+ +	+ + + {/* 左侧：模式切换按钮 /} + + {/ 中间：列标题 /} + + {/ 右侧：排序/筛选图标 /} + + + + {openFilterColumn === col.key && ( + + + + )} + + {/ 右侧：拖拽手柄（宽点击区 + 细可见线） */} + onResizeStart(col.key, e)} + > + + +	操作
加载中...
暂无数据
+ toggleSelect(row.id)} + className="rounded border-slate-300 dark:border-slate-600" /> +	{row.device_type}	+ {row.node_name \|\| '-'} +	{row.business_ip \|\| '-'}	{row.hdm_ip ? {row.hdm_ip} : '-'}	{row.manufacturer \|\| '-'}	{row.device_model \|\| '-'}	{row.serial_number \|\| '-'}	{row.status ?? '-'}	+ + + + + + + + + +

API Key 管理

+ +

+ + {newKey && ( +

API Key 已创建（仅显示一次，请妥善保存）

+ {newKey} + +

+ )} + + {loading ?

加载中...

: r.id} />} + + setCreateOpen(false)} title="创建 API Key" footer={ + <> + + + + }> + setName(e.target.value)} placeholder="例如：监控系统" /> + + + setDeleteTarget(null)} title="确认删除"> +

确定要删除 API Key「{deleteTarget?.name}」吗？使用该 Key 的应用将无法访问。

+ + +

+ + + ) +} diff --git a/src/app/(app)/settings/page.tsx b/src/app/(app)/settings/page.tsx new file mode 100644 index 0000000..fad700e --- /dev/null +++ b/src/app/(app)/settings/page.tsx @@ -0,0 +1,37 @@ +import Link from 'next/link' +import Card from '@/components/ui/Card' +import { Users, Shield, KeyRound } from 'lucide-react' + +const items = [ + { href: '/settings/users', label: '用户管理', desc: '管理系统用户和访问权限', icon: Users }, + { href: '/settings/roles', label: '角色权限', desc: '配置角色和权限策略', icon: Shield }, + { href: '/settings/api-keys', label: 'API Key', desc: '管理 API 访问密钥', icon: KeyRound }, +] + +export default function SettingsPage() { + return ( +

系统设置

+ {items.map(item => { + const Icon = item.icon + return ( + + +

+ +

{item.label}

{item.desc}

+ + + ) + })} +

+ ) +} diff --git a/src/app/(app)/settings/roles/page.tsx b/src/app/(app)/settings/roles/page.tsx new file mode 100644 index 0000000..6ef10c6 --- /dev/null +++ b/src/app/(app)/settings/roles/page.tsx @@ -0,0 +1,46 @@ +'use client' +import Card from '@/components/ui/Card' +import Badge from '@/components/ui/Badge' + +const permissionLabels: Record = { + '*': '所有权限', + 'assets:read': '资产读取', + 'assets:write': '资产写入', + 'assets:delete': '资产删除', + 'users:read': '用户读取', + 'users:write': '用户管理', + 'api-keys:read': 'API Key 读取', + 'api-keys:write': 'API Key 管理', +} + +const defaultRoles = [ + { name: 'admin', display_name: '管理员', permissions: ['*'], color: 'blue' as const }, + { name: 'editor', display_name: '编辑者', permissions: ['assets:read', 'assets:write', 'assets:delete'], color: 'green' as const }, + { name: 'viewer', display_name: '查看者', permissions: ['assets:read'], color: 'gray' as const }, +] + +export default function RolesPage() { + return ( +

角色权限

+ {defaultRoles.map(role => ( + +

+ {role.name} +

+ {role.permissions.map(p => ( + + {permissionLabels[p] || p} + + ))} +

+ + ))} +

+ ) +} diff --git a/src/app/(app)/settings/users/page.tsx b/src/app/(app)/settings/users/page.tsx new file mode 100644 index 0000000..bb5931c --- /dev/null +++ b/src/app/(app)/settings/users/page.tsx @@ -0,0 +1,126 @@ +'use client' +import { useState, useEffect } from 'react' +import Table, { Column } from '@/components/ui/Table' +import Button from '@/components/ui/Button' +import Input from '@/components/ui/Input' +import Select from '@/components/ui/Select' +import Modal from '@/components/ui/Modal' +import Badge from '@/components/ui/Badge' +import { Plus, Edit, Trash2 } from 'lucide-react' + +interface UserItem { + id: number; username: string; display_name: string; email: string | null; + role: string; is_active: number; created_at: string +} + +const roles = [ + { value: 'admin', label: '管理员' }, + { value: 'editor', label: '编辑者' }, + { value: 'viewer', label: '查看者' }, +] + +export default function UsersPage() { + const [users, setUsers] = useState([]) + const [loading, setLoading] = useState(true) + const [modalOpen, setModalOpen] = useState(false) + const [editing, setEditing] = useState(null) + const [form, setForm] = useState({ username: '', password: '', display_name: '', email: '', role: 'viewer' }) + const [error, setError] = useState('') + const [saving, setSaving] = useState(false) + const [deleteTarget, setDeleteTarget] = useState(null) + + async function fetchUsers() { + const res = await fetch('/api/users') + if (res.ok) { const data = await res.json(); setUsers(data.users) } + } + + useEffect(() => { fetchUsers().finally(() => setLoading(false)) }, []) + + function openCreate() { + setEditing(null) + setForm({ username: '', password: '', display_name: '', email: '', role: 'viewer' }) + setError('') + setModalOpen(true) + } + + function openEdit(user: UserItem) { + setEditing(user) + setForm({ username: user.username, password: '', display_name: user.display_name, email: user.email || '', role: user.role }) + setError('') + setModalOpen(true) + } + + async function handleSave() { + setSaving(true); setError('') + try { + if (editing) { + const body: Record = { display_name: form.display_name, email: form.email, role: form.role } + if (form.password) body.password = form.password + const res = await fetch(`/api/users/${editing.id}`, { method: 'PUT', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify(body) }) + if (!res.ok) { const d = await res.json(); setError(d.error); return } + } else { + if (!form.username || !form.password) { setError('用户名和密码不能为空'); return } + const res = await fetch('/api/users', { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify(form) }) + if (!res.ok) { const d = await res.json(); setError(d.error); return } + } + setModalOpen(false) + fetchUsers() + } finally { setSaving(false) } + } + + async function handleDelete() { + if (!deleteTarget) return + const res = await fetch(`/api/users/${deleteTarget.id}`, { method: 'DELETE' }) + if (res.ok) { setDeleteTarget(null); fetchUsers() } + } + + const columns: Column[] = [ + { key: 'username', title: '用户名' }, + { key: 'display_name', title: '显示名称', render: (r) => {r.display_name} }, + { key: 'email', title: '邮箱', render: (r) => r.email || '-' }, + { key: 'role', title: '角色', render: (r) => {roles.find(ro => ro.value === r.role)?.label || r.role} }, + { key: 'is_active', title: '状态', render: (r) => {r.is_active ? '启用' : '禁用'} }, + { key: 'created_at', title: '创建时间' }, + { key: 'actions', title: '操作', render: (r) => ( +

+ + +

+ )}, + ] + + return ( +

用户管理

+ +

+ + {loading ?

