feat: 修复了文件被意外ignore
This commit is contained in:
2
.gitignore
vendored
2
.gitignore
vendored
@@ -1,5 +1,5 @@
|
||||
# Build artifacts
|
||||
server
|
||||
/server
|
||||
*.tar
|
||||
|
||||
# Runtime files
|
||||
|
||||
107
cmd/server/app.go
Normal file
107
cmd/server/app.go
Normal file
@@ -0,0 +1,107 @@
|
||||
package main
|
||||
|
||||
import (
|
||||
"context"
|
||||
"fmt"
|
||||
"log"
|
||||
"net/http"
|
||||
|
||||
"carrot_bbs/internal/config"
|
||||
"carrot_bbs/internal/grpc/runner"
|
||||
"carrot_bbs/internal/router"
|
||||
"carrot_bbs/internal/service"
|
||||
|
||||
"gorm.io/gorm"
|
||||
)
|
||||
|
||||
// App 应用程序结构体
|
||||
type App struct {
|
||||
Config *config.Config
|
||||
DB *gorm.DB
|
||||
Router *router.Router
|
||||
PushService service.PushService
|
||||
GRPCServer *runner.Server
|
||||
Server *http.Server
|
||||
}
|
||||
|
||||
// NewApp 创建应用程序
|
||||
func NewApp(
|
||||
cfg *config.Config,
|
||||
db *gorm.DB,
|
||||
r *router.Router,
|
||||
pushService service.PushService,
|
||||
grpcServer *runner.Server,
|
||||
) *App {
|
||||
return &App{
|
||||
Config: cfg,
|
||||
DB: db,
|
||||
Router: r,
|
||||
PushService: pushService,
|
||||
GRPCServer: grpcServer,
|
||||
}
|
||||
}
|
||||
|
||||
// Start 启动应用程序
|
||||
func (a *App) Start(ctx context.Context) error {
|
||||
// 1. 启动 gRPC 服务器（在 HTTP 服务器之前）
|
||||
if a.GRPCServer != nil {
|
||||
log.Println("Starting gRPC server...")
|
||||
if err := a.GRPCServer.Start(); err != nil {
|
||||
return fmt.Errorf("failed to start gRPC server: %w", err)
|
||||
}
|
||||
}
|
||||
|
||||
// 2. 启动推送 Worker
|
||||
a.PushService.StartPushWorker(ctx)
|
||||
|
||||
// 3. 创建 HTTP 服务器
|
||||
addr := fmt.Sprintf("%s:%d", a.Config.Server.Host, a.Config.Server.Port)
|
||||
log.Printf("Starting HTTP server at %s", addr)
|
||||
|
||||
a.Server = &http.Server{
|
||||
Addr: addr,
|
||||
Handler: a.Router.Engine(),
|
||||
}
|
||||
|
||||
// 4. 启动 HTTP 服务器
|
||||
go func() {
|
||||
if err := a.Server.ListenAndServe(); err != nil && err != http.ErrServerClosed {
|
||||
log.Fatalf("listen: %s\n", err)
|
||||
}
|
||||
}()
|
||||
|
||||
return nil
|
||||
}
|
||||
|
||||
// Stop 停止应用程序
|
||||
func (a *App) Stop(ctx context.Context) error {
|
||||
log.Println("Shutting down server...")
|
||||
|
||||
// 1. 停止 HTTP 服务器
|
||||
if a.Server != nil {
|
||||
log.Println("Stopping HTTP server...")
|
||||
if err := a.Server.Shutdown(ctx); err != nil {
|
||||
log.Printf("HTTP server forced to shutdown: %v", err)
|
||||
}
|
||||
}
|
||||
|
||||
// 2. 停止 gRPC 服务器
|
||||
if a.GRPCServer != nil {
|
||||
log.Println("Stopping gRPC server...")
|
||||
a.GRPCServer.Stop()
|
||||
}
|
||||
|
||||
// 3. 停止推送 Worker
|
||||
log.Println("Stopping push worker...")
|
||||
a.PushService.StopPushWorker()
|
||||
|
||||
// 4. 关闭数据库连接
|
||||
log.Println("Closing database connection...")
