F1 告警静默规则 [done]: - 后端 alert_silence.go: CRUD + Toggle (onetime/daily/weekly 三模式) - 告警引擎 isSilenced 集成 (alert_engine.go) - 前端 SilenceRuleTab + SilenceDialog - 路由 /alerts/silences 已注册 F2 审计日志导出 [done]: - 重写 ExportAuditLogs: 真正的 CSV 导出 (encoding/csv + UTF-8 BOM) - 支持 module/action/username/startTime/endTime 筛选 - 导出限制 10000 条防溢出,自动记录审计日志 - JSON 格式向后兼容 (format=json) - 前端 exportLogs 传递查询参数 同时包含累积的前期工作: - 目录重构 internal/ -> controller/model/router (v0.55-v0.57) - 后端分层架构 dto/repository/service/utils - 审计模块全功能 (终端审计/操作审计/登录日志) - asciicast v2 录制格式 - SFTP 文件浏览器 - StatStrip 紧凑统计条 - 在线会话自动刷新 - LiveMonitor WebSocket 诊断修复 验证: go build ✅ | npm run build ✅ | Docker 部署 ✅ | 10 回归端点 ✅ | CSV 导出 ✅ | 静默 CRUD ✅
250 lines
7.6 KiB
Go
250 lines
7.6 KiB
Go
package controller
|
|
|
|
import (
|
|
"fmt"
|
|
"net/http"
|
|
"strconv"
|
|
"time"
|
|
|
|
"ezops/model"
|
|
|
|
"github.com/gin-gonic/gin"
|
|
"gorm.io/gorm"
|
|
)
|
|
|
|
// TerminalSessionHandler 终端会话审计处理器 // Logan.Li
|
|
type TerminalSessionHandler struct {
|
|
db *gorm.DB
|
|
killFunc func(sessionID uint) bool // 外部 Kill 回调
|
|
}
|
|
|
|
// NewTerminalSessionHandler 创建终端会话审计处理器
|
|
func NewTerminalSessionHandler(db *gorm.DB, killFunc func(sessionID uint) bool) *TerminalSessionHandler {
|
|
return &TerminalSessionHandler{db: db, killFunc: killFunc}
|
|
}
|
|
|
|
// ListTerminalSessions 终端会话列表
|
|
// GET /api/v1/terminal-sessions?server_id=&username=&status=&page=&page_size=
|
|
func (h *TerminalSessionHandler) ListTerminalSessions(c *gin.Context) {
|
|
var req model.TerminalSessionQuery
|
|
if err := c.ShouldBindQuery(&req); err != nil {
|
|
c.JSON(http.StatusBadRequest, model.Response{Code: 400, Message: err.Error()})
|
|
return
|
|
}
|
|
if req.Page <= 0 {
|
|
req.Page = 1
|
|
}
|
|
if req.PageSize <= 0 {
|
|
req.PageSize = 20
|
|
}
|
|
|
|
query := h.db.Model(&model.TerminalSession{})
|
|
if req.ServerID > 0 {
|
|
query = query.Where("server_id = ?", req.ServerID)
|
|
}
|
|
if req.Username != "" {
|
|
query = query.Where("username LIKE ?", "%"+req.Username+"%")
|
|
}
|
|
if req.Status != "" {
|
|
query = query.Where("status = ?", req.Status)
|
|
}
|
|
|
|
var total int64
|
|
if err := query.Count(&total).Error; err != nil {
|
|
c.JSON(http.StatusInternalServerError, model.Response{Code: 500, Message: "查询失败"})
|
|
return
|
|
}
|
|
|
|
var sessions []model.TerminalSession
|
|
if err := query.Order("id DESC").
|
|
Offset((req.Page - 1) * req.PageSize).
|
|
Limit(req.PageSize).
