.preventDefault();
|
||||
var t = e.touches[0];
|
||||
startPan(t.clientX, t.clientY);
|
||||
});
|
||||
document.addEventListener('touchmove', function (e) {
|
||||
if (!panning) return;
|
||||
var t = e.touches[0];
|
||||
movePan(t.clientX, t.clientY);
|
||||
}, { passive: true });
|
||||
document.addEventListener('touchend', function () {
|
||||
panning = false;
|
||||
cropStage.style.cursor = 'grab';
|
||||
});
|
||||
|
||||
cropStage.addEventListener('wheel', function (e) {
|
||||
e.preventDefault();
|
||||
if (panning) return;
|
||||
var newZoom = Math.max(minZoom, Math.min(zoom * (e.deltaY < 0 ? 1.1 : 1 / 1.1), 3));
|
||||
if (newZoom === zoom) return;
|
||||
zoom = newZoom;
|
||||
clampPan();
|
||||
renderCrop();
|
||||
}, { passive: false });
|
||||
|
||||
cropCancelBtn.addEventListener('click', closeCrop);
|
||||
cropOverlay.addEventListener('click', function (e) {
|
||||
if (e.target === cropOverlay) closeCrop();
|
||||
});
|
||||
|
||||
// 客户端裁剪 + 压缩：Canvas 裁出选区并一步到位缩放到 512px，上传体积最小
|
||||
function cropOnClient(file, x, y, size) {
|
||||
return new Promise(function (resolve) {
|
||||
var url = URL.createObjectURL(file);
|
||||
var img = new Image();
|
||||
img.onload = function () {
|
||||
URL.revokeObjectURL(url);
|
||||
var out = 512; // 直接缩放到服务端目标输出尺寸
|
||||
var canvas = document.createElement('canvas');
|
||||
canvas.width = out;
|
||||
canvas.height = out;
|
||||
var ctx = canvas.getContext('2d');
|
||||
ctx.drawImage(img, x, y, size, size, 0, 0, out, out);
|
||||
canvas.toBlob(function (blob) {
|
||||
resolve({
|
||||
file: new File([blob], 'avatar.jpg', { type: blob.type || 'image/jpeg' }),
|
||||
cropX: 0,
|
||||
cropY: 0,
|
||||
cropSize: out
|
||||
});
|
||||
}, 'image/jpeg', 0.88);
|
||||
};
|
||||
img.onerror = function () {
|
||||
URL.revokeObjectURL(url);
|
||||
// Canvas 处理失败时回退：直接上传原文件 + 原坐标
|
||||
resolve({ file: file, cropX: x, cropY: y, cropSize: size });
|
||||
};
|
||||
img.src = url;
|
||||
});
|
||||
}
|
||||
|
||||
cropConfirmBtn.addEventListener('click', function () {
|
||||
if (!pendingFile) return;
|
||||
var params = getCropParams();
|
||||
|
||||
cropConfirmBtn.disabled = true;
|
||||
cropConfirmBtn.textContent = '处理中...';
|
||||
showSettingsToast('上传中...');
|
||||
|
||||
cropOnClient(pendingFile, params.x, params.y, params.size).then(function (result) {
|
||||
var formData = new FormData();
|
||||
formData.append('avatar', result.file, result.file.name);
|
||||
formData.append('crop_x', result.cropX);
|
||||
formData.append('crop_y', result.cropY);
|
||||
formData.append('crop_size', result.cropSize);
|
||||
|
||||
var xhr = new XMLHttpRequest();
|
||||
xhr.open('POST', '/api/settings/avatar', true);
|
||||
xhr.onreadystatechange = function () {
|
||||
if (xhr.readyState !== 4) return;
|
||||
cropConfirmBtn.disabled = false;
|
||||
cropConfirmBtn.textContent = '确认';
|
||||
closeCrop();
|
||||
|
||||
try {
|
||||
var res = JSON.parse(xhr.responseText);
|
||||
if (res.success) {
|
||||
showSettingsToast(res.message || '头像已更新');
|
||||
var newAvatarUrl = res.data && res.data.url && (res.data.url + '?t=' + Date.now());
|
||||
if (newAvatarUrl && avatarPreview.tagName === 'IMG') {
|
||||
avatarPreview.src = newAvatarUrl;
|
||||
}
|
||||
// 同步更新 NAV 头像
|
||||
if (newAvatarUrl) {
|
||||
var navLink = document.querySelector('.nav-avatar-link');
|
||||
if (navLink) {
|
||||
