优化: 前后端字段对齐、AI分析JSON解析修复、AutoMigrate

- 修复登录参数 username→account
- 修复前后端字段名不匹配 (ticketno/contactname/createtime等)
- 修复AI分析GLM返回markdown包裹和priority类型问题
- 添加AutoMigrate自动建表
- 统一API路由为 /api/auth/ 前缀
- 添加config.example.yaml,.gitignore排除config.yaml
This commit is contained in:
2026-05-13 18:53:53 +08:00
parent 4793b1a533
commit c5c2a64a48
17 changed files with 3034 additions and 13 deletions

1
.gitignore vendored
View File

@@ -24,6 +24,7 @@ app.log
# Environment # Environment
.env .env
.env.local .env.local
backend/config.yaml
# Build # Build
backend/tmp/ backend/tmp/

98
backend/README.md Normal file
View File

@@ -0,0 +1,98 @@
# Ticket Workbench Backend
Go Gin 工单管理系统后端服务。
## 环境要求
- Go 1.24+
- MySQL 5.7+
## 配置文件
编辑 `config.yaml`:
```yaml
server:
port: 8090
db:
host: 39.99.243.191
port: 3306
user: root
password: Lake@2019
dbname: ticket_dev
glm:
api_key: 7f83dc939a60488b8cf48a2ee1c8150e.NY3aOR0qlVS8m37a
base_url: https://open.bigmodel.cn/api/paas/v4
model: glm-4-flash
```
## 启动方式
```bash
# 安装依赖
go mod tidy
# 运行
go run .
# 编译
go build -o ticket-workbench.exe .
# 运行编译后的程序
./ticket-workbench.exe
```
## API 接口
### 认证
- `POST /api/login` - 登录
- `POST /api/logout` - 登出
- `GET /api/user/info` - 当前用户信息
### 工单
- `GET /api/tickets` - 工单列表
- `POST /api/tickets` - 创建工单
- `GET /api/tickets/:id` - 工单详情
- `PUT /api/tickets/:id` - 更新工单
- `PUT /api/tickets/:id/status` - 更新状态
### AI 分析
- `POST /api/tickets/:id/analyze` - 触发 AI 分析
- `GET /api/tickets/:id/analysis` - 获取分析结果
- `PUT /api/tickets/:id/analysis` - 确认/修改分析结果
### 备注
- `GET /api/tickets/:id/notes` - 获取备注列表
- `POST /api/tickets/:id/notes` - 添加备注
### 日志
- `GET /api/tickets/:id/logs` - 获取操作日志
## 认证方式
所有 API除登录/登出外)需要通过 Authorization header 或 jsessionid cookie 携带 token。
```
Authorization: {token}
```
## 项目结构
```
backend/
├── main.go # 入口文件
├── config.yaml # 配置文件
├── go.mod / go.sum # 依赖管理
└── internal/
├── config/ # 配置读取
├── model/ # GORM 模型
├── dto/ # 请求/响应 DTO
├── handler/ # Gin handler
├── service/ # 业务逻辑
└── middleware/ # 中间件
```

View File

@@ -0,0 +1,12 @@
server:
port: 8091
db:
host: 127.0.0.1
port: 3306
user: root
password: your_password
dbname: ticket_dev
glm:
api_key: your_api_key
base_url: https://open.bigmodel.cn/api/paas/v4
model: glm-4-flash

View File

@@ -30,9 +30,9 @@ type UpdateStatusRequest struct {
} }
type TicketListQuery struct { type TicketListQuery struct {
Status int16 `form:"status"` Status *int16 `form:"status"`
Category string `form:"category"` Category string `form:"category"`
Priority int16 `form:"priority"` Priority *int16 `form:"priority"`
Keyword string `form:"keyword"` Keyword string `form:"keyword"`
Page int `form:"page"` Page int `form:"page"`
PageSize int `form:"pageSize"` PageSize int `form:"pageSize"`

View File

@@ -25,6 +25,7 @@ func Auth(db *gorm.DB) gin.HandlerFunc {
c.Set("userid", user.Userid) c.Set("userid", user.Userid)
c.Set("username", user.Username) c.Set("username", user.Username)
c.Set("account", user.Account)
c.Set("role", user.Role) c.Set("role", user.Role)
c.Set("team", user.Team) c.Set("team", user.Team)
c.Next() c.Next()

