feat: add member URL pool and login tracking
This commit is contained in:
richjohnrambo
@@ -0,0 +1,67 @@
|
||||
-- URL 地址池、会员注册域名绑定与 C 端会员登录日志。
|
||||
-- MySQL 8.0+。
|
||||
|
||||
CREATE TABLE IF NOT EXISTS `hg_url_pool` (
|
||||
`id` bigint unsigned NOT NULL AUTO_INCREMENT COMMENT '主键',
|
||||
`tenant_id` bigint unsigned NOT NULL DEFAULT 0 COMMENT '租户ID',
|
||||
`name` varchar(100) NOT NULL DEFAULT '' COMMENT '地址名称',
|
||||
`scheme` varchar(10) NOT NULL DEFAULT 'https' COMMENT '协议：http或https',
|
||||
`domain` varchar(255) NOT NULL COMMENT '标准化域名，可含非默认端口',
|
||||
`domain_hash` char(64) NOT NULL COMMENT '标准化域名SHA256',
|
||||
`base_url` varchar(512) NOT NULL COMMENT '注册入口基础地址',
|
||||
`status` tinyint NOT NULL DEFAULT 1 COMMENT '状态：1启用，2失效',
|
||||
`bind_count` bigint unsigned NOT NULL DEFAULT 0 COMMENT '累计成功绑定次数',
|
||||
`last_bound_at` datetime(3) DEFAULT NULL COMMENT '最后绑定时间',
|
||||
`remark` varchar(500) NOT NULL DEFAULT '' COMMENT '备注',
|
||||
`created_by` bigint unsigned NOT NULL DEFAULT 0 COMMENT '创建者ID',
|
||||
`updated_by` bigint unsigned NOT NULL DEFAULT 0 COMMENT '更新者ID',
|
||||
`deleted_by` bigint unsigned NOT NULL DEFAULT 0 COMMENT '删除者ID',
|
||||
`created_at` datetime(3) NOT NULL DEFAULT CURRENT_TIMESTAMP(3) COMMENT '创建时间',
|
||||
`updated_at` datetime(3) NOT NULL DEFAULT CURRENT_TIMESTAMP(3) ON UPDATE CURRENT_TIMESTAMP(3) COMMENT '更新时间',
|
||||
`deleted_at` datetime(3) DEFAULT NULL COMMENT '删除时间',
|
||||
PRIMARY KEY (`id`),
|
||||
UNIQUE KEY `uk_url_pool_domain` (`tenant_id`,`domain_hash`),
|
||||
KEY `idx_url_pool_list` (`tenant_id`,`bind_count`,`id`,`deleted_at`),
|
||||
KEY `idx_url_pool_status` (`tenant_id`,`status`,`bind_count`,`deleted_at`),
|
||||
KEY `idx_url_pool_deleted` (`deleted_at`)
|
||||
) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_0900_ai_ci COMMENT='URL地址池';
|
||||
|
||||
CREATE TABLE IF NOT EXISTS `hg_member_url_binding` (
|
||||
`id` bigint unsigned NOT NULL AUTO_INCREMENT COMMENT '主键',
|
||||
`tenant_id` bigint unsigned NOT NULL DEFAULT 0 COMMENT '租户ID',
|
||||
`member_id` bigint unsigned NOT NULL COMMENT '会员ID',
|
||||
`url_pool_id` bigint unsigned NOT NULL COMMENT 'URL地址池ID',
|
||||
`domain_snapshot` varchar(255) NOT NULL COMMENT '绑定时域名快照',
|
||||
`origin_snapshot` varchar(512) NOT NULL DEFAULT '' COMMENT '绑定时Origin快照',
|
||||
`bound_at` datetime(3) NOT NULL DEFAULT CURRENT_TIMESTAMP(3) COMMENT '绑定时间',
|
||||
`created_at` datetime(3) NOT NULL DEFAULT CURRENT_TIMESTAMP(3) COMMENT '创建时间',
|
||||
`updated_at` datetime(3) NOT NULL DEFAULT CURRENT_TIMESTAMP(3) ON UPDATE CURRENT_TIMESTAMP(3) COMMENT '更新时间',
|
||||
PRIMARY KEY (`id`),
|
||||
UNIQUE KEY `uk_member_url_binding` (`tenant_id`,`member_id`),
|
||||
KEY `idx_member_url_pool` (`tenant_id`,`url_pool_id`,`member_id`)
|
||||
) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_0900_ai_ci COMMENT='会员注册域名绑定';
|
||||
|
||||
CREATE TABLE IF NOT EXISTS `hg_app_member_login_log` (
|
||||
`id` bigint unsigned NOT NULL AUTO_INCREMENT COMMENT '日志ID',
|
||||
`tenant_id` bigint unsigned NOT NULL DEFAULT 0 COMMENT '租户ID',
|
||||
`req_id` varchar(64) NOT NULL DEFAULT '' COMMENT '请求ID',
|
||||
