Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
61 changes: 61 additions & 0 deletions app/admin/events/AdminGuard.tsx
Original file line number Diff line number Diff line change
@@ -0,0 +1,61 @@
"use client";

/**
* 前端管理员页的权限包装器。
*
* 做的事:
* - 未登录:跳 /login
* - 登录但不是 admin:渲染 403 提示
* - 是 admin:渲染 children
*
* 注意这个只是 UX 层的保护——真正的安全由后端 @SaCheckRole("admin") 兜底。
* 用户只要能绕过这里也拿不到数据,后端直接返回 401/403。
*/

import { useEffect } from "react";
import { useRouter } from "next/navigation";
import { useAuth } from "@/lib/use-auth";
import type { ReactNode } from "react";

export function AdminGuard({ children }: { children: ReactNode }) {
const { user, status } = useAuth();
const router = useRouter();

useEffect(() => {
if (status === "unauthenticated") {
router.replace("/login?next=/admin/events");
Copy link

Copilot AI Apr 16, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

这里跳转到 /login?next=/admin/events,但当前登录页(app/login/page.tsx + SignInButton)不会读取/传递 next 参数,导致登录完成后无法回到 admin 页面(query 只是“看起来有”,实际上不生效)。建议要么移除该参数避免误导,要么在登录入口把 next/redirect 透传到 /oauth/render/github 并在回调后执行重定向。

Suggested change
router.replace("/login?next=/admin/events");
router.replace("/login");

Copilot uses AI. Check for mistakes.
}
}, [status, router]);

if (status === "loading") {
return (
<main className="pt-32 pb-16 min-h-screen flex items-center justify-center">
<p className="font-mono text-xs uppercase tracking-widest text-neutral-500">
Loading…
</p>
</main>
);
}

if (status === "unauthenticated") return null;

const isAdmin = user?.roles?.includes("admin") ?? false;
if (!isAdmin) {
return (
<main className="pt-32 pb-16 min-h-screen flex items-center justify-center px-6">
<div className="max-w-lg border border-[#CC0000] p-8 text-center">
<div className="font-mono text-[10px] uppercase tracking-[0.3em] text-[#CC0000] mb-3">
403 · Forbidden
</div>
<h1 className="font-serif text-2xl font-black mb-3">你不是管理员</h1>
<p className="text-sm text-neutral-600 dark:text-neutral-400 leading-relaxed">
管理员界面仅对 <code>roles</code> 包含 <code>admin</code>{" "}
的账号开放。 如果你认为这是误报,联系站点维护者。
</p>
</div>
</main>
);
}

return <>{children}</>;
}
290 changes: 290 additions & 0 deletions app/admin/events/EventForm.tsx
Original file line number Diff line number Diff line change
@@ -0,0 +1,290 @@
"use client";

/**
* Admin 侧的活动表单(新建 + 编辑共用)。
*
* 表单字段基本是 EventRequest 的直接映射。
* 几个 UX 细节:
* - startTime / endTime 用 <input type="datetime-local">,提交前转成 ISO
* - speakers 简化成"每行一条 name",头像/profile URL 暂不支持(延后)
* - tags 用"逗号分隔"单行输入
* - cover_url / discord / playback 都是可选
* - 提交后跳 /admin/events 列表
*/

import { useState, useRef, type FormEvent } from "react";
import { useRouter } from "next/navigation";
import type { EventRequest, EventView, EventStatus } from "@/app/events/types";
import { createEvent, updateEvent } from "./lib";

interface Props {
/** undefined 表示新建;传入 EventView 表示编辑 */
initial?: EventView;
}

const STATUS_OPTIONS: EventStatus[] = [
"draft",
"published",
"archived",
"cancelled",
];

export function EventForm({ initial }: Props) {
const router = useRouter();
const formRef = useRef<HTMLFormElement>(null);
const [submitting, setSubmitting] = useState(false);
const [error, setError] = useState<string | null>(null);

const onSubmit = async (e: FormEvent<HTMLFormElement>) => {
e.preventDefault();
setSubmitting(true);
setError(null);

const fd = new FormData(e.currentTarget);
const req: EventRequest = {
title: String(fd.get("title") ?? "").trim(),
description: String(fd.get("description") ?? ""),
coverUrl: emptyToNull(fd.get("coverUrl")),
startTime: datetimeLocalToIso(fd.get("startTime")),
endTime: datetimeLocalToIso(fd.get("endTime")),
discordLink: emptyToNull(fd.get("discordLink")),
playbackUrl: emptyToNull(fd.get("playbackUrl")),
tags: splitCsv(fd.get("tags")),
speakers: parseSpeakers(fd.get("speakers")),
status: (fd.get("status") as EventStatus) ?? "draft",
};

try {
if (initial) {
await updateEvent(initial.id, req);
} else {
await createEvent(req);
}
router.push("/admin/events");
router.refresh();
} catch (err) {
setError(err instanceof Error ? err.message : "保存失败");
setSubmitting(false);
}
};

return (
<form
ref={formRef}
onSubmit={onSubmit}
className="flex flex-col gap-6 max-w-3xl"
>
<Field
label="标题"
name="title"
required
defaultValue={initial?.title ?? ""}
/>
<Field
label="描述"
name="description"
multiline
rows={6}
defaultValue={initial?.description ?? ""}
hint="支持普通文本,段落用空行分隔。"
/>
<Field
label="封面 URL"
name="coverUrl"
defaultValue={initial?.coverUrl ?? ""}
hint="建议 16:9,/event/ 目录下的 webp 最佳。也支持外链。"
/>

