feat: 第一阶段基础框架搭建

后端 (Laravel 10 + Sanctum): - RBAC 四层权限系统 (users→roles→permissions→menus) - 门店隔离中间件 (BelongsToStore Trait + StoreIsolation Middleware) - 操作日志中间件 (自动记录写操作) - 权限检查中间件 (CheckPermission) - 16张数据库表迁移 (系统基础+RBAC+字典+配置) - 11个 Eloquent Model - Auth API (登录/登出/用户信息) - 系统设置模块 CRUD (门店/部门/职务/用户/角色/菜单/权限/字典/日志) - 45条 RESTful API 路由 - InitSeeder 初始数据 (超管/角色/76权限/31菜单) 前端 (Vue 3 + Element Plus + Vite): - Axios 请求封装 + Token 注入 - Pinia 状态管理 (user + permission store) - 动态路由 (服务端菜单→前端路由自动生成) - 后台布局 (侧边栏+顶栏+主内容区) - 登录页 + 仪表盘首页 - 系统设置 7 个 CRUD 页面技术方案文档 (7卷): - 技术总览/数据库设计/API规范/RBAC设计/模块详设/小程序设计/部署方案
2026-03-13 19:52:09 +08:00
commit 11c177a432
144 changed files with 25209 additions and 0 deletions
@@ -0,0 +1,39 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use Closure;
+use Illuminate\Http\Request;
+
+/**
+ * 权限检查中间件
+ * 用法：Route::middleware('permission:crm.lead.create')
+ */
+class CheckPermission
+{
+    public function handle(Request $request, Closure $next, string ...$permissions)
+    {
+        $user = $request->user();
+
+        if (!$user) {
+            return response()->json(['code' => 40100, 'message' => '未认证'], 401);
+        }
+
+        // 超级管理员直接放行
+        if ($user->is_super) {
+            return $next($request);
+        }
+
+        // 检查权限
+        foreach ($permissions as $permission) {
+            if (!$user->hasPermission($permission)) {
+                return response()->json([
+                    'code' => 40300,
+                    'message' => '权限不足：' . $permission,
+                ], 403);
+            }
+        }
+
+        return $next($request);
+    }
+}
@@ -0,0 +1,86 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use Closure;
+use Illuminate\Http\Request;
+use App\Models\OperationLog as OperationLogModel;
+
+/**
+ * 操作日志中间件
+ * 自动记录写操作（POST/PUT/PATCH/DELETE）
+ */
+class OperationLog
+{
+    /**
+     * 不记录的路由
+     */
+    private array $except = [
+        'api/v1/auth/login',
+        'api/v1/auth/me',
+    ];
+
+    public function handle(Request $request, Closure $next)
+    {
+        $response = $next($request);
+
+        // 仅记录写操作
+        if (!in_array($request->method(), ['POST', 'PUT', 'PATCH', 'DELETE'])) {
+            return $response;
+        }
+
+        // 排除白名单
+        foreach ($this->except as $pattern) {
+            if ($request->is($pattern)) {
+                return $response;
+            }
+        }
+
+        $user = $request->user();
+        if (!$user) {
+            return $response;
+        }
+
+        try {
+            // 从 URL 推断模块和操作
+            $path = $request->path();
+            $module = $this->parseModule($path);
+            $action = $this->parseAction($request->method());
+
+            OperationLogModel::create([
+                'store_id' => $user->store_id,
+                'user_id' => $user->id,
+                'user_name' => $user->name,
+                'module' => $module,
+                'action' => $action,
+                'target' => $path,
+                'ip' => $request->ip(),
+                'method' => $request->method(),
+                'url' => $request->fullUrl(),
+                'created_at' => now(),
+            ]);
+        } catch (\Throwable $e) {
+            // 日志记录失败不影响业务
+            \Log::warning('操作日志记录失败: ' . $e->getMessage());
+        }
+
+        return $response;
+    }
+
+    private function parseModule(string $path): string
+    {
+        // api/v1/system/users → system
+        $segments = explode('/', $path);
+        return $segments[2] ?? 'unknown';
+    }
+
+    private function parseAction(string $method): string
+    {
+        return match ($method) {
+            'POST' => 'create',
+            'PUT', 'PATCH' => 'update',
+            'DELETE' => 'delete',
+            default => $method,
+        };
+    }
+}
@@ -0,0 +1,33 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use Closure;
+use Illuminate\Http\Request;
+
+/**
+ * 门店隔离中间件
+ * 验证并设置当前用户的门店上下文
+ */
+class StoreIsolation
+{
+    public function handle(Request $request, Closure $next)
+    {
+        $user = $request->user();
+
+        if (!$user) {
+            return response()->json(['code' => 40100, 'message' => '未认证'], 401);
+        }
+
+        // 超级管理员可通过 Header 切换门店
+        if ($user->is_super && $request->header('X-Store-Id')) {
+            $storeId = (int) $request->header('X-Store-Id');
+            // 验证门店存在
+            if (!\App\Models\Store::where('id', $storeId)->exists()) {
+                return response()->json(['code' => 40400, 'message' => '门店不存在'], 404);
+            }
+        }
+
+        return $next($request);
+    }
+}