View File

@@ -4,13 +4,17 @@ import (
"crypto/md5" "crypto/md5"
"encoding/hex" "encoding/hex"
"fmt" "fmt"
"sync"
"github.com/casehub/ticket-workbench/internal/model" "github.com/casehub/ticket-workbench/internal/model"
"github.com/google/uuid" "github.com/google/uuid"
"gorm.io/gorm" "gorm.io/gorm"
) )
var sessions = make(map[string]*model.TicketUser) var (
sessions = make(map[string]*model.TicketUser)
sessionMu sync.RWMutex
)
func MD5Hash(text string) string { func MD5Hash(text string) string {
hash := md5.Sum([]byte(text)) hash := md5.Sum([]byte(text))
@@ -32,15 +36,21 @@ func Login(db *gorm.DB, account, password string) (*model.TicketUser, string, er
} }
sessionID := uuid.New().String() sessionID := uuid.New().String()
sessionMu.Lock()
sessions[sessionID] = &user sessions[sessionID] = &user
sessionMu.Unlock()
return &user, sessionID, nil return &user, sessionID, nil
} }
func Logout(sessionID string) { func Logout(sessionID string) {
sessionMu.Lock()
delete(sessions, sessionID) delete(sessions, sessionID)
sessionMu.Unlock()
} }
func GetUserBySession(sessionID string) *model.TicketUser { func GetUserBySession(sessionID string) *model.TicketUser {
sessionMu.RLock()
defer sessionMu.RUnlock()
return sessions[sessionID] return sessions[sessionID]
} }

View File

@@ -14,20 +14,20 @@ type TicketListResult struct {
Rows []model.TicketInfo `json:"rows"` Rows []model.TicketInfo `json:"rows"`
} }
func ListTickets(db *gorm.DB, status int16, category string, priority int16, keyword string, page, pageSize int) (*TicketListResult, error) { func ListTickets(db *gorm.DB, status *int16, category string, priority *int16, keyword string, page, pageSize int) (*TicketListResult, error) {
var total int64 var total int64
var tickets []model.TicketInfo var tickets []model.TicketInfo
query := db.Model(&model.TicketInfo{}) query := db.Model(&model.TicketInfo{})
if status >= 0 { if status != nil {
query = query.Where("status = ?", status) query = query.Where("status = ?", *status)
} }
if category != "" { if category != "" {
query = query.Where("category = ?", category) query = query.Where("category = ?", category)
} }
if priority >= 0 { if priority != nil {
query = query.Where("priority = ?", priority) query = query.Where("priority = ?", *priority)
} }
if keyword != "" { if keyword != "" {
query = query.Where("title LIKE ? OR content LIKE ?", "%"+keyword+"%", "%"+keyword+"%") query = query.Where("title LIKE ? OR content LIKE ?", "%"+keyword+"%", "%"+keyword+"%")

View File

@@ -8,6 +8,7 @@ import (
"github.com/casehub/ticket-workbench/internal/config" "github.com/casehub/ticket-workbench/internal/config"
"github.com/casehub/ticket-workbench/internal/handler" "github.com/casehub/ticket-workbench/internal/handler"
"github.com/casehub/ticket-workbench/internal/middleware" "github.com/casehub/ticket-workbench/internal/middleware"
"github.com/casehub/ticket-workbench/internal/model"
"github.com/gin-gonic/gin" "github.com/gin-gonic/gin"
"gorm.io/driver/mysql" "gorm.io/driver/mysql"
"gorm.io/gorm" "gorm.io/gorm"
@@ -42,6 +43,16 @@ func main() {
sqlDB.SetMaxIdleConns(10) sqlDB.SetMaxIdleConns(10)
sqlDB.SetMaxOpenConns(100) sqlDB.SetMaxOpenConns(100)
if err := db.AutoMigrate(
&model.TicketUser{},
&model.TicketInfo{},
&model.TicketAiAnalysis{},
&model.TicketNote{},
&model.TicketOperationLog{},
); err != nil {
log.Fatalf("Failed to auto migrate: %v", err)
}
gin.SetMode(gin.ReleaseMode) gin.SetMode(gin.ReleaseMode)
r := gin.Default() r := gin.Default()

24
frontend/.gitignore vendored Normal file
View File

@@ -0,0 +1,24 @@
# Logs
logs
*.log
npm-debug.log*
yarn-debug.log*
yarn-error.log*
pnpm-debug.log*
lerna-debug.log*
node_modules
dist
dist-ssr
*.local
# Editor directories and files
.vscode/*
!.vscode/extensions.json
.idea
.DS_Store
*.suo
*.ntvs*
*.njsproj
*.sln
*.sw?

