用于在业务流程中主动抛出可预期的错误，并携带业务错误码。
+ */ +package com.hertz.common.exception; + +public class BusinessException extends RuntimeException { + private final int code; + + public BusinessException(int code, String message) { + super(message); + this.code = code; + } + + public int getCode() { + return code; + } +} + diff --git a/src/main/java/com/hertz/common/exception/GlobalExceptionHandler.java b/src/main/java/com/hertz/common/exception/GlobalExceptionHandler.java new file mode 100644 index 0000000..f79aebd --- /dev/null +++ b/src/main/java/com/hertz/common/exception/GlobalExceptionHandler.java @@ -0,0 +1,74 @@ +/** + * 全局异常处理器。 + * + *将各类异常统一转换为标准的接口响应结构，并设置对应的 HTTP 状态码。
+ */ +package com.hertz.common.exception; + +import com.hertz.common.api.ApiResponse; +import jakarta.validation.ConstraintViolationException; +import org.springframework.http.HttpStatus; +import org.springframework.http.ResponseEntity; +import org.springframework.security.access.AccessDeniedException; +import org.springframework.security.core.AuthenticationException; +import org.springframework.web.bind.MethodArgumentNotValidException; +import org.springframework.web.bind.annotation.ExceptionHandler; +import org.springframework.web.bind.annotation.ResponseStatus; +import org.springframework.web.bind.annotation.RestControllerAdvice; +import org.springframework.web.servlet.resource.NoResourceFoundException; + +@RestControllerAdvice +public class GlobalExceptionHandler { + + @ExceptionHandler(BusinessException.class) + public ResponseEntity记录每次 HTTP 请求的方法、URI、响应状态码与耗时。
+ */ +package com.hertz.common.filter; + +import jakarta.servlet.FilterChain; +import jakarta.servlet.ServletException; +import jakarta.servlet.http.HttpServletRequest; +import jakarta.servlet.http.HttpServletResponse; +import lombok.extern.slf4j.Slf4j; +import org.springframework.lang.NonNull; +import org.springframework.stereotype.Component; +import org.springframework.web.filter.OncePerRequestFilter; + +import java.io.IOException; + +@Component +@Slf4j +public class RequestLogFilter extends OncePerRequestFilter { + + @Override + protected void doFilterInternal(@NonNull HttpServletRequest request, @NonNull HttpServletResponse response, @NonNull FilterChain filterChain) + throws ServletException, IOException { + + long startTime = System.currentTimeMillis(); + String method = request.getMethod(); + String uri = request.getRequestURI(); + + try { + filterChain.doFilter(request, response); + } finally { + long endTime = System.currentTimeMillis(); + long timeTaken = endTime - startTime; + int status = response.getStatus(); + + log.info("Request: [{}] {} | Status: {} | Time: {}ms", method, uri, status, timeTaken); + } + } +} diff --git a/src/main/java/com/hertz/config/AppPathResolver.java b/src/main/java/com/hertz/config/AppPathResolver.java new file mode 100644 index 0000000..0a5f451 --- /dev/null +++ b/src/main/java/com/hertz/config/AppPathResolver.java @@ -0,0 +1,31 @@ +/** + * 应用路径解析器。 + * + *用于将配置中的相对路径解析为基于应用工作目录的绝对路径。
+ */ +package com.hertz.config; + +import java.io.File; +import org.springframework.stereotype.Service; + +@Service +public class AppPathResolver { + + private final File baseDir; + + public AppPathResolver() { + String userDir = System.getProperty("user.dir"); + this.baseDir = userDir == null || userDir.isBlank() ? new File(".") : new File(userDir); + } + + public String resolve(String path) { + if (path == null || path.isBlank()) { + return path; + } + File file = new File(path); + if (file.isAbsolute()) { + return file.getAbsolutePath(); + } + return new File(baseDir, path).getAbsolutePath(); + } +} diff --git a/src/main/java/com/hertz/config/AppProperties.java b/src/main/java/com/hertz/config/AppProperties.java new file mode 100644 index 0000000..60bdfbf --- /dev/null +++ b/src/main/java/com/hertz/config/AppProperties.java @@ -0,0 +1,32 @@ +/** + * 应用自定义配置属性。 + * + *对应 application.yml 中以 {@code app} 为前缀的配置项。
+ */ +package com.hertz.config; + +import lombok.Data; +import org.springframework.boot.context.properties.ConfigurationProperties; +import org.springframework.context.annotation.Configuration; + +@Data +@Configuration +@ConfigurationProperties(prefix = "app") +public class AppProperties { + + private Jwt jwt = new Jwt(); + private Upload upload = new Upload(); + + @Data + public static class Jwt { + private String secret; + private long expireSeconds; + } + + @Data + public static class Upload { + private String rootPath; + private String avatarPath; + private String knowledgePath = "knowledge/"; + } +} diff --git a/src/main/java/com/hertz/config/MybatisPlusConfig.java b/src/main/java/com/hertz/config/MybatisPlusConfig.java new file mode 100644 index 0000000..02af2c5 --- /dev/null +++ b/src/main/java/com/hertz/config/MybatisPlusConfig.java @@ -0,0 +1,22 @@ +/** + * MyBatis-Plus 配置。 + * + *主要用于注册分页等拦截器。
+ */ +package com.hertz.config; + +import com.baomidou.mybatisplus.extension.plugins.MybatisPlusInterceptor; +import com.baomidou.mybatisplus.extension.plugins.inner.PaginationInnerInterceptor; +import org.springframework.context.annotation.Bean; +import org.springframework.context.annotation.Configuration; + +@Configuration +public class MybatisPlusConfig { + @Bean + public MybatisPlusInterceptor mybatisPlusInterceptor() { + var interceptor = new MybatisPlusInterceptor(); + interceptor.addInnerInterceptor(new PaginationInnerInterceptor()); + return interceptor; + } +} + diff --git a/src/main/java/com/hertz/config/WebMvcConfig.java b/src/main/java/com/hertz/config/WebMvcConfig.java new file mode 100644 index 0000000..d4d179e --- /dev/null +++ b/src/main/java/com/hertz/config/WebMvcConfig.java @@ -0,0 +1,33 @@ +/** + * Web MVC 配置。 + * + *用于配置静态资源映射，例如上传文件的访问路径。
+ */ +package com.hertz.config; + +import java.io.File; +import org.springframework.beans.factory.annotation.Value; +import org.springframework.context.annotation.Configuration; +import org.springframework.lang.NonNull; +import org.springframework.web.servlet.config.annotation.ResourceHandlerRegistry; +import org.springframework.web.servlet.config.annotation.WebMvcConfigurer; + +@Configuration +public class WebMvcConfig implements WebMvcConfigurer { + + @Value("${app.upload.root-path}") + private String uploadRootPath; + + private final AppPathResolver pathResolver; + + public WebMvcConfig(AppPathResolver pathResolver) { + this.pathResolver = pathResolver; + } + + @Override + public void addResourceHandlers(@NonNull ResourceHandlerRegistry registry) { + String absoluteUploadRootPath = new File(pathResolver.resolve(uploadRootPath)).getAbsolutePath().replace("\\", "/"); + registry.addResourceHandler("/uploads/**") + .addResourceLocations("file:" + absoluteUploadRootPath + "/"); + } +} diff --git a/src/main/java/com/hertz/modules/ai/config/VectorStoreConfig.java