加载中...

r.id} />} + + setModalOpen(false)} title={editing ? '编辑用户' : '新建用户'} footer={ + <> + + + + }> + {error &&

{error}

} +

+ {!editing && setForm(p => ({ ...p, username: e.target.value }))} />} + setForm(p => ({ ...p, display_name: e.target.value }))} /> + setForm(p => ({ ...p, email: e.target.value }))} /> + setForm(p => ({ ...p, password: e.target.value }))} /> + setUsername(e.target.value)} placeholder="请输入用户名" + className="w-full px-3 py-2 rounded-lg border border-slate-300 dark:border-slate-600 bg-white dark:bg-slate-800 text-slate-900 dark:text-white placeholder:text-slate-400 focus:outline-none focus:ring-2 focus:ring-blue-500 focus:border-transparent" required /> +

+ 密码 + setPassword(e.target.value)} placeholder="请输入密码" + className="w-full px-3 py-2 rounded-lg border border-slate-300 dark:border-slate-600 bg-white dark:bg-slate-800 text-slate-900 dark:text-white placeholder:text-slate-400 focus:outline-none focus:ring-2 focus:ring-blue-500 focus:border-transparent" required /> +

+ + + + + ) +} diff --git a/src/app/(auth)/login/page.tsx b/src/app/(auth)/login/page.tsx new file mode 100644 index 0000000..b85471f --- /dev/null +++ b/src/app/(auth)/login/page.tsx @@ -0,0 +1,12 @@ +import { Suspense } from 'react' +import { LoginForm } from './LoginForm' + +export const dynamic = 'force-dynamic' + +export default function LoginPage() { + return ( +

加载中...