`member_id` bigint unsigned NOT NULL DEFAULT 0 COMMENT '会员ID，未识别会员时为0',
|
||||
`username` varchar(64) NOT NULL DEFAULT '' COMMENT '用户名快照',
|
||||
`mobile_mask` varchar(32) NOT NULL DEFAULT '' COMMENT '手机号脱敏值',
|
||||
`login_type` tinyint NOT NULL DEFAULT 1 COMMENT '登录方式：1账号密码，2手机验证码',
|
||||
`status` tinyint NOT NULL DEFAULT 1 COMMENT '登录状态：1成功，2失败',
|
||||
`err_msg` varchar(255) NOT NULL DEFAULT '' COMMENT '失败原因',
|
||||
`login_at` datetime(3) NOT NULL DEFAULT CURRENT_TIMESTAMP(3) COMMENT '登录时间',
|
||||
`login_ip_cipher` text COMMENT '登录IP密文',
|
||||
`login_ip_mask` varchar(64) NOT NULL DEFAULT '' COMMENT '登录IP脱敏值',
|
||||
`login_region` varchar(128) NOT NULL DEFAULT '' COMMENT '登录地区',
|
||||
`login_domain` varchar(255) NOT NULL DEFAULT '' COMMENT '登录页面标准化域名',
|
||||
`user_agent` varchar(512) NOT NULL DEFAULT '' COMMENT '浏览器UA',
|
||||
`created_at` datetime(3) NOT NULL DEFAULT CURRENT_TIMESTAMP(3) COMMENT '创建时间',
|
||||
PRIMARY KEY (`id`),
|
||||
KEY `idx_member_login_time` (`tenant_id`,`member_id`,`login_at`),
|
||||
KEY `idx_member_login_status` (`tenant_id`,`status`,`login_at`),
|
||||
KEY `idx_member_login_username` (`tenant_id`,`username`,`login_at`),
|
||||
KEY `idx_member_login_domain` (`tenant_id`,`login_domain`,`login_at`),
|
||||
KEY `idx_member_login_req` (`req_id`)
|
||||
) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_0900_ai_ci COMMENT='C端会员登录日志';
|
||||
@@ -0,0 +1,80 @@
|
||||
-- URL 地址池和会员登录日志后台菜单。
|
||||
SET @now=NOW();
|
||||
SET @memberRoot=(SELECT `id` FROM `hg_admin_menu` WHERE `name`='app_member' LIMIT 1);
|
||||
|
||||
INSERT INTO `hg_admin_menu` (`pid`,`level`,`tree`,`title`,`name`,`path`,`icon`,`type`,`redirect`,`permissions`,`permission_name`,`component`,`always_show`,`active_menu`,`is_root`,`is_frame`,`frame_src`,`keep_alive`,`hidden`,`affix`,`sort`,`remark`,`status`,`created_at`,`updated_at`)
|
||||
SELECT @memberRoot,2,CONCAT('tr_',@memberRoot,' '),x.title,x.name,x.path,x.icon,2,'',x.permissions,'',x.component,1,'',0,0,'',1,0,0,x.sort,x.remark,1,@now,@now FROM (
|
||||
SELECT 'URL地址池' title,'app_member_url_pool' name,'url-pool' path,'LinkOutlined' icon,'/urlPool/list,/urlPool/view,/urlPool/memberList,/urlPool/summary' permissions,'/app-member/url-pool/index' component,40 sort,'维护注册域名并查看绑定会员' remark UNION ALL
|
||||
SELECT '会员登录日志','app_member_login_log','login-log','FileSearchOutlined','/appMemberLoginLog/list,/appMemberLoginLog/view','/app-member/login-log/index',50,'查看与导出C端会员登录日志'
|
||||
) x WHERE @memberRoot IS NOT NULL AND NOT EXISTS (SELECT 1 FROM `hg_admin_menu` m WHERE m.`name`=x.name);
|
||||
|
||||
SET @urlPoolMenu=(SELECT `id` FROM `hg_admin_menu` WHERE `name`='app_member_url_pool' LIMIT 1);
|
||||
SET @memberLoginLogMenu=(SELECT `id` FROM `hg_admin_menu` WHERE `name`='app_member_login_log' LIMIT 1);
|
||||
|
||||
INSERT INTO `hg_admin_menu` (`pid`,`level`,`tree`,`title`,`name`,`path`,`icon`,`type`,`redirect`,`permissions`,`permission_name`,`component`,`always_show`,`active_menu`,`is_root`,`is_frame`,`frame_src`,`keep_alive`,`hidden`,`affix`,`sort`,`remark`,`status`,`created_at`,`updated_at`)
|
||||
SELECT x.pid,3,x.tree,x.title,x.name,'','',3,'',x.permissions,'','',1,'',0,0,'',0,1,0,x.sort,'URL地址池及会员登录日志权限',1,@now,@now FROM (
