feat(core): implement optimistic locking across all entities
Add VersionMismatch error variant and check_version() helper to erp-core. All 13 mutable entities now enforce version checking on update/delete: - erp-auth: user, role, organization, department, position - erp-config: dictionary, dictionary_item, menu, setting, numbering_rule - erp-workflow: process_definition, process_instance, task - erp-message: message, message_subscription Update DTOs to expose version in responses and require version in update requests. HTTP 409 Conflict returned on version mismatch.
This commit is contained in:
iven
@@ -1,210 +1,285 @@
|
||||
# Phase 5-6 Implementation Plan: Message Center + Integration & Polish
|
||||
# Phase 7: 审计日志 + 乐观锁 + Redis 限流 + 事件 Outbox
|
||||
|
||||
## Context
|
||||
|
||||
Phase 1-4 已完成（core, auth, config, workflow）。现在需要实现 Phase 5（消息中心）和 Phase 6（整合与打磨）。`erp-message` crate 当前是空壳，需要完整实现。
|
||||
Phase 1-6 已完成。对比设计规格发现 4 项核心基础设施缺失：
|
||||
1. **审计日志** — AuditLog 类型存在但从未使用，audit_logs 表存在但无 Entity/Service
|
||||
2. **乐观锁** — 所有实体有 version 字段但更新时不检查/递增，DTO 不暴露 version
|
||||
3. **Redis 限流** — 客户端创建后立即丢弃（`_redis_client`），未存入 AppState
|
||||
4. **事件 Outbox** — EventBus 纯内存 broadcast，重启即丢失，无持久化
|
||||
|
||||
## 实施顺序与依赖
|
||||
|
||||
```
|
||||
Task 7.1 乐观锁 (erp-core error helper)
|
||||
→ Task 7.2 乐观锁 (全部 service 方法 + DTO)
|
||||
→ Task 7.3 审计日志 (Entity + Service + 集成)
|
||||
→ Task 7.4 Redis 限流 (AppState + 中间件)
|
||||
→ Task 7.5 事件 Outbox (迁移 + Entity + EventBus 改造)
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
## Phase 5: 消息中心
|
||||
|
||||
### Task 5.1: 数据库迁移 — 消息相关表
|
||||
|
||||
**新增 3 个迁移文件：**
|
||||
|
||||
1. `m20260413_000023_create_message_templates.rs` — 消息模板表
|
||||
- id (UUID PK), tenant_id, name, code (唯一编码), channel (in_app/email/sms/wechat),
|
||||
- title_template, body_template (支持 `{{variable}}` 插值), language (zh-CN/en-US),
|
||||
- 标准审计字段 (created_at, updated_at, created_by, updated_by, deleted_at)
|
||||
|
||||
2. `m20260413_000024_create_messages.rs` — 消息表
|
||||
- id (UUID PK), tenant_id, template_id (FK, nullable),
|
||||
- sender_id (UUID, nullable=系统消息), sender_type (system/user),
|
||||
- recipient_id (UUID, not null), recipient_type (user/role/department/all),
|
||||
- title, body, priority (normal/important/urgent),
|
||||
- business_type (workflow_task/system_notice/...), business_id (deep link ref),
|
||||
- is_read (bool), read_at (nullable),
|
||||
- is_archived (bool), archived_at (nullable),
|
||||
- sent_at (nullable, for scheduled), status (pending/sent/recalled),
|
||||
- 标准审计字段
|
||||
|
||||
3. `m20260413_000025_create_message_subscriptions.rs` — 消息订阅偏好
|
||||
- id (UUID PK), tenant_id, user_id,
|
||||
- notification_types (JSON: 订阅的通知类型列表),
|
||||
- channel_preferences (JSON: 各类型偏好的通道),
|
||||
- dnd_enabled (bool), dnd_start (time), dnd_end (time),
|
||||
- 标准审计字段
|
||||
## Task 7.1: 乐观锁 — erp-core 基础设施
|
||||
|
||||
**修改文件：**
|
||||
- `crates/erp-server/migration/src/lib.rs` — 注册 3 个新迁移
|
||||