var navImg = navLink.querySelector('img.nav-avatar');
|
||||
if (navImg) {
|
||||
navImg.src = newAvatarUrl;
|
||||
navImg.style.display = '';
|
||||
var fb = navLink.querySelector('.nav-avatar-default');
|
||||
if (fb) fb.style.display = 'none';
|
||||
} else {
|
||||
var fb2 = navLink.querySelector('.nav-avatar-default');
|
||||
if (fb2) {
|
||||
var img = document.createElement('img');
|
||||
img.src = newAvatarUrl;
|
||||
img.alt = '';
|
||||
img.className = 'nav-avatar';
|
||||
img.onerror = function() { this.style.display = 'none'; this.nextElementSibling.style.display = 'flex'; };
|
||||
navLink.insertBefore(img, fb2);
|
||||
fb2.style.display = 'none';
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
} else {
|
||||
showSettingsToast(res.message || '上传失败', true);
|
||||
}
|
||||
} catch (err) {
|
||||
showSettingsToast('上传失败', true);
|
||||
}
|
||||
};
|
||||
xhr.send(formData);
|
||||
}).catch(function () {
|
||||
cropConfirmBtn.disabled = false;
|
||||
cropConfirmBtn.textContent = '确认';
|
||||
showSettingsToast('处理失败，请重试', true);
|
||||
});
|
||||
});
|
||||
|
||||
if (avatarWrap && avatarInput) {
|
||||
avatarWrap.addEventListener('click', function () {
|
||||
avatarInput.click();
|
||||
});
|
||||
avatarInput.addEventListener('change', function () {
|
||||
var file = avatarInput.files[0];
|
||||
if (!file) return;
|
||||
pendingFile = file;
|
||||
openCrop(file);
|
||||
});
|
||||
}
|
||||
})(); // 结束个人资料 Tab 子 IIFE
|
||||
})();
|
||||
151
templates/MetaLab-2026/static/js/settings-sessions.js
Normal file
151
templates/MetaLab-2026/static/js/settings-sessions.js
Normal file
@ -0,0 +1,151 @@
|
||||
(function(){'use strict';
|
||||
<script nonce="{{.CSPNonce}}">
|
||||
(function () {
|
||||
'use strict';
|
||||
|
||||
var toastEl = document.getElementById('settingsToast');
|
||||
var toastTimer = null;
|
||||
|
||||
function showSettingsToast(msg, isError) {
|
||||
if (!toastEl) return;
|
||||
clearTimeout(toastTimer);
|
||||
toastEl.textContent = msg;
|
||||
toastEl.className = 'settings-toast' + (isError ? ' error' : '');
|
||||
void toastEl.offsetWidth;
|
||||
toastEl.classList.add('show');
|
||||
toastTimer = setTimeout(function () {
|
||||
toastEl.classList.remove('show');
|
||||
}, 5000);
|
||||
}
|
||||
// ===== 登录管理 Tab =====
|
||||
(function () {
|
||||
var kickBtns = document.querySelectorAll('.session-kick-btn');
|
||||
var kickOthersBtn = document.getElementById('kickOthersBtn');
|
||||
var remarkInputs = document.querySelectorAll('.session-remark-input');
|
||||
if (!kickBtns.length && !kickOthersBtn && !remarkInputs.length) return;
|
||||
|
||||
// ---- 踢出单个设备 ----
|
||||
kickBtns.forEach(function (btn) {
|
||||
btn.addEventListener('click', function () {
|
||||
var sid = btn.getAttribute('data-sid');
|
||||
if (!sid) return;
|
||||
showConfirm('确认', '确定要踢出该设备吗？').then(function(ok) {
|
||||
if (!ok) return;
|
||||
btn.disabled = true;
|
||||
btn.textContent = '踢出中...';
|
||||
|
||||
var xhr = new XMLHttpRequest();
|
||||
xhr.open('DELETE', '/api/settings/sessions/' + encodeURIComponent(sid), true);
|
||||
xhr.setRequestHeader('Content-Type', 'application/json');
|
||||
xhr.onreadystatechange = function () {
|
||||
if (xhr.readyState !== 4) return;
|
||||
btn.disabled = false;
|
||||
btn.textContent = '踢出';
|
||||
try {
|
||||
var res = JSON.parse(xhr.responseText);
|
||||
if (res.success) {
