diff --git a/admin/index.html b/admin/index.html
new file mode 100644
index 0000000..9170fa8
--- /dev/null
+++ b/admin/index.html
@@ -0,0 +1,13 @@
+
+
+
+
+
+
+ 摄影作品集 - 管理后台
+
+
+
+
+
+
\ No newline at end of file
diff --git a/admin/package.json b/admin/package.json
new file mode 100644
index 0000000..ac44145
--- /dev/null
+++ b/admin/package.json
@@ -0,0 +1,52 @@
+{
+ "name": "photography-admin",
+ "version": "1.0.0",
+ "private": true,
+ "type": "module",
+ "scripts": {
+ "dev": "vite",
+ "build": "tsc && vite build",
+ "preview": "vite preview",
+ "lint": "eslint . --ext ts,tsx --report-unused-disable-directives --max-warnings 0",
+ "lint:fix": "eslint . --ext ts,tsx --fix",
+ "type-check": "tsc --noEmit"
+ },
+ "dependencies": {
+ "@radix-ui/react-dialog": "^1.0.5",
+ "@radix-ui/react-dropdown-menu": "^2.0.6",
+ "@radix-ui/react-label": "^2.0.2",
+ "@radix-ui/react-select": "^2.0.0",
+ "@radix-ui/react-slot": "^1.0.2",
+ "@radix-ui/react-switch": "^1.0.3",
+ "@radix-ui/react-tabs": "^1.0.4",
+ "@radix-ui/react-toast": "^1.1.5",
+ "@tanstack/react-query": "^5.17.19",
+ "@tanstack/react-query-devtools": "^5.17.21",
+ "axios": "^1.6.5",
+ "class-variance-authority": "^0.7.0",
+ "clsx": "^2.1.0",
+ "lucide-react": "^0.312.0",
+ "react": "^18.2.0",
+ "react-dom": "^18.2.0",
+ "react-hook-form": "^7.48.2",
+ "react-router-dom": "^6.20.1",
+ "tailwind-merge": "^2.2.0",
+ "tailwindcss-animate": "^1.0.7",
+ "zustand": "^4.4.7"
+ },
+ "devDependencies": {
+ "@types/react": "^18.2.43",
+ "@types/react-dom": "^18.2.17",
+ "@typescript-eslint/eslint-plugin": "^6.14.0",
+ "@typescript-eslint/parser": "^6.14.0",
+ "@vitejs/plugin-react": "^4.2.1",
+ "autoprefixer": "^10.4.16",
+ "eslint": "^8.55.0",
+ "eslint-plugin-react-hooks": "^4.6.0",
+ "eslint-plugin-react-refresh": "^0.4.5",
+ "postcss": "^8.4.32",
+ "tailwindcss": "^3.4.0",
+ "typescript": "^5.2.2",
+ "vite": "^5.0.8"
+ }
+}
\ No newline at end of file
diff --git a/admin/src/App.tsx b/admin/src/App.tsx
new file mode 100644
index 0000000..6b36fb1
--- /dev/null
+++ b/admin/src/App.tsx
@@ -0,0 +1,34 @@
+import { Routes, Route, Navigate } from 'react-router-dom'
+import { useAuthStore } from './stores/authStore'
+import LoginPage from './pages/LoginPage'
+import DashboardLayout from './components/DashboardLayout'
+import Dashboard from './pages/Dashboard'
+import Photos from './pages/Photos'
+import Categories from './pages/Categories'
+import Tags from './pages/Tags'
+import Users from './pages/Users'
+import Settings from './pages/Settings'
+
+function App() {
+ const { isAuthenticated } = useAuthStore()
+
+ if (!isAuthenticated) {
+ return
+ }
+
+ return (
+
+
+ } />
+ } />
+ } />
+ } />
+ } />
+ } />
+ } />
+
+
+ )
+}
+
+export default App
\ No newline at end of file
diff --git a/admin/src/main.tsx b/admin/src/main.tsx
new file mode 100644
index 0000000..278c105
--- /dev/null
+++ b/admin/src/main.tsx
@@ -0,0 +1,27 @@
+import React from 'react'
+import ReactDOM from 'react-dom/client'
+import { BrowserRouter } from 'react-router-dom'
+import { QueryClient, QueryClientProvider } from '@tanstack/react-query'
+import { ReactQueryDevtools } from '@tanstack/react-query-devtools'
+import App from './App'
+import './index.css'
+
+const queryClient = new QueryClient({
+ defaultOptions: {
+ queries: {
+ retry: false,
+ refetchOnWindowFocus: false,
+ },
+ },
+})
+
+ReactDOM.createRoot(document.getElementById('root')!).render(
+
+
+
+
+
+
+
+ ,
+)
\ No newline at end of file
diff --git a/admin/tsconfig.json b/admin/tsconfig.json
new file mode 100644
index 0000000..abdb131
--- /dev/null
+++ b/admin/tsconfig.json
@@ -0,0 +1,25 @@
+{
+ "compilerOptions": {
+ "target": "ES2020",
+ "useDefineForClassFields": true,
+ "lib": ["ES2020", "DOM", "DOM.Iterable"],
+ "module": "ESNext",
+ "skipLibCheck": true,
+ "moduleResolution": "bundler",
+ "allowImportingTsExtensions": true,
+ "resolveJsonModule": true,
+ "isolatedModules": true,
+ "noEmit": true,
+ "jsx": "react-jsx",
+ "strict": true,
+ "noUnusedLocals": true,
+ "noUnusedParameters": true,
+ "noFallthroughCasesInSwitch": true,
+ "baseUrl": ".",
+ "paths": {
+ "@/*": ["./src/*"]
+ }
+ },
+ "include": ["src"],
+ "references": [{ "path": "./tsconfig.node.json" }]
+}
\ No newline at end of file
diff --git a/admin/tsconfig.node.json b/admin/tsconfig.node.json
new file mode 100644
index 0000000..099658c
--- /dev/null
+++ b/admin/tsconfig.node.json
@@ -0,0 +1,10 @@
+{
+ "compilerOptions": {
+ "composite": true,
+ "skipLibCheck": true,
+ "module": "ESNext",
+ "moduleResolution": "bundler",
+ "allowSyntheticDefaultImports": true
+ },
+ "include": ["vite.config.ts"]
+}
\ No newline at end of file
diff --git a/admin/vite.config.ts b/admin/vite.config.ts
new file mode 100644
index 0000000..ea63bf8
--- /dev/null
+++ b/admin/vite.config.ts
@@ -0,0 +1,27 @@
+import { defineConfig } from 'vite'
+import react from '@vitejs/plugin-react'
+import path from 'path'
+
+export default defineConfig({
+ plugins: [react()],
+ resolve: {
+ alias: {
+ "@": path.resolve(__dirname, "./src"),
+ },
+ },
+ server: {
+ port: 3001,
+ host: true,
+ proxy: {
+ '/api': {
+ target: 'http://localhost:8080',
+ changeOrigin: true,
+ },
+ },
+ },
+ build: {
+ outDir: 'dist',
+ assetsDir: 'assets',
+ sourcemap: false,
+ },
+})
\ No newline at end of file
diff --git a/backend/Makefile b/backend/Makefile
new file mode 100644
index 0000000..9ea0ca4
--- /dev/null
+++ b/backend/Makefile
@@ -0,0 +1,174 @@
+.PHONY: build run test clean install dev docker-build docker-run docker-stop migrate
+
+# 应用配置
+APP_NAME := photography-backend
+VERSION := 1.0.0
+BUILD_TIME := $(shell date +%Y%m%d_%H%M%S)
+LDFLAGS := -X main.Version=$(VERSION) -X main.BuildTime=$(BUILD_TIME)
+
+# 构建相关
+BUILD_DIR := bin
+MAIN_FILE := cmd/server/main.go
+
+# 数据库配置
+DB_URL := postgres://postgres:password@localhost:5432/photography?sslmode=disable
+MIGRATION_DIR := migrations
+
+# 安装依赖
+install:
+ @echo "Installing dependencies..."
+ go mod download
+ go mod tidy
+
+# 构建应用
+build:
+ @echo "Building $(APP_NAME)..."
+ mkdir -p $(BUILD_DIR)
+ CGO_ENABLED=0 go build -ldflags "$(LDFLAGS)" -o $(BUILD_DIR)/$(APP_NAME) $(MAIN_FILE)
+
+# 运行应用
+run:
+ @echo "Running $(APP_NAME)..."
+ go run $(MAIN_FILE)
+
+# 开发模式运行
+dev:
+ @echo "Running in development mode..."
+ air -c .air.toml || go run $(MAIN_FILE)
+
+# 运行测试
+test:
+ @echo "Running tests..."
+ go test -v ./...
+
+# 运行测试（带覆盖率）
+test-coverage:
+ @echo "Running tests with coverage..."
+ go test -v -coverprofile=coverage.out ./...
+ go tool cover -html=coverage.out -o coverage.html
+
+# 代码检查
+lint:
+ @echo "Running linter..."
+ golangci-lint run
+
+# 格式化代码
+fmt:
+ @echo "Formatting code..."
+ go fmt ./...
+
+# 清理构建文件
+clean:
+ @echo "Cleaning build files..."
+ rm -rf $(BUILD_DIR)
+ rm -f coverage.out coverage.html
+
+# 数据库迁移
+migrate-up:
+ @echo "Running database migrations..."