151
frontend/README.md Normal file
View File

@@ -0,0 +1,151 @@
# AI 工单处理工作台 - 前端
基于 Vue 3 + Arco Design + Vite + TypeScript + Pinia 的工单管理系统前端。
## 技术栈
- **框架**: Vue 3 (Composition API)
- **UI 组件**: Arco Design Vue 2.58
- **构建工具**: Vite 8
- **状态管理**: Pinia 3
- **路由**: Vue Router 5
- **HTTP 客户端**: Axios 1
- **语言**: TypeScript 6
## 项目结构
```
src/
├── api/ # API 接口
│ ├── interceptor.ts # Axios 拦截器
│ ├── user.ts # 用户 API
│ └── ticket.ts # 工单 API
├── assets/ # 静态资源
├── components/ # 组件
├── router/ # 路由配置
│ └── index.ts
├── store/ # 状态管理
│ └── user.ts # 用户状态
├── types/ # TypeScript 类型定义
│ └── index.ts
├── views/ # 页面组件
│ ├── login/ # 登录页
│ ├── ticket/ # 工单相关页面
│ │ ├── list.vue # 工单列表
│ │ ├── detail.vue # 工单详情 + AI分析
│ │ └── create.vue # 创建工单
│ └── layout/ # 主布局
│ └── index.vue
├── App.vue # 根组件
└── main.ts # 入口文件
```
## 开发
### 安装依赖
```bash
npm install
```
### 启动开发服务器
```bash
npm run dev
```
访问 http://localhost:5173
### 构建生产版本
```bash
npm run build
```
构建产物位于 `dist/` 目录。
### 预览生产构建
```bash
npm run preview
```
## 功能模块
### 1. 登录认证
- 默认账号: `admin` / `admin123`
- Token 存储在 localStorage
- 自动登录状态检查
### 2. 工单列表
- 多条件筛选:状态、分类、优先级、关键词搜索
- 分页展示
- 彩色标签显示优先级和状态
### 3. 工单详情
- 工单基本信息展示
- AI 智能分析(可触发、可编辑确认)
- 状态流转操作
- 处理人分配
- 操作日志与备注
### 4. 创建工单
- 工单基本信息录入
- 来源选择
## API 代理配置
开发环境下,`/api` 前缀的请求会代理到 `http://localhost:8090`
配置文件:`vite.config.ts`
## 数据映射
### 优先级
- P0 紧急 (红色)
- P1 高 (橙红)
- P2 中 (蓝色)
- P3 低 (灰色)
### 状态
- 待处理 (灰色)
- 分析中 (蓝色)
- 已确认 (绿色)
- 处理中 (橙色)
- 已关闭 (灰色)
### 分类
- 退款申请
- 登录异常
- 发票问题
- 物流投诉
- 账户问题
- 产品咨询
- 其他
### 建议角色
- 退款组
- 技术支持
- 财务组
- 物流组
- 客服组
## 环境变量
暂无环境变量配置API 地址通过 Vite 代理配置。
## 后端对接
确保后端服务运行在 `http://localhost:8090`
后端 API 响应格式:
```typescript
{
success: boolean,
retcode: number,
retinfo: string,
result: T
}
```
Token 通过 `Authorization``jsessionid` 请求头传递。