- `crates/erp-core/src/error.rs` — 添加 `VersionMismatch` 变体 + `check_version()` helper
|
||||
|
||||
### Task 5.2: erp-message crate 基础结构
|
||||
```rust
|
||||
// 新增变体
|
||||
#[error("版本冲突: 数据已被其他操作修改，请刷新后重试")]
|
||||
VersionMismatch,
|
||||
|
||||
**修改/创建文件：**
|
||||
|
||||
1. `crates/erp-message/Cargo.toml` — 补齐缺失依赖 (thiserror, utoipa, async-trait, validator, serde/uuid/chrono features, sea-orm features)
|
||||
2. `crates/erp-message/src/lib.rs` — 声明子模块 + pub use
|
||||
3. `crates/erp-message/src/message_state.rs` — MessageState { db, event_bus }
|
||||
4. `crates/erp-message/src/error.rs` — MessageError 枚举 + From impls
|
||||
5. `crates/erp-message/src/dto.rs` — 请求/响应 DTOs
|
||||
6. `crates/erp-message/src/entity/mod.rs` — 实体子模块声明
|
||||
7. `crates/erp-message/src/entity/message_template.rs`
|
||||
8. `crates/erp-message/src/entity/message.rs`
|
||||
9. `crates/erp-message/src/entity/message_subscription.rs`
|
||||
10. `crates/erp-message/src/module.rs` — MessageModule 实现 ErpModule
|
||||
|
||||
### Task 5.3: 消息 CRUD 服务与处理器
|
||||
|
||||
**创建文件：**
|
||||
|
||||
1. `crates/erp-message/src/service/mod.rs`
|
||||
2. `crates/erp-message/src/service/message_service.rs` — 消息 CRUD + 发送 + 已读/未读
|
||||
3. `crates/erp-message/src/service/template_service.rs` — 模板 CRUD + 变量插值渲染
|
||||
4. `crates/erp-message/src/service/subscription_service.rs` — 订阅偏好 CRUD
|
||||
5. `crates/erp-message/src/handler/mod.rs`
|
||||
6. `crates/erp-message/src/handler/message_handler.rs` — 消息 API handlers
|
||||
7. `crates/erp-message/src/handler/template_handler.rs` — 模板 API handlers
|
||||
8. `crates/erp-message/src/handler/subscription_handler.rs` — 订阅 API handlers
|
||||
|
||||
**路由设计：**
|
||||
```
|
||||
GET /messages — 消息列表 (分页, 支持 status/priority/is_read 过滤)
|
||||
GET /messages/unread-count — 未读消息数
|
||||
PUT /messages/{id}/read — 标记已读
|
||||
PUT /messages/read-all — 全部标记已读
|
||||
DELETE /messages/{id} — 删除消息 (软删除)
|
||||
POST /messages/send — 发送消息
|
||||
|
||||
GET /message-templates — 模板列表
|
||||
POST /message-templates — 创建模板
|
||||
|
||||
PUT /message-subscriptions — 更新订阅偏好
|
||||
// 新增 helper 函数
|
||||
pub fn check_version(expected: i32, actual: i32) -> AppResult<i32> {
|
||||
if expected == actual { Ok(actual + 1) }
|
||||
else { Err(AppError::VersionMismatch) }
|
||||
}
|
||||
```
|
||||
|
||||
### Task 5.4: 服务器端集成
|
||||
|
||||
**修改文件：**
|
||||
|
||||
1. `crates/erp-server/Cargo.toml` — 添加 erp-message 依赖
|
||||
2. `crates/erp-server/src/state.rs` — 添加 `FromRef<AppState> for MessageState`
|
||||
3. `crates/erp-server/src/main.rs` — 初始化并注册 MessageModule，合并路由
|
||||
|
||||
### Task 5.5: 前端 — 消息 API 与页面
|
||||
|
||||
**创建/修改文件：**
|
||||
|
||||
1. `apps/web/src/api/messages.ts` — 消息 API 客户端
|
||||
2. `apps/web/src/api/messageTemplates.ts` — 模板 API 客户端
|
||||
3. `apps/web/src/pages/Messages.tsx` — 消息中心主页面 (Tabs: 通知列表/已归档)
|
||||
4. `apps/web/src/pages/messages/NotificationList.tsx` — 通知列表子组件
|
||||
5. `apps/web/src/pages/messages/MessageTemplates.tsx` — 模板管理子组件
|
||||