}> + + + ) +} diff --git a/src/app/api/api-keys/[id]/route.ts b/src/app/api/api-keys/[id]/route.ts new file mode 100644 index 0000000..67e4a14 --- /dev/null +++ b/src/app/api/api-keys/[id]/route.ts @@ -0,0 +1,27 @@ +import { NextResponse } from 'next/server' +import { cookies } from 'next/headers' +import db from '@/lib/db' +import { verifyJwt } from '@/lib/auth' +import { checkPermission } from '@/lib/permissions' + +async function getSession() { + const cookieStore = await cookies() + const token = cookieStore.get('session_assets')?.value + if (!token) return null + return verifyJwt(token) +} + +export async function DELETE(_request: Request, { params }: { params: Promise<{ id: string }> }) { + const session = await getSession() + if (!session) return NextResponse.json({ error: '未授权' }, { status: 401 }) + if (!checkPermission(session.role, 'api-keys:write')) { + return NextResponse.json({ error: '权限不足' }, { status: 403 }) + } + + const { id } = await params + const existing = db.prepare('SELECT id FROM api_keys WHERE id = ?').get(id) + if (!existing) return NextResponse.json({ error: 'API Key 不存在' }, { status: 404 }) + + db.prepare('DELETE FROM api_keys WHERE id = ?').run(id) + return NextResponse.json({ success: true }) +} diff --git a/src/app/api/api-keys/route.ts b/src/app/api/api-keys/route.ts new file mode 100644 index 0000000..7e24e3d --- /dev/null +++ b/src/app/api/api-keys/route.ts @@ -0,0 +1,53 @@ +import { NextResponse } from 'next/server' +import { cookies } from 'next/headers' +import db from '@/lib/db' +import { verifyJwt, generateApiKey, hashApiKey } from '@/lib/auth' +import { checkPermission } from '@/lib/permissions' + +async function getSession() { + const cookieStore = await cookies() + const token = cookieStore.get('session_assets')?.value + if (!token) return null + return verifyJwt(token) +} + +export async function GET() { + const session = await getSession() + if (!session) return NextResponse.json({ error: '未授权' }, { status: 401 }) + if (!checkPermission(session.role, 'api-keys:read')) { + return NextResponse.json({ error: '权限不足' }, { status: 403 }) + } + + const keys = db.prepare('SELECT id, name, permissions, last_used_at, expires_at, is_active, created_at FROM api_keys ORDER BY id DESC').all() + return NextResponse.json({ keys }) +} + +export async function POST(request: Request) { + const session = await getSession() + if (!session) return NextResponse.json({ error: '未授权' }, { status: 401 }) + if (!checkPermission(session.role, 'api-keys:write')) { + return NextResponse.json({ error: '权限不足' }, { status: 403 }) + } + + try { + const body = await request.json() + const { name, permissions, expires_at } = body + if (!name) { + return NextResponse.json({ error: '名称不能为空' }, { status: 400 }) + } + + const key = generateApiKey() + const keyHash = hashApiKey(key) + const perms = JSON.stringify(permissions || ['assets:read']) + + const result = db.prepare('INSERT INTO api_keys (name, key_hash, permissions, expires_at, created_by) VALUES (?, ?, ?, ?, ?)') + .run(name, keyHash, perms, expires_at || null, session.userId) + + const apiKey = db.prepare('SELECT id, name, permissions, expires_at, is_active, created_at FROM api_keys WHERE id = ?').get(result.lastInsertRowid) + + return NextResponse.json({ key, apiKey }, { status: 201 }) + } catch (e) { + const msg = e instanceof Error ? e.message : '创建 API Key 失败' + return NextResponse.json({ error: msg }, { status: 500 }) + } +} diff --git a/src/app/api/assets/[id]/route.ts b/src/app/api/assets/[id]/route.ts new file mode 100644 index 0000000..783c02f --- /dev/null +++ b/src/app/api/assets/[id]/route.ts @@ -0,0 +1,111 @@ +import { NextResponse } from 'next/server' +import { cookies } from 'next/headers' +import db from '@/lib/db' +import { verifyJwt, verifyApiKey } from '@/lib/auth' +import { checkPermission } from '@/lib/permissions' + +async function getSession() { + const cookieStore = await cookies() + const token = cookieStore.get('session_assets')?.value + if (!token) return null + return verifyJwt(token) +} + +function getApiKeyAuth(request: Request) { + const auth = request.headers.get('Authorization') || '' + if (!auth.startsWith('Bearer ')) return null + return verifyApiKey(auth.slice(7)) +} + +export async function GET(request: Request, { params }: { params: Promise<{ id: string }> }) { + const session = await getSession() + const apiKey = getApiKeyAuth(request) + if (!session && !apiKey) return NextResponse.json({ error: '未授权' }, { status: 401 }) + + const { id } = await params + const asset = db.prepare('SELECT * FROM assets WHERE id = ?').get(id) + if (!asset) return NextResponse.json({ error: '资产不存在' }, { status: 404 }) + return NextResponse.json({ asset }) +} + +export async function PUT(request: Request, { params }: { params: Promise<{ id: string }> }) { + const session = await getSession() + if (!session) return NextResponse.json({ error: '未授权' }, { status: 401 }) + if (!checkPermission(session.role, 'assets:write')) { + return NextResponse.json({ error: '权限不足' }, { status: 403 }) + } + + const { id } = await params + const existing = db.prepare('SELECT * FROM assets WHERE id = ?').get(id) + if (!existing) return NextResponse.json({ error: '资产不存在' }, { status: 404 }) + + try { + const body = await request.json() + const fields = [ + 'serial_number', 'device_type', 'device_purpose', 'room', 'rack_position', + 'node_name', 'business_ip', 'hdm_ip', 'manufacturer', 'device_model', + 'status', 'warranty_date', + 'cpu_model', 'cpu_generation', 'cpu_cores', 'cpu_count', 'cpu_threads', 'cpu_spec', + 'memory_model', 'memory_frequency', 'memory_unit_capacity', 'memory_count', 'memory_total', + 'gpu_model', 'gpu_power', 'gpu_count', + 'nic1_model', 'nic1_type', 'nic1_speed', 'nic1_count', + 'nic2_model', 'nic2_type', 'nic2_speed', 'nic2_count', + 'nic3_model', 'nic3_type', 'nic3_speed', 'nic3_count', + 'sys_disk_model', 'sys_disk_spec', 'sys_disk_capacity', 'sys_disk_type', 'sys_disk_protocol', 'sys_disk_speed', 'sys_disk_count', + 'data_disk1_model', 'data_disk1_spec', 'data_disk1_capacity', 'data_disk1_type', 'data_disk1_protocol', 'data_disk1_speed', 'data_disk1_count', + 'data_disk2_model', 'data_disk2_spec', 'data_disk2_capacity', 'data_disk2_type', 'data_disk2_protocol', 'data_disk2_speed', 'data_disk2_count', + 'data_disk_total_space', + 'raid_model', 'raid_spec', 'raid_count', + 'psu1_model', 'psu1_power', 'psu1_count', + 'psu2_model', 'psu2_power', 'psu2_count', + 'psu_total_power', + 'board_model', 'board_count', + 'raw_data', + ] + + const updates: string[] = [] + const values: unknown[] = [] + for (const f of fields) { + if (body[f] !== undefined) { + updates.push(`${f} = ?`) + values.push(body[f] === '' ? null : body[f]) + } + } + + if (updates.length === 0) { + return NextResponse.json({ error: '没有要更新的字段' }, { status: 400 }) + } + + updates.push("updated_at = datetime('now')") + values.push(id) + + db.prepare(`UPDATE assets SET ${updates.join(', ')} WHERE id = ?