b/src/main/java/com/hertz/modules/ai/config/VectorStoreConfig.java new file mode 100644 index 0000000..8565b1d --- /dev/null +++ b/src/main/java/com/hertz/modules/ai/config/VectorStoreConfig.java @@ -0,0 +1,27 @@ +package com.hertz.modules.ai.config; + +import org.springframework.ai.embedding.EmbeddingModel; +import org.springframework.ai.vectorstore.SimpleVectorStore; +import org.springframework.ai.vectorstore.VectorStore; +import org.springframework.beans.factory.annotation.Value; +import org.springframework.context.annotation.Bean; +import org.springframework.context.annotation.Configuration; + +import java.io.File; + +@Configuration +public class VectorStoreConfig { + + @Value("${spring.ai.vectorstore.simple.store.path:vector-store.json}") + private String vectorStorePath; + + @Bean + public VectorStore vectorStore(EmbeddingModel embeddingModel) { + SimpleVectorStore simpleVectorStore = SimpleVectorStore.builder(embeddingModel).build(); + File file = new File(vectorStorePath); + if (file.exists() && file.isFile()) { + simpleVectorStore.load(file); + } + return simpleVectorStore; + } +} diff --git a/src/main/java/com/hertz/modules/ai/controller/AiController.java b/src/main/java/com/hertz/modules/ai/controller/AiController.java new file mode 100644 index 0000000..60810c6 --- /dev/null +++ b/src/main/java/com/hertz/modules/ai/controller/AiController.java @@ -0,0 +1,117 @@ +package com.hertz.modules.ai.controller; + +import com.hertz.modules.ai.dto.ChatRequest; +import com.hertz.modules.ai.entity.Conversation; +import com.hertz.modules.ai.entity.Message; +import com.hertz.modules.ai.service.AiService; +import com.hertz.modules.ai.service.ConversationService; +import com.hertz.common.api.ApiResponse; +import com.hertz.common.exception.BusinessException; +import com.hertz.security.SecurityUtils; +import lombok.RequiredArgsConstructor; +import org.springframework.http.MediaType; +import org.springframework.web.bind.annotation.*; +import reactor.core.publisher.Flux; + +import java.util.List; + +@RestController +@RequestMapping("/api/ai") +@RequiredArgsConstructor +public class AiController { + + private final AiService aiService; + private final ConversationService conversationService; + + @PostMapping("/chat") + public ApiResponse用于根据用户名加载用户信息，供认证与权限体系使用。
+ */ +package com.hertz.security; + +import com.hertz.modules.system.service.UserService; +import org.springframework.security.core.userdetails.UserDetails; +import org.springframework.security.core.userdetails.UserDetailsService; +import org.springframework.security.core.userdetails.UsernameNotFoundException; +import org.springframework.stereotype.Service; + +@Service +public class CustomUserDetailsService implements UserDetailsService { + + private final UserService userService; + + public CustomUserDetailsService(UserService userService) { + this.userService = userService; + } + + @Override + public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException { + var user = userService.findByUsername(username); + if (user == null) { + throw new UsernameNotFoundException("User not found: " + username); + } + // We are using JWT for auth, so this is mostly to satisfy Spring Security's default config + // or if we wanted to support Basic Auth/Form Login alongside JWT. + // For now, we return a minimal UserDetails implementation. + return org.springframework.security.core.userdetails.User + .withUsername(user.getUsername()) + .password(user.getPassword()) + .roles("USER") // Default role, actual authorities are loaded in JwtAuthFilter + .build(); + } +} diff --git a/src/main/java/com/hertz/security/JwtAuthFilter.java b/src/main/java/com/hertz/security/JwtAuthFilter.java new file mode 100644 index 0000000..de58917 --- /dev/null +++ b/src/main/java/com/hertz/security/JwtAuthFilter.java @@ -0,0 +1,67 @@ +/** + * JWT 认证过滤器。 + * + *从请求头 Authorization: Bearer token 中解析 JWT，并将认证信息写入 SecurityContext。
+ */ +package com.hertz.security; + +import com.hertz.modules.system.service.AuthzService; +import jakarta.servlet.FilterChain; +import jakarta.servlet.ServletException; +import jakarta.servlet.http.HttpServletRequest; +import jakarta.servlet.http.HttpServletResponse; +import java.io.IOException; +import java.util.stream.Collectors; +import org.springframework.http.HttpHeaders; +import org.springframework.lang.NonNull; +import org.springframework.security.authentication.UsernamePasswordAuthenticationToken; +import org.springframework.security.core.authority.SimpleGrantedAuthority; +import org.springframework.security.core.context.SecurityContextHolder; +import org.springframework.stereotype.Component; +import org.springframework.web.filter.OncePerRequestFilter; + +@Component +public class JwtAuthFilter extends OncePerRequestFilter { + private final JwtService jwtService; + private final AuthzService authzService; + + public JwtAuthFilter(JwtService jwtService, AuthzService authzService) { + this.jwtService = jwtService; + this.authzService = authzService; + } + + @Override + protected void doFilterInternal( + @NonNull HttpServletRequest request, + @NonNull HttpServletResponse response, + @NonNull FilterChain filterChain + ) throws ServletException, IOException { + var header = request.getHeader(HttpHeaders.AUTHORIZATION); + if (header == null || !header.startsWith("Bearer ")) { + filterChain.doFilter(request, response); + return; + } + + var token = header.substring("Bearer ".length()).trim(); + try { + var claims = jwtService.parse(token); + var userId = claims.get("uid", Number.class).longValue(); + var username = claims.getSubject(); + var authorities = authzService.loadAuthorities(userId).stream() + .map(SimpleGrantedAuthority::new) + .collect(Collectors.toSet()); + var auth = new UsernamePasswordAuthenticationToken(username, null, authorities); + auth.setDetails(userId); + SecurityContextHolder.getContext().setAuthentication(auth); + // System.out.println("DEBUG: JWT Auth Success for user: " + username); + } catch (Exception e) { + System.err.println("DEBUG: JWT Auth Failed: " + e.getMessage()); + e.printStackTrace(); + logger.error("JWT Authentication failed: " + e.getMessage(), e); + SecurityContextHolder.clearContext(); + } + + filterChain.doFilter(request, response); + } +} + diff --git a/src/main/java/com/hertz/security/JwtService.java b/src/main/java/com/hertz/security/JwtService.java new file mode 100644 index 0000000..4ed0ace --- /dev/null +++ b/src/main/java/com/hertz/security/JwtService.java @@ -0,0 +1,53 @@ +/** + * JWT 工具服务。 + * + *负责生成与解析 JWT，用于无状态认证。