+ migrate -path $(MIGRATION_DIR) -database "$(DB_URL)" up
+
+migrate-down:
+ @echo "Rolling back database migrations..."
+ migrate -path $(MIGRATION_DIR) -database "$(DB_URL)" down
+
+migrate-force:
+ @echo "Forcing migration version..."
+ migrate -path $(MIGRATION_DIR) -database "$(DB_URL)" force $(VERSION)
+
+# 创建新的迁移文件
+migrate-create:
+ @echo "Creating new migration: $(NAME)"
+ migrate create -ext sql -dir $(MIGRATION_DIR) -seq $(NAME)
+
+# Docker 相关
+docker-build:
+ @echo "Building Docker image..."
+ docker build -t $(APP_NAME):$(VERSION) .
+ docker tag $(APP_NAME):$(VERSION) $(APP_NAME):latest
+
+docker-run:
+ @echo "Running Docker container..."
+ docker-compose up -d
+
+docker-stop:
+ @echo "Stopping Docker containers..."
+ docker-compose down
+
+docker-logs:
+ @echo "Showing Docker logs..."
+ docker-compose logs -f
+
+# 开发环境
+dev-up:
+ @echo "Starting development environment..."
+ docker-compose -f docker-compose.dev.yml up -d
+
+dev-down:
+ @echo "Stopping development environment..."
+ docker-compose -f docker-compose.dev.yml down
+
+# 生产环境
+prod-up:
+ @echo "Starting production environment..."
+ docker-compose -f docker-compose.prod.yml up -d
+
+prod-down:
+ @echo "Stopping production environment..."
+ docker-compose -f docker-compose.prod.yml down
+
+# 数据库备份
+backup-db:
+ @echo "Backing up database..."
+ docker exec photography-postgres pg_dump -U postgres photography > backup_$(shell date +%Y%m%d_%H%M%S).sql
+
+# 工具安装
+install-tools:
+ @echo "Installing development tools..."
+ go install github.com/cosmtrek/air@latest
+ go install github.com/golang-migrate/migrate/v4/cmd/migrate@latest
+ go install github.com/golangci/golangci-lint/cmd/golangci-lint@latest
+
+# 初始化项目
+init: install-tools install
+ @echo "Initializing project..."
+ mkdir -p logs uploads
+
+# 检查依赖更新
+mod-update:
+ @echo "Checking for module updates..."
+ go list -u -m all
+
+# 生成 API 文档
+docs:
+ @echo "Generating API documentation..."
+ swag init -g cmd/server/main.go -o docs/swagger
+
+# 全面检查
+check: fmt lint test
+ @echo "All checks passed!"
+
+# 构建发布版本
+release: clean build
+ @echo "Building release version..."
+ tar -czf $(BUILD_DIR)/$(APP_NAME)-$(VERSION)-$(BUILD_TIME).tar.gz -C $(BUILD_DIR) $(APP_NAME)
+
+# 帮助信息
+help:
+ @echo "Available commands:"
+ @echo " install - Install dependencies"
+ @echo " build - Build the application"
+ @echo " run - Run the application"
+ @echo " dev - Run in development mode"
+ @echo " test - Run tests"
+ @echo " lint - Run linter"
+ @echo " fmt - Format code"
+ @echo " clean - Clean build files"
+ @echo " migrate-up - Run database migrations"
+ @echo " migrate-down - Rollback database migrations"
+ @echo " docker-build - Build Docker image"
+ @echo " docker-run - Run Docker container"
+ @echo " docker-stop - Stop Docker containers"
+ @echo " dev-up - Start development environment"
+ @echo " prod-up - Start production environment"
+ @echo " help - Show this help message"
\ No newline at end of file
diff --git a/backend/cmd/server/main.go b/backend/cmd/server/main.go
new file mode 100644
index 0000000..967171a
--- /dev/null
+++ b/backend/cmd/server/main.go
@@ -0,0 +1,128 @@
+package main
+
+import (
+ "fmt"
+ "log"
+ "os"
+ "os/signal"
+ "syscall"
+ "context"
+ "net/http"
+ "time"
+
+ "github.com/gin-gonic/gin"
+ "go.uber.org/zap"
+
+ "photography-backend/internal/config"
+ "photography-backend/internal/repository/postgres"
+ "photography-backend/internal/service/auth"
+ "photography-backend/internal/api/handlers"
+ "photography-backend/internal/api/middleware"
+ "photography-backend/internal/api/routes"
+ "photography-backend/pkg/logger"
+)
+
+func main() {
+ // 加载配置
+ cfg, err := config.LoadConfig("configs/config.yaml")
+ if err != nil {
+ log.Fatalf("Failed to load config: %v", err)
+ }
+
+ // 初始化日志
+ zapLogger, err := logger.InitLogger(&cfg.Logger)
+ if err != nil {
+ log.Fatalf("Failed to initialize logger: %v", err)
+ }
+ defer zapLogger.Sync()
+
+ // 初始化数据库
+ db, err := postgres.NewDatabase(&cfg.Database)
+ if err != nil {
+ zapLogger.Fatal("Failed to connect to database", zap.Error(err))
+ }
+ defer db.Close()
+
+ // 自动迁移数据库
+ if err := db.AutoMigrate(); err != nil {
+ zapLogger.Fatal("Failed to migrate database", zap.Error(err))
+ }
+
+ // 初始化仓库
+ userRepo := postgres.NewUserRepository(db.DB)
+ photoRepo := postgres.NewPhotoRepository(db.DB)
+ categoryRepo := postgres.NewCategoryRepository(db.DB)
+ tagRepo := postgres.NewTagRepository(db.DB)
+
+ // 初始化服务
+ jwtService := auth.NewJWTService(&cfg.JWT)
+ authService := auth.NewAuthService(userRepo, jwtService)
+
+ // 初始化处理器
+ authHandler := handlers.NewAuthHandler(authService)
+
+ // 初始化中间件
+ authMiddleware := middleware.NewAuthMiddleware(jwtService)
+
+ // 设置Gin模式
+ if cfg.IsProduction() {
+ gin.SetMode(gin.ReleaseMode)
+ }
+
+ // 创建Gin引擎
+ r := gin.New()
+
+ // 添加中间件
+ r.Use(middleware.RequestIDMiddleware())
+ r.Use(middleware.LoggerMiddleware(zapLogger))
+ r.Use(middleware.CORSMiddleware(&cfg.CORS))
+ r.Use(gin.Recovery())
+
+ // 健康检查
+ r.GET("/health", func(c *gin.Context) {
+ c.JSON(http.StatusOK, gin.H{
+ "status": "ok",
+ "timestamp": time.Now().Unix(),
+ "version": cfg.App.Version,
+ })
+ })
+
+ // 设置路由
+ routes.SetupRoutes(r, &routes.Handlers{
+ Auth: authHandler,
+ }, authMiddleware)
+
+ // 创建HTTP服务器
+ server := &http.Server{
+ Addr: cfg.GetServerAddr(),
+ Handler: r,
+ ReadTimeout: 10 * time.Second,
+ WriteTimeout: 10 * time.Second,
+ MaxHeaderBytes: 1 << 20,
+ }
+
+ // 启动服务器
+ go func() {
+ zapLogger.Info("Starting server", zap.String("addr", server.Addr))
+ if err := server.ListenAndServe(); err != nil && err != http.ErrServerClosed {
+ zapLogger.Fatal("Failed to start server", zap.Error(err))
+ }
+ }()
+
+ // 等待中断信号
+ quit := make(chan os.Signal, 1)
+ signal.Notify(quit, syscall.SIGINT, syscall.SIGTERM)
+ <-quit
+
+ zapLogger.Info("Shutting down server...")
