优化: 前后端字段对齐、AI分析JSON解析修复、AutoMigrate
- 修复登录参数 username→account - 修复前后端字段名不匹配 (ticketno/contactname/createtime等) - 修复AI分析GLM返回markdown包裹和priority类型问题 - 添加AutoMigrate自动建表 - 统一API路由为 /api/auth/ 前缀 - 添加config.example.yaml，.gitignore排除config.yaml
This commit is contained in:
1
.gitignore
vendored
1
.gitignore
vendored
@@ -24,6 +24,7 @@ app.log
|
||||
# Environment
|
||||
.env
|
||||
.env.local
|
||||
backend/config.yaml
|
||||
|
||||
# Build
|
||||
backend/tmp/
|
||||
|
||||
98
backend/README.md
Normal file
98
backend/README.md
Normal file
@@ -0,0 +1,98 @@
|
||||
# Ticket Workbench Backend
|
||||
|
||||
Go Gin 工单管理系统后端服务。
|
||||
|
||||
## 环境要求
|
||||
|
||||
- Go 1.24+
|
||||
- MySQL 5.7+
|
||||
|
||||
## 配置文件
|
||||
|
||||
编辑 `config.yaml`:
|
||||
|
||||
```yaml
|
||||
server:
|
||||
port: 8090
|
||||
db:
|
||||
host: 39.99.243.191
|
||||
port: 3306
|
||||
user: root
|
||||
password: Lake@2019
|
||||
dbname: ticket_dev
|
||||
glm:
|
||||
api_key: 7f83dc939a60488b8cf48a2ee1c8150e.NY3aOR0qlVS8m37a
|
||||
base_url: https://open.bigmodel.cn/api/paas/v4
|
||||
model: glm-4-flash
|
||||
```
|
||||
|
||||
## 启动方式
|
||||
|
||||
```bash
|
||||
# 安装依赖
|
||||
go mod tidy
|
||||
|
||||
# 运行
|
||||
go run .
|
||||
|
||||
# 编译
|
||||
go build -o ticket-workbench.exe .
|
||||
|
||||
# 运行编译后的程序
|
||||
./ticket-workbench.exe
|
||||
```
|
||||
|
||||
## API 接口
|
||||
|
||||
### 认证
|
||||
|
||||
- `POST /api/login` - 登录
|
||||
- `POST /api/logout` - 登出
|
||||
- `GET /api/user/info` - 当前用户信息
|
||||
|
||||
### 工单
|
||||
|
||||
- `GET /api/tickets` - 工单列表
|
||||
- `POST /api/tickets` - 创建工单
|
||||
- `GET /api/tickets/:id` - 工单详情
|
||||
- `PUT /api/tickets/:id` - 更新工单
|
||||
- `PUT /api/tickets/:id/status` - 更新状态
|
||||
|
||||
### AI 分析
|
||||
|
||||
- `POST /api/tickets/:id/analyze` - 触发 AI 分析
|
||||
- `GET /api/tickets/:id/analysis` - 获取分析结果
|
||||
- `PUT /api/tickets/:id/analysis` - 确认/修改分析结果
|
||||
|
||||
### 备注
|
||||
|
||||
- `GET /api/tickets/:id/notes` - 获取备注列表
|
||||
- `POST /api/tickets/:id/notes` - 添加备注
|
||||
|
||||
### 日志
|
||||
|
||||
- `GET /api/tickets/:id/logs` - 获取操作日志
|
||||
|
||||
## 认证方式
|
||||
|
||||
所有 API（除登录/登出外）需要通过 Authorization header 或 jsessionid cookie 携带 token。
|
||||
|
||||
```
|
||||
Authorization: {token}
|
||||
```
|
||||
|
||||
## 项目结构
|
||||
|
||||
```
|
||||
backend/
|
||||
├── main.go # 入口文件
|
||||
├── config.yaml # 配置文件
|
||||
├── go.mod / go.sum # 依赖管理
|
||||
└── internal/
|
||||
├── config/ # 配置读取
|
||||
├── model/ # GORM 模型
|
||||
├── dto/ # 请求/响应 DTO
|
||||
├── handler/ # Gin handler
|
||||
├── service/ # 业务逻辑
|
||||
└── middleware/ # 中间件
|
||||
```
|
||||
12
backend/config.example.yaml
Normal file
12
backend/config.example.yaml
Normal file
@@ -0,0 +1,12 @@
|
||||
server:
|
||||
port: 8091
|
||||
db:
|
||||
host: 127.0.0.1
|
||||
port: 3306
|
||||
user: root
|
||||
password: your_password
|
||||
dbname: ticket_dev
|
||||
glm:
|
||||
api_key: your_api_key
|
||||
base_url: https://open.bigmodel.cn/api/paas/v4
|
||||
model: glm-4-flash
|
||||
@@ -30,9 +30,9 @@ type UpdateStatusRequest struct {
|
||||
}
|
||||
|
||||
type TicketListQuery struct {
|
||||
Status int16 `form:"status"`
|
||||
Status *int16 `form:"status"`
|
||||
Category string `form:"category"`
|
||||
Priority int16 `form:"priority"`
|
||||
Priority *int16 `form:"priority"`
|
||||
Keyword string `form:"keyword"`
|
||||
Page int `form:"page"`
|
||||
PageSize int `form:"pageSize"`
|
||||
|
||||
@@ -25,6 +25,7 @@ func Auth(db *gorm.DB) gin.HandlerFunc {
|
||||
|
||||
c.Set("userid", user.Userid)
|
||||
c.Set("username", user.Username)
|
||||
c.Set("account", user.Account)
|
||||
