模板系统

internal/apps/admin/template/errs.go

@@ -0,0 +1,27 @@
+/*
+Copyright 2026 Arctel.net
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+package template
+
+const (
+	TemplateNotFound              = "模板不存在"
+	TemplateKeyRequired           = "模板标识符不能为空"
+	TemplateNameRequired          = "模板名称不能为空"
+	TemplateContentRequired       = "模板内容不能为空"
+	TemplateKeyExists             = "模板标识符已存在"
+	SystemTemplateCannotDelete    = "系统预置模板不可删除"
+	SystemTemplateCannotModifyKey = "系统预置模板不可修改标识符"
+)

internal/apps/admin/template/routers.go

@@ -0,0 +1,246 @@
+/*
+Copyright 2026 Arctel.net
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+package template
+
+import (
+	"errors"
+	"net/http"
+
+	"github.com/Rain-kl/Wavelet/internal/db"
+	"github.com/Rain-kl/Wavelet/internal/model"
+	"github.com/Rain-kl/Wavelet/internal/util"
+	"github.com/gin-gonic/gin"
+	"gorm.io/gorm"
+)
+
+// CreateTemplateRequest 创建模板请求
+type CreateTemplateRequest struct {
+	Key         string `json:"key" binding:"required,max=80"`
+	Name        string `json:"name" binding:"required,max=100"`
+	Type        string `json:"type" binding:"required,max=20"`
+	Subject     string `json:"subject" binding:"max=255"`
+	Content     string `json:"content" binding:"required"`
+	Description string `json:"description" binding:"max=255"`
+}
+
+// UpdateTemplateRequest 更新模板请求
+type UpdateTemplateRequest struct {
+	Name        string `json:"name" binding:"required,max=100"`
+	Type        string `json:"type" binding:"required,max=20"`
+	Subject     string `json:"subject" binding:"max=255"`
+	Content     string `json:"content" binding:"required"`
+	Description string `json:"description" binding:"max=255"`
+}
+
+// CreateTemplate 创建模板
+// @Summary 创建模板
+// @Description 创建一条新的自定义通知模板，模板标识符（Key）不可重复，需要管理员权限
+// @Tags admin
+// @Accept json
+// @Produce json
+// @Security SessionCookie
+// @Param request body template.CreateTemplateRequest true "创建请求参数"
+// @Success 200 {object} util.ResponseAny{data=string} "创建成功"
+// @Failure 400 {object} util.ResponseAny "参数错误或模板标识符已存在"
+// @Failure 401 {object} util.ResponseAny "未登录"
+// @Failure 403 {object} util.ResponseAny "无管理员权限"
+// @Failure 500 {object} util.ResponseAny "内部错误"
+// @Router /api/v1/admin/templates [post]
+func CreateTemplate(c *gin.Context) {
+	var req CreateTemplateRequest
+	if err := c.ShouldBindJSON(&req); err != nil {
+		c.JSON(http.StatusBadRequest, util.Err(err.Error()))
+		return
+	}
+
+	// 检查模板 Key 是否已存在
+	var existing model.Template
+	if err := db.DB(c.Request.Context()).Where("key = ?", req.Key).First(&existing).Error; err == nil {
+		c.JSON(http.StatusBadRequest, util.Err(TemplateKeyExists))