6. `apps/web/src/pages/messages/NotificationPreferences.tsx` — 通知偏好设置
|
||||
7. `apps/web/src/App.tsx` — 添加 `/messages` 路由
|
||||
8. `apps/web/src/layouts/MainLayout.tsx` — 添加消息菜单项 + Bell 点击弹出通知面板
|
||||
|
||||
### Task 5.6: 通知面板与未读计数
|
||||
|
||||
**修改文件：**
|
||||
|
||||
1. `apps/web/src/layouts/MainLayout.tsx` — Bell 图标添加 Badge (未读数) + Popover 通知面板
|
||||
2. `apps/web/src/stores/message.ts` — Zustand store: unreadCount, fetchUnread, recentMessages
|
||||
3. `apps/web/src/components/NotificationPanel.tsx` — 通知弹出面板组件
|
||||
IntoResponse 中 `VersionMismatch` 映射到 `StatusCode::CONFLICT` (409)。
|
||||
|
||||
---
|
||||
|
||||
## Phase 6: 整合与打磨
|
||||
## Task 7.2: 乐观锁 — 全部 Service 方法 + DTO
|
||||
|
||||
### Task 6.1: 跨模块事件集成 — 工作流 → 消息
|
||||
**原则：** 所有用户可调用的 update/delete 方法必须检查并递增 version。
|
||||
|
||||
**修改文件：**
|
||||
### DTO 变更
|
||||
|
||||
1. `crates/erp-message/src/module.rs` — `register_event_handlers()` 订阅工作流事件
|
||||
2. `crates/erp-message/src/service/message_service.rs` — 添加事件处理方法
|
||||
3. 订阅的事件：
|
||||
- `workflow.instance.started` → 通知发起人
|
||||
- `workflow.task.created` → 通知待办人
|
||||
- `workflow.task.completed` → 通知发起人
|
||||
- `workflow.instance.completed` → 通知发起人
|
||||
- `workflow.instance.terminated` → 通知相关人
|
||||
**所有 Update*Req** 添加 `pub version: i32` 字段（必填）。涉及：
|
||||
|
||||
### Task 6.2: 审计日志
|
||||
| Crate | DTO 文件 | DTOs |
|
||||
|-------|---------|------|
|
||||
| erp-auth | `dto.rs` | UpdateUserReq, UpdateRoleReq, UpdateOrganizationReq, UpdateDepartmentReq, UpdatePositionReq |
|
||||
| erp-config | `dto.rs` | UpdateDictionaryReq, UpdateDictionaryItemReq, UpdateMenuReq, UpdateNumberingRuleReq |
|
||||
| erp-workflow | `dto.rs` | UpdateProcessDefinitionReq |
|
||||
| erp-message | `dto.rs` | UpdateSubscriptionReq (如果存在) |
|
||||
|
||||
**创建/修改文件：**
|
||||
**所有 *Resp** 添加 `pub version: i32` 字段。涉及：
|
||||
|
||||
1. 迁移 `m20260413_000026_create_audit_logs.rs` — 审计日志表
|
||||
- id, tenant_id, user_id, action, resource_type, resource_id,
|
||||
- old_value (JSON), new_value (JSON), ip_address, user_agent,
|
||||
- 标准审计字段
|
||||
2. `crates/erp-core/src/audit.rs` — 审计中间件/工具函数
|
||||
3. `crates/erp-server/src/main.rs` — 应用审计中间件到 protected routes
|
||||
| Crate | Resp DTOs |
|
||||
|-------|-----------|
|
||||
| erp-auth | UserResp, RoleResp, OrganizationResp, DepartmentResp, PositionResp |
|
||||
| erp-config | DictionaryResp, DictionaryItemResp, MenuResp, SettingResp, NumberingRuleResp |
|
||||
| erp-workflow | ProcessDefinitionResp, ProcessInstanceResp, TaskResp |
|
||||
| erp-message | MessageResp, MessageSubscriptionResp |
|
||||
|
||||
### Task 6.3: API 文档完善
|
||||
每个 `model_to_resp` 函数添加 `version: m.version`。
|
||||
|
||||
**修改文件：**
|
||||
### Service 方法变更
|
||||
|
||||
1. `crates/erp-server/src/main.rs` — 添加 utoipa Swagger UI 路由
|
||||
2. 各模块已有 utoipa 注解，确保正确注册到 OpenApi
|
||||
**Update 模式（有 DTO）：**
|
||||
```rust
|
||||
// 在 update 方法中，读取 model 后：
|
||||
let next_ver = erp_core::error::check_version(req.version, model.version)?;
|
||||
// ... 设置字段 ...