|
||||
showSettingsToast(res.message || '已踢出该设备');
|
||||
var item = btn.closest('.session-item');
|
||||
if (item) {
|
||||
item.style.transition = 'opacity .3s ease, transform .3s ease';
|
||||
item.style.opacity = '0';
|
||||
item.style.transform = 'translateX(20px)';
|
||||
setTimeout(function () { item.remove(); }, 300);
|
||||
}
|
||||
} else {
|
||||
showSettingsToast(res.message || '操作失败', true);
|
||||
}
|
||||
} catch (e) {
|
||||
showSettingsToast('操作失败', true);
|
||||
}
|
||||
};
|
||||
xhr.send();
|
||||
});
|
||||
});
|
||||
});
|
||||
|
||||
// ---- 一键踢出其他设备 ----
|
||||
if (kickOthersBtn) {
|
||||
kickOthersBtn.addEventListener('click', function () {
|
||||
var otherCount = document.querySelectorAll('.session-item:not(.session-current)').length;
|
||||
if (otherCount === 0) {
|
||||
showSettingsToast('没有其他在线设备');
|
||||
return;
|
||||
}
|
||||
showConfirm('确认', '确定要踢出所有其他设备（共 ' + otherCount + ' 台）吗？').then(function(ok) {
|
||||
if (!ok) return;
|
||||
kickOthersBtn.disabled = true;
|
||||
kickOthersBtn.textContent = '处理中...';
|
||||
|
||||
var xhr = new XMLHttpRequest();
|
||||
xhr.open('POST', '/api/settings/sessions/destroy-others', true);
|
||||
xhr.setRequestHeader('Content-Type', 'application/json');
|
||||
xhr.onreadystatechange = function () {
|
||||
if (xhr.readyState !== 4) return;
|
||||
kickOthersBtn.disabled = false;
|
||||
kickOthersBtn.textContent = '一键踢出其他设备';
|
||||
try {
|
||||
var res = JSON.parse(xhr.responseText);
|
||||
if (res.success) {
|
||||
showSettingsToast(res.message || '已踢出所有其他设备');
|
||||
var others = document.querySelectorAll('.session-item:not(.session-current)');
|
||||
others.forEach(function (item, i) {
|
||||
setTimeout(function () {
|
||||
item.style.transition = 'opacity .3s ease, transform .3s ease';
|
||||
item.style.opacity = '0';
|
||||
item.style.transform = 'translateX(20px)';
|
||||
setTimeout(function () { item.remove(); }, 300);
|
||||
}, i * 100);
|
||||
});
|
||||
} else {
|
||||
showSettingsToast(res.message || '操作失败', true);
|
||||
}
|
||||
} catch (e) {
|
||||
showSettingsToast('操作失败', true);
|
||||
}
|
||||
};
|
||||
xhr.send();
|
||||
});
|
||||
});
|
||||
}
|
||||
|
||||
// ---- 备注保存 ----
|
||||
var remarkTimers = {};
|
||||
remarkInputs.forEach(function (input) {
|
||||
input.addEventListener('blur', function () {
|
||||
var sid = input.getAttribute('data-sid');
|
||||
var remark = input.value.trim();
|
||||
if (!sid) return;
|
||||
saveRemark(sid, remark);
|
||||
});
|
||||
input.addEventListener('keydown', function (e) {
|
||||
if (e.key === 'Enter') {
|
||||
input.blur();
|
||||
}
|
||||
});
|
||||
});
|
||||
|
||||
function saveRemark(sid, remark) {
|
||||
if (remarkTimers[sid]) clearTimeout(remarkTimers[sid]);
|
||||
remarkTimers[sid] = setTimeout(function () {
|
||||
var xhr = new XMLHttpRequest();
|
||||
xhr.open('PUT', '/api/settings/sessions/' + encodeURIComponent(sid) + '/remark', true);
|
||||
xhr.setRequestHeader('Content-Type', 'application/json');
|
||||
xhr.onreadystatechange = function () {
|
||||
if (xhr.readyState !== 4) return;
|
||||
try {
|
||||
var res = JSON.parse(xhr.responseText);
|
||||
if (res.success) {
|
||||
showSettingsToast('备注已保存');
|
||||
} else {
|
||||
showSettingsToast(res.message || '保存失败', true);
|
||||
}
|
||||
} catch (e) {
|
||||
showSettingsToast('保存失败', true);
|
||||
}
|
||||
};
|
||||
