kate522
7a4419d0dd
Add bind_phone captcha scene across schema/runtime/UI, require captcha on phone bind, return real captcha status objects instead of legacy option aliases, and harden form discovery for page-sign auth forms.
305 lines
12 KiB
JavaScript
305 lines
12 KiB
JavaScript
/**
|
|
* Permissions & Security domain schemas.
|
|
* Section keys must stay aligned with the router and PHP schema provider.
|
|
*/
|
|
|
|
export const permissionsSchemas = {
|
|
/**
|
|
* Login / captcha / access guard settings
|
|
*/
|
|
login: {
|
|
key: 'permissions.login',
|
|
title: '登录权限',
|
|
icon: 'fas fa-shield-alt',
|
|
description: '管理登录、注册、评论等场景的人机验证与访问限制。',
|
|
defaults: {
|
|
enabled: false,
|
|
active_provider: '',
|
|
mode: 'always',
|
|
disabled_scenarios: [],
|
|
tencent: {},
|
|
aliyun: {},
|
|
cloudflare: {},
|
|
geetest: {},
|
|
},
|
|
groups: [
|
|
{
|
|
key: 'basic',
|
|
title: '基础设置',
|
|
icon: 'fas fa-cog',
|
|
fields: [
|
|
{ key: 'enabled', label: '启用人机验证', type: 'switch', help: '开启后将在指定场景要求用户完成人机验证' },
|
|
{
|
|
key: 'active_provider',
|
|
label: '当前服务商',
|
|
type: 'radio',
|
|
buttonStyle: false,
|
|
options: [
|
|
{ label: '关闭', value: '' },
|
|
{ label: '腾讯云 Captcha', value: 'tencent' },
|
|
{ label: '阿里云 CAPTCHA 2.0', value: 'aliyun' },
|
|
{ label: 'Cloudflare Turnstile', value: 'cloudflare' },
|
|
{ label: '极验 GeeTest', value: 'geetest' },
|
|
],
|
|
dependsOn: { key: 'enabled', value: true },
|
|
},
|
|
{
|
|
key: 'mode',
|
|
label: '触发模式',
|
|
type: 'radio',
|
|
buttonStyle: false,
|
|
options: [
|
|
{ label: '始终显示', value: 'always' },
|
|
],
|
|
dependsOn: { key: 'enabled', value: true },
|
|
},
|
|
{
|
|
key: 'disabled_scenarios',
|
|
label: '停用场景',
|
|
type: 'checkbox',
|
|
help: '勾选后表示该场景不启用人机验证；未勾选的场景会启用。',
|
|
dependsOn: { key: 'enabled', value: true },
|
|
options: [
|
|
{ label: '发表评论', value: 'comment' },
|
|
{ label: '用户登录', value: 'login' },
|
|
{ label: '用户注册', value: 'register' },
|
|
{ label: '绑定第三方', value: 'bind' },
|
|
{ label: '绑定手机', value: 'bind_phone' },
|
|
{ label: '找回密码', value: 'lostpassword' },
|
|
{ label: '修改密码', value: 'change_password' },
|
|
{ label: '更改邮箱', value: 'change_email' },
|
|
{ label: '邮箱验证', value: 'verify_email' },
|
|
{ label: '资源下载', value: 'download' },
|
|
{ label: '每日签到', value: 'signin' },
|
|
],
|
|
},
|
|
],
|
|
},
|
|
{
|
|
key: 'providers',
|
|
title: '服务商配置',
|
|
icon: 'fas fa-server',
|
|
description: '按当前选择的服务商填写对应密钥。',
|
|
fields: [
|
|
{
|
|
key: 'provider_hint',
|
|
label: '配置说明',
|
|
type: 'notice',
|
|
alertType: 'info',
|
|
alertContent: '下方会渲染当前验证码服务商的专属配置面板。保存仍通过统一 schema contract 进行。',
|
|
dependsOn: { key: 'enabled', value: true },
|
|
},
|
|
{ key: 'tencent', label: '腾讯云配置', type: 'custom', dependsOn: { key: 'active_provider', value: 'tencent' } },
|
|
{ key: 'aliyun', label: '阿里云配置', type: 'custom', dependsOn: { key: 'active_provider', value: 'aliyun' } },
|
|
{ key: 'cloudflare', label: 'Cloudflare 配置', type: 'custom', dependsOn: { key: 'active_provider', value: 'cloudflare' } },
|
|
{ key: 'geetest', label: '极验配置', type: 'custom', dependsOn: { key: 'active_provider', value: 'geetest' } },
|
|
],
|
|
},
|
|
],
|
|
},
|
|
|
|
/**
|
|
* Capability matrix metadata contract.
|
|
* The live page is still orchestration-heavy custom UI for now.