|
||||
sqlDB, err := a.DB.DB()
|
||||
if err == nil {
|
||||
sqlDB.Close()
|
||||
}
|
||||
|
||||
log.Println("Server exited")
|
||||
return nil
|
||||
}
|
||||
36
cmd/server/main.go
Normal file
36
cmd/server/main.go
Normal file
@@ -0,0 +1,36 @@
|
||||
package main
|
||||
|
||||
import (
|
||||
"context"
|
||||
"log"
|
||||
"os"
|
||||
"os/signal"
|
||||
"syscall"
|
||||
"time"
|
||||
)
|
||||
|
||||
func main() {
|
||||
// 初始化应用程序（Wire 自动生成）
|
||||
app, err := InitializeApp()
|
||||
if err != nil {
|
||||
log.Fatalf("failed to initialize app: %v", err)
|
||||
}
|
||||
|
||||
// 启动应用程序
|
||||
ctx := context.Background()
|
||||
if err := app.Start(ctx); err != nil {
|
||||
log.Fatalf("failed to start app: %v", err)
|
||||
}
|
||||
|
||||
// 优雅关闭
|
||||
quit := make(chan os.Signal, 1)
|
||||
signal.Notify(quit, syscall.SIGINT, syscall.SIGTERM)
|
||||
<-quit
|
||||
|
||||
shutdownCtx, cancel := context.WithTimeout(context.Background(), 30*time.Second)
|
||||
defer cancel()
|
||||
|
||||
if err := app.Stop(shutdownCtx); err != nil {
|
||||
log.Printf("Error during shutdown: %v", err)
|
||||
}
|
||||
}
|
||||
74
cmd/server/wire.go
Normal file
74
cmd/server/wire.go
Normal file
@@ -0,0 +1,74 @@
|
||||
//go:build wireinject
|
||||
// +build wireinject
|
||||
|
||||
package main
|
||||
|
||||
import (
|
||||
"carrot_bbs/internal/handler"
|
||||
"carrot_bbs/internal/router"
|
||||
"carrot_bbs/internal/service"
|
||||
appwire "carrot_bbs/internal/wire"
|
||||
|
||||
"github.com/google/wire"
|
||||
)
|
||||
|
||||
// InitializeApp 初始化应用程序
|
||||
func InitializeApp() (*App, error) {
|
||||
wire.Build(
|
||||
appwire.AllSet,
|
||||
NewApp,
|
||||
ProvideRouter,
|
||||
)
|
||||
return nil, nil
|
||||
}
|
||||
|
||||
// ProvideRouter 提供路由
|
||||
func ProvideRouter(
|
||||
userHandler *handler.UserHandler,
|
||||
postHandler *handler.PostHandler,
|
||||
commentHandler *handler.CommentHandler,
|
||||
messageHandler *handler.MessageHandler,
|
||||
notificationHandler *handler.NotificationHandler,
|
||||
uploadHandler *handler.UploadHandler,
|
||||
jwtService *service.JWTService,
|
||||
pushHandler *handler.PushHandler,
|
||||
systemMessageHandler *handler.SystemMessageHandler,
|
||||
groupHandler *handler.GroupHandler,
|
||||
stickerHandler *handler.StickerHandler,
|
||||
gorseHandler *handler.GorseHandler,
|
||||
voteHandler *handler.VoteHandler,
|
||||
scheduleHandler *handler.ScheduleHandler,
|
||||
roleHandler *handler.RoleHandler,
|
||||
adminUserHandler *handler.AdminUserHandler,
|
||||
adminPostHandler *handler.AdminPostHandler,
|
||||
adminCommentHandler *handler.AdminCommentHandler,
|
||||
adminGroupHandler *handler.AdminGroupHandler,
|
||||
adminDashboardHandler *handler.AdminDashboardHandler,
|
||||
activityService service.UserActivityService,
|
||||
casbinService service.CasbinService,
|
||||
) *router.Router {
|
||||
return router.New(
|
||||
userHandler,
|
||||
postHandler,
|
||||
commentHandler,
|
||||
messageHandler,
|
||||
notificationHandler,
|
||||
uploadHandler,
|
||||
jwtService,
|
||||
pushHandler,
|
||||
systemMessageHandler,
|
||||
groupHandler,
|
||||
stickerHandler,
|
||||
gorseHandler,
|
||||
voteHandler,
|
||||
scheduleHandler,
|
||||
roleHandler,
|
||||
adminUserHandler,
|
||||
adminPostHandler,
|
||||
adminCommentHandler,
|
||||
adminGroupHandler,
|
||||
adminDashboardHandler,
|
||||
activityService,
|
||||
casbinService,
|
||||
)
|
||||
}
|
||||
158
cmd/server/wire_gen.go
Normal file
158
cmd/server/wire_gen.go
Normal file
@@ -0,0 +1,158 @@
|
||||
// Code generated by Wire. DO NOT EDIT.
