- 新增 crypto.go: AES-256-GCM 加解密,与 Python backend 兼容 - auth.go: Login 添加 LDAP fallback(本地优先→LDAP绑定→自动创建本地用户) - ldap.go: 实现真实 LDAP 连接/用户搜索/密码验证/OU列表/用户列表 - 所有 LDAP 操作解密 admin_password 后使用 - 新增/更新密码存储时加密 - router.go: 补充 delete-user 路由 - 添加 go-ldap/v3 依赖
164 lines
6.5 KiB
Go
164 lines
6.5 KiB
Go
package router
|
|
|
|
import (
|
|
"sql-platform/internal/handler"
|
|
"sql-platform/internal/middleware"
|
|
|
|
"github.com/gin-gonic/gin"
|
|
)
|
|
|
|
func Setup(r *gin.Engine) {
|
|
api := r.Group("/api/v1")
|
|
|
|
// Public routes
|
|
api.POST("/auth/login", handler.Login)
|
|
|
|
// Authenticated routes
|
|
auth := api.Group("")
|
|
auth.Use(middleware.AuthMiddleware())
|
|
{
|
|
// Auth
|
|
auth.GET("/auth/me", handler.GetMe)
|
|
|
|
// Dashboard
|
|
auth.GET("/dashboard/stats", handler.DashboardStats)
|
|
auth.GET("/dashboard/my-tickets", handler.MyTickets)
|
|
|
|
// Tickets
|
|
auth.GET("/tickets/statistics", handler.TicketStatistics)
|
|
auth.GET("/tickets", handler.ListTickets)
|
|
auth.GET("/tickets/:id", handler.GetTicket)
|
|
auth.POST("/tickets", handler.CreateTicket)
|
|
auth.POST("/tickets/:id/approve", handler.ApproveTicket)
|
|
auth.POST("/tickets/:id/execute", handler.ExecuteTicket)
|
|
|
|
// Instances
|
|
auth.GET("/instances", handler.ListInstances)
|
|
auth.GET("/instances/accessible", handler.AccessibleInstances)
|
|
auth.GET("/instances/stats", handler.InstanceStats)
|
|
auth.GET("/instances/:id", handler.GetInstance)
|
|
auth.GET("/instances/:id/databases", handler.ListDatabases)
|
|
auth.GET("/instances/:id/databases/:db/tables", handler.ListTables)
|
|
auth.POST("/instances/:id/test-connection", handler.TestConnection)
|
|
auth.POST("/instances/test-connection", handler.TestNewConnection)
|
|
|
|
// Instance Detail (databases/tables/schema/processlist/status/users)
|
|
auth.GET("/instances/:id/detail/databases", handler.DetailListDatabases)
|
|
auth.GET("/instances/:id/detail/tables", handler.DetailListTables)
|
|
auth.GET("/instances/:id/detail/db-schema", handler.DetailDbSchema)
|
|
auth.GET("/instances/:id/detail/table-detail", handler.DetailTableDetail)
|
|
auth.GET("/instances/:id/detail/processlist", handler.DetailProcesslist)
|
|
auth.GET("/instances/:id/detail/status", handler.DetailStatus)
|
|
auth.POST("/instances/:id/detail/processlist/:pid/kill", handler.DetailKillProcess)
|
|
auth.GET("/instances/:id/detail/users", handler.DetailListUsers)
|
|
|
|
// Instance management (admin/dba only)
|
|
admin := auth.Group("")
|
|
admin.Use(middleware.RequireRole("admin", "dba"))
|
|
{
|
|
admin.POST("/instances", handler.CreateInstance)
|
|
admin.PUT("/instances/:id", handler.UpdateInstance)
|
|
admin.DELETE("/instances/:id", handler.DeleteInstance)
|
|
}
|
|
|
|
// Instance Groups
|
|
auth.GET("/instance-groups", handler.ListInstanceGroups)
|
|
auth.GET("/instance-groups/:id", handler.GetInstanceGroup)
|
|
auth.GET("/instance-groups/:id/users", handler.ListGroupUsers)
|
|
auth.POST("/instance-groups/:id/instances", handler.AssignGroupInstances)
|
|
auth.DELETE("/instance-groups/:id/instances/:instanceId", handler.RemoveGroupInstance)
|
|
auth.POST("/instance-groups/:id/users", handler.AssignGroupUsers)
|
|
auth.PUT("/instance-groups/users/:userId/groups", handler.UpdateUserGroups)
|
|
|
|
// Instance Group management (admin/dba only)
|
|
igAdmin := auth.Group("")
|
|
igAdmin.Use(middleware.RequireRole("admin", "dba"))
|
|
{
|
|
igAdmin.POST("/instance-groups", handler.CreateInstanceGroup)
|
|
igAdmin.PUT("/instance-groups/:id", handler.UpdateInstanceGroup)
|
|
igAdmin.DELETE("/instance-groups/:id", handler.DeleteInstanceGroup)
|
|
}
|
|
|
|
// Redis
|
|