+		return
+	} else if !errors.Is(err, gorm.ErrRecordNotFound) {
+		c.JSON(http.StatusInternalServerError, util.Err(err.Error()))
+		return
+	}
+
+	tmpl := model.Template{
+		Key:         req.Key,
+		Name:        req.Name,
+		Type:        req.Type,
+		Subject:     req.Subject,
+		Content:     req.Content,
+		Description: req.Description,
+		IsSystem:    false,
+	}
+
+	if err := tmpl.Validate(); err != nil {
+		c.JSON(http.StatusBadRequest, util.Err(err.Error()))
+		return
+	}
+
+	if err := db.DB(c.Request.Context()).Create(&tmpl).Error; err != nil {
+		c.JSON(http.StatusInternalServerError, util.Err(err.Error()))
+		return
+	}
+
+	c.JSON(http.StatusOK, util.OK(tmpl))
+}
+
+// ListTemplates 获取模板列表
+// @Summary 获取模板列表
+// @Description 返回所有通知模板列表，需要管理员权限
+// @Tags admin
+// @Produce json
+// @Security SessionCookie
+// @Success 200 {object} util.ResponseAny{data=[]model.Template} "模板列表"
+// @Failure 401 {object} util.ResponseAny "未登录"
+// @Failure 403 {object} util.ResponseAny "无管理员权限"
+// @Failure 500 {object} util.ResponseAny "内部错误"
+// @Router /api/v1/admin/templates [get]
+func ListTemplates(c *gin.Context) {
+	var templates []model.Template
+	if err := db.DB(c.Request.Context()).Order("is_system DESC, created_at DESC").Find(&templates).Error; err != nil {
+		c.JSON(http.StatusInternalServerError, util.Err(err.Error()))
+		return
+	}
+
+	c.JSON(http.StatusOK, util.OK(templates))
+}
+
+// GetTemplate 获取单个模板
+// @Summary 获取单个模板
+// @Description 根据模板标识符获取对应的模板详情，需要管理员权限
+// @Tags admin
+// @Produce json
+// @Security SessionCookie
+// @Param key path string true "模板标识符"
+// @Success 200 {object} util.ResponseAny{data=model.Template} "模板详情"
+// @Failure 401 {object} util.ResponseAny "未登录"
+// @Failure 403 {object} util.ResponseAny "无管理员权限"
+// @Failure 404 {object} util.ResponseAny "模板不存在"
+// @Failure 500 {object} util.ResponseAny "内部错误"
+// @Router /api/v1/admin/templates/{key} [get]
+func GetTemplate(c *gin.Context) {
+	var tmpl model.Template
+	if err := db.DB(c.Request.Context()).Where("key = ?", c.Param("key")).First(&tmpl).Error; err != nil {
+		if errors.Is(err, gorm.ErrRecordNotFound) {
+			c.JSON(http.StatusNotFound, util.Err(TemplateNotFound))
+		} else {
+			c.JSON(http.StatusInternalServerError, util.Err(err.Error()))
+		}
+		return
+	}
+
+	c.JSON(http.StatusOK, util.OK(tmpl))
+}
+
+// UpdateTemplate 更新模板
+// @Summary 更新模板
+// @Description 根据模板标识符更新对应的模板内容，需要管理员权限
+// @Tags admin
+// @Accept json
+// @Produce json
+// @Security SessionCookie
+// @Param key path string true "模板标识符"
+// @Param request body template.UpdateTemplateRequest true "更新请求参数"