+ */ +package com.hertz.security; + +import io.jsonwebtoken.Claims; +import io.jsonwebtoken.Jwts; +import io.jsonwebtoken.security.Keys; +import java.nio.charset.StandardCharsets; +import java.time.Instant; +import java.util.Date; +import javax.crypto.SecretKey; +import org.springframework.beans.factory.annotation.Value; +import org.springframework.stereotype.Component; + +@Component +public class JwtService { + private final SecretKey key; + private final long expireSeconds; + + public JwtService( + @Value("${app.jwt.secret}") String secret, + @Value("${app.jwt.expire-seconds}") long expireSeconds + ) { + if (secret == null || secret.getBytes(StandardCharsets.UTF_8).length < 32) { + throw new IllegalArgumentException("app.jwt.secret 至少 32 字节"); + } + this.key = Keys.hmacShaKeyFor(secret.getBytes(StandardCharsets.UTF_8)); + this.expireSeconds = expireSeconds; + } + + public String createToken(long userId, String username) { + var now = Instant.now(); + return Jwts.builder() + .subject(username) + .claim("uid", userId) + .issuedAt(Date.from(now)) + .expiration(Date.from(now.plusSeconds(expireSeconds))) + .signWith(key) + .compact(); + } + + public Claims parse(String token) { + return Jwts.parser() + .verifyWith(key) + .build() + .parseSignedClaims(token) + .getPayload(); + } +} + diff --git a/src/main/java/com/hertz/security/SecurityConfig.java b/src/main/java/com/hertz/security/SecurityConfig.java new file mode 100644 index 0000000..c96395b --- /dev/null +++ b/src/main/java/com/hertz/security/SecurityConfig.java @@ -0,0 +1,65 @@ +/** + * Spring Security 配置。 + * + *配置无状态会话、跨域策略、接口访问规则，并注册 JWT 认证过滤器。
+ */ +package com.hertz.security; + +import jakarta.servlet.DispatcherType; +import org.springframework.context.annotation.Bean; +import org.springframework.context.annotation.Configuration; +import org.springframework.http.HttpMethod; +import org.springframework.security.config.Customizer; +import org.springframework.security.config.annotation.method.configuration.EnableMethodSecurity; +import org.springframework.security.config.annotation.web.builders.HttpSecurity; +import org.springframework.security.config.http.SessionCreationPolicy; +import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder; +import org.springframework.security.crypto.password.PasswordEncoder; +import org.springframework.security.web.SecurityFilterChain; +import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter; +import org.springframework.web.cors.CorsConfiguration; +import org.springframework.web.cors.CorsConfigurationSource; +import org.springframework.web.cors.UrlBasedCorsConfigurationSource; + +@Configuration +@EnableMethodSecurity +public class SecurityConfig { + + @Bean + public PasswordEncoder passwordEncoder() { + return new BCryptPasswordEncoder(); + } + + @Bean + public CorsConfigurationSource corsConfigurationSource() { + var config = new CorsConfiguration(); + config.addAllowedOriginPattern("*"); + config.addAllowedHeader("*"); + config.addAllowedMethod("*"); + config.setAllowCredentials(true); + + var source = new UrlBasedCorsConfigurationSource(); + source.registerCorsConfiguration("/**", config); + return source; + } + + @Bean + public SecurityFilterChain filterChain( + HttpSecurity http, + JwtAuthFilter jwtAuthFilter + ) throws Exception { + return http + .csrf(csrf -> csrf.disable()) + .cors(Customizer.withDefaults()) + .sessionManagement(sm -> sm.sessionCreationPolicy(SessionCreationPolicy.STATELESS)) + .authorizeHttpRequests(auth -> auth + .dispatcherTypeMatchers(DispatcherType.ASYNC).permitAll() + .requestMatchers("/api/auth/**", "/error", "/uploads/**").permitAll() + .requestMatchers(HttpMethod.OPTIONS, "/**").permitAll() + .anyRequest().authenticated() + ) + .addFilterBefore(jwtAuthFilter, UsernamePasswordAuthenticationFilter.class) + .build(); + } +} + diff --git a/src/main/java/com/hertz/security/SecurityUtils.java b/src/main/java/com/hertz/security/SecurityUtils.java new file mode 100644 index 0000000..7bb4017 --- /dev/null +++ b/src/main/java/com/hertz/security/SecurityUtils.java @@ -0,0 +1,30 @@ +/** + * 安全上下文工具类。 + * + *用于从 Spring Security 上下文中获取当前登录用户信息。
+ */ +package com.hertz.security; + +import org.springframework.security.core.Authentication; +import org.springframework.security.core.context.SecurityContextHolder; + +public final class SecurityUtils { + private SecurityUtils() { + } + + public static Long getCurrentUserId() { + return getCurrentUserId(SecurityContextHolder.getContext().getAuthentication()); + } + + public static Long getCurrentUserId(Authentication authentication) { + if (authentication == null) { + return null; + } + var details = authentication.getDetails(); + if (details instanceof Number n) { + return n.longValue(); + } + return null; + } +} + diff --git a/src/main/resources/META-INF/additional-spring-configuration-metadata.json b/src/main/resources/META-INF/additional-spring-configuration-metadata.json new file mode 100644 index 0000000..fc7075b --- /dev/null +++ b/src/main/resources/META-INF/additional-spring-configuration-metadata.json @@ -0,0 +1,10 @@ +{ + "properties": [ + { + "name": "spring.ai.vectorstore.simple.store.path", + "type": "java.lang.String", + "description": "SimpleVectorStore 持久化存储路径（可为目录或文件路径，项目内按需解析）。" + } + ] +} + diff --git a/src/main/resources/application.yml b/src/main/resources/application.yml new file mode 100644 index 0000000..909fb28 --- /dev/null +++ b/src/main/resources/application.yml @@ -0,0 +1,57 @@ +server: + port: 8088 + +spring: + application: + name: Hertz-Springboot + sql: + init: + mode: never # 禁用 SQL 初始化（不自动执行 schema.sql / data.sql）可选：always（默认）、never + servlet: + multipart: + max-file-size: 2MB + max-request-size: 10MB + ai: + ollama: + base-url: http://localhost:11434 + chat: + # 如果需要快速响应，建议切换为标准模型，如: llama3.1, qwen2.5:7b, deepseek-llm:7b + model: deepseek-llm:7b + options: + temperature: 0.7 + embedding: + model: nomic-embed-text + vectorstore: + simple: + store: + path: ./uploads/knowledge/vector_store + datasource: + url: jdbc:mysql://localhost:3306/hertz_springboot?useUnicode=true&characterEncoding=utf8&useSSL=false&serverTimezone=Asia/Shanghai + username: root + password: 123456 + driver-class-name: com.mysql.cj.jdbc.Driver + data: + redis: + host: localhost + port: 6379 + password: + database: 0 + +mybatis-plus: + configuration: + map-underscore-to-camel-case: true + +app: + jwt: + secret: change-me-to-a-long-random-string-change-me-to-a-long-random-string + expire-seconds: 86400 + upload: + root-path: ./uploads + avatar-path: avatar/ + knowledge-path: knowledge/ + +management: + endpoints: + web: + exposure: + include: health,info,metrics diff --git a/src/main/resources/schema/ai_schema.sql b/src/main/resources/schema/ai_schema.sql new file mode 100644 index 0000000..bc03fef --- /dev/null +++ b/src/main/resources/schema/ai_schema.sql @@ -0,0 +1,26 @@ + +-- ---------------------------- +-- Table structure for conversations +-- ---------------------------- +CREATE TABLE IF NOT