@befly-addon/admin 1.2.4 → 1.2.5

package/apis/role/apiSave.ts

@@ -1,3 +1,5 @@
+import { normalizePathnameListInput } from "befly-shared/utils/normalizePathnameListInput";
+
 import adminRoleTable from "../../tables/role.json";
 
 export default {
@@ -7,6 +9,13 @@ export default {
         apiPaths: adminRoleTable.apis
     },
     handler: async (befly, ctx) => {
+        let apiPaths: string[] = [];
+        try {
+            apiPaths = normalizePathnameListInput(ctx.body.apiPaths, "apiPaths", true);
+        } catch (error: any) {
+            return befly.tool.No(`参数不合法：${error?.message || "未知错误"}`);
+        }
+
         // 查询角色是否存在
         const role = await befly.db.getOne({
             table: "addon_admin_role",
@@ -22,12 +31,12 @@ export default {
             table: "addon_admin_role",
             where: { code: ctx.body.roleCode },
             data: {
-                apis: ctx.body.apiPaths
+                apis: apiPaths
             }
         });
 
         // 增量刷新 Redis 权限缓存
-        await befly.cache.refreshRoleApiPermissions(role.code, ctx.body.apiPaths || []);
+        await befly.cache.refreshRoleApiPermissions(role.code, apiPaths);
 
         return befly.tool.Yes("操作成功");
     }

package/apis/role/apis.ts

@@ -17,7 +17,7 @@ export default {
         }
 
         // 数据库自动将 array_text 转换为数组
-        const apiPaths = role.apis || [];
+        const apiPaths = Array.isArray(role.apis) ? role.apis : [];
 
         return befly.tool.Yes("操作成功", { apiPaths: apiPaths });
     }

package/apis/role/ins.ts

@@ -1,9 +1,22 @@
+import { normalizePathnameListInput } from "befly-shared/utils/normalizePathnameListInput";
+
 import adminRoleTable from "../../tables/role.json";
 
 export default {
     name: "创建角色",
     fields: adminRoleTable,
     handler: async (befly, ctx) => {
+        let apiPaths: string[] = [];
+        let menuPaths: string[] = [];
+
+        try {
+            apiPaths = normalizePathnameListInput(ctx.body.apis, "apis", true);
+
+            menuPaths = normalizePathnameListInput(ctx.body.menus, "menus", false);
+        } catch (error: any) {
+            return befly.tool.No(`参数不合法：${error?.message || "未知错误"}`);
+        }
+
         // 检查角色代码是否已存在
         const existing = await befly.db.getOne({
             table: "addon_admin_role",
@@ -20,15 +33,15 @@ export default {
                 name: ctx.body.name,
                 code: ctx.body.code,
                 description: ctx.body.description,
-                menus: ctx.body.menus || [],
-                apis: ctx.body.apis || [],
+                menus: menuPaths,
+                apis: apiPaths,
                 sort: ctx.body.sort
                 // state 由框架自动设置为 1
             }
         });
 
         // 增量刷新角色权限缓存
-        await befly.cache.refreshRoleApiPermissions(ctx.body.code, ctx.body.apis || []);
+        await befly.cache.refreshRoleApiPermissions(ctx.body.code, apiPaths);
 
         return befly.tool.Yes("操作成功", { id: roleId });
     }

package/apis/role/menuSave.ts

@@ -1,3 +1,5 @@
+import { normalizePathnameListInput } from "befly-shared/utils/normalizePathnameListInput";
+
 import adminRoleTable from "../../tables/role.json";
 
 export default {
@@ -7,6 +9,13 @@ export default {
         menuPaths: adminRoleTable.menus
     },
     handler: async (befly, ctx) => {
+        let menuPaths: string[] = [];
+        try {
+            menuPaths = normalizePathnameListInput(ctx.body.menuPaths, "menuPaths", false);
+        } catch (error: any) {
+            return befly.tool.No(`参数不合法：${error?.message || "未知错误"}`);
+        }
+
         // 查询角色是否存在
         const role = await befly.db.getOne({
             table: "addon_admin_role",
@@ -22,7 +31,7 @@ export default {
             table: "addon_admin_role",
             where: { code: ctx.body.roleCode },
             data: {
-                menus: ctx.body.menuPaths
+                menus: menuPaths
             }
         });
 

package/apis/role/menus.ts

@@ -17,7 +17,7 @@ export default {
         }
 
         // 数据库自动将 array_text 转换为数组
-        const menuPaths = role.menus || [];
+        const menuPaths = Array.isArray(role.menus) ? role.menus : [];
 
         return befly.tool.Yes("操作成功", menuPaths);
     }

package/apis/role/upd.ts

@@ -1,9 +1,22 @@
+import { normalizePathnameListInput } from "befly-shared/utils/normalizePathnameListInput";
+
 import adminRoleTable from "../../tables/role.json";
 
 export default {
     name: "更新角色",
     fields: adminRoleTable,
     handler: async (befly, ctx) => {
+        let apiPaths: string[] = [];
+        let menuPaths: string[] = [];
+
+        try {
+            apiPaths = normalizePathnameListInput(ctx.body.apis, "apis", true);
+
+            menuPaths = normalizePathnameListInput(ctx.body.menus, "menus", false);
+        } catch (error: any) {
+            return befly.tool.No(`参数不合法：${error?.message || "未知错误"}`);
+        }
+
         // 检查角色代码是否被其他角色占用
         const existing = await befly.db.getList({
             table: "addon_admin_role",
@@ -24,15 +37,15 @@ export default {
                 name: ctx.body.name,
                 code: ctx.body.code,
                 description: ctx.body.description,
-                menus: ctx.body.menus || [],
-                apis: ctx.body.apis || [],
+                menus: menuPaths,
+                apis: apiPaths,
                 sort: ctx.body.sort
                 // state 字段不在此处更新，需要禁用/启用时单独处理
             }
         });
 
         // 增量刷新角色权限缓存
-        await befly.cache.refreshRoleApiPermissions(ctx.body.code, ctx.body.apis || []);
+        await befly.cache.refreshRoleApiPermissions(ctx.body.code, apiPaths);
 
         return befly.tool.Yes("操作成功");
     }

package/package.json

@@ -1,7 +1,7 @@
 {
     "name": "@befly-addon/admin",
-    "version": "1.2.4",
-    "gitHead": "a281633b6f8be7c941aa7e6a3f677bfc18b65ddc",
+    "version": "1.2.5",
+    "gitHead": "549fff1035081111a5ba32b5088e7c37907fa894",
     "private": false,
     "description": "Befly - 管理后台功能组件",
     "keywords": [
@@ -47,8 +47,9 @@
         "preview": "vite preview"
     },
     "dependencies": {
-        "befly": "^3.10.4",
-        "befly-vite": "^1.2.3",
+        "befly": "^3.10.5",
+        "befly-shared": "^1.3.3",
+        "befly-vite": "^1.2.4",
         "nodemailer": "^7.0.12",
         "ua-parser-js": "^2.0.7"
     },