+
+ // 优雅关闭
+ ctx, cancel := context.WithTimeout(context.Background(), 30*time.Second)
+ defer cancel()
+
+ if err := server.Shutdown(ctx); err != nil {
+ zapLogger.Fatal("Server forced to shutdown", zap.Error(err))
+ }
+
+ zapLogger.Info("Server exited")
+}
\ No newline at end of file
diff --git a/backend/configs/config.yaml b/backend/configs/config.yaml
new file mode 100644
index 0000000..a22f272
--- /dev/null
+++ b/backend/configs/config.yaml
@@ -0,0 +1,76 @@
+app:
+ name: "photography-backend"
+ version: "1.0.0"
+ environment: "development"
+ port: 8080
+ debug: true
+
+database:
+ host: "localhost"
+ port: 5432
+ username: "postgres"
+ password: "password"
+ database: "photography"
+ ssl_mode: "disable"
+ max_open_conns: 100
+ max_idle_conns: 10
+ conn_max_lifetime: 300
+
+redis:
+ host: "localhost"
+ port: 6379
+ password: ""
+ database: 0
+ pool_size: 100
+ min_idle_conns: 10
+
+jwt:
+ secret: "your-secret-key-change-in-production"
+ expires_in: "24h"
+ refresh_expires_in: "168h"
+
+storage:
+ type: "local" # local, s3, minio
+ local:
+ base_path: "./uploads"
+ base_url: "http://localhost:8080/uploads"
+ s3:
+ region: "us-east-1"
+ bucket: "photography-uploads"
+ access_key: ""
+ secret_key: ""
+ endpoint: ""
+
+upload:
+ max_file_size: 52428800 # 50MB
+ allowed_types: ["image/jpeg", "image/png", "image/gif", "image/webp", "image/tiff"]
+ thumbnail_sizes:
+ - name: "small"
+ width: 300
+ height: 300
+ - name: "medium"
+ width: 800
+ height: 600
+ - name: "large"
+ width: 1200
+ height: 900
+
+logger:
+ level: "debug"
+ format: "json"
+ output: "file"
+ filename: "logs/app.log"
+ max_size: 100
+ max_age: 7
+ compress: true
+
+cors:
+ allowed_origins: ["http://localhost:3000", "https://photography.iriver.top"]
+ allowed_methods: ["GET", "POST", "PUT", "DELETE", "PATCH", "OPTIONS"]
+ allowed_headers: ["Origin", "Content-Length", "Content-Type", "Authorization"]
+ allow_credentials: true
+
+rate_limit:
+ enabled: true
+ requests_per_minute: 100
+ burst: 50
\ No newline at end of file
diff --git a/backend/go.mod b/backend/go.mod
new file mode 100644
index 0000000..df36d3d
--- /dev/null
+++ b/backend/go.mod
@@ -0,0 +1,55 @@
+module photography-backend
+
+go 1.21
+
+require (
+ github.com/gin-gonic/gin v1.9.1
+ github.com/golang-jwt/jwt/v5 v5.2.0
+ gorm.io/gorm v1.25.5
+ gorm.io/driver/postgres v1.5.4
+ github.com/go-redis/redis/v8 v8.11.5
+ github.com/spf13/viper v1.18.2
+ go.uber.org/zap v1.26.0
+ github.com/stretchr/testify v1.8.4
+ github.com/golang-migrate/migrate/v4 v4.17.0
+ github.com/aws/aws-sdk-go-v2 v1.23.5
+ github.com/aws/aws-sdk-go-v2/service/s3 v1.43.0
+ golang.org/x/crypto v0.17.0
+ golang.org/x/image v0.14.0
+)
+
+require (
+ github.com/bytedance/sonic v1.9.1 // indirect
+ github.com/cespare/xxhash/v2 v2.2.0 // indirect
+ github.com/chenzhuoyu/base64x v0.0.0-20221115062448-fe3a3abad311 // indirect
+ github.com/dgryski/go-rendezvous v0.0.0-20200823014737-9f7001d12a5f // indirect
+ github.com/gabriel-vasile/mimetype v1.4.2 // indirect
+ github.com/gin-contrib/sse v0.1.0 // indirect
+ github.com/go-playground/locales v0.14.1 // indirect
+ github.com/go-playground/universal-translator v0.18.1 // indirect
+ github.com/go-playground/validator/v10 v10.14.0 // indirect
+ github.com/goccy/go-json v0.10.2 // indirect
+ github.com/jackc/pgpassfile v1.0.0 // indirect
+ github.com/jackc/pgservicefile v0.0.0-20221227161230-091c0ba34f0a // indirect
+ github.com/jackc/pgx/v5 v5.5.0 // indirect
+ github.com/jackc/puddle/v2 v2.2.1 // indirect
+ github.com/jinzhu/inflection v1.0.0 // indirect
+ github.com/jinzhu/now v1.1.5 // indirect
+ github.com/json-iterator/go v1.1.12 // indirect
+ github.com/klauspost/cpuid/v2 v2.2.4 // indirect
+ github.com/leodido/go-urn v1.2.4 // indirect
+ github.com/mattn/go-isatty v0.0.19 // indirect
+ github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
+ github.com/modern-go/reflect2 v1.0.2 // indirect
+ github.com/pelletier/go-toml/v2 v2.0.8 // indirect
+ github.com/twitchyliquid64/golang-asm v0.15.1 // indirect
+ github.com/ugorji/go/codec v1.2.11 // indirect
+ go.uber.org/multierr v1.11.0 // indirect
+ golang.org/x/arch v0.3.0 // indirect
+ golang.org/x/net v0.19.0 // indirect
+ golang.org/x/sync v0.5.0 // indirect
+ golang.org/x/sys v0.15.0 // indirect
+ golang.org/x/text v0.14.0 // indirect
+ google.golang.org/protobuf v1.30.0 // indirect
+ gopkg.in/yaml.v3 v3.0.1 // indirect
+)
\ No newline at end of file
diff --git a/backend/internal/api/handlers/auth_handler.go b/backend/internal/api/handlers/auth_handler.go
new file mode 100644
index 0000000..3a5c9e4
--- /dev/null
+++ b/backend/internal/api/handlers/auth_handler.go
@@ -0,0 +1,118 @@
+package handlers
+
+import (
+ "net/http"
+ "github.com/gin-gonic/gin"
+ "photography-backend/internal/models"
+ "photography-backend/internal/service/auth"
+ "photography-backend/internal/api/middleware"
+ "photography-backend/pkg/response"
+)
+
+// AuthHandler 认证处理器
+type AuthHandler struct {
+ authService *auth.AuthService
+}
+
+// NewAuthHandler 创建认证处理器
+func NewAuthHandler(authService *auth.AuthService) *AuthHandler {
+ return &AuthHandler{
+ authService: authService,
+ }
+}
+
+// Login 用户登录
+func (h *AuthHandler) Login(c *gin.Context) {
+ var req models.LoginRequest
+ if err := c.ShouldBindJSON(&req); err != nil {
+ c.JSON(http.StatusBadRequest, response.Error(http.StatusBadRequest, err.Error()))
+ return
+ }
+
+ loginResp, err := h.authService.Login(&req)
+ if err != nil {
+ c.JSON(http.StatusUnauthorized, response.Error(http.StatusUnauthorized, err.Error()))
+ return
+ }
+
+ c.JSON(http.StatusOK, response.Success(loginResp))
+}
+
+// Register 用户注册
+func (h *AuthHandler) Register(c *gin.Context) {
+ var req models.CreateUserRequest
+ if err := c.ShouldBindJSON(&req); err != nil {
+ c.JSON(http.StatusBadRequest, response.Error(http.StatusBadRequest, err.Error()))
+ return
+ }
+
+ user, err := h.authService.Register(&req)
+ if err != nil {
+ c.JSON(http.StatusBadRequest, response.Error(http.StatusBadRequest, err.Error()))
+ return
+ }
+
+ c.JSON(http.StatusCreated, response.Success(user))
+}
+
+// RefreshToken 刷新令牌
+func (h *AuthHandler) RefreshToken(c *gin.Context) {
+ var req models.RefreshTokenRequest
+ if err := c.ShouldBindJSON(&req); err != nil {
+ c.JSON(http.StatusBadRequest, response.Error(http.StatusBadRequest, err.Error()))
+ return
+ }
+
+ loginResp, err := h.authService.RefreshToken(&req)
+ if err != nil {
+ c.JSON(http.StatusUnauthorized, response.Error(http.StatusUnauthorized, err.Error()))
+ return
+ }
+
+ c.JSON(http.StatusOK, response.Success(loginResp))
+}
+
+// GetProfile 获取用户资料
+func (h *AuthHandler) GetProfile(c *gin.Context) {
+ userID, exists := middleware.GetCurrentUser(c)
+ if !exists {
+ c.JSON(http.StatusUnauthorized, response.Error(http.StatusUnauthorized, "User not authenticated"))
+ return
+ }
+
+ user, err := h.authService.GetUserByID(userID)
+ if err != nil {
+ c.JSON(http.StatusInternalServerError, response.Error(http.StatusInternalServerError, err.Error()))
+ return
+ }
+
+ c.JSON(http.StatusOK, response.Success(user))
+}
+
+// UpdatePassword 更新密码
+func (h *AuthHandler) UpdatePassword(c *gin.Context) {
+ userID, exists := middleware.GetCurrentUser(c)
+ if !exists {
+ c.JSON(http.StatusUnauthorized, response.Error(http.StatusUnauthorized, "User not authenticated"))
+ return
+ }
+
+ var req models.UpdatePasswordRequest
+ if err := c.ShouldBindJSON(&req); err != nil {
+ c.JSON(http.StatusBadRequest, response.Error(http.StatusBadRequest, err.Error()))
+ return
+ }
+
+ if err := h.authService.UpdatePassword(userID, &req); err != nil {