c.Set("role", user.Role)
|
||||
c.Set("team", user.Team)
|
||||
c.Next()
|
||||
|
||||
@@ -4,13 +4,17 @@ import (
|
||||
"crypto/md5"
|
||||
"encoding/hex"
|
||||
"fmt"
|
||||
"sync"
|
||||
|
||||
"github.com/casehub/ticket-workbench/internal/model"
|
||||
"github.com/google/uuid"
|
||||
"gorm.io/gorm"
|
||||
)
|
||||
|
||||
var sessions = make(map[string]*model.TicketUser)
|
||||
var (
|
||||
sessions = make(map[string]*model.TicketUser)
|
||||
sessionMu sync.RWMutex
|
||||
)
|
||||
|
||||
func MD5Hash(text string) string {
|
||||
hash := md5.Sum([]byte(text))
|
||||
@@ -32,15 +36,21 @@ func Login(db *gorm.DB, account, password string) (*model.TicketUser, string, er
|
||||
}
|
||||
|
||||
sessionID := uuid.New().String()
|
||||
sessionMu.Lock()
|
||||
sessions[sessionID] = &user
|
||||
sessionMu.Unlock()
|
||||
|
||||
return &user, sessionID, nil
|
||||
}
|
||||
|
||||
func Logout(sessionID string) {
|
||||
sessionMu.Lock()
|
||||
delete(sessions, sessionID)
|
||||
sessionMu.Unlock()
|
||||
}
|
||||
|
||||
func GetUserBySession(sessionID string) *model.TicketUser {
|
||||
sessionMu.RLock()
|
||||
defer sessionMu.RUnlock()
|
||||
return sessions[sessionID]
|
||||
}
|
||||
|
||||
@@ -14,20 +14,20 @@ type TicketListResult struct {
|
||||
Rows []model.TicketInfo `json:"rows"`
|
||||
}
|
||||
|
||||
func ListTickets(db *gorm.DB, status int16, category string, priority int16, keyword string, page, pageSize int) (*TicketListResult, error) {
|
||||
func ListTickets(db *gorm.DB, status *int16, category string, priority *int16, keyword string, page, pageSize int) (*TicketListResult, error) {
|
||||
var total int64
|
||||
var tickets []model.TicketInfo
|
||||
|
||||
query := db.Model(&model.TicketInfo{})
|
||||
|
||||
if status >= 0 {
|
||||
query = query.Where("status = ?", status)
|
||||
if status != nil {
|
||||
query = query.Where("status = ?", *status)
|
||||
}
|
||||
if category != "" {
|
||||
query = query.Where("category = ?", category)
|
||||
}
|
||||
if priority >= 0 {
|
||||
query = query.Where("priority = ?", priority)
|
||||
if priority != nil {
|
||||
query = query.Where("priority = ?", *priority)
|
||||
}
|
||||
if keyword != "" {
|
||||
query = query.Where("title LIKE ? OR content LIKE ?", "%"+keyword+"%", "%"+keyword+"%")
|
||||
|
||||
@@ -8,6 +8,7 @@ import (
|
||||
"github.com/casehub/ticket-workbench/internal/config"
|
||||
"github.com/casehub/ticket-workbench/internal/handler"
|
||||
"github.com/casehub/ticket-workbench/internal/middleware"
|
||||
"github.com/casehub/ticket-workbench/internal/model"
|
||||
"github.com/gin-gonic/gin"
|
||||
"gorm.io/driver/mysql"
|
||||
"gorm.io/gorm"
|
||||
@@ -42,6 +43,16 @@ func main() {
|
||||
sqlDB.SetMaxIdleConns(10)
|
||||
sqlDB.SetMaxOpenConns(100)
|
||||
|
||||
if err := db.AutoMigrate(
|
||||
&model.TicketUser{},
|
||||
&model.TicketInfo{},
|
||||
&model.TicketAiAnalysis{},
|
||||
&model.TicketNote{},
|
||||
&model.TicketOperationLog{},
|
||||
); err != nil {
|
||||
log.Fatalf("Failed to auto migrate: %v", err)
|
||||
}
|
||||
|
||||
gin.SetMode(gin.ReleaseMode)
|
||||
r := gin.Default()
|
||||
|
||||
|
||||
24
frontend/.gitignore
vendored
Normal file
24
frontend/.gitignore
vendored
Normal file
@@ -0,0 +1,24 @@
|
||||
# Logs
|
||||
logs
|
||||
*.log
|
||||
npm-debug.log*
|
||||
yarn-debug.log*
|
||||
yarn-error.log*
|
||||
pnpm-debug.log*
|
||||
lerna-debug.log*
|
||||
|
||||
node_modules
|
||||
dist
|
||||
dist-ssr
|
||||
*.local
|
||||
|
||||
# Editor directories and files
|
||||
.vscode/*
|
||||
!.vscode/extensions.json
|
||||
.idea
|
||||
.DS_Store
|
||||
*.suo
|
||||
*.ntvs*
|
||||
*.njsproj
|
||||
*.sln
|
||||
*.sw?
