refactor(auth): delegate access control to be-system

Remove Agent Desk users, roles, login sessions, tokens, and local permission persistence. Expose the backend as an embeddable ai-agent module with host-provided subject lookup and operation authorization callbacks, and complete the frontend/backend repository split.
This commit is contained in:
t
2026-08-21 00:41:07 +08:00
parent 3d47227fbd
commit 2bbf42b741
447 changed files with 1901 additions and 8920 deletions
+4 -58
View File
@@ -1,34 +1,17 @@
package bootstrap
import (
"agent-desk/internal/handlers/api"
"agent-desk/internal/handlers/dashboard"
"agent-desk/internal/handlers/third"
"code.tczkiot.com/wlw/ai-agent/internal/handlers/api"
"code.tczkiot.com/wlw/ai-agent/internal/handlers/dashboard"
"code.tczkiot.com/wlw/ai-agent/internal/handlers/third"
"github.com/gin-gonic/gin"
)
func registerApiAuthRoutes(group *gin.RouterGroup) {
group.POST("/login", api.Login)
group.POST("/logout", api.Logout)
group.GET("/profile", api.Profile)
group.GET("/wxwork_callback", api.WxWorkCallback)
group.POST("/wxwork_exchange", api.WxWorkExchange)
group.GET("/wxwork_login", api.WxWorkLogin)
group.GET("/wxwork_qr_login", api.WxWorkQRLogin)
group.GET("/oidc_callback", api.OIDCCallback)
group.POST("/oidc_exchange", api.OIDCExchange)
group.GET("/oidc_login", api.OIDCLogin)
}
func registerApiChannelRoutes(group *gin.RouterGroup) {
group.Any("/config", api.ChannelAnyConfig)
}
func registerApiCustomerRoutes(group *gin.RouterGroup) {
group.POST("/session_exchange", api.CustomerPostSession_exchange)
}
func registerApiConversationRoutes(group *gin.RouterGroup) {
group.GET("/:id", api.ConversationGetBy)
group.POST("/close", api.ConversationPostClose)
@@ -47,19 +30,6 @@ func registerDashboardDashboardRoutes(group *gin.RouterGroup) {
group.GET("/overview", dashboard.DashboardGetOverview)
}
func registerDashboardUserRoutes(group *gin.RouterGroup) {
group.GET("/:id", dashboard.UserGetBy)
group.POST("/assign_role", dashboard.UserPostAssign_role)
group.POST("/change_password", dashboard.UserPostChange_password)
group.POST("/create", dashboard.UserPostCreate)
group.POST("/delete", dashboard.UserPostDelete)
group.Any("/list", dashboard.UserAnyList)
group.Any("/list_all", dashboard.UserAnyList_all)
group.POST("/reset_password", dashboard.UserPostReset_password)
group.POST("/update", dashboard.UserPostUpdate)
group.POST("/update_status", dashboard.UserPostUpdate_status)
}
func registerDashboardCompanyRoutes(group *gin.RouterGroup) {
group.GET("/:id", dashboard.CompanyGetBy)
group.POST("/create", dashboard.CompanyPostCreate)
@@ -86,30 +56,6 @@ func registerDashboardCustomerContactRoutes(group *gin.RouterGroup) {
group.POST("/update", dashboard.CustomerContactPostUpdate)
}
func registerDashboardRoleRoutes(group *gin.RouterGroup) {
group.GET("/:id", dashboard.RoleGetBy)
group.POST("/assign_permission", dashboard.RolePostAssign_permission)
group.POST("/create", dashboard.RolePostCreate)
group.POST("/delete", dashboard.RolePostDelete)
group.Any("/list", dashboard.RoleAnyList)
group.GET("/list_all", dashboard.RoleGetList_all)
group.POST("/update", dashboard.RolePostUpdate)
group.POST("/update_sort", dashboard.RolePostUpdate_sort)
group.POST("/update_status", dashboard.RolePostUpdate_status)
}
func registerDashboardPermissionRoutes(group *gin.RouterGroup) {
group.GET("/:id", dashboard.PermissionGetBy)
group.Any("/list", dashboard.PermissionAnyList)
group.POST("/sync", dashboard.PermissionPostSync)
}
func registerDashboardSessionRoutes(group *gin.RouterGroup) {
group.Any("/list", dashboard.SessionAnyList)
group.POST("/revoke", dashboard.SessionPostRevoke)
group.POST("/revoke/by/user", dashboard.SessionPostRevokeByUser)
}
func registerDashboardTagRoutes(group *gin.RouterGroup) {
group.GET("/:id", dashboard.TagGetBy)
group.POST("/create", dashboard.TagPostCreate)
@@ -178,7 +124,6 @@ func registerDashboardChannelRoutes(group *gin.RouterGroup) {
group.POST("/create", dashboard.ChannelPostCreate)
group.POST("/delete", dashboard.ChannelPostDelete)
group.Any("/list", dashboard.ChannelAnyList)
group.POST("/reset_user_token_secret", dashboard.ChannelPostReset_user_token_secret)
group.POST("/rollback_ai_agent_rollout", dashboard.ChannelPostRollback_ai_agent_rollout)
group.POST("/update", dashboard.ChannelPostUpdate)
group.POST("/update_status", dashboard.ChannelPostUpdate_status)
@@ -194,6 +139,7 @@ func registerDashboardAgentRoutes(group *gin.RouterGroup) {
group.POST("/delete", dashboard.AgentPostDelete)
group.Any("/list", dashboard.AgentAnyList)
group.GET("/list_all", dashboard.AgentGetList_all)
group.GET("/user-options", dashboard.AgentGetUser_options)
group.POST("/update", dashboard.AgentPostUpdate)
}