Files
OpenFlare/openflare_server/web/features/settings/components/settings-page.tsx
T

2212 lines
85 KiB
TypeScript

'use client';
import { useMutation, useQuery, useQueryClient } from '@tanstack/react-query';
import { useEffect, useMemo, useState } from 'react';
import { EmptyState } from '@/components/feedback/empty-state';
import { ErrorState } from '@/components/feedback/error-state';
import { InlineMessage } from '@/components/feedback/inline-message';
import { LoadingState } from '@/components/feedback/loading-state';
import { AppModal } from '@/components/ui/app-modal';
import { useAuth } from '@/components/providers/auth-provider';
import { PageHeader } from '@/components/layout/page-header';
import { AppCard } from '@/components/ui/app-card';
import { StatusBadge } from '@/components/ui/status-badge';
import {
getOAuthAuthorizeUrl,
sendEmailVerification,
} from '@/features/auth/api/auth';
import { getPublicStatus } from '@/features/auth/api/public';
import {
bindEmail,
cleanupDatabaseObservability,
deleteExternalAccountBinding,
generateAccessToken,
getAuthSources,
getBootstrapToken,
getExternalAccountBindings,
getOptions,
getSettingsProfile,
lookupGeoIP,
rotateBootstrapToken,
updateOptions,
updateSelf,
} from '@/features/settings/api/settings';
import { AuthSourceModal } from '@/features/settings/components/auth-source-modal';
import type {
BootstrapTokenPayload,
DatabaseCleanupResult,
DatabaseCleanupTarget,
GeoIPLookupResult,
OptionItem,
UpdateSelfPayload,
} from '@/features/settings/types';
import {
CodeBlock,
DangerButton,
PrimaryButton,
ResourceField,
ResourceInput,
ResourceSelect,
ResourceTextarea,
SecondaryButton,
ToggleField,
} from '@/features/shared/components/resource-primitives';
import { formatDateTime } from '@/lib/utils/date';
const settingsQueryKey = ['settings', 'options'] as const;
const authSourcesQueryKey = ['settings', 'auth-sources'] as const;
const externalAccountBindingsQueryKey = [
'settings',
'external-accounts',
] as const;
const installerScriptUrl =
'https://raw.githubusercontent.com/Rain-kl/OpenFlare/main/scripts/install-agent.sh';
const defaultSystemFields = {
ServerAddress: '',
PasswordLoginEnabled: true,
PasswordRegisterEnabled: true,
EmailVerificationEnabled: false,
GitHubOAuthEnabled: false,
WeChatAuthEnabled: false,
SMTPServer: '',
SMTPPort: '587',
SMTPAccount: '',
SMTPToken: '',
GitHubClientId: '',
GitHubClientSecret: '',
WeChatServerAddress: '',
WeChatServerToken: '',
WeChatAccountQRCodeImageURL: '',
};
const defaultOperationFields = {
AgentHeartbeatInterval: '10000',
AgentWebsocketUpgradeEnabled: true,
NodeOfflineThreshold: '120000',
AgentUpdateRepo: 'Rain-kl/OpenFlare',
GeoIPProvider: 'ipinfo',
OpenRestyWorkerProcesses: 'auto',
OpenRestyWorkerConnections: '4096',
OpenRestyWorkerRlimitNofile: '65535',
OpenRestyEventsUse: 'epoll',
OpenRestyEventsMultiAcceptEnabled: true,
OpenRestyKeepaliveTimeout: '20',
OpenRestyKeepaliveRequests: '1000',
OpenRestyClientHeaderTimeout: '15',
OpenRestyClientBodyTimeout: '15',
OpenRestySendTimeout: '30',
OpenRestyProxyConnectTimeout: '3',
OpenRestyProxySendTimeout: '60',
OpenRestyProxyReadTimeout: '60',
OpenRestyProxyBufferingEnabled: true,
OpenRestyProxyBuffers: '16 16k',
OpenRestyProxyBufferSize: '8k',
OpenRestyProxyBusyBuffersSize: '64k',
OpenRestyGzipEnabled: true,
OpenRestyGzipMinLength: '1024',
OpenRestyGzipCompLevel: '5',
OpenRestyCacheEnabled: false,
OpenRestyCachePath: '',
OpenRestyCacheLevels: '1:2',
OpenRestyCacheInactive: '30m',
OpenRestyCacheMaxSize: '1g',
OpenRestyCacheKeyTemplate: '$scheme$host$request_uri',
OpenRestyCacheLockEnabled: true,
OpenRestyCacheLockTimeout: '5s',
OpenRestyCacheUseStale:
'error timeout updating http_500 http_502 http_503 http_504',
GlobalApiRateLimitNum: '300',
GlobalApiRateLimitDuration: '180',
GlobalWebRateLimitNum: '300',
GlobalWebRateLimitDuration: '180',
UploadRateLimitNum: '50',
UploadRateLimitDuration: '60',
DownloadRateLimitNum: '50',
DownloadRateLimitDuration: '60',
CriticalRateLimitNum: '100',
CriticalRateLimitDuration: '1200',
ServerAddress: '',
};
const defaultOtherFields = {
Notice: '',
SystemName: '',
HomePageLink: '',
About: '',
Footer: '',
};
const defaultDatabaseFields = {
DatabaseAutoCleanupEnabled: false,
DatabaseAutoCleanupRetentionDays: '30',
};
const defaultProfileFields: UpdateSelfPayload = {
username: '',
display_name: '',
password: '',
};
type FeedbackState = {
tone: 'info' | 'success' | 'danger';
message: string;
};
type CleanupModalState = {
target: DatabaseCleanupTarget;
label: string;
};
type SettingsTab = 'personal' | 'operation' | 'database' | 'system' | 'other';
function getErrorMessage(error: unknown) {
return error instanceof Error ? error.message : '请求失败,请稍后重试。';
}
function optionsToMap(options: OptionItem[] | undefined) {
return (options ?? []).reduce<Record<string, string>>(
(accumulator, option) => {
accumulator[option.key] = option.value;
return accumulator;
},
{},
);
}
function toBoolean(value: string | undefined, fallback: boolean) {
if (value === undefined) {
return fallback;
}
return value === 'true';
}
function normalizeServerUrl(value: string) {
return value.trim().replace(/\/+$/, '');
}
function getBrowserOrigin() {
if (typeof window === 'undefined') {
return '';
}
return normalizeServerUrl(window.location.origin);
}
function formatDurationLabel(value: string) {
const milliseconds = Number.parseInt(value, 10);
if (Number.isNaN(milliseconds)) {
return value;
}
if (milliseconds >= 60000) {
return `${milliseconds / 60000} 分钟`;
}
return `${milliseconds / 1000} 秒`;
}
function formatSecondsLabel(value: string) {
const seconds = Number.parseInt(value, 10);
if (Number.isNaN(seconds)) {
return value;
}
if (seconds >= 3600 && seconds % 3600 === 0) {
return `${seconds / 3600} 小时`;
}
if (seconds >= 60 && seconds % 60 === 0) {
return `${seconds / 60} 分钟`;
}
return `${seconds} 秒`;
}
function buildDiscoveryCommand(serverUrl: string, discoveryToken: string) {
return [
`curl -fsSL ${installerScriptUrl} | bash -s -- \\`,
` --server-url ${normalizeServerUrl(serverUrl)} \\`,
` --discovery-token ${discoveryToken}`,
].join('\n');
}
async function copyToClipboard(value: string) {
await navigator.clipboard.writeText(value);
}
export function SettingsPage() {
const queryClient = useQueryClient();
const { refreshUser, user } = useAuth();