|
||||
151
frontend/README.md
Normal file
151
frontend/README.md
Normal file
@@ -0,0 +1,151 @@
|
||||
# AI 工单处理工作台 - 前端
|
||||
|
||||
基于 Vue 3 + Arco Design + Vite + TypeScript + Pinia 的工单管理系统前端。
|
||||
|
||||
## 技术栈
|
||||
|
||||
- **框架**: Vue 3 (Composition API)
|
||||
- **UI 组件**: Arco Design Vue 2.58
|
||||
- **构建工具**: Vite 8
|
||||
- **状态管理**: Pinia 3
|
||||
- **路由**: Vue Router 5
|
||||
- **HTTP 客户端**: Axios 1
|
||||
- **语言**: TypeScript 6
|
||||
|
||||
## 项目结构
|
||||
|
||||
```
|
||||
src/
|
||||
├── api/ # API 接口
|
||||
│ ├── interceptor.ts # Axios 拦截器
|
||||
│ ├── user.ts # 用户 API
|
||||
│ └── ticket.ts # 工单 API
|
||||
├── assets/ # 静态资源
|
||||
├── components/ # 组件
|
||||
├── router/ # 路由配置
|
||||
│ └── index.ts
|
||||
├── store/ # 状态管理
|
||||
│ └── user.ts # 用户状态
|
||||
├── types/ # TypeScript 类型定义
|
||||
│ └── index.ts
|
||||
├── views/ # 页面组件
|
||||
│ ├── login/ # 登录页
|
||||
│ ├── ticket/ # 工单相关页面
|
||||
│ │ ├── list.vue # 工单列表
|
||||
│ │ ├── detail.vue # 工单详情 + AI分析
|
||||
│ │ └── create.vue # 创建工单
|
||||
│ └── layout/ # 主布局
|
||||
│ └── index.vue
|
||||
├── App.vue # 根组件
|
||||
└── main.ts # 入口文件
|
||||
```
|
||||
|
||||
## 开发
|
||||
|
||||
### 安装依赖
|
||||
|
||||
```bash
|
||||
npm install
|
||||
```
|
||||
|
||||
### 启动开发服务器
|
||||
|
||||
```bash
|
||||
npm run dev
|
||||
```
|
||||
|
||||
访问 http://localhost:5173
|
||||
|
||||
### 构建生产版本
|
||||
|
||||
```bash
|
||||
npm run build
|
||||
```
|
||||
|
||||
构建产物位于 `dist/` 目录。
|
||||
|
||||
### 预览生产构建
|
||||
|
||||
```bash
|
||||
npm run preview
|
||||
```
|
||||
|
||||
## 功能模块
|
||||
|
||||
### 1. 登录认证
|
||||
- 默认账号: `admin` / `admin123`
|
||||
- Token 存储在 localStorage
|
||||
- 自动登录状态检查
|
||||
|
||||
### 2. 工单列表
|
||||
- 多条件筛选：状态、分类、优先级、关键词搜索
|
||||
- 分页展示
|
||||
- 彩色标签显示优先级和状态
|
||||
|
||||
### 3. 工单详情
|
||||
- 工单基本信息展示
|
||||
- AI 智能分析（可触发、可编辑确认）
|
||||
- 状态流转操作
|
||||
- 处理人分配
|
||||
- 操作日志与备注
|
||||
|
||||
### 4. 创建工单
|
||||
- 工单基本信息录入
|
||||
- 来源选择
|
||||
|
||||
## API 代理配置
|
||||
|
||||
开发环境下，`/api` 前缀的请求会代理到 `http://localhost:8090`。
|
||||
|
||||
配置文件：`vite.config.ts`
|
||||
|
||||
## 数据映射
|
||||
|
||||
### 优先级
|
||||
- P0 紧急 (红色)
|
||||
- P1 高 (橙红)
|
||||
- P2 中 (蓝色)
|
||||
- P3 低 (灰色)
|
||||
|
||||
### 状态
|
||||
- 待处理 (灰色)
|
||||
- 分析中 (蓝色)
|
||||
- 已确认 (绿色)
|
||||
- 处理中 (橙色)
|
||||
- 已关闭 (灰色)
|
||||
|
||||
### 分类
|
||||
- 退款申请
|
||||
- 登录异常
|
||||
- 发票问题
|
||||
- 物流投诉
|
||||
- 账户问题
|
||||
- 产品咨询
|
||||
- 其他
|
||||
|
||||
### 建议角色
|
||||
- 退款组
|
||||
- 技术支持
|
||||
- 财务组
|
||||
- 物流组
|
||||
- 客服组
|
||||
|
||||
## 环境变量
|
||||
|
||||
暂无环境变量配置，API 地址通过 Vite 代理配置。
|
||||
|
||||
## 后端对接
|
||||
|
||||
确保后端服务运行在 `http://localhost:8090`。
|
||||
|
||||
后端 API 响应格式：
|
||||
```typescript
|
||||
{
|
||||
success: boolean,
|
||||
retcode: number,
|
||||
retinfo: string,
|
||||
result: T
|
||||
}
|
||||
```
|
||||
|
||||
Token 通过 `Authorization` 和 `jsessionid` 请求头传递。
|
||||
2265
frontend/package-lock.json
generated
Normal file
2265
frontend/package-lock.json
generated
Normal file
File diff suppressed because it is too large
Load Diff
1
frontend/public/favicon.svg
Normal file
1
frontend/public/favicon.svg
Normal file
File diff suppressed because one or more lines are too long
|
After Width: | Height: | Size: 9.3 KiB |
24
frontend/public/icons.svg
Normal file
24
frontend/public/icons.svg
Normal file
@@ -0,0 +1,24 @@
|
||||
<svg xmlns="http://www.w3.org/2000/svg">
|
||||
<symbol id="bluesky-icon" viewBox="0 0 16 17">
|
||||
<g clip-path="url(#bluesky-clip)"><path fill="#08060d" d="M7.75 7.735c-.693-1.348-2.58-3.86-4.334-5.097-1.68-1.187-2.32-.981-2.74-.79C.188 2.065.1 2.812.1 3.251s.241 3.602.398 4.13c.52 1.744 2.367 2.333 4.07 2.145-2.495.37-4.71 1.278-1.805 4.512 3.196 3.309 4.38-.71 4.987-2.746.608 2.036 1.307 5.91 4.93 2.746 2.72-2.746.747-4.143-1.747-4.512 1.702.189 3.55-.4 4.07-2.145.156-.528.397-3.691.397-4.13s-.088-1.186-.575-1.406c-.42-.19-1.06-.395-2.741.79-1.755 1.24-3.64 3.752-4.334 5.099"/></g>