+ c.JSON(http.StatusBadRequest, response.Error(http.StatusBadRequest, err.Error()))
+ return
+ }
+
+ c.JSON(http.StatusOK, response.Success(gin.H{"message": "Password updated successfully"}))
+}
+
+// Logout 用户登出
+func (h *AuthHandler) Logout(c *gin.Context) {
+ // 简单实现，实际应用中可能需要将token加入黑名单
+ c.JSON(http.StatusOK, response.Success(gin.H{"message": "Logged out successfully"}))
+}
\ No newline at end of file
diff --git a/backend/internal/api/middleware/auth.go b/backend/internal/api/middleware/auth.go
new file mode 100644
index 0000000..7746c01
--- /dev/null
+++ b/backend/internal/api/middleware/auth.go
@@ -0,0 +1,217 @@
+package middleware
+
+import (
+ "net/http"
+ "strings"
+ "github.com/gin-gonic/gin"
+ "photography-backend/internal/service/auth"
+ "photography-backend/internal/models"
+)
+
+// AuthMiddleware 认证中间件
+type AuthMiddleware struct {
+ jwtService *auth.JWTService
+}
+
+// NewAuthMiddleware 创建认证中间件
+func NewAuthMiddleware(jwtService *auth.JWTService) *AuthMiddleware {
+ return &AuthMiddleware{
+ jwtService: jwtService,
+ }
+}
+
+// RequireAuth 需要认证的中间件
+func (m *AuthMiddleware) RequireAuth() gin.HandlerFunc {
+ return func(c *gin.Context) {
+ // 从Header中获取Authorization
+ authHeader := c.GetHeader("Authorization")
+ if authHeader == "" {
+ c.JSON(http.StatusUnauthorized, gin.H{
+ "error": "Authorization header is required",
+ })
+ c.Abort()
+ return
+ }
+
+ // 检查Bearer前缀
+ if !strings.HasPrefix(authHeader, "Bearer ") {
+ c.JSON(http.StatusUnauthorized, gin.H{
+ "error": "Invalid authorization header format",
+ })
+ c.Abort()
+ return
+ }
+
+ // 提取token
+ token := strings.TrimPrefix(authHeader, "Bearer ")
+
+ // 验证token
+ claims, err := m.jwtService.ValidateToken(token)
+ if err != nil {
+ c.JSON(http.StatusUnauthorized, gin.H{
+ "error": "Invalid or expired token",
+ })
+ c.Abort()
+ return
+ }
+
+ // 将用户信息存入上下文
+ c.Set("user_id", claims.UserID)
+ c.Set("username", claims.Username)
+ c.Set("user_role", claims.Role)
+
+ c.Next()
+ }
+}
+
+// RequireRole 需要特定角色的中间件
+func (m *AuthMiddleware) RequireRole(requiredRole string) gin.HandlerFunc {
+ return func(c *gin.Context) {
+ userRole, exists := c.Get("user_role")
+ if !exists {
+ c.JSON(http.StatusUnauthorized, gin.H{
+ "error": "User role not found in context",
+ })
+ c.Abort()
+ return
+ }
+
+ roleStr, ok := userRole.(string)
+ if !ok {
+ c.JSON(http.StatusUnauthorized, gin.H{
+ "error": "Invalid user role",
+ })
+ c.Abort()
+ return
+ }
+
+ // 检查角色权限
+ if !m.hasPermission(roleStr, requiredRole) {
+ c.JSON(http.StatusForbidden, gin.H{
+ "error": "Insufficient permissions",
+ })
+ c.Abort()
+ return
+ }
+
+ c.Next()
+ }
+}
+
+// RequireAdmin 需要管理员权限的中间件
+func (m *AuthMiddleware) RequireAdmin() gin.HandlerFunc {
+ return m.RequireRole(models.RoleAdmin)
+}
+
+// RequireEditor 需要编辑者权限的中间件
+func (m *AuthMiddleware) RequireEditor() gin.HandlerFunc {
+ return m.RequireRole(models.RoleEditor)
+}
+
+// OptionalAuth 可选认证中间件
+func (m *AuthMiddleware) OptionalAuth() gin.HandlerFunc {
+ return func(c *gin.Context) {
+ authHeader := c.GetHeader("Authorization")
+ if authHeader == "" {
+ c.Next()
+ return
+ }
+
+ if !strings.HasPrefix(authHeader, "Bearer ") {
+ c.Next()
+ return
+ }
+
+ token := strings.TrimPrefix(authHeader, "Bearer ")
+ claims, err := m.jwtService.ValidateToken(token)
+ if err != nil {
+ c.Next()
+ return
+ }
+
+ // 将用户信息存入上下文
+ c.Set("user_id", claims.UserID)
+ c.Set("username", claims.Username)
+ c.Set("user_role", claims.Role)
+
+ c.Next()
+ }
+}
+
+// GetCurrentUser 获取当前用户ID
+func GetCurrentUser(c *gin.Context) (uint, bool) {
+ userID, exists := c.Get("user_id")
+ if !exists {
+ return 0, false
+ }
+
+ id, ok := userID.(uint)
+ return id, ok
+}
+
+// GetCurrentUserRole 获取当前用户角色
+func GetCurrentUserRole(c *gin.Context) (string, bool) {
+ userRole, exists := c.Get("user_role")
+ if !exists {
+ return "", false
+ }
+
+ role, ok := userRole.(string)
+ return role, ok
+}
+
+// GetCurrentUsername 获取当前用户名
+func GetCurrentUsername(c *gin.Context) (string, bool) {
+ username, exists := c.Get("username")
+ if !exists {
+ return "", false
+ }
+
+ name, ok := username.(string)
+ return name, ok
+}
+
+// IsAuthenticated 检查是否已认证
+func IsAuthenticated(c *gin.Context) bool {
+ _, exists := c.Get("user_id")
+ return exists
+}
+
+// IsAdmin 检查是否为管理员
+func IsAdmin(c *gin.Context) bool {
+ role, exists := GetCurrentUserRole(c)
+ if !exists {
+ return false
+ }
+ return role == models.RoleAdmin
+}
+
+// IsEditor 检查是否为编辑者或以上
+func IsEditor(c *gin.Context) bool {
+ role, exists := GetCurrentUserRole(c)
+ if !exists {
+ return false
+ }
+ return role == models.RoleEditor || role == models.RoleAdmin
+}
+
+// hasPermission 检查权限
+func (m *AuthMiddleware) hasPermission(userRole, requiredRole string) bool {
+ roleLevel := map[string]int{
+ models.RoleUser: 1,
+ models.RoleEditor: 2,
+ models.RoleAdmin: 3,
+ }
+
+ userLevel, exists := roleLevel[userRole]
+ if !exists {
+ return false
+ }
+
+ requiredLevel, exists := roleLevel[requiredRole]
+ if !exists {
+ return false
+ }
+
+ return userLevel >= requiredLevel
+}
\ No newline at end of file
diff --git a/backend/internal/api/middleware/cors.go b/backend/internal/api/middleware/cors.go
new file mode 100644
index 0000000..75fb46d
--- /dev/null
+++ b/backend/internal/api/middleware/cors.go
@@ -0,0 +1,58 @@
+package middleware
+
+import (
+ "net/http"
+ "github.com/gin-gonic/gin"
+ "photography-backend/internal/config"
+)
+
+// CORSMiddleware CORS中间件
+func CORSMiddleware(cfg *config.CORSConfig) gin.HandlerFunc {
+ return func(c *gin.Context) {
+ origin := c.GetHeader("Origin")
+
+ // 检查是否允许的来源
+ allowed := false
+ for _, allowedOrigin := range cfg.AllowedOrigins {
+ if allowedOrigin == "*" || allowedOrigin == origin {
+ allowed = true
+ break
+ }
+ }
+
+ if allowed {
+ c.Header("Access-Control-Allow-Origin", origin)
+ }
+
+ // 设置其他CORS头
+ c.Header("Access-Control-Allow-Methods", joinStrings(cfg.AllowedMethods, ", "))
+ c.Header("Access-Control-Allow-Headers", joinStrings(cfg.AllowedHeaders, ", "))
+ c.Header("Access-Control-Max-Age", "86400")
+
+ if cfg.AllowCredentials {
+ c.Header("Access-Control-Allow-Credentials", "true")
+ }
+
+ // 处理预检请求
+ if c.Request.Method == "OPTIONS" {
+ c.AbortWithStatus(http.StatusNoContent)
+ return
+ }
+
+ c.Next()
+ }
+}
+
+// joinStrings 连接字符串数组
+func joinStrings(strs []string, sep string) string {
+ if len(strs) == 0 {
+ return ""
+ }
+
+ result := strs[0]
+ for i := 1; i < len(strs); i++ {
+ result += sep + strs[i]
+ }
+
+ return result
+}
\ No newline at end of file
diff --git a/backend/internal/api/middleware/logger.go b/backend/internal/api/middleware/logger.go
new file mode 100644
index 0000000..50b6db7
--- /dev/null
+++ b/backend/internal/api/middleware/logger.go
@@ -0,0 +1,74 @@
+package middleware
+
+import (
+ "time"
+ "github.com/gin-gonic/gin"
+ "go.uber.org/zap"
+)
+
+// LoggerMiddleware 日志中间件
+func LoggerMiddleware(logger *zap.Logger) gin.HandlerFunc {
+ return func(c *gin.Context) {
+ start := time.Now()
+ path := c.Request.URL.Path
+ raw := c.Request.URL.RawQuery
+
+ // 处理请求
+ c.Next()
+
+ // 计算延迟
+ latency := time.Since(start)
+
+ // 获取请求信息
+ clientIP := c.ClientIP()
+ method := c.Request.Method
+ statusCode := c.Writer.Status()
+ bodySize := c.Writer.Size()
+
+ if raw != "" {
+ path = path + "?" + raw
+ }
+
+ // 记录日志
+ logger.Info("HTTP Request",
+ zap.String("method", method),
+ zap.String("path", path),
+ zap.String("client_ip", clientIP),
+ zap.Int("status_code", statusCode),
+ zap.Int("body_size", bodySize),
+ zap.Duration("latency", latency),
+ zap.String("user_agent", c.Request.UserAgent()),