`).run(...values) + + db.prepare(`INSERT INTO audit_logs (user_id, action, entity_type, entity_id, ip_address) VALUES (?, 'update', 'asset', ?, ?)`) + .run(session.userId, id, null) + + const asset = db.prepare('SELECT * FROM assets WHERE id = ?').get(id) + return NextResponse.json({ asset }) + } catch (e) { + const msg = e instanceof Error ? e.message : '更新失败' + return NextResponse.json({ error: msg }, { status: 500 }) + } +} + +export async function DELETE(_request: Request, { params }: { params: Promise<{ id: string }> }) { + const session = await getSession() + if (!session) return NextResponse.json({ error: '未授权' }, { status: 401 }) + if (!checkPermission(session.role, 'assets:delete')) { + return NextResponse.json({ error: '权限不足' }, { status: 403 }) + } + + const { id } = await params + const existing = db.prepare('SELECT id FROM assets WHERE id = ?').get(id) + if (!existing) return NextResponse.json({ error: '资产不存在' }, { status: 404 }) + + db.prepare('DELETE FROM assets WHERE id = ?').run(id) + db.prepare(`INSERT INTO audit_logs (user_id, action, entity_type, entity_id, ip_address) VALUES (?, 'delete', 'asset', ?, ?)`) + .run(session.userId, id, null) + + return NextResponse.json({ success: true }) +} diff --git a/src/app/api/assets/batch/route.ts b/src/app/api/assets/batch/route.ts new file mode 100644 index 0000000..583ee0c --- /dev/null +++ b/src/app/api/assets/batch/route.ts @@ -0,0 +1,63 @@ +import { NextResponse } from 'next/server' +import { cookies } from 'next/headers' +import db from '@/lib/db' +import { verifyJwt } from '@/lib/auth' +import { checkPermission } from '@/lib/permissions' + +async function getSession() { + const cookieStore = await cookies() + const token = cookieStore.get('session_assets')?.value + if (!token) return null + return verifyJwt(token) +} + +const UPDATABLE_FIELDS = [ + 'device_type', 'device_purpose', 'room', 'rack_position', 'status', + 'manufacturer', 'device_model', 'warranty_date', +] + +export async function POST(request: Request) { + const session = await getSession() + if (!session) return NextResponse.json({ error: '未授权' }, { status: 401 }) + if (!checkPermission(session.role, 'assets:write')) { + return NextResponse.json({ error: '权限不足' }, { status: 403 }) + } + + try { + const body = await request.json() + const { ids, fields } = body as { ids: number[]; fields: Record } + + if (!Array.isArray(ids) || ids.length === 0) { + return NextResponse.json({ error: '请选择设备' }, { status: 400 }) + } + if (!fields || typeof fields !== 'object' || Object.keys(fields).length === 0) { + return NextResponse.json({ error: '请指定要修改的字段' }, { status: 400 }) + } + + const updates: string[] = [] + const values: unknown[] = [] + for (const [key, value] of Object.entries(fields)) { + if (!UPDATABLE_FIELDS.includes(key)) continue + updates.push(`${key} = ?`) + values.push(value === '' ? null : value) + } + + if (updates.length === 0) { + return NextResponse.json({ error: '没有可更新的有效字段' }, { status: 400 }) + } + + updates.push("updated_at = datetime('now')") + + const placeholders = ids.map(() => '?').join(', ') + const stmt = db.prepare(`UPDATE assets SET ${updates.join(', ')} WHERE id IN (${placeholders})`) + const result = stmt.run(...values, ...ids) + + db.prepare(`INSERT INTO audit_logs (user_id, action, entity_type, details, ip_address) VALUES (?, 'batch_update', 'asset', ?, ?)`) + .run(session.userId, JSON.stringify({ ids, fields }), null) + + return NextResponse.json({ updated: result.changes }) + } catch (e) { + const msg = e instanceof Error ? e.message : '批量更新失败' + return NextResponse.json({ error: msg }, { status: 500 }) + } +} diff --git a/src/app/api/assets/export/route.ts b/src/app/api/assets/export/route.ts new file mode 100644 index 0000000..237452f --- /dev/null +++ b/src/app/api/assets/export/route.ts @@ -0,0 +1,98 @@ +import { NextResponse } from 'next/server' +import { cookies } from 'next/headers' +import db from '@/lib/db' +import { verifyJwt } from '@/lib/auth' +import { exportAssetsToBuffer } from '@/lib/excel' + +const FILTERABLE_FIELDS = new Set([ + 'serial_number', 'device_type', 'device_purpose', 'room', 'rack_position', + 'node_name', 'business_ip', 'hdm_ip', 'manufacturer', 'device_model', 'status', + 'warranty_date', + 'cpu_model', 'cpu_generation', 'cpu_spec', + 'memory_model', 'memory_frequency', 'memory_unit_capacity', 'memory_total', + 'gpu_model', 'gpu_power', + 'nic1_model', 'nic1_type', 'nic1_speed', + 'nic2_model', 'nic2_type', 'nic2_speed', + 'nic3_model', 'nic3_type', 'nic3_speed', + 'sys_disk_model', 'sys_disk_spec', 'sys_disk_capacity', 'sys_disk_type', 'sys_disk_protocol', + 'data_disk1_model', 'data_disk1_spec', 'data_disk1_capacity', 'data_disk1_type', 'data_disk1_protocol', + 'data_disk2_model', 'data_disk2_spec', 'data_disk2_capacity', + 'data_disk_total_space', + 'raid_model', 'raid_spec', + 'psu1_model', 'psu1_power', + 'psu2_model', 'psu2_power', + 'psu_total_power', + 'board_model', +]) + +export async function GET(request: Request) { + const cookieStore = await cookies() + const token = cookieStore.get('session_assets')?.value + if (!token) return NextResponse.json({ error: '未授权' }, { status: 401 }) + const payload = verifyJwt(token) + if (!payload) return NextResponse.json({ error: '会话已过期' }, { status: 401 }) + + const { searchParams } = new URL(request.url) + const search = searchParams.get('search') || '' + + const conditions: string[] = [] + const params: unknown[] = [] + + if (search) { + conditions.push(`(serial_number LIKE ? OR node_name LIKE ? OR business_ip LIKE ? OR device_model LIKE ? OR manufacturer LIKE ?)`) + const s = `%${search}%` + params.push(s, s, s, s, s) + } + + // Generic filter_field=value params (multi-select: multiple params → IN clause) + const filterKeys = [...searchParams.keys()].filter(k => k.startsWith('filter_')) + for (const key of filterKeys) { + const field = key.replace('filter_', '') + const allValues = searchParams.getAll(key) + if (allValues.length === 0) continue + if (allValues.length === 1) { + conditions.push(`${field} = ?`); params.push(allValues[0]) + } else { + const placeholders = allValues.map(() => '?').join(', ') + conditions.push(`${field} IN (${placeholders})`) + params.push(...allValues) + } + } + + // Advanced search filters JSON + const filtersRaw = searchParams.get('filters') + if (filtersRaw) { + try { + const filters = JSON.parse(filtersRaw) as Array<{ field: string; op: string; value: string }> + for (const f of filters) { + if (!f.field || !FILTERABLE_FIELDS.has(f.field)) continue + const val = (f.value || '').trim() + switch (f.op) { + case 'contains': + conditions.push(`${f.field} LIKE ?`); params.push(`%${val}%`); break + case 'equals': + conditions.push(`${f.field} = ?`); params.push(val); break + case 'starts_with': + conditions.push(`${f.field} LIKE ?`); params.push(`${val}%`); break + case 'ends_with': + conditions.push(`${f.field} LIKE ?