EXISTS `ai_conversations` ( + `id` bigint NOT NULL AUTO_INCREMENT, + `user_id` bigint NOT NULL COMMENT '用户ID', + `title` varchar(255) NOT NULL COMMENT '对话标题', + `created_at` datetime NOT NULL DEFAULT CURRENT_TIMESTAMP, + `updated_at` datetime NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP, + PRIMARY KEY (`id`), + KEY `idx_user_id` (`user_id`) +) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COMMENT='对话记录表'; + +-- ---------------------------- +-- Table structure for messages +-- ---------------------------- +CREATE TABLE IF NOT EXISTS `ai_messages` ( + `id` bigint NOT NULL AUTO_INCREMENT, + `conversation_id` bigint NOT NULL COMMENT '所属对话ID', + `role` enum('user','assistant') NOT NULL COMMENT '消息角色', + `content` text NOT NULL COMMENT '消息内容', + `created_at` datetime NOT NULL DEFAULT CURRENT_TIMESTAMP, + PRIMARY KEY (`id`), + KEY `idx_conversation_id` (`conversation_id`) +) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COMMENT='对话消息表'; diff --git a/src/main/resources/schema/knowledge_schema.sql b/src/main/resources/schema/knowledge_schema.sql new file mode 100644 index 0000000..a249fe6 --- /dev/null +++ b/src/main/resources/schema/knowledge_schema.sql @@ -0,0 +1,26 @@ +CREATE TABLE IF NOT EXISTS knowledge_base ( + id BIGINT AUTO_INCREMENT PRIMARY KEY COMMENT '主键ID', + name VARCHAR(255) NOT NULL COMMENT '知识库名称', + description TEXT COMMENT '知识库描述', + create_time DATETIME DEFAULT CURRENT_TIMESTAMP COMMENT '创建时间', + create_by BIGINT COMMENT '创建人ID' +) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COMMENT='知识库'; + +CREATE TABLE IF NOT EXISTS knowledge_document ( + id BIGINT AUTO_INCREMENT PRIMARY KEY COMMENT '主键ID', + kb_id BIGINT NOT NULL COMMENT '知识库ID', + original_name VARCHAR(512) NOT NULL COMMENT '原始文件名', + stored_name VARCHAR(512) NOT NULL COMMENT '存储文件名', + stored_path VARCHAR(1024) NOT NULL COMMENT '存储相对路径', + content_type VARCHAR(255) COMMENT '文件类型', + size_bytes BIGINT NOT NULL COMMENT '文件大小(字节)', + sha256 VARCHAR(64) COMMENT '文件SHA256摘要', + status VARCHAR(32) NOT NULL COMMENT '处理状态(PROCESSING/READY/FAILED)', + chunk_count INT DEFAULT 0 COMMENT '分片数量', + error_message VARCHAR(1024) COMMENT '失败原因', + create_time DATETIME DEFAULT CURRENT_TIMESTAMP COMMENT '创建时间', + deleted TINYINT(1) DEFAULT 0 COMMENT '是否删除(软删除标记)', + deleted_time DATETIME COMMENT '删除时间', + KEY idx_kb_id (kb_id), + KEY idx_kb_deleted (kb_id, deleted) +) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COMMENT='知识库文档'; diff --git a/src/main/resources/schema/monitor_schema.sql b/src/main/resources/schema/monitor_schema.sql new file mode 100644 index 0000000..3e1807f --- /dev/null +++ b/src/main/resources/schema/monitor_schema.sql @@ -0,0 +1,14 @@ +-- ---------------------------- +-- Table structure for sys_monitor_log +-- ---------------------------- +DROP TABLE IF EXISTS `sys_monitor_log`; +CREATE TABLE `sys_monitor_log` ( + `id` bigint NOT NULL AUTO_INCREMENT COMMENT '主键ID', + `cpu_usage` double NOT NULL COMMENT 'CPU使用率(%)', + `memory_usage` double NOT NULL COMMENT '内存使用率(%)', + `memory_total` bigint NOT NULL COMMENT '总内存(字节)', + `memory_used` bigint NOT NULL COMMENT '已用内存(字节)', + `created_at` datetime NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '记录时间', + PRIMARY KEY (`id`), + KEY `idx_created_at` (`created_at`) +) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COMMENT='系统监控日志表'; diff --git a/src/main/resources/schema/schema.sql b/src/main/resources/schema/schema.sql new file mode 100644 index 0000000..ea0531e --- /dev/null +++ b/src/main/resources/schema/schema.sql @@ -0,0 +1,107 @@ +-- ---------------------------- +-- Table structure for sys_user +-- ---------------------------- +DROP TABLE IF EXISTS `sys_user`; +CREATE TABLE `sys_user` ( + `id` bigint NOT NULL AUTO_INCREMENT COMMENT '用户ID', + `username` varchar(50) NOT NULL COMMENT '用户名', + `password` varchar(100) NOT NULL COMMENT '加密密码', + `nickname` varchar(50) NOT NULL COMMENT '用户昵称', + `avatar_path` varchar(255) DEFAULT NULL COMMENT '头像路径', + `phone` varchar(20) DEFAULT NULL COMMENT '手机号', + `email` varchar(100) DEFAULT NULL COMMENT '邮箱', + `gender` tinyint(1) DEFAULT '0' COMMENT '0-未知 1-男 2-女', + `status` tinyint DEFAULT '1' COMMENT '0-禁用 1-启用', + `created_at` datetime DEFAULT CURRENT_TIMESTAMP COMMENT '创建时间', + `updated_at` datetime DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP COMMENT '更新时间', + PRIMARY KEY (`id`), + UNIQUE KEY `uk_username` (`username`), + KEY `idx_status` (`status`) +) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COMMENT='系统用户表'; + +-- ---------------------------- +-- Table structure for sys_role +-- ---------------------------- +DROP TABLE IF EXISTS `sys_role`; +CREATE TABLE `sys_role` ( + `id` bigint NOT NULL AUTO_INCREMENT COMMENT '角色ID', + `role_key` varchar(50) NOT NULL COMMENT '角色标识', + `role_name` varchar(50) NOT NULL COMMENT '角色名称', + `status` tinyint DEFAULT '1' COMMENT '0-禁用 1-启用', + `created_at` datetime DEFAULT CURRENT_TIMESTAMP COMMENT '创建时间', + `updated_at` datetime DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP COMMENT '更新时间', + PRIMARY KEY (`id`), + UNIQUE KEY `uk_role_key` (`role_key`) +) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COMMENT='系统角色表'; + +-- ---------------------------- +-- Table structure for sys_menu +-- ---------------------------- +DROP TABLE IF EXISTS `sys_menu`; +CREATE TABLE `sys_menu` ( + `id` bigint NOT NULL AUTO_INCREMENT COMMENT '菜单ID', + `parent_id` bigint DEFAULT '0' COMMENT '父菜单ID', + `type` varchar(10) NOT NULL COMMENT 'D-目录 M-菜单 B-按钮', + `name` varchar(50) NOT NULL COMMENT '菜单名称', + `path` varchar(200) DEFAULT NULL COMMENT '路由路径', + `component` varchar(200) DEFAULT NULL COMMENT '组件路径', + `perms` varchar(100) DEFAULT NULL COMMENT '权限标识', + `icon` varchar(100) DEFAULT NULL COMMENT '菜单图标', + `sort` int DEFAULT '0' COMMENT '排序', + `visible` tinyint DEFAULT '1' COMMENT '0-隐藏 1-显示', + `status` tinyint DEFAULT '1' COMMENT '0-禁用 1-启用', + `created_at` datetime DEFAULT CURRENT_TIMESTAMP COMMENT '创建时间', + `updated_at` datetime DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP COMMENT '更新时间', + PRIMARY KEY (`id`) +) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COMMENT='系统菜单表'; + +-- ---------------------------- +-- Table structure for sys_user_role +-- ---------------------------- +DROP TABLE IF EXISTS `sys_user_role`; +CREATE TABLE `sys_user_role` ( + `id` bigint NOT NULL AUTO_INCREMENT, + `user_id` bigint NOT NULL COMMENT '用户ID', + `role_id` bigint NOT NULL COMMENT '角色ID', + PRIMARY KEY (`id`), + KEY `idx_user_role` (`user_id`,`role_id`) +) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COMMENT='用户角色关联表'; + +-- ---------------------------- +-- Table structure for sys_role_menu +-- ---------------------------- +DROP TABLE IF EXISTS `sys_role_menu`; +CREATE TABLE `sys_role_menu` ( + `id` bigint NOT NULL AUTO_INCREMENT, + `role_id` bigint NOT NULL COMMENT '角色ID', + `menu_id` bigint NOT NULL COMMENT '菜单ID', + PRIMARY KEY (`id`), + KEY `idx_role_menu` (`role_id`,`menu_id`) +) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COMMENT='角色菜单关联表'; + +-- ---------------------------- +-- Init Data +-- ---------------------------- +INSERT INTO `sys_role` (`id`, `role_key`, `role_name`) VALUES + (1, 'ADMIN', '管理员'); + +INSERT INTO `sys_menu` (`id`, `parent_id`, `type`, `name`, `path`, `component`, `perms`, `icon`, `sort`) VALUES + (1, 0, 'M', '仪表盘', '/admin/dashboard', 'admin/Dashboard', NULL, 'DataLine', 0), + (2, 0, 'D', '系统管理', '/admin/system', NULL, NULL, 'Setting', 10), + (3, 2, 'M', '用户管理', '/admin/system/user', 'admin/system/User', 'system:user:view', 'User', 0), + (4, 2, 'M', '角色管理', '/admin/system/role', 'admin/system/Role', 'system:role:view', 'Tickets', 1), + (5, 2, 'M', '菜单管理', '/admin/system/menu', 'admin/system/Menu', 'system:menu:view', 'Menu', 2); + +INSERT INTO `sys_user` (`id`, `username`, `password`, `nickname`, `phone`, `email`, `gender`, `status`) VALUES + (1, 'hertz', '$2a$10$Gker6.ggCxG3wfZ13rE/Eu7aDnB.DX2JmP6h6vct30RTtBr9.q5Pq', '管理员', '18888888888', 'hertz@hertz.com', 1, 1), + (2, 'demo', '$2a$10$PSIz9pWXAwXfB32HWSxTjeGhVi0bixsSKxzeX8YAdKnRRXPxJC3Xe', '普通用户', '13888888888', 'demo@hertz.com', 1, 1); + +INSERT INTO `sys_user_role` (`user_id`, `role_id`) VALUES + (1, 1); + +INSERT INTO `sys_role_menu` (`role_id`, `menu_id`) VALUES + (1, 1), + (1, 2), + (1, 3), + (1, 4), + (1, 5); \ No newline at end of file diff --git a/src/test/java/com/hertz/HertzApplicationTests.java b/src/test/java/com/hertz/HertzApplicationTests.java new file mode 100644 index 0000000..6274ae5 --- /dev/null +++ b/src/test/java/com/hertz/HertzApplicationTests.java @@ -0,0 +1,13 @@ +package com.hertz; + +import org.junit.jupiter.api.Test; +import org.springframework.boot.test.context.SpringBootTest; + +@SpringBootTest +class HertzApplicationTests { + + @Test + void contextLoads() { + } +} + diff --git a/ui/.env.dev b/ui/.env.dev new file mode 100644 index 0000000..1cdc56d --- /dev/null +++ b/ui/.env.dev @@ -0,0 +1 @@ +VITE_API_BASE=http://localhost:8088 \ No newline at end of file diff --git a/ui/index.html b/ui/index.html new file mode 100644 index 0000000..c9e0db4 --- /dev/null +++ b/ui/index.html @@ -0,0 +1,13 @@ + + + + + + +
+
+
+
+
+
+
+
diff --git a/ui/src/components/Error.vue b/ui/src/components/Error.vue
new file mode 100644
index 0000000..135678d
--- /dev/null
+++ b/ui/src/components/Error.vue
@@ -0,0 +1,205 @@
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
diff --git a/ui/src/layouts/AdminLayout.vue b/ui/src/layouts/AdminLayout.vue
new file mode 100644
index 0000000..46e9d78
--- /dev/null
+++ b/ui/src/layouts/AdminLayout.vue
@@ -0,0 +1,248 @@
+
+
+
+
+
+
+ {{ codeText }}
+
+
+
+ {{ displayTitle }}
+ {{ displaySubTitle }}
+
+
+ 
+ Hertz Admin
+
+
+ Hertz Admin
+
+ {{ auth.nickname?.charAt(0) || auth.username.charAt(0) }}
+
+
+
+
+
+
+
+
+
+
+
+
+
diff --git a/ui/src/main.js b/ui/src/main.js
new file mode 100644
index 0000000..bdf847e
--- /dev/null
+++ b/ui/src/main.js
@@ -0,0 +1,22 @@
+import { createApp } from 'vue'
+import App from './App.vue'
+import { createPinia } from 'pinia'
+import router from './router'
+import ElementPlus from 'element-plus'
+import 'element-plus/dist/index.css'
+import zhCn from 'element-plus/es/locale/lang/zh-cn'
+import * as ElementPlusIconsVue from '@element-plus/icons-vue'
+import './assets/style.css'
+
+const app = createApp(App)
+app.use(createPinia())
+app.use(router)
+app.use(ElementPlus, {
+ locale: zhCn,
+})
+
+for (const [key, component] of Object.entries(ElementPlusIconsVue)) {
+ app.component(key, component)
+}
+
+app.mount('#app')
diff --git a/ui/src/router/index.js b/ui/src/router/index.js
new file mode 100644
index 0000000..1ba7438
--- /dev/null
+++ b/ui/src/router/index.js
@@ -0,0 +1,88 @@
+import { createRouter, createWebHistory } from 'vue-router'
+import PortalLayout from '../layouts/PortalLayout.vue'
+import AdminLayout from '../layouts/AdminLayout.vue'
+import Login from '../views/Login.vue'
+import Register from '../views/Register.vue'
+import { setupGuards } from './setupGuards'
+
+export const ROUTE_NAMES = {
+ AdminRoot: 'AdminRoot',
+ AdminLayout: 'AdminLayout',
+}
+
+const routes = [
+ { path: '/', redirect: '/portal/home' },
+ { path: '/login', component: Login },
+ { path: '/register', component: Register },
+ {
+ path: '/portal',
+ component: PortalLayout,
+ children: [
+ { path: '', redirect: '/portal/home' },
+ { path: 'home', component: () => import('../views/portal/Home.vue') },
+ { path: 'monitor', component: () => import('../views/portal/Monitor.vue') },
+ { path: 'chat', component: () => import('../views/portal/Chat.vue') },
+ { path: 'about', component: () => import('../views/portal/About.vue') },
+ { path: 'profile', component: () => import('../views/Profile.vue') },
+ {
+ path: '403',
+ component: () => import('../components/Error.vue'),
+ props: {
+ code: 403,
+ title: '抱歉，您没有权限访问该页面',
+ subTitle: '请登录账号或联系管理员开通权限，或切换账号后重试。',
+ },
+ },
+ {
+ path: ':pathMatch(.*)*',
+ component: () => import('../components/Error.vue'),
+ props: { code: 404 },
+ },
+ ],
+ },
+ {
+ path: '/admin',
+ name: ROUTE_NAMES.AdminLayout,
+ component: AdminLayout,
+ children: [
+ { path: '', name: ROUTE_NAMES.AdminRoot, redirect: '/admin/dashboard' },
+ { path: 'dashboard', component: () => import('../views/admin/Dashboard.vue') },
+ { path: 'ai/knowledge-base', component: () => import('../views/admin/ai/KnowledgeBase.vue') },
+ { path: 'profile', component: () => import('../views/Profile.vue') },
+ {
+ path: '403',
+ component: () => import('../components/Error.vue'),
+ props: {
+ code: 403,
+ title: '抱歉，您没有权限访问该页面',
+ subTitle: '请联系管理员开通权限，或切换账号后重试。',
+ },
+ },
+ {
+ path: ':pathMatch(.*)*',
+ component: () => import('../components/Error.vue'),
+ props: { code: 404 },
+ },
+ ],
+ },
+ {
+ path: '/:pathMatch(.*)*',
+ component: PortalLayout,
+ children: [
+ {
+ path: '',
+ component: () => import('../components/Error.vue'),
+ props: { code: 404 },
+ },
+ ],
+ },
+]
+
+const router = createRouter({
+ history: createWebHistory(),
+ routes,
+})
+
+setupGuards(router)
+
+export default router
diff --git a/ui/src/router/setupGuards.js b/ui/src/router/setupGuards.js
new file mode 100644
index 0000000..a634bcd
--- /dev/null
+++ b/ui/src/router/setupGuards.js
@@ -0,0 +1,63 @@
+import { useAuthStore } from '../stores/auth'
+import { useMenuStore } from '../stores/menu'
+import { buildAdminRoutesFromMenus } from './utils'
+import { ROUTE_NAMES } from './index'
+
+export function setupGuards(router) {
+ router.beforeEach(async (to) => {
+ const auth = useAuthStore()