+// @Success 200 {object} util.ResponseAny{data=model.Template} "更新成功"
+// @Failure 400 {object} util.ResponseAny "参数错误"
+// @Failure 401 {object} util.ResponseAny "未登录"
+// @Failure 403 {object} util.ResponseAny "无管理员权限"
+// @Failure 404 {object} util.ResponseAny "模板不存在"
+// @Failure 500 {object} util.ResponseAny "内部错误"
+// @Router /api/v1/admin/templates/{key} [put]
+func UpdateTemplate(c *gin.Context) {
+	var req UpdateTemplateRequest
+	if err := c.ShouldBindJSON(&req); err != nil {
+		c.JSON(http.StatusBadRequest, util.Err(err.Error()))
+		return
+	}
+
+	key := c.Param("key")
+
+	// 检查模板是否存在
+	var tmpl model.Template
+	if err := db.DB(c.Request.Context()).Where("key = ?", key).First(&tmpl).Error; err != nil {
+		if errors.Is(err, gorm.ErrRecordNotFound) {
+			c.JSON(http.StatusNotFound, util.Err(TemplateNotFound))
+		} else {
+			c.JSON(http.StatusInternalServerError, util.Err(err.Error()))
+		}
+		return
+	}
+
+	tmpl.Name = req.Name
+	tmpl.Type = req.Type
+	tmpl.Subject = req.Subject
+	tmpl.Content = req.Content
+	tmpl.Description = req.Description
+
+	if err := tmpl.Validate(); err != nil {
+		c.JSON(http.StatusBadRequest, util.Err(err.Error()))
+		return
+	}
+
+	if err := db.DB(c.Request.Context()).Save(&tmpl).Error; err != nil {
+		c.JSON(http.StatusInternalServerError, util.Err(err.Error()))
+		return
+	}
+
+	c.JSON(http.StatusOK, util.OK(tmpl))
+}
+
+// DeleteTemplate 删除模板
+// @Summary 删除模板
+// @Description 根据模板标识符删除对应模板，系统预置模板不可删除，需要管理员权限
+// @Tags admin
+// @Produce json
+// @Security SessionCookie
+// @Param key path string true "模板标识符"
+// @Success 200 {object} util.ResponseAny{data=string} "删除成功"
+// @Failure 400 {object} util.ResponseAny "不可删除系统模板"
+// @Failure 401 {object} util.ResponseAny "未登录"
+// @Failure 403 {object} util.ResponseAny "无管理员权限"
+// @Failure 404 {object} util.ResponseAny "模板不存在"
+// @Failure 500 {object} util.ResponseAny "内部错误"
+// @Router /api/v1/admin/templates/{key} [delete]
+func DeleteTemplate(c *gin.Context) {
+	key := c.Param("key")
+
+	// 检查模板是否存在
+	var tmpl model.Template
+	if err := db.DB(c.Request.Context()).Where("key = ?", key).First(&tmpl).Error; err != nil {
+		if errors.Is(err, gorm.ErrRecordNotFound) {
+			c.JSON(http.StatusNotFound, util.Err(TemplateNotFound))
+		} else {
+			c.JSON(http.StatusInternalServerError, util.Err(err.Error()))
+		}
+		return
+	}
+
+	// 限制系统模板删除
+	if tmpl.IsSystem {
+		c.JSON(http.StatusBadRequest, util.Err(SystemTemplateCannotDelete))
+		return
+	}
+
+	if err := db.DB(c.Request.Context()).Delete(&tmpl).Error; err != nil {
+		c.JSON(http.StatusInternalServerError, util.Err(err.Error()))
+		return
+	}
+
+	c.JSON(http.StatusOK, util.OKNil())
+}