|
||||
active.version = Set(next_ver);
|
||||
active.update(db).await?;
|
||||
```
|
||||
|
||||
### Task 6.4: 安全审查
|
||||
**Delete 模式（无 DTO version）：**
|
||||
```rust
|
||||
// delete 方法中，读取 model 后：
|
||||
active.version = Set(model.version + 1);
|
||||
```
|
||||
|
||||
检查项：
|
||||
- JWT 中间件正确性
|
||||
- 多租户隔离 (所有查询带 tenant_id)
|
||||
- SQL 注入防护 (SeaORM 参数化)
|
||||
- CORS 配置
|
||||
- 密码安全 (Argon2)
|
||||
- 输入验证 (所有 API 端点)
|
||||
- 错误信息不泄露敏感数据
|
||||
**涉及文件（13 个 service 的 update/delete 方法）：**
|
||||
|
||||
### Task 6.5: 前端整合完善
|
||||
| Crate | 文件 | 方法 |
|
||||
|-------|------|------|
|
||||
| erp-auth | `user_service.rs` | update, delete |
|
||||
| erp-auth | `role_service.rs` | update, delete |
|
||||
| erp-auth | `org_service.rs` | update, delete |
|
||||
| erp-auth | `dept_service.rs` | update, delete |
|
||||
| erp-auth | `position_service.rs` | update, delete |
|
||||
| erp-config | `dictionary_service.rs` | update, delete, update_item, delete_item |
|
||||
| erp-config | `menu_service.rs` | update, delete |
|
||||
| erp-config | `setting_service.rs` | set (update 分支), delete |
|
||||
| erp-config | `numbering_service.rs` | update, delete |
|
||||
| erp-workflow | `definition_service.rs` | update, publish, delete |
|
||||
| erp-workflow | `instance_service.rs` | 状态变更方法 (suspend/resume/terminate) |
|
||||
| erp-workflow | `task_service.rs` | complete, delegate |
|
||||
| erp-message | `message_service.rs` | mark_read, delete |
|
||||
| erp-message | `subscription_service.rs` | upsert (update 分支) |
|
||||
|
||||
**修改文件：**
|
||||
**注意：** `numbering_service::generate_number` 使用 advisory lock，不需要 version 检查。
|
||||
|
||||
1. `apps/web/src/layouts/MainLayout.tsx` — 完善通知面板交互
|
||||
2. 工作流页面集成消息通知反馈
|
||||
3. 整体 UI 打磨和一致性检查
|
||||
### 前端适配
|
||||
|
||||
前端所有编辑表单需要在请求时传递 version 字段。涉及：
|
||||
- `apps/web/src/pages/` 下所有调用 PUT API 的页面
|
||||
|
||||
---
|
||||
|
||||
## 实施顺序
|
||||
## Task 7.3: 审计日志
|
||||
|
||||
```
|
||||
Task 5.1 (迁移)
|
||||
→ Task 5.2 (crate 基础)
|
||||
→ Task 5.3 (服务+处理器)
|
||||
→ Task 5.4 (服务器集成)
|
||||
→ Task 5.5 (前端页面)
|
||||
→ Task 5.6 (通知面板)
|
||||
→ Task 6.1 (事件集成)
|
||||
→ Task 6.2 (审计日志)
|
||||
→ Task 6.3 (API 文档)
|
||||
→ Task 6.4 (安全审查)
|
||||
→ Task 6.5 (前端整合)
|
||||
### 7.3a: SeaORM Entity
|
||||
|
||||
**新建文件：**
|
||||
- `crates/erp-core/src/entity/mod.rs`
|
||||
- `crates/erp-core/src/entity/audit_log.rs`
|
||||
|
||||
**修改文件：**
|
||||
- `crates/erp-core/src/lib.rs` — 添加 `pub mod entity;`
|
||||
- `crates/erp-core/Cargo.toml` — 添加 sea-orm 依赖（如果尚未有）
|
||||
|
||||
audit_log.rs Entity 映射已有的 `audit_logs` 表（迁移 #26 已存在）。
|
||||
|
||||
### 7.3b: 审计记录服务
|
||||
|
||||
**新建文件：** `crates/erp-core/src/audit_service.rs`
|
||||
|
||||
```rust
|
||||
/// 持久化审计日志到 audit_logs 表。
|
||||
/// 使用 fire-and-forget 模式：失败仅记录日志，不影响业务操作。
|
||||
pub async fn record(log: AuditLog, db: &DatabaseConnection) {
|
||||
// AuditLog → audit_log::ActiveModel → insert
|
||||
// 失败时 tracing::warn!