|
||||
<defs><clipPath id="bluesky-clip"><path fill="#fff" d="M.1.85h15.3v15.3H.1z"/></clipPath></defs>
|
||||
</symbol>
|
||||
<symbol id="discord-icon" viewBox="0 0 20 19">
|
||||
<path fill="#08060d" d="M16.224 3.768a14.5 14.5 0 0 0-3.67-1.153c-.158.286-.343.67-.47.976a13.5 13.5 0 0 0-4.067 0c-.128-.306-.317-.69-.476-.976A14.4 14.4 0 0 0 3.868 3.77C1.546 7.28.916 10.703 1.231 14.077a14.7 14.7 0 0 0 4.5 2.306q.545-.748.965-1.587a9.5 9.5 0 0 1-1.518-.74q.191-.14.372-.293c2.927 1.369 6.107 1.369 8.999 0q.183.152.372.294-.723.437-1.52.74.418.838.963 1.588a14.6 14.6 0 0 0 4.504-2.308c.37-3.911-.63-7.302-2.644-10.309m-9.13 8.234c-.878 0-1.599-.82-1.599-1.82 0-.998.705-1.82 1.6-1.82.894 0 1.614.82 1.599 1.82.001 1-.705 1.82-1.6 1.82m5.91 0c-.878 0-1.599-.82-1.599-1.82 0-.998.705-1.82 1.6-1.82.893 0 1.614.82 1.599 1.82 0 1-.706 1.82-1.6 1.82"/>
|
||||
</symbol>
|
||||
<symbol id="documentation-icon" viewBox="0 0 21 20">
|
||||
<path fill="none" stroke="#aa3bff" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.35" d="m15.5 13.333 1.533 1.322c.645.555.967.833.967 1.178s-.322.623-.967 1.179L15.5 18.333m-3.333-5-1.534 1.322c-.644.555-.966.833-.966 1.178s.322.623.966 1.179l1.534 1.321"/>
|
||||
<path fill="none" stroke="#aa3bff" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.35" d="M17.167 10.836v-4.32c0-1.41 0-2.117-.224-2.68-.359-.906-1.118-1.621-2.08-1.96-.599-.21-1.349-.21-2.848-.21-2.623 0-3.935 0-4.983.369-1.684.591-3.013 1.842-3.641 3.428C3 6.449 3 7.684 3 10.154v2.122c0 2.558 0 3.838.706 4.726q.306.383.713.671c.76.536 1.79.64 3.581.66"/>
|
||||
<path fill="none" stroke="#aa3bff" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.35" d="M3 10a2.78 2.78 0 0 1 2.778-2.778c.555 0 1.209.097 1.748-.047.48-.129.854-.503.982-.982.145-.54.048-1.194.048-1.749a2.78 2.78 0 0 1 2.777-2.777"/>
|
||||
</symbol>
|
||||
<symbol id="github-icon" viewBox="0 0 19 19">
|
||||
<path fill="#08060d" fill-rule="evenodd" d="M9.356 1.85C5.05 1.85 1.57 5.356 1.57 9.694a7.84 7.84 0 0 0 5.324 7.44c.387.079.528-.168.528-.376 0-.182-.013-.805-.013-1.454-2.165.467-2.616-.935-2.616-.935-.349-.91-.864-1.143-.864-1.143-.71-.48.051-.48.051-.48.787.051 1.2.805 1.2.805.695 1.194 1.817.857 2.268.649.064-.507.27-.857.49-1.052-1.728-.182-3.545-.857-3.545-3.87 0-.857.31-1.558.8-2.104-.078-.195-.349-1 .077-2.078 0 0 .657-.208 2.14.805a7.5 7.5 0 0 1 1.946-.26c.657 0 1.328.092 1.946.26 1.483-1.013 2.14-.805 2.14-.805.426 1.078.155 1.883.078 2.078.502.546.799 1.247.799 2.104 0 3.013-1.818 3.675-3.558 3.87.284.247.528.714.528 1.454 0 1.052-.012 1.896-.012 2.156 0 .208.142.455.528.377a7.84 7.84 0 0 0 5.324-7.441c.013-4.338-3.48-7.844-7.773-7.844" clip-rule="evenodd"/>
|
||||
</symbol>
|
||||
<symbol id="social-icon" viewBox="0 0 20 20">
|
||||
<path fill="none" stroke="#aa3bff" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.35" d="M12.5 6.667a4.167 4.167 0 1 0-8.334 0 4.167 4.167 0 0 0 8.334 0"/>
|
||||
<path fill="none" stroke="#aa3bff" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.35" d="M2.5 16.667a5.833 5.833 0 0 1 8.75-5.053m3.837.474.513 1.035c.07.144.257.282.414.309l.93.155c.596.1.736.536.307.965l-.723.73a.64.64 0 0 0-.152.531l.207.903c.164.715-.213.991-.84.618l-.872-.52a.63.63 0 0 0-.577 0l-.872.52c-.624.373-1.003.094-.84-.618l.207-.903a.64.64 0 0 0-.152-.532l-.723-.729c-.426-.43-.289-.864.306-.964l.93-.156a.64.64 0 0 0 .412-.31l.513-1.034c.28-.562.735-.562 1.012 0"/>
|
||||
</symbol>
|
||||
<symbol id="x-icon" viewBox="0 0 19 19">
|
||||