const [activeTab, setActiveTab] = useState<SettingsTab>('personal');
const [feedback, setFeedback] = useState<FeedbackState | null>(null);
const [busyKey, setBusyKey] = useState<string | null>(null);
const [profileFields, setProfileFields] = useState(defaultProfileFields);
const [systemFields, setSystemFields] = useState(defaultSystemFields);
const [operationFields, setOperationFields] = useState(
defaultOperationFields,
);
const [otherFields, setOtherFields] = useState(defaultOtherFields);
const [databaseFields, setDatabaseFields] = useState(defaultDatabaseFields);
const [accessToken, setAccessToken] = useState('');
const [emailAddress, setEmailAddress] = useState('');
const [emailCode, setEmailCode] = useState('');
const [authSourceModalOpen, setAuthSourceModalOpen] = useState(false);
const [geoIPTestIP, setGeoIPTestIP] = useState('8.8.8.8');
const [cleanupModalState, setCleanupModalState] =
useState<CleanupModalState | null>(null);
const [cleanupRetentionDays, setCleanupRetentionDays] = useState('');
const isRoot = (user?.role ?? 0) >= 100;
const publicStatusQuery = useQuery({
queryKey: ['public-status'],
queryFn: getPublicStatus,
});
const profileQuery = useQuery({
queryKey: ['settings', 'profile'],
queryFn: getSettingsProfile,
});
const externalAccountsQuery = useQuery({
queryKey: externalAccountBindingsQueryKey,
queryFn: getExternalAccountBindings,
});
const optionsQuery = useQuery({
queryKey: settingsQueryKey,
queryFn: getOptions,
enabled: isRoot,
});
const authSourcesQuery = useQuery({
queryKey: authSourcesQueryKey,
queryFn: getAuthSources,
enabled: isRoot,
});
const bootstrapQuery = useQuery({
queryKey: ['settings', 'bootstrap-token'],
queryFn: getBootstrapToken,
enabled: isRoot,
});
useEffect(() => {
if (profileQuery.data) {
setProfileFields({
username: profileQuery.data.username,
display_name: profileQuery.data.display_name || '',
password: '',
});
setEmailAddress(profileQuery.data.email || '');
}
}, [profileQuery.data]);
useEffect(() => {
const publicStatus = publicStatusQuery.data;
if (!publicStatus) {
return;
}
const resolvedServerAddress =
publicStatus.server_address || getBrowserOrigin();
setSystemFields((previous) => ({
...previous,
ServerAddress: resolvedServerAddress || previous.ServerAddress,
GitHubClientId: publicStatus.github_client_id || previous.GitHubClientId,
WeChatAccountQRCodeImageURL:
publicStatus.wechat_qrcode || previous.WeChatAccountQRCodeImageURL,
}));
setOtherFields((previous) => ({
...previous,
SystemName: publicStatus.system_name || previous.SystemName,
HomePageLink: publicStatus.home_page_link || previous.HomePageLink,
Footer: publicStatus.footer_html || previous.Footer,
}));
setOperationFields((previous) => ({
...previous,
ServerAddress: resolvedServerAddress || previous.ServerAddress,
}));
}, [publicStatusQuery.data]);
useEffect(() => {
if (!optionsQuery.data) {
return;
}
const optionMap = optionsToMap(optionsQuery.data);
const resolvedServerAddress =
optionMap.ServerAddress ||
publicStatusQuery.data?.server_address ||
getBrowserOrigin();
setSystemFields({
ServerAddress: resolvedServerAddress,
PasswordLoginEnabled: toBoolean(optionMap.PasswordLoginEnabled, true),
PasswordRegisterEnabled: toBoolean(
optionMap.PasswordRegisterEnabled,
true,
),
EmailVerificationEnabled: toBoolean(
optionMap.EmailVerificationEnabled,
false,
),
GitHubOAuthEnabled: toBoolean(optionMap.GitHubOAuthEnabled, false),
WeChatAuthEnabled: toBoolean(optionMap.WeChatAuthEnabled, false),
SMTPServer: optionMap.SMTPServer ?? '',
SMTPPort: optionMap.SMTPPort ?? '587',
SMTPAccount: optionMap.SMTPAccount ?? '',
SMTPToken: '',
GitHubClientId: optionMap.GitHubClientId ?? '',
GitHubClientSecret: '',
WeChatServerAddress: optionMap.WeChatServerAddress ?? '',
WeChatServerToken: '',
WeChatAccountQRCodeImageURL: optionMap.WeChatAccountQRCodeImageURL ?? '',
});
setOperationFields({
AgentHeartbeatInterval: optionMap.AgentHeartbeatInterval ?? '10000',
AgentWebsocketUpgradeEnabled: toBoolean(
optionMap.AgentWebsocketUpgradeEnabled,
true,
),
NodeOfflineThreshold: optionMap.NodeOfflineThreshold ?? '120000',
AgentUpdateRepo: optionMap.AgentUpdateRepo ?? 'Rain-kl/OpenFlare',
GeoIPProvider: optionMap.GeoIPProvider ?? 'ipinfo',
OpenRestyWorkerProcesses: optionMap.OpenRestyWorkerProcesses ?? 'auto',
OpenRestyWorkerConnections:
optionMap.OpenRestyWorkerConnections ?? '4096',
OpenRestyWorkerRlimitNofile:
optionMap.OpenRestyWorkerRlimitNofile ?? '65535',
OpenRestyEventsUse: optionMap.OpenRestyEventsUse ?? 'epoll',
OpenRestyEventsMultiAcceptEnabled: toBoolean(
optionMap.OpenRestyEventsMultiAcceptEnabled,
true,
),
OpenRestyKeepaliveTimeout: optionMap.OpenRestyKeepaliveTimeout ?? '20',
OpenRestyKeepaliveRequests:
optionMap.OpenRestyKeepaliveRequests ?? '1000',
OpenRestyClientHeaderTimeout:
optionMap.OpenRestyClientHeaderTimeout ?? '15',
OpenRestyClientBodyTimeout: optionMap.OpenRestyClientBodyTimeout ?? '15',
OpenRestySendTimeout: optionMap.OpenRestySendTimeout ?? '30',
OpenRestyProxyConnectTimeout:
optionMap.OpenRestyProxyConnectTimeout ?? '3',
OpenRestyProxySendTimeout: optionMap.OpenRestyProxySendTimeout ?? '60',
OpenRestyProxyReadTimeout: optionMap.OpenRestyProxyReadTimeout ?? '60',
OpenRestyProxyBufferingEnabled: toBoolean(
optionMap.OpenRestyProxyBufferingEnabled,
true,
),
OpenRestyProxyBuffers: optionMap.OpenRestyProxyBuffers ?? '16 16k',
OpenRestyProxyBufferSize: optionMap.OpenRestyProxyBufferSize ?? '8k',
OpenRestyProxyBusyBuffersSize:
optionMap.OpenRestyProxyBusyBuffersSize ?? '64k',
OpenRestyGzipEnabled: toBoolean(optionMap.OpenRestyGzipEnabled, true),
OpenRestyGzipMinLength: optionMap.OpenRestyGzipMinLength ?? '1024',
OpenRestyGzipCompLevel: optionMap.OpenRestyGzipCompLevel ?? '5',
OpenRestyCacheEnabled: toBoolean(optionMap.OpenRestyCacheEnabled, false),
OpenRestyCachePath: optionMap.OpenRestyCachePath ?? '',
OpenRestyCacheLevels: optionMap.OpenRestyCacheLevels ?? '1:2',
OpenRestyCacheInactive: optionMap.OpenRestyCacheInactive ?? '30m',
OpenRestyCacheMaxSize: optionMap.OpenRestyCacheMaxSize ?? '1g',
OpenRestyCacheKeyTemplate:
optionMap.OpenRestyCacheKeyTemplate ?? '$scheme$host$request_uri',
OpenRestyCacheLockEnabled: toBoolean(
optionMap.OpenRestyCacheLockEnabled,
true,
),
OpenRestyCacheLockTimeout: optionMap.OpenRestyCacheLockTimeout ?? '5s',
OpenRestyCacheUseStale:
optionMap.OpenRestyCacheUseStale ??
