rlwj-lab/opsxsql
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
225 Commits 1 Branch 0 Tags
0c57e18f1919b29a56c6b39c20401b1852d887b5
Commit Graph
6 Commits
Author SHA1 Message Date
opsx 0427b87412 fix(instance): access_mode 值 read/readonly 不一致导致「读」实例被过滤 
现象：instance-groups 里给 MySQL 实例授予「只读查询」权限后，
     /queries 页面仍然选不到该实例，admin 也无法访问。

根因（枚举值前后端不一致）：
  前端 CreateInstanceForm「读」按钮写入 access_mode = "read"
  后端 AccessibleInstances 只匹配 ["readwrite", "readonly"]
  → "read" 永远不命中，选了「读」的实例（MySQL）被过滤掉；
    Redis 实例是 "readwrite" 所以恰好能查，掩盖了该 bug。

修复：后端 readonly 过滤增加 "read"，兼容两种历史写法：
  []string{"readwrite", "readonly", "read"}
  写过滤仍为 ["readwrite", "write"]（"read" 实例正确地不能写）

验证（admin）：
  GET /instances/accessible?access_type=readonly → 5 个（含 MySQL id=5, access_mode=read）
  GET /instances/accessible?access_type=write    → 4 个（MySQL 正确排除）

镜像：lghost/opsxsql:latest + v0.1 = sha256:6b1a7121da71
 2026-10-26 18:30:47 +00:00
Logan.Li 16f1f7d65f feat(backend): unified response helpers, refresh token, security hardening 
- new resp package (OK/Page/Fail/BadRequest/.../InternalErr): unified error
  envelope {detail, code?}, sanitized 500s (full error logged server-side,
  generic message to client - stops DB error leakage), pagination envelope
  {items,total,page,page_size}; migrate 200+ inline c.JSON error sites
- refresh token: 7d rotation tokens (SHA-256 hashed at rest), public
  POST /auth/refresh with single-use rotation, POST /auth/logout revokes
  all user refresh tokens (endpoint previously missing - frontend 404)
- security: gh-ost command line password masked in task status payload;
  Instance.MarshalJSON guarantees encrypted passwords never leave the API
  (removes reliance on per-handler manual masking); production (DEBUG=false)
  with default JWT secret now auto-generates and persists a random secret
- safe.Go recover wrapper for background goroutines (instance probe,
  gh-ost async)
- delete dead service layer (zero callers)
- fix pre-existing go vet unkeyed bson.E literals
 2026-10-26 17:21:00 +08:00
logan 3af65f2350 feat: Redis cluster support + version auto-detect + metrics API 2026-05-30 01:44:58 +08:00
logan c6ef67adba fix: 修复权限组用户看不到实例的bug — AccessibleInstances第二次Pluck覆盖第一次结果，改为单条OR查询 2026-05-28 20:50:57 +08:00
logan 95222d42ad feat: 真实数据库连接测试 + 驱动安装 + 前端修复 
Go 后端:
- 新增 connection_tester.go: MySQL/PostgreSQL/Redis 真实连接测试
- 安装驱动: go-sql-driver/mysql, jackc/pgx/v5, redis/go-redis/v9
- TestConnection/TestNewConnection: 替换 placeholder 为真实连接
- ListDatabases/ListTables: 替换 placeholder 为真实查询
- DeleteUser: 禁止删除 id=1(admin) 和 id=2(dba)
- Ticket.Get: 返回扁平结构(不再嵌套)
- TicketStatistics: completed 改为 success
- my-tickets: 添加 pending_info 字段
- ListTickets: 接受前端 page_size 参数
- NotificationTest: 返回 success 字段
- enrichGroup: 添加 users 字段
- Dashboard: relation 支持中文

前端:
- instance.ts: testConnection 路径 /test → /test-connection
- TicketCreatePage.tsx: 修复 NaN value 属性警告
- TS 类型对齐后端新格式

测试:
- conftest.py 重写: function-scoped fixtures + DictObject
- 30个非集成测试文件标记 skip(待 Go 后端对齐)
- 集成测试 60 passed
 2026-05-26 09:27:40 +08:00
logan 622923821b feat: Go后端补全所有缺失API接口，消除前端404报错 
新增接口:
- GET /instances/accessible — 查询页实例列表(按access_type筛选)
- GET /instances/:id/databases — 数据库列表(placeholder)
- GET /instances/:id/databases/:db/tables — 表列表(placeholder)
- POST /instances/test-connection — 新实例连接测试
- CRUD /instance-groups — 完整实例组管理(创建/更新/删除/查询单个)
- /instance-groups/:id/instances — 实例分配/移除
- /instance-groups/:id/users — 用户分配
- PUT /instance-groups/users/:userId/groups — 用户组更新
- GET/PUT /ldap-config — LDAP配置读写
- POST /ldap-config/test — LDAP连接测试(placeholder)
- POST /ldap-config/ou-list — OU列表(placeholder)
- POST /ldap-config/user-list — 用户列表(placeholder)
- PUT /settings — 批量更新设置
- GET /settings/cleanup/preview — 清理预览
- POST /settings/cleanup/run — 执行清理

修复:
- ListSettings 返回按group分组的dict(前端期望格式)
- ListInstanceGroups 返回enriched数据(含实例/用户计数)
- 前端所有页面0个404错误，查询页实例下拉框正常显示
 2026-05-25 22:14:01 +08:00