xhr.send(JSON.stringify({ remark: remark }));
|
||||
}, 500);
|
||||
}
|
||||
})();
|
||||
})();
|
||||
@ -68,7 +68,7 @@
|
||||
评论管理
|
||||
</a>
|
||||
{{if .CanManageSettings}}
|
||||
<a href="/admin/site-settings" class="sidebar-item {{if eq .CurrentPath "/admin/site-settings"}}active{{end}}">
|
||||
<a href="/admin/settings/brand" class="sidebar-item {{if or (eq .CurrentPath "/admin/site-settings") (eq .CurrentPath "/admin/settings/brand") (eq .CurrentPath "/admin/settings/security") (eq .CurrentPath "/admin/settings/registration") (eq .CurrentPath "/admin/settings/content")}}active{{end}}">
|
||||
<span class="sidebar-icon"><svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><circle cx="12" cy="12" r="3"/><path d="M19.4 15a1.65 1.65 0 0 0 .33 1.82l.06.06a2 2 0 0 1-2.83 2.83l-.06-.06a1.65 1.65 0 0 0-1.82-.33 1.65 1.65 0 0 0-1 1.51V21a2 2 0 0 1-4 0v-.09A1.65 1.65 0 0 0 9 19.4a1.65 1.65 0 0 0-1.82.33l-.06.06a2 2 0 0 1-2.83-2.83l.06-.06A1.65 1.65 0 0 0 4.68 15a1.65 1.65 0 0 0-1.51-1H3a2 2 0 0 1 0-4h.09A1.65 1.65 0 0 0 4.6 9a1.65 1.65 0 0 0-.33-1.82l-.06-.06a2 2 0 0 1 2.83-2.83l.06.06A1.65 1.65 0 0 0 9 4.68a1.65 1.65 0 0 0 1-1.51V3a2 2 0 0 1 4 0v.09a1.65 1.65 0 0 0 1 1.51 1.65 1.65 0 0 0 1.82-.33l.06-.06a2 2 0 0 1 2.83 2.83l-.06.06A1.65 1.65 0 0 0 19.4 9a1.65 1.65 0 0 0 1.51 1H21a2 2 0 0 1 0 4h-.09a1.65 1.65 0 0 0-1.51 1z"/></svg></span>
|
||||
站点设置
|
||||
</a>
|
||||
|
||||
6
templates/admin/html/site-settings/_menu.html
Normal file
6
templates/admin/html/site-settings/_menu.html
Normal file
@ -0,0 +1,6 @@
|
||||
<div class="settings-subnav">
|
||||
<a href="/admin/settings/brand" class="subnav-item {{if eq .ActiveSetting "brand"}}active{{end}}">品牌与合规</a>
|
||||
<a href="/admin/settings/security" class="subnav-item {{if eq .ActiveSetting "security"}}active{{end}}">安全与维护</a>
|
||||
<a href="/admin/settings/registration" class="subnav-item {{if eq .ActiveSetting "registration"}}active{{end}}">注册策略</a>
|
||||
<a href="/admin/settings/content" class="subnav-item {{if eq .ActiveSetting "content"}}active{{end}}">审核与内容</a>
|
||||
</div>
|
||||
152
templates/admin/html/site-settings/brand.html
Normal file
152
templates/admin/html/site-settings/brand.html
Normal file
@ -0,0 +1,152 @@
|
||||
{{template "admin/layout/base.html" .}}
|
||||
<div class="page-header">
|
||||
<h1>站点设置</h1>
|
||||
<p class="page-desc">管理站点基本配置和合规信息</p>
|
||||
</div>
|
||||
|
||||
{{template "admin/site-settings/_menu.html" .}}
|
||||
|
||||
<!-- 基本设置 -->
|
||||
<div class="settings-section">
|
||||
<div class="section-title">基本设置</div>
|
||||
<div class="section-body">
|
||||
<div class="setting-item">
|
||||
<div class="setting-info">
|
||||
<span class="setting-label">站点名称</span>
|
||||
<span class="setting-desc">全站品牌名（导航栏、标题、页脚等位置）</span>
|
||||
</div>
|
||||
<div class="setting-input-wrap">
|
||||
<input type="text" id="setting-site-name" class="setting-input" placeholder="MetaLab" value="{{.SiteName}}">
|
||||
<button class="btn btn-sm btn-primary btn-save" data-key="site.name" data-input="setting-site-name">保存</button>
|
||||
</div>
|
||||
</div>
|
||||
<div class="setting-item">
|
||||
<div class="setting-info">
|
||||
<span class="setting-label">站点标语</span>
|
||||
<span class="setting-desc">首页 Hero 区域的副标题</span>
|
||||
</div>
|
||||
<div class="setting-input-wrap">
|
||||
<input type="text" id="setting-site-tagline" class="setting-input" placeholder="下一代开发者社区" value="{{.SiteTagline}}">