|
||||
|
||||
//go:generate go run -mod=mod github.com/google/wire/cmd/wire
|
||||
//go:build !wireinject
|
||||
// +build !wireinject
|
||||
|
||||
package main
|
||||
|
||||
import (
|
||||
"carrot_bbs/internal/handler"
|
||||
"carrot_bbs/internal/repository"
|
||||
"carrot_bbs/internal/router"
|
||||
"carrot_bbs/internal/service"
|
||||
"carrot_bbs/internal/wire"
|
||||
)
|
||||
|
||||
// Injectors from wire.go:
|
||||
|
||||
// InitializeApp 初始化应用程序
|
||||
func InitializeApp() (*App, error) {
|
||||
config, err := wire.ProvideConfig()
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
db, err := wire.ProvideDB(config)
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
userRepository := repository.NewUserRepository(db)
|
||||
systemNotificationRepository := repository.NewSystemNotificationRepository(db)
|
||||
pushRecordRepository := repository.NewPushRecordRepository(db)
|
||||
deviceTokenRepository := repository.NewDeviceTokenRepository(db)
|
||||
messageRepository := repository.NewMessageRepository(db)
|
||||
hub := wire.ProvideSSEHub()
|
||||
pushService := wire.ProvidePushService(pushRecordRepository, deviceTokenRepository, messageRepository, hub)
|
||||
postRepository := repository.NewPostRepository(db)
|
||||
client := wire.ProvideRedisClient(config)
|
||||
cache := wire.ProvideCache(config, client)
|
||||
systemMessageService := wire.ProvideSystemMessageService(systemNotificationRepository, pushService, userRepository, postRepository, cache)
|
||||
emailClient := wire.ProvideEmailClient(config)
|
||||
emailService := wire.ProvideEmailService(emailClient)
|
||||
userService := wire.ProvideUserService(userRepository, systemMessageService, emailService, cache)
|
||||
userActivityRepository := wire.ProvideUserActivityRepository(db, cache)
|
||||
userActivityService := wire.ProvideUserActivityService(userActivityRepository)
|
||||
userHandler := wire.ProvideUserHandler(userService, userActivityService)
|
||||
gorseClient := wire.ProvideGorseClient(config)
|
||||
openaiClient := wire.ProvideOpenAIClient(config)
|
||||
postAIService := wire.ProvidePostAIService(openaiClient)
|
||||
transactionManager := wire.ProvideTransactionManager(db)
|
||||
postService := wire.ProvidePostService(postRepository, systemMessageService, gorseClient, postAIService, cache, transactionManager)
|
||||
postHandler := wire.ProvidePostHandler(postService, userService)
|
||||
commentRepository := repository.NewCommentRepository(db)
|
||||
commentService := wire.ProvideCommentService(commentRepository, postRepository, systemMessageService, gorseClient, postAIService, cache)
|
||||
commentHandler := handler.NewCommentHandler(commentService)
|
||||
chatService := wire.ProvideChatService(db, messageRepository, userRepository, hub, cache)
|
||||
messageService := wire.ProvideMessageService(db, messageRepository, cache)
|
||||
groupRepository := repository.NewGroupRepository(db)
|
||||
groupService := wire.ProvideGroupService(db, groupRepository, userRepository, messageRepository, hub, cache)
|
||||
messageHandler := wire.ProvideMessageHandler(chatService, messageService, userService, groupService, hub)
|
||||
notificationRepository := repository.NewNotificationRepository(db)
|
||||
notificationService := wire.ProvideNotificationService(notificationRepository, cache)
|
||||
notificationHandler := handler.NewNotificationHandler(notificationService)
|
||||
s3Client, err := wire.ProvideS3Client(config)
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
uploadService := wire.ProvideUploadService(s3Client, userService)
|
||||
uploadHandler := handler.NewUploadHandler(uploadService)
|
||||
jwtService := wire.ProvideJWTService(config)
|
||||
pushHandler := handler.NewPushHandler(pushService)