internal/apps/admin/template/routers_test.go

@@ -0,0 +1,255 @@
+/*
+Copyright 2026 Arctel.net
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+package template
+
+import (
+	"bytes"
+	"encoding/json"
+	"net/http"
+	"net/http/httptest"
+	"testing"
+
+	"github.com/Rain-kl/Wavelet/internal/apps/oauth"
+	"github.com/Rain-kl/Wavelet/internal/model"
+	"github.com/Rain-kl/Wavelet/internal/testhelper"
+	"github.com/Rain-kl/Wavelet/internal/util"
+	"github.com/gin-gonic/gin"
+)
+
+func setupTestRouter(authUser *model.User) *gin.Engine {
+	gin.SetMode(gin.TestMode)
+	r := gin.New()
+	adminGroup := r.Group("/api/v1/admin")
+
+	// Mock authentication middleware
+	adminGroup.Use(func(c *gin.Context) {
+		if authUser != nil {
+			util.SetToContext(c, oauth.UserObjKey, authUser)
+		}
+		c.Next()
+	})
+
+	adminGroup.GET("/templates", ListTemplates)
+	adminGroup.POST("/templates", CreateTemplate)
+
+	templateRouter := adminGroup.Group("/templates/:key")
+	{
+		templateRouter.GET("", GetTemplate)
+		templateRouter.PUT("", UpdateTemplate)
+		templateRouter.DELETE("", DeleteTemplate)
+	}
+
+	return r
+}
+
+func TestCreateTemplate(t *testing.T) {
+	dbConn, _, cleanup := testhelper.SetupTestEnvironment(t)
+	defer cleanup()
+
+	adminUser := &model.User{ID: 1001, Username: "admin", IsAdmin: true}
+	router := setupTestRouter(adminUser)
+
+	t.Run("create successfully", func(t *testing.T) {
+		payload := CreateTemplateRequest{
+			Key:         "test_template",
+			Name:        "Test Template",
+			Type:        "email",
+			Subject:     "Test Subject",
+			Content:     "Hello {{.Name}}",
+			Description: "Test Desc",
+		}
+		body, _ := json.Marshal(payload)
+		req, _ := http.NewRequest("POST", "/api/v1/admin/templates", bytes.NewBuffer(body))
+		req.Header.Set("Content-Type", "application/json")
+		w := httptest.NewRecorder()
+		router.ServeHTTP(w, req)
+
+		if w.Code != http.StatusOK {
+			t.Fatalf("expected 200 OK, got %d. Body: %s", w.Code, w.Body.String())
+		}
+
+		var tmpl model.Template
+		err := dbConn.Where("key = ?", "test_template").First(&tmpl).Error
+		if err != nil {
+			t.Fatalf("failed to find template in DB: %v", err)
+		}
+		if tmpl.Name != "Test Template" {
+			t.Errorf("expected Name 'Test Template', got '%s'", tmpl.Name)
+		}
+	})
+
+	t.Run("create duplicate key error", func(t *testing.T) {
+		payload := CreateTemplateRequest{
+			Key:         "test_template",
+			Name:        "Another Name",
+			Type:        "email",
+			Subject:     "Another Subject",
+			Content:     "Hello",
+			Description: "desc",
+		}
+		body, _ := json.Marshal(payload)
+		req, _ := http.NewRequest("POST", "/api/v1/admin/templates", bytes.NewBuffer(body))
+		req.Header.Set("Content-Type", "application/json")
+		w := httptest.NewRecorder()
+		router.ServeHTTP(w, req)
+
+		if w.Code != http.StatusBadRequest {
+			t.Errorf("expected 400 Bad Request on duplicate key, got %d", w.Code)
+		}
+	})
+}
+
+func TestListTemplates(t *testing.T) {
+	dbConn, _, cleanup := testhelper.SetupTestEnvironment(t)
+	defer cleanup()
+
+	// Seed system templates manually for testing
+	t1 := model.Template{Key: "login_email", Name: "Login Code", Type: "email", Content: "code {{.Code}}", IsSystem: true}
+	t2 := model.Template{Key: "register_email", Name: "Register Code", Type: "email", Content: "code {{.Code}}", IsSystem: true}
+	dbConn.Create(&t1)
+	dbConn.Create(&t2)
+
+	adminUser := &model.User{ID: 1001, Username: "admin", IsAdmin: true}
+	router := setupTestRouter(adminUser)
+
+	t.Run("list templates", func(t *testing.T) {
+		req, _ := http.NewRequest("GET", "/api/v1/admin/templates", nil)
+		w := httptest.NewRecorder()
+		router.ServeHTTP(w, req)
+
+		if w.Code != http.StatusOK {
+			t.Fatalf("expected 200 OK, got %d", w.Code)
+		}
+
+		var resp util.ResponseAny