|
||||
SELECT @urlPoolMenu pid,CONCAT('tr_',@memberRoot,' tr_',@urlPoolMenu,' ') tree,'新增编辑地址' title,'url_pool_edit' name,'/urlPool/edit' permissions,10 sort UNION ALL
|
||||
SELECT @urlPoolMenu,CONCAT('tr_',@memberRoot,' tr_',@urlPoolMenu,' '),'切换地址状态','url_pool_status','/urlPool/status',20 UNION ALL
|
||||
SELECT @urlPoolMenu,CONCAT('tr_',@memberRoot,' tr_',@urlPoolMenu,' '),'Excel批量导入','url_pool_import','/urlPool/import',30 UNION ALL
|
||||
SELECT @memberLoginLogMenu,CONCAT('tr_',@memberRoot,' tr_',@memberLoginLogMenu,' '),'导出会员登录日志','app_member_login_log_export','/appMemberLoginLog/export',10
|
||||
) x WHERE x.pid IS NOT NULL AND NOT EXISTS (SELECT 1 FROM `hg_admin_menu` m WHERE m.`name`=x.name);
|
||||
|
||||
INSERT IGNORE INTO `hg_admin_role_menu` (`role_id`,`menu_id`)
|
||||
SELECT r.id,m.id
|
||||
FROM `hg_admin_role` r
|
||||
JOIN `hg_admin_menu` m ON m.name IN (
|
||||
'app_member_url_pool','url_pool_edit','url_pool_status','url_pool_import',
|
||||
'app_member_login_log','app_member_login_log_export'
|
||||
)
|
||||
WHERE r.`key`='super'
|
||||
OR EXISTS (
|
||||
SELECT 1
|
||||
FROM `hg_admin_role_menu` parent_rm
|
||||
JOIN `hg_admin_menu` parent_m ON parent_m.id=parent_rm.menu_id
|
||||
WHERE parent_rm.role_id=r.id AND parent_m.name='app_member'
|
||||
);
|
||||
|
||||
-- HotGo 将运行时鉴权策略持久化在独立 Casbin 表中，迁移时同步补齐，避免必须手动保存一次角色权限。
|
||||
INSERT INTO `hg_admin_role_casbin` (`p_type`,`v0`,`v1`,`v2`,`v3`,`v4`,`v5`)
|
||||
SELECT 'p',r.`key`,p.permission,'GET|POST|PUT|DELETE|PATCH|OPTIONS|HEAD','','',''
|
||||
FROM `hg_admin_role` r
|
||||
JOIN (
|
||||
SELECT '/urlPool/list' permission UNION ALL
|
||||
SELECT '/urlPool/view' UNION ALL
|
||||
SELECT '/urlPool/memberList' UNION ALL
|
||||
SELECT '/urlPool/summary' UNION ALL
|
||||
SELECT '/urlPool/edit' UNION ALL
|
||||
SELECT '/urlPool/status' UNION ALL
|
||||
SELECT '/urlPool/import' UNION ALL
|
||||
SELECT '/appMemberLoginLog/list' UNION ALL
|
||||
SELECT '/appMemberLoginLog/view' UNION ALL
|
||||
SELECT '/appMemberLoginLog/export'
|
||||
) p
|
||||
WHERE r.`status`=1
|
||||
AND r.`key`<>'super'
|
||||
AND EXISTS (
|
||||
SELECT 1
|
||||
FROM `hg_admin_role_menu` rm
|
||||
JOIN `hg_admin_menu` m ON m.id=rm.menu_id
|
||||
WHERE rm.role_id=r.id
|
||||
AND m.name IN ('app_member_url_pool','app_member_login_log')
|
||||
)
|
||||
AND NOT EXISTS (
|
||||
SELECT 1 FROM `hg_admin_role_casbin` c
|
||||
WHERE c.`p_type`='p' AND c.`v0`=r.`key` AND c.`v1`=p.permission
|
||||
AND c.`v2`='GET|POST|PUT|DELETE|PATCH|OPTIONS|HEAD'
|
||||
);
|
||||
|
||||
-- 后台会员只允许编辑已有会员，不提供创建会员入口。
|
||||
UPDATE `hg_admin_menu`
|
||||
SET `title`='编辑会员', `updated_at`=@now
|
||||
WHERE `name`='app_member_edit';
|
||||
|
||||
-- 地址池仅允许启用或失效，不提供删除能力；清理旧版本可能已写入的菜单和鉴权策略。
|
||||
DELETE rm
|
||||
FROM `hg_admin_role_menu` rm
|
||||
JOIN `hg_admin_menu` m ON m.id=rm.menu_id
|
||||
WHERE m.name='url_pool_delete';
|
||||
|
||||
DELETE FROM `hg_admin_menu` WHERE `name`='url_pool_delete';
|
||||
DELETE FROM `hg_admin_role_casbin` WHERE `p_type`='p' AND `v1`='/urlPool/delete';
|
||||
Reference in New Issue
Block a user