|
||||
systemMessageHandler := wire.ProvideSystemMessageHandler(systemMessageService, systemNotificationRepository, cache)
|
||||
groupHandler := wire.ProvideGroupHandler(groupService, userService)
|
||||
stickerRepository := repository.NewStickerRepository(db)
|
||||
stickerService := wire.ProvideStickerService(stickerRepository)
|
||||
stickerHandler := handler.NewStickerHandler(stickerService)
|
||||
gorseHandler := wire.ProvideGorseHandler(config, db)
|
||||
voteRepository := repository.NewVoteRepository(db)
|
||||
voteService := wire.ProvideVoteService(voteRepository, postRepository, cache, postAIService, systemMessageService)
|
||||
voteHandler := handler.NewVoteHandler(voteService, postService)
|
||||
scheduleRepository := repository.NewScheduleRepository(db)
|
||||
scheduleService := wire.ProvideScheduleService(scheduleRepository)
|
||||
logger := wire.ProvideLogger()
|
||||
server := wire.ProvideGRPCServer(config, logger)
|
||||
taskManager := wire.ProvideTaskManager(server)
|
||||
scheduleSyncService := wire.ProvideScheduleSyncService(taskManager, scheduleRepository, logger)
|
||||
scheduleHandler := wire.ProvideScheduleHandler(scheduleService, scheduleSyncService)
|
||||
roleRepository := wire.ProvideRoleRepository(db)
|
||||
enforcer := wire.ProvideCasbinEnforcer(config, db)
|
||||
casbinService := wire.ProvideCasbinService(enforcer, cache, roleRepository, config)
|
||||
roleService := wire.ProvideRoleService(roleRepository, casbinService)
|
||||
roleHandler := handler.NewRoleHandler(roleService)
|
||||
adminUserService := wire.ProvideAdminUserService(userRepository)
|
||||
adminUserHandler := handler.NewAdminUserHandler(adminUserService)
|
||||
adminPostService := wire.ProvideAdminPostService(postRepository, cache)
|
||||
adminPostHandler := handler.NewAdminPostHandler(adminPostService)
|
||||
adminCommentService := wire.ProvideAdminCommentService(commentRepository, postRepository)
|
||||
adminCommentHandler := handler.NewAdminCommentHandler(adminCommentService)
|
||||
adminGroupService := wire.ProvideAdminGroupService(groupRepository, userRepository)
|
||||
adminGroupHandler := handler.NewAdminGroupHandler(adminGroupService)
|
||||
adminDashboardService := wire.ProvideAdminDashboardService(db, userRepository, postRepository, commentRepository, groupRepository, userActivityRepository)
|
||||
adminDashboardHandler := handler.NewAdminDashboardHandler(adminDashboardService)
|
||||
router := ProvideRouter(userHandler, postHandler, commentHandler, messageHandler, notificationHandler, uploadHandler, jwtService, pushHandler, systemMessageHandler, groupHandler, stickerHandler, gorseHandler, voteHandler, scheduleHandler, roleHandler, adminUserHandler, adminPostHandler, adminCommentHandler, adminGroupHandler, adminDashboardHandler, userActivityService, casbinService)
|
||||
app := NewApp(config, db, router, pushService, server)
|
||||
return app, nil
|
||||
}
|
||||
|
||||
// wire.go:
|
||||
|
||||
// ProvideRouter 提供路由
|
||||
func ProvideRouter(
|
||||
userHandler *handler.UserHandler,
|
||||
postHandler *handler.PostHandler,
|
||||
commentHandler *handler.CommentHandler,
|
||||
messageHandler *handler.MessageHandler,
|
||||
notificationHandler *handler.NotificationHandler,
|
||||
uploadHandler *handler.UploadHandler,
|
||||
jwtService *service.JWTService,
|
||||
pushHandler *handler.PushHandler,
|
||||
systemMessageHandler *handler.SystemMessageHandler,
|
||||
groupHandler *handler.GroupHandler,
|
||||
stickerHandler *handler.StickerHandler,
|
||||
gorseHandler *handler.GorseHandler,
|
||||
voteHandler *handler.VoteHandler,
|
||||
scheduleHandler *handler.ScheduleHandler,
|
||||
roleHandler *handler.RoleHandler,
|
||||
adminUserHandler *handler.AdminUserHandler,