'error timeout updating http_500 http_502 http_503 http_504',
GlobalApiRateLimitNum: optionMap.GlobalApiRateLimitNum ?? '300',
GlobalApiRateLimitDuration: optionMap.GlobalApiRateLimitDuration ?? '180',
GlobalWebRateLimitNum: optionMap.GlobalWebRateLimitNum ?? '300',
GlobalWebRateLimitDuration: optionMap.GlobalWebRateLimitDuration ?? '180',
UploadRateLimitNum: optionMap.UploadRateLimitNum ?? '50',
UploadRateLimitDuration: optionMap.UploadRateLimitDuration ?? '60',
DownloadRateLimitNum: optionMap.DownloadRateLimitNum ?? '50',
DownloadRateLimitDuration: optionMap.DownloadRateLimitDuration ?? '60',
CriticalRateLimitNum: optionMap.CriticalRateLimitNum ?? '100',
CriticalRateLimitDuration: optionMap.CriticalRateLimitDuration ?? '1200',
ServerAddress: resolvedServerAddress,
});
setOtherFields({
Notice: optionMap.Notice ?? '',
SystemName: optionMap.SystemName ?? '',
HomePageLink: optionMap.HomePageLink ?? '',
About: optionMap.About ?? '',
Footer: optionMap.Footer ?? '',
});
setDatabaseFields({
DatabaseAutoCleanupEnabled: toBoolean(
optionMap.DatabaseAutoCleanupEnabled,
false,
),
DatabaseAutoCleanupRetentionDays:
optionMap.DatabaseAutoCleanupRetentionDays ?? '30',
});
}, [optionsQuery.data, publicStatusQuery.data?.server_address]);
const rotateTokenMutation = useMutation({
mutationFn: rotateBootstrapToken,
onSuccess: async (data: BootstrapTokenPayload) => {
setFeedback({ tone: 'success', message: 'Discovery Token 已重新生成。' });
await queryClient.invalidateQueries({
queryKey: ['settings', 'bootstrap-token'],
});
if (data.discovery_token) {
try {
await copyToClipboard(data.discovery_token);
} catch {
// ignore clipboard errors
}
}
},
onError: (error) => {
setFeedback({ tone: 'danger', message: getErrorMessage(error) });
},
});
const accessTokenMutation = useMutation({
mutationFn: generateAccessToken,
onSuccess: (token) => {
setAccessToken(token);
setFeedback({
tone: 'success',
message: '访问令牌已重置,并已在当前页面展示。',
});
},
onError: (error) => {
setFeedback({ tone: 'danger', message: getErrorMessage(error) });
},
});
const geoIPLookupMutation = useMutation({
mutationFn: ({ provider, ip }: { provider: string; ip: string }) =>
lookupGeoIP(provider, ip),
});
const databaseCleanupMutation = useMutation({
mutationFn: cleanupDatabaseObservability,
onSuccess: (result: DatabaseCleanupResult) => {
setCleanupModalState(null);
setCleanupRetentionDays('');
setFeedback({
tone: 'success',
message: result.delete_all
? `已清空${result.target_label}数据,共删除 ${result.deleted_count} 条。`
: `已清理${result.target_label}中超出保留期的数据,共删除 ${result.deleted_count} 条。`,
});
},
onError: (error) => {
setFeedback({ tone: 'danger', message: getErrorMessage(error) });
},
});
const discoveryToken = bootstrapQuery.data?.discovery_token ?? '';
const discoveryCommand =
isRoot && operationFields.ServerAddress && discoveryToken
? buildDiscoveryCommand(operationFields.ServerAddress, discoveryToken)
: '';
const tabs = useMemo(
() => [
{
key: 'personal' as const,
label: '个人设置',
description: '更新个人资料、绑定账号与访问令牌。',
},
...(isRoot
? [
{
key: 'operation' as const,
label: '运维设置',
description: 'Agent 参数、Discovery Token 与部署命令。',
},
{
key: 'system' as const,
label: '系统设置',
description: '登录注册、SMTP、认证源、限流与风控开关。',
},
{
key: 'database' as const,
label: '数据库',
description: '观测数据清理与每日自动保留策略。',
},
{
key: 'other' as const,
label: '其他设置',
description: '公告、关于与品牌信息。',
},
]
: []),
],
[isRoot],
);
const runBusyAction = async (key: string, action: () => Promise<void>) => {
setBusyKey(key);
setFeedback(null);
try {
await action();
} catch (error) {
setFeedback({ tone: 'danger', message: getErrorMessage(error) });
} finally {
setBusyKey(null);
}
};
const saveOptionEntries = async (
entries: Array<[string, string]>,
successMessage: string,
) => {
await updateOptions(entries.map(([key, value]) => ({ key, value })));
await queryClient.invalidateQueries({ queryKey: settingsQueryKey });
await queryClient.invalidateQueries({ queryKey: ['public-status'] });
setFeedback({ tone: 'success', message: successMessage });
};
const handleGeoIPLookup = () => {
geoIPLookupMutation.reset();
geoIPLookupMutation.mutate({
provider: operationFields.GeoIPProvider,
ip: geoIPTestIP.trim(),
});
};
const geoIPLookupResult: GeoIPLookupResult | undefined =
geoIPLookupMutation.data;
const handleProfileSave = () => {
void runBusyAction('profile', async () => {
await updateSelf({
username: profileFields.username.trim(),
display_name: profileFields.display_name.trim(),
password: profileFields.password,
});
await Promise.all([
queryClient.invalidateQueries({ queryKey: ['settings', 'profile'] }),
refreshUser(),
]);
setProfileFields((previous) => ({ ...previous, password: '' }));
setFeedback({ tone: 'success', message: '个人资料已更新。' });
});
};
const handleEmailVerification = () => {
if (!emailAddress.trim()) {
setFeedback({ tone: 'danger', message: '请输入要绑定的邮箱地址。' });
return;
}
void runBusyAction('email-send', async () => {
await sendEmailVerification(emailAddress.trim());
setFeedback({ tone: 'success', message: '验证码已发送,请检查邮箱。' });
});
};
const handleBindEmail = () => {
if (!emailAddress.trim() || !emailCode.trim()) {
setFeedback({ tone: 'danger', message: '请输入邮箱地址和验证码。' });
return;
}
void runBusyAction('email-bind', async () => {
await bindEmail(emailAddress.trim(), emailCode.trim());
setEmailCode('');
await Promise.all([
queryClient.invalidateQueries({ queryKey: ['settings', 'profile'] }),
refreshUser(),
]);
setFeedback({ tone: 'success', message: '邮箱已绑定。' });
});
};
const handleBindAuthSource = (sourceName: string) => {
void runBusyAction(`auth-source-bind-${sourceName}`, async () => {
const result = await getOAuthAuthorizeUrl(sourceName);
window.location.href = result.authorize_url;
});
};
const handleUnbindAuthSource = (id: number, label: string) => {
if (!window.confirm(`确定解绑「${label}」吗?`)) {
return;
}
void runBusyAction(`auth-source-unbind-${id}`, async () => {
await deleteExternalAccountBinding(id);
await queryClient.invalidateQueries({
queryKey: externalAccountBindingsQueryKey,
});
setFeedback({ tone: 'success', message: '第三方账号已解绑。' });
});
};
const handleToggleOption = (
key: keyof typeof systemFields,
nextValue: boolean,
) => {
setSystemFields((previous) => ({ ...previous, [key]: nextValue }));
void runBusyAction(`toggle-${key}`, async () => {
await saveOptionEntries([[key, String(nextValue)]], '系统开关已更新。');
});
};
const renderTabContent = () => {
if (profileQuery.isLoading || publicStatusQuery.isLoading) {
return <LoadingState />;