+		json.Unmarshal(w.Body.Bytes(), &resp)
+
+		dataBytes, _ := json.Marshal(resp.Data)
+		var templates []model.Template
+		json.Unmarshal(dataBytes, &templates)
+
+		if len(templates) != 2 {
+			t.Errorf("expected 2 templates, got %d", len(templates))
+		}
+	})
+}
+
+func TestGetTemplate(t *testing.T) {
+	dbConn, _, cleanup := testhelper.SetupTestEnvironment(t)
+	defer cleanup()
+
+	t1 := model.Template{Key: "login_email", Name: "Login Code", Type: "email", Content: "code {{.Code}}", IsSystem: true}
+	dbConn.Create(&t1)
+
+	adminUser := &model.User{ID: 1001, Username: "admin", IsAdmin: true}
+	router := setupTestRouter(adminUser)
+
+	t.Run("get existing", func(t *testing.T) {
+		req, _ := http.NewRequest("GET", "/api/v1/admin/templates/login_email", nil)
+		w := httptest.NewRecorder()
+		router.ServeHTTP(w, req)
+
+		if w.Code != http.StatusOK {
+			t.Errorf("expected 200 OK, got %d", w.Code)
+		}
+	})
+
+	t.Run("get non-existent", func(t *testing.T) {
+		req, _ := http.NewRequest("GET", "/api/v1/admin/templates/non_existent", nil)
+		w := httptest.NewRecorder()
+		router.ServeHTTP(w, req)
+
+		if w.Code != http.StatusNotFound {
+			t.Errorf("expected 404 Not Found, got %d", w.Code)
+		}
+	})
+}
+
+func TestUpdateTemplate(t *testing.T) {
+	dbConn, _, cleanup := testhelper.SetupTestEnvironment(t)
+	defer cleanup()
+
+	t1 := model.Template{Key: "login_email", Name: "Login Code", Type: "email", Content: "code {{.Code}}", IsSystem: true}
+	dbConn.Create(&t1)
+
+	adminUser := &model.User{ID: 1001, Username: "admin", IsAdmin: true}
+	router := setupTestRouter(adminUser)
+
+	t.Run("update successfully", func(t *testing.T) {
+		payload := UpdateTemplateRequest{
+			Name:        "Updated Login Code",
+			Type:        "email",
+			Subject:     "New Subject",
+			Content:     "new code {{.Code}}",
+			Description: "new desc",
+		}
+		body, _ := json.Marshal(payload)
+		req, _ := http.NewRequest("PUT", "/api/v1/admin/templates/login_email", bytes.NewBuffer(body))
+		req.Header.Set("Content-Type", "application/json")
+		w := httptest.NewRecorder()
+		router.ServeHTTP(w, req)
+
+		if w.Code != http.StatusOK {
+			t.Fatalf("expected 200 OK, got %d. Body: %s", w.Code, w.Body.String())
+		}
+
+		var tmpl model.Template
+		dbConn.Where("key = ?", "login_email").First(&tmpl)
+		if tmpl.Name != "Updated Login Code" || tmpl.Subject != "New Subject" {
+			t.Errorf("database values not updated: %+v", tmpl)
+		}
+	})
+}
+
+func TestDeleteTemplate(t *testing.T) {
+	dbConn, _, cleanup := testhelper.SetupTestEnvironment(t)
+	defer cleanup()
+
+	t1 := model.Template{Key: "login_email", Name: "Login Code", Type: "email", Content: "code {{.Code}}", IsSystem: true}
+	t2 := model.Template{Key: "custom_tmpl", Name: "Custom", Type: "email", Content: "hi", IsSystem: false}
+	dbConn.Create(&t1)
+	dbConn.Create(&t2)
+
+	adminUser := &model.User{ID: 1001, Username: "admin", IsAdmin: true}
+	router := setupTestRouter(adminUser)
+
+	t.Run("delete system template should fail", func(t *testing.T) {
+		req, _ := http.NewRequest("DELETE", "/api/v1/admin/templates/login_email", nil)
+		w := httptest.NewRecorder()
+		router.ServeHTTP(w, req)
+
+		if w.Code != http.StatusBadRequest {
+			t.Errorf("expected 400 Bad Request when deleting system template, got %d", w.Code)
+		}
+	})
+
+	t.Run("delete custom template should succeed", func(t *testing.T) {
+		req, _ := http.NewRequest("DELETE", "/api/v1/admin/templates/custom_tmpl", nil)
+		w := httptest.NewRecorder()
+		router.ServeHTTP(w, req)
+
+		if w.Code != http.StatusOK {
+			t.Fatalf("expected 200 OK, got %d", w.Code)
+		}
+
+		var count int64
+		dbConn.Model(&model.Template{}).Where("key = ?", "custom_tmpl").Count(&count)
+		if count != 0 {
+			t.Error("custom template was not deleted from DB")
+		}
+	})
+}