|
|
*/
|
|
capabilities: {
|
|
key: 'permissions.capabilities',
|
|
title: '基本权限',
|
|
icon: 'fas fa-user-shield',
|
|
description: '统一管理用户、投稿和评论的角色权限。',
|
|
defaults: {},
|
|
groups: [],
|
|
},
|
|
|
|
/**
|
|
* Moderation settings
|
|
*/
|
|
moderation: {
|
|
key: 'permissions.moderation',
|
|
title: '内容审核',
|
|
icon: 'fas fa-gavel',
|
|
description: '管理评论审核、反垃圾、限流与拦截配置。',
|
|
defaults: {
|
|
enabled: false,
|
|
akismet_enabled: false,
|
|
akismet_site_url: '',
|
|
akismet_blog_lang: 'zh-CN',
|
|
akismet_api_key: '',
|
|
ai_enabled: false,
|
|
ai_moderate_comments: true,
|
|
ai_moderate_background: true,
|
|
auto_approve_low_risk: false,
|
|
auto_reject_high_risk: false,
|
|
low_risk_max_score: 35,
|
|
high_risk_min_score: 80,
|
|
blocked_keywords: '',
|
|
rate_limit_enabled: false,
|
|
rate_limit_min_interval: 8,
|
|
rate_limit_max_per_hour: 15,
|
|
geoip_enabled: false,
|
|
geoip_block_countries: [],
|
|
},
|
|
groups: [
|
|
{
|
|
key: 'basic',
|
|
title: '审核总开关',
|
|
icon: 'fas fa-power-off',
|
|
fields: [
|
|
{ key: 'enabled', label: '启用审核系统', type: 'switch', help: '关闭后评论将不经过主题审核链路。' },
|
|
],
|
|
},
|
|
{
|
|
key: 'akismet',
|
|
title: 'Akismet',
|
|
icon: 'fas fa-filter',
|
|
fields: [
|
|
{ key: 'akismet_enabled', label: '启用 Akismet', type: 'switch', dependsOn: { key: 'enabled', value: true } },
|
|
{ key: 'akismet_site_url', label: 'Site URL', type: 'input', placeholder: 'https://your-site.com', dependsOn: { key: 'akismet_enabled', value: true } },
|
|
{ key: 'akismet_blog_lang', label: '博客语言', type: 'input', placeholder: 'zh-CN', dependsOn: { key: 'akismet_enabled', value: true } },
|
|
{ key: 'akismet_api_key', label: 'API Key', type: 'input', inputType: 'password', placeholder: 'Akismet API Key', dependsOn: { key: 'akismet_enabled', value: true } },
|
|
],
|
|
},
|
|
{
|
|
key: 'ai',
|
|
title: 'AI 审核',
|
|
icon: 'fas fa-robot',
|
|
fields: [
|
|
{ key: 'ai_enabled', label: '启用 AI 审核', type: 'switch', dependsOn: { key: 'enabled', value: true } },
|
|
{ key: 'ai_api_hint', label: '审核 API 配置', type: 'notice', alertType: 'info', alertContent: 'API 接入（百度/阿里云等）在「扩展 → API内容审核」中统一配置，此处仅控制审核范围和策略。', dependsOn: { key: 'ai_enabled', value: true } },
|
|
{ key: 'ai_moderate_comments', label: '用户评论', type: 'switch', dependsOn: { key: 'ai_enabled', value: true } },
|
|
{ key: 'ai_moderate_background', label: '用户资料背景', type: 'switch', dependsOn: { key: 'ai_enabled', value: true } },
|
|
{ key: 'auto_approve_low_risk', label: '低风险自动通过', type: 'switch', dependsOn: { key: 'ai_enabled', value: true } },
|
|
{ key: 'auto_reject_high_risk', label: '高风险自动拒绝', type: 'switch', dependsOn: { key: 'ai_enabled', value: true } },
|
|
{ key: 'low_risk_max_score', label: '低风险上限', type: 'number', min: 0, max: 100, dependsOn: { key: 'ai_enabled', value: true } },
|
|
{ key: 'high_risk_min_score', label: '高风险下限', type: 'number', min: 0, max: 100, dependsOn: { key: 'ai_enabled', value: true } },
|
|
],
|
|
},
|
|
{
|
|
key: 'keywords',
|
|
title: '关键词拦截',
|
|
icon: 'fas fa-ban',
|
|
fields: [
|
|
{ key: 'blocked_keywords', label: '屏蔽关键词列表', type: 'textarea', rows: 4, placeholder: '每行一个关键词，也支持 /regex/i 格式。命中后会进入待审核并记录原因。', dependsOn: { key: 'enabled', value: true } },
|
|
],
|
|
},
|
|
{
|
|
key: 'rate-limit',
|
|
title: '频率限制',
|
|
icon: 'fas fa-stopwatch',
|
|
fields: [
|
|
{ key: 'rate_limit_enabled', label: '启用频率限制', type: 'switch', dependsOn: { key: 'enabled', value: true } },
|
|
{ key: 'rate_limit_min_interval', label: '最小间隔（秒）', type: 'number', min: 1, max: 300, dependsOn: { key: 'rate_limit_enabled', value: true } },