2265
frontend/package-lock.json generated Normal file

File diff suppressed because it is too large Load Diff

File diff suppressed because one or more lines are too long

After

Width:  |  Height:  |  Size: 9.3 KiB

24
frontend/public/icons.svg Normal file
View File

@@ -0,0 +1,24 @@
<svg xmlns="http://www.w3.org/2000/svg">
<symbol id="bluesky-icon" viewBox="0 0 16 17">
<g clip-path="url(#bluesky-clip)"><path fill="#08060d" d="M7.75 7.735c-.693-1.348-2.58-3.86-4.334-5.097-1.68-1.187-2.32-.981-2.74-.79C.188 2.065.1 2.812.1 3.251s.241 3.602.398 4.13c.52 1.744 2.367 2.333 4.07 2.145-2.495.37-4.71 1.278-1.805 4.512 3.196 3.309 4.38-.71 4.987-2.746.608 2.036 1.307 5.91 4.93 2.746 2.72-2.746.747-4.143-1.747-4.512 1.702.189 3.55-.4 4.07-2.145.156-.528.397-3.691.397-4.13s-.088-1.186-.575-1.406c-.42-.19-1.06-.395-2.741.79-1.755 1.24-3.64 3.752-4.334 5.099"/></g>
<defs><clipPath id="bluesky-clip"><path fill="#fff" d="M.1.85h15.3v15.3H.1z"/></clipPath></defs>
</symbol>
<symbol id="discord-icon" viewBox="0 0 20 19">
<path fill="#08060d" d="M16.224 3.768a14.5 14.5 0 0 0-3.67-1.153c-.158.286-.343.67-.47.976a13.5 13.5 0 0 0-4.067 0c-.128-.306-.317-.69-.476-.976A14.4 14.4 0 0 0 3.868 3.77C1.546 7.28.916 10.703 1.231 14.077a14.7 14.7 0 0 0 4.5 2.306q.545-.748.965-1.587a9.5 9.5 0 0 1-1.518-.74q.191-.14.372-.293c2.927 1.369 6.107 1.369 8.999 0q.183.152.372.294-.723.437-1.52.74.418.838.963 1.588a14.6 14.6 0 0 0 4.504-2.308c.37-3.911-.63-7.302-2.644-10.309m-9.13 8.234c-.878 0-1.599-.82-1.599-1.82 0-.998.705-1.82 1.6-1.82.894 0 1.614.82 1.599 1.82.001 1-.705 1.82-1.6 1.82m5.91 0c-.878 0-1.599-.82-1.599-1.82 0-.998.705-1.82 1.6-1.82.893 0 1.614.82 1.599 1.82 0 1-.706 1.82-1.6 1.82"/>
</symbol>
<symbol id="documentation-icon" viewBox="0 0 21 20">
<path fill="none" stroke="#aa3bff" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.35" d="m15.5 13.333 1.533 1.322c.645.555.967.833.967 1.178s-.322.623-.967 1.179L15.5 18.333m-3.333-5-1.534 1.322c-.644.555-.966.833-.966 1.178s.322.623.966 1.179l1.534 1.321"/>
<path fill="none" stroke="#aa3bff" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.35" d="M17.167 10.836v-4.32c0-1.41 0-2.117-.224-2.68-.359-.906-1.118-1.621-2.08-1.96-.599-.21-1.349-.21-2.848-.21-2.623 0-3.935 0-4.983.369-1.684.591-3.013 1.842-3.641 3.428C3 6.449 3 7.684 3 10.154v2.122c0 2.558 0 3.838.706 4.726q.306.383.713.671c.76.536 1.79.64 3.581.66"/>
<path fill="none" stroke="#aa3bff" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.35" d="M3 10a2.78 2.78 0 0 1 2.778-2.778c.555 0 1.209.097 1.748-.047.48-.129.854-.503.982-.982.145-.54.048-1.194.048-1.749a2.78 2.78 0 0 1 2.777-2.777"/>
</symbol>
<symbol id="github-icon" viewBox="0 0 19 19">
<path fill="#08060d" fill-rule="evenodd" d="M9.356 1.85C5.05 1.85 1.57 5.356 1.57 9.694a7.84 7.84 0 0 0 5.324 7.44c.387.079.528-.168.528-.376 0-.182-.013-.805-.013-1.454-2.165.467-2.616-.935-2.616-.935-.349-.91-.864-1.143-.864-1.143-.71-.48.051-.48.051-.48.787.051 1.2.805 1.2.805.695 1.194 1.817.857 2.268.649.064-.507.27-.857.49-1.052-1.728-.182-3.545-.857-3.545-3.87 0-.857.31-1.558.8-2.104-.078-.195-.349-1 .077-2.078 0 0 .657-.208 2.14.805a7.5 7.5 0 0 1 1.946-.26c.657 0 1.328.092 1.946.26 1.483-1.013 2.14-.805 2.14-.805.426 1.078.155 1.883.078 2.078.502.546.799 1.247.799 2.104 0 3.013-1.818 3.675-3.558 3.87.284.247.528.714.528 1.454 0 1.052-.012 1.896-.012 2.156 0 .208.142.455.528.377a7.84 7.84 0 0 0 5.324-7.441c.013-4.338-3.48-7.844-7.773-7.844" clip-rule="evenodd"/>
</symbol>
<symbol id="social-icon" viewBox="0 0 20 20">
<path fill="none" stroke="#aa3bff" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.35" d="M12.5 6.667a4.167 4.167 0 1 0-8.334 0 4.167 4.167 0 0 0 8.334 0"/>
<path fill="none" stroke="#aa3bff" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.35" d="M2.5 16.667a5.833 5.833 0 0 1 8.75-5.053m3.837.474.513 1.035c.07.144.257.282.414.309l.93.155c.596.1.736.536.307.965l-.723.73a.64.64 0 0 0-.152.531l.207.903c.164.715-.213.991-.84.618l-.872-.52a.63.63 0 0 0-.577 0l-.872.52c-.624.373-1.003.094-.84-.618l.207-.903a.64.64 0 0 0-.152-.532l-.723-.729c-.426-.43-.289-.864.306-.964l.93-.156a.64.64 0 0 0 .412-.31l.513-1.034c.28-.562.735-.562 1.012 0"/>
</symbol>
<symbol id="x-icon" viewBox="0 0 19 19">
<path fill="#08060d" fill-rule="evenodd" d="M1.893 1.98c.052.072 1.245 1.769 2.653 3.77l2.892 4.114c.183.261.333.48.333.486s-.068.089-.152.183l-.522.593-.765.867-3.597 4.087c-.375.426-.734.834-.798.905a1 1 0 0 0-.118.148c0 .01.236.017.664.017h.663l.729-.83c.4-.457.796-.906.879-.999a692 692 0 0 0 1.794-2.038c.034-.037.301-.34.594-.675l.551-.624.345-.392a7 7 0 0 1 .34-.374c.006 0 .93 1.306 2.052 2.903l2.084 2.965.045.063h2.275c1.87 0 2.273-.003 2.266-.021-.008-.02-1.098-1.572-3.894-5.547-2.013-2.862-2.28-3.246-2.273-3.266.008-.019.282-.332 2.085-2.38l2-2.274 1.567-1.782c.022-.028-.016-.03-.65-.03h-.674l-.3.342a871 871 0 0 1-1.782 2.025c-.067.075-.405.458-.75.852a100 100 0 0 1-.803.91c-.148.172-.299.344-.99 1.127-.304.343-.32.358-.345.327-.015-.019-.904-1.282-1.976-2.808L6.365 1.85H1.8zm1.782.91 8.078 11.294c.772 1.08 1.413 1.973 1.425 1.984.016.017.241.02 1.05.017l1.03-.004-2.694-3.766L7.796 5.75 5.722 2.852l-1.039-.004-1.039-.004z" clip-rule="evenodd"/>
</symbol>
</svg>