`); params.push(`%${val}`); break + case 'not_empty': + conditions.push(`${f.field} IS NOT NULL AND ${f.field} != ''`); break + case 'empty': + conditions.push(`(${f.field} IS NULL OR ${f.field} = '')`); break + } + } + } catch { /* ignore */ } + } + + const where = conditions.length > 0 ? `WHERE ${conditions.join(' AND ')}` : '' + const assets = db.prepare(`SELECT * FROM assets ${where} ORDER BY id DESC`).all(...params) as Record[] + + const buffer = exportAssetsToBuffer(assets) + return new NextResponse(new Uint8Array(buffer), { + headers: { + 'Content-Type': 'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet', + 'Content-Disposition': `attachment; filename="assets_export_${new Date().toISOString().slice(0, 10)}.xlsx"`, + }, + }) +} diff --git a/src/app/api/assets/field-values/route.ts b/src/app/api/assets/field-values/route.ts new file mode 100644 index 0000000..43b74d7 --- /dev/null +++ b/src/app/api/assets/field-values/route.ts @@ -0,0 +1,43 @@ +import { NextResponse } from 'next/server' +import { cookies } from 'next/headers' +import db from '@/lib/db' +import { verifyJwt } from '@/lib/auth' + +const ALLOWED_FIELDS = new Set([ + 'device_type', 'device_purpose', 'room', 'rack_position', 'node_name', + 'business_ip', 'hdm_ip', 'manufacturer', 'device_model', 'serial_number', + 'status', 'warranty_date', + 'cpu_model', 'cpu_generation', 'cpu_spec', + 'memory_model', 'memory_frequency', 'memory_unit_capacity', 'memory_total', + 'gpu_model', 'gpu_power', + 'nic1_model', 'nic1_type', 'nic1_speed', + 'nic2_model', 'nic2_type', 'nic2_speed', + 'nic3_model', 'nic3_type', 'nic3_speed', + 'sys_disk_model', 'sys_disk_spec', 'sys_disk_capacity', 'sys_disk_type', 'sys_disk_protocol', + 'data_disk1_model', 'data_disk1_spec', 'data_disk1_type', 'data_disk1_protocol', + 'data_disk_total_space', + 'psu1_model', 'psu1_power', 'psu_total_power', + 'raid_model', 'board_model', +]) + +export async function GET(request: Request) { + const cookieStore = await cookies() + const token = cookieStore.get('session_assets')?.value + if (!token) return NextResponse.json({ error: '未授权' }, { status: 401 }) + const payload = verifyJwt(token) + if (!payload) return NextResponse.json({ error: '会话已过期' }, { status: 401 }) + + const { searchParams } = new URL(request.url) + const field = searchParams.get('field') || '' + const q = searchParams.get('q') || '' + + if (!ALLOWED_FIELDS.has(field)) { + return NextResponse.json({ values: [] }) + } + + const where = q ? `WHERE ${field} LIKE ? AND ${field} IS NOT NULL AND ${field} != ''` : `WHERE ${field} IS NOT NULL AND ${field} != ''` + const params = q ? [`%${q}%`] : [] + + const rows = db.prepare(`SELECT DISTINCT ${field} as val FROM assets ${where} ORDER BY ${field} LIMIT 20`).all(...params) as { val: string }[] + return NextResponse.json({ values: rows.map(r => r.val) }) +} diff --git a/src/app/api/assets/import/route.ts b/src/app/api/assets/import/route.ts new file mode 100644 index 0000000..d513d92 --- /dev/null +++ b/src/app/api/assets/import/route.ts @@ -0,0 +1,101 @@ +import { NextResponse } from 'next/server' +import { cookies } from 'next/headers' +import db from '@/lib/db' +import { verifyJwt } from '@/lib/auth' +import { checkPermission } from '@/lib/permissions' +import { parseImportBuffer } from '@/lib/excel' + +async function getSession() { + const cookieStore = await cookies() + const token = cookieStore.get('session_assets')?.value + if (!token) return null + return verifyJwt(token) +} + +export async function POST(request: Request) { + const session = await getSession() + if (!session) return NextResponse.json({ error: '未授权' }, { status: 401 }) + if (!checkPermission(session.role, 'assets:write')) { + return NextResponse.json({ error: '权限不足' }, { status: 403 }) + } + + try { + const formData = await request.formData() + const file = formData.get('file') as File | null + if (!file) return NextResponse.json({ error: '请上传文件' }, { status: 400 }) + + const buffer = Buffer.from(await file.arrayBuffer()) + const { rows, errors } = parseImportBuffer(buffer) + + if (errors.length > 0 && rows.length === 0) { + return NextResponse.json({ errors }, { status: 400 }) + } + + const allFields = [ + 'serial_number', 'device_type', 'device_purpose', 'room', 'rack_position', + 'node_name', 'business_ip', 'hdm_ip', 'manufacturer', 'device_model', + 'status', 'warranty_date', + 'cpu_model', 'cpu_generation', 'cpu_cores', 'cpu_count', 'cpu_threads', 'cpu_spec', + 'memory_model', 'memory_frequency', 'memory_unit_capacity', 'memory_count', 'memory_total', + 'gpu_model', 'gpu_power', 'gpu_count', + 'nic1_model', 'nic1_type', 'nic1_speed', 'nic1_count', + 'nic2_model', 'nic2_type', 'nic2_speed', 'nic2_count', + 'nic3_model', 'nic3_type', 'nic3_speed', 'nic3_count', + 'sys_disk_model', 'sys_disk_spec', 'sys_disk_capacity', 'sys_disk_type', 'sys_disk_protocol', 'sys_disk_speed', 'sys_disk_count', + 'data_disk1_model', 'data_disk1_spec', 'data_disk1_capacity', 'data_disk1_type', 'data_disk1_protocol', 'data_disk1_speed', 'data_disk1_count', + 'data_disk2_model', 'data_disk2_spec', 'data_disk2_capacity', 'data_disk2_type', 'data_disk2_protocol', 'data_disk2_speed', 'data_disk2_count', + 'data_disk_total_space', + 'raid_model', 'raid_spec', 'raid_count', + 'psu1_model', 'psu1_power', 'psu1_count', + 'psu2_model', 'psu2_power', 'psu2_count', + 'psu_total_power', + 'board_model', 'board_count', + ] + + let created = 0 + let updated = 0 + + const insertTransaction = db.transaction(() => { + for (const row of rows) { + const sn = row.serial_number as string | null + if (sn) { + const existing = db.prepare('SELECT id FROM assets WHERE serial_number = ?').get(sn) as { id: number } | undefined + if (existing) { + const updates: string[] = [] + const values: unknown[] = [] + for (const f of allFields) { + if (row[f] !== undefined) { + updates.push(`${f} = ?`) + values.push(row[f]) + } + } + if (updates.length > 0) { + updates.push("updated_at = datetime('now')") + values.push(existing.id) + db.prepare(`UPDATE assets SET ${updates.join(', ')} WHERE id = ?`).run(...values) + updated++ + } + continue + } + } + + const present = allFields.filter(f => row[f] !== undefined && row[f] !== null) + if (present.length === 0) continue + const placeholders = present.map(() => '?').join(', ') + const values = present.map(f => row[f]) + db.prepare(`INSERT INTO assets (${present.join(', ')}) VALUES (${placeholders})`).run(...values) + created++ + } + }) + + insertTransaction() + + db.prepare(`INSERT INTO audit_logs (user_id, action, entity_type, details, ip_address) VALUES (?, 'import', 'asset', ?, ?)