}
if (profileQuery.isError) {
return (
<ErrorState
title="个人设置加载失败"
description={getErrorMessage(profileQuery.error)}
/>
);
}
if (publicStatusQuery.isError) {
return (
<ErrorState
title="系统状态加载失败"
description={getErrorMessage(publicStatusQuery.error)}
/>
);
}
if (externalAccountsQuery.isError) {
return (
<ErrorState
title="账号绑定加载失败"
description={getErrorMessage(externalAccountsQuery.error)}
/>
);
}
const publicStatus = publicStatusQuery.data;
const profile = profileQuery.data;
const externalAccounts = externalAccountsQuery.data ?? [];
const externalAccountMap = new Map(
externalAccounts.map((account) => [account.auth_source_name, account]),
);
if (!publicStatus || !profile) {
return (
<EmptyState
title="设置暂不可用"
description="未获取到当前用户或系统状态信息。"
/>
);
}
if (activeTab === 'personal') {
return (
<div className="space-y-6">
<div className="grid gap-6 xl:grid-cols-[1.1fr_0.9fr]">
<AppCard
title="个人资料"
description="可更新用户名、显示名称和密码。留空密码表示保持当前密码不变。"
action={
<PrimaryButton
type="button"
onClick={handleProfileSave}
disabled={busyKey === 'profile'}
>
{busyKey === 'profile' ? '保存中...' : '保存资料'}
</PrimaryButton>
}
>
<div className="space-y-5">
<ResourceField label="用户名">
<ResourceInput
value={profileFields.username}
onChange={(event) =>
setProfileFields((previous) => ({
...previous,
username: event.target.value,
}))
}
placeholder="请输入用户名"
/>
</ResourceField>
<ResourceField label="显示名称">
<ResourceInput
value={profileFields.display_name}
onChange={(event) =>
setProfileFields((previous) => ({
...previous,
display_name: event.target.value,
}))
}
placeholder="请输入显示名称"
/>
</ResourceField>
<ResourceField label="新密码" hint="留空表示不修改密码。">
<ResourceInput
type="password"
value={profileFields.password}
onChange={(event) =>
setProfileFields((previous) => ({
...previous,
password: event.target.value,
}))
}
placeholder="请输入新密码"
/>
</ResourceField>
</div>
</AppCard>
<AppCard
title="访问令牌"
description="重置后会立即生成新的访问令牌,可用于自动化请求。"
action={
<PrimaryButton
type="button"
onClick={() => accessTokenMutation.mutate()}
disabled={accessTokenMutation.isPending}
>
{accessTokenMutation.isPending ? '生成中...' : '重置令牌'}
</PrimaryButton>
}
>
<div className="space-y-4">
<div className="grid gap-4 md:grid-cols-2">
<div className="rounded-2xl border border-[var(--border-default)] bg-[var(--surface-elevated)] px-4 py-4">
<p className="text-xs tracking-[0.2em] text-[var(--foreground-muted)] uppercase">
当前角色
</p>
<div className="mt-2">
<StatusBadge
label={
user?.role === 100
? '超级管理员'
: user?.role === 10
? '管理员'
: '普通用户'
}
variant={
user?.role === 100
? 'warning'
: user?.role === 10
? 'info'
: 'success'
}
/>
</div>
</div>
<div className="rounded-2xl border border-[var(--border-default)] bg-[var(--surface-elevated)] px-4 py-4">
<p className="text-xs tracking-[0.2em] text-[var(--foreground-muted)] uppercase">
已绑定邮箱
</p>
<p className="mt-2 text-sm break-all text-[var(--foreground-primary)]">
{profile.email || '未绑定'}
</p>
</div>
</div>
{accessToken ? (
<div className="space-y-3">
<CodeBlock className="break-all whitespace-pre-wrap">
{accessToken}
</CodeBlock>
<SecondaryButton
type="button"
onClick={() => void copyToClipboard(accessToken)}
>
复制令牌
</SecondaryButton>
</div>
) : (
<EmptyState
title="尚未生成令牌"
description="点击“重置令牌”后,新的访问令牌会显示在这里。"
/>
)}
</div>
</AppCard>
</div>
<AppCard
title="账号绑定"
description="支持绑定已启用的认证源和邮箱地址,用于统一个人身份入口。"
>
<div className="grid gap-6 xl:grid-cols-2">
<div className="space-y-4 rounded-2xl border border-[var(--border-default)] bg-[var(--surface-elevated)] px-4 py-4">
<div className="space-y-1">
<p className="text-base font-semibold text-[var(--foreground-primary)]">
第三方认证源
</p>
<p className="text-sm leading-6 text-[var(--foreground-secondary)]">
登录状态下发起授权会直接绑定到当前账号。
</p>
</div>
<div className="space-y-3">
{(publicStatus.auth_sources ?? []).length > 0 ? (
publicStatus.auth_sources.map((source) => {
const binding = externalAccountMap.get(source.name);
const label = source.display_name || source.name;
return (
<div
key={source.id}
className="rounded-2xl border border-[var(--border-default)] bg-[var(--surface-card)] px-4 py-3"
>
<div className="flex flex-col gap-3 sm:flex-row sm:items-center sm:justify-between">
<div className="min-w-0 space-y-1">
<p className="text-sm font-medium text-[var(--foreground-primary)]">
{label}
</p>
{binding ? (
<>
<p className="text-sm break-all text-[var(--foreground-secondary)]">
已绑定:
{binding.external_username ||
binding.email ||
'第三方账号'}
</p>
{binding.email ? (
<p className="text-xs break-all text-[var(--foreground-muted)]">
邮箱:{binding.email}
</p>
) : null}
<p className="text-xs text-[var(--foreground-muted)]">
绑定时间:
{formatDateTime(binding.created_at)}
</p>
</>
) : (
<p className="text-sm text-[var(--foreground-secondary)]">
未绑定
</p>
)}
</div>
{binding ? (
<DangerButton
type="button"
onClick={() =>
handleUnbindAuthSource(binding.id, label)
}
disabled={
busyKey === `auth-source-unbind-${binding.id}`
}
>
解绑
</DangerButton>
) : (
<PrimaryButton
type="button"
onClick={() =>
handleBindAuthSource(source.name)
}
disabled={
busyKey === `auth-source-bind-${source.name}`
}
>
绑定 {label}
</PrimaryButton>
)}
</div>
</div>
);
})
) : (
<span className="text-sm text-[var(--foreground-secondary)]">
当前未启用认证源。
</span>
)}
</div>
</div>
<div className="space-y-4 rounded-2xl border border-[var(--border-default)] bg-[var(--surface-elevated)] px-4 py-4">
<div className="space-y-1">
<p className="text-base font-semibold text-[var(--foreground-primary)]">
邮箱地址
</p>
<p className="text-sm leading-6 text-[var(--foreground-secondary)]">
当前状态:
{profile.email ? `已绑定 ${profile.email}` : '未绑定'}
</p>
</div>
<div className="space-y-4">
<ResourceField label="邮箱地址">
<ResourceInput
value={emailAddress}
onChange={(event) => setEmailAddress(event.target.value)}
placeholder="请输入邮箱地址"
/>
</ResourceField>
<ResourceField label="验证码">
<ResourceInput
value={emailCode}
onChange={(event) => setEmailCode(event.target.value)}
placeholder="请输入邮箱验证码"
/>
</ResourceField>
<div className="flex flex-wrap gap-2">
<SecondaryButton
type="button"
onClick={handleEmailVerification}
disabled={busyKey === 'email-send'}
>
{busyKey === 'email-send' ? '发送中...' : '发送验证码'}
</SecondaryButton>
<PrimaryButton
type="button"
onClick={handleBindEmail}
disabled={busyKey === 'email-bind'}
>
{busyKey === 'email-bind' ? '绑定中...' : '绑定邮箱'}
</PrimaryButton>
</div>
</div>
</div>
</div>
</AppCard>
</div>
);
}
if (!isRoot) {
return (
<EmptyState
title="权限不足"
