Files
opsxsql/backend/router/router.go
T
logan 88e5f4e7ee feat: Go后端LDAP真实对接 — AES-256-GCM密码加解密 + 登录LDAP fallback
- 新增 crypto.go: AES-256-GCM 加解密,与 Python backend 兼容
- auth.go: Login 添加 LDAP fallback(本地优先→LDAP绑定→自动创建本地用户)
- ldap.go: 实现真实 LDAP 连接/用户搜索/密码验证/OU列表/用户列表
- 所有 LDAP 操作解密 admin_password 后使用
- 新增/更新密码存储时加密
- router.go: 补充 delete-user 路由
- 添加 go-ldap/v3 依赖
2026-05-25 23:32:15 +08:00

164 lines
6.5 KiB
Go

package router
import (
"sql-platform/internal/handler"
"sql-platform/internal/middleware"
"github.com/gin-gonic/gin"
)
func Setup(r *gin.Engine) {
api := r.Group("/api/v1")
// Public routes
api.POST("/auth/login", handler.Login)
// Authenticated routes
auth := api.Group("")
auth.Use(middleware.AuthMiddleware())
{
// Auth
auth.GET("/auth/me", handler.GetMe)
// Dashboard
auth.GET("/dashboard/stats", handler.DashboardStats)
auth.GET("/dashboard/my-tickets", handler.MyTickets)
// Tickets
auth.GET("/tickets/statistics", handler.TicketStatistics)
auth.GET("/tickets", handler.ListTickets)
auth.GET("/tickets/:id", handler.GetTicket)
auth.POST("/tickets", handler.CreateTicket)
auth.POST("/tickets/:id/approve", handler.ApproveTicket)
auth.POST("/tickets/:id/execute", handler.ExecuteTicket)
// Instances
auth.GET("/instances", handler.ListInstances)
auth.GET("/instances/accessible", handler.AccessibleInstances)
auth.GET("/instances/stats", handler.InstanceStats)
auth.GET("/instances/:id", handler.GetInstance)
auth.GET("/instances/:id/databases", handler.ListDatabases)
auth.GET("/instances/:id/databases/:db/tables", handler.ListTables)
auth.POST("/instances/:id/test-connection", handler.TestConnection)
auth.POST("/instances/test-connection", handler.TestNewConnection)
// Instance Detail (databases/tables/schema/processlist/status/users)
auth.GET("/instances/:id/detail/databases", handler.DetailListDatabases)
auth.GET("/instances/:id/detail/tables", handler.DetailListTables)
auth.GET("/instances/:id/detail/db-schema", handler.DetailDbSchema)
auth.GET("/instances/:id/detail/table-detail", handler.DetailTableDetail)
auth.GET("/instances/:id/detail/processlist", handler.DetailProcesslist)
auth.GET("/instances/:id/detail/status", handler.DetailStatus)
auth.POST("/instances/:id/detail/processlist/:pid/kill", handler.DetailKillProcess)
auth.GET("/instances/:id/detail/users", handler.DetailListUsers)
// Instance management (admin/dba only)
admin := auth.Group("")
admin.Use(middleware.RequireRole("admin", "dba"))
{
admin.POST("/instances", handler.CreateInstance)
admin.PUT("/instances/:id", handler.UpdateInstance)
admin.DELETE("/instances/:id", handler.DeleteInstance)
}
// Instance Groups
auth.GET("/instance-groups", handler.ListInstanceGroups)
auth.GET("/instance-groups/:id", handler.GetInstanceGroup)
auth.GET("/instance-groups/:id/users", handler.ListGroupUsers)
auth.POST("/instance-groups/:id/instances", handler.AssignGroupInstances)
auth.DELETE("/instance-groups/:id/instances/:instanceId", handler.RemoveGroupInstance)
auth.POST("/instance-groups/:id/users", handler.AssignGroupUsers)
auth.PUT("/instance-groups/users/:userId/groups", handler.UpdateUserGroups)
// Instance Group management (admin/dba only)
igAdmin := auth.Group("")
igAdmin.Use(middleware.RequireRole("admin", "dba"))
{
igAdmin.POST("/instance-groups", handler.CreateInstanceGroup)
igAdmin.PUT("/instance-groups/:id", handler.UpdateInstanceGroup)
igAdmin.DELETE("/instance-groups/:id", handler.DeleteInstanceGroup)