|
||||
<button class="btn btn-sm btn-primary btn-save" data-key="site.tagline" data-input="setting-site-tagline">保存</button>
|
||||
</div>
|
||||
</div>
|
||||
<div class="setting-item">
|
||||
<div class="setting-info">
|
||||
<span class="setting-label">联系邮箱</span>
|
||||
<span class="setting-desc">申诉/联系邮箱，显示在社区准则等页面</span>
|
||||
</div>
|
||||
<div class="setting-input-wrap">
|
||||
<input type="text" id="setting-site-email" class="setting-input" placeholder="metazone@foxmail.com" value="{{.ContactEmail}}">
|
||||
<button class="btn btn-sm btn-primary btn-save" data-key="site.contact_email" data-input="setting-site-email">保存</button>
|
||||
</div>
|
||||
</div>
|
||||
<div class="setting-item">
|
||||
<div class="setting-info">
|
||||
<span class="setting-label">附加信息</span>
|
||||
<span class="setting-desc">页脚附加信息，留空则隐藏（如 "Framework: MetaGenesis"）</span>
|
||||
</div>
|
||||
<div class="setting-input-wrap">
|
||||
<input type="text" id="setting-site-framework" class="setting-input" placeholder="留空则不显示" value="{{.Framework}}">
|
||||
<button class="btn btn-sm btn-primary btn-save" data-key="site.framework" data-input="setting-site-framework">保存</button>
|
||||
</div>
|
||||
</div>
|
||||
<div class="setting-item">
|
||||
<div class="setting-info">
|
||||
<span class="setting-label">版权起始年份</span>
|
||||
<span class="setting-desc">页脚版权标起始年（如 2024 → © 2024-当前年）</span>
|
||||
</div>
|
||||
<div class="setting-input-wrap">
|
||||
<input type="text" id="setting-site-copyright" class="setting-input" placeholder="2024" value="{{.CopyrightStart}}">
|
||||
<button class="btn btn-sm btn-primary btn-save" data-key="site.copyright_start" data-input="setting-site-copyright">保存</button>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<!-- 合规信息 -->
|
||||
<div class="settings-section">
|
||||
<div class="section-title">合规信息</div>
|
||||
<div class="section-body">
|
||||
<div class="setting-item">
|
||||
<div class="setting-info">
|
||||
<span class="setting-label">运营主体</span>
|
||||
<span class="setting-desc">页脚展示的运营方名称</span>
|
||||
</div>
|
||||
<div class="setting-input-wrap">
|
||||
<input type="text" id="setting-site-operator" class="setting-input" placeholder="留空则不显示" value="{{.OperatorName}}">
|
||||
<button class="btn btn-sm btn-primary btn-save" data-key="site.operator_name" data-input="setting-site-operator">保存</button>
|
||||
</div>
|
||||
</div>
|
||||
<div class="setting-item">
|
||||
<div class="setting-info">
|
||||
<span class="setting-label">隐私政策</span>
|
||||
<span class="setting-desc">纯手写 HTML，如 <a href="/privacy">隐私政策</a></span>
|
||||
</div>
|
||||
<div class="setting-input-wrap">
|
||||
<input type="text" id="setting-site-privacy" class="setting-input" placeholder="留空则不显示" value="{{.PrivacyURL}}">
|
||||
<button class="btn btn-sm btn-primary btn-save" data-key="site.privacy_url" data-input="setting-site-privacy">保存</button>
|
||||
</div>
|
||||
</div>
|
||||
<div class="setting-item">
|
||||
<div class="setting-info">
|
||||
<span class="setting-label">服务条款</span>
|
||||
<span class="setting-desc">纯手写 HTML，如 <a href="/terms">服务条款</a></span>
|
||||
</div>
|
||||
<div class="setting-input-wrap">
|
||||
<input type="text" id="setting-site-terms" class="setting-input" placeholder="留空则不显示" value="{{.TermsURL}}">
|
||||