|
||||
adminPostHandler *handler.AdminPostHandler,
|
||||
adminCommentHandler *handler.AdminCommentHandler,
|
||||
adminGroupHandler *handler.AdminGroupHandler,
|
||||
adminDashboardHandler *handler.AdminDashboardHandler,
|
||||
activityService service.UserActivityService,
|
||||
casbinService service.CasbinService,
|
||||
) *router.Router {
|
||||
return router.New(
|
||||
userHandler,
|
||||
postHandler,
|
||||
commentHandler,
|
||||
messageHandler,
|
||||
notificationHandler,
|
||||
uploadHandler,
|
||||
jwtService,
|
||||
pushHandler,
|
||||
systemMessageHandler,
|
||||
groupHandler,
|
||||
stickerHandler,
|
||||
gorseHandler,
|
||||
voteHandler,
|
||||
scheduleHandler,
|
||||
roleHandler,
|
||||
adminUserHandler,
|
||||
adminPostHandler,
|
||||
adminCommentHandler,
|
||||
adminGroupHandler,
|
||||
adminDashboardHandler,
|
||||
activityService,
|
||||
casbinService,
|
||||
)
|
||||
}
|
||||
@@ -1,363 +0,0 @@
|
||||
package main
|
||||
|
||||
import (
|
||||
"context"
|
||||
"flag"
|
||||
"fmt"
|
||||
"log"
|
||||
"os"
|
||||
"strings"
|
||||
|
||||
"carrot_bbs/internal/config"
|
||||
"carrot_bbs/internal/model"
|
||||
"carrot_bbs/internal/repository"
|
||||
"carrot_bbs/internal/service"
|
||||
|
||||
"github.com/casbin/casbin/v3"
|
||||
gormadapter "github.com/casbin/gorm-adapter/v3"
|
||||
"gorm.io/driver/postgres"
|
||||
"gorm.io/gorm"
|
||||
)
|
||||
|
||||
func main() {
|
||||
configPath := flag.String("config", "configs/config.yaml", "配置文件路径")
|
||||
flag.Parse()
|
||||
|
||||
fmt.Println("============================================")
|
||||
fmt.Println("Casbin RBAC1 权限系统测试")
|
||||
fmt.Println("============================================")
|
||||
|
||||
// 加载配置
|
||||
cfg, err := config.Load(*configPath)
|
||||
if err != nil {
|
||||
log.Fatalf("Failed to load config: %v", err)
|
||||
}
|
||||
fmt.Println("✓ 配置加载成功")
|
||||
|
||||
// 连接数据库
|
||||
dsn := fmt.Sprintf("host=%s port=%d user=%s password=%s dbname=%s sslmode=disable",
|
||||
cfg.Database.Postgres.Host,
|
||||
cfg.Database.Postgres.Port,
|
||||
cfg.Database.Postgres.User,
|
||||
cfg.Database.Postgres.Password,
|
||||
cfg.Database.Postgres.DBName,
|
||||
)
|
||||
|
||||
db, err := gorm.Open(postgres.Open(dsn), &gorm.Config{})
|
||||
if err != nil {
|
||||
log.Fatalf("Failed to connect database: %v", err)
|
||||
}
|
||||
fmt.Println("✓ 数据库连接成功")
|
||||
|
||||
// 自动迁移
|
||||
if err := db.AutoMigrate(&model.Role{}, &model.UserRole{}, &model.CasbinRule{}); err != nil {
|
||||
log.Fatalf("Failed to migrate: %v", err)
|
||||
}
|
||||
fmt.Println("✓ 数据库迁移完成")
|
||||
|
||||
// 初始化角色数据
|
||||
if err := initRoles(db); err != nil {
|
||||
log.Printf("[WARNING] Failed to init roles: %v", err)
|
||||
}
|
||||
|
||||
// 初始化 Casbin 策略数据
|
||||
if err := initCasbinPolicies(db); err != nil {
|
||||
log.Printf("[WARNING] Failed to init casbin policies: %v", err)
|
||||
}
|
||||
|
||||
// 创建 GORM 适配器
|
||||
adapter, err := gormadapter.NewAdapterByDB(db)
|
||||
if err != nil {
|
||||
log.Fatalf("Failed to create GORM adapter: %v", err)
|
||||
}
|
||||
|
||||
// 创建 Casbin Enforcer
|
||||
enforcer, err := casbin.NewEnforcer(cfg.Casbin.ModelPath, adapter)
|
||||
if err != nil {
|
||||
log.Fatalf("Failed to create enforcer: %v", err)
|
||||
}
|
||||
fmt.Println("✓ Casbin enforcer 创建成功")
|
||||
|
||||
// 创建角色仓储
|
||||
roleRepo := repository.NewRoleRepository(db)
|
||||
|
||||
// 创建 Casbin 服务
|
||||
casbinSvc := service.NewCasbinService(enforcer, nil, roleRepo, &cfg.Casbin)
|
||||
fmt.Println("✓ Casbin 服务创建成功")
|
||||
|
||||
ctx := context.Background()
|
||||
|
||||
// 测试权限检查
|
||||
fmt.Println("\n=== 测试权限检查 ===")
|
||||
|
||||
testCases := []struct {
|
||||
sub string
|
||||
obj string
|
||||
act string
|
||||