<path fill="#08060d" fill-rule="evenodd" d="M1.893 1.98c.052.072 1.245 1.769 2.653 3.77l2.892 4.114c.183.261.333.48.333.486s-.068.089-.152.183l-.522.593-.765.867-3.597 4.087c-.375.426-.734.834-.798.905a1 1 0 0 0-.118.148c0 .01.236.017.664.017h.663l.729-.83c.4-.457.796-.906.879-.999a692 692 0 0 0 1.794-2.038c.034-.037.301-.34.594-.675l.551-.624.345-.392a7 7 0 0 1 .34-.374c.006 0 .93 1.306 2.052 2.903l2.084 2.965.045.063h2.275c1.87 0 2.273-.003 2.266-.021-.008-.02-1.098-1.572-3.894-5.547-2.013-2.862-2.28-3.246-2.273-3.266.008-.019.282-.332 2.085-2.38l2-2.274 1.567-1.782c.022-.028-.016-.03-.65-.03h-.674l-.3.342a871 871 0 0 1-1.782 2.025c-.067.075-.405.458-.75.852a100 100 0 0 1-.803.91c-.148.172-.299.344-.99 1.127-.304.343-.32.358-.345.327-.015-.019-.904-1.282-1.976-2.808L6.365 1.85H1.8zm1.782.91 8.078 11.294c.772 1.08 1.413 1.973 1.425 1.984.016.017.241.02 1.05.017l1.03-.004-2.694-3.766L7.796 5.75 5.722 2.852l-1.039-.004-1.039-.004z" clip-rule="evenodd"/>
|
||||
</symbol>
|
||||
</svg>
|
||||
|
After Width: | Height: | Size: 4.9 KiB |
@@ -19,7 +19,7 @@ export const useUserStore = defineStore('user', () => {
|
||||
async function login(account: string, password: string) {
|
||||
const res = await loginApi({ account, password })
|
||||
setToken(res.token)
|
||||
setUsername(account)
|
||||
setUsername(res.user.username)
|
||||
}
|
||||
|
||||
async function logout() {
|
||||
|
||||
@@ -61,8 +61,7 @@ const form = reactive({
|
||||
content: '',
|
||||
contactname: '',
|
||||
contactphone: '',
|
||||
source: 'web',
|
||||
submitterid: 1
|
||||
source: 'web'
|
||||
})
|
||||
|
||||
const loading = ref(false)
|
||||
|
||||
@@ -166,8 +166,9 @@ async function fetchDetail() {
|
||||
|
||||
// Try to fetch AI analysis
|
||||
try {
|
||||
const analysisData = await getAnalysis(ticketId) as any
|
||||
if (analysisData && analysisData.category) {
|
||||
const analysisArr = await getAnalysis(ticketId) as any
|
||||
if (analysisArr && analysisArr.length > 0) {
|
||||
const analysisData = analysisArr[0]
|
||||
analysis.value = analysisData
|
||||
analysisForm.category = analysisData.category
|
||||
analysisForm.priority = analysisData.priority
|
||||
|
||||
423
审查报告.md
Normal file
423
审查报告.md
Normal file
@@ -0,0 +1,423 @@
|
||||
# 审查报告: ticket-workbench (Go + Vue)
|
||||
|
||||
语言: Go 1.24 / Vue 3 + Arco Design | 后端 19 文件 | 前端 14 文件
|
||||
|
||||
---
|
||||
|
||||
## 🔴 必须修复 (10)
|
||||
|
||||
### ① [detail.vue:7,17,22,117] 前端字段名与后端 API 返回不匹配 — 页面无法正常渲染
|
||||
|
||||
**改什么：** 后端返回 `ticketid`/`contactname`/`contactphone`/`createtime` (snake_case)，前端用 `ticket.id`/`ticket.contactName`/`ticket.contactPhone`/`ticket.createdAt` (camelCase)。同样 note 用 `note.id`/`note.createdAt` 而后端返回 `noteid`/`createtime`。
|
||||
|
||||
**怎么改：**
|
||||
|
||||
```diff
|
||||
- <a-descriptions-item label="工单编号">{{ ticket.id }}</a-descriptions-item>
|
||||
+ <a-descriptions-item label="工单编号">{{ ticket.ticketid }}</a-descriptions-item>
|
||||
|
||||
- <a-descriptions-item label="联系人">{{ ticket.contactName }}</a-descriptions-item>
|
||||
+ <a-descriptions-item label="联系人">{{ ticket.contactname }}</a-descriptions-item>
|
||||
|
||||
- <a-descriptions-item label="联系电话">{{ ticket.contactPhone || '-' }}</a-descriptions-item>
|
||||
+ <a-descriptions-item label="联系电话">{{ ticket.contactphone || '-' }}</a-descriptions-item>
|
||||
|
||||
- <a-descriptions-item label="创建时间">{{ ticket.createdAt }}</a-descriptions-item>
|
||||
+ <a-descriptions-item label="创建时间">{{ ticket.createtime }}</a-descriptions-item>
|
||||
|
||||
- <a-timeline-item v-for="note in notes" :key="note.id">
|
||||
+ <a-timeline-item v-for="note in notes" :key="note.noteid">
|
||||
|
||||
- <div class="note-time">{{ note.createdAt }}</div>
|
||||
+ <div class="note-time">{{ note.createtime }}</div>
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
### ② [ticket_service.go:23,29] 工单列表默认过滤 bug — 不传 status/priority 时只查 status=0 且 priority=0 的记录
|
||||
|
||||
**改什么：** int16 零值是 0，`if status >= 0` 对零值成立。用户不传筛选参数时，SQL 自动追加 `WHERE status=0 AND priority=0`，查不到其他数据。
|
||||
|
||||
**怎么改：** DTO 改为指针类型，service 判 nil：
|
||||
|
||||
```diff
|