After

Width:  |  Height:  |  Size: 4.9 KiB

View File

@@ -19,7 +19,7 @@ export const useUserStore = defineStore('user', () => {
async function login(account: string, password: string) { async function login(account: string, password: string) {
const res = await loginApi({ account, password }) const res = await loginApi({ account, password })
setToken(res.token) setToken(res.token)
setUsername(account) setUsername(res.user.username)
} }
async function logout() { async function logout() {

View File

@@ -61,8 +61,7 @@ const form = reactive({
content: '', content: '',
contactname: '', contactname: '',
contactphone: '', contactphone: '',
source: 'web', source: 'web'
submitterid: 1
}) })
const loading = ref(false) const loading = ref(false)

View File

@@ -166,8 +166,9 @@ async function fetchDetail() {
// Try to fetch AI analysis // Try to fetch AI analysis
try { try {
const analysisData = await getAnalysis(ticketId) as any const analysisArr = await getAnalysis(ticketId) as any
if (analysisData && analysisData.category) { if (analysisArr && analysisArr.length > 0) {
const analysisData = analysisArr[0]
analysis.value = analysisData analysis.value = analysisData
analysisForm.category = analysisData.category analysisForm.category = analysisData.category
analysisForm.priority = analysisData.priority analysisForm.priority = analysisData.priority

