+
@@ -282,7 +302,12 @@ function App() {
{headerNav}
-
+
@@ -296,7 +321,10 @@ function App() {
管理员入口
-
请输入与后端配置一致的管理员 Token。
+
请输入与后端 X-Admin-Token 一致的管理员 Token。
+
+ 未修改过本机/内网 data 时，默认示例常为 shumengya520，以你部署的后端 config 为准。
+
diff --git a/sproutgate-frontend/src/components/AdminPanel.jsx b/sproutgate-frontend/src/components/AdminPanel.jsx
index c5c4553..e118ac9 100644
--- a/sproutgate-frontend/src/components/AdminPanel.jsx
+++ b/sproutgate-frontend/src/components/AdminPanel.jsx
@@ -38,12 +38,58 @@ export default function AdminPanel({ onReady }) {
const [newInvMax, setNewInvMax] = useState(0);
const [newInvExp, setNewInvExp] = useState("");
+ const [oauthLoading, setOauthLoading] = useState(false);
+ const [oauthSaving, setOauthSaving] = useState(false);
+ const [oauthError, setOauthError] = useState("");
+ const [oauthMessage, setOauthMessage] = useState("");
+ const [oauthGithubEnabled, setOauthGithubEnabled] = useState(false);
+ const [oauthGiteaEnabled, setOauthGiteaEnabled] = useState(false);
+ const [oauthGoogleEnabled, setOauthGoogleEnabled] = useState(false);
+ const [oauthMicrosoftEnabled, setOauthMicrosoftEnabled] = useState(false);
+ const [oauthGithubClientId, setOauthGithubClientId] = useState("");
+ const [oauthGithubClientSecret, setOauthGithubClientSecret] = useState("");
+ const [oauthGiteaBase, setOauthGiteaBase] = useState("https://git.shumengya.top");
+ const [oauthGiteaClientId, setOauthGiteaClientId] = useState("");
+ const [oauthGiteaClientSecret, setOauthGiteaClientSecret] = useState("");
+ const [oauthGoogleClientId, setOauthGoogleClientId] = useState("");
+ const [oauthGoogleClientSecret, setOauthGoogleClientSecret] = useState("");
+ const [oauthMicrosoftClientId, setOauthMicrosoftClientId] = useState("");
+ const [oauthMicrosoftClientSecret, setOauthMicrosoftClientSecret] = useState("");
+ const [oauthMicrosoftTenant, setOauthMicrosoftTenant] = useState("common");
+ const [oauthLinuxdoEnabled, setOauthLinuxdoEnabled] = useState(false);
+ const [oauthLinuxdoConnectBase, setOauthLinuxdoConnectBase] = useState("https://connect.linux.do");
+ const [oauthLinuxdoClientId, setOauthLinuxdoClientId] = useState("");
+ const [oauthLinuxdoClientSecret, setOauthLinuxdoClientSecret] = useState("");
+ const [oauthReturnPrefixes, setOauthReturnPrefixes] = useState("http://localhost:5173/\nhttp://127.0.0.1:5173/");
+ const [oauthSignUpWithInvite, setOauthSignUpWithInvite] = useState(false);
+ const [oauthGithubSecretSet, setOauthGithubSecretSet] = useState(false);
+ const [oauthGiteaSecretSet, setOauthGiteaSecretSet] = useState(false);
+ const [oauthGoogleSecretSet, setOauthGoogleSecretSet] = useState(false);
+ const [oauthMicrosoftSecretSet, setOauthMicrosoftSecretSet] = useState(false);
+ const [oauthLinuxdoSecretSet, setOauthLinuxdoSecretSet] = useState(false);
+ const [oauthGithubLogoUrl, setOauthGithubLogoUrl] = useState("");
+ const [oauthGiteaLogoUrl, setOauthGiteaLogoUrl] = useState("");
+ const [oauthGoogleLogoUrl, setOauthGoogleLogoUrl] = useState("");
+ const [oauthMicrosoftLogoUrl, setOauthMicrosoftLogoUrl] = useState("");
+ const [oauthLinuxdoLogoUrl, setOauthLinuxdoLogoUrl] = useState("");
+
+ const [tsLoading, setTsLoading] = useState(false);
+ const [tsSaving, setTsSaving] = useState(false);
+ const [tsError, setTsError] = useState("");
+ const [tsMessage, setTsMessage] = useState("");
+ const [tsEnabled, setTsEnabled] = useState(false);
+ const [tsSiteKey, setTsSiteKey] = useState("");
+ const [tsSecretKey, setTsSecretKey] = useState("");
+ const [tsSecretKeySet, setTsSecretKeySet] = useState(false);
+
useEffect(() => {
if (token) {
localStorage.setItem("sproutgate_admin_token", token);
loadUsers();
loadCheckInConfig();
