Victor_Jay
39d13993ba
- P0 DIP+ISP: 全链路注入接口，消除零接口紧耦合 - P0 URL: auth 301→302，修复登出后浏览器缓存陷阱 - P1 DRY: JWT 认证逻辑收敛至 TokenService+中间件 - P2 DRY: 前后端角色/状态映射统一为 model 常量 - P2 LoD: 新增 SettingsController，router 不再跨层调 repo - P2 URL: settings ?tab= → /settings/:tab 伪静态 - P3 OCP: 角色权限 map 化，告别硬编码 switch
136 lines
3.6 KiB
Go
136 lines
3.6 KiB
Go
package admin
|
||
|
||
import (
|
||
"net/http"
|
||
"strconv"
|
||
|
||
"metazone.cc/metalab/internal/common"
|
||
"metazone.cc/metalab/internal/model"
|
||
"metazone.cc/metalab/internal/service"
|
||
|
||
"github.com/gin-gonic/gin"
|
||
)
|
||
|
||
// Note: service import kept for ListUsersParams / ListUsersResult DTOs
|
||
|
||
// AdminController 管理后台控制器
|
||
type AdminController struct {
|
||
adminService adminUseCase
|
||
}
|
||
|
||
// NewAdminController 构造函数
|
||
func NewAdminController(adminService adminUseCase) *AdminController {
|
||
return &AdminController{adminService: adminService}
|
||
}
|
||
|
||
// Dashboard 管理首页（欢迎页）
|
||
func (ac *AdminController) Dashboard(c *gin.Context) {
|
||
c.HTML(http.StatusOK, "admin/dashboard/index.html", common.BuildAdminPageData(c, gin.H{
|
||
"Title": "管理首页",
|
||
}))
|
||
}
|
||
|
||
// UsersPage 用户管理页面
|
||
func (ac *AdminController) UsersPage(c *gin.Context) {
|
||
c.HTML(http.StatusOK, "admin/users/index.html", common.BuildAdminPageData(c, gin.H{
|
||
"Title": "用户管理",
|
||
"ExtraCSS": "/admin/static/css/users.css",
|
||
"ExtraJS": "/admin/static/js/users.js",
|
||
"RoleNames": model.RoleDisplayNames,
|
||
"StatusNames": model.StatusDisplayNames,
|
||
}))
|
||
}
|
||
|
||
// ListUsers 用户列表 API（分页 + 搜索 + 筛选）
|
||
func (ac *AdminController) ListUsers(c *gin.Context) {
|
||
page, _ := strconv.Atoi(c.DefaultQuery("page", "1"))
|
||
pageSize, _ := strconv.Atoi(c.DefaultQuery("page_size", "20"))
|
||
|
||
params := service.ListUsersParams{
|
||
Keyword: c.Query("keyword"),
|
||
Role: c.Query("role"),
|
||
Status: c.Query("status"),
|
||
Page: page,
|
||
PageSize: pageSize,
|
||
}
|
||
|
||
result, err := ac.adminService.ListUsers(params)
|
||
if err != nil {
|
||
common.Error(c, http.StatusInternalServerError, "查询失败")
|
||
return
|
||
}
|
||
|
||
common.Ok(c, result)
|
||
}
|
||
|
||
// UpdateUserStatus 封禁/解封用户
|
||
func (ac *AdminController) UpdateUserStatus(c *gin.Context) {
|
||
targetUID, err := parseUIDParam(c)
|
||
if err != nil {
|
||
common.Error(c, http.StatusBadRequest, "无效的用户 ID")
|
||
return
|
||
}
|
||
|
||
var req struct {
|
||
Status string `json:"status" binding:"required"`
|
||
}
|
||
if err := c.ShouldBindJSON(&req); err != nil {
|
||
common.Error(c, http.StatusBadRequest, "参数错误")
|
||
return
|
||
}
|
||
|
||
operatorUID := c.GetUint("uid")
|
||
if err := ac.adminService.UpdateUserStatus(operatorUID, targetUID, req.Status); err != nil {
|
||
handleServiceError(c, err)
|
||
return
|
||
}
|
||
|
||
action := "封禁"
|
||
if req.Status == model.StatusActive {
|
||
action = "解封"
|
||
} else if req.Status == model.StatusLocked {
|
||
action = "已删除"
|
||
}
|
||
common.OkMessage(c, action+"成功")
|
||
}
|
||
|
||
// ResetToken 强制用户下线
|
||
func (ac *AdminController) ResetToken(c *gin.Context) {
|
||
targetUID, err := parseUIDParam(c)
|
||
if err != nil {
|
||
common.Error(c, http.StatusBadRequest, "无效的用户 ID")
|
||
return
|
||
}
|
||
|
||
operatorUID := c.GetUint("uid")
|
||
if err := ac.adminService.ResetUserToken(operatorUID, targetUID); err != nil {
|
||
handleServiceError(c, err)
|
||
return
|
||
}
|
||
|
||
common.OkMessage(c, "已强制下线")
|
||
}
|
||
|
||
// parseUIDParam 从 URL 路径参数解析 uid
|
||
func parseUIDParam(c *gin.Context) (uint, error) {
|
||
uid, err := strconv.ParseUint(c.Param("uid"), 10, 64)
|
||
if err != nil {
|
||
return 0, err
|
||
}
|
||
return uint(uid), nil
|
||
}
|
||
|
||
// handleServiceError 统一处理 service 层返回的错误
|
||
func handleServiceError(c *gin.Context, err error) {
|
||
switch err {
|
||
case common.ErrPermissionDenied:
|
||
common.Error(c, http.StatusForbidden, "权限不足")
|
||
case common.ErrUserNotFound:
|
||
common.Error(c, http.StatusNotFound, "用户不存在")
|
||
case common.ErrEmailExists:
|
||
common.Error(c, http.StatusConflict, "该邮箱已被其他用户注册，无法解锁")
|
||
default:
|
||
common.Error(c, http.StatusInternalServerError, "操作失败")
|
||
}
|
||
}
|