expected bool
|
||||
}{
|
||||
// banned 用户权限
|
||||
{"banned", "/api/v1/posts", "GET", true},
|
||||
{"banned", "/api/v1/posts", "POST", false},
|
||||
{"banned", "/api/v1/admin/users", "GET", false},
|
||||
|
||||
// user 用户权限
|
||||
{"user", "/api/v1/posts", "GET", true},
|
||||
{"user", "/api/v1/posts", "POST", true},
|
||||
{"user", "/api/v1/posts/123", "PUT", true},
|
||||
{"user", "/api/v1/posts/123", "DELETE", true},
|
||||
{"user", "/api/v1/comments", "POST", true},
|
||||
{"user", "/api/v1/users/me", "GET", true},
|
||||
{"user", "/api/v1/admin/users", "GET", false},
|
||||
|
||||
// moderator 权限 (继承 user)
|
||||
{"moderator", "/api/v1/posts", "POST", true},
|
||||
{"moderator", "/api/v1/admin/posts/123", "DELETE", true},
|
||||
{"moderator", "/api/v1/admin/comments/456", "DELETE", true},
|
||||
{"moderator", "/api/v1/admin/audit", "GET", true},
|
||||
{"moderator", "/api/v1/admin/users", "GET", false},
|
||||
|
||||
// admin 权限 (继承 moderator)
|
||||
{"admin", "/api/v1/posts", "POST", true},
|
||||
{"admin", "/api/v1/admin/posts/123", "DELETE", true},
|
||||
{"admin", "/api/v1/admin/users", "GET", true},
|
||||
{"admin", "/api/v1/admin/roles", "GET", true},
|
||||
{"admin", "/api/v1/some/unknown/path", "GET", false},
|
||||
|
||||
// super_admin 权限 (完全访问)
|
||||
{"super_admin", "/api/v1/admin/anything", "DELETE", true},
|
||||
{"super_admin", "/api/v1/admin/users", "GET", true},
|
||||
{"super_admin", "/any/path", "ANY", true},
|
||||
}
|
||||
|
||||
passed := 0
|
||||
failed := 0
|
||||
|
||||
for _, tc := range testCases {
|
||||
allowed, err := casbinSvc.Enforce(ctx, tc.sub, tc.obj, tc.act)
|
||||
if err != nil {
|
||||
fmt.Printf("✗ 错误: %s -> %s %s: %v\n", tc.sub, tc.obj, tc.act, err)
|
||||
failed++
|
||||
continue
|
||||
}
|
||||
|
||||
status := "✗ DENIED"
|
||||
if allowed {
|
||||
status = "✓ ALLOWED"
|
||||
}
|
||||
|
||||
// 检查结果是否符合预期
|
||||
resultMatch := ""
|
||||
if allowed != tc.expected {
|
||||
resultMatch = fmt.Sprintf(" (预期: %v)", tc.expected)
|
||||
failed++
|
||||
} else {
|
||||
passed++
|
||||
}
|
||||
|
||||
fmt.Printf("%s: %s -> %s %s%s\n", status, tc.sub, tc.obj, tc.act, resultMatch)
|
||||
}
|
||||
|
||||
// 测试角色继承
|
||||
fmt.Println("\n=== 测试角色继承 ===")
|
||||
|
||||
// moderator 应该继承 user 的权限
|
||||
allowed, _ := casbinSvc.Enforce(ctx, "moderator", "/api/v1/posts", "POST")
|
||||
fmt.Printf("Moderator 继承 user 权限 - 可以发帖: %v\n", allowed)
|
||||
|
||||
// admin 应该继承 moderator 的权限
|
||||
allowed, _ = casbinSvc.Enforce(ctx, "admin", "/api/v1/admin/posts/123", "DELETE")
|
||||
fmt.Printf("Admin 继承 moderator 权限 - 可以删帖: %v\n", allowed)
|
||||
|
||||
// 测试用户角色管理
|
||||
fmt.Println("\n=== 测试用户角色管理 ===")
|
||||
|
||||
testUserID := "test_user_123"
|
||||
|
||||
// 获取用户当前角色
|
||||
roles, err := casbinSvc.GetRolesForUser(ctx, testUserID)
|
||||
if err != nil {
|
||||
fmt.Printf("获取用户角色失败: %v\n", err)
|
||||
} else {
|
||||
fmt.Printf("用户 %s 当前角色: %v\n", testUserID, roles)
|
||||
}
|
||||
|
||||
// 添加角色
|
||||
err = casbinSvc.AddRoleForUser(ctx, testUserID, "moderator")
|
||||
if err != nil {
|
||||
fmt.Printf("添加角色失败: %v\n", err)
|
||||
} else {
|
||||
fmt.Printf("✓ 为用户 %s 添加 moderator 角色\n", testUserID)
|
||||
}
|
||||
|
||||
// 再次获取角色
|
||||
roles, err = casbinSvc.GetRolesForUser(ctx, testUserID)
|
||||
if err != nil {
|
||||
fmt.Printf("获取用户角色失败: %v\n", err)
|
||||
} else {
|
||||
fmt.Printf("用户 %s 当前角色: %v\n", testUserID, roles)
|
||||
}
|
||||
|
||||
// 检查用户是否有指定角色
|
||||
hasRole, err := casbinSvc.HasRoleForUser(ctx, testUserID, "moderator")
|
||||
if err != nil {
|
||||
fmt.Printf("检查角色失败: %v\n", err)
|
||||
} else {
|
||||
fmt.Printf("用户 %s 是否有 moderator 角色: %v\n", testUserID, hasRole)
|
||||
}
|
||||
|
||||
// 测试用户权限检查
|
||||