423
审查报告.md Normal file
View File

@@ -0,0 +1,423 @@
# 审查报告: ticket-workbench (Go + Vue)
语言: Go 1.24 / Vue 3 + Arco Design | 后端 19 文件 | 前端 14 文件
---
## 🔴 必须修复 (10)
### ① [detail.vue:7,17,22,117] 前端字段名与后端 API 返回不匹配 — 页面无法正常渲染
**改什么:** 后端返回 `ticketid`/`contactname`/`contactphone`/`createtime` (snake_case),前端用 `ticket.id`/`ticket.contactName`/`ticket.contactPhone`/`ticket.createdAt` (camelCase)。同样 note 用 `note.id`/`note.createdAt` 而后端返回 `noteid`/`createtime`
**怎么改:**
```diff
- <a-descriptions-item label="工单编号">{{ ticket.id }}</a-descriptions-item>
+ <a-descriptions-item label="工单编号">{{ ticket.ticketid }}</a-descriptions-item>
- <a-descriptions-item label="联系人">{{ ticket.contactName }}</a-descriptions-item>
+ <a-descriptions-item label="联系人">{{ ticket.contactname }}</a-descriptions-item>
- <a-descriptions-item label="联系电话">{{ ticket.contactPhone || '-' }}</a-descriptions-item>
+ <a-descriptions-item label="联系电话">{{ ticket.contactphone || '-' }}</a-descriptions-item>
- <a-descriptions-item label="创建时间">{{ ticket.createdAt }}</a-descriptions-item>
+ <a-descriptions-item label="创建时间">{{ ticket.createtime }}</a-descriptions-item>
- <a-timeline-item v-for="note in notes" :key="note.id">
+ <a-timeline-item v-for="note in notes" :key="note.noteid">
- <div class="note-time">{{ note.createdAt }}</div>
+ <div class="note-time">{{ note.createtime }}</div>
```
---
### ② [ticket_service.go:23,29] 工单列表默认过滤 bug — 不传 status/priority 时只查 status=0 且 priority=0 的记录
**改什么:** int16 零值是 0`if status >= 0` 对零值成立。用户不传筛选参数时SQL 自动追加 `WHERE status=0 AND priority=0`,查不到其他数据。
**怎么改:** DTO 改为指针类型service 判 nil
```diff
// dto/ticket.go
type TicketListQuery struct {
- Status int16 `form:"status"`
+ Status *int16 `form:"status"`
Category string `form:"category"`
- Priority int16 `form:"priority"`
+ Priority *int16 `form:"priority"`
Keyword string `form:"keyword"`
Page int `form:"page"`
PageSize int `form:"pageSize"`
}
// ticket_service.go
- if status >= 0 {
- query = query.Where("status = ?", status)
+ if status != nil {
+ query = query.Where("status = ?", *status)
}
- if priority >= 0 {
- query = query.Where("priority = ?", priority)
+ if priority != nil {
+ query = query.Where("priority = ?", *priority)
}
```
handler 传参也要同步调整:
```diff
// ticket_handler.go
- result, err := service.ListTickets(db, query.Status, query.Category, query.Priority, query.Keyword, query.Page, query.PageSize)
+ result, err := service.ListTickets(db, query.Status, query.Category, query.Priority, query.Keyword, query.Page, query.PageSize)
```
---
### ③ [auth_service.go:13] session map 无并发保护 — 并发登录/请求会 panic
**改什么:** `sessions` 是裸 mapgin 并发读写会触发 `fatal error: concurrent map writes`
**怎么改:** 加 sync.RWMutex
```diff
+ import "sync"
- var sessions = make(map[string]*model.TicketUser)
+ var (
+ sessions = make(map[string]*model.TicketUser)
+ sessionMu sync.RWMutex
+ )
// Login
+ sessionMu.Lock()
sessions[sessionID] = &user
+ sessionMu.Unlock()
// Logout
+ sessionMu.Lock()
delete(sessions, sessionID)
+ sessionMu.Unlock()
// GetUserBySession
+ sessionMu.RLock()
+ defer sessionMu.RUnlock()
return sessions[sessionID]
```
---
### ④ [config.yaml:4-11] 数据库密码和 AI API Key 硬编码在配置文件中
**改什么:** `Lake@2019` 和 GLM API Key 明文写在版本控制的 config.yaml 中。
**怎么改:** config.yaml 加入 `.gitignore`,创建 `config.example.yaml` 作为模板。程序支持环境变量覆盖:
```go
// config.go Load 函数中加入
v.AutomaticEnv()
v.SetEnvPrefix("TKT")
```
---
