- 品牌: Go 模块/数据文件/二进制/构建部署资产全部 opsx→lokistack;前端 localStorage 命名空间迁移(读旧写新,含按用户 id 前缀迁移);修复 nginx upstream 与 Makefile 引用已改名服务的断裂 - i18n: react-i18next 落地,common + 11 个页面域命名空间全站中英(菜单/顶栏/登录/列表页/表单/确认弹窗/状态徽章);设置页语言即时切换;修复词典自注册导致的循环导入白屏 - 用户管理: 批量删除(POST /users/batch-delete,不删自己/最后管理员,部分失败不阻断)+ 行复选/全选/批量工具条 - 主题: 浅色侧栏(中性灰激活态)、四态模式(浅色/深色/跟随系统/定时切换,按时区判定)、顶栏太阳月亮二态、设置页紧凑分段选择器 - UI: 登录记住用户名、CardActionButton 统一五页卡片操作钮、shadcn Badge 替换手写徽章、语义色修正 - 清理: 移除主机 Web 终端(前后端)、k8s-helm/Helm 遗留代码与字段、README 重写精简 - 修复: 侧栏与日志告警 order 重复、路由标题 i18n key 未翻译、词典双逗号等
82 lines
2.3 KiB
Go
82 lines
2.3 KiB
Go
package controllers
|
|
|
|
import (
|
|
"lokistack/dto"
|
|
"lokistack/services"
|
|
"lokistack/utils"
|
|
|
|
"github.com/gin-gonic/gin"
|
|
)
|
|
|
|
// LdapController LDAP 配置与用户导入(配置读写仅 admin)
|
|
type LdapController struct{}
|
|
|
|
func NewLdapController() *LdapController {
|
|
return &LdapController{}
|
|
}
|
|
|
|
// GetConfig LDAP 配置(密码剔除,附 hasPassword/configured)
|
|
func (ctrl *LdapController) GetConfig(c *gin.Context) {
|
|
utils.Success(c, services.GetLDAPPublicConfig())
|
|
}
|
|
|
|
// UpdateConfig 保存配置(bindPassword 空则保留旧值)
|
|
func (ctrl *LdapController) UpdateConfig(c *gin.Context) {
|
|
var req dto.LdapConfigRequest
|
|
if !utils.BindAndValidate(c, &req) {
|
|
return
|
|
}
|
|
cfg := &services.LDAPConfig{
|
|
Enabled: req.Enabled, Host: req.Host, Port: req.Port, UseSSL: req.UseSSL,
|
|
BindDN: req.BindDN, BindPassword: req.BindPassword, BaseDN: req.BaseDN,
|
|
UserFilter: req.UserFilter, UsernameAttr: req.UsernameAttr,
|
|
NameAttr: req.NameAttr, EmailAttr: req.EmailAttr,
|
|
}
|
|
if err := services.SaveLDAPConfig(cfg); err != nil {
|
|
utils.Error(c, 400, err.Error())
|
|
return
|
|
}
|
|
utils.Success(c, services.GetLDAPPublicConfig())
|
|
}
|
|
|
|
// TestConnection 用表单参数测试(未保存也可测;密码空回退已存;可选用户级验证)
|
|
func (ctrl *LdapController) TestConnection(c *gin.Context) {
|
|
var req dto.LdapConfigRequest
|
|
if !utils.BindAndValidate(c, &req) {
|
|
return
|
|
}
|
|
cfg := &services.LDAPConfig{
|
|
Enabled: req.Enabled, Host: req.Host, Port: req.Port, UseSSL: req.UseSSL,
|
|
BindDN: req.BindDN, BindPassword: req.BindPassword, BaseDN: req.BaseDN,
|
|
UserFilter: req.UserFilter, UsernameAttr: req.UsernameAttr,
|
|
NameAttr: req.NameAttr, EmailAttr: req.EmailAttr,
|
|
}
|
|
if cfg.Port == 0 {
|
|
cfg.Port = 389
|
|
}
|
|
result := services.TestLDAPConnection(cfg, req.TestUsername, req.TestPassword)
|
|
utils.Success(c, result)
|
|
}
|
|
|
|
// ListUsers 导入预览:按 ouDN(空用 baseDN)搜索用户
|
|
func (ctrl *LdapController) ListUsers(c *gin.Context) {
|
|
var req dto.LdapUsersRequest
|
|
if !utils.BindAndValidate(c, &req) {
|
|
return
|
|
}
|
|
cfg := services.GetLDAPConfig()
|
|
if !cfg.Enabled || cfg.Host == "" {
|
|
utils.Error(c, 400, "LDAP 未启用或未配置")
|
|
return
|
|
}
|
|
if req.BindPassword != "" {
|
|
cfg.BindPassword = req.BindPassword
|
|
}
|
|
users, err := services.SearchLDAPUsersForImport(cfg, req.OUDN)
|
|
if err != nil {
|
|
utils.Error(c, 400, err.Error())
|
|
return
|
|
}
|
|
utils.Success(c, users)
|
|
}
|