`) + .run(session.userId, JSON.stringify({ created, updated }), null) + + return NextResponse.json({ created, updated, errors }) + } catch (e) { + const msg = e instanceof Error ? e.message : '导入失败' + return NextResponse.json({ error: msg }, { status: 500 }) + } +} diff --git a/src/app/api/assets/route.ts b/src/app/api/assets/route.ts new file mode 100644 index 0000000..266f13e --- /dev/null +++ b/src/app/api/assets/route.ts @@ -0,0 +1,187 @@ +import { NextResponse } from 'next/server' +import { cookies } from 'next/headers' +import db from '@/lib/db' +import { verifyJwt, verifyApiKey } from '@/lib/auth' +import { checkPermission } from '@/lib/permissions' + +function getUserFromCookie() { + return null as { userId: number; username: string; role: string } | null +} + +async function getSession() { + const cookieStore = await cookies() + const token = cookieStore.get('session_assets')?.value + if (!token) return null + return verifyJwt(token) +} + +function getApiKeyAuth(request: Request) { + const auth = request.headers.get('Authorization') || '' + if (!auth.startsWith('Bearer ')) return null + return verifyApiKey(auth.slice(7)) +} + +// 允许高级查询的字段 +const FILTERABLE_FIELDS = new Set([ + 'serial_number', 'device_type', 'device_purpose', 'room', 'rack_position', + 'node_name', 'business_ip', 'hdm_ip', 'manufacturer', 'device_model', 'status', + 'warranty_date', + 'cpu_model', 'cpu_generation', 'cpu_spec', + 'memory_model', 'memory_frequency', 'memory_unit_capacity', 'memory_total', + 'gpu_model', 'gpu_power', + 'nic1_model', 'nic1_type', 'nic1_speed', + 'nic2_model', 'nic2_type', 'nic2_speed', + 'nic3_model', 'nic3_type', 'nic3_speed', + 'sys_disk_model', 'sys_disk_spec', 'sys_disk_capacity', 'sys_disk_type', 'sys_disk_protocol', + 'data_disk1_model', 'data_disk1_spec', 'data_disk1_capacity', 'data_disk1_type', 'data_disk1_protocol', + 'data_disk2_model', 'data_disk2_spec', 'data_disk2_capacity', + 'data_disk_total_space', + 'raid_model', 'raid_spec', + 'psu1_model', 'psu1_power', + 'psu2_model', 'psu2_power', + 'psu_total_power', + 'board_model', +]) + +export async function GET(request: Request) { + const session = await getSession() + const apiKey = getApiKeyAuth(request) + if (!session && !apiKey) return NextResponse.json({ error: '未授权' }, { status: 401 }) + + const { searchParams } = new URL(request.url) + const page = Math.max(1, parseInt(searchParams.get('page') || '1')) + const pageSize = Math.min(100, Math.max(1, parseInt(searchParams.get('pageSize') || '20'))) + const search = searchParams.get('search') || '' + const sortKey = searchParams.get('sortKey') || 'id' + const sortOrder = searchParams.get('sortOrder') || 'desc' + + const allowedSortKeys = new Set([ + 'id', 'serial_number', 'device_type', 'device_purpose', 'node_name', + 'business_ip', 'manufacturer', 'device_model', 'status', 'created_at', 'updated_at' + ]) + const safeSortKey = allowedSortKeys.has(sortKey) ? sortKey : 'id' + const safeSortOrder = sortOrder === 'asc' ? 'ASC' : 'DESC' + + const conditions: string[] = [] + const params: unknown[] = [] + + if (search) { + conditions.push(`(serial_number LIKE ? OR node_name LIKE ? OR business_ip LIKE ? OR device_model LIKE ? OR manufacturer LIKE ?)`) + const s = `%${search}%` + params.push(s, s, s, s, s) + } + + // Generic filter_field=value params (multi-select: multiple params with same key → IN clause) + const filterKeys = [...searchParams.keys()].filter(k => k.startsWith('filter_')) + for (const key of filterKeys) { + const field = key.replace('filter_', '') + const allValues = searchParams.getAll(key) + if (allValues.length === 0) continue + if (allValues.length === 1) { + conditions.push(`${field} = ?`); params.push(allValues[0]) + } else { + const placeholders = allValues.map(() => '?').join(', ') + conditions.push(`${field} IN (${placeholders})`) + params.push(...allValues) + } + } + + // 高级查询 filters: JSON encoded array of {field, op, value} + const filtersRaw = searchParams.get('filters') + if (filtersRaw) { + try { + const filters = JSON.parse(filtersRaw) as Array<{ field: string; op: string; value: string }> + for (const f of filters) { + if (!f.field || !FILTERABLE_FIELDS.has(f.field)) continue + const val = (f.value || '').trim() + switch (f.op) { + case 'contains': + conditions.push(`${f.field} LIKE ?`) + params.push(`%${val}%`) + break + case 'equals': + conditions.push(`${f.field} = ?`) + params.push(val) + break + case 'starts_with': + conditions.push(`${f.field} LIKE ?`) + params.push(`${val}%`) + break + case 'ends_with': + conditions.push(`${f.field} LIKE ?`) + params.push(`%${val}`) + break + case 'not_empty': + conditions.push(`${f.field} IS NOT NULL AND ${f.field} != ''`) + break + case 'empty': + conditions.push(`(${f.field} IS NULL OR ${f.field} = '')`) + break + } + } + } catch { /* ignore invalid filters JSON */ } + } + + const where = conditions.length > 0 ? `WHERE ${conditions.join(' AND ')}` : '' + const offset = (page - 1) * pageSize + + const total = (db.prepare(`SELECT COUNT(*) as count FROM assets ${where}`).get(...params) as { count: number }).count + const data = db.prepare(`SELECT * FROM assets ${where} ORDER BY ${safeSortKey} ${safeSortOrder} LIMIT ? OFFSET ?`).all(...params, pageSize, offset) + + return NextResponse.json({ + data, total, page, pageSize, + totalPages: Math.ceil(total / pageSize), + }) +} + +export async function POST(request: Request) { + const session = await getSession() + if (!session) return NextResponse.json({ error: '未授权' }, { status: 401 }) + if (!checkPermission(session.role, 'assets:write')) { + return NextResponse.json({ error: '权限不足' }, { status: 403 }) + } + + try { + const body = await request.json() + if (!body.device_type) { + return NextResponse.json({ error: '设备类型不能为空' }, { status: 400 }) + } + + const fields = [ + 'serial_number', 'device_type', 'device_purpose', 'room', 'rack_position', + 'node_name', 'business_ip', 'hdm_ip', 'manufacturer', 'device_model', + 'status', 'warranty_date', + 'cpu_model', 'cpu_generation', 'cpu_cores', 'cpu_count', 'cpu_threads', 'cpu_spec', + 'memory_model', 'memory_frequency', 'memory_unit_capacity', 'memory_count', 'memory_total', + 'gpu_model', 'gpu_power', 'gpu_count', + 'nic1_model', 'nic1_type', 'nic1_speed', 'nic1_count', + 'nic2_model', 'nic2_type', 'nic2_speed', 'nic2_count', + 'nic3_model', 'nic3_type', 'nic3_speed', 'nic3_count', + 'sys_disk_model', 'sys_disk_spec', 'sys_disk_capacity', 'sys_disk_type', 'sys_disk_protocol', 'sys_disk_speed', 'sys_disk_count', + 'data_disk1_model', 'data_disk1_spec', 'data_disk1_capacity', 'data_disk1_type', 'data_disk1_protocol', 'data_disk1_speed', 'data_disk1_count', + 'data_disk2_model', 'data_disk2_spec', 'data_disk2_capacity', 'data_disk2_type', 'data_disk2_protocol', 'data_disk2_speed', 'data_disk2_count', + 'data_disk_total_space', + 'raid_model', 'raid_spec', 'raid_count', + 'psu1_model', 'psu1_power', 'psu1_count', + 'psu2_model', 'psu2_power', 'psu2_count', + 'psu_total_power', + 'board_model', 'board_count', + 'raw_data', + ] + + const present = fields.filter(f => body[f] !== undefined) + const placeholders = present.map(() => '?').join(', ') + const values = present.map(f => body[f] === '' ? null : body[f]) + + const result = db.prepare(`INSERT INTO assets (${present.join(', ')}) VALUES (${placeholders})`).run(...values) + + db.prepare(`INSERT INTO audit_logs (user_id, action, entity_type, entity_id, ip_address) VALUES (?, 'create', 'asset', ?, ?)