package cc.mrbird.febs.firewall.controller;
|
|
import cc.mrbird.febs.common.annotation.ControllerEndpoint;
|
import cc.mrbird.febs.common.controller.BaseController;
|
import cc.mrbird.febs.common.entity.FebsResponse;
|
import cc.mrbird.febs.common.entity.QueryRequest;
|
import cc.mrbird.febs.firewall.dto.CountryVo;
|
import cc.mrbird.febs.firewall.dto.SaveCountryRuleDto;
|
import cc.mrbird.febs.firewall.entity.FirewallCountryRule;
|
import cc.mrbird.febs.firewall.entity.FirewallIpWhite;
|
import cc.mrbird.febs.firewall.entity.FirewallSite;
|
import cc.mrbird.febs.firewall.mapper.FirewallSiteMapper;
|
import cc.mrbird.febs.firewall.service.IFirewallRuleService;
|
import com.baomidou.mybatisplus.core.conditions.query.LambdaQueryWrapper;
|
import lombok.RequiredArgsConstructor;
|
import lombok.extern.slf4j.Slf4j;
|
import org.springframework.validation.annotation.Validated;
|
import org.springframework.web.bind.annotation.GetMapping;
|
import org.springframework.web.bind.annotation.PathVariable;
|
import org.springframework.web.bind.annotation.PostMapping;
|
import org.springframework.web.bind.annotation.RequestBody;
|
import org.springframework.web.bind.annotation.RequestMapping;
|
import org.springframework.web.bind.annotation.RestController;
|
|
import javax.validation.constraints.NotNull;
|
import java.util.HashMap;
|
import java.util.List;
|
import java.util.Map;
|
|
/**
|
* 防火墙管理控制器
|
* <p>
|
* 提供站点、国家白名单的完整 CRUD + Nginx配置生成 + reload 等管理接口
|
*
|
* @author auto-generated
|
* @date 2026-07-31
|
*/
|
@Slf4j
|
@Validated
|
@RestController
|
@RequiredArgsConstructor
|
@RequestMapping(value = "/admin/firewall")
|
public class AdminFirewallController extends BaseController {
|
|
private final IFirewallRuleService firewallRuleService;
|
private final FirewallSiteMapper firewallSiteMapper;
|
|
// ==================== 站点数据表 CRUD ====================
|
|
/**
|
* 站点分页列表
|
*/
|
@GetMapping("/siteList")
|
public FebsResponse siteList(FirewallSite site, QueryRequest request) {
|
Map<String, Object> data = getDataTable(firewallRuleService.siteList(site, request));
|
return new FebsResponse().success().data(data);
|
}
|
|
/**
|
* 保存/更新站点
|
*/
|
@PostMapping("/site/save")
|
@ControllerEndpoint(operation = "保存防火墙站点")
|
public FebsResponse saveSite(@Validated FirewallSite site) {
|
return firewallRuleService.saveSite(site);
|
}
|
|
/**
|
* 删除站点
|
*/
|
@GetMapping("/site/delete/{id}")
|
@ControllerEndpoint(operation = "删除防火墙站点")
|
public FebsResponse deleteSite(@PathVariable @NotNull Long id) {
|
return firewallRuleService.deleteSite(id);
|
}
|
|
/**
|
* 查询所有启用站点（下拉框用）
|
*/
|
@GetMapping("/sites")
|
public FebsResponse listSites() {
|
List<FirewallSite> sites = firewallSiteMapper.selectList(
|
new LambdaQueryWrapper<FirewallSite>()
|
.eq(FirewallSite::getStatus, 1)
|
);
|
|
List<Map<String, Object>> result = new java.util.ArrayList<>();
|
for (FirewallSite site : sites) {
|
Map<String, Object> item = new HashMap<>();
|
item.put("id", site.getId());
|
item.put("siteName", site.getSiteName());