+ const menu = useMenuStore()
+
+ const isAdminPath = to.path.startsWith('/admin')
+ const isAuthPage = to.path === '/login' || to.path === '/register'
+
+ if (!auth.token) {
+ if (isAdminPath) return { path: '/login', query: { redirect: to.fullPath } }
+ return true
+ }
+
+ if (!auth.meLoaded) {
+ try {
+ await auth.fetchMe()
+ } catch (e) {
+ const status = e?.response?.status
+ if (status === 401 || status === 403) {
+ auth.logout()
+ menu.reset()
+ if (isAuthPage) return true
+ if (isAdminPath) return { path: '/login', query: { redirect: to.fullPath } }
+ return true
+ }
+ throw e
+ }
+ }
+
+ if (auth.roles.length === 0) {
+ if (isAdminPath) return '/portal/home'
+ return true
+ }
+
+ if (isAuthPage) return '/admin'
+
+ if (isAdminPath && !menu.routesLoaded) {
+ try {
+ await menu.fetchMenus()
+ } catch (e) {
+ const status = e?.response?.status
+ if (status === 401 || status === 403) {
+ auth.logout()
+ menu.reset()
+ return { path: '/login', query: { redirect: to.fullPath } }
+ }
+ throw e
+ }
+ const adminRoutes = buildAdminRoutesFromMenus(menu.menuTree)
+ for (const r of adminRoutes) router.addRoute(ROUTE_NAMES.AdminLayout, r)
+ menu.routesLoaded = true
+ return { ...to, replace: true }
+ }
+
+ return true
+ })
+}
+
diff --git a/ui/src/router/utils.js b/ui/src/router/utils.js
new file mode 100644
index 0000000..b1f0c3e
--- /dev/null
+++ b/ui/src/router/utils.js
@@ -0,0 +1,41 @@
+
+const viewModules = import.meta.glob('../views/**/*.vue')
+
+function resolveView(component) {
+ if (!component) return undefined
+ const key = `../views/${component}.vue`
+ const loader = viewModules[key]
+ if (!loader) return undefined
+ return loader
+}
+
+export function buildAdminRoutesFromMenus(menus) {
+ const routes = []
+
+ const normalizeAdminChildPath = (rawPath) => {
+ if (!rawPath) return ''
+ if (rawPath.startsWith('/admin/')) return rawPath.slice('/admin/'.length)
+ if (rawPath === '/admin') return ''
+ return rawPath.startsWith('/') ? rawPath.slice(1) : rawPath
+ }
+
+ const walk = (nodes) => {
+ for (const n of nodes) {
+ if (n.type === 'M') {
+ const component = resolveView(n.component)
+ if (!component) continue
+ const childPath = normalizeAdminChildPath(n.path || '')
+ if (!childPath) continue
+ routes.push({
+ path: childPath,
+ component,
+ meta: { title: n.name, icon: n.icon },
+ })
+ }
+ if (n.children?.length) walk(n.children)
+ }
+ }
+
+ walk(menus)
+ return routes
+}
diff --git a/ui/src/stores/auth.js b/ui/src/stores/auth.js
new file mode 100644
index 0000000..c48237f
--- /dev/null
+++ b/ui/src/stores/auth.js
@@ -0,0 +1,57 @@
+import { defineStore } from 'pinia'
+import { login, me, register } from '../api/auth'
+
+export const useAuthStore = defineStore('auth', {
+ state: () => ({
+ token: localStorage.getItem('token') || '',
+ meLoaded: false,
+ userId: 0,
+ username: '',
+ nickname: '',
+ avatarPath: '',
+ phone: '',
+ email: '',
+ gender: 0,
+ roles: [],
+ }),
+ actions: {
+ async login(req) {
+ const res = await login(req)
+ this.token = res.token
+ localStorage.setItem('token', this.token)
+ // Login response only has limited info, fetch full profile
+ await this.fetchMe()
+ return res
+ },
+ async register(req) {
+ return register(req)
+ },
+ async fetchMe() {
+ const res = await me()
+ this.userId = res.userId
+ this.username = res.username
+ this.nickname = res.nickname || ''
+ this.avatarPath = res.avatarPath || ''
+ this.phone = res.phone || ''
+ this.email = res.email || ''
+ this.gender = res.gender || 0
+ this.roles = res.roles || []
+ this.meLoaded = true
+ return res
+ },
+ logout() {
+ this.token = ''
+ localStorage.clear()
+ this.meLoaded = false
+ this.userId = 0
+ this.username = ''
+ this.nickname = ''
+ this.avatarPath = ''
+ this.phone = ''
+ this.email = ''
+ this.gender = 0
+ this.roles = []
+ },
+ },
+})
+
diff --git a/ui/src/stores/menu.js b/ui/src/stores/menu.js
new file mode 100644
index 0000000..82c9bb5
--- /dev/null
+++ b/ui/src/stores/menu.js
@@ -0,0 +1,20 @@
+import { defineStore } from 'pinia'
+import { fetchMenuTree } from '../api/system'
+
+export const useMenuStore = defineStore('menu', {
+ state: () => ({
+ menuTree: [],
+ routesLoaded: false,
+ }),
+ actions: {
+ async fetchMenus() {
+ this.menuTree = await fetchMenuTree()
+ return this.menuTree
+ },
+ reset() {
+ this.menuTree = []
+ this.routesLoaded = false
+ },
+ },
+})
+
diff --git a/ui/src/views/Login.vue b/ui/src/views/Login.vue
new file mode 100644
index 0000000..8a83e76
--- /dev/null
+++ b/ui/src/views/Login.vue
@@ -0,0 +1,269 @@
+
+
+
+ 首页
+ 监控
+ 聊天
+ 关于
+
+
+
+
+ Hertz Admin
+
+
+ Hertz Admin
+
+
+ 登录
+ 注册
+
+
+
+ {{ auth.nickname?.charAt(0) || auth.username.charAt(0) }}
+ {{ auth.nickname || auth.username }}
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ {{ auth.nickname?.charAt(0) || auth.username.charAt(0) }}
+
+
+
+
+
+
+
+
+
+
diff --git a/ui/src/views/Profile.vue b/ui/src/views/Profile.vue
new file mode 100644
index 0000000..169aa25
--- /dev/null
+++ b/ui/src/views/Profile.vue
@@ -0,0 +1,384 @@
+
+
+
+
+
+
+ Hertz Admin
+
+
+ Hertz Admin
+
+ 
+
+
+
+
+ Hertz Admin
+高效、安全、专业的解决方案
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ 欢迎回来
+ +
+ ![captcha]()
+
+
+ 登录
+
+
+
+
+ 
+
+
+
+
+ ![]()
+
+
+
+
+
+
+
+
+ {{ form.nickname || form.username || 'User' }}
+ +
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ 更新基本信息
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ 修改密码
+
+
+
+
+
+
+
+
+
+
+
diff --git a/ui/src/views/admin/Dashboard.vue b/ui/src/views/admin/Dashboard.vue
new file mode 100644
index 0000000..e85cfe3
--- /dev/null
+++ b/ui/src/views/admin/Dashboard.vue
@@ -0,0 +1,381 @@
+
+
+
+
+
+
+ Hertz Admin
+
+
+ Hertz Admin
+
+ 
+
+
+
+
+ 加入Hertz Admin
+开始您的旅程，今天就注册
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ 创建账号
+ +
+ ![captcha]()
+
+
+ 注册
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ {{ new Date(row.createdAt).toLocaleString() }}
+
+
+
+
+
+ {{ row.status === 1 ? '正常' : '禁用' }}
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
diff --git a/ui/src/views/admin/ai/KnowledgeBase.vue b/ui/src/views/admin/ai/KnowledgeBase.vue
new file mode 100644
index 0000000..a972288
--- /dev/null
+++ b/ui/src/views/admin/ai/KnowledgeBase.vue
@@ -0,0 +1,307 @@
+
+
+
+
+
+
+ {{ auth.nickname?.charAt(0) || auth.username?.charAt(0) }}
+
+
+
+
+
+
+ {{ greeting }}，{{ auth.nickname || auth.username }}
+欢迎回到 Hertz Admin，今天也是充满活力的一天！
+
+
+ {{ stats.userCount }}
+ 总用户数
+
+
+ {{ stats.roleCount }}
+ 角色数量
+
+
+ {{ stats.menuCount }}
+ 菜单项
+
+
+ 查看全部
+
+
+
+
+ {{ row.nickname?.charAt(0) || row.username.charAt(0) }}
+
+ {{ row.username }}
+
+
+
+ 快捷导航
+
+
+
+
+
+
+ {{ action.name }}
+
+
+ 查询
+ 新建知识库
+
+
+
+
+ 拖拽文件到此处或 点击上传
+
+
+
+ 支持 PDF, Word, TXT, Markdown 等格式文件
+
+
+
+ 重建向量
+
+
+
+
+
+
+
+
+
+
+
+ 目录
+ 菜单
+ 按钮
+
+
+
+