+ )
+ }
+}
+
+// RequestIDMiddleware 请求ID中间件
+func RequestIDMiddleware() gin.HandlerFunc {
+ return func(c *gin.Context) {
+ requestID := c.GetHeader("X-Request-ID")
+ if requestID == "" {
+ requestID = generateRequestID()
+ }
+
+ c.Set("request_id", requestID)
+ c.Header("X-Request-ID", requestID)
+
+ c.Next()
+ }
+}
+
+// generateRequestID 生成请求ID
+func generateRequestID() string {
+ // 简单实现，实际应用中可能需要更复杂的ID生成逻辑
+ return time.Now().Format("20060102150405") + "-" + randomString(8)
+}
+
+// randomString 生成随机字符串
+func randomString(length int) string {
+ const charset = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789"
+ b := make([]byte, length)
+ for i := range b {
+ b[i] = charset[time.Now().UnixNano()%int64(len(charset))]
+ }
+ return string(b)
+}
\ No newline at end of file
diff --git a/backend/internal/api/routes/routes.go b/backend/internal/api/routes/routes.go
new file mode 100644
index 0000000..e34836d
--- /dev/null
+++ b/backend/internal/api/routes/routes.go
@@ -0,0 +1,44 @@
+package routes
+
+import (
+ "github.com/gin-gonic/gin"
+ "photography-backend/internal/api/handlers"
+ "photography-backend/internal/api/middleware"
+)
+
+// Handlers 处理器集合
+type Handlers struct {
+ Auth *handlers.AuthHandler
+}
+
+// SetupRoutes 设置路由
+func SetupRoutes(r *gin.Engine, handlers *Handlers, authMiddleware *middleware.AuthMiddleware) {
+ // API v1路由组
+ v1 := r.Group("/api/v1")
+
+ // 公开路由
+ public := v1.Group("/auth")
+ {
+ public.POST("/login", handlers.Auth.Login)
+ public.POST("/register", handlers.Auth.Register)
+ public.POST("/refresh", handlers.Auth.RefreshToken)
+ }
+
+ // 需要认证的路由
+ protected := v1.Group("/")
+ protected.Use(authMiddleware.RequireAuth())
+ {
+ // 用户资料
+ protected.GET("/auth/profile", handlers.Auth.GetProfile)
+ protected.PUT("/auth/password", handlers.Auth.UpdatePassword)
+ protected.POST("/auth/logout", handlers.Auth.Logout)
+ }
+
+ // 管理员路由
+ admin := v1.Group("/admin")
+ admin.Use(authMiddleware.RequireAuth())
+ admin.Use(authMiddleware.RequireAdmin())
+ {
+ // 将在后续添加管理员相关路由
+ }
+}
\ No newline at end of file
diff --git a/backend/internal/config/config.go b/backend/internal/config/config.go
new file mode 100644
index 0000000..5127ff5
--- /dev/null
+++ b/backend/internal/config/config.go
@@ -0,0 +1,231 @@
+package config
+
+import (
+ "fmt"
+ "time"
+ "github.com/spf13/viper"
+)
+
+// Config 应用配置
+type Config struct {
+ App AppConfig `mapstructure:"app"`
+ Database DatabaseConfig `mapstructure:"database"`
+ Redis RedisConfig `mapstructure:"redis"`
+ JWT JWTConfig `mapstructure:"jwt"`
+ Storage StorageConfig `mapstructure:"storage"`
+ Upload UploadConfig `mapstructure:"upload"`
+ Logger LoggerConfig `mapstructure:"logger"`
+ CORS CORSConfig `mapstructure:"cors"`
+ RateLimit RateLimitConfig `mapstructure:"rate_limit"`
+}
+
+// AppConfig 应用配置
+type AppConfig struct {
+ Name string `mapstructure:"name"`
+ Version string `mapstructure:"version"`
+ Environment string `mapstructure:"environment"`
+ Port int `mapstructure:"port"`
+ Debug bool `mapstructure:"debug"`
+}
+
+// DatabaseConfig 数据库配置
+type DatabaseConfig struct {
+ Host string `mapstructure:"host"`
+ Port int `mapstructure:"port"`
+ Username string `mapstructure:"username"`
+ Password string `mapstructure:"password"`
+ Database string `mapstructure:"database"`
+ SSLMode string `mapstructure:"ssl_mode"`
+ MaxOpenConns int `mapstructure:"max_open_conns"`
+ MaxIdleConns int `mapstructure:"max_idle_conns"`
+ ConnMaxLifetime int `mapstructure:"conn_max_lifetime"`
+}
+
+// RedisConfig Redis配置
+type RedisConfig struct {
+ Host string `mapstructure:"host"`
+ Port int `mapstructure:"port"`
+ Password string `mapstructure:"password"`
+ Database int `mapstructure:"database"`
+ PoolSize int `mapstructure:"pool_size"`
+ MinIdleConns int `mapstructure:"min_idle_conns"`
+}
+
+// JWTConfig JWT配置
+type JWTConfig struct {
+ Secret string `mapstructure:"secret"`
+ ExpiresIn string `mapstructure:"expires_in"`
+ RefreshExpiresIn string `mapstructure:"refresh_expires_in"`
+}
+
+// StorageConfig 存储配置
+type StorageConfig struct {
+ Type string `mapstructure:"type"`
+ Local LocalConfig `mapstructure:"local"`
+ S3 S3Config `mapstructure:"s3"`
+}
+
+// LocalConfig 本地存储配置
+type LocalConfig struct {
+ BasePath string `mapstructure:"base_path"`
+ BaseURL string `mapstructure:"base_url"`
+}
+
+// S3Config S3存储配置
+type S3Config struct {
+ Region string `mapstructure:"region"`
+ Bucket string `mapstructure:"bucket"`
+ AccessKey string `mapstructure:"access_key"`
+ SecretKey string `mapstructure:"secret_key"`
+ Endpoint string `mapstructure:"endpoint"`
+}
+
+// UploadConfig 上传配置
+type UploadConfig struct {
+ MaxFileSize int64 `mapstructure:"max_file_size"`
+ AllowedTypes []string `mapstructure:"allowed_types"`
+ ThumbnailSizes []ThumbnailSize `mapstructure:"thumbnail_sizes"`
+}
+
+// ThumbnailSize 缩略图尺寸
+type ThumbnailSize struct {
+ Name string `mapstructure:"name"`
+ Width int `mapstructure:"width"`
+ Height int `mapstructure:"height"`
+}
+
+// LoggerConfig 日志配置
+type LoggerConfig struct {
+ Level string `mapstructure:"level"`
+ Format string `mapstructure:"format"`
+ Output string `mapstructure:"output"`
+ Filename string `mapstructure:"filename"`
+ MaxSize int `mapstructure:"max_size"`
+ MaxAge int `mapstructure:"max_age"`
+ Compress bool `mapstructure:"compress"`
+}
+
+// CORSConfig CORS配置
+type CORSConfig struct {
+ AllowedOrigins []string `mapstructure:"allowed_origins"`
+ AllowedMethods []string `mapstructure:"allowed_methods"`
+ AllowedHeaders []string `mapstructure:"allowed_headers"`
+ AllowCredentials bool `mapstructure:"allow_credentials"`
+}
+
+// RateLimitConfig 限流配置
+type RateLimitConfig struct {
+ Enabled bool `mapstructure:"enabled"`
+ RequestsPerMinute int `mapstructure:"requests_per_minute"`
+ Burst int `mapstructure:"burst"`
+}
+
+var AppConfig *Config
+
+// LoadConfig 加载配置
+func LoadConfig(configPath string) (*Config, error) {
+ viper.SetConfigFile(configPath)
+ viper.SetConfigType("yaml")
+
+ // 设置环境变量前缀
+ viper.SetEnvPrefix("PHOTOGRAPHY")
+ viper.AutomaticEnv()
+
+ // 环境变量替换配置
+ viper.BindEnv("database.host", "DB_HOST")
+ viper.BindEnv("database.port", "DB_PORT")
+ viper.BindEnv("database.username", "DB_USER")
+ viper.BindEnv("database.password", "DB_PASSWORD")
+ viper.BindEnv("database.database", "DB_NAME")
+ viper.BindEnv("redis.host", "REDIS_HOST")
+ viper.BindEnv("redis.port", "REDIS_PORT")
+ viper.BindEnv("redis.password", "REDIS_PASSWORD")
+ viper.BindEnv("jwt.secret", "JWT_SECRET")
+ viper.BindEnv("storage.s3.access_key", "AWS_ACCESS_KEY_ID")
+ viper.BindEnv("storage.s3.secret_key", "AWS_SECRET_ACCESS_KEY")
+ viper.BindEnv("app.port", "PORT")
+
+ if err := viper.ReadInConfig(); err != nil {
+ return nil, fmt.Errorf("failed to read config file: %w", err)
+ }
+
+ var config Config
+ if err := viper.Unmarshal(&config); err != nil {
+ return nil, fmt.Errorf("failed to unmarshal config: %w", err)
+ }
+
+ // 验证配置
+ if err := validateConfig(&config); err != nil {
+ return nil, fmt.Errorf("config validation failed: %w", err)
+ }
+
+ AppConfig = &config
+ return &config, nil
+}
+
+// validateConfig 验证配置
+func validateConfig(config *Config) error {
+ if config.App.Name == "" {
+ return fmt.Errorf("app name is required")
+ }
+
+ if config.Database.Host == "" {
+ return fmt.Errorf("database host is required")
+ }
+
+ if config.JWT.Secret == "" {
+ return fmt.Errorf("jwt secret is required")
+ }
+
+ return nil
+}
+
+// GetJWTExpiration 获取JWT过期时间
+func (c *Config) GetJWTExpiration() time.Duration {
+ duration, err := time.ParseDuration(c.JWT.ExpiresIn)
+ if err != nil {