<button class="btn btn-sm btn-primary btn-save" data-key="site.terms_url" data-input="setting-site-terms">保存</button>
|
||||
</div>
|
||||
</div>
|
||||
<div class="setting-item">
|
||||
<div class="setting-info">
|
||||
<span class="setting-label">ICP 备案</span>
|
||||
<span class="setting-desc">纯手写 HTML，如 <a href="https://beian.miit.gov.cn">京ICP备XXXX号</a></span>
|
||||
</div>
|
||||
<div class="setting-input-wrap">
|
||||
<input type="text" id="setting-site-icp" class="setting-input" placeholder="留空则不显示" value="{{.ICPNumber}}">
|
||||
<button class="btn btn-sm btn-primary btn-save" data-key="site.icp_number" data-input="setting-site-icp">保存</button>
|
||||
</div>
|
||||
</div>
|
||||
<div class="setting-item">
|
||||
<div class="setting-info">
|
||||
<span class="setting-label">ICP 经营许可证</span>
|
||||
<span class="setting-desc">纯手写 HTML，留空则不显示</span>
|
||||
</div>
|
||||
<div class="setting-input-wrap">
|
||||
<input type="text" id="setting-site-icp-license" class="setting-input" placeholder="留空则不显示" value="{{.ICPLicense}}">
|
||||
<button class="btn btn-sm btn-primary btn-save" data-key="site.icp_license" data-input="setting-site-icp-license">保存</button>
|
||||
</div>
|
||||
</div>
|
||||
<div class="setting-item">
|
||||
<div class="setting-info">
|
||||
<span class="setting-label">公安备案</span>
|
||||
<span class="setting-desc">纯手写 HTML，留空则不显示</span>
|
||||
</div>
|
||||
<div class="setting-input-wrap">
|
||||
<input type="text" id="setting-site-police" class="setting-input" placeholder="留空则不显示" value="{{.PoliceNumber}}">
|
||||
<button class="btn btn-sm btn-primary btn-save" data-key="site.police_number" data-input="setting-site-police">保存</button>
|
||||
</div>
|
||||
</div>
|
||||
<div class="setting-item">
|
||||
<div class="setting-info">
|
||||
<span class="setting-label">文网文</span>
|
||||
<span class="setting-desc">纯手写 HTML，留空则不显示</span>
|
||||
</div>
|
||||
<div class="setting-input-wrap">
|
||||
<input type="text" id="setting-site-wenwangwen" class="setting-input" placeholder="留空则不显示" value="{{.WenWangWen}}">
|
||||
<button class="btn btn-sm btn-primary btn-save" data-key="site.wenwangwen" data-input="setting-site-wenwangwen">保存</button>
|
||||
</div>
|
||||
</div>
|
||||
<div class="setting-item">
|
||||
<div class="setting-info">
|
||||
<span class="setting-label">算法备案</span>
|
||||
<span class="setting-desc">纯手写 HTML，留空则不显示</span>
|
||||
</div>
|
||||
<div class="setting-input-wrap">
|
||||
<input type="text" id="setting-site-algorithm-filing" class="setting-input" placeholder="留空则不显示" value="{{.AlgorithmFiling}}">
|
||||
<button class="btn btn-sm btn-primary btn-save" data-key="site.algorithm_filing" data-input="setting-site-algorithm-filing">保存</button>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
{{template "admin/layout/footer.html" .}}
|
||||
83
templates/admin/html/site-settings/content.html
Normal file
83
templates/admin/html/site-settings/content.html
Normal file
@ -0,0 +1,83 @@
|
||||
{{template "admin/layout/base.html" .}}
|
||||
<div class="page-header">
|
||||
<h1>站点设置</h1>
|
||||
<p class="page-desc">审核配置与内容管理</p>
|
||||
</div>
|
||||
|
||||
{{template "admin/site-settings/_menu.html" .}}
|
||||
|
||||
<!-- 审核设置 -->
|
||||
<div class="settings-section">
|
||||
<div class="section-title">审核设置</div>
|
||||
<div class="section-body">
|
||||
<div class="setting-item">
|
||||
<div class="setting-info">
|
||||