||||
// dto/ticket.go
|
||||
type TicketListQuery struct {
|
||||
- Status int16 `form:"status"`
|
||||
+ Status *int16 `form:"status"`
|
||||
Category string `form:"category"`
|
||||
- Priority int16 `form:"priority"`
|
||||
+ Priority *int16 `form:"priority"`
|
||||
Keyword string `form:"keyword"`
|
||||
Page int `form:"page"`
|
||||
PageSize int `form:"pageSize"`
|
||||
}
|
||||
|
||||
// ticket_service.go
|
||||
- if status >= 0 {
|
||||
- query = query.Where("status = ?", status)
|
||||
+ if status != nil {
|
||||
+ query = query.Where("status = ?", *status)
|
||||
}
|
||||
- if priority >= 0 {
|
||||
- query = query.Where("priority = ?", priority)
|
||||
+ if priority != nil {
|
||||
+ query = query.Where("priority = ?", *priority)
|
||||
}
|
||||
```
|
||||
|
||||
handler 传参也要同步调整：
|
||||
|
||||
```diff
|
||||
// ticket_handler.go
|
||||
- result, err := service.ListTickets(db, query.Status, query.Category, query.Priority, query.Keyword, query.Page, query.PageSize)
|
||||
+ result, err := service.ListTickets(db, query.Status, query.Category, query.Priority, query.Keyword, query.Page, query.PageSize)
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
### ③ [auth_service.go:13] session map 无并发保护 — 并发登录/请求会 panic
|
||||
|
||||
**改什么：** `sessions` 是裸 map，gin 并发读写会触发 `fatal error: concurrent map writes`。
|
||||
|
||||
**怎么改：** 加 sync.RWMutex：
|
||||
|
||||
```diff
|
||||
+ import "sync"
|
||||
|
||||
- var sessions = make(map[string]*model.TicketUser)
|
||||
+ var (
|
||||
+ sessions = make(map[string]*model.TicketUser)
|
||||
+ sessionMu sync.RWMutex
|
||||
+ )
|
||||
|
||||
// Login
|
||||
+ sessionMu.Lock()
|
||||
sessions[sessionID] = &user
|
||||
+ sessionMu.Unlock()
|
||||
|
||||
// Logout
|
||||
+ sessionMu.Lock()
|
||||
delete(sessions, sessionID)
|
||||
+ sessionMu.Unlock()
|
||||
|
||||
// GetUserBySession
|
||||
+ sessionMu.RLock()
|
||||
+ defer sessionMu.RUnlock()
|
||||
return sessions[sessionID]
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
### ④ [config.yaml:4-11] 数据库密码和 AI API Key 硬编码在配置文件中
|
||||
|
||||
**改什么：** `Lake@2019` 和 GLM API Key 明文写在版本控制的 config.yaml 中。
|
||||
|
||||
**怎么改：** config.yaml 加入 `.gitignore`，创建 `config.example.yaml` 作为模板。程序支持环境变量覆盖：
|
||||
|
||||
```go
|
||||
// config.go Load 函数中加入
|
||||
v.AutomaticEnv()
|
||||
v.SetEnvPrefix("TKT")
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
### ⑤ [detail.vue:238-241] 状态更新调错 API — 用了 updateTicket 而非 updateTicketStatus
|
||||
|
||||
**改什么：** `handleUpdateStatus` 调用 `updateTicket(id, { status })`，对应 `PUT /tickets/:id`，但该接口不处理 status 字段变更。
|
||||
|
||||
**怎么改：**
|
||||
|
||||
```diff
|
||||
async function handleUpdateStatus(status: number) {
|
||||
try {
|
||||
- await updateTicket(ticketId, { status })
|
||||
+ await updateTicketStatus(ticketId, status)
|
||||
Message.success('状态更新成功')
|
||||
fetchDetail()
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
### ⑥ [detail.vue:214-236] AI 确认调错 API — 用 updateTicket 替代了 confirmAnalysis
|
||||
|
||||
**改什么：** `handleConfirmAnalysis` 调用 `updateTicket` 传 `aiAnalysis` 和 `suggestedRole` 字段，但后端 `UpdateTicket` 不处理这些字段。
|
||||
|
||||
**怎么改：**
|
||||
|
||||
```diff
|
||||
async function handleConfirmAnalysis() {
|
||||
confirming.value = true
|
||||
try {
|
||||
- const aiAnalysis = JSON.stringify({
|
||||
- category: analysisForm.category,
|
||||
- priority: analysisForm.priority,
|
||||
- summary: analysisForm.summary,
|
||||
- suggestedRole: analysisForm.suggestedRole
|
||||
- })
|
||||
- await updateTicket(ticketId, {
|
||||
- category: analysisForm.category,
|
||||
- priority: analysisForm.priority,
|
||||
- aiAnalysis,
|
||||
- suggestedRole: analysisForm.suggestedRole
|
||||
- })
|
||||
+ await confirmAnalysis(ticketId, {
|
||||
+ category: analysisForm.category,
|
||||
+ priority: analysisForm.priority,
|
||||
+ summary: analysisForm.summary
