43bae9b1ea
- 后端新增 /admin/users 路由(仅 owner):
- GET /admin/users 列出全部用户
- POST /admin/users 创建新用户(固定 role=member,API 层禁止提权)
- PATCH /admin/users/{id} 重置密码 / 启停 / 改昵称 / 改邮箱
(role 永远不可改,owner 不能禁用自己)
- DELETE /admin/users/{id} 软删除(is_active=False,保留外键完整性)
- 用户管理用软删除而非硬删除,理由:
bookmarks / subscriptions / api_tokens / article_reads 都有 user_id 外键,
硬删会污染历史数据;禁用后用户登不上,效果等同删除且可恢复
- 后端永远不返回 password_hash(UserOut 不含该字段)
- 前端 AdminUsers.vue + 路由 /admin/users + 侧栏菜单'用户管理(Admin)'
操作按钮对自己 / owner 自动隐藏(自锁 + 防误改,后端兜底拒绝)
- main.py 注册 admin_users 路由
- schemas/user.py 提供 UserOut/UserCreate/UserUpdate/UserDeleteResult
- articles.ts adminApi 加 listUsers / createUser / updateUser / deleteUser + UserOut 类型
无 alembic 迁移(user 表 role / is_active / email / display_name 字段早就有)
42 lines
1.4 KiB
TypeScript
42 lines
1.4 KiB
TypeScript
import { createRouter, createWebHistory, type RouteRecordRaw } from 'vue-router'
|
|
import { useAuthStore } from '@/stores/auth'
|
|
|
|
const routes: RouteRecordRaw[] = [
|
|
{ path: '/login', component: () => import('@/views/Login.vue'), meta: { layout: 'blank' } },
|
|
{
|
|
path: '/',
|
|
component: () => import('@/components/AppLayout.vue'),
|
|
meta: { requiresAuth: true },
|
|
children: [
|
|
{ path: '', component: () => import('@/views/Feed.vue') },
|
|
{ path: 'article/:id', component: () => import('@/views/ArticleDetail.vue') },
|
|
{ path: 'sources', component: () => import('@/views/Sources.vue') },
|
|
{ path: 'bookmarks', component: () => import('@/views/Bookmarks.vue') },
|
|
{ path: 'admin/sources', component: () => import('@/views/AdminSources.vue'), meta: { ownerOnly: true } },
|
|
{ path: 'admin/users', component: () => import('@/views/AdminUsers.vue'), meta: { ownerOnly: true } },
|
|
{ path: 'admin/llm', component: () => import('@/views/AdminLlmSettings.vue'), meta: { ownerOnly: true } },
|
|
],
|
|
},
|
|
]
|
|
|
|
const router = createRouter({
|
|
history: createWebHistory(),
|
|
routes,
|
|
})
|
|
|
|
router.beforeEach((to) => {
|
|
const auth = useAuthStore()
|
|
auth.restore()
|
|
if (to.meta.requiresAuth && !auth.isLogged) {
|
|
return { path: '/login', query: { next: to.fullPath } }
|
|
}
|
|
if (to.meta.ownerOnly && !auth.isOwner) {
|
|
return { path: '/' }
|
|
}
|
|
if (to.path === '/login' && auth.isLogged) {
|
|
return { path: '/' }
|
|
}
|
|
})
|
|
|
|
export default router
|