1. 菜单路由修复: /roles /users /logs-audit /terminal-audit 等系统管理子菜单 通过 useLocation 同步 URL 路径到 Tab 选中状态 2. WebSSH错误提示优化: Go error → 友好中文提示 i/o timeout → 连接超时(防火墙或网络不通) connection refused → 端口未开放/SSH服务未启动 cannot find session key → 密码或密钥认证失败 连接提示增加端口号显示 3. 角色权限展示: 31项权限种子数据 (资产管理/云资源/K8s/发布/监控/AIOps/系统管理) 4个角色权限分配: admin(31) ops(27) developer(16) viewer(3) 前端角色卡片显示权限名称而非原始code 4. 操作审计修复: 删除/创建/更新服务器均记录审计日志 批量删除逐条记录审计 5. WebSSH终端审计 (JumpServer模式): - 新增 TerminalSession 模型记录会话(用户/服务器/时间/状态) - webshell.go 录制终端输出(1MB上限) - 终端审计页面: 会话列表+状态筛选+批量删除 - 操作回放: xterm.js 重放录制的终端输出 - WS连接增加JWT鉴权+token传递
132 lines
3.3 KiB
Go
132 lines
3.3 KiB
Go
package handlers
|
|
|
|
import (
|
|
"fmt"
|
|
"net/http"
|
|
"strconv"
|
|
"strings"
|
|
|
|
"ezops/internal/models"
|
|
|
|
"github.com/gin-gonic/gin"
|
|
)
|
|
|
|
// 批量操作域:批量导入 + 批量删除 // Logan.Li
|
|
|
|
// BatchCreateServers 批量导入服务器 // Logan.Li
|
|
// 接收 {servers:[...], region_id, auth_type},逐条校验并创建,跳过重复(主机名或IP已存在)
|
|
func (h *ServerHandler) BatchCreateServers(c *gin.Context) {
|
|
var req models.BatchCreateServerRequest
|
|
if err := c.ShouldBindJSON(&req); err != nil {
|
|
c.JSON(http.StatusBadRequest, models.Response{
|
|
Code: 400,
|
|
Message: "请求参数错误: " + err.Error(),
|
|
})
|
|
return
|
|
}
|
|
|
|
authType := strings.TrimSpace(req.AuthType)
|
|
if authType == "" {
|
|
authType = "password"
|
|
}
|
|
|
|
result := models.BatchCreateResult{Errors: []string{}}
|
|
for i, item := range req.Servers {
|
|
hostname := strings.TrimSpace(item.Hostname)
|
|
ip := strings.TrimSpace(item.IP)
|
|
if hostname == "" || ip == "" {
|
|
result.Failed++
|
|
result.Errors = append(result.Errors, fmt.Sprintf("第%d行: 主机名和IP不能为空", i+2))
|
|
continue
|
|
}
|
|
|
|
// 重复检查(主机名或 IP 已存在则跳过)
|
|
var count int64
|
|
h.db.Model(&models.Server{}).Where("hostname = ? OR ip = ?", hostname, ip).Count(&count)
|
|
if count > 0 {
|
|
result.Skipped++
|
|
continue
|
|
}
|
|
|
|
port := item.Port
|
|
if port == 0 {
|
|
port = 22
|
|
}
|
|
username := strings.TrimSpace(item.Username)
|
|
if username == "" {
|
|
username = "root"
|
|
}
|
|
|
|
server := models.Server{
|
|
Hostname: hostname,
|
|
IP: ip,
|
|
Port: port,
|
|
Username: username,
|
|
AuthType: authType,
|
|
OS: item.OS,
|
|
CPU: item.CPU,
|
|
Memory: item.Memory * 1024, // GB → MB
|
|
Disk: item.Disk,
|
|
Tags: item.Tags,
|
|
RegionID: req.RegionID,
|
|
Status: "stopped",
|
|
}
|
|
if err := h.db.Create(&server).Error; err != nil {
|
|
result.Failed++
|
|
result.Errors = append(result.Errors, fmt.Sprintf("%s(%s): %s", hostname, ip, err.Error()))
|
|
continue
|
|
}
|
|
result.Success++
|
|
}
|
|
|
|
msg := fmt.Sprintf("导入完成: 成功 %d, 跳过 %d, 失败 %d", result.Success, result.Skipped, result.Failed)
|
|
c.JSON(http.StatusOK, models.Response{
|
|
Code: 200,
|
|
Message: msg,
|
|
Data: result,
|
|
})
|
|
}
|
|
|
|
// BatchDeleteServers 批量删除服务器 // Logan.Li
|
|
// @Summary 批量删除服务器
|
|
// @Description 批量删除服务器
|
|
// @Tags 服务器
|
|
// @Accept json
|
|
// @Produce json
|
|
// @Security Bearer
|
|
// @Param request body models.IDsRequest true "删除请求"
|
|
// @Success 200 {object} models.Response
|
|
// @Router /servers/batch-delete [post]
|
|
func (h *ServerHandler) BatchDeleteServers(c *gin.Context) {
|
|
var req models.IDsRequest
|
|
if err := c.ShouldBindJSON(&req); err != nil {
|
|
c.JSON(http.StatusBadRequest, models.Response{
|
|
Code: 400,
|
|
Message: "请求参数错误",
|
|
})
|
|
return
|
|
}
|
|
|
|
// 查询待删除服务器用于审计日志 // Logan.Li
|
|
var servers []models.Server
|
|
h.db.Where("id IN ?", req.IDs).Find(&servers)
|
|
|
|
if err := h.db.Delete(&models.Server{}, req.IDs).Error; err != nil {
|
|
c.JSON(http.StatusInternalServerError, models.Response{
|
|
Code: 500,
|
|
Message: "删除失败",
|
|
})
|
|
return
|
|
}
|
|
|
|
// 记录批量删除审计日志
|
|
for _, s := range servers {
|
|
h.recordServerAudit(c, "delete", s.Hostname+" ("+s.IP+")", strconv.Itoa(int(s.ID)), 1, "")
|
|
}
|
|
|
|
c.JSON(http.StatusOK, models.Response{
|
|
Code: 200,
|
|
Message: "删除成功",
|
|
})
|
|
}
|