feat: 完善平台总后台认证与管理入口

This commit is contained in:
2026-07-26 18:47:52 +08:00
parent c3c5df6cbb
commit 073eb89762
12 changed files with 371 additions and 155 deletions

View File

@@ -0,0 +1,15 @@
-- 平台总后台登录字段;所有业务主表仍使用应用生成的 UUID V7 identity。
ALTER TABLE idn_account ADD COLUMN IF NOT EXISTS username varchar(64);
ALTER TABLE idn_account ADD COLUMN IF NOT EXISTS display_name varchar(64) NOT NULL DEFAULT '';
ALTER TABLE idn_account ADD COLUMN IF NOT EXISTS password_hash varchar(255) NOT NULL DEFAULT '';
ALTER TABLE idn_account ADD COLUMN IF NOT EXISTS role_code varchar(64) NOT NULL DEFAULT 'user';
ALTER TABLE idn_account ADD COLUMN IF NOT EXISTS must_change_password boolean NOT NULL DEFAULT false;
ALTER TABLE idn_account ADD COLUMN IF NOT EXISTS mfa_enabled boolean NOT NULL DEFAULT false;
CREATE UNIQUE INDEX IF NOT EXISTS uk_idn_account_username ON idn_account (username) WHERE username IS NOT NULL;
COMMENT ON COLUMN idn_account.username IS '登录用户名;平台 root 由 internal/initdb/platform.go 幂等初始化';
COMMENT ON COLUMN idn_account.display_name IS '后台界面展示名称';
COMMENT ON COLUMN idn_account.password_hash IS 'bcrypt 密码哈希,禁止在 API 中返回';
COMMENT ON COLUMN idn_account.role_code IS '平台角色编码';
COMMENT ON COLUMN idn_account.must_change_password IS '首次登录或重置密码后必须修改密码';
COMMENT ON COLUMN idn_account.mfa_enabled IS '是否启用多因素认证';