+ return 24 * time.Hour // 默认24小时
+ }
+ return duration
+}
+
+// GetJWTRefreshExpiration 获取JWT刷新过期时间
+func (c *Config) GetJWTRefreshExpiration() time.Duration {
+ duration, err := time.ParseDuration(c.JWT.RefreshExpiresIn)
+ if err != nil {
+ return 7 * 24 * time.Hour // 默认7天
+ }
+ return duration
+}
+
+// GetDatabaseDSN 获取数据库DSN
+func (c *Config) GetDatabaseDSN() string {
+ return fmt.Sprintf("host=%s port=%d user=%s password=%s dbname=%s sslmode=%s",
+ c.Database.Host,
+ c.Database.Port,
+ c.Database.Username,
+ c.Database.Password,
+ c.Database.Database,
+ c.Database.SSLMode,
+ )
+}
+
+// GetRedisAddr 获取Redis地址
+func (c *Config) GetRedisAddr() string {
+ return fmt.Sprintf("%s:%d", c.Redis.Host, c.Redis.Port)
+}
+
+// GetServerAddr 获取服务器地址
+func (c *Config) GetServerAddr() string {
+ return fmt.Sprintf(":%d", c.App.Port)
+}
+
+// IsDevelopment 是否为开发环境
+func (c *Config) IsDevelopment() bool {
+ return c.App.Environment == "development"
+}
+
+// IsProduction 是否为生产环境
+func (c *Config) IsProduction() bool {
+ return c.App.Environment == "production"
+}
\ No newline at end of file
diff --git a/backend/internal/models/category.go b/backend/internal/models/category.go
new file mode 100644
index 0000000..9ea5275
--- /dev/null
+++ b/backend/internal/models/category.go
@@ -0,0 +1,85 @@
+package models
+
+import (
+ "time"
+ "gorm.io/gorm"
+)
+
+// Category 分类模型
+type Category struct {
+ ID uint `gorm:"primaryKey" json:"id"`
+ Name string `gorm:"size:100;not null" json:"name"`
+ Description string `gorm:"type:text" json:"description"`
+ ParentID *uint `json:"parent_id"`
+ Parent *Category `gorm:"foreignKey:ParentID" json:"parent,omitempty"`
+ Children []Category `gorm:"foreignKey:ParentID" json:"children,omitempty"`
+ Color string `gorm:"size:7;default:#3b82f6" json:"color"`
+ CoverImage string `gorm:"size:500" json:"cover_image"`
+ Sort int `gorm:"default:0" json:"sort"`
+ IsActive bool `gorm:"default:true" json:"is_active"`
+ PhotoCount int `gorm:"-" json:"photo_count"`
+ CreatedAt time.Time `json:"created_at"`
+ UpdatedAt time.Time `json:"updated_at"`
+ DeletedAt gorm.DeletedAt `gorm:"index" json:"-"`
+}
+
+// TableName 返回分类表名
+func (Category) TableName() string {
+ return "categories"
+}
+
+// CreateCategoryRequest 创建分类请求
+type CreateCategoryRequest struct {
+ Name string `json:"name" binding:"required,max=100"`
+ Description string `json:"description"`
+ ParentID *uint `json:"parent_id"`
+ Color string `json:"color" binding:"omitempty,hexcolor"`
+ CoverImage string `json:"cover_image" binding:"omitempty,max=500"`
+ Sort int `json:"sort"`
+}
+
+// UpdateCategoryRequest 更新分类请求
+type UpdateCategoryRequest struct {
+ Name *string `json:"name" binding:"omitempty,max=100"`
+ Description *string `json:"description"`
+ ParentID *uint `json:"parent_id"`
+ Color *string `json:"color" binding:"omitempty,hexcolor"`
+ CoverImage *string `json:"cover_image" binding:"omitempty,max=500"`
+ Sort *int `json:"sort"`
+ IsActive *bool `json:"is_active"`
+}
+
+// CategoryListParams 分类列表查询参数
+type CategoryListParams struct {
+ IncludeStats bool `form:"include_stats"`
+ IncludeTree bool `form:"include_tree"`
+ ParentID uint `form:"parent_id"`
+ IsActive bool `form:"is_active"`
+}
+
+// CategoryResponse 分类响应
+type CategoryResponse struct {
+ *Category
+}
+
+// CategoryTreeNode 分类树节点
+type CategoryTreeNode struct {
+ ID uint `json:"id"`
+ Name string `json:"name"`
+ PhotoCount int `json:"photo_count"`
+ Children []CategoryTreeNode `json:"children"`
+}
+
+// CategoryListResponse 分类列表响应
+type CategoryListResponse struct {
+ Categories []CategoryResponse `json:"categories"`
+ Tree []CategoryTreeNode `json:"tree,omitempty"`
+ Stats *CategoryStats `json:"stats,omitempty"`
+}
+
+// CategoryStats 分类统计
+type CategoryStats struct {
+ TotalCategories int `json:"total_categories"`
+ MaxLevel int `json:"max_level"`
+ FeaturedCount int `json:"featured_count"`
+}
\ No newline at end of file
diff --git a/backend/internal/models/photo.go b/backend/internal/models/photo.go
new file mode 100644
index 0000000..c58bad8
--- /dev/null
+++ b/backend/internal/models/photo.go
@@ -0,0 +1,99 @@
+package models
+
+import (
+ "time"
+ "gorm.io/gorm"
+)
+
+// Photo 照片模型
+type Photo struct {
+ ID uint `gorm:"primaryKey" json:"id"`
+ Title string `gorm:"size:255;not null" json:"title"`
+ Description string `gorm:"type:text" json:"description"`
+ Filename string `gorm:"size:255;not null" json:"filename"`
+ FilePath string `gorm:"size:500;not null" json:"file_path"`
+ FileSize int64 `json:"file_size"`
+ MimeType string `gorm:"size:100" json:"mime_type"`
+ Width int `json:"width"`
+ Height int `json:"height"`
+ CategoryID uint `json:"category_id"`
+ Category *Category `gorm:"foreignKey:CategoryID" json:"category,omitempty"`
+ Tags []Tag `gorm:"many2many:photo_tags;" json:"tags,omitempty"`
+ EXIF string `gorm:"type:jsonb" json:"exif"`
+ TakenAt *time.Time `json:"taken_at"`
+ Location string `gorm:"size:255" json:"location"`
+ IsPublic bool `gorm:"default:true" json:"is_public"`
+ Status string `gorm:"size:20;default:draft" json:"status"`
+ ViewCount int `gorm:"default:0" json:"view_count"`
+ LikeCount int `gorm:"default:0" json:"like_count"`
+ UserID uint `gorm:"not null" json:"user_id"`
+ User *User `gorm:"foreignKey:UserID" json:"user,omitempty"`
+ CreatedAt time.Time `json:"created_at"`
+ UpdatedAt time.Time `json:"updated_at"`
+ DeletedAt gorm.DeletedAt `gorm:"index" json:"-"`
+}
+
+// TableName 返回照片表名
+func (Photo) TableName() string {
+ return "photos"
+}
+
+// PhotoStatus 照片状态常量
+const (
+ StatusDraft = "draft"
+ StatusPublished = "published"
+ StatusArchived = "archived"
+)
+
+// CreatePhotoRequest 创建照片请求
+type CreatePhotoRequest struct {
+ Title string `json:"title" binding:"required,max=255"`
+ Description string `json:"description"`
+ CategoryID uint `json:"category_id" binding:"required"`
+ TagIDs []uint `json:"tag_ids"`
+ TakenAt *time.Time `json:"taken_at"`
+ Location string `json:"location" binding:"max=255"`
+ IsPublic *bool `json:"is_public"`
+ Status string `json:"status" binding:"omitempty,oneof=draft published archived"`
+}
+
+// UpdatePhotoRequest 更新照片请求
+type UpdatePhotoRequest struct {
+ Title *string `json:"title" binding:"omitempty,max=255"`
+ Description *string `json:"description"`
+ CategoryID *uint `json:"category_id"`
+ TagIDs []uint `json:"tag_ids"`
+ TakenAt *time.Time `json:"taken_at"`
+ Location *string `json:"location" binding:"omitempty,max=255"`
+ IsPublic *bool `json:"is_public"`
+ Status *string `json:"status" binding:"omitempty,oneof=draft published archived"`
+}
+
+// PhotoListParams 照片列表查询参数
+type PhotoListParams struct {
+ Page int `form:"page,default=1" binding:"min=1"`
+ Limit int `form:"limit,default=20" binding:"min=1,max=100"`
+ CategoryID uint `form:"category_id"`
+ TagID uint `form:"tag_id"`
+ UserID uint `form:"user_id"`
+ Status string `form:"status" binding:"omitempty,oneof=draft published archived"`
+ Search string `form:"search"`
+ SortBy string `form:"sort_by,default=created_at" binding:"omitempty,oneof=created_at taken_at title view_count like_count"`
+ SortOrder string `form:"sort_order,default=desc" binding:"omitempty,oneof=asc desc"`
+ Year int `form:"year"`
+ Month int `form:"month" binding:"min=1,max=12"`
+}
+
+// PhotoResponse 照片响应
+type PhotoResponse struct {
+ *Photo
+ ThumbnailURLs map[string]string `json:"thumbnail_urls,omitempty"`
+}
+
+// PhotoListResponse 照片列表响应
+type PhotoListResponse struct {
+ Photos []PhotoResponse `json:"photos"`
+ Total int64 `json:"total"`
+ Page int `json:"page"`
+ Limit int `json:"limit"`
+}