`) + .run(session.userId, result.lastInsertRowid, null) + + const asset = db.prepare('SELECT * FROM assets WHERE id = ?').get(result.lastInsertRowid) + return NextResponse.json({ asset }, { status: 201 }) + } catch (e) { + const msg = e instanceof Error ? e.message : '创建失败' + return NextResponse.json({ error: msg }, { status: 500 }) + } +} diff --git a/src/app/api/assets/template/route.ts b/src/app/api/assets/template/route.ts new file mode 100644 index 0000000..6ba0e24 --- /dev/null +++ b/src/app/api/assets/template/route.ts @@ -0,0 +1,20 @@ +import { NextResponse } from 'next/server' +import { cookies } from 'next/headers' +import { verifyJwt } from '@/lib/auth' +import { generateTemplateBuffer } from '@/lib/excel' + +export async function GET() { + const cookieStore = await cookies() + const token = cookieStore.get('session_assets')?.value + if (!token) return NextResponse.json({ error: '未授权' }, { status: 401 }) + const payload = verifyJwt(token) + if (!payload) return NextResponse.json({ error: '会话已过期' }, { status: 401 }) + + const buffer = generateTemplateBuffer() + return new NextResponse(buffer, { + headers: { + 'Content-Type': 'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet', + 'Content-Disposition': 'attachment; filename="asset_import_template.xlsx"', + }, + }) +} diff --git a/src/app/api/assets/tickets/route.ts b/src/app/api/assets/tickets/route.ts new file mode 100644 index 0000000..34b24f3 --- /dev/null +++ b/src/app/api/assets/tickets/route.ts @@ -0,0 +1,42 @@ +/** + * 代理路由：/api/assets/tickets + * 将请求转发至 issue-ai 的 /api/tickets/by-asset API + * + * GET /api/assets/tickets?deviceIp=xxx&deviceSn=xxx + * + * 环境变量： + * ISSUE_API_URL — issue-ai API 地址（默认 http://localhost:6176/api） + * ISSUE_API_KEY — API 密钥 + */ + +import { NextRequest, NextResponse } from 'next/server' +import { getTicketsByAsset } from '@/lib/issue-client' + +export async function GET(request: NextRequest) { + const { searchParams } = new URL(request.url) + const deviceIp = searchParams.get('deviceIp') || undefined + const deviceSn = searchParams.get('deviceSn') || undefined + + if (!deviceIp && !deviceSn) { + return NextResponse.json( + { error: '缺少必要参数：deviceIp 或 deviceSn' }, + { status: 400 } + ) + } + + try { + // 转发用户 cookie 用于 issue-ai 认证 + const cookie = request.headers.get('cookie') || undefined + const result = await getTicketsByAsset({ + ip: deviceIp, + sn: deviceSn, + cookie, + }) + return NextResponse.json(result) + } catch (err: unknown) { + const message = err instanceof Error ? err.message : '获取工单列表失败' + const cause = err instanceof Error ? err.cause : undefined + console.error('[/api/assets/tickets]', message, cause) + return NextResponse.json({ error: message, detail: String(cause) }, { status: 502 }) + } +} diff --git a/src/app/api/auth/login/route.ts b/src/app/api/auth/login/route.ts new file mode 100644 index 0000000..e76980c --- /dev/null +++ b/src/app/api/auth/login/route.ts @@ -0,0 +1,18 @@ +import { NextResponse } from 'next/server' +import { cookies } from 'next/headers' +import db from '@/lib/db' +import { verifyPassword, signJwt } from '@/lib/auth' +import type { User } from '@/types' + +export async function POST(request: Request) { + try { + const { username, password } = await request.json() + if (!username || !password) return NextResponse.json({ error: '请输入用户名和密码' }, { status: 400 }) + const user = db.prepare('SELECT * FROM users WHERE username = ? AND is_active = 1').get(username) as User | undefined + if (!user || !verifyPassword(password, user.password_hash)) return NextResponse.json({ error: '用户名或密码错误' }, { status: 401 }) + const token = signJwt({ userId: user.id, username: user.username, role: user.role }) + const cookieStore = await cookies() + cookieStore.set('session_assets', token, { httpOnly: true, secure: process.env.NODE_ENV === 'production', sameSite: 'lax', maxAge: 86400, path: '/' }) + return NextResponse.json({ user: { id: user.id, username: user.username, display_name: user.display_name, role: user.role } }) + } catch { return NextResponse.json({ error: '登录失败' }, { status: 500 }) } +} diff --git a/src/app/api/auth/logout/route.ts b/src/app/api/auth/logout/route.ts new file mode 100644 index 0000000..8ff59fc --- /dev/null +++ b/src/app/api/auth/logout/route.ts @@ -0,0 +1,7 @@ +import { NextResponse } from 'next/server' +import { cookies } from 'next/headers' +export async function POST() { + const cookieStore = await cookies() + cookieStore.set('session_assets', '', { maxAge: 0, path: '/' }) + return NextResponse.json({ success: true }) +} diff --git a/src/app/api/auth/me/route.ts b/src/app/api/auth/me/route.ts new file mode 100644 index 0000000..cd64e8e --- /dev/null +++ b/src/app/api/auth/me/route.ts @@ -0,0 +1,17 @@ +import { NextResponse } from 'next/server' +import { cookies } from 'next/headers' +import db from '@/lib/db' +import { verifyJwt } from '@/lib/auth' + +export async function GET() { + try { + const cookieStore = await cookies() + const token = cookieStore.get('session_assets')?.value + if (!token) return NextResponse.json({ error: '未授权' }, { status: 401 }) + const payload = verifyJwt(token) + if (!payload) return NextResponse.json({ error: '会话已过期' }, { status: 401 }) + const user = db.prepare('SELECT id, username, display_name, email, role FROM users WHERE id = ? AND is_active = 1').get(payload.userId) + if (!user) return NextResponse.json({ error: '用户不存在' }, { status: 401 }) + return NextResponse.json({ user }) + } catch { return NextResponse.json({ error: '获取用户信息失败' }, { status: 500 }) } +} diff --git a/src/app/api/stats/route.ts b/src/app/api/stats/route.ts new file mode 100644 index 0000000..794bac8 --- /dev/null +++ b/src/app/api/stats/route.ts @@ -0,0 +1,52 @@ +import { NextResponse } from 'next/server' +import { cookies } from 'next/headers' +import db from '@/lib/db' +import { verifyJwt } from '@/lib/auth' + +async function getSession() { + const cookieStore = await cookies() + const token = cookieStore.get('session_assets')?.value + if (!token) return null + return verifyJwt(token) +} + +export async function GET() { + const session = await getSession() + if (!session) return NextResponse.json({ error: '未登录' }, { status: 401 }) + + const total = (db.prepare('SELECT COUNT(*) as c FROM assets').get() as any).c + + const byStatus = db.prepare( + 'SELECT status, COUNT(*) as count FROM assets GROUP BY status ORDER BY count DESC' + ).all() + + const byDeviceType = db.prepare( + 'SELECT device_type, COUNT(*) as count FROM assets GROUP BY device_type ORDER BY count DESC' + ).all() + + const byManufacturer = db.prepare( + "SELECT manufacturer, COUNT(*) as count FROM assets WHERE manufacturer IS NOT NULL AND manufacturer != '' GROUP BY manufacturer ORDER BY count DESC" + ).all() + + const warrantySoon = (db.prepare( + "SELECT COUNT(*) as c FROM assets WHERE warranty_date IS NOT NULL AND warranty_date != '' AND date(warranty_date) <= date('now', '+90 days') AND date(warranty_date) >= date('now')" + ).get() as any).c + + const warrantyExpired = (db.prepare( + "SELECT COUNT(*) as c FROM assets WHERE warranty_date IS NOT NULL