auth.GET("/redis/:id/info", handler.RedisInfo)
|
|
auth.GET("/redis/:id/dbsize", handler.RedisDbsize)
|
|
auth.GET("/redis/:id/keys", handler.RedisScanKeys)
|
|
auth.GET("/redis/:id/keys/:key", handler.RedisGetKeyDetail)
|
|
auth.GET("/redis/:id/slowlog", handler.RedisSlowlog)
|
|
auth.GET("/redis/:id/clients", handler.RedisClients)
|
|
auth.POST("/redis/:id/command", handler.RedisExecuteCommand)
|
|
auth.POST("/redis/:id/keys", handler.RedisCreateKey)
|
|
auth.DELETE("/redis/:id/keys/:key", handler.RedisDeleteKey)
|
|
|
|
// Users (admin only)
|
|
userAdmin := auth.Group("")
|
|
userAdmin.Use(middleware.RequireRole("admin"))
|
|
{
|
|
userAdmin.GET("/users", handler.ListUsers)
|
|
userAdmin.POST("/users", handler.CreateUser)
|
|
userAdmin.PUT("/users/:id", handler.UpdateUser)
|
|
userAdmin.DELETE("/users/:id", handler.DeleteUser)
|
|
userAdmin.POST("/users/:id/reset-password", handler.ResetUserPassword)
|
|
userAdmin.POST("/users/batch-import", handler.BatchImportUsers)
|
|
userAdmin.POST("/users/batch-import-ldap", handler.BatchImportLdapUsers)
|
|
userAdmin.GET("/users/import-template", handler.ImportTemplate)
|
|
}
|
|
|
|
// LDAP config (admin only)
|
|
ldapAdmin := auth.Group("")
|
|
ldapAdmin.Use(middleware.RequireRole("admin"))
|
|
{
|
|
ldapAdmin.GET("/ldap-config", handler.GetLDAPConfig)
|
|
ldapAdmin.PUT("/ldap-config", handler.UpdateLDAPConfig)
|
|
ldapAdmin.POST("/ldap-config/test", handler.TestLDAPConnection)
|
|
ldapAdmin.POST("/ldap-config/ou-list", handler.ListLDAPOUs)
|
|
ldapAdmin.POST("/ldap-config/user-list", handler.ListLDAPUsers)
|
|
ldapAdmin.POST("/ldap-config/create-ou", handler.CreateLDAPOU)
|
|
ldapAdmin.POST("/ldap-config/create-user", handler.CreateLDAPUser)
|
|
ldapAdmin.POST("/ldap-config/batch-import-ldap", handler.BatchImportLDAP)
|
|
ldapAdmin.POST("/ldap-config/delete-user", handler.DeleteLDAPUser)
|
|
}
|
|
|
|
// Settings
|
|
auth.GET("/settings", handler.ListSettings)
|
|
auth.PUT("/settings", handler.UpdateSettings)
|
|
auth.GET("/settings/cleanup/preview", handler.SettingsCleanupPreview)
|
|
auth.POST("/settings/cleanup/run", handler.SettingsCleanupRun)
|
|
|
|
// gh-ost (admin/dba only)
|
|
ghostGroup := auth.Group("")
|
|
ghostGroup.Use(middleware.RequireRole("admin", "dba"))
|
|
{
|
|
ghostGroup.POST("/ghost/dry-run", handler.GhOstDryRun)
|
|
ghostGroup.POST("/ghost/execute", handler.GhOstExecute)
|
|
ghostGroup.GET("/ghost/status/:taskId", handler.GhOstStatus)
|
|
ghostGroup.GET("/ghost/tasks", handler.GhOstListTasks)
|
|
}
|
|
|
|
// Audit Logs
|
|
auth.GET("/audit-logs", handler.ListAuditLogs)
|
|
|
|
// Query execution
|
|
auth.POST("/query/execute", handler.ExecuteQuery)
|
|
|
|
// Read-only resources
|
|
auth.GET("/audit-rules", handler.ListAuditRules)
|
|
auth.GET("/announcements", handler.ListAnnouncements)
|
|
auth.GET("/query-histories", handler.ListQueryHistories)
|
|
// Notifications CRUD (replaces old channels/templates endpoints)
|
|
auth.GET("/notifications", handler.ListNotifications)
|
|
auth.POST("/notifications", handler.CreateNotification)
|
|
auth.PUT("/notifications/:id", handler.UpdateNotification)
|
|
auth.DELETE("/notifications/:id", handler.DeleteNotification)
|
|
auth.POST("/notifications/:id/test", handler.TestNotificationSend)
|
|
auth.GET("/workflows", handler.ListWorkflows)
|
|
auth.GET("/workflows/:id", handler.GetWorkflow)
|
|
auth.POST("/workflows", handler.CreateWorkflow)
|
|
auth.PUT("/workflows/:id", handler.UpdateWorkflow)
|
|
auth.DELETE("/workflows/:id", handler.DeleteWorkflow)
|
|
auth.POST("/workflows/:id/set-default", handler.SetDefaultWorkflow)
|
|
auth.POST("/workflows/:id/clone", handler.CloneWorkflow)
|
|
|
|
}
|
|
}
|