internal/apps/user/controllers.go

@@ -180,11 +180,20 @@ func Login(c *gin.Context) {
 				// 存冷却，60秒有效
 				_ = db.SetJSON(ctx, cooldownKey, "1", 60*time.Second)
 
+				// 使用模板管理获取并渲染邮件标题和正文
+				emailSubject, emailBody := model.RenderTemplate(
+					ctx,
+					"login_email",
+					map[string]any{"Code": code},
+					"Wavelet 登录验证码",
+					fmt.Sprintf("<h3>Wavelet 登录验证</h3><p>您的登录验证码为：<strong>%s</strong>，5分钟内有效，请勿将验证码泄露给他人。</p>", code),
+				)
+
 				// 构建异步邮件发送任务
 				payload := SendEmailPayload{
 					To:      user.Email,
-					Subject: "Wavelet 登录验证码",
-					Body:    fmt.Sprintf("<h3>Wavelet 登录验证</h3><p>您的登录验证码为：<strong>%s</strong>，5分钟内有效，请勿将验证码泄露给他人。</p>", code),
+					Subject: emailSubject,
+					Body:    emailBody,
 				}
 				payloadBytes, _ := json.Marshal(payload)
 				_, err = task.DispatchTask(ctx, task.TaskTypeSendEmail, payloadBytes, "system")
@@ -516,11 +525,20 @@ func SendEmailCode(c *gin.Context) {
 	}
 	_ = db.SetJSON(ctx, cooldownKey, "1", 60*time.Second)
 
+	// 使用模板管理获取并渲染邮件标题和正文
+	emailSubject, emailBody := model.RenderTemplate(
+		ctx,
+		"register_email",
+		map[string]any{"Code": code},
+		"Wavelet 注册验证码",
+		fmt.Sprintf("<h3>Wavelet 注册验证</h3><p>您的注册验证码为：<strong>%s</strong>，5分钟内有效，请勿泄露给他人。</p>", code),
+	)
+
 	// 4. 投递异步邮件发送任务
 	payload := SendEmailPayload{
 		To:      req.Email,
-		Subject: "Wavelet 注册验证码",
-		Body:    fmt.Sprintf("<h3>Wavelet 注册验证</h3><p>您的注册验证码为：<strong>%s</strong>，5分钟内有效，请勿泄露给他人。</p>", code),
+		Subject: emailSubject,
+		Body:    emailBody,
 	}
 	payloadBytes, _ := json.Marshal(payload)
 	_, err = task.DispatchTask(ctx, task.TaskTypeSendEmail, payloadBytes, "system")

internal/db/migrator/migrator.go

@@ -42,6 +42,7 @@ func Migrate() {
 		&model.Upload{},
 		&model.AccessToken{},
 		&model.TaskExecution{},
+		&model.Template{},
 	); err != nil {
 		log.Fatalf("[PostgreSQL] auto migrate failed: %v\n", err)
 	}
@@ -51,6 +52,8 @@ func Migrate() {
 	initSystemConfigs()
 	// 初始化默认管理员用户
 	initDefaultAdmin()
+	// 初始化系统内置模板
+	initTemplates()
 }
 