description="只有超级管理员可以访问系统级设置。"
/>
);
}
if (optionsQuery.isLoading) {
return <LoadingState />;
}
if (optionsQuery.isError) {
return (
<ErrorState
title="设置项加载失败"
description={getErrorMessage(optionsQuery.error)}
/>
);
}
if (activeTab === 'operation') {
return (
<div className="space-y-6">
<div className="grid gap-6 xl:grid-cols-[1fr_1fr]">
<AppCard
title="Agent 接入设置"
description="运行参数会通过心跳响应下发到 Agent。"
action={
<PrimaryButton
type="button"
onClick={() =>
void runBusyAction('operation-settings', async () => {
const heartbeat = Number.parseInt(
operationFields.AgentHeartbeatInterval,
10,
);
const offline = Number.parseInt(
operationFields.NodeOfflineThreshold,
10,
);
if (Number.isNaN(heartbeat) || heartbeat < 5000) {
throw new Error('心跳间隔不能小于 5000 毫秒。');
}
if (Number.isNaN(offline) || offline < 10000) {
throw new Error('离线阈值不能小于 10000 毫秒。');
}
await saveOptionEntries(
[
['AgentHeartbeatInterval', String(heartbeat)],
[
'AgentWebsocketUpgradeEnabled',
String(
operationFields.AgentWebsocketUpgradeEnabled,
),
],
['NodeOfflineThreshold', String(offline)],
[
'AgentUpdateRepo',
operationFields.AgentUpdateRepo.trim(),
],
['GeoIPProvider', operationFields.GeoIPProvider],
],
'运维设置已保存。',
);
})
}
>
{busyKey === 'operation-settings' ? '保存中...' : '保存设置'}
</PrimaryButton>
}
>
<div className="space-y-6">
<div className="space-y-4">
<div className="space-y-1">
<p className="text-sm font-medium text-[var(--foreground-primary)]">
Agent 运行参数
</p>
<p className="text-sm text-[var(--foreground-muted)]">
修改后会在下个心跳周期同步到节点。
</p>
</div>
<div className="grid gap-5 md:grid-cols-2">
<ResourceField
label={`心跳间隔 (${formatDurationLabel(operationFields.AgentHeartbeatInterval)})`}
>
<ResourceInput
type="number"
value={operationFields.AgentHeartbeatInterval}
onChange={(event) =>
setOperationFields((previous) => ({
...previous,
AgentHeartbeatInterval: event.target.value,
}))
}
/>
</ResourceField>
<ResourceField
label={`离线阈值 (${formatDurationLabel(operationFields.NodeOfflineThreshold)})`}
>
<ResourceInput
type="number"
value={operationFields.NodeOfflineThreshold}
onChange={(event) =>
setOperationFields((previous) => ({
...previous,
NodeOfflineThreshold: event.target.value,
}))
}
/>
</ResourceField>
</div>
<ToggleField
label="开启 WS 连接升级"
description="开启后 Agent 会在 HTTP 心跳成功后尝试升级为 WebSocket,发布配置时可立即收到同步通知。"
checked={operationFields.AgentWebsocketUpgradeEnabled}
onChange={(checked) =>
setOperationFields((previous) => ({
...previous,
AgentWebsocketUpgradeEnabled: checked,
}))
}
/>
</div>
<div className="border-t border-[var(--border-default)] pt-6">
<div className="space-y-1">
<p className="text-sm font-medium text-[var(--foreground-primary)]">
Agent 更新仓库
</p>
<p className="text-sm text-[var(--foreground-muted)]">
上游更新仓库
</p>
</div>
<div className="mt-4">
<ResourceField label="GitHub 仓库">
<ResourceInput
value={operationFields.AgentUpdateRepo}
onChange={(event) =>
setOperationFields((previous) => ({
...previous,
AgentUpdateRepo: event.target.value,
}))
}
placeholder="Rain-kl/OpenFlare"
/>
</ResourceField>
</div>
</div>
<div className="border-t border-[var(--border-default)] pt-6">
<div className="space-y-1">
<p className="text-sm font-medium text-[var(--foreground-primary)]">
IP 归属方式
</p>
<p className="text-sm text-[var(--foreground-muted)]">
控制节点地图等场景使用的 IP
归属解析来源。访客访问记录归属地入库固定使用 MaxMind
mmdb。
</p>
</div>
<div className="mt-4">
<ResourceField
label="归属方式"
hint="disabled 关闭节点归属解析;mmdb 使用本地数据库;其余选项调用外部 GeoIP 服务。"
>
<ResourceSelect
value={operationFields.GeoIPProvider}
onChange={(event) =>
setOperationFields((previous) => ({
...previous,
GeoIPProvider: event.target.value,
}))
}
>
<option value="disabled">关闭</option>
<option value="mmdb">MaxMind mmdb</option>
<option value="ip-api">ip-api.com</option>
<option value="geojs">geojs.io</option>
<option value="ipinfo">ipinfo.io</option>
</ResourceSelect>
</ResourceField>
</div>
<div className="mt-5 rounded-2xl border border-[var(--border-default)] bg-[var(--surface-elevated)] p-5">
<div className="flex flex-col gap-3 lg:flex-row lg:items-end">
<ResourceField label="测试 IP">
<ResourceInput
value={geoIPTestIP}
onChange={(event) =>
setGeoIPTestIP(event.target.value)
}
placeholder="例如 8.8.8.8"
/>
</ResourceField>
<PrimaryButton
type="button"
onClick={handleGeoIPLookup}
disabled={geoIPLookupMutation.isPending}
>
{geoIPLookupMutation.isPending
? '查询中...'
: '查询归属'}
</PrimaryButton>
</div>
<div className="mt-4 space-y-3">
{geoIPLookupMutation.isError ? (
<InlineMessage
tone="danger"
message={getErrorMessage(geoIPLookupMutation.error)}
/>
) : null}
{geoIPLookupResult ? (
<div className="grid gap-4 md:grid-cols-2 xl:grid-cols-4">
<div className="rounded-2xl border border-[var(--border-default)] bg-[var(--surface-base)] px-4 py-4">
<p className="text-xs tracking-[0.2em] text-[var(--foreground-muted)] uppercase">
查询 IP
</p>
<p className="mt-2 text-sm font-semibold text-[var(--foreground-primary)]">
{geoIPLookupResult.ip}
</p>
</div>
<div className="rounded-2xl border border-[var(--border-default)] bg-[var(--surface-base)] px-4 py-4">
<p className="text-xs tracking-[0.2em] text-[var(--foreground-muted)] uppercase">
国家 / 地区
</p>
<p className="mt-2 text-sm font-semibold text-[var(--foreground-primary)]">
{geoIPLookupResult.name || '—'}
</p>
</div>
<div className="rounded-2xl border border-[var(--border-default)] bg-[var(--surface-base)] px-4 py-4">
<p className="text-xs tracking-[0.2em] text-[var(--foreground-muted)] uppercase">
ISO Code
</p>
<div className="mt-2">
<StatusBadge
label={geoIPLookupResult.iso_code || '—'}
variant="info"
/>
</div>
</div>
<div className="rounded-2xl border border-[var(--border-default)] bg-[var(--surface-base)] px-4 py-4">
<p className="text-xs tracking-[0.2em] text-[var(--foreground-muted)] uppercase">
经纬度
</p>
<p className="mt-2 text-sm font-semibold text-[var(--foreground-primary)]">
{geoIPLookupResult.latitude !== undefined &&
geoIPLookupResult.latitude !== null &&
geoIPLookupResult.longitude !== undefined &&
geoIPLookupResult.longitude !== null
? `${geoIPLookupResult.latitude.toFixed(4)}, ${geoIPLookupResult.longitude.toFixed(4)}`
: '—'}
</p>
</div>
</div>
) : null}
</div>
</div>
</div>
</div>
</AppCard>
<AppCard
title="Discovery Token 与部署命令"
description="适用于新节点首次接入。可直接复制一键安装命令。"
action={
<div className="flex flex-wrap gap-2">
<SecondaryButton
type="button"
onClick={() => rotateTokenMutation.mutate()}
disabled={rotateTokenMutation.isPending}
>
{rotateTokenMutation.isPending
? '生成中...'