allowed, err = casbinSvc.EnforceForUser(ctx, testUserID, "/api/v1/admin/posts/123", "DELETE")
|
||||
if err != nil {
|
||||
fmt.Printf("用户权限检查失败: %v\n", err)
|
||||
} else {
|
||||
fmt.Printf("用户 %s 可以删除管理后台帖子: %v\n", testUserID, allowed)
|
||||
}
|
||||
|
||||
// 移除角色
|
||||
err = casbinSvc.DeleteRoleForUser(ctx, testUserID, "moderator")
|
||||
if err != nil {
|
||||
fmt.Printf("移除角色失败: %v\n", err)
|
||||
} else {
|
||||
fmt.Printf("✓ 移除用户 %s 的 moderator 角色\n", testUserID)
|
||||
}
|
||||
|
||||
// 清理测试数据
|
||||
cleanupTestData(db, testUserID)
|
||||
|
||||
// 输出测试结果
|
||||
fmt.Println("\n============================================")
|
||||
fmt.Printf("测试结果: %d 通过, %d 失败\n", passed, failed)
|
||||
fmt.Println("============================================")
|
||||
|
||||
if failed > 0 {
|
||||
os.Exit(1)
|
||||
}
|
||||
}
|
||||
|
||||
// initRoles 初始化角色数据
|
||||
func initRoles(db *gorm.DB) error {
|
||||
roles := []model.Role{
|
||||
{Name: "banned", DisplayName: "被封禁用户", Description: "仅可浏览公开内容，无法交互", Priority: 0},
|
||||
{Name: "user", DisplayName: "普通用户", Description: "注册用户，拥有基本功能权限", ParentRole: strPtr("banned"), Priority: 10},
|
||||
{Name: "moderator", DisplayName: "版主", Description: "内容审核员，管理帖子和评论", ParentRole: strPtr("user"), Priority: 20},
|
||||
{Name: "admin", DisplayName: "管理员", Description: "系统管理员，管理用户和内容", ParentRole: strPtr("moderator"), Priority: 30},
|
||||
{Name: "super_admin", DisplayName: "超级管理员", Description: "系统最高权限者", ParentRole: strPtr("admin"), Priority: 40},
|
||||
}
|
||||
|
||||
for _, role := range roles {
|
||||
result := db.FirstOrCreate(&role, model.Role{Name: role.Name})
|
||||
if result.Error != nil {
|
||||
return result.Error
|
||||
}
|
||||
}
|
||||
|
||||
fmt.Println("✓ 角色数据初始化完成")
|
||||
return nil
|
||||
}
|
||||
|
||||
// initCasbinPolicies 初始化 Casbin 策略数据
|
||||
func initCasbinPolicies(db *gorm.DB) error {
|
||||
// 角色继承关系 (g 策略)
|
||||
gPolicies := []model.CasbinRule{
|
||||
{Ptype: "g", V0: "user", V1: "banned"},
|
||||
{Ptype: "g", V0: "moderator", V1: "user"},
|
||||
{Ptype: "g", V0: "admin", V1: "moderator"},
|
||||
{Ptype: "g", V0: "super_admin", V1: "admin"},
|
||||
}
|
||||
|
||||
// 权限策略 (p 策略)
|
||||
pPolicies := []model.CasbinRule{
|
||||
// banned 用户权限 (仅允许 GET 请求)
|
||||
{Ptype: "p", V0: "banned", V1: "/api/v1/posts", V2: "GET"},
|
||||
{Ptype: "p", V0: "banned", V1: "/api/v1/posts/*", V2: "GET"},
|
||||
{Ptype: "p", V0: "banned", V1: "/api/v1/comments/*", V2: "GET"},
|
||||
{Ptype: "p", V0: "banned", V1: "/api/v1/users/*", V2: "GET"},
|
||||
|
||||
// user 用户权限 (基本操作)
|
||||
{Ptype: "p", V0: "user", V1: "/api/v1/posts", V2: "POST"},
|
||||
{Ptype: "p", V0: "user", V1: "/api/v1/posts/*", V2: "PUT"},
|
||||
{Ptype: "p", V0: "user", V1: "/api/v1/posts/*", V2: "DELETE"},
|
||||
{Ptype: "p", V0: "user", V1: "/api/v1/posts/*/like", V2: "POST"},
|
||||
{Ptype: "p", V0: "user", V1: "/api/v1/posts/*/like", V2: "DELETE"},
|
||||
{Ptype: "p", V0: "user", V1: "/api/v1/posts/*/favorite", V2: "POST"},
|
||||
{Ptype: "p", V0: "user", V1: "/api/v1/posts/*/favorite", V2: "DELETE"},
|
||||
{Ptype: "p", V0: "user", V1: "/api/v1/comments", V2: "POST"},
|
||||
{Ptype: "p", V0: "user", V1: "/api/v1/comments/*", V2: "PUT"},
|
||||
{Ptype: "p", V0: "user", V1: "/api/v1/comments/*", V2: "DELETE"},
|
||||
{Ptype: "p", V0: "user", V1: "/api/v1/users/me", V2: "*"},
|
||||
{Ptype: "p", V0: "user", V1: "/api/v1/users/me/*", V2: "*"},
|
||||
{Ptype: "p", V0: "user", V1: "/api/v1/conversations", V2: "*"},
|
||||
{Ptype: "p", V0: "user", V1: "/api/v1/conversations/*", V2: "*"},
|
||||
{Ptype: "p", V0: "user", V1: "/api/v1/messages/*", V2: "*"},
|
||||
{Ptype: "p", V0: "user", V1: "/api/v1/notifications", V2: "*"},
|
||||
{Ptype: "p", V0: "user", V1: "/api/v1/notifications/*", V2: "*"},