|
|
Find(&sessions).Error; err != nil {
|
|
c.JSON(http.StatusInternalServerError, model.Response{Code: 500, Message: "查询失败"})
|
|
return
|
|
}
|
|
|
|
c.JSON(http.StatusOK, model.Response{Code: 200, Data: model.ListResponse{
|
|
List: sessions,
|
|
Total: total,
|
|
}})
|
|
}
|
|
|
|
// GetTerminalSession 终端会话详情
|
|
// GET /api/v1/terminal-sessions/:id
|
|
func (h *TerminalSessionHandler) GetTerminalSession(c *gin.Context) {
|
|
id, err := strconv.ParseUint(c.Param("id"), 10, 64)
|
|
if err != nil {
|
|
c.JSON(http.StatusBadRequest, model.Response{Code: 400, Message: "无效的会话ID"})
|
|
return
|
|
}
|
|
|
|
var session model.TerminalSession
|
|
if err := h.db.First(&session, id).Error; err != nil {
|
|
if err == gorm.ErrRecordNotFound {
|
|
c.JSON(http.StatusNotFound, model.Response{Code: 404, Message: "会话不存在"})
|
|
return
|
|
}
|
|
c.JSON(http.StatusInternalServerError, model.Response{Code: 500, Message: "查询失败"})
|
|
return
|
|
}
|
|
|
|
c.JSON(http.StatusOK, model.Response{Code: 200, Data: session})
|
|
}
|
|
|
|
// GetTerminalRecord 终端会话录制数据(用于回放)
|
|
// GET /api/v1/terminal-sessions/:id/record
|
|
func (h *TerminalSessionHandler) GetTerminalRecord(c *gin.Context) {
|
|
id, err := strconv.ParseUint(c.Param("id"), 10, 64)
|
|
if err != nil {
|
|
c.JSON(http.StatusBadRequest, model.Response{Code: 400, Message: "无效的会话ID"})
|
|
return
|
|
}
|
|
|
|
var session model.TerminalSession
|
|
if err := h.db.First(&session, id).Error; err != nil {
|
|
if err == gorm.ErrRecordNotFound {
|
|
c.JSON(http.StatusNotFound, model.Response{Code: 404, Message: "会话不存在"})
|
|
return
|
|
}
|
|
c.JSON(http.StatusInternalServerError, model.Response{Code: 500, Message: "查询失败"})
|
|
return
|
|
}
|
|
|
|
c.JSON(http.StatusOK, model.Response{Code: 200, Data: session.RecordData})
|
|
}
|
|
|
|
// DeleteTerminalSession 删除终端会话记录
|
|
// DELETE /api/v1/terminal-sessions/:id
|
|
func (h *TerminalSessionHandler) DeleteTerminalSession(c *gin.Context) {
|
|
id, err := strconv.ParseUint(c.Param("id"), 10, 64)
|
|
if err != nil {
|
|
c.JSON(http.StatusBadRequest, model.Response{Code: 400, Message: "无效的会话ID"})
|
|
return
|
|
}
|
|
|
|
if err := h.db.Delete(&model.TerminalSession{}, id).Error; err != nil {
|
|
c.JSON(http.StatusInternalServerError, model.Response{Code: 500, Message: "删除失败"})
|
|
return
|
|
}
|
|
|
|
c.JSON(http.StatusOK, model.Response{Code: 200, Message: "删除成功"})
|
|
}
|
|
|
|
// BatchDeleteTerminalSessions 批量删除终端会话记录
|
|
// POST /api/v1/terminal-sessions/batch-delete
|
|
func (h *TerminalSessionHandler) BatchDeleteTerminalSessions(c *gin.Context) {
|
|
var req model.IDsRequest
|
|
if err := c.ShouldBindJSON(&req); err != nil {
|
|
c.JSON(http.StatusBadRequest, model.Response{Code: 400, Message: "无效的请求参数"})
|
|
return
|
|
}
|
|
|
|
result := h.db.Where("id IN ?", req.IDs).Delete(&model.TerminalSession{})
|
|
if result.Error != nil {
|
|
c.JSON(http.StatusInternalServerError, model.Response{Code: 500, Message: "删除失败"})
|
|
return
|
|
}
|
|
|
|
c.JSON(http.StatusOK, model.Response{Code: 200, Message: "删除成功", Data: gin.H{"deleted": result.RowsAffected}})
|
|
}
|
|
|
|
// KillSession 强制终止终端会话
|
|
// POST /api/v1/terminal-sessions/:id/kill