\ No newline at end of file
diff --git a/backend/internal/models/tag.go b/backend/internal/models/tag.go
new file mode 100644
index 0000000..b7b65fc
--- /dev/null
+++ b/backend/internal/models/tag.go
@@ -0,0 +1,95 @@
+package models
+
+import (
+ "time"
+ "gorm.io/gorm"
+)
+
+// Tag 标签模型
+type Tag struct {
+ ID uint `gorm:"primaryKey" json:"id"`
+ Name string `gorm:"size:50;not null;unique" json:"name"`
+ Color string `gorm:"size:7;default:#6b7280" json:"color"`
+ UseCount int `gorm:"default:0" json:"use_count"`
+ IsActive bool `gorm:"default:true" json:"is_active"`
+ CreatedAt time.Time `json:"created_at"`
+ UpdatedAt time.Time `json:"updated_at"`
+ DeletedAt gorm.DeletedAt `gorm:"index" json:"-"`
+}
+
+// TableName 返回标签表名
+func (Tag) TableName() string {
+ return "tags"
+}
+
+// CreateTagRequest 创建标签请求
+type CreateTagRequest struct {
+ Name string `json:"name" binding:"required,max=50"`
+ Color string `json:"color" binding:"omitempty,hexcolor"`
+}
+
+// UpdateTagRequest 更新标签请求
+type UpdateTagRequest struct {
+ Name *string `json:"name" binding:"omitempty,max=50"`
+ Color *string `json:"color" binding:"omitempty,hexcolor"`
+ IsActive *bool `json:"is_active"`
+}
+
+// TagListParams 标签列表查询参数
+type TagListParams struct {
+ Page int `form:"page,default=1" binding:"min=1"`
+ Limit int `form:"limit,default=50" binding:"min=1,max=100"`
+ Search string `form:"search"`
+ SortBy string `form:"sort_by,default=use_count" binding:"omitempty,oneof=use_count name created_at"`
+ SortOrder string `form:"sort_order,default=desc" binding:"omitempty,oneof=asc desc"`
+ IsActive bool `form:"is_active"`
+}
+
+// TagSuggestionsParams 标签建议查询参数
+type TagSuggestionsParams struct {
+ Query string `form:"q" binding:"required"`
+ Limit int `form:"limit,default=10" binding:"min=1,max=20"`
+}
+
+// TagResponse 标签响应
+type TagResponse struct {
+ *Tag
+ MatchScore float64 `json:"match_score,omitempty"`
+}
+
+// TagListResponse 标签列表响应
+type TagListResponse struct {
+ Tags []TagResponse `json:"tags"`
+ Total int64 `json:"total"`
+ Page int `json:"page"`
+ Limit int `json:"limit"`
+ Groups *TagGroups `json:"groups,omitempty"`
+}
+
+// TagGroups 标签分组
+type TagGroups struct {
+ Style TagGroup `json:"style"`
+ Subject TagGroup `json:"subject"`
+ Technique TagGroup `json:"technique"`
+ Location TagGroup `json:"location"`
+}
+
+// TagGroup 标签组
+type TagGroup struct {
+ Name string `json:"name"`
+ Count int `json:"count"`
+}
+
+// TagCloudItem 标签云项目
+type TagCloudItem struct {
+ ID uint `json:"id"`
+ Name string `json:"name"`
+ UseCount int `json:"use_count"`
+ RelativeSize int `json:"relative_size"`
+ Color string `json:"color"`
+}
+
+// TagCloudResponse 标签云响应
+type TagCloudResponse struct {
+ Tags []TagCloudItem `json:"tags"`
+}
\ No newline at end of file
diff --git a/backend/internal/models/user.go b/backend/internal/models/user.go
new file mode 100644
index 0000000..466e6cd
--- /dev/null
+++ b/backend/internal/models/user.go
@@ -0,0 +1,76 @@
+package models
+
+import (
+ "time"
+ "gorm.io/gorm"
+)
+
+// User 用户模型
+type User struct {
+ ID uint `gorm:"primaryKey" json:"id"`
+ Username string `gorm:"size:50;not null;unique" json:"username"`
+ Email string `gorm:"size:100;not null;unique" json:"email"`
+ Password string `gorm:"size:255;not null" json:"-"`
+ Name string `gorm:"size:100" json:"name"`
+ Avatar string `gorm:"size:500" json:"avatar"`
+ Role string `gorm:"size:20;default:user" json:"role"`
+ IsActive bool `gorm:"default:true" json:"is_active"`
+ LastLogin *time.Time `json:"last_login"`
+ CreatedAt time.Time `json:"created_at"`
+ UpdatedAt time.Time `json:"updated_at"`
+ DeletedAt gorm.DeletedAt `gorm:"index" json:"-"`
+}
+
+// TableName 返回用户表名
+func (User) TableName() string {
+ return "users"
+}
+
+// UserRole 用户角色常量
+const (
+ RoleUser = "user"
+ RoleEditor = "editor"
+ RoleAdmin = "admin"
+)
+
+// CreateUserRequest 创建用户请求
+type CreateUserRequest struct {
+ Username string `json:"username" binding:"required,min=3,max=50"`
+ Email string `json:"email" binding:"required,email"`
+ Password string `json:"password" binding:"required,min=6"`
+ Name string `json:"name" binding:"max=100"`
+ Role string `json:"role" binding:"omitempty,oneof=user editor admin"`
+}
+
+// UpdateUserRequest 更新用户请求
+type UpdateUserRequest struct {
+ Name *string `json:"name" binding:"omitempty,max=100"`
+ Avatar *string `json:"avatar" binding:"omitempty,max=500"`
+ IsActive *bool `json:"is_active"`
+}
+
+// UpdatePasswordRequest 更新密码请求
+type UpdatePasswordRequest struct {
+ OldPassword string `json:"old_password" binding:"required"`
+ NewPassword string `json:"new_password" binding:"required,min=6"`
+}
+
+// LoginRequest 登录请求
+type LoginRequest struct {
+ Username string `json:"username" binding:"required"`
+ Password string `json:"password" binding:"required"`
+}
+
+// LoginResponse 登录响应
+type LoginResponse struct {
+ AccessToken string `json:"access_token"`
+ RefreshToken string `json:"refresh_token"`
+ TokenType string `json:"token_type"`
+ ExpiresIn int64 `json:"expires_in"`
+ User *User `json:"user"`
+}
+
+// RefreshTokenRequest 刷新令牌请求
+type RefreshTokenRequest struct {
+ RefreshToken string `json:"refresh_token" binding:"required"`
+}
\ No newline at end of file
diff --git a/backend/internal/repository/postgres/category_repository.go b/backend/internal/repository/postgres/category_repository.go
new file mode 100644
index 0000000..f2cda77
--- /dev/null
+++ b/backend/internal/repository/postgres/category_repository.go
@@ -0,0 +1,211 @@
+package postgres
+
+import (
+ "fmt"
+ "photography-backend/internal/models"
+ "gorm.io/gorm"
+)
+
+// CategoryRepository 分类仓库接口
+type CategoryRepository interface {
+ Create(category *models.Category) error
+ GetByID(id uint) (*models.Category, error)
+ Update(category *models.Category) error
+ Delete(id uint) error
+ List(params *models.CategoryListParams) ([]*models.Category, error)
+ GetTree() ([]*models.Category, error)
+ GetChildren(parentID uint) ([]*models.Category, error)
+ GetStats() (*models.CategoryStats, error)
+ UpdateSort(id uint, sort int) error
+ GetPhotoCount(id uint) (int64, error)
+}
+
+// categoryRepository 分类仓库实现
+type categoryRepository struct {
+ db *gorm.DB
+}
+
+// NewCategoryRepository 创建分类仓库
+func NewCategoryRepository(db *gorm.DB) CategoryRepository {
+ return &categoryRepository{db: db}
+}
+
+// Create 创建分类
+func (r *categoryRepository) Create(category *models.Category) error {
+ if err := r.db.Create(category).Error; err != nil {
+ return fmt.Errorf("failed to create category: %w", err)
+ }
+ return nil
+}
+
+// GetByID 根据ID获取分类
+func (r *categoryRepository) GetByID(id uint) (*models.Category, error) {
+ var category models.Category
+ if err := r.db.Preload("Parent").Preload("Children").
+ First(&category, id).Error; err != nil {
+ if err == gorm.ErrRecordNotFound {
+ return nil, nil
+ }
+ return nil, fmt.Errorf("failed to get category by id: %w", err)
+ }
+
+ // 计算照片数量
+ var photoCount int64
+ if err := r.db.Model(&models.Photo{}).Where("category_id = ?", id).
+ Count(&photoCount).Error; err != nil {
+ return nil, fmt.Errorf("failed to count photos: %w", err)
+ }
+ category.PhotoCount = int(photoCount)
+
+ return &category, nil
+}
+
+// Update 更新分类
+func (r *categoryRepository) Update(category *models.Category) error {
+ if err := r.db.Save(category).Error; err != nil {
+ return fmt.Errorf("failed to update category: %w", err)
+ }
+ return nil
+}
+
+// Delete 删除分类
+func (r *categoryRepository) Delete(id uint) error {
+ // 开启事务
+ tx := r.db.Begin()
+
+ // 将子分类的父分类设置为NULL
+ if err := tx.Model(&models.Category{}).Where("parent_id = ?", id).