|
||||
{Ptype: "p", V0: "user", V1: "/api/v1/uploads/*", V2: "POST"},
|
||||
{Ptype: "p", V0: "user", V1: "/api/v1/groups", V2: "*"},
|
||||
{Ptype: "p", V0: "user", V1: "/api/v1/groups/*", V2: "*"},
|
||||
{Ptype: "p", V0: "user", V1: "/api/v1/stickers", V2: "*"},
|
||||
{Ptype: "p", V0: "user", V1: "/api/v1/schedule", V2: "*"},
|
||||
{Ptype: "p", V0: "user", V1: "/api/v1/schedule/*", V2: "*"},
|
||||
|
||||
// moderator 权限 (内容管理)
|
||||
{Ptype: "p", V0: "moderator", V1: "/api/v1/admin/posts/*", V2: "*"},
|
||||
{Ptype: "p", V0: "moderator", V1: "/api/v1/admin/comments/*", V2: "*"},
|
||||
{Ptype: "p", V0: "moderator", V1: "/api/v1/admin/audit/*", V2: "GET"},
|
||||
|
||||
// admin 权限 (用户管理)
|
||||
{Ptype: "p", V0: "admin", V1: "/api/v1/admin/users/*", V2: "*"},
|
||||
{Ptype: "p", V0: "admin", V1: "/api/v1/admin/roles", V2: "GET"},
|
||||
{Ptype: "p", V0: "admin", V1: "/api/v1/admin/roles/*", V2: "GET"},
|
||||
|
||||
// super_admin 权限 (完全访问)
|
||||
{Ptype: "p", V0: "super_admin", V1: "/*", V2: "*"},
|
||||
}
|
||||
|
||||
// 插入 g 策略
|
||||
for _, policy := range gPolicies {
|
||||
var existing model.CasbinRule
|
||||
result := db.Where("ptype = ? AND v0 = ? AND v1 = ?", policy.Ptype, policy.V0, policy.V1).First(&existing)
|
||||
if result.Error == gorm.ErrRecordNotFound {
|
||||
if err := db.Create(&policy).Error; err != nil {
|
||||
return err
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
// 插入 p 策略
|
||||
for _, policy := range pPolicies {
|
||||
var existing model.CasbinRule
|
||||
result := db.Where("ptype = ? AND v0 = ? AND v1 = ? AND v2 = ?", policy.Ptype, policy.V0, policy.V1, policy.V2).First(&existing)
|
||||
if result.Error == gorm.ErrRecordNotFound {
|
||||
if err := db.Create(&policy).Error; err != nil {
|
||||
return err
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
fmt.Println("✓ Casbin 策略数据初始化完成")
|
||||
return nil
|
||||
}
|
||||
|
||||
// cleanupTestData 清理测试数据
|
||||
func cleanupTestData(db *gorm.DB, userID string) {
|
||||
db.Where("user_id = ?", userID).Delete(&model.UserRole{})
|
||||
fmt.Printf("✓ 清理测试用户 %s 的数据\n", userID)
|
||||
}
|
||||
|
||||
// strPtr 返回字符串指针
|
||||
func strPtr(s string) *string {
|
||||
return &s
|
||||
}
|
||||
|
||||
// 辅助函数：检查字符串是否包含通配符匹配
|
||||
func matchPattern(pattern, str string) bool {
|
||||
if pattern == "/*" {
|
||||
return true
|
||||
}
|
||||
if strings.HasSuffix(pattern, "/*") {
|
||||
prefix := strings.TrimSuffix(pattern, "/*")
|
||||
return strings.HasPrefix(str, prefix+"/") || str == prefix
|
||||
}
|
||||
return pattern == str
|
||||
}
|
||||
@@ -246,3 +246,4 @@ casbin:
|
||||
- /api/v1/auth/password/send-code
|
||||
- /api/v1/auth/password/reset
|
||||
- /api/v1/auth/refresh
|
||||
- /api/v1/admin/setup-super-admin
|
||||
|
||||
2
go.sum
2
go.sum
@@ -122,6 +122,8 @@ github.com/google/go-cmp v0.6.0/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeN
|
||||
github.com/google/gofuzz v1.0.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg=
|
||||
github.com/google/pprof v0.0.0-20250317173921-a4b03ec1a45e h1:ijClszYn+mADRFY17kjQEVQ1XRhq2/JR1M3sGqeJoxs=
|
||||
github.com/google/pprof v0.0.0-20250317173921-a4b03ec1a45e/go.mod h1:boTsfXsheKC2y+lKOCMpSfarhxDeIzfZG1jqGcPl3cA=
|
||||
github.com/google/subcommands v1.2.0 h1:vWQspBTo2nEqTUFita5/KeEWlUL8kQObDFbub/EN9oE=
|
||||
github.com/google/subcommands v1.2.0/go.mod h1:ZjhPrFU+Olkh9WazFPsl27BQ4UPiG37m3yTrtFlrHVk=
|
||||
github.com/google/uuid v1.3.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
|
||||
github.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0=
|
||||
github.com/google/uuid v1.6.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
|
||||
|
||||
Reference in New Issue
Block a user