|
||||
}
|
||||
```
|
||||
|
||||
每个 Task 完成后立即提交。每个 Task 预计产生 1 个 commit。
|
||||
**修改文件：** `crates/erp-core/src/lib.rs` — 添加 `pub mod audit_service;`
|
||||
|
||||
## 验证方式
|
||||
### 7.3c: 集成到所有 mutation service
|
||||
|
||||
1. `cargo check` — 全 workspace 编译通过
|
||||
2. `cargo test --workspace` — 所有测试通过
|
||||
3. `cargo run -p erp-server` — 服务启动正常
|
||||
4. 浏览器验证消息 CRUD 流程
|
||||
5. 验证通知面板未读计数
|
||||
6. 验证工作流事件触发消息通知
|
||||
7. Swagger UI 验证 API 文档
|
||||
在每个 service 的 create/update/delete 方法中，操作成功后调用 `audit_service::record()`。
|
||||
|
||||
**请求信息获取：** handler 层从 `HeaderMap` 提取 IP 和 User-Agent，传给 service。
|
||||
|
||||
```rust
|
||||
// handler 中
|
||||
fn extract_request_info(headers: &HeaderMap) -> (Option<String>, Option<String>) {
|
||||
let ip = headers.get("x-forwarded-for").or_else(|| headers.get("x-real-ip"))
|
||||
.and_then(|v| v.to_str().ok()).map(|s| s.to_string());
|
||||
let ua = headers.get("user-agent").and_then(|v| v.to_str().ok()).map(|s| s.to_string());
|
||||
(ip, ua)
|
||||
}
|
||||
```
|
||||
|
||||
Handler 签名增加 `headers: HeaderMap` 参数，service 方法签名增加 `ip: Option<String>, user_agent: Option<String>`。
|
||||
|
||||
**涉及文件（与乐观锁相同 + handler 层）：**
|
||||
|
||||
| Crate | Handler 文件 |
|
||||
|-------|-------------|
|
||||
| erp-auth | `user_handler.rs`, `role_handler.rs`, `org_handler.rs` |
|
||||
| erp-config | `dictionary_handler.rs`, `menu_handler.rs`, `setting_handler.rs`, `numbering_handler.rs` |
|
||||
| erp-workflow | `definition_handler.rs`, `instance_handler.rs`, `task_handler.rs` |
|
||||
| erp-message | `message_handler.rs`, `subscription_handler.rs` |
|
||||
|
||||
---
|
||||
|
||||
## Task 7.4: Redis 限流
|
||||
|
||||
### 7.4a: Redis 存入 AppState
|
||||
|
||||
**修改文件：**
|
||||
- `crates/erp-server/src/state.rs` — `AppState` 添加 `pub redis: redis::Client`
|
||||
- `crates/erp-server/src/main.rs` — `_redis_client` → `redis_client`，传入 AppState
|
||||
|
||||
### 7.4b: 限流中间件
|
||||
|
||||
**新建文件：**
|
||||
- `crates/erp-server/src/middleware/mod.rs`
|
||||
- `crates/erp-server/src/middleware/rate_limit.rs`
|
||||
|
||||
使用 Redis INCR + EXPIRE 实现滑动窗口：
|
||||
- Key: `rate_limit:{prefix}:{identifier}`
|
||||
- 登录: 5 次/分钟/IP
|
||||
- 写操作: 100 次/分钟/user_id
|
||||
|
||||
### 7.4c: 应用限流层
|
||||
|
||||
**修改文件：** `crates/erp-server/src/main.rs`
|
||||
- 登录路由添加 IP 限流层
|
||||
- protected routes 添加 user_id 限流层
|
||||
- 超限返回 HTTP 429 Too Many Requests
|
||||
|
||||
**修改文件：** `crates/erp-core/src/error.rs`
|
||||
- 添加 `TooManyRequests` 变体（可选，中间件可直接返回 429）
|
||||
|
||||
---
|
||||
|
||||
## Task 7.5: 事件 Outbox 持久化
|
||||
|
||||
### 7.5a: 数据库迁移
|
||||
|
||||
**新建文件：** `crates/erp-server/migration/src/m20260416_000031_create_domain_events.rs`
|
||||
|
||||
```sql
|
||||
CREATE TABLE IF NOT EXISTS domain_events (
|
||||
id UUID PRIMARY KEY,
|
||||
tenant_id UUID NOT NULL,
|
||||
event_type VARCHAR(200) NOT NULL,
|
||||
payload JSONB,
|
||||
correlation_id UUID,
|
||||
status VARCHAR(20) NOT NULL DEFAULT 'pending',
|
||||
attempts INT NOT NULL DEFAULT 0,
|
||||