### ⑤ [detail.vue:238-241] 状态更新调错 API — 用了 updateTicket 而非 updateTicketStatus
**改什么:** `handleUpdateStatus` 调用 `updateTicket(id, { status })`,对应 `PUT /tickets/:id`,但该接口不处理 status 字段变更。
**怎么改:**
```diff
async function handleUpdateStatus(status: number) {
try {
- await updateTicket(ticketId, { status })
+ await updateTicketStatus(ticketId, status)
Message.success('状态更新成功')
fetchDetail()
```
---
### ⑥ [detail.vue:214-236] AI 确认调错 API — 用 updateTicket 替代了 confirmAnalysis
**改什么:** `handleConfirmAnalysis` 调用 `updateTicket``aiAnalysis``suggestedRole` 字段,但后端 `UpdateTicket` 不处理这些字段。
**怎么改:**
```diff
async function handleConfirmAnalysis() {
confirming.value = true
try {
- const aiAnalysis = JSON.stringify({
- category: analysisForm.category,
- priority: analysisForm.priority,
- summary: analysisForm.summary,
- suggestedRole: analysisForm.suggestedRole
- })
- await updateTicket(ticketId, {
- category: analysisForm.category,
- priority: analysisForm.priority,
- aiAnalysis,
- suggestedRole: analysisForm.suggestedRole
- })
+ await confirmAnalysis(ticketId, {
+ category: analysisForm.category,
+ priority: analysisForm.priority,
+ summary: analysisForm.summary
+ })
Message.success('确认成功')
fetchDetail()
```
同时需要在 import 中引入 `confirmAnalysis`
```diff
import {
getTicketDetail,
- updateTicket,
analyzeTicket,
+ confirmAnalysis,
getTicketNotes,
createNote
} from '@/api/ticket'
```
---
### ⑦ [auth_handler.go:52] `/auth/me` 返回空 account — middleware 未设置 account 到 context
**改什么:** `c.GetString("account")` 取不到值Auth 中间件只设置了 `userid`/`username`/`role`/`team`,没有 `account`
**怎么改:**
```diff
// middleware/auth.go
c.Set("userid", user.Userid)
c.Set("username", user.Username)
+ c.Set("account", user.Account)
c.Set("role", user.Role)
c.Set("team", user.Team)
```
---
### ⑧ [detail.vue:178,180] `ticketData.assignee` 和 `ticketData.aiAnalysis` 字段不存在
**改什么:** Ticket model 没有 `assignee``aiAnalysis` 字段,访问 undefined 对象导致运行时问题。AI 分析需通过 `getAnalysis(ticketId)` 单独获取。
**怎么改:**
```diff
async function fetchDetail() {
loading.value = true
try {
- const [ticketData, notesData] = await Promise.all([
+ const [ticketData, notesData, analysisData] = await Promise.all([
getTicketDetail(ticketId),
- getTicketNotes(ticketId)
+ getTicketNotes(ticketId),
+ getAnalysis(ticketId).catch(() => [])
])
ticket.value = ticketData
notes.value = notesData
- assignee.value = ticketData.assignee || ''
- if (ticketData.aiAnalysis) {
- try {
- const analysis = JSON.parse(ticketData.aiAnalysis)
+ if (analysisData && analysisData.length > 0) {
+ const latest = analysisData[0]
analysisForm.category = latest.category || ''
analysisForm.priority = latest.priority || 0
analysisForm.summary = latest.summary || ''
- analysisForm.suggestedRole = analysis.suggested_role || analysis.suggestedRole || ''
+ analysisForm.suggestedRole = latest.suggestrole || ''
- } catch {
- analysisForm.summary = ticketData.aiAnalysis
- }
}
```
同时需要在 import 中引入 `getAnalysis`
```diff
import {
getTicketDetail,
updateTicketStatus,
analyzeTicket,
+ getAnalysis,
+ confirmAnalysis,
getTicketNotes,
createNote
} from '@/api/ticket'
```
---
### ⑨ [analysis_service.go:93] AI 返回 JSON 解析过于脆弱 — 没处理 markdown 代码块包裹
**改什么:** AI 模型经常返回 `` ```json {...} ``` `` 格式,直接 `json.Unmarshal` 会失败。
**怎么改:**
```diff
+ import "strings"
content := glmResp.Choices[0].Message.Content
+ // 去除 markdown 代码块包裹
+ content = strings.TrimSpace(content)
+ if strings.HasPrefix(content, "```") {
+ if idx := strings.Index(content, "\n"); idx >= 0 {
+ content = content[idx+1:]
+ }
