Rogee
851ca7e372
后端移除： - SAML: auth/saml.go, handler/saml_handler.go, account_saml_settings_handler.go, model/account_saml_settings.go, model/saml_idp_config.go, repo/*.go - LDAP: auth/ldap.go, handler/ldap_handler.go, model/account_ldap_settings.go, repo/account_ldap_settings_repo.go - MFA: auth/mfa.go, handler/mfa_handler.go - auth_service: 移除 mfaService 依赖、MFARequired 字段、LoginWithMFA 方法 - auth_handler: 移除 LoginMFA handler、MFA 分支逻辑 - bootstrap: 移除 SAML/LDAP/MFA service 初始化和 handler 注册 - sso_middleware: 精简为仅支持 OIDC provider - router: 移除 SAML/LDAP/MFA 路由注册 - config: 移除 SAMLConfig/LDAPConfig struct 和 defaults 前端移除： - v3/login: 移除 MFA 验证流程和 SAML 登录入口 - v3/api/auth: 移除 MFA 响应处理 - v3/routes: 移除 SSO login 路由 - dashboard: 移除 MFA 设置页面、SAML 安全设置页面 - i18n: 移除 mfa.json - featureFlags: 移除 SAML feature flag .env.example / .env: 移除 SAML/LDAP 配置段
72 lines
3.2 KiB
Go
72 lines
3.2 KiB
Go
package model
|
|
|
|
import (
|
|
"crypto/rand"
|
|
"encoding/hex"
|
|
"time"
|
|
|
|
"gorm.io/datatypes"
|
|
"gorm.io/gorm"
|
|
)
|
|
|
|
// User represents an agent/admin user in the system.
|
|
type User struct {
|
|
Base
|
|
AccountID uint `gorm:"index;not null" json:"account_id"`
|
|
Name string `gorm:"size:255;not null" json:"name"`
|
|
Email string `gorm:"size:255;uniqueIndex;not null" json:"email"`
|
|
Password string `gorm:"size:255;not null" json:"-"` // hashed password (bcrypt)
|
|
PasswordDigest string `gorm:"size:255" json:"-"` // alias used by auth service
|
|
Provider string `gorm:"size:50;default:email" json:"provider"` // email, google, oidc
|
|
UID string `gorm:"size:255" json:"uid,omitempty"` // external ID for OAuth providers
|
|
AvatarURL string `gorm:"size:512" json:"avatar_url"`
|
|
DisplayName string `gorm:"size:255" json:"display_name"`
|
|
MessageSignature string `gorm:"type:text" json:"message_signature"`
|
|
PubsubToken string `gorm:"size:255;uniqueIndex" json:"pubsub_token"`
|
|
UISettings datatypes.JSON `gorm:"type:jsonb;default:'{}'" json:"ui_settings"`
|
|
CustomAttributes datatypes.JSON `gorm:"type:jsonb;default:'{}'" json:"custom_attributes,omitempty"`
|
|
Role string `gorm:"size:50;default:agent" json:"role"` // agent, admin
|
|
Type string `gorm:"size:50;default:user" json:"type"`
|
|
Active bool `gorm:"default:true" json:"active"`
|
|
Available bool `gorm:"default:false" json:"available"`
|
|
// Deprecated: MFA/TOTP functionality has been removed. These fields are kept
|
|
// only to avoid GORM schema mismatch with existing DB columns.
|
|
TOTPSecret string `gorm:"size:255" json:"totp_secret,omitempty"`
|
|
TOTPEnabled bool `gorm:"default:false" json:"totp_enabled"`
|
|
CustomRoleID *uint `gorm:"index" json:"custom_role_id,omitempty"`
|
|
SignInCount int `gorm:"default:0" json:"sign_in_count"`
|
|
ResetPasswordToken string `gorm:"size:255;index" json:"-"`
|
|
ResetPasswordSentAt *time.Time `json:"-"`
|
|
ConfirmationToken string `gorm:"size:255;index" json:"-"`
|
|
ConfirmationSentAt *time.Time `json:"-"`
|
|
UnconfirmedEmail string `gorm:"size:255" json:"unconfirmed_email,omitempty"`
|
|
ConfirmedAt *time.Time `json:"confirmed_at,omitempty"`
|
|
LastSignInAt *time.Time `json:"last_sign_in_at,omitempty"`
|
|
CurrentSignInAt *time.Time `json:"current_sign_in_at,omitempty"`
|
|
}
|
|
|
|
func (User) TableName() string { return "users" }
|
|
|
|
// BeforeCreate mirrors Chatwoot's Pubsubable concern by assigning every user a cable token.
|
|
func (u *User) BeforeCreate(tx *gorm.DB) error {
|
|
if u.PubsubToken == "" {
|
|
token, err := generateSecureToken(32)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
u.PubsubToken = token
|
|
}
|
|
if u.Type == "" {
|
|
u.Type = "User"
|
|
}
|
|
return nil
|
|
}
|
|
|
|
func generateSecureToken(size int) (string, error) {
|
|
b := make([]byte, size)
|
|
if _, err := rand.Read(b); err != nil {
|
|
return "", err
|
|
}
|
|
return hex.EncodeToString(b), nil
|
|
}
|