Some checks failed
CI / Lint + Build (push) Has been cancelled
审计修复: - CSP: unsafe-inline移除, nonce替代; unsafe-eval保留供Vditor使用 - HSTS: 始终启用(不再依赖release模式) - Controller Exp: common.GetGinExp包装, 不再直接读context - UID解析: common.ParseUIDParam统一, follow/admin controller改用 重构: - router/api.go(198行)拆为7个域文件: auth/settings/posts/comments/reactions/social/studio - 管理后台站点设置: 单页拆为4个子页(brand/security/registration/content)+子菜单 - 前台用户设置页: 1201行拆为6个独立模板+6个独立JS文件 新增: - DB健康检测中间件(middleware/db_health.go): 5s ping+降级页面 - 时区配置: config.yaml server.timezone→time.Local初始化 - .gitea/workflows/ci.yml: strict模式CI流水线
149 lines
4.5 KiB
Go
149 lines
4.5 KiB
Go
package admin
|
|
|
|
import (
|
|
"net/http"
|
|
"strconv"
|
|
|
|
"metazone.cc/mce/internal/common"
|
|
"metazone.cc/mce/internal/service"
|
|
|
|
"github.com/gin-gonic/gin"
|
|
)
|
|
|
|
// SiteSettingController 站点设置控制器(仅 owner 可访问)
|
|
type SiteSettingController struct {
|
|
settingService siteSettingUseCase
|
|
defaults *service.AuditDefaults
|
|
}
|
|
|
|
// NewSiteSettingController 构造函数
|
|
func NewSiteSettingController(settingService siteSettingUseCase, defaults *service.AuditDefaults) *SiteSettingController {
|
|
return &SiteSettingController{settingService: settingService, defaults: defaults}
|
|
}
|
|
|
|
// SiteSettingsPage 旧站点设置页 — 301 重定向到品牌页
|
|
func (sc *SiteSettingController) SiteSettingsPage(c *gin.Context) {
|
|
c.Redirect(http.StatusMovedPermanently, "/admin/settings/brand")
|
|
}
|
|
|
|
// BrandPage 品牌与合规设置页
|
|
func (sc *SiteSettingController) BrandPage(c *gin.Context) {
|
|
c.HTML(http.StatusOK, "admin/site-settings/brand.html", common.BuildAdminPageData(c, gin.H{
|
|
"Title": "站点设置 - 品牌与合规",
|
|
"ExtraCSS": "/admin/static/css/site-settings.css",
|
|
"ExtraJS": "/admin/static/js/site-settings.js",
|
|
"ActiveSetting": "brand",
|
|
}))
|
|
}
|
|
|
|
// SecurityPage 安全与维护设置页
|
|
func (sc *SiteSettingController) SecurityPage(c *gin.Context) {
|
|
c.HTML(http.StatusOK, "admin/site-settings/security.html", common.BuildAdminPageData(c, gin.H{
|
|
"Title": "站点设置 - 安全与维护",
|
|
"ExtraCSS": "/admin/static/css/site-settings.css",
|
|
"ExtraJS": "/admin/static/js/site-settings.js",
|
|
"ActiveSetting": "security",
|
|
}))
|
|
}
|
|
|
|
// RegistrationPage 注册策略设置页
|
|
func (sc *SiteSettingController) RegistrationPage(c *gin.Context) {
|
|
c.HTML(http.StatusOK, "admin/site-settings/registration.html", common.BuildAdminPageData(c, gin.H{
|
|
"Title": "站点设置 - 注册策略",
|
|
"ExtraCSS": "/admin/static/css/site-settings.css",
|
|
"ExtraJS": "/admin/static/js/site-settings.js",
|
|
"ActiveSetting": "registration",
|
|
}))
|
|
}
|
|
|
|
// ContentPage 审核与内容设置页
|
|
func (sc *SiteSettingController) ContentPage(c *gin.Context) {
|
|
c.HTML(http.StatusOK, "admin/site-settings/content.html", common.BuildAdminPageData(c, gin.H{
|
|
"Title": "站点设置 - 审核与内容",
|
|
"ExtraCSS": "/admin/static/css/site-settings.css",
|
|
"ExtraJS": "/admin/static/js/site-settings.js",
|
|
"ActiveSetting": "content",
|
|
}))
|
|
}
|
|
|
|
// GetSettings 获取所有站点设置
|
|
func (sc *SiteSettingController) GetSettings(c *gin.Context) {
|
|
all := sc.settingService.GetSettings()
|
|
audit := sc.settingService.GetAuditSettings(sc.defaults)
|
|
common.Ok(c, gin.H{
|
|
"all": all,
|
|
"audit": audit,
|
|
})
|
|
}
|
|
|
|
// UpdateSetting 更新单项设置
|
|
func (sc *SiteSettingController) UpdateSetting(c *gin.Context) {
|
|
var req struct {
|
|
Key string `json:"key" binding:"required"`
|
|
Value string `json:"value"`
|
|
}
|
|
if err := c.ShouldBindJSON(&req); err != nil {
|
|
common.Error(c, http.StatusBadRequest, "参数错误")
|
|
return
|
|
}
|
|
|
|
if err := sc.settingService.UpdateSetting(req.Key, req.Value); err != nil {
|
|
common.Error(c, http.StatusInternalServerError, "保存失败")
|
|
return
|
|
}
|
|
|
|
common.OkMessage(c, "设置已更新")
|
|
}
|
|
|
|
// UpdateBoolSetting 更新布尔设置
|
|
func (sc *SiteSettingController) UpdateBoolSetting(c *gin.Context) {
|
|
var req struct {
|
|
Key string `json:"key" binding:"required"`
|
|
Value string `json:"value" binding:"required"`
|
|
}
|
|
if err := c.ShouldBindJSON(&req); err != nil {
|
|
common.Error(c, http.StatusBadRequest, "参数错误")
|
|
return
|
|
}
|
|
|
|
v, err := service.ParseBool(req.Value)
|
|
if err != nil {
|
|
common.Error(c, http.StatusBadRequest, "值必须为 true 或 false")
|
|
return
|
|
}
|
|
|
|
if err := sc.settingService.UpdateBoolSetting(req.Key, v); err != nil {
|
|
common.Error(c, http.StatusInternalServerError, "保存失败")
|
|
return
|
|
}
|
|
|
|
common.OkMessage(c, "设置已更新")
|
|
}
|
|
|
|
// GetBoolSetting 获取单个布尔设置的当前值
|
|
func (sc *SiteSettingController) GetBoolSetting(c *gin.Context) {
|
|
key := c.Query("key")
|
|
if key == "" {
|
|
common.Error(c, http.StatusBadRequest, "缺少 key 参数")
|
|
return
|
|
}
|
|
|
|
defaultVal := c.DefaultQuery("default", "false")
|
|
d, _ := strconv.ParseBool(defaultVal)
|
|
|
|
val := sc.settingService.GetAuditSettings(sc.defaults)
|
|
// 简单键值查找
|
|
switch key {
|
|
case "audit.enabled":
|
|
common.Ok(c, gin.H{"value": val.Enabled})
|
|
case "audit.username_audit":
|
|
common.Ok(c, gin.H{"value": val.UsernameAudit})
|
|
case "audit.avatar_audit":
|
|
common.Ok(c, gin.H{"value": val.AvatarAudit})
|
|
case "audit.bio_audit":
|
|
common.Ok(c, gin.H{"value": val.BioAudit})
|
|
default:
|
|
common.Ok(c, gin.H{"value": d})
|
|
}
|
|
}
|