loadRegistration();
+ loadOAuth();
+ loadTurnstile();
} else if (onReady && !readySent) {
onReady();
setReadySent(true);
@@ -90,6 +136,165 @@ export default function AdminPanel({ onReady }) {
}
};
+ const loadOAuth = async () => {
+ if (!token) return;
+ setOauthLoading(true);
+ setOauthError("");
+ try {
+ const res = await fetch(`${API_BASE}/api/admin/oauth`, {
+ headers: { "X-Admin-Token": token }
+ });
+ const data = await res.json();
+ if (!res.ok) throw new Error(data.error || "加载 OAuth 配置失败");
+ setOauthGithubEnabled(Boolean(data.githubEnabled));
+ setOauthGiteaEnabled(Boolean(data.giteaEnabled));
+ setOauthGithubClientId((data.githubClientId || "").trim());
+ setOauthGithubClientSecret("");
+ setOauthGithubSecretSet(Boolean(data.githubClientSecretSet));
+ setOauthGiteaBase((data.giteaBaseUrl || "https://git.shumengya.top").trim());
+ setOauthGiteaClientId((data.giteaClientId || "").trim());
+ setOauthGiteaClientSecret("");
+ setOauthGiteaSecretSet(Boolean(data.giteaClientSecretSet));
+ setOauthGoogleEnabled(Boolean(data.googleEnabled));
+ setOauthMicrosoftEnabled(Boolean(data.microsoftEnabled));
+ setOauthGoogleClientId((data.googleClientId || "").trim());
+ setOauthGoogleClientSecret("");
+ setOauthGoogleSecretSet(Boolean(data.googleClientSecretSet));
+ setOauthMicrosoftClientId((data.microsoftClientId || "").trim());
+ setOauthMicrosoftClientSecret("");
+ setOauthMicrosoftSecretSet(Boolean(data.microsoftClientSecretSet));
+ setOauthMicrosoftTenant((data.microsoftTenant || "common").trim() || "common");
+ setOauthLinuxdoEnabled(Boolean(data.linuxdoEnabled));
+ setOauthLinuxdoConnectBase((data.linuxdoConnectBaseUrl || "https://connect.linux.do").trim());
+ setOauthLinuxdoClientId((data.linuxdoClientId || "").trim());
+ setOauthLinuxdoClientSecret("");
+ setOauthLinuxdoSecretSet(Boolean(data.linuxdoClientSecretSet));
+ setOauthGithubLogoUrl((data.githubLogoUrl || "").trim());
+ setOauthGiteaLogoUrl((data.giteaLogoUrl || "").trim());
+ setOauthGoogleLogoUrl((data.googleLogoUrl || "").trim());
+ setOauthMicrosoftLogoUrl((data.microsoftLogoUrl || "").trim());
+ setOauthLinuxdoLogoUrl((data.linuxdoLogoUrl || "").trim());
+ const pfx = data.allowedReturnPrefixes;
+ setOauthReturnPrefixes(
+ Array.isArray(pfx) && pfx.length ? pfx.join("\n") : "http://localhost:5173/\nhttp://127.0.0.1:5173/"
+ );
+ setOauthSignUpWithInvite(Boolean(data.allowOAuthSignUpWhenInviteRequired));
+ } catch (err) {
+ setOauthError(err.message);
+ } finally {
+ setOauthLoading(false);
+ }
+ };
+
+ const saveOAuth = async () => {
+ if (!token) return;
+ setOauthMessage("");
+ setOauthError("");
+ setOauthSaving(true);
+ const prefixes = oauthReturnPrefixes
+ .split(/[\n,]+/)
+ .map((s) => s.trim())
+ .filter(Boolean);
+ try {
+ const res = await fetch(`${API_BASE}/api/admin/oauth`, {
+ method: "PUT",
+ headers: { "Content-Type": "application/json", "X-Admin-Token": token },
+ body: JSON.stringify({
+ githubEnabled: oauthGithubEnabled,
+ giteaEnabled: oauthGiteaEnabled,
+ googleEnabled: oauthGoogleEnabled,
+ microsoftEnabled: oauthMicrosoftEnabled,
+ linuxdoEnabled: oauthLinuxdoEnabled,
+ githubClientId: oauthGithubClientId.trim(),
+ githubClientSecret: oauthGithubClientSecret,
+ giteaBaseUrl: oauthGiteaBase.trim() || "https://git.shumengya.top",
+ giteaClientId: oauthGiteaClientId.trim(),
+ giteaClientSecret: oauthGiteaClientSecret,
+ googleClientId: oauthGoogleClientId.trim(),
+ googleClientSecret: oauthGoogleClientSecret,
+ microsoftClientId: oauthMicrosoftClientId.trim(),
+ microsoftClientSecret: oauthMicrosoftClientSecret,
+ microsoftTenant: oauthMicrosoftTenant.trim() || "common",
+ linuxdoConnectBaseUrl: oauthLinuxdoConnectBase.trim() || "https://connect.linux.do",
