Files
mce/internal/controller/admin/site_setting_controller.go
Victor_Jay 2449a27eb5
Some checks failed
CI / Lint + Build (push) Has been cancelled
refactor: CSP nonce替代unsafe-inline, HSTS始终启用, router/api拆分, 管理后台+用户设置页拆分, DB健康降级, 时区配置, UID统一解析, CI接入
审计修复:
- CSP: unsafe-inline移除, nonce替代; unsafe-eval保留供Vditor使用
- HSTS: 始终启用(不再依赖release模式)
- Controller Exp: common.GetGinExp包装, 不再直接读context
- UID解析: common.ParseUIDParam统一, follow/admin controller改用

重构:
- router/api.go(198行)拆为7个域文件: auth/settings/posts/comments/reactions/social/studio
- 管理后台站点设置: 单页拆为4个子页(brand/security/registration/content)+子菜单
- 前台用户设置页: 1201行拆为6个独立模板+6个独立JS文件

新增:
- DB健康检测中间件(middleware/db_health.go): 5s ping+降级页面
- 时区配置: config.yaml server.timezone→time.Local初始化
- .gitea/workflows/ci.yml: strict模式CI流水线
2026-06-22 03:06:24 +08:00

149 lines
4.5 KiB
Go

package admin
import (
"net/http"
"strconv"
"metazone.cc/mce/internal/common"
"metazone.cc/mce/internal/service"
"github.com/gin-gonic/gin"
)
// SiteSettingController 站点设置控制器(仅 owner 可访问)
type SiteSettingController struct {
settingService siteSettingUseCase
defaults *service.AuditDefaults
}
// NewSiteSettingController 构造函数
func NewSiteSettingController(settingService siteSettingUseCase, defaults *service.AuditDefaults) *SiteSettingController {
return &SiteSettingController{settingService: settingService, defaults: defaults}
}
// SiteSettingsPage 旧站点设置页 — 301 重定向到品牌页
func (sc *SiteSettingController) SiteSettingsPage(c *gin.Context) {
c.Redirect(http.StatusMovedPermanently, "/admin/settings/brand")
}
// BrandPage 品牌与合规设置页
func (sc *SiteSettingController) BrandPage(c *gin.Context) {
c.HTML(http.StatusOK, "admin/site-settings/brand.html", common.BuildAdminPageData(c, gin.H{
"Title": "站点设置 - 品牌与合规",
"ExtraCSS": "/admin/static/css/site-settings.css",
"ExtraJS": "/admin/static/js/site-settings.js",
"ActiveSetting": "brand",
}))
}
// SecurityPage 安全与维护设置页
func (sc *SiteSettingController) SecurityPage(c *gin.Context) {
c.HTML(http.StatusOK, "admin/site-settings/security.html", common.BuildAdminPageData(c, gin.H{
"Title": "站点设置 - 安全与维护",
"ExtraCSS": "/admin/static/css/site-settings.css",
"ExtraJS": "/admin/static/js/site-settings.js",
"ActiveSetting": "security",
}))
}
// RegistrationPage 注册策略设置页
func (sc *SiteSettingController) RegistrationPage(c *gin.Context) {
c.HTML(http.StatusOK, "admin/site-settings/registration.html", common.BuildAdminPageData(c, gin.H{
"Title": "站点设置 - 注册策略",
"ExtraCSS": "/admin/static/css/site-settings.css",
"ExtraJS": "/admin/static/js/site-settings.js",
"ActiveSetting": "registration",
}))
}
// ContentPage 审核与内容设置页
func (sc *SiteSettingController) ContentPage(c *gin.Context) {
c.HTML(http.StatusOK, "admin/site-settings/content.html", common.BuildAdminPageData(c, gin.H{
"Title": "站点设置 - 审核与内容",
"ExtraCSS": "/admin/static/css/site-settings.css",
"ExtraJS": "/admin/static/js/site-settings.js",
"ActiveSetting": "content",
}))
}
// GetSettings 获取所有站点设置
func (sc *SiteSettingController) GetSettings(c *gin.Context) {
all := sc.settingService.GetSettings()
audit := sc.settingService.GetAuditSettings(sc.defaults)
common.Ok(c, gin.H{
"all": all,
"audit": audit,
})
}
// UpdateSetting 更新单项设置
func (sc *SiteSettingController) UpdateSetting(c *gin.Context) {
var req struct {
Key string `json:"key" binding:"required"`
Value string `json:"value"`
}
if err := c.ShouldBindJSON(&req); err != nil {
common.Error(c, http.StatusBadRequest, "参数错误")
return
}
if err := sc.settingService.UpdateSetting(req.Key, req.Value); err != nil {
common.Error(c, http.StatusInternalServerError, "保存失败")
return
}
common.OkMessage(c, "设置已更新")
}
// UpdateBoolSetting 更新布尔设置
func (sc *SiteSettingController) UpdateBoolSetting(c *gin.Context) {
var req struct {
Key string `json:"key" binding:"required"`
Value string `json:"value" binding:"required"`
}
if err := c.ShouldBindJSON(&req); err != nil {
common.Error(c, http.StatusBadRequest, "参数错误")
return
}
v, err := service.ParseBool(req.Value)
if err != nil {
common.Error(c, http.StatusBadRequest, "值必须为 true 或 false")
return
}
if err := sc.settingService.UpdateBoolSetting(req.Key, v); err != nil {
common.Error(c, http.StatusInternalServerError, "保存失败")
return
}
common.OkMessage(c, "设置已更新")
}
// GetBoolSetting 获取单个布尔设置的当前值
func (sc *SiteSettingController) GetBoolSetting(c *gin.Context) {
key := c.Query("key")
if key == "" {
common.Error(c, http.StatusBadRequest, "缺少 key 参数")
return
}
defaultVal := c.DefaultQuery("default", "false")
d, _ := strconv.ParseBool(defaultVal)
val := sc.settingService.GetAuditSettings(sc.defaults)
// 简单键值查找
switch key {
case "audit.enabled":
common.Ok(c, gin.H{"value": val.Enabled})
case "audit.username_audit":
common.Ok(c, gin.H{"value": val.UsernameAudit})
case "audit.avatar_audit":
common.Ok(c, gin.H{"value": val.AvatarAudit})
case "audit.bio_audit":
common.Ok(c, gin.H{"value": val.BioAudit})
default:
common.Ok(c, gin.H{"value": d})
}
}