<span class="setting-label">启用审核系统</span>
|
||||
<span class="setting-desc">启用后，用户名、头像、签名修改将进入审核流程</span>
|
||||
</div>
|
||||
<label class="toggle-switch">
|
||||
<input type="checkbox" id="audit-enabled" data-key="audit.enabled">
|
||||
<span class="toggle-slider"></span>
|
||||
</label>
|
||||
</div>
|
||||
|
||||
<div class="setting-item">
|
||||
<div class="setting-info">
|
||||
<span class="setting-label">用户名审核</span>
|
||||
<span class="setting-desc">更改用户名需要管理员审核</span>
|
||||
</div>
|
||||
<label class="toggle-switch">
|
||||
<input type="checkbox" id="audit-username" data-key="audit.username_audit">
|
||||
<span class="toggle-slider"></span>
|
||||
</label>
|
||||
</div>
|
||||
|
||||
<div class="setting-item">
|
||||
<div class="setting-info">
|
||||
<span class="setting-label">头像审核</span>
|
||||
<span class="setting-desc">更改头像需要管理员审核</span>
|
||||
</div>
|
||||
<label class="toggle-switch">
|
||||
<input type="checkbox" id="audit-avatar" data-key="audit.avatar_audit">
|
||||
<span class="toggle-slider"></span>
|
||||
</label>
|
||||
</div>
|
||||
|
||||
<div class="setting-item">
|
||||
<div class="setting-info">
|
||||
<span class="setting-label">签名审核</span>
|
||||
<span class="setting-desc">更改个人签名需要管理员审核</span>
|
||||
</div>
|
||||
<label class="toggle-switch">
|
||||
<input type="checkbox" id="audit-bio" data-key="audit.bio_audit">
|
||||
<span class="toggle-slider"></span>
|
||||
</label>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<!-- 内容管理 -->
|
||||
<div class="settings-section">
|
||||
<div class="section-title">内容管理</div>
|
||||
<div class="section-body">
|
||||
<div class="setting-item setting-item-vertical">
|
||||
<div class="setting-info">
|
||||
<span class="setting-label">社区准则</span>
|
||||
<span class="setting-desc">注册时需用户阅读并同意，支持 HTML 格式</span>
|
||||
</div>
|
||||
<div class="setting-input-block">
|
||||
<textarea id="setting-site-guidelines" class="setting-textarea" rows="12" placeholder="留空则使用默认准则文件"></textarea>
|
||||
<button class="btn btn-sm btn-primary btn-save-block" data-key="site.guidelines" data-input="setting-site-guidelines">保存准则</button>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<!-- 通用设置 -->
|
||||
<div class="settings-section">
|
||||
<div class="section-title">其他设置</div>
|
||||
<div class="section-body" id="general-settings">
|
||||
<div class="settings-empty" id="settings-empty">加载中...</div>
|
||||
</div>
|
||||
</div>
|
||||
{{template "admin/layout/footer.html" .}}
|
||||
55
templates/admin/html/site-settings/registration.html
Normal file
55
templates/admin/html/site-settings/registration.html
Normal file
@ -0,0 +1,55 @@
|
||||
{{template "admin/layout/base.html" .}}
|
||||
<div class="page-header">
|
||||
<h1>站点设置</h1>
|
||||
<p class="page-desc">注册策略与准则配置</p>
|
||||
</div>
|
||||
|
||||
{{template "admin/site-settings/_menu.html" .}}
|
||||
|
||||
<!-- 注册设置 -->
|
||||
<div class="settings-section">
|
||||
<div class="section-title">注册设置</div>
|
||||
<div class="section-body">
|
||||
<div class="setting-item">
|
||||
<div class="setting-info">
|
||||
<span class="setting-label">允许注册</span>
|
||||
<span class="setting-desc">关闭后，新用户将无法注册</span>
|
||||
</div>
|
||||
<label class="toggle-switch">
|
||||
<input type="checkbox" id="registration-enabled" data-key="registration.enabled">
|
||||
<span class="toggle-slider"></span>
|
||||
</label>
|
||||
</div>
|
||||