+ linuxdoClientId: oauthLinuxdoClientId.trim(),
+ linuxdoClientSecret: oauthLinuxdoClientSecret,
+ githubLogoUrl: oauthGithubLogoUrl.trim(),
+ giteaLogoUrl: oauthGiteaLogoUrl.trim(),
+ googleLogoUrl: oauthGoogleLogoUrl.trim(),
+ microsoftLogoUrl: oauthMicrosoftLogoUrl.trim(),
+ linuxdoLogoUrl: oauthLinuxdoLogoUrl.trim(),
+ allowedReturnPrefixes: prefixes,
+ allowOAuthSignUpWhenInviteRequired: oauthSignUpWithInvite
+ })
+ });
+ const data = await res.json();
+ if (!res.ok) throw new Error(data.error || "保存失败");
+ setOauthMessage("第三方登录配置已保存");
+ setOauthGithubClientSecret("");
+ setOauthGiteaClientSecret("");
+ setOauthGoogleClientSecret("");
+ setOauthMicrosoftClientSecret("");
+ setOauthLinuxdoClientSecret("");
+ setOauthGithubSecretSet(Boolean(data.githubClientSecretSet));
+ setOauthGiteaSecretSet(Boolean(data.giteaClientSecretSet));
+ setOauthGoogleSecretSet(Boolean(data.googleClientSecretSet));
+ setOauthMicrosoftSecretSet(Boolean(data.microsoftClientSecretSet));
+ setOauthLinuxdoSecretSet(Boolean(data.linuxdoClientSecretSet));
+ } catch (err) {
+ setOauthError(err.message);
+ } finally {
+ setOauthSaving(false);
+ }
+ };
+
+ const loadTurnstile = async () => {
+ if (!token) return;
+ setTsLoading(true);
+ setTsError("");
+ try {
+ const res = await fetch(`${API_BASE}/api/admin/turnstile`, {
+ headers: { "X-Admin-Token": token }
+ });
+ const data = await res.json();
+ if (!res.ok) throw new Error(data.error || "加载 Turnstile 配置失败");
+ setTsEnabled(Boolean(data.enabled));
+ setTsSiteKey((data.siteKey || "").trim());
+ setTsSecretKey("");
+ setTsSecretKeySet(Boolean(data.secretKeySet));
+ } catch (err) {
+ setTsError(err.message);
+ } finally {
+ setTsLoading(false);
+ }
+ };
+
+ const saveTurnstile = async () => {
+ if (!token) return;
+ setTsMessage("");
+ setTsError("");
+ setTsSaving(true);
+ try {
+ const res = await fetch(`${API_BASE}/api/admin/turnstile`, {
+ method: "PUT",
+ headers: { "Content-Type": "application/json", "X-Admin-Token": token },
+ body: JSON.stringify({
+ enabled: tsEnabled,
+ siteKey: tsSiteKey.trim(),
+ secretKey: tsSecretKey
+ })
+ });
+ const data = await res.json();
+ if (!res.ok) throw new Error(data.error || "保存失败");
+ setTsMessage("Turnstile 配置已保存");
+ setTsSecretKey("");
+ setTsSecretKeySet(Boolean(data.secretKeySet));
+ } catch (err) {
+ setTsError(err.message);
+ } finally {
+ setTsSaving(false);
+ }
+ };
+
const loadRegistration = async () => {
if (!token) return;
setRegLoading(true);
@@ -366,22 +571,71 @@ export default function AdminPanel({ onReady }) {
const editingUser = users.find((u) => u.account === selectedAccount);
const editingAuthClients = editingUser?.authClients || [];
- return (
-
-
-
管理员控制台
+ const validAdminNav = useMemo(
+ () => new Set(["general", "users", "checkin", "oauth", "turnstile", "registration"]),
+ []
+ );
+ const [adminNav, setAdminNav] = useState(() => {
+ if (typeof window === "undefined") return "general";
+ const h = (window.location.hash || "").replace(/^#/, "");
+ return validAdminNav.has(h) ? h : "general";
+ });
+ useEffect(() => {
+ const onHash = () => {
+ const h = (window.location.hash || "").replace(/^#/, "");
+ if (validAdminNav.has(h)) setAdminNav(h);
+ };
+ window.addEventListener("hashchange", onHash);
+ return () => window.removeEventListener("hashchange", onHash);
+ }, [validAdminNav]);
+ const goAdminNav = (id) => {
+ if (!validAdminNav.has(id)) return;
+ setAdminNav(id);
+ if ((window.location.hash || "").replace(/^#/, "") !== id) {
+ window.location.hash = id;
+ }
+ };
+ return (
+
+
+
+
+
管理员控制台
+
+ {adminNav === "general" && (
管理员 Token
-
+
在左侧切换模块。填写 Token 后可使用「用户管理」等需鉴权的操作。
+ )}
+ {adminNav === "checkin" && (
签到设置
+ )}
+ {adminNav === "oauth" && (
+