|
||||
+ })
|
||||
Message.success('确认成功')
|
||||
fetchDetail()
|
||||
```
|
||||
|
||||
同时需要在 import 中引入 `confirmAnalysis`：
|
||||
|
||||
```diff
|
||||
import {
|
||||
getTicketDetail,
|
||||
- updateTicket,
|
||||
analyzeTicket,
|
||||
+ confirmAnalysis,
|
||||
getTicketNotes,
|
||||
createNote
|
||||
} from '@/api/ticket'
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
### ⑦ [auth_handler.go:52] `/auth/me` 返回空 account — middleware 未设置 account 到 context
|
||||
|
||||
**改什么：** `c.GetString("account")` 取不到值，Auth 中间件只设置了 `userid`/`username`/`role`/`team`，没有 `account`。
|
||||
|
||||
**怎么改：**
|
||||
|
||||
```diff
|
||||
// middleware/auth.go
|
||||
c.Set("userid", user.Userid)
|
||||
c.Set("username", user.Username)
|
||||
+ c.Set("account", user.Account)
|
||||
c.Set("role", user.Role)
|
||||
c.Set("team", user.Team)
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
### ⑧ [detail.vue:178,180] `ticketData.assignee` 和 `ticketData.aiAnalysis` 字段不存在
|
||||
|
||||
**改什么：** Ticket model 没有 `assignee` 和 `aiAnalysis` 字段，访问 undefined 对象导致运行时问题。AI 分析需通过 `getAnalysis(ticketId)` 单独获取。
|
||||
|
||||
**怎么改：**
|
||||
|
||||
```diff
|
||||
async function fetchDetail() {
|
||||
loading.value = true
|
||||
try {
|
||||
- const [ticketData, notesData] = await Promise.all([
|
||||
+ const [ticketData, notesData, analysisData] = await Promise.all([
|
||||
getTicketDetail(ticketId),
|
||||
- getTicketNotes(ticketId)
|
||||
+ getTicketNotes(ticketId),
|
||||
+ getAnalysis(ticketId).catch(() => [])
|
||||
])
|
||||
ticket.value = ticketData
|
||||
notes.value = notesData
|
||||
- assignee.value = ticketData.assignee || ''
|
||||
|
||||
- if (ticketData.aiAnalysis) {
|
||||
- try {
|
||||
- const analysis = JSON.parse(ticketData.aiAnalysis)
|
||||
+ if (analysisData && analysisData.length > 0) {
|
||||
+ const latest = analysisData[0]
|
||||
analysisForm.category = latest.category || ''
|
||||
analysisForm.priority = latest.priority || 0
|
||||
analysisForm.summary = latest.summary || ''
|
||||
- analysisForm.suggestedRole = analysis.suggested_role || analysis.suggestedRole || ''
|
||||
+ analysisForm.suggestedRole = latest.suggestrole || ''
|
||||
- } catch {
|
||||
- analysisForm.summary = ticketData.aiAnalysis
|
||||
- }
|
||||
}
|
||||
```
|
||||
|
||||
同时需要在 import 中引入 `getAnalysis`：
|
||||
|
||||
```diff
|
||||
import {
|
||||
getTicketDetail,
|
||||
updateTicketStatus,
|
||||
analyzeTicket,
|
||||
+ getAnalysis,
|
||||
+ confirmAnalysis,
|
||||
getTicketNotes,
|
||||
createNote
|
||||
} from '@/api/ticket'
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
### ⑨ [analysis_service.go:93] AI 返回 JSON 解析过于脆弱 — 没处理 markdown 代码块包裹
|
||||
|
||||
**改什么：** AI 模型经常返回 `` ```json {...} ``` `` 格式，直接 `json.Unmarshal` 会失败。
|
||||
|
||||
**怎么改：**
|
||||
|
||||
```diff
|
||||
+ import "strings"
|
||||
|
||||
content := glmResp.Choices[0].Message.Content
|
||||
+ // 去除 markdown 代码块包裹
|
||||
+ content = strings.TrimSpace(content)
|
||||
+ if strings.HasPrefix(content, "```") {
|
||||
+ if idx := strings.Index(content, "\n"); idx >= 0 {
|
||||
+ content = content[idx+1:]
|
||||
+ }
|
||||
+ if idx := strings.LastIndex(content, "```"); idx >= 0 {
|
||||
+ content = content[:idx]
|
||||
+ }
|
||||
+ content = strings.TrimSpace(content)
|
||||
+ }
|
||||
|
||||
var result AnalysisResult
|
||||
- if err := json.Unmarshal([]byte(glmResp.Choices[0].Message.Content), &result); err != nil {
|
||||
+ if err := json.Unmarshal([]byte(content), &result); err != nil {
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
### ⑩ [main.go] 缺少 AutoMigrate — 首次启动表不存在会报错
|
||||
|
||||
**改什么：** 没有 `db.AutoMigrate(...)` 调用，数据库表需手动创建。
|
||||
|
||||
**怎么改：**
|
||||
|
||||
```diff
|
||||
sqlDB.SetMaxOpenConns(100)
|
||||
|
||||
+ if err := db.AutoMigrate(
|
||||
+ &model.TicketUser{},
|
||||
+ &model.TicketInfo{},
|