+ {{ row.status === 1 ? '正常' : '禁用' }}
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ 目录
+ 菜单
+ 按钮
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ 启用
+ 禁用
+
+
+
+
+ 取消
+ 保存
+
+
+
+
+
+
+
+
+
diff --git a/ui/src/views/admin/system/Role.vue b/ui/src/views/admin/system/Role.vue
new file mode 100644
index 0000000..81dbe2b
--- /dev/null
+++ b/ui/src/views/admin/system/Role.vue
@@ -0,0 +1,297 @@
+
+
+ 刷新
+
+ {{ isAllExpanded ? '折叠' : '展开' }}
+
+ 新增菜单
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ {{ row.status === 1 ? '正常' : '禁用' }}
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ 启用
+ 禁用
+
+
+
+
+ 取消
+ 保存
+
+
+
+
+
+ 取消
+ 保存
+
+
+
+
+
+
+
diff --git a/ui/src/views/admin/system/User.vue b/ui/src/views/admin/system/User.vue
new file mode 100644
index 0000000..dc1f9b9
--- /dev/null
+++ b/ui/src/views/admin/system/User.vue
@@ -0,0 +1,376 @@
+
+
+ 查询
+ 新增角色
+
+
+
+
+
+
+
+
+
+
+
+
+
+ 展开/折叠
+ 全选/全不选
+ 父子联动
+
+
+
+
+
+ 查询
+ 新增用户
+ 批量删除
+
+
+
+
+ {{ row.nickname?.charAt(0) }}
+
+
+
+
+ {{ row.username }}
+ {{ row.email || '-' }}
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
diff --git a/ui/src/views/portal/Chat.vue b/ui/src/views/portal/Chat.vue
new file mode 100644
index 0000000..6202f60
--- /dev/null
+++ b/ui/src/views/portal/Chat.vue
@@ -0,0 +1,872 @@
+
+
+
+
+
+
+ Hertz Admin
+现代化全栈权限管理系统解决方案
+
+
+
+
+
+
+
+
+ Spring Boot 3.4
+ MyBatis-Plus 3.5
+ Spring Security + JWT
+ Spring AI (Ollama)
+ Vue 3 (Composition API)
+ Element Plus
+ Maven & Vite
+ MySQL 8.0 + Redis
+
+
+
+
+
+
+
+
+ RBAC 模型，支持用户、角色、菜单（按钮级）权限控制
+
+
+ 基于后端权限动态生成前端路由菜单
+
+
+ 集成 LLM 大模型，提供智能对话与辅助功能
+
+
+ 实时监控服务器 CPU、内存、JVM 及磁盘状态
+
+
+ JWT 认证、验证码、全局异常处理、操作日志
+
+
+
+
+
+
+ + Hertz Admin 是一个基于 Spring Boot 3 和 Vue 3 构建的前后端分离权限管理系统。 + 它集成了最新的技术栈，提供了一套完整的 RBAC（基于角色的访问控制）解决方案，支持动态菜单、系统监控、AI 对话等功能。 + 旨在帮助开发者快速搭建企业级后台管理系统。 +
+
+
+
+
+
+
+
+
+
+
+
+ {{ welcomeMessage }}
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
diff --git a/ui/src/views/portal/Monitor.vue b/ui/src/views/portal/Monitor.vue
new file mode 100644
index 0000000..c16c872
--- /dev/null
+++ b/ui/src/views/portal/Monitor.vue
@@ -0,0 +1,290 @@
+
+
+
+
+
+
+
+ Hertz Admin
+
+ 基于 Spring Boot 3 与 Vue 3 的
现代化全栈权限管理系统
+
+ 极简设计，高效开发。集成 RBAC 权限、动态路由、AI 助手与实时监控，
为您提供开箱即用的企业级中后台解决方案。
+
+
+ 立即开始
+
+
+ 了解更多
+
+
+
+
+
+
+
+
+ 核心特性
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ RBAC 权限
+细粒度的基于角色的访问控制，支持菜单、按钮级别的权限管理，保障系统安全。
+动态菜单
+根据用户角色与权限动态生成侧边栏菜单与路由，无需手动配置前端路由表。
+现代化 UI
+采用 Element Plus 组件库，深度定制 iOS 风格设计，提供极致的用户体验。
+AI 智能助手
+集成大语言模型，支持 RAG 知识库问答，为您的应用注入人工智能的活力。
+系统监控
+内置服务器状态监控，实时掌握 CPU、内存、JVM 及磁盘使用情况。
+高效开发
+前后端分离架构，标准 RESTful API，完善的代码规范，助您快速构建应用。
+
+
+
+
+
+
+
diff --git a/ui/vite.config.js b/ui/vite.config.js
new file mode 100644
index 0000000..59e16fd
--- /dev/null
+++ b/ui/vite.config.js
@@ -0,0 +1,13 @@
+import { fileURLToPath, URL } from 'node:url'
+import { defineConfig } from 'vite'
+import vue from '@vitejs/plugin-vue'
+
+// https://vite.dev/config/
+export default defineConfig({
+ plugins: [vue()],
+ resolve: {
+ alias: {
+ '@': fileURLToPath(new URL('./src', import.meta.url))
+ }
+ }
+})
diff --git a/数据库说明文档.md b/数据库说明文档.md
new file mode 100644
index 0000000..22bcc76
--- /dev/null
+++ b/数据库说明文档.md
@@ -0,0 +1,207 @@
+# Hertz 权限管理系统数据库说明文档
+
+## 1. 数据库概述
+
+- **数据库名称**: `hertz_springboot`
+- **数据库类型**: MySQL
+- **字符集**: utf8mb4
+- **排序规则**: utf8mb4_general_ci (推荐)
+
+> 说明：知识库（RAG）功能除了数据库表外，还依赖 Ollama 的向量化模型（Embedding）。首次使用前需在运行后端的机器执行 `ollama pull nomic-embed-text`，并保持 `application.yml` 中 `spring.ai.ollama.embedding.model` 与实际模型一致。
+
+## 2. ER 图设计概要
+
+系统采用 RBAC（用户-角色-权限）为核心，并扩展了监控、AI 对话、知识库等模块。主要表如下：
+
+- **RBAC 权限模型**
+ - `sys_user`: 用户表
+ - `sys_role`: 角色表
+ - `sys_menu`: 菜单/权限表
+ - `sys_user_role`: 用户-角色关联表
+ - `sys_role_menu`: 角色-菜单关联表
+- **监控模块**
+ - `sys_monitor_log`: 系统监控日志表
+- **AI 助手模块**
+ - `ai_conversations`: 对话记录表
+ - `ai_messages`: 对话消息表
+- **知识库模块（RAG）**
+ - `knowledge_base`: 知识库表
+ - `knowledge_document`: 知识库文档表（上传记录/存储路径/向量化状态）
+
+## 3. 表结构详解
+
+### 3.1 系统用户表 (sys_user)
+
+存储系统的登录用户信息。
+
+| 字段名 | 类型 | 长度 | 允许空 | 默认值 | 说明 |
+| :--- | :--- | :--- | :--- | :--- | :--- |
+| **id** | bigint | 20 | NO | AUTO_INCREMENT | 主键 ID |
+| username | varchar | 50 | NO | | 用户名 (唯一) |
+| password | varchar | 100 | NO | | 加密密码 (BCrypt) |
+| nickname | varchar | 50 | NO | | 用户昵称 |
+| avatar_path | varchar | 255 | YES | NULL | 头像路径 |
+| phone | varchar | 20 | YES | NULL | 手机号 |
+| email | varchar | 100 | YES | NULL | 邮箱 |
+| gender | tinyint | 1 | YES | 0 | 0-未知 1-男 2-女 |
+| status | tinyint | 4 | YES | 1 | 0-禁用 1-启用 |
+| created_at | datetime | | YES | CURRENT_TIMESTAMP | 创建时间 |
+| updated_at | datetime | | YES | CURRENT_TIMESTAMP | 更新时间 |
+
+### 3.2 系统角色表 (sys_role)
+
+存储系统的角色信息。
+
+| 字段名 | 类型 | 长度 | 允许空 | 默认值 | 说明 |
+| :--- | :--- | :--- | :--- | :--- | :--- |
+| **id** | bigint | 20 | NO | AUTO_INCREMENT | 主键 ID |
+| role_key | varchar | 50 | NO | | 角色标识 (唯一，如 ADMIN) |
+| role_name | varchar | 50 | NO | | 角色名称 (如 管理员) |
+| status | tinyint | 4 | YES | 1 | 0-禁用 1-启用 |
+| created_at | datetime | | YES | CURRENT_TIMESTAMP | 创建时间 |
+| updated_at | datetime | | YES | CURRENT_TIMESTAMP | 更新时间 |
+
+### 3.3 系统菜单表 (sys_menu)
+
+存储菜单和按钮权限信息，支持树形结构。
+
+| 字段名 | 类型 | 长度 | 允许空 | 默认值 | 说明 |
+| :--- | :--- | :--- | :--- | :--- | :--- |
+| **id** | bigint | 20 | NO | AUTO_INCREMENT | 主键 ID |
+| parent_id | bigint | 20 | YES | 0 | 父菜单 ID (0为顶级) |
+| type | varchar | 10 | NO | | 菜单类型: D-目录 M-菜单 B-按钮 |
+| name | varchar | 50 | NO | | 菜单名称/按钮名称 |
+| path | varchar | 200 | YES | NULL | 路由路径 (前端路由) |
+| component | varchar | 200 | YES | NULL | 组件路径 (Vue组件) |
+| perms | varchar | 100 | YES | NULL | 权限标识 (如 system:user:view) |
+| icon | varchar | 100 | YES | NULL | 菜单图标 |
+| sort | int | 11 | YES | 0 | 排序 (数值越小越靠前) |
+| visible | tinyint | 4 | YES | 1 | 0-隐藏 1-显示 |
+| status | tinyint | 4 | YES | 1 | 0-禁用 1-启用 |
+| created_at | datetime | | YES | CURRENT_TIMESTAMP | 创建时间 |
+| updated_at | datetime | | YES | CURRENT_TIMESTAMP | 更新时间 |
+
+### 3.4 用户角色关联表 (sys_user_role)
+
+用户与角色的多对多关系表。
+
+| 字段名 | 类型 | 长度 | 允许空 | 默认值 | 说明 |
+| :--- | :--- | :--- | :--- | :--- | :--- |
+| **id** | bigint | 20 | NO | AUTO_INCREMENT | 主键 ID |
+| user_id | bigint | 20 | NO | | 用户 ID |
+| role_id | bigint | 20 | NO | | 角色 ID |
+
+### 3.5 角色菜单关联表 (sys_role_menu)
+
+角色与菜单（权限）的多对多关系表。
+
+| 字段名 | 类型 | 长度 | 允许空 | 默认值 | 说明 |
+| :--- | :--- | :--- | :--- | :--- | :--- |
+| **id** | bigint | 20 | NO | AUTO_INCREMENT | 主键 ID |
+| role_id | bigint | 20 | NO | | 角色 ID |
+| menu_id | bigint | 20 | NO | | 菜单 ID |
+
+### 3.6 系统监控日志表 (sys_monitor_log)
+
+存储系统监控的日志信息。
+
+| 字段名 | 类型 | 长度 | 允许空 | 默认值 | 说明 |
+| :--- | :--- | :--- | :--- | :--- | :--- |
+| **id** | bigint | 20 | NO | AUTO_INCREMENT | 主键 ID |
+| cpu_usage | double | | NO | | CPU使用率(%) |