: '重新生成 Token'}
</SecondaryButton>
{discoveryCommand ? (
<PrimaryButton
type="button"
onClick={() => void copyToClipboard(discoveryCommand)}
>
复制命令
</PrimaryButton>
) : null}
</div>
}
>
{bootstrapQuery.isLoading ? (
<LoadingState />
) : bootstrapQuery.isError ? (
<ErrorState
title="Discovery Token 加载失败"
description={getErrorMessage(bootstrapQuery.error)}
/>
) : (
<div className="space-y-4">
<ResourceField
label="Server URL"
hint="默认使用当前 ServerAddress,可按需改为外部访问地址。"
>
<ResourceInput
value={operationFields.ServerAddress}
onChange={(event) =>
setOperationFields((previous) => ({
...previous,
ServerAddress: event.target.value,
}))
}
/>
</ResourceField>
<div className="rounded-2xl border border-[var(--border-default)] bg-[var(--surface-elevated)] px-4 py-4">
<p className="text-xs tracking-[0.2em] text-[var(--foreground-muted)] uppercase">
Discovery Token
</p>
<p className="mt-2 text-sm break-all text-[var(--foreground-primary)]">
{discoveryToken || '未生成'}
</p>
</div>
<ResourceField
label="一键部署命令"
hint="命令会使用安装脚本自动注册 Agent。"
>
<CodeBlock className="break-all whitespace-pre-wrap">
{discoveryCommand || '请先填写可访问的 Server URL。'}
</CodeBlock>
</ResourceField>
</div>
)}
</AppCard>
<AppCard title="版本与构建信息">
<div className="grid gap-4 md:grid-cols-2">
<div className="rounded-2xl border border-[var(--border-default)] bg-[var(--surface-elevated)] px-4 py-4">
<p className="text-xs tracking-[0.2em] text-[var(--foreground-muted)] uppercase">
服务端版本
</p>
<p className="mt-2 text-sm text-[var(--foreground-primary)]">
{publicStatus.version}
</p>
</div>
<div className="rounded-2xl border border-[var(--border-default)] bg-[var(--surface-elevated)] px-4 py-4">
<p className="text-xs tracking-[0.2em] text-[var(--foreground-muted)] uppercase">
Server 启动时间
</p>
<p className="mt-2 text-sm text-[var(--foreground-primary)]">
{formatDateTime(new Date(publicStatus.start_time * 1000))}
</p>
</div>
<div className="rounded-2xl border border-[var(--border-default)] bg-[var(--surface-elevated)] px-4 py-4">
<p className="text-xs tracking-[0.2em] text-[var(--foreground-muted)] uppercase">
运行模式
</p>
<p className="mt-2 text-sm text-[var(--foreground-primary)]">
静态导出 + Go Server 托管
</p>
</div>
<div className="rounded-2xl border border-[var(--border-default)] bg-[var(--surface-elevated)] px-4 py-4 md:col-span-2">
<p className="text-xs tracking-[0.2em] text-[var(--foreground-muted)] uppercase">
版本入口
</p>
<p className="mt-2 text-sm text-[var(--foreground-primary)]">
点击顶栏“版本”可检查更新、查看 Release
Notes,并直接触发服务端升级。
</p>
</div>
</div>
</AppCard>
</div>
</div>
);
}
if (activeTab === 'database') {
return (
<div className="grid gap-6 xl:grid-cols-2 xl:items-start">
<AppCard
title="自动数据清理"
description="每天凌晨 3 点自动清理超出保留期的观测数据,统一作用于访问日志、性能快照和请求聚合。"
action={
<PrimaryButton
type="button"
onClick={() =>
void runBusyAction('database-auto-cleanup', async () => {
const retentionDays = Number.parseInt(
databaseFields.DatabaseAutoCleanupRetentionDays,
10,
);
if (Number.isNaN(retentionDays) || retentionDays < 1) {
throw new Error('自动清理保留天数至少为 1 天。');
}
await saveOptionEntries(
[
[
'DatabaseAutoCleanupEnabled',
String(databaseFields.DatabaseAutoCleanupEnabled),
],
[
'DatabaseAutoCleanupRetentionDays',
String(retentionDays),
],
],
'数据库自动清理设置已保存。',
);
})
}
disabled={busyKey === 'database-auto-cleanup'}
>
{busyKey === 'database-auto-cleanup'
? '保存中...'
: '保存自动清理'}
</PrimaryButton>
}
>
<div className="rounded-2xl border border-[var(--border-default)] bg-[var(--surface-elevated)] p-5">
<div className="space-y-5">
<ToggleField
label="启用每日自动清理"
description="开启后,服务端每天自动删除保留天数之外的观测数据。"
checked={databaseFields.DatabaseAutoCleanupEnabled}
onChange={(checked) =>
setDatabaseFields((previous) => ({
...previous,
DatabaseAutoCleanupEnabled: checked,
}))
}
/>
<div className="border-t border-[var(--border-default)] pt-5">
<ResourceField
label="自动清理保留天数"
hint="必须至少保留 1 天,服务端不允许配置为 24 小时以内。"
>
<ResourceInput
type="number"
min={1}
value={databaseFields.DatabaseAutoCleanupRetentionDays}
onChange={(event) =>
setDatabaseFields((previous) => ({
...previous,
DatabaseAutoCleanupRetentionDays: event.target.value,
}))
}
placeholder="例如 30"
/>
</ResourceField>
<div className="mt-4 grid gap-4 md:grid-cols-3">
<div className="rounded-2xl border border-[var(--border-default)] bg-[var(--surface-base)] px-4 py-4">
<p className="text-xs tracking-[0.2em] text-[var(--foreground-muted)] uppercase">
触发频率
</p>
<p className="mt-2 text-sm font-semibold text-[var(--foreground-primary)]">
每天一次
</p>
</div>
<div className="rounded-2xl border border-[var(--border-default)] bg-[var(--surface-base)] px-4 py-4">
<p className="text-xs tracking-[0.2em] text-[var(--foreground-muted)] uppercase">
默认执行时间
</p>
<p className="mt-2 text-sm font-semibold text-[var(--foreground-primary)]">
凌晨 3:00
</p>
</div>
<div className="rounded-2xl border border-[var(--border-default)] bg-[var(--surface-base)] px-4 py-4">
<p className="text-xs tracking-[0.2em] text-[var(--foreground-muted)] uppercase">
生效范围
</p>
<p className="mt-2 text-sm font-semibold text-[var(--foreground-primary)]">
三类观测表
</p>
</div>
</div>
</div>
</div>
</div>
</AppCard>
<AppCard
title="数据清理"
description="用于手动清理单类观测数据。保留天数留空时会直接删除该类数据的全部历史记录。"
>
<div className="grid gap-5 xl:grid-cols-3">
{[
{
target: 'node_access_logs' as const,
label: '访问日志',
description:
'清理 node_access_logs,影响访问明细、IP 汇总与相关趋势查询。',
},
{
target: 'node_metric_snapshots' as const,
label: '性能快照',
description:
'清理 node_metric_snapshots,影响节点资源趋势和总览资源统计。',
},
{
target: 'node_request_reports' as const,
label: '请求聚合',
description:
'清理 node_request_reports,影响请求量、错误量与来源聚合展示。',
},
].map((item) => (
<div
key={item.target}
className="rounded-[28px] border border-[var(--border-default)] bg-[var(--surface-elevated)] p-5"
>
<div className="space-y-3">
<div>
<p className="text-lg font-semibold text-[var(--foreground-primary)]">
{item.label}
</p>
<p className="mt-2 text-sm leading-6 text-[var(--foreground-secondary)]">
{item.description}
</p>
</div>
<DangerButton
type="button"
onClick={() => {
setCleanupRetentionDays('');
setCleanupModalState({
target: item.target,
label: item.label,
});
}}
>
清理数据
</DangerButton>
</div>
</div>
))}
</div>
</AppCard>
</div>
);
}
if (activeTab === 'system') {
return (
<div className="space-y-6">
<AppCard
title="登录与注册开关"
description="切换后立即生效,无需重启服务。"
action={
<SecondaryButton
type="button"
onClick={() => setAuthSourceModalOpen(true)}
>
配置认证源
</SecondaryButton>
}
>
<div className="grid gap-4 md:grid-cols-2 xl:grid-cols-4">
<ToggleField
label="允许密码登录"
description="关闭后将无法使用用户名密码登录。"
checked={systemFields.PasswordLoginEnabled}
onChange={(checked) =>
handleToggleOption('PasswordLoginEnabled', checked)
}
disabled={busyKey === 'toggle-PasswordLoginEnabled'}
/>
<ToggleField
label="允许密码注册"
description="关闭后新用户不能通过密码方式注册。"
checked={systemFields.PasswordRegisterEnabled}
onChange={(checked) =>
handleToggleOption('PasswordRegisterEnabled', checked)
}
disabled={busyKey === 'toggle-PasswordRegisterEnabled'}
/>
<ToggleField
label="注册需要邮箱验证"
description="开启后,新用户注册必须先完成邮箱验证码校验。"
checked={systemFields.EmailVerificationEnabled}
onChange={(checked) =>
handleToggleOption('EmailVerificationEnabled', checked)
}
disabled={busyKey === 'toggle-EmailVerificationEnabled'}
/>
</div>
<div className="mt-5 text-sm text-[var(--foreground-secondary)]">
当前已配置 {authSourcesQuery.data?.length ?? 0} 个认证源。
</div>
</AppCard>
<div className="grid gap-6 xl:grid-cols-[1fr_1fr]">
<AppCard
title="通用设置"
description="服务器地址会影响邮件链接、OAuth 回调和部署命令展示。"
action={
<div className="flex flex-wrap gap-2">
<SecondaryButton
type="button"
onClick={() =>
window.open(
'/swagger/index.html',
'_blank',
'noopener,noreferrer',
)
}
>
打开接口文档
</SecondaryButton>
<PrimaryButton
type="button"
onClick={() =>
void runBusyAction('system-general', async () => {
await saveOptionEntries(
[
[
'ServerAddress',
normalizeServerUrl(systemFields.ServerAddress),
],
],
'通用设置已保存。',
);
})
}
disabled={busyKey === 'system-general'}
>
{busyKey === 'system-general'
? '保存中...'