||||
+ &model.TicketAiAnalysis{},
|
||||
+ &model.TicketNote{},
|
||||
+ &model.TicketOperationLog{},
|
||||
+ ); err != nil {
|
||||
+ log.Fatalf("Failed to auto migrate: %v", err)
|
||||
+ }
|
||||
|
||||
gin.SetMode(gin.ReleaseMode)
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
## 🟡 建议改进 (7)
|
||||
|
||||
### ⑪ [auth_service.go:15-18] MD5 哈希密码不安全
|
||||
|
||||
**说明：** MD5 可快速碰撞/彩虹表。生产环境应使用 bcrypt。
|
||||
|
||||
---
|
||||
|
||||
### ⑫ [analysis_service.go:41-54] AI prompt 注入风险
|
||||
|
||||
**说明：** 用户提交的工单内容直接拼入 prompt，恶意用户可构造内容操控 AI 输出格式/内容。应对用户输入做转义或用 structured prompt 模式。
|
||||
|
||||
---
|
||||
|
||||
### ⑬ [ticket_service.go:111] UpdateTicket 不检查记录是否存在
|
||||
|
||||
**说明：** 传入不存在的 ticketid 时 `Updates` 不报错（0 rows affected），返回成功。应检查 `RowsAffected` 或先用 `First` 确认存在。
|
||||
|
||||
---
|
||||
|
||||
### ⑭ [analysis_service.go:64,81] json.Marshal 和 io.ReadAll 错误被忽略
|
||||
|
||||
**说明：** `jsonData, _ := json.Marshal(reqBody)` 和 `body, _ := io.ReadAll(resp.Body)` 都丢弃了 error。
|
||||
|
||||
---
|
||||
|
||||
### ⑮ [detail.vue:89-99] 处理人下拉硬编码 admin/user1/user2
|
||||
|
||||
**说明：** 应从后端获取用户列表，或至少与数据库用户数据一致。当前硬编码值 `admin`/`user1`/`user2` 与后端不对应。
|
||||
|
||||
---
|
||||
|
||||
### ⑯ [create.vue:66] form 提交 `submitterid: 1` 硬编码
|
||||
|
||||
**说明：** 后端已从 Auth 中间件获取真实 userid，此字段多余且误导。应移除。
|
||||
|
||||
---
|
||||
|
||||
### ⑰ [store/user.ts:21] login 存 username 用的是 account 而非实际 username
|
||||
|
||||
**说明：** `setUsername(account)` 存的是登录账号，不是用户真实姓名。应使用 `res.user.username`。
|
||||
|
||||
```diff
|
||||
async function login(account: string, password: string) {
|
||||
const res = await loginApi({ account, password })
|
||||
setToken(res.token)
|
||||
- setUsername(account)
|
||||
+ setUsername(res.user.username)
|
||||
}
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
## ⚪ 可选优化 (3)
|
||||
|
||||
### ⑱ [ticket_service.go:104] `if priority >= 0` 导致 priority=0 无法区分"未传"和"P0紧急"
|
||||
|
||||
**说明：** 与问题②同类，UpdateTicket 的 priority 参数也应改为指针类型。
|
||||
|
||||
---
|
||||
|
||||
### ⑲ [ticket_service.go:58] ticketno 用 UUID 前 8 位有碰撞风险
|
||||
|
||||
**说明：** `uuid.New().String()[:8]` 理论上可能重复。可加时间戳或用更长前缀。
|
||||
|
||||
---
|
||||
|
||||
### ⑳ [analysis_service.go:30] AnalyzeTicket 参数过多
|
||||
|
||||
**说明：** 8 个参数的函数签名过长，建议传入结构体。
|
||||
|
||||
---
|
||||
|
||||
## ✅ 亮点
|
||||
|
||||
- 后端分层清晰 (handler/service/model/dto)
|
||||
- 前端类型定义完整，API 层封装规范
|
||||
- 操作日志设计完善，关键动作都有记录
|
||||
- CORS 中间件处理周全
|
||||
|
||||
---
|
||||
|
||||
## 📊 摘要
|
||||
|
||||
| # | 等级 | 文件:行 | 修改内容 |
|
||||
|---|------|---------|----------|
|
||||
| ① | 🔴 | detail.vue:7,17,22 | 前端字段名与后端不匹配，页面无法渲染 |
|
||||
| ② | 🔴 | ticket_service.go:23 | 列表默认过滤 bug，不传参只查 status=0 |
|
||||
| ③ | 🔴 | auth_service.go:13 | session map 无锁，并发 panic |
|
||||
| ④ | 🔴 | config.yaml:4-11 | 密码和 API Key 硬编码 |
|
||||
| ⑤ | 🔴 | detail.vue:238 | 状态更新调错 API |
|
||||
| ⑥ | 🔴 | detail.vue:214 | AI 确认调错 API |
|
||||
| ⑦ | 🔴 | auth_handler.go:52 | /auth/me 返回空 account |
|
||||
| ⑧ | 🔴 | detail.vue:178 | 访问不存在的 ticket.assignee/aiAnalysis 字段 |
|
||||
| ⑨ | 🔴 | analysis_service.go:93 | AI JSON 解析未处理 markdown 包裹 |
|
||||
| ⑩ | 🔴 | main.go | 缺少 AutoMigrate |
|
||||
| ⑪ | 🟡 | auth_service.go:15 | MD5 密码哈希不安全 |
|
||||
| ⑫ | 🟡 | analysis_service.go:41 | AI prompt 注入风险 |
|
||||
| ⑬ | 🟡 | ticket_service.go:111 | 更新不检查记录是否存在 |
|
||||
| ⑭ | 🟡 | analysis_service.go:64,81 | 错误被忽略 |
|
||||
| ⑮ | 🟡 | detail.vue:89 | 处理人下拉硬编码 |
|
||||
| ⑯ | 🟡 | create.vue:66 | submitterid 硬编码 |
|
||||
| ⑰ | 🟡 | store/user.ts:21 | username 存为 account |
|
||||
| ⑱ | ⚪ | ticket_service.go:104 | priority 零值歧义 |
|
||||
| ⑲ | ⚪ | ticket_service.go:58 | ticketno 碰撞风险 |
|
||||
| ⑳ | ⚪ | analysis_service.go:30 | 函数参数过多 |
|
||||
|
||||
**总计:** 🔴10 🟡7 ⚪3
|
||||
|
||||
**总体评价:** 前端 detail.vue 与后端严重脱节，核心流程跑不通；后端有并发安全隐患和过滤逻辑 bug
|
||||
|
||||
**质量评级: 需重构**
|
||||
Reference in New Issue
Block a user