 // ensureConfigKeyExists ensures a system config key exists in the database
@@ -267,3 +270,55 @@ func initDefaultAdmin() {
 		log.Printf("[PostgreSQL] default admin user created successfully (username: admin, password: 12345678)\n")
 	}
 }
+
+// initTemplates 初始化系统内置模板
+func initTemplates() {
+	tx := db.DB(context.Background())
+	var count int64
+	if err := tx.Model(&model.Template{}).Count(&count).Error; err != nil {
+		log.Printf("[PostgreSQL] failed to check templates table: %v\n", err)
+		return
+	}
+
+	defaultTemplates := []model.Template{
+		{
+			Key:         "login_email",
+			Name:        "登录验证码邮件",
+			Type:        "email",
+			Subject:     "Wavelet 登录验证码",
+			Content:     "<h3>Wavelet 登录验证</h3><p>您的登录验证码为：<strong>{{.Code}}</strong>，5分钟内有效，请勿将验证码泄露给他人。</p>",
+			Description: "用户密码登录时发送的验证码邮件模板，支持变量：{{.Code}}",
+			IsSystem:    true,
+		},
+		{
+			Key:         "register_email",
+			Name:        "注册验证码邮件",
+			Type:        "email",
+			Subject:     "Wavelet 注册验证码",
+			Content:     "<h3>Wavelet 注册验证</h3><p>您的注册验证码为：<strong>{{.Code}}</strong>，5分钟内有效，请勿泄露给他人。</p>",
+			Description: "用户注册时发送的验证码邮件模板，支持变量：{{.Code}}",
+			IsSystem:    true,
+		},
+	}
+
+	if count > 0 {
+		// 确保系统预置模板存在
+		for _, dt := range defaultTemplates {
+			var t model.Template
+			if err := tx.Where("key = ?", dt.Key).First(&t).Error; err != nil {
+				if err := tx.Create(&dt).Error; err != nil {
+					log.Printf("[PostgreSQL] failed to create template key %s: %v\n", dt.Key, err)
+				} else {
+					log.Printf("[PostgreSQL] initialized template key %s\n", dt.Key)
+				}
+			}
+		}
+		return
+	}
+
+	if err := tx.Create(&defaultTemplates).Error; err != nil {
+		log.Printf("[PostgreSQL] failed to create default templates: %v\n", err)
+	} else {
+		log.Printf("[PostgreSQL] initialized %d default templates\n", len(defaultTemplates))
+	}
+}