<div className="grid grid-cols-1 md:grid-cols-2 gap-6">
<Field
label="开始时间"
name="startTime"
type="datetime-local"
defaultValue={isoToDatetimeLocal(initial?.startTime)}
/>
<Field
label="结束时间"
name="endTime"
type="datetime-local"
defaultValue={isoToDatetimeLocal(initial?.endTime)}
/>
</div>

<Field
label="Discord 链接"
name="discordLink"
defaultValue={initial?.discordLink ?? ""}
hint="活动当天的 Discord 入口(频道 / Scheduled Event URL)。"
/>
<Field
label="回放链接"
name="playbackUrl"
defaultValue={initial?.playbackUrl ?? ""}
hint="YouTube / 站内 /docs 文章 / Drive 链接均可;YouTube 会被内嵌到详情页。"
/>

<Field
label="Tags (逗号分隔)"
name="tags"
defaultValue={initial?.tags?.join(", ") ?? ""}
hint="如:career, interview, mock。目前只做展示,未来会支持按 tag 筛选。"
/>

<Field
label="Speakers (每行一条)"
name="speakers"
multiline
rows={4}
defaultValue={initial?.speakers?.map((s) => s.name).join("\n") ?? ""}
hint="目前只记录姓名;头像 / profile URL 后续版本支持。"
/>

<div className="flex flex-col gap-1.5">
<label className="font-mono text-[10px] uppercase tracking-widest text-neutral-500">
状态
</label>
<select
name="status"
defaultValue={initial?.status ?? "draft"}
className="border border-[var(--foreground)] px-3 py-2 bg-[var(--background)] text-[var(--foreground)] font-mono text-xs uppercase"
>
{STATUS_OPTIONS.map((s) => (
<option key={s} value={s}>
{s}
</option>
))}
</select>
<p className="text-[11px] text-neutral-500 leading-relaxed">
draft = 仅管理员可见;published = 公开;archived = 历史;cancelled =
取消。
</p>
</div>

{error && (
<div className="border border-[#CC0000] p-3 text-sm text-[#CC0000] font-mono">
{error}
</div>
)}

<div className="flex gap-3 pt-2">
<button
type="submit"
disabled={submitting}
className="font-mono text-xs uppercase tracking-widest px-5 py-2 border border-[var(--foreground)] bg-[var(--foreground)] text-[var(--background)] hover:bg-[#CC0000] hover:border-[#CC0000] transition-colors disabled:opacity-50"
>
{submitting ? "保存中…" : initial ? "保存修改" : "创建活动"}
</button>
<button
type="button"
onClick={() => router.push("/admin/events")}
className="font-mono text-xs uppercase tracking-widest px-5 py-2 border border-[var(--foreground)] hover:bg-[var(--foreground)] hover:text-[var(--background)] transition-colors"
>
取消
</button>
</div>
</form>
);
}

interface FieldProps {
label: string;
name: string;
type?: string;
required?: boolean;
defaultValue?: string;
multiline?: boolean;
rows?: number;
hint?: string;
}

function Field({
label,
name,
type = "text",
required,
defaultValue,
multiline,
rows,
hint,
}: FieldProps) {
const base =
"border border-[var(--foreground)] px-3 py-2 bg-[var(--background)] text-[var(--foreground)] font-sans text-sm focus:outline-none focus:border-[#CC0000]";
return (
<div className="flex flex-col gap-1.5">
<label
htmlFor={name}
className="font-mono text-[10px] uppercase tracking-widest text-neutral-500"
>
{label} {required && <span className="text-[#CC0000]">*</span>}
</label>
{multiline ? (
<textarea
id={name}
name={name}
required={required}
rows={rows ?? 4}
defaultValue={defaultValue}
className={`${base} resize-y`}
/>
) : (
<input
id={name}
name={name}
type={type}
required={required}
defaultValue={defaultValue}
className={base}
/>
)}
{hint && (
<p className="text-[11px] text-neutral-500 leading-relaxed">{hint}</p>
)}
</div>
);
}

function emptyToNull(v: FormDataEntryValue | null): string | null {
if (v == null) return null;
const s = String(v).trim();
return s ? s : null;
}

function splitCsv(v: FormDataEntryValue | null): string[] {
if (!v) return [];
return String(v)
.split(",")
.map((x) => x.trim())
.filter(Boolean);
}

/** 每行一个 speaker 名字 → [{name}] */
function parseSpeakers(v: FormDataEntryValue | null) {
if (!v) return [];
return String(v)
.split(/\r?\n/)
.map((l) => l.trim())
.filter(Boolean)
.map((name) => ({ name }));
}

/** <input type="datetime-local"> 的 value 是 "YYYY-MM-DDTHH:mm" 本地时间,无时区;
* 转成 UTC ISO 字符串再给后端。空值返回 null。 */
function datetimeLocalToIso(v: FormDataEntryValue | null): string | null {
if (!v) return null;
const s = String(v).trim();
if (!s) return null;
// new Date("YYYY-MM-DDTHH:mm") 浏览器按本地时区解析
const d = new Date(s);
if (Number.isNaN(d.getTime())) return null;
return d.toISOString();
}

/** ISO 字符串 → datetime-local 输入值。未设置时返回 "". */
function isoToDatetimeLocal(iso: string | null | undefined): string {
if (!iso) return "";
const d = new Date(iso);
if (Number.isNaN(d.getTime())) return "";
// datetime-local 需要 YYYY-MM-DDTHH:mm(无秒无时区)
const pad = (n: number) => String(n).padStart(2, "0");
return `${d.getFullYear()}-${pad(d.getMonth() + 1)}-${pad(d.getDate())}T${pad(d.getHours())}:${pad(d.getMinutes())}`;
}
Loading
Loading