+ if idx := strings.LastIndex(content, "```"); idx >= 0 {
+ content = content[:idx]
+ }
+ content = strings.TrimSpace(content)
+ }
var result AnalysisResult
- if err := json.Unmarshal([]byte(glmResp.Choices[0].Message.Content), &result); err != nil {
+ if err := json.Unmarshal([]byte(content), &result); err != nil {
```
---
### ⑩ [main.go] 缺少 AutoMigrate — 首次启动表不存在会报错
**改什么:** 没有 `db.AutoMigrate(...)` 调用,数据库表需手动创建。
**怎么改:**
```diff
sqlDB.SetMaxOpenConns(100)
+ if err := db.AutoMigrate(
+ &model.TicketUser{},
+ &model.TicketInfo{},
+ &model.TicketAiAnalysis{},
+ &model.TicketNote{},
+ &model.TicketOperationLog{},
+ ); err != nil {
+ log.Fatalf("Failed to auto migrate: %v", err)
+ }
gin.SetMode(gin.ReleaseMode)
```
---
## 🟡 建议改进 (7)
### ⑪ [auth_service.go:15-18] MD5 哈希密码不安全
**说明:** MD5 可快速碰撞/彩虹表。生产环境应使用 bcrypt。
---
### ⑫ [analysis_service.go:41-54] AI prompt 注入风险
**说明:** 用户提交的工单内容直接拼入 prompt恶意用户可构造内容操控 AI 输出格式/内容。应对用户输入做转义或用 structured prompt 模式。
---
### ⑬ [ticket_service.go:111] UpdateTicket 不检查记录是否存在
**说明:** 传入不存在的 ticketid 时 `Updates` 不报错0 rows affected返回成功。应检查 `RowsAffected` 或先用 `First` 确认存在。
---
### ⑭ [analysis_service.go:64,81] json.Marshal 和 io.ReadAll 错误被忽略
**说明:** `jsonData, _ := json.Marshal(reqBody)` 和 `body, _ := io.ReadAll(resp.Body)` 都丢弃了 error。
---
### ⑮ [detail.vue:89-99] 处理人下拉硬编码 admin/user1/user2
**说明:** 应从后端获取用户列表,或至少与数据库用户数据一致。当前硬编码值 `admin`/`user1`/`user2` 与后端不对应。
---
### ⑯ [create.vue:66] form 提交 `submitterid: 1` 硬编码
**说明:** 后端已从 Auth 中间件获取真实 userid此字段多余且误导。应移除。
---
### ⑰ [store/user.ts:21] login 存 username 用的是 account 而非实际 username
**说明:** `setUsername(account)` 存的是登录账号,不是用户真实姓名。应使用 `res.user.username`。
```diff
async function login(account: string, password: string) {
const res = await loginApi({ account, password })
setToken(res.token)
- setUsername(account)
+ setUsername(res.user.username)
}
```
---
## ⚪ 可选优化 (3)
### ⑱ [ticket_service.go:104] `if priority >= 0` 导致 priority=0 无法区分"未传"和"P0紧急"
**说明:** 与问题②同类UpdateTicket 的 priority 参数也应改为指针类型。
---
### ⑲ [ticket_service.go:58] ticketno 用 UUID 前 8 位有碰撞风险
**说明:** `uuid.New().String()[:8]` 理论上可能重复。可加时间戳或用更长前缀。
---
### ⑳ [analysis_service.go:30] AnalyzeTicket 参数过多
**说明:** 8 个参数的函数签名过长,建议传入结构体。
---
## ✅ 亮点
- 后端分层清晰 (handler/service/model/dto)
- 前端类型定义完整API 层封装规范
- 操作日志设计完善,关键动作都有记录
- CORS 中间件处理周全
---
## 📊 摘要
| # | 等级 | 文件:行 | 修改内容 |
|---|------|---------|----------|
| ① | 🔴 | detail.vue:7,17,22 | 前端字段名与后端不匹配,页面无法渲染 |
| ② | 🔴 | ticket_service.go:23 | 列表默认过滤 bug不传参只查 status=0 |
| ③ | 🔴 | auth_service.go:13 | session map 无锁,并发 panic |
| ④ | 🔴 | config.yaml:4-11 | 密码和 API Key 硬编码 |
| ⑤ | 🔴 | detail.vue:238 | 状态更新调错 API |
| ⑥ | 🔴 | detail.vue:214 | AI 确认调错 API |
| ⑦ | 🔴 | auth_handler.go:52 | /auth/me 返回空 account |
| ⑧ | 🔴 | detail.vue:178 | 访问不存在的 ticket.assignee/aiAnalysis 字段 |
| ⑨ | 🔴 | analysis_service.go:93 | AI JSON 解析未处理 markdown 包裹 |
| ⑩ | 🔴 | main.go | 缺少 AutoMigrate |
| ⑪ | 🟡 | auth_service.go:15 | MD5 密码哈希不安全 |
| ⑫ | 🟡 | analysis_service.go:41 | AI prompt 注入风险 |
| ⑬ | 🟡 | ticket_service.go:111 | 更新不检查记录是否存在 |
| ⑭ | 🟡 | analysis_service.go:64,81 | 错误被忽略 |
| ⑮ | 🟡 | detail.vue:89 | 处理人下拉硬编码 |
| ⑯ | 🟡 | create.vue:66 | submitterid 硬编码 |
| ⑰ | 🟡 | store/user.ts:21 | username 存为 account |
| ⑱ | ⚪ | ticket_service.go:104 | priority 零值歧义 |
| ⑲ | ⚪ | ticket_service.go:58 | ticketno 碰撞风险 |
| ⑳ | ⚪ | analysis_service.go:30 | 函数参数过多 |
**总计:** 🔴10 🟡7 ⚪3
**总体评价:** 前端 detail.vue 与后端严重脱节,核心流程跑不通;后端有并发安全隐患和过滤逻辑 bug
**质量评级: 需重构**