last_error TEXT,
|
||||
created_at TIMESTAMPTZ NOT NULL,
|
||||
published_at TIMESTAMPTZ
|
||||
);
|
||||
CREATE INDEX idx_domain_events_status ON domain_events (status, created_at);
|
||||
CREATE INDEX idx_domain_events_tenant ON domain_events (tenant_id);
|
||||
```
|
||||
|
||||
**修改文件：** `crates/erp-server/migration/src/lib.rs` — 注册新迁移
|
||||
|
||||
### 7.5b: SeaORM Entity
|
||||
|
||||
**新建文件：** `crates/erp-core/src/entity/domain_event.rs`
|
||||
|
||||
**修改文件：** `crates/erp-core/src/entity/mod.rs` — 添加 `pub mod domain_event;`
|
||||
|
||||
### 7.5c: EventBus 改造
|
||||
|
||||
**修改文件：** `crates/erp-core/src/events.rs`
|
||||
|
||||
- 现有 `publish()` 重命名为 `broadcast()`（内部使用）
|
||||
- 新增 `publish_with_persist(event, db)` — 先 INSERT domain_events，再 broadcast
|
||||
- INSERT 失败时仅 log warning，仍然 broadcast（best-effort）
|
||||
|
||||
### 7.5d: 更新所有 publish 调用点
|
||||
|
||||
全部 25 个 `event_bus.publish(...)` 调用改为 `event_bus.publish_with_persist(event, db).await`。
|
||||
|
||||
**涉及文件：**
|
||||
- `erp-auth/src/service/` — 5 个文件 (user, role, org, dept, position)
|
||||
- `erp-config/src/service/` — 4 个文件 (dictionary, menu, setting, numbering)
|
||||
- `erp-workflow/src/service/` — 3 个文件 (definition, instance, task)
|
||||
- `erp-message/src/service/` — 1 个文件 (message_service)
|
||||
|
||||
### 7.5e: Outbox Relay 后台任务
|
||||
|
||||
**新建文件：** `crates/erp-server/src/outbox.rs`
|
||||
|
||||
后台 tokio task 每 5 秒扫描 `domain_events WHERE status = 'pending'`，重新 broadcast 并标记为 published。
|
||||
|
||||
**修改文件：** `crates/erp-server/src/main.rs` — 启动 outbox relay
|
||||
|
||||
---
|
||||
|
||||
## 关键文件索引
|
||||
|
||||
| 用途 | 文件路径 |
|
||||
|------|---------|
|
||||
| 迁移注册 | `crates/erp-server/migration/src/lib.rs` |
|
||||
| 服务器入口 | `crates/erp-server/src/main.rs` |
|
||||
| 状态桥接 | `crates/erp-server/src/state.rs` |
|
||||
| 模块 trait | `crates/erp-core/src/module.rs` |
|
||||
| 事件总线 | `crates/erp-core/src/events.rs` |
|
||||
| 错误类型 | `crates/erp-core/src/error.rs` |
|
||||
| 前端路由 | `apps/web/src/App.tsx` |
|
||||
| 布局 | `apps/web/src/layouts/MainLayout.tsx` |
|
||||
| API 客户端 | `apps/web/src/api/client.ts` |
|
||||
| 参考模块 | `crates/erp-workflow/` (完整模式参考) |
|
||||
| 事件总线 | `crates/erp-core/src/events.rs` |
|
||||
| 审计日志类型 | `crates/erp-core/src/audit.rs` |
|
||||
| AppState | `crates/erp-server/src/state.rs` |
|
||||
| 服务器入口 | `crates/erp-server/src/main.rs` |
|
||||
| 迁移注册 | `crates/erp-server/migration/src/lib.rs` |
|
||||
| Auth DTO | `crates/erp-auth/src/dto.rs` |
|
||||
| Auth Service 参考 | `crates/erp-auth/src/service/user_service.rs` |
|
||||
| Auth Handler 参考 | `crates/erp-auth/src/handler/user_handler.rs` |
|
||||
|
||||
## 验证方式
|
||||
|
||||
1. `cargo check` — 全 workspace 编译通过
|
||||
2. `cargo test --workspace` — 所有测试通过
|
||||
3. 手动测试：更新用户两次（第二次用旧 version）→ 409 Conflict
|
||||
4. 手动测试：登录限流 → 第 6 次返回 429
|
||||
5. 查询 `SELECT * FROM audit_logs` → 验证审计记录
|
||||
6. 查询 `SELECT * FROM domain_events` → 验证事件持久化
|
||||
7. 重启服务后验证 pending 事件被 relay 处理
|
||||
|
||||
Reference in New Issue
Block a user