|
|
{ key: 'rate_limit_max_per_hour', label: '每小时上限', type: 'number', min: 1, max: 200, dependsOn: { key: 'rate_limit_enabled', value: true } },
|
|
],
|
|
},
|
|
{
|
|
key: 'geoip',
|
|
title: 'GeoIP 拦截',
|
|
icon: 'fas fa-globe-asia',
|
|
fields: [
|
|
{ key: 'geoip_enabled', label: '启用 GeoIP 拦截', type: 'switch', dependsOn: { key: 'enabled', value: true } },
|
|
{ key: 'geoip_hint', label: 'IP 数据源', type: 'notice', alertType: 'info', alertContent: '复用「扩展 → IP归属地」中配置的数据源和 API Key。', dependsOn: { key: 'geoip_enabled', value: true } },
|
|
{ key: 'geoip_block_countries', label: '屏蔽国家/地区', type: 'custom', dependsOn: { key: 'geoip_enabled', value: true } },
|
|
],
|
|
},
|
|
],
|
|
},
|
|
|
|
/**
|
|
* Comment permissions
|
|
*/
|
|
comment: {
|
|
key: 'permissions.comment',
|
|
title: '评论权限',
|
|
icon: 'fas fa-comment-dots',
|
|
description: '控制评论功能的开关和权限要求。',
|
|
defaults: {
|
|
comment_allow: true,
|
|
comment_require_login: false,
|
|
comment_nested_depth: 3,
|
|
comment_allow_reply: true,
|
|
},
|
|
groups: [
|
|
{
|
|
key: 'basic',
|
|
title: '评论基础',
|
|
icon: 'fas fa-cog',
|
|
fields: [
|
|
{ key: 'comment_allow', label: '允许评论', type: 'switch', help: '全局开启评论功能' },
|
|
{ key: 'comment_require_login', label: '需登录评论', type: 'switch', help: '只有登录用户才能评论' },
|
|
{ key: 'comment_nested_depth', label: '嵌套层级', type: 'slider', min: 1, max: 5, default: 3 },
|
|
{ key: 'comment_allow_reply', label: '允许回复', type: 'switch' },
|
|
],
|
|
},
|
|
],
|
|
},
|
|
|
|
/**
|
|
* Attachment permissions
|
|
*/
|
|
attachment: {
|
|
key: 'permissions.attachment',
|
|
title: '附件权限',
|
|
icon: 'fas fa-paperclip',
|
|
description: '控制文件上传和附件下载权限。',
|
|
defaults: {
|
|
allow_avatar_upload: true,
|
|
allow_cover_upload: true,
|
|
allow_background_upload: false,
|
|
avatar_max_size: 2,
|
|
allow_submit_images: true,
|
|
submit_image_max_size: 5,
|
|
allow_comment_images: false,
|
|
comment_image_max_size: 2,
|
|
allow_resource_upload: true,
|
|
resource_max_size: 50,
|
|
},
|
|
groups: [
|
|
{
|
|
key: 'profile',
|
|
title: '头像与封面',
|
|
icon: 'fas fa-user-circle',
|
|
fields: [
|
|
{ key: 'allow_avatar_upload', label: '允许用户上传头像', type: 'switch' },
|
|
{ key: 'allow_cover_upload', label: '允许用户上传封面图', type: 'switch' },
|
|
{ key: 'allow_background_upload', label: '允许用户上传背景图', type: 'switch' },
|
|
{ key: 'avatar_max_size', label: '头像/封面大小上限 (MB)', type: 'number', min: 1, max: 10 },
|
|
],
|
|
},
|
|
{
|
|
key: 'content',
|
|
title: '内容上传',
|
|
icon: 'fas fa-images',
|
|
fields: [
|
|
{ key: 'allow_submit_images', label: '允许投稿插入图片', type: 'switch' },
|
|
{ key: 'submit_image_max_size', label: '投稿图片大小上限 (MB)', type: 'number', min: 1, max: 20 },
|
|
{ key: 'allow_comment_images', label: '允许评论插入图片', type: 'switch' },
|
|
{ key: 'comment_image_max_size', label: '评论图片大小上限 (MB)', type: 'number', min: 1, max: 10 },
|
|
],
|
|
},
|
|
{
|
|
key: 'resource',
|
|
title: '资源附件',
|
|
icon: 'fas fa-file-archive',
|
|
fields: [
|
|
{ key: 'allow_resource_upload', label: '允许资源附件上传', type: 'switch' },
|
|
{ key: 'resource_max_size', label: '资源附件大小上限 (MB)', type: 'number', min: 1, max: 200 },
|
|
],
|
|
},
|
|
],
|
|
},
|
|
|
|
/**
|
|
* Download permissions — live UI is DownloadPermissions.vue via cms_features.
|
|
* Keep empty schema so SchemaPage cannot mis-write aksrt_settings.
|
|
*/
|
|
download: {
|
|
key: 'permissions.download',
|
|
title: '下载权限',
|
|
icon: 'fas fa-download',
|
|
description: '下载门槛由 DownloadPermissions 页维护（cms_features）；人机验证服务商在登录权限页。',
|
|
defaults: {},
|
|
groups: [],
|
|
},
|
|
};
|