|
item.put("domain", site.getDomain());
|
item.put("status", site.getStatus());
|
result.add(item);
|
}
|
return new FebsResponse().success().data(result);
|
}
|
|
// ==================== 国家规则数据表 CRUD ====================
|
|
/**
|
* 国家规则分页列表
|
*/
|
@GetMapping("/countryRuleList")
|
public FebsResponse countryRuleList(FirewallCountryRule rule, QueryRequest request) {
|
Map<String, Object> data = getDataTable(firewallRuleService.countryRuleList(rule, request));
|
return new FebsResponse().success().data(data);
|
}
|
|
/**
|
* 保存/更新单个国家规则（保存后自动生成Nginx配置）
|
*/
|
@PostMapping("/countryRule/save")
|
@ControllerEndpoint(operation = "保存防火墙国家规则")
|
public FebsResponse saveCountryRuleSingle(@Validated FirewallCountryRule rule) {
|
return firewallRuleService.saveCountryRuleSingle(rule);
|
}
|
|
/**
|
* 删除单个国家规则（删除后自动生成Nginx配置）
|
*/
|
@GetMapping("/countryRule/delete/{id}")
|
@ControllerEndpoint(operation = "删除防火墙国家规则")
|
public FebsResponse deleteCountryRule(@PathVariable @NotNull Long id) {
|
return firewallRuleService.deleteCountryRule(id);
|
}
|
|
// ==================== 国家白名单（原有接口） ====================
|
|
/**
|
* 查询站点允许的国家列表
|
*/
|
@GetMapping("/site/{siteId}/countries")
|
public FebsResponse getCountries(@PathVariable @NotNull Long siteId) {
|
List<CountryVo> countries = firewallRuleService.getCountries(siteId);
|
return new FebsResponse().success().data(countries);
|
}
|
|
/**
|
* 批量保存站点国家白名单规则（交互式checkbox页面用）
|
*/
|
@PostMapping("/site/country/save")
|
@ControllerEndpoint(operation = "批量保存防火墙国家白名单")
|
public FebsResponse saveCountryRule(@RequestBody @Validated SaveCountryRuleDto dto) {
|
firewallRuleService.saveCountryRule(dto.getSiteId(), dto.getCountries());
|
return new FebsResponse().success().message("保存成功，Nginx 配置已更新");
|
}
|
|
// ==================== Nginx Reload ====================
|
|
/**
|
* 手动触发 Nginx 配置生成 & reload
|
*/
|
@PostMapping("/site/{siteId}/reload")
|
@ControllerEndpoint(operation = "手动reload Nginx配置")
|
public FebsResponse triggerReload(@PathVariable @NotNull Long siteId) {
|
firewallRuleService.triggerNginxReload(siteId);
|
return new FebsResponse().success().message("Nginx reload 信号已发送");
|
}
|
|
// ==================== IP白名单 CRUD ====================
|
|
/**
|
* IP白名单分页列表
|
*/
|
@GetMapping("/ipWhiteList")
|
public FebsResponse ipWhiteList(FirewallIpWhite ipWhite, QueryRequest request) {
|
Map<String, Object> data = getDataTable(firewallRuleService.ipWhiteList(ipWhite, request));
|
return new FebsResponse().success().data(data);
|
}
|
|
/**
|
* 保存/更新IP白名单（保存后自动生成Nginx配置）
|
*/
|
@PostMapping("/ipWhite/save")
|
@ControllerEndpoint(operation = "保存防火墙IP白名单")
|
public FebsResponse saveIpWhite(@Validated FirewallIpWhite ipWhite) {
|
return firewallRuleService.saveIpWhite(ipWhite);
|
}
|
|
/**
|
* 删除IP白名单（删除后自动生成Nginx配置）
|
*/
|
@GetMapping("/ipWhite/delete/{id}")
|
@ControllerEndpoint(operation = "删除防火墙IP白名单")
|
public FebsResponse deleteIpWhite(@PathVariable @NotNull Long id) {
|
return firewallRuleService.deleteIpWhite(id);
|
}
|
}
|