|
|
func (h *TerminalSessionHandler) KillSession(c *gin.Context) {
|
|
id, err := strconv.ParseUint(c.Param("id"), 10, 64)
|
|
if err != nil {
|
|
c.JSON(http.StatusBadRequest, model.Response{Code: 400, Message: "无效的会话ID"})
|
|
return
|
|
}
|
|
|
|
var session model.TerminalSession
|
|
if err := h.db.First(&session, id).Error; err != nil {
|
|
if err == gorm.ErrRecordNotFound {
|
|
c.JSON(http.StatusNotFound, model.Response{Code: 404, Message: "会话不存在"})
|
|
return
|
|
}
|
|
c.JSON(http.StatusInternalServerError, model.Response{Code: 500, Message: "查询失败"})
|
|
return
|
|
}
|
|
|
|
if session.Status == "closed" {
|
|
c.JSON(http.StatusOK, model.Response{Code: 200, Message: "already closed"})
|
|
return
|
|
}
|
|
|
|
// 强制终止 WebShell 连接
|
|
if h.killFunc != nil {
|
|
h.killFunc(session.ID)
|
|
}
|
|
|
|
now := time.Now()
|
|
duration := int(now.Sub(session.StartTime).Seconds())
|
|
if err := h.db.Model(&session).Updates(map[string]interface{}{
|
|
"status": "closed",
|
|
"end_time": now,
|
|
"duration": duration,
|
|
}).Error; err != nil {
|
|
c.JSON(http.StatusInternalServerError, model.Response{Code: 500, Message: "终止失败"})
|
|
return
|
|
}
|
|
|
|
c.JSON(http.StatusOK, model.Response{Code: 200, Message: "已终止"})
|
|
}
|
|
|
|
// DownloadSession 下载终端会话录制文件
|
|
// GET /api/v1/terminal-sessions/:id/download
|
|
func (h *TerminalSessionHandler) DownloadSession(c *gin.Context) {
|
|
id, err := strconv.ParseUint(c.Param("id"), 10, 64)
|
|
if err != nil {
|
|
c.JSON(http.StatusBadRequest, model.Response{Code: 400, Message: "无效的会话ID"})
|
|
return
|
|
}
|
|
|
|
var session model.TerminalSession
|
|
if err := h.db.First(&session, id).Error; err != nil {
|
|
if err == gorm.ErrRecordNotFound {
|
|
c.JSON(http.StatusNotFound, model.Response{Code: 404, Message: "会话不存在"})
|
|
return
|
|
}
|
|
c.JSON(http.StatusInternalServerError, model.Response{Code: 500, Message: "查询失败"})
|
|
return
|
|
}
|
|
|
|
if session.RecordData == "" {
|
|
c.JSON(http.StatusNotFound, model.Response{Code: 404, Message: "无录制数据"})
|
|
return
|
|
}
|
|
|
|
c.Header("Content-Type", "text/plain; charset=utf-8")
|
|
c.Header("Content-Disposition", fmt.Sprintf(`attachment; filename="%d.cast"`, session.ID))
|
|
c.Header("Content-Length", fmt.Sprintf("%d", len(session.RecordData)))
|
|
c.String(http.StatusOK, session.RecordData)
|
|
}
|
|
|
|
// StreamSession 终端会话实时流(WebSocket 暂未实现)
|
|
// GET /api/v1/terminal-sessions/:id/stream
|
|
func (h *TerminalSessionHandler) StreamSession(c *gin.Context) {
|
|
id, err := strconv.ParseUint(c.Param("id"), 10, 64)
|
|
if err != nil {
|
|
c.JSON(http.StatusBadRequest, model.Response{Code: 400, Message: "无效的会话ID"})
|
|
return
|
|
}
|
|
|
|
var session model.TerminalSession
|
|
if err := h.db.First(&session, id).Error; err != nil {
|
|
if err == gorm.ErrRecordNotFound {
|
|
c.JSON(http.StatusNotFound, model.Response{Code: 404, Message: "会话不存在"})
|
|
return
|
|
}
|
|
c.JSON(http.StatusInternalServerError, model.Response{Code: 500, Message: "查询失败"})
|
|
return
|
|
}
|
|
|
|
c.JSON(http.StatusOK, gin.H{
|
|
"message": "WebSocket streaming not yet implemented",
|
|
"session_id": id,
|
|
"status": session.Status,
|
|
})
|
|
}
|