修复权限管理，角色认证，更新工单认领系统，增加表格导出支持区间选择，增加docker管理（开发中

2026-07-09 10:06:44 +08:00
parent 0c2fe393df
commit 3b84698fd3
25 changed files with 8975 additions and 102 deletions
@@ -0,0 +1,165 @@
+<?php
+session_start();
+header("Access-Control-Allow-Credentials: true");
+header("Content-Type:application/json;charset=utf-8");
+
+$SECRET_RAW = "DockerAdminPlatform2026SecretKey123456789";
+
+$uidGet = $_GET['uid'] ?? '';
+if (!empty($uidGet) && empty($_SESSION['user_id'])) {
+    $_SESSION['user_id'] = $uidGet;
+    $_SESSION['login_time'] = time();
+}
+
+$debug = [
+    "sid" => session_id(),
+    "session_data" => $_SESSION
+];
+
+$expire = 1800;
+if (empty($_SESSION['user_id']) || (time() - $_SESSION['login_time'] > $expire)) {
+    session_destroy();
+    echo json_encode([
+        "code"=>401,
+        "msg"=>"未登录",
+        "debug"=>$debug
+    ],JSON_UNESCAPED_UNICODE);
+    exit;
+}
+
+$user = $_SESSION['user_id'];
+$role = $_SESSION['role'];
+$ts = time();
+$rawSignStr = $user . "|" . $role . "|" . $ts;
+$sign = hash_hmac("sha256", $rawSignStr, $SECRET_RAW);
+$clientIp = $_SERVER['REMOTE_ADDR'];
+
+$act = $_POST['act'] ?? $_GET['act'] ?? 'list';
+$cid = $_POST['container_id'] ?? $_GET['container_id'] ?? '';
+$imageId = $_POST['image_id'] ?? $_GET['image_id'] ?? '';
+$lines = $_POST['lines'] ?? $_GET['lines'] ?? 200;
+$postRaw = file_get_contents("php://input");
+$apiBase = "http://10.150.117.190:8090";
+
+$authHeaders = [
+    "X-User: {$user}",
+    "X-Role: {$role}",
+    "X-Time: {$ts}",
+    "X-Sign: {$sign}",
+    "X-Client-Ip: {$clientIp}",
+    "Content-Type: application/json; charset=utf-8"
+];
+$headerStr = implode("\r\n", $authHeaders);
+
+$getMap = [
+    'list' => '/list',
+    'image_list' => '/image_list',
+    'restart' => '/restart/%s',
+    'stop' => '/stop/%s',
+    'rm' => '/rm/%s',
+    'remove_image' => '/remove_image/%s',
+    'logs' => '/logs/%s/%d',
+    'network' => '/network/%s',
+    'stats' => '/stats/%s',
+    'detail' => '/detail/%s'
+];
+
+$postMap = [
+    'exec' => '/exec/%s',
+    'create' => '/create',
+    'bind_repo' => '/bind_repo',
+];
+
+if (isset($getMap[$act])) {
+    $path = $getMap[$act];
+    $url = '';
+    switch ($act) {
+        case 'restart':
+        case 'stop':
+        case 'rm':
+        case 'network':
+        case 'stats':
+        case 'detail':
+            if (empty($cid)) {
+                echo json_encode(["code"=>400,"msg"=>"缺少容器ID","debug"=>$debug],JSON_UNESCAPED_UNICODE);
+                exit;
+            }
+            $url = $apiBase . sprintf($path, urlencode($cid));
+            break;
+        case 'remove_image':
+            if (empty($imageId)) {
+                echo json_encode(["code"=>400,"msg"=>"缺少镜像ID","debug"=>$debug],JSON_UNESCAPED_UNICODE);
+                exit;
+            }
+            $url = $apiBase . sprintf($path, urlencode($imageId));
+            break;
+        case 'logs':
+            if (empty($cid)) {
+                echo json_encode(["code"=>400,"msg"=>"缺少容器ID","debug"=>$debug],JSON_UNESCAPED_UNICODE);
+                exit;
+            }
+            $url = $apiBase . sprintf($path, urlencode($cid), (int)$lines);
+            break;
+        default:
+            $url = $apiBase . $path;
+            break;
+    }
+    $ctx = stream_context_create([
+        'http' => [
+            'method' => 'GET',
+            'header' => $headerStr,
+            'timeout' => 30
+        ]
+    ]);
+    $resp = @file_get_contents($url, false, $ctx);
+    if ($resp === false) {
+        echo json_encode([
+            "code" => 503,
+            "msg" => "后端Docker接口连接失败，请检查服务是否启动",
+            "debug" => $debug
+        ], JSON_UNESCAPED_UNICODE);
+        exit;
+    }
+    echo $resp;
+    exit;
+}
+
+if (isset($postMap[$act])) {
+    $path = $postMap[$act];
+    $url = '';
+    if ($act === 'exec') {
+        if (empty($cid)) {
+            echo json_encode(["code"=>400,"msg"=>"缺少容器ID","debug"=>$debug],JSON_UNESCAPED_UNICODE);
+            exit;
+        }
+        $url = $apiBase . sprintf($path, urlencode($cid));
+    } else {
+        $url = $apiBase . $path;
+    }
+    $ctx = stream_context_create([
+        'http' => [
+            'method' => 'POST',
+            'header' => $headerStr,
+            'content' => $postRaw,
+            'timeout' => 30
+        ]
+    ]);
+    $resp = @file_get_contents($url, false, $ctx);
+    if ($resp === false) {
+        echo json_encode([
+            "code" => 503,
+            "msg" => "后端Docker接口连接失败，请检查服务是否启动",
+            "debug" => $debug
+        ], JSON_UNESCAPED_UNICODE);
+        exit;
+    }
+    echo $resp;
+    exit;
+}
+
+echo json_encode([
+    "code"=>400,
+    "msg"=>"无效操作act参数",
+    "debug"=>$debug
+],JSON_UNESCAPED_UNICODE);
+exit;