+| memory_usage | double | | NO | | 内存使用率(%) |
+| memory_total | bigint | | NO | | 总内存(字节) |
+| memory_used | bigint | | NO | | 已用内存(字节) |
+| created_at | datetime | | NO | CURRENT_TIMESTAMP | 记录时间 |
+
+### 3.7 对话记录表 (ai_conversations)
+
+存储 AI 助手的对话会话记录。
+
+| 字段名 | 类型 | 长度 | 允许空 | 默认值 | 说明 |
+| :--- | :--- | :--- | :--- | :--- | :--- |
+| **id** | bigint | 20 | NO | AUTO_INCREMENT | 主键 ID |
+| user_id | bigint | 20 | NO | | 用户 ID |
+| title | varchar | 255 | NO | | 对话标题 |
+| created_at | datetime | | NO | CURRENT_TIMESTAMP | 创建时间 |
+| updated_at | datetime | | NO | CURRENT_TIMESTAMP | 更新时间 |
+
+### 3.8 对话消息表 (ai_messages)
+
+存储对话的具体消息内容。
+
+| 字段名 | 类型 | 长度 | 允许空 | 默认值 | 说明 |
+| :--- | :--- | :--- | :--- | :--- | :--- |
+| **id** | bigint | 20 | NO | AUTO_INCREMENT | 主键 ID |
+| conversation_id | bigint | 20 | NO | | 所属对话 ID |
+| role | enum | | NO | | 消息角色 (user/assistant) |
+| content | text | | NO | | 消息内容 |
+| created_at | datetime | | NO | CURRENT_TIMESTAMP | 创建时间 |
+
+### 3.9 知识库表 (knowledge_base)
+
+存储知识库的基本信息（名称、描述、创建时间等）。
+
+| 字段名 | 类型 | 长度 | 允许空 | 默认值 | 说明 |
+| :--- | :--- | :--- | :--- | :--- | :--- |
+| **id** | bigint | 20 | NO | AUTO_INCREMENT | 主键 ID |
+| name | varchar | 255 | NO | | 知识库名称 |
+| description | text | | YES | NULL | 知识库描述 |
+| create_time | datetime | | YES | CURRENT_TIMESTAMP | 创建时间 |
+| create_by | bigint | 20 | YES | NULL | 创建人用户 ID |
+
+### 3.10 知识库文档表 (knowledge_document)
+
+存储知识库文档上传记录与落盘信息，用于“可管理、可回溯、可重建向量”。
+
+| 字段名 | 类型 | 长度 | 允许空 | 默认值 | 说明 |
+| :--- | :--- | :--- | :--- | :--- | :--- |
+| **id** | bigint | 20 | NO | AUTO_INCREMENT | 主键 ID |
+| kb_id | bigint | 20 | NO | | 所属知识库 ID |
+| original_name | varchar | 512 | NO | | 原始文件名 |
+| stored_name | varchar | 512 | NO | | 存储文件名（UUID） |
+| stored_path | varchar | 1024 | NO | | 存储相对路径（位于 uploads 根目录下） |
+| content_type | varchar | 255 | YES | NULL | MIME 类型 |
+| size_bytes | bigint | 20 | NO | | 文件大小（字节） |
+| sha256 | varchar | 64 | YES | NULL | 文件哈希（用于去重/审计） |
+| status | varchar | 32 | NO | | 处理状态（PROCESSING/READY/FAILED） |
+| chunk_count | int | 11 | YES | 0 | 分片数量 |
+| error_message | varchar | 1024 | YES | NULL | 失败原因 |
+| create_time | datetime | | YES | CURRENT_TIMESTAMP | 上传时间 |
+
+## 4. 初始数据说明
+
+系统初始化脚本 `db/init.sql` 会预置 RBAC 与 AI 对话相关表结构和初始数据。监控与知识库相关表请额外导入：
+
+- `src/main/resources/schema/monitor_schema.sql`
+- `src/main/resources/schema/knowledge_schema.sql`
+
+1. **初始角色**:
+ - `ADMIN`: 超级管理员，拥有所有权限。
+
+2. **初始菜单结构**:
+ - 仪表盘
+ - 系统管理
+ - 用户管理
+ - 角色管理
+ - 菜单管理
+
+3. **初始用户**:
+ - `hertz`: 管理员账号，已绑定 ADMIN 角色。
+ - `demo`: 演示账号。
+
+## 5. 数据字典与枚举
+
+- **用户/角色/菜单状态 (status)**:
+ - `1`: 启用 (Normal)
+ - `0`: 禁用 (Disabled)
+
+- **菜单类型 (type)**:
+ - `D`: 目录 (Directory) - 不对应具体页面，仅用于分组
+ - `M`: 菜单 (Menu) - 对应具体的前端页面
+ - `B`: 按钮 (Button) - 页面内的功能按钮，用于权限控制
+
+- **性别 (gender)**:
+ - `0`: 未知
+ - `1`: 男
+ - `2`: 女
diff --git a/项目说明文档.md b/项目说明文档.md
new file mode 100644
index 0000000..f14ce70
--- /dev/null
+++ b/项目说明文档.md
@@ -0,0 +1,137 @@
+# Hertz 权限管理系统项目说明文档
+
+## 1. 项目简介
+
+Hertz 权限管理系统是一个基于前后端分离架构的轻量级权限管理平台。系统集成了用户管理、角色管理、菜单管理等核心功能，采用 RBAC（Role-Based Access Control）模型实现细粒度的权限控制。
+
+### 1.1 项目结构
+
+项目采用典型的多模块（或目录分离）结构：
+
+- **src/**: 后端工程源码，基于 Spring Boot 3 + MyBatis-Plus。
+- **ui/**: 前端工程源码，基于 Vue 3 + Vite + Element Plus。
+
+## 2. 技术栈
+
+### 2.1 后端技术栈 (hertz_springboot)
+
+- **核心框架**: Spring Boot 3.4.1
+- **持久层框架**: MyBatis-Plus 3.5.8
+- **安全框架**: Spring Security + JJWT 0.12.6 (实现无状态 JWT 认证)
+- **数据库连接池**: HikariCP (Spring Boot 默认)
+- **数据库驱动**: MySQL Connector/J
+- **工具库**: Lombok
+- **运行环境**: Java 21
+
+### 2.2 前端技术栈 (hertz_springboot_ui)
+
+- **核心框架**: Vue 3.5.24
+- **构建工具**: Vite 7.2.4
+- **UI 组件库**: Element Plus 2.13.1
+- **状态管理**: Pinia 3.0.4
+- **路由管理**: Vue Router 4.6.4
+- **HTTP 客户端**: Axios 1.13.2
+
+## 3. 功能模块
+
+1. **认证模块**: 支持用户登录、注册（可选）、JWT Token 颁发与验证。
+2. **系统管理**:
+ - **用户管理**: 用户的增删改查、分配角色、状态控制。
+ - **角色管理**: 角色的增删改查、分配菜单权限。
+ - **菜单管理**: 动态菜单配置，支持目录、菜单、按钮三种类型，支持权限标识配置。
+3. **个人中心**: 用户资料修改、密码修改、头像上传。
+4. **监控模块**:
+ - **系统监控**: 实时展示 CPU、内存、JVM、服务器信息、磁盘状态。
+ - **监控日志**: 记录系统运行时的性能指标。
+5. **AI 助手模块**:
+ - **智能对话**: 集成 Spring AI (Ollama)，支持与 AI 助手进行智能对话。
+ - **会话管理**: 支持历史会话的持久化存储与查询。
+ - **知识库 (RAG)**: 支持创建知识库、上传/管理文档、向量化检索增强回答。
+
+## 4. 快速开始
+
+### 4.1 环境准备
+
+- JDK 21+
+- Node.js 18+
+- MySQL 8.0+
+
+### 4.2 后端启动
+
+1. 配置数据库：
+ - 创建数据库 `hertz_springboot`。
+ - 导入 `db/init.sql` 初始化基础表结构和数据（RBAC、AI 对话等）。
+ - 额外导入以下脚本以启用监控与知识库功能：
+ - `src/main/resources/schema/monitor_schema.sql`
+ - `src/main/resources/schema/knowledge_schema.sql`
+ - 修改 `src/main/resources/application.yml` 中的数据库连接信息（url, username, password）。
+2. 运行项目：
+ ```bash
+ mvn spring-boot:run
+ ```
+ 或者在 IDE 中运行 `HertzApplication.java`。
+ 后端服务将启动在 `http://localhost:8088`。
+
+### 4.4 AI（Ollama）准备
+
+AI 助手与知识库（RAG）依赖 Ollama。首次启动前请确保已安装并运行 Ollama，并拉取所需模型：
+
+1. 向量化模型（Embedding，用于知识库）：
+ ```bash
+ ollama pull nomic-embed-text
+ ```
+2. 聊天模型（用于对话，按配置决定，例如）：
+ ```bash
+ ollama pull deepseek-llm:7b
+ ```
+
+对应配置项位于 `src/main/resources/application.yml`：
+
+- `spring.ai.ollama.chat.model`
+- `spring.ai.ollama.embedding.model`
+
+### 4.3 前端启动
+
+1. 进入前端目录：
+ ```bash
+ cd ui
+ ```
+2. 安装依赖：
+ ```bash
+ npm install
+ ```
+3. 启动开发服务器：
+ ```bash
+ npm run dev
+ ```
+ 前端服务通常启动在 `http://localhost:5173`。
+
+## 5. 默认账号
+
+| 角色 | 用户名 | 密码 | 权限 |
+| :--- | :--- | :--- | :--- |
+| **管理员** | `hertz` | `hertz` | 拥有所有系统权限 |
+| **普通用户** | `demo` | `123456` | 仅拥有基本查看权限 |
+
+## 6. 配置说明
+
+### 6.1 后端配置 (application.yml)
+
+- **Server Port**: 8088
+- **File Upload**:
+ - 最大文件大小: 2MB
+ - 最大请求大小: 10MB
+ - 上传根路径: `./uploads`（项目根目录下的 uploads 目录）
+ - 头像文件目录: `./uploads/avatar/yyyy/MM/`
+ - 知识库文件目录: `./uploads/knowledge/kb-{kbId}/yyyy/MM/`
+- **Vector Store**:
+ - 向量库目录: `./uploads/vector_store/`
+ - 按知识库分别存储: `vector-store-kb-{kbId}.json`
+- **JWT**:
+ - 密钥: `app.jwt.secret` (建议在生产环境中修改为强随机字符串)
+ - 过期时间: 86400秒 (24小时)
+
+## 7. 注意事项
+
+- **文件上传**: 默认配置了本地文件存储路径，请确保该路径存在或有写入权限，或者在 `application.yml` 中修改为合适的路径。
+- **跨域**: 前端开发环境通常通过 Vite 代理解决跨域问题，生产环境需配置 Nginx 或后端 CORS。
+ 刷新
+
+
+ 系统监控
+
+
+
+
+
+
+
+
+
+
+ {{ serverInfo.sys.computerName }}
+ {{ serverInfo.sys.osName }}
+ {{ serverInfo.sys.computerIp }}
+ {{ serverInfo.sys.osArch }}
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ 核心数:
+ {{ serverInfo.cpu.cpuNum }}
+
+
+ 系统使用:
+ {{ serverInfo.cpu.sys }}%
+
+
+ 用户使用:
+ {{ serverInfo.cpu.used }}%
+
+
+ 空闲:
+ {{ serverInfo.cpu.free }}%
+
+
+
+
+
+
+
+
+
+ 总内存:
+ {{ serverInfo.mem.total }}GB
+
+
+ 已用:
+ {{ serverInfo.mem.used }}GB
+
+
+ 剩余:
+ {{ serverInfo.mem.free }}GB
+
+
+ 使用率:
+ {{ serverInfo.mem.usage }}%
+
+
+
+
+
+
+ {{ serverInfo.jvm.startTime }}
+ {{ serverInfo.jvm.home }}
+ {{ serverInfo.sys.userDir }}
+ {{ serverInfo.jvm.gcCount }} 次
+ {{ serverInfo.jvm.gcTime }} ms
+ {{ serverInfo.jvm.inputArgs }}
+
+
+
+
+
+
+
+
+
+
+
+
+