internal/model/templates.go

@@ -0,0 +1,119 @@
+/*
+Copyright 2026 Arctel.net
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+package model
+
+import (
+	"bytes"
+	"context"
+	"errors"
+	"strings"
+	"text/template"
+	"time"
+
+	"github.com/Rain-kl/Wavelet/internal/db"
+)
+
+type Template struct {
+	ID          uint64    `json:"id" gorm:"primaryKey;autoIncrement"`
+	Key         string    `json:"key" gorm:"uniqueIndex;size:80;not null"`
+	Name        string    `json:"name" gorm:"size:100;not null"`
+	Type        string    `json:"type" gorm:"size:20;not null;default:'email'"`
+	Subject     string    `json:"subject" gorm:"size:255"`
+	Content     string    `json:"content" gorm:"type:text;not null"`
+	Description string    `json:"description" gorm:"size:255"`
+	IsSystem    bool      `json:"is_system" gorm:"index;not null;default:false"`
+	CreatedAt   time.Time `json:"created_at" gorm:"autoCreateTime;index"`
+	UpdatedAt   time.Time `json:"updated_at" gorm:"autoUpdateTime;index"`
+}
+
+func (t *Template) Normalize() {
+	t.Key = strings.TrimSpace(t.Key)
+	t.Name = strings.TrimSpace(t.Name)
+	t.Type = strings.ToLower(strings.TrimSpace(t.Type))
+	t.Subject = strings.TrimSpace(t.Subject)
+	t.Content = strings.TrimSpace(t.Content)
+	t.Description = strings.TrimSpace(t.Description)
+	if t.Type == "" {
+		t.Type = "email"
+	}
+}
+
+func (t *Template) Validate() error {
+	t.Normalize()
+	if t.Key == "" {
+		return errors.New("模板标识符不能为空")
+	}
+	if t.Name == "" {
+		return errors.New("模板名称不能为空")
+	}
+	if t.Content == "" {
+		return errors.New("模板内容不能为空")
+	}
+	return nil
+}
+
+func (t *Template) Render(data any) (string, string, error) {
+	// Render Subject
+	var subject string
+	if t.Subject != "" {
+		tmplSubject, err := template.New(t.Key + "_subject").Parse(t.Subject)
+		if err != nil {
+			return "", "", err
+		}
+		var subBuf bytes.Buffer
+		if err := tmplSubject.Execute(&subBuf, data); err != nil {
+			return "", "", err
+		}
+		subject = subBuf.String()
+	}
+
+	// Render Content
+	tmplContent, err := template.New(t.Key + "_content").Parse(t.Content)
+	if err != nil {
+		return "", "", err
+	}
+	var bodyBuf bytes.Buffer
+	if err := tmplContent.Execute(&bodyBuf, data); err != nil {
+		return "", "", err
+	}
+
+	return subject, bodyBuf.String(), nil
+}
+
+// RenderTemplate 渲染模板的高级包装。如果读取或渲染失败，将使用 fallbackSubject 和 fallbackBody 进行解析和返回。
+func RenderTemplate(ctx context.Context, key string, data any, fallbackSubject, fallbackBody string) (string, string) {
+	var t Template
+	if err := db.DB(ctx).Where("key = ?", key).First(&t).Error; err == nil {
+		subject, body, err := t.Render(data)
+		if err == nil {
+			return subject, body
+		}
+	}
+
+	// 降级使用传入的默认模板内容渲染
+	tFallback := Template{
+		Key:     key + "_fallback",
+		Subject: fallbackSubject,
+		Content: fallbackBody,
+	}
+	subject, body, err := tFallback.Render(data)
+	if err == nil {
+		return subject, body
+	}
+
+	return fallbackSubject, fallbackBody
+}

internal/router/router.go

@@ -33,6 +33,7 @@ import (
 	admin_logs "github.com/Rain-kl/Wavelet/internal/apps/admin/logs"
 	admin_status "github.com/Rain-kl/Wavelet/internal/apps/admin/status"
 	admin_task "github.com/Rain-kl/Wavelet/internal/apps/admin/task"
+	admin_template "github.com/Rain-kl/Wavelet/internal/apps/admin/template"
 	admin_user "github.com/Rain-kl/Wavelet/internal/apps/admin/user"
 	capApp "github.com/Rain-kl/Wavelet/internal/apps/cap"
 	publicconfig "github.com/Rain-kl/Wavelet/internal/apps/config"
@@ -216,6 +217,17 @@ func Serve() {
 					systemConfigRouter.DELETE("", system_config.DeleteSystemConfig)
 				}
 
+				// Templates
+				adminRouter.GET("/templates", admin_template.ListTemplates)
+				adminRouter.POST("/templates", admin_template.CreateTemplate)
+
+				templateRouter := adminRouter.Group("/templates/:key")
+				{
+					templateRouter.GET("", admin_template.GetTemplate)
+					templateRouter.PUT("", admin_template.UpdateTemplate)
+					templateRouter.DELETE("", admin_template.DeleteTemplate)
+				}
+
 				// Auth Sources
 				adminRouter.GET("/auth-sources", admin_auth_source.ListAuthSources)
 				adminRouter.POST("/auth-sources", admin_auth_source.CreateAuthSource)

internal/testhelper/test_helper.go

@@ -48,6 +48,7 @@ func SetupTestEnvironment(t *testing.T) (*gorm.DB, *miniredis.Miniredis, func())
 		&model.SystemConfig{},
 		&model.Upload{},
 		&model.TaskExecution{},
+		&model.Template{},
 	)
 	if err != nil {
 		t.Fatalf("failed to auto migrate tables: %v", err)