: '保存通用设置'}
</PrimaryButton>
</div>
}
>
<ResourceField label="服务器地址">
<ResourceInput
value={systemFields.ServerAddress}
onChange={(event) =>
setSystemFields((previous) => ({
...previous,
ServerAddress: event.target.value,
}))
}
placeholder="https://yourdomain.com"
/>
</ResourceField>
</AppCard>
<AppCard
title="SMTP 设置"
description="用于邮件验证码、密码重置和其他邮件通知发送。"
action={
<PrimaryButton
type="button"
onClick={() =>
void runBusyAction('system-smtp', async () => {
await saveOptionEntries(
[
['SMTPServer', systemFields.SMTPServer.trim()],
['SMTPPort', systemFields.SMTPPort.trim()],
['SMTPAccount', systemFields.SMTPAccount.trim()],
['SMTPToken', systemFields.SMTPToken.trim()],
],
'SMTP 设置已保存。',
);
})
}
disabled={busyKey === 'system-smtp'}
>
{busyKey === 'system-smtp' ? '保存中...' : '保存 SMTP 设置'}
</PrimaryButton>
}
>
<div className="grid gap-5 md:grid-cols-2">
<ResourceField label="SMTP 服务器">
<ResourceInput
value={systemFields.SMTPServer}
onChange={(event) =>
setSystemFields((previous) => ({
...previous,
SMTPServer: event.target.value,
}))
}
placeholder="smtp.qq.com"
/>
</ResourceField>
<ResourceField label="SMTP 端口">
<ResourceInput
value={systemFields.SMTPPort}
onChange={(event) =>
setSystemFields((previous) => ({
...previous,
SMTPPort: event.target.value,
}))
}
placeholder="587"
/>
</ResourceField>
<ResourceField label="SMTP 账户">
<ResourceInput
value={systemFields.SMTPAccount}
onChange={(event) =>
setSystemFields((previous) => ({
...previous,
SMTPAccount: event.target.value,
}))
}
placeholder="name@example.com"
/>
</ResourceField>
<ResourceField
label="SMTP 凭证"
hint="因安全原因不会回显历史密钥,留空表示不更新。"
>
<ResourceInput
type="password"
value={systemFields.SMTPToken}
onChange={(event) =>
setSystemFields((previous) => ({
...previous,
SMTPToken: event.target.value,
}))
}
placeholder="请输入新的 SMTP 凭证"
/>
</ResourceField>
</div>
</AppCard>
</div>
<AppCard
title="请求限流设置"
description="按来源 IP 生效,保存后立即影响 Web、API、上传下载及登录注册等敏感接口。时间单位均为秒。"
action={
<PrimaryButton
type="button"
onClick={() =>
void runBusyAction('operation-rate-limit', async () => {
const entries = [
[
'GlobalApiRateLimitNum',
operationFields.GlobalApiRateLimitNum,
],
[
'GlobalApiRateLimitDuration',
operationFields.GlobalApiRateLimitDuration,
],
[
'GlobalWebRateLimitNum',
operationFields.GlobalWebRateLimitNum,
],
[
'GlobalWebRateLimitDuration',
operationFields.GlobalWebRateLimitDuration,
],
[
'UploadRateLimitNum',
operationFields.UploadRateLimitNum,
],
[
'UploadRateLimitDuration',
operationFields.UploadRateLimitDuration,
],
[
'DownloadRateLimitNum',
operationFields.DownloadRateLimitNum,
],
[
'DownloadRateLimitDuration',
operationFields.DownloadRateLimitDuration,
],
[
'CriticalRateLimitNum',
operationFields.CriticalRateLimitNum,
],
[
'CriticalRateLimitDuration',
operationFields.CriticalRateLimitDuration,
],
] as const;
for (const [key, rawValue] of entries) {
const parsedValue = Number.parseInt(rawValue, 10);
if (Number.isNaN(parsedValue) || parsedValue <= 0) {
throw new Error(`${key} 必须为大于 0 的整数。`);
}
if (key.endsWith('Duration') && parsedValue > 1200) {
throw new Error(`${key} 不能超过 1200 秒。`);
}
}
await saveOptionEntries(
entries.map(([key, value]) => [
key,
String(Number.parseInt(value, 10)),
]),
'限流设置已保存。',
);
})
}
disabled={busyKey === 'operation-rate-limit'}
>
{busyKey === 'operation-rate-limit'
? '保存中...'
: '保存限流设置'}
</PrimaryButton>
}
>
<div className="grid gap-4 lg:grid-cols-2">
<div className="rounded-2xl border border-[var(--border-default)] bg-[var(--surface-elevated)] p-5">
<p className="text-sm font-semibold text-[var(--foreground-primary)]">
全局 API 限流
</p>
<p className="mt-1 text-sm text-[var(--foreground-muted)]">
作用于 `/api` 下的通用请求。
</p>
<div className="mt-4 grid gap-4 sm:grid-cols-2">
<ResourceField label="请求次数">
<ResourceInput
type="number"
value={operationFields.GlobalApiRateLimitNum}
onChange={(event) =>
setOperationFields((previous) => ({
...previous,
GlobalApiRateLimitNum: event.target.value,
}))
}
/>
</ResourceField>
<ResourceField
label={`时间窗口 (${formatSecondsLabel(operationFields.GlobalApiRateLimitDuration)})`}
>
<ResourceInput
type="number"
value={operationFields.GlobalApiRateLimitDuration}
onChange={(event) =>
setOperationFields((previous) => ({
...previous,
GlobalApiRateLimitDuration: event.target.value,
}))
}
/>
</ResourceField>
</div>
</div>
<div className="rounded-2xl border border-[var(--border-default)] bg-[var(--surface-elevated)] p-5">
<p className="text-sm font-semibold text-[var(--foreground-primary)]">
全局 Web 限流
</p>
<p className="mt-1 text-sm text-[var(--foreground-muted)]">
作用于页面和静态资源请求,过低会更容易触发 429。
</p>
<div className="mt-4 grid gap-4 sm:grid-cols-2">
<ResourceField label="请求次数">
<ResourceInput
type="number"
value={operationFields.GlobalWebRateLimitNum}
onChange={(event) =>
setOperationFields((previous) => ({
...previous,
GlobalWebRateLimitNum: event.target.value,
}))
}
/>
</ResourceField>
<ResourceField
label={`时间窗口 (${formatSecondsLabel(operationFields.GlobalWebRateLimitDuration)})`}
>
<ResourceInput
type="number"
value={operationFields.GlobalWebRateLimitDuration}
onChange={(event) =>
setOperationFields((previous) => ({
...previous,
GlobalWebRateLimitDuration: event.target.value,
}))
}
/>
</ResourceField>
</div>
</div>
<div className="rounded-2xl border border-[var(--border-default)] bg-[var(--surface-elevated)] p-5">
<p className="text-sm font-semibold text-[var(--foreground-primary)]">
上传 / 下载限流
</p>
<p className="mt-1 text-sm text-[var(--foreground-muted)]">
用于文件上传与下载接口,建议保留相对严格的阈值。
</p>
<div className="mt-4 grid gap-4 sm:grid-cols-2">
<ResourceField label="上传请求次数">
<ResourceInput
type="number"
value={operationFields.UploadRateLimitNum}
onChange={(event) =>
setOperationFields((previous) => ({
...previous,
UploadRateLimitNum: event.target.value,
}))
}
/>
</ResourceField>
<ResourceField
label={`上传窗口 (${formatSecondsLabel(operationFields.UploadRateLimitDuration)})`}
>
<ResourceInput
type="number"
value={operationFields.UploadRateLimitDuration}
onChange={(event) =>
setOperationFields((previous) => ({
...previous,
UploadRateLimitDuration: event.target.value,
}))
}
/>
</ResourceField>
<ResourceField label="下载请求次数">
<ResourceInput
type="number"
value={operationFields.DownloadRateLimitNum}
onChange={(event) =>
setOperationFields((previous) => ({
...previous,
DownloadRateLimitNum: event.target.value,
}))
}
/>
</ResourceField>
<ResourceField
label={`下载窗口 (${formatSecondsLabel(operationFields.DownloadRateLimitDuration)})`}