}
// Redis
auth.GET("/redis/:id/info", handler.RedisInfo)
auth.GET("/redis/:id/dbsize", handler.RedisDbsize)
auth.GET("/redis/:id/keys", handler.RedisScanKeys)
auth.GET("/redis/:id/keys/:key", handler.RedisGetKeyDetail)
auth.GET("/redis/:id/slowlog", handler.RedisSlowlog)
auth.GET("/redis/:id/clients", handler.RedisClients)
auth.POST("/redis/:id/command", handler.RedisExecuteCommand)
auth.POST("/redis/:id/keys", handler.RedisCreateKey)
auth.DELETE("/redis/:id/keys/:key", handler.RedisDeleteKey)
// Users (admin only)
userAdmin := auth.Group("")
userAdmin.Use(middleware.RequireRole("admin"))
{
userAdmin.GET("/users", handler.ListUsers)
userAdmin.POST("/users", handler.CreateUser)
userAdmin.PUT("/users/:id", handler.UpdateUser)
userAdmin.DELETE("/users/:id", handler.DeleteUser)
userAdmin.POST("/users/:id/reset-password", handler.ResetUserPassword)
userAdmin.POST("/users/batch-import", handler.BatchImportUsers)
userAdmin.POST("/users/batch-import-ldap", handler.BatchImportLdapUsers)
userAdmin.GET("/users/import-template", handler.ImportTemplate)
}
// LDAP config (admin only)
ldapAdmin := auth.Group("")
ldapAdmin.Use(middleware.RequireRole("admin"))
{
ldapAdmin.GET("/ldap-config", handler.GetLDAPConfig)
ldapAdmin.PUT("/ldap-config", handler.UpdateLDAPConfig)
ldapAdmin.POST("/ldap-config/test", handler.TestLDAPConnection)
ldapAdmin.POST("/ldap-config/ou-list", handler.ListLDAPOUs)
ldapAdmin.POST("/ldap-config/user-list", handler.ListLDAPUsers)
ldapAdmin.POST("/ldap-config/create-ou", handler.CreateLDAPOU)
ldapAdmin.POST("/ldap-config/create-user", handler.CreateLDAPUser)
ldapAdmin.POST("/ldap-config/batch-import-ldap", handler.BatchImportLDAP)
ldapAdmin.POST("/ldap-config/delete-user", handler.DeleteLDAPUser)
}
// Settings
auth.GET("/settings", handler.ListSettings)
auth.PUT("/settings", handler.UpdateSettings)
auth.GET("/settings/cleanup/preview", handler.SettingsCleanupPreview)
auth.POST("/settings/cleanup/run", handler.SettingsCleanupRun)
// gh-ost (admin/dba only)
ghostGroup := auth.Group("")
ghostGroup.Use(middleware.RequireRole("admin", "dba"))
{
ghostGroup.POST("/ghost/dry-run", handler.GhOstDryRun)
ghostGroup.POST("/ghost/execute", handler.GhOstExecute)
ghostGroup.GET("/ghost/status/:taskId", handler.GhOstStatus)
ghostGroup.GET("/ghost/tasks", handler.GhOstListTasks)
}
// Audit Logs
auth.GET("/audit-logs", handler.ListAuditLogs)
// Query execution
auth.POST("/query/execute", handler.ExecuteQuery)
// Read-only resources
auth.GET("/audit-rules", handler.ListAuditRules)
auth.GET("/announcements", handler.ListAnnouncements)
auth.GET("/query-histories", handler.ListQueryHistories)
// Notifications CRUD (replaces old channels/templates endpoints)
auth.GET("/notifications", handler.ListNotifications)
auth.POST("/notifications", handler.CreateNotification)
auth.PUT("/notifications/:id", handler.UpdateNotification)
auth.DELETE("/notifications/:id", handler.DeleteNotification)
auth.POST("/notifications/:id/test", handler.TestNotificationSend)
auth.GET("/workflows", handler.ListWorkflows)
auth.GET("/workflows/:id", handler.GetWorkflow)
auth.POST("/workflows", handler.CreateWorkflow)
auth.PUT("/workflows/:id", handler.UpdateWorkflow)
auth.DELETE("/workflows/:id", handler.DeleteWorkflow)
auth.POST("/workflows/:id/set-default", handler.SetDefaultWorkflow)
auth.POST("/workflows/:id/clone", handler.CloneWorkflow)
}
}