<div class="setting-item">
|
||||
<div class="setting-info">
|
||||
<span class="setting-label">弹窗显示准则</span>
|
||||
<span class="setting-desc">注册时弹窗展示社区准则（关闭后仅显示复选框）</span>
|
||||
</div>
|
||||
<label class="toggle-switch">
|
||||
<input type="checkbox" id="registration-show-guidelines" data-key="registration.show_guidelines">
|
||||
<span class="toggle-slider"></span>
|
||||
</label>
|
||||
</div>
|
||||
<div class="setting-item">
|
||||
<div class="setting-info">
|
||||
<span class="setting-label">强制阅读准则</span>
|
||||
<span class="setting-desc">弹窗模式下要求倒计时+滚动到底部（关闭后弹窗可直接确认）</span>
|
||||
</div>
|
||||
<label class="toggle-switch">
|
||||
<input type="checkbox" id="registration-force-guidelines" data-key="registration.force_guidelines">
|
||||
<span class="toggle-slider"></span>
|
||||
</label>
|
||||
</div>
|
||||
<div class="setting-item">
|
||||
<div class="setting-info">
|
||||
<span class="setting-label">阅读倒计时</span>
|
||||
<span class="setting-desc">强制阅读时的倒计时秒数</span>
|
||||
</div>
|
||||
<div class="setting-input-wrap">
|
||||
<input type="number" id="setting-guidelines-timer" class="setting-input" placeholder="60" min="1" style="width:100px" value="{{.GuidelinesTimer}}">
|
||||
<button class="btn btn-sm btn-primary btn-save" data-key="registration.guidelines_timer" data-input="setting-guidelines-timer">保存</button>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
{{template "admin/layout/footer.html" .}}
|
||||
47
templates/admin/html/site-settings/security.html
Normal file
47
templates/admin/html/site-settings/security.html
Normal file
@ -0,0 +1,47 @@
|
||||
{{template "admin/layout/base.html" .}}
|
||||
<div class="page-header">
|
||||
<h1>站点设置</h1>
|
||||
<p class="page-desc">安全策略与维护模式</p>
|
||||
</div>
|
||||
|
||||
{{template "admin/site-settings/_menu.html" .}}
|
||||
|
||||
<!-- 安全设置 -->
|
||||
<div class="settings-section">
|
||||
<div class="section-title">安全设置</div>
|
||||
<div class="section-body">
|
||||
<div class="setting-item">
|
||||
<div class="setting-info">
|
||||
<span class="setting-label">密码强度</span>
|
||||
<span class="setting-desc">注册和修改密码时的最低强度要求</span>
|
||||
</div>
|
||||
<div class="setting-input-wrap">
|
||||
<select id="setting-password-strength" class="setting-select" data-key="password.strength">
|
||||
<option value="low">低 — 仅要求 8 位</option>
|
||||
<option value="medium" selected>中 — 字母+数字/符号（两类）</option>
|
||||
<option value="high">高 — 大小写+数字+符号（至少三类）+ 禁止连续字符</option>
|
||||
<option value="very_high">极高 — 四类全有 + 禁止连续字符</option>
|
||||
</select>
|
||||
<button class="btn btn-sm btn-primary btn-save-select" data-key="password.strength" data-input="setting-password-strength">保存</button>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<!-- 维护设置 -->
|
||||
<div class="settings-section">
|
||||
<div class="section-title">维护设置</div>
|
||||
<div class="section-body">
|
||||
<div class="setting-item">
|
||||
<div class="setting-info">
|
||||
<span class="setting-label">启用维护模式</span>
|
||||
<span class="setting-desc">开启后仅站长可登录和访问，其他用户将看到维护提示</span>
|
||||
</div>
|
||||
<label class="toggle-switch">
|
||||
<input type="checkbox" id="maintenance-enabled" data-key="maintenance.enabled">
|
||||
<span class="toggle-slider"></span>
|
||||
</label>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
{{template "admin/layout/footer.html" .}}
|
||||
Reference in New Issue
Block a user