>
<ResourceInput
type="number"
value={operationFields.DownloadRateLimitDuration}
onChange={(event) =>
setOperationFields((previous) => ({
...previous,
DownloadRateLimitDuration: event.target.value,
}))
}
/>
</ResourceField>
</div>
</div>
<div className="rounded-2xl border border-[var(--border-default)] bg-[var(--surface-elevated)] p-5">
<p className="text-sm font-semibold text-[var(--foreground-primary)]">
敏感接口限流
</p>
<p className="mt-1 text-sm text-[var(--foreground-muted)]">
用于登录、注册、验证码、重置密码和 OAuth 等接口。
</p>
<div className="mt-4 grid gap-4 sm:grid-cols-2">
<ResourceField label="请求次数">
<ResourceInput
type="number"
value={operationFields.CriticalRateLimitNum}
onChange={(event) =>
setOperationFields((previous) => ({
...previous,
CriticalRateLimitNum: event.target.value,
}))
}
/>
</ResourceField>
<ResourceField
label={`时间窗口 (${formatSecondsLabel(operationFields.CriticalRateLimitDuration)})`}
>
<ResourceInput
type="number"
value={operationFields.CriticalRateLimitDuration}
onChange={(event) =>
setOperationFields((previous) => ({
...previous,
CriticalRateLimitDuration: event.target.value,
}))
}
/>
</ResourceField>
</div>
</div>
</div>
</AppCard>
</div>
);
}
return (
<div className="space-y-6">
<div className="grid gap-6 xl:grid-cols-[1fr_1fr]">
<AppCard
title="公告与品牌信息"
description="用于控制首页公告、系统名称、默认首页链接和页脚展示。"
action={
<PrimaryButton
type="button"
onClick={() =>
void runBusyAction('other-brand', async () => {
await saveOptionEntries(
[
['Notice', otherFields.Notice],
['SystemName', otherFields.SystemName.trim()],
['HomePageLink', otherFields.HomePageLink.trim()],
['Footer', otherFields.Footer],
],
'公告与品牌设置已保存。',
);
})
}
disabled={busyKey === 'other-brand'}
>
{busyKey === 'other-brand' ? '保存中...' : '保存基础信息'}
</PrimaryButton>
}
>
<div className="space-y-5">
<ResourceField label="系统名称">
<ResourceInput
value={otherFields.SystemName}
onChange={(event) =>
setOtherFields((previous) => ({
...previous,
SystemName: event.target.value,
}))
}
placeholder="OpenFlare"
/>
</ResourceField>
<ResourceField label="首页链接">
<ResourceInput
value={otherFields.HomePageLink}
onChange={(event) =>
setOtherFields((previous) => ({
...previous,
HomePageLink: event.target.value,
}))
}
placeholder="https://example.com"
/>
</ResourceField>
<ResourceField label="公告">
<ResourceTextarea
value={otherFields.Notice}
onChange={(event) =>
setOtherFields((previous) => ({
...previous,
Notice: event.target.value,
}))
}
placeholder="可在此编写首页公告内容"
/>
</ResourceField>
<ResourceField label="页脚 HTML">
<ResourceTextarea
value={otherFields.Footer}
onChange={(event) =>
setOtherFields((previous) => ({
...previous,
Footer: event.target.value,
}))
}
placeholder="留空则使用默认页脚"
/>
</ResourceField>
</div>
</AppCard>
<AppCard
title="关于页内容"
description="支持 Markdown / HTML 内容编辑,保存后会同步到公开关于页。"
action={
<PrimaryButton
type="button"
onClick={() =>
void runBusyAction('other-about', async () => {
await saveOptionEntries(
[['About', otherFields.About]],
'关于页内容已保存。',
);
})
}
disabled={busyKey === 'other-about'}
>
{busyKey === 'other-about' ? '保存中...' : '保存关于内容'}
</PrimaryButton>
}
>
<div className="space-y-5">
<ResourceField
label="关于内容"
hint="支持 Markdown 和 HTML,保存后会同步到公开关于页。"
>
<ResourceTextarea
value={otherFields.About}
onChange={(event) =>
setOtherFields((previous) => ({
...previous,
About: event.target.value,
}))
}
placeholder="在这里编写关于 OpenFlare 的介绍内容"
className="min-h-48"
/>
</ResourceField>
</div>
</AppCard>
</div>
</div>
);
};
return (
<div className="space-y-6">
<PageHeader title="设置" />
{feedback ? (
<InlineMessage tone={feedback.tone} message={feedback.message} />
) : null}
<div className="flex flex-wrap gap-3">
{tabs.map((tab) => (
<button
key={tab.key}
type="button"
onClick={() => setActiveTab(tab.key)}
className={[
'rounded-2xl border px-4 py-3 text-left transition',
activeTab === tab.key
? 'border-[var(--border-strong)] bg-[var(--accent-soft)] text-[var(--foreground-primary)]'
: 'border-[var(--border-default)] bg-[var(--surface-muted)] text-[var(--foreground-secondary)] hover:border-[var(--border-strong)] hover:text-[var(--foreground-primary)]',
].join(' ')}
>
<p className="text-sm font-semibold">{tab.label}</p>
<p className="mt-1 text-xs leading-5 text-inherit/80">
{tab.description}
</p>
</button>
))}
</div>
{renderTabContent()}
<AuthSourceModal
isOpen={authSourceModalOpen}
sources={authSourcesQuery.data ?? []}
isLoading={authSourcesQuery.isLoading}
error={authSourcesQuery.error}
onClose={() => setAuthSourceModalOpen(false)}
onChanged={async () => {
await Promise.all([
queryClient.invalidateQueries({ queryKey: authSourcesQueryKey }),
queryClient.invalidateQueries({ queryKey: ['public-status'] }),
]);
}}
/>
<AppModal
isOpen={cleanupModalState !== null}
title={`清理${cleanupModalState?.label ?? ''}`}
description="输入保留天数后,将只保留该天数范围内的数据;如果留空,则会直接删除该类数据的全部历史记录。"
onClose={() => {
if (databaseCleanupMutation.isPending) {
return;
}
setCleanupModalState(null);
}}
footer={
<div className="flex flex-wrap justify-end gap-2">
<SecondaryButton
type="button"
onClick={() => setCleanupModalState(null)}
disabled={databaseCleanupMutation.isPending}
>
取消
</SecondaryButton>
<DangerButton
type="button"
disabled={databaseCleanupMutation.isPending}
onClick={() => {
if (!cleanupModalState) {
return;
}
const trimmed = cleanupRetentionDays.trim();
if (trimmed !== '') {
const retentionDays = Number.parseInt(trimmed, 10);
if (Number.isNaN(retentionDays) || retentionDays < 1) {
setFeedback({
tone: 'danger',
message: '手动清理保留天数至少为 1 天。',
});
return;
}
databaseCleanupMutation.mutate({
target: cleanupModalState.target,
retention_days: retentionDays,
});
return;
}
databaseCleanupMutation.mutate({
target: cleanupModalState.target,
});
}}
>
{databaseCleanupMutation.isPending ? '清理中...' : '确认清理'}
</DangerButton>
</div>
}
>
<div className="space-y-5">
<div className="rounded-2xl border border-[var(--status-danger-border)] bg-[var(--status-danger-soft)] px-4 py-4 text-sm leading-6 text-[var(--status-danger-foreground)]">
该操作会直接删除数据库中的历史观测数据,删除后无法恢复,请确认当前选择的数据类型和保留范围无误。
</div>
<ResourceField
label="保留天数"
hint="留空表示全部删除;填写时必须为大于等于 1 的整数。"
>
<ResourceInput
type="number"
min={1}
value={cleanupRetentionDays}
onChange={(event) => setCleanupRetentionDays(event.target.value)}
placeholder="例如 30;留空则全部删除"
/>
</ResourceField>
{databaseCleanupMutation.isError ? (
<ErrorState
title="数据库清理失败"
description={getErrorMessage(databaseCleanupMutation.error)}
/>
) : null}
</div>
</AppModal>
</div>
);
}