refactor(auth): delegate access control to be-system
Remove Agent Desk users, roles, login sessions, tokens, and local permission persistence. Expose the backend as an embeddable ai-agent module with host-provided subject lookup and operation authorization callbacks, and complete the frontend/backend repository split.
This commit is contained in:
@@ -1,34 +1,17 @@
|
||||
package bootstrap
|
||||
|
||||
import (
|
||||
"agent-desk/internal/handlers/api"
|
||||
"agent-desk/internal/handlers/dashboard"
|
||||
"agent-desk/internal/handlers/third"
|
||||
"code.tczkiot.com/wlw/ai-agent/internal/handlers/api"
|
||||
"code.tczkiot.com/wlw/ai-agent/internal/handlers/dashboard"
|
||||
"code.tczkiot.com/wlw/ai-agent/internal/handlers/third"
|
||||
|
||||
"github.com/gin-gonic/gin"
|
||||
)
|
||||
|
||||
func registerApiAuthRoutes(group *gin.RouterGroup) {
|
||||
group.POST("/login", api.Login)
|
||||
group.POST("/logout", api.Logout)
|
||||
group.GET("/profile", api.Profile)
|
||||
group.GET("/wxwork_callback", api.WxWorkCallback)
|
||||
group.POST("/wxwork_exchange", api.WxWorkExchange)
|
||||
group.GET("/wxwork_login", api.WxWorkLogin)
|
||||
group.GET("/wxwork_qr_login", api.WxWorkQRLogin)
|
||||
group.GET("/oidc_callback", api.OIDCCallback)
|
||||
group.POST("/oidc_exchange", api.OIDCExchange)
|
||||
group.GET("/oidc_login", api.OIDCLogin)
|
||||
}
|
||||
|
||||
func registerApiChannelRoutes(group *gin.RouterGroup) {
|
||||
group.Any("/config", api.ChannelAnyConfig)
|
||||
}
|
||||
|
||||
func registerApiCustomerRoutes(group *gin.RouterGroup) {
|
||||
group.POST("/session_exchange", api.CustomerPostSession_exchange)
|
||||
}
|
||||
|
||||
func registerApiConversationRoutes(group *gin.RouterGroup) {
|
||||
group.GET("/:id", api.ConversationGetBy)
|
||||
group.POST("/close", api.ConversationPostClose)
|
||||
@@ -47,19 +30,6 @@ func registerDashboardDashboardRoutes(group *gin.RouterGroup) {
|
||||
group.GET("/overview", dashboard.DashboardGetOverview)
|
||||
}
|
||||
|
||||
func registerDashboardUserRoutes(group *gin.RouterGroup) {
|
||||
group.GET("/:id", dashboard.UserGetBy)
|
||||
group.POST("/assign_role", dashboard.UserPostAssign_role)
|
||||
group.POST("/change_password", dashboard.UserPostChange_password)
|
||||
group.POST("/create", dashboard.UserPostCreate)
|
||||
group.POST("/delete", dashboard.UserPostDelete)
|
||||
group.Any("/list", dashboard.UserAnyList)
|
||||
group.Any("/list_all", dashboard.UserAnyList_all)
|
||||
group.POST("/reset_password", dashboard.UserPostReset_password)
|
||||
group.POST("/update", dashboard.UserPostUpdate)
|
||||
group.POST("/update_status", dashboard.UserPostUpdate_status)
|
||||
}
|
||||
|
||||
func registerDashboardCompanyRoutes(group *gin.RouterGroup) {
|
||||
group.GET("/:id", dashboard.CompanyGetBy)
|
||||
group.POST("/create", dashboard.CompanyPostCreate)
|
||||
@@ -86,30 +56,6 @@ func registerDashboardCustomerContactRoutes(group *gin.RouterGroup) {
|
||||
group.POST("/update", dashboard.CustomerContactPostUpdate)
|
||||
}
|
||||
|
||||
func registerDashboardRoleRoutes(group *gin.RouterGroup) {
|
||||
group.GET("/:id", dashboard.RoleGetBy)
|
||||
group.POST("/assign_permission", dashboard.RolePostAssign_permission)
|
||||
group.POST("/create", dashboard.RolePostCreate)
|
||||
group.POST("/delete", dashboard.RolePostDelete)
|
||||
group.Any("/list", dashboard.RoleAnyList)
|
||||
group.GET("/list_all", dashboard.RoleGetList_all)
|
||||
group.POST("/update", dashboard.RolePostUpdate)
|
||||
group.POST("/update_sort", dashboard.RolePostUpdate_sort)
|
||||
group.POST("/update_status", dashboard.RolePostUpdate_status)
|
||||
}
|
||||
|
||||
func registerDashboardPermissionRoutes(group *gin.RouterGroup) {
|
||||
group.GET("/:id", dashboard.PermissionGetBy)
|
||||
group.Any("/list", dashboard.PermissionAnyList)
|
||||
group.POST("/sync", dashboard.PermissionPostSync)
|
||||
}
|
||||
|
||||
func registerDashboardSessionRoutes(group *gin.RouterGroup) {
|
||||
group.Any("/list", dashboard.SessionAnyList)
|
||||
group.POST("/revoke", dashboard.SessionPostRevoke)
|
||||
group.POST("/revoke/by/user", dashboard.SessionPostRevokeByUser)
|
||||
}
|
||||
|
||||
func registerDashboardTagRoutes(group *gin.RouterGroup) {
|
||||
group.GET("/:id", dashboard.TagGetBy)
|
||||
group.POST("/create", dashboard.TagPostCreate)
|
||||
@@ -178,7 +124,6 @@ func registerDashboardChannelRoutes(group *gin.RouterGroup) {
|
||||
group.POST("/create", dashboard.ChannelPostCreate)
|
||||
group.POST("/delete", dashboard.ChannelPostDelete)
|
||||
group.Any("/list", dashboard.ChannelAnyList)
|
||||
group.POST("/reset_user_token_secret", dashboard.ChannelPostReset_user_token_secret)
|
||||
group.POST("/rollback_ai_agent_rollout", dashboard.ChannelPostRollback_ai_agent_rollout)
|
||||
group.POST("/update", dashboard.ChannelPostUpdate)
|
||||
group.POST("/update_status", dashboard.ChannelPostUpdate_status)
|
||||
@@ -194,6 +139,7 @@ func registerDashboardAgentRoutes(group *gin.RouterGroup) {
|
||||
group.POST("/delete", dashboard.AgentPostDelete)
|
||||
group.Any("/list", dashboard.AgentAnyList)
|
||||
group.GET("/list_all", dashboard.AgentGetList_all)
|
||||
group.GET("/user-options", dashboard.AgentGetUser_options)
|
||||
group.POST("/update", dashboard.AgentPostUpdate)
|
||||
}
|
||||
|
||||
|
||||
Reference in New Issue
Block a user