AND warranty_date != '' AND date(warranty_date) < date('now')" + ).get() as any).c + + const byRoom = db.prepare( + "SELECT room, COUNT(*) as count FROM assets WHERE room IS NOT NULL AND room != '' GROUP BY room ORDER BY count DESC LIMIT 10" + ).all() + + return NextResponse.json({ + total, + byStatus, + byDeviceType, + byManufacturer, + byRoom, + warrantySoon, + warrantyExpired, + }) +} diff --git a/src/app/api/users/[id]/route.ts b/src/app/api/users/[id]/route.ts new file mode 100644 index 0000000..233335f --- /dev/null +++ b/src/app/api/users/[id]/route.ts @@ -0,0 +1,69 @@ +import { NextResponse } from 'next/server' +import { cookies } from 'next/headers' +import db from '@/lib/db' +import { verifyJwt, hashPassword } from '@/lib/auth' +import { checkPermission } from '@/lib/permissions' + +async function getSession() { + const cookieStore = await cookies() + const token = cookieStore.get('session_assets')?.value + if (!token) return null + return verifyJwt(token) +} + +export async function PUT(request: Request, { params }: { params: Promise<{ id: string }> }) { + const session = await getSession() + if (!session) return NextResponse.json({ error: '未授权' }, { status: 401 }) + if (!checkPermission(session.role, 'users:write')) { + return NextResponse.json({ error: '权限不足' }, { status: 403 }) + } + + const { id } = await params + const existing = db.prepare('SELECT id FROM users WHERE id = ?').get(id) + if (!existing) return NextResponse.json({ error: '用户不存在' }, { status: 404 }) + + try { + const body = await request.json() + const updates: string[] = [] + const values: unknown[] = [] + + if (body.display_name !== undefined) { updates.push('display_name = ?'); values.push(body.display_name) } + if (body.email !== undefined) { updates.push('email = ?'); values.push(body.email || null) } + if (body.role !== undefined) { updates.push('role = ?'); values.push(body.role) } + if (body.is_active !== undefined) { updates.push('is_active = ?'); values.push(body.is_active ? 1 : 0) } + if (body.password) { updates.push('password_hash = ?'); values.push(hashPassword(body.password)) } + + if (updates.length === 0) { + return NextResponse.json({ error: '没有要更新的字段' }, { status: 400 }) + } + + updates.push("updated_at = datetime('now')") + values.push(id) + + db.prepare(`UPDATE users SET ${updates.join(', ')} WHERE id = ?`).run(...values) + const user = db.prepare('SELECT id, username, display_name, email, role, is_active, created_at, updated_at FROM users WHERE id = ?').get(id) + return NextResponse.json({ user }) + } catch (e) { + const msg = e instanceof Error ? e.message : '更新用户失败' + return NextResponse.json({ error: msg }, { status: 500 }) + } +} + +export async function DELETE(_request: Request, { params }: { params: Promise<{ id: string }> }) { + const session = await getSession() + if (!session) return NextResponse.json({ error: '未授权' }, { status: 401 }) + if (!checkPermission(session.role, 'users:write')) { + return NextResponse.json({ error: '权限不足' }, { status: 403 }) + } + + const { id } = await params + if (String(id) === String(session.userId)) { + return NextResponse.json({ error: '不能删除当前登录用户' }, { status: 400 }) + } + + const existing = db.prepare('SELECT id FROM users WHERE id = ?').get(id) + if (!existing) return NextResponse.json({ error: '用户不存在' }, { status: 404 }) + + db.prepare('DELETE FROM users WHERE id = ?').run(id) + return NextResponse.json({ success: true }) +} diff --git a/src/app/api/users/route.ts b/src/app/api/users/route.ts new file mode 100644 index 0000000..87562ef --- /dev/null +++ b/src/app/api/users/route.ts @@ -0,0 +1,54 @@ +import { NextResponse } from 'next/server' +import { cookies } from 'next/headers' +import db from '@/lib/db' +import { verifyJwt, hashPassword } from '@/lib/auth' +import { checkPermission } from '@/lib/permissions' + +async function getSession() { + const cookieStore = await cookies() + const token = cookieStore.get('session_assets')?.value + if (!token) return null + return verifyJwt(token) +} + +export async function GET() { + const session = await getSession() + if (!session) return NextResponse.json({ error: '未授权' }, { status: 401 }) + if (!checkPermission(session.role, 'users:read')) { + return NextResponse.json({ error: '权限不足' }, { status: 403 }) + } + + const users = db.prepare('SELECT id, username, display_name, email, role, is_active, created_at, updated_at FROM users ORDER BY id').all() + return NextResponse.json({ users }) +} + +export async function POST(request: Request) { + const session = await getSession() + if (!session) return NextResponse.json({ error: '未授权' }, { status: 401 }) + if (!checkPermission(session.role, 'users:write')) { + return NextResponse.json({ error: '权限不足' }, { status: 403 }) + } + + try { + const body = await request.json() + const { username, password, display_name, email, role } = body + if (!username || !password || !display_name) { + return NextResponse.json({ error: '用户名、密码和显示名称不能为空' }, { status: 400 }) + } + + const existing = db.prepare('SELECT id FROM users WHERE username = ?').get(username) + if (existing) { + return NextResponse.json({ error: '用户名已存在' }, { status: 409 }) + } + + const passwordHash = hashPassword(password) + const result = db.prepare('INSERT INTO users (username, password_hash, display_name, email, role) VALUES (?, ?, ?, ?, ?)') + .run(username, passwordHash, display_name, email || null, role || 'viewer') + + const user = db.prepare('SELECT id, username, display_name, email, role, is_active, created_at FROM users WHERE id = ?').get(result.lastInsertRowid) + return NextResponse.json({ user }, { status: 201 }) + } catch (e) { + const msg = e instanceof Error ? e.message : '创建用户失败' + return NextResponse.json({ error: msg }, { status: 500 }) + } +} diff --git a/src/app/globals.css b/src/app/globals.css new file mode 100644 index 0000000..4984b64 --- /dev/null +++ b/src/app/globals.css @@ -0,0 +1,32 @@ +@import "tailwindcss"; +@config "../../tailwind.config.js"; + +@layer base { + body { + @apply bg-slate-50 text-slate-900; + } + html.dark body { + @apply bg-slate-950 text-white; + } +} + +@layer components { + .card-label { + font-size: 0.875rem; + color: rgba(0, 0, 0, 0.48); + margin: 0; + } + html.dark .card-label { + color: rgba(255, 255, 255, 0.48); + } + .card-value { + font-size: 1.5rem; + font-weight: 700; + margin-top: 0.25rem; + color: #1d1d1f; + line-height: 1.2; + } + html.dark .card-value { + color: #ffffff; + } +} diff --git a/src/app/layout.tsx b/src/app/layout.tsx new file mode 100644 index 0000000..2132d02 --- /dev/null +++ b/src/app/layout.tsx @@ -0,0 +1,20 @@ +import type { Metadata } from 'next' +import './globals.css' + +export const metadata: Metadata = { + title: '资产管理系统', + description: '设备资产管理系统', +} + +export default function RootLayout({ children }: Readonly<{ children: React.ReactNode }>) { + return ( + + +

编辑资产

{asset.node_name || asset.serial_number || `设备 #${asset.id}`}

高级查询

批量编辑

导入资产

新增资产

设备管理

仪表盘

API Key 管理

系统设置

{item.label}

角色权限

用户管理