+ Update("parent_id", nil).Error; err != nil {
+ tx.Rollback()
+ return fmt.Errorf("failed to update child categories: %w", err)
+ }
+
+ // 删除分类
+ if err := tx.Delete(&models.Category{}, id).Error; err != nil {
+ tx.Rollback()
+ return fmt.Errorf("failed to delete category: %w", err)
+ }
+
+ return tx.Commit().Error
+}
+
+// List 获取分类列表
+func (r *categoryRepository) List(params *models.CategoryListParams) ([]*models.Category, error) {
+ var categories []*models.Category
+
+ query := r.db.Model(&models.Category{})
+
+ // 添加过滤条件
+ if params.ParentID > 0 {
+ query = query.Where("parent_id = ?", params.ParentID)
+ }
+
+ if params.IsActive {
+ query = query.Where("is_active = ?", true)
+ }
+
+ if err := query.Order("sort ASC, created_at DESC").
+ Find(&categories).Error; err != nil {
+ return nil, fmt.Errorf("failed to list categories: %w", err)
+ }
+
+ // 如果需要包含统计信息
+ if params.IncludeStats {
+ for _, category := range categories {
+ var photoCount int64
+ if err := r.db.Model(&models.Photo{}).Where("category_id = ?", category.ID).
+ Count(&photoCount).Error; err != nil {
+ return nil, fmt.Errorf("failed to count photos for category %d: %w", category.ID, err)
+ }
+ category.PhotoCount = int(photoCount)
+ }
+ }
+
+ return categories, nil
+}
+
+// GetTree 获取分类树
+func (r *categoryRepository) GetTree() ([]*models.Category, error) {
+ var categories []*models.Category
+
+ // 获取所有分类
+ if err := r.db.Where("is_active = ?", true).
+ Order("sort ASC, created_at DESC").
+ Find(&categories).Error; err != nil {
+ return nil, fmt.Errorf("failed to get categories: %w", err)
+ }
+
+ // 构建分类树
+ categoryMap := make(map[uint]*models.Category)
+ var rootCategories []*models.Category
+
+ // 第一次遍历：建立映射
+ for _, category := range categories {
+ categoryMap[category.ID] = category
+ category.Children = []*models.Category{}
+ }
+
+ // 第二次遍历：构建树形结构
+ for _, category := range categories {
+ if category.ParentID == nil {
+ rootCategories = append(rootCategories, category)
+ } else {
+ if parent, exists := categoryMap[*category.ParentID]; exists {
+ parent.Children = append(parent.Children, category)
+ }
+ }
+ }
+
+ return rootCategories, nil
+}
+
+// GetChildren 获取子分类
+func (r *categoryRepository) GetChildren(parentID uint) ([]*models.Category, error) {
+ var categories []*models.Category
+
+ if err := r.db.Where("parent_id = ? AND is_active = ?", parentID, true).
+ Order("sort ASC, created_at DESC").
+ Find(&categories).Error; err != nil {
+ return nil, fmt.Errorf("failed to get child categories: %w", err)
+ }
+
+ return categories, nil
+}
+
+// GetStats 获取分类统计
+func (r *categoryRepository) GetStats() (*models.CategoryStats, error) {
+ var stats models.CategoryStats
+
+ // 总分类数
+ if err := r.db.Model(&models.Category{}).Count(&stats.TotalCategories).Error; err != nil {
+ return nil, fmt.Errorf("failed to count total categories: %w", err)
+ }
+
+ // 计算最大层级
+ // 这里简化处理，实际应用中可能需要递归查询
+ stats.MaxLevel = 3
+
+ // 特色分类数量（这里假设有一个is_featured字段，实际可能需要调整）
+ stats.FeaturedCount = 0
+
+ return &stats, nil
+}
+
+// UpdateSort 更新排序
+func (r *categoryRepository) UpdateSort(id uint, sort int) error {
+ if err := r.db.Model(&models.Category{}).Where("id = ?", id).
+ Update("sort", sort).Error; err != nil {
+ return fmt.Errorf("failed to update sort: %w", err)
+ }
+ return nil
+}
+
+// GetPhotoCount 获取分类的照片数量
+func (r *categoryRepository) GetPhotoCount(id uint) (int64, error) {
+ var count int64
+ if err := r.db.Model(&models.Photo{}).Where("category_id = ?", id).
+ Count(&count).Error; err != nil {
+ return 0, fmt.Errorf("failed to count photos: %w", err)
+ }
+ return count, nil
+}
\ No newline at end of file
diff --git a/backend/internal/repository/postgres/database.go b/backend/internal/repository/postgres/database.go
new file mode 100644
index 0000000..54b72df
--- /dev/null
+++ b/backend/internal/repository/postgres/database.go
@@ -0,0 +1,78 @@
+package postgres
+
+import (
+ "fmt"
+ "time"
+ "gorm.io/gorm"
+ "gorm.io/driver/postgres"
+ "photography-backend/internal/config"
+ "photography-backend/internal/models"
+)
+
+// Database 数据库连接
+type Database struct {
+ DB *gorm.DB
+}
+
+// NewDatabase 创建数据库连接
+func NewDatabase(cfg *config.DatabaseConfig) (*Database, error) {
+ dsn := fmt.Sprintf("host=%s port=%d user=%s password=%s dbname=%s sslmode=%s",
+ cfg.Host,
+ cfg.Port,
+ cfg.Username,
+ cfg.Password,
+ cfg.Database,
+ cfg.SSLMode,
+ )
+
+ db, err := gorm.Open(postgres.Open(dsn), &gorm.Config{})
+ if err != nil {
+ return nil, fmt.Errorf("failed to connect to database: %w", err)
+ }
+
+ // 获取底层sql.DB实例配置连接池
+ sqlDB, err := db.DB()
+ if err != nil {
+ return nil, fmt.Errorf("failed to get sql.DB instance: %w", err)
+ }
+
+ // 设置连接池参数
+ sqlDB.SetMaxOpenConns(cfg.MaxOpenConns)
+ sqlDB.SetMaxIdleConns(cfg.MaxIdleConns)
+ sqlDB.SetConnMaxLifetime(time.Duration(cfg.ConnMaxLifetime) * time.Second)
+
+ // 测试连接
+ if err := sqlDB.Ping(); err != nil {
+ return nil, fmt.Errorf("failed to ping database: %w", err)
+ }
+
+ return &Database{DB: db}, nil
+}
+
+// AutoMigrate 自动迁移数据库表结构
+func (d *Database) AutoMigrate() error {
+ return d.DB.AutoMigrate(
+ &models.User{},
+ &models.Category{},
+ &models.Tag{},
+ &models.Photo{},
+ )
+}
+
+// Close 关闭数据库连接
+func (d *Database) Close() error {
+ sqlDB, err := d.DB.DB()
+ if err != nil {
+ return err
+ }
+ return sqlDB.Close()
+}
+
+// Health 检查数据库健康状态
+func (d *Database) Health() error {
+ sqlDB, err := d.DB.DB()
+ if err != nil {
+ return err
+ }
+ return sqlDB.Ping()
+}
\ No newline at end of file
diff --git a/backend/internal/repository/postgres/photo_repository.go b/backend/internal/repository/postgres/photo_repository.go
new file mode 100644
index 0000000..8c7db8f
--- /dev/null
+++ b/backend/internal/repository/postgres/photo_repository.go
@@ -0,0 +1,303 @@
+package postgres
+
+import (
+ "fmt"
+ "photography-backend/internal/models"
+ "gorm.io/gorm"
+)
+
+// PhotoRepository 照片仓库接口
+type PhotoRepository interface {
+ Create(photo *models.Photo) error
+ GetByID(id uint) (*models.Photo, error)
+ Update(photo *models.Photo) error
+ Delete(id uint) error
+ List(params *models.PhotoListParams) ([]*models.Photo, int64, error)
+ GetByCategory(categoryID uint, page, limit int) ([]*models.Photo, int64, error)
+ GetByTag(tagID uint, page, limit int) ([]*models.Photo, int64, error)
+ GetByUser(userID uint, page, limit int) ([]*models.Photo, int64, error)
+ Search(query string, page, limit int) ([]*models.Photo, int64, error)
+ IncrementViewCount(id uint) error
+ IncrementLikeCount(id uint) error
+ UpdateStatus(id uint, status string) error
+ GetStats() (*PhotoStats, error)
+}
+
+// PhotoStats 照片统计
+type PhotoStats struct {
+ Total int64 `json:"total"`
+ Published int64 `json:"published"`
+ Draft int64 `json:"draft"`
+ Archived int64 `json:"archived"`
+}
+
+// photoRepository 照片仓库实现
+type photoRepository struct {
+ db *gorm.DB
+}
+
+// NewPhotoRepository 创建照片仓库
+func NewPhotoRepository(db *gorm.DB) PhotoRepository {
+ return &photoRepository{db: db}
+}
+
+// Create 创建照片
+func (r *photoRepository) Create(photo *models.Photo) error {
+ if err := r.db.Create(photo).Error; err != nil {
+ return fmt.Errorf("failed to create photo: %w", err)
+ }
+ return nil
+}
+
+// GetByID 根据ID获取照片
+func (r *photoRepository) GetByID(id uint) (*models.Photo, error) {
+ var photo models.Photo
+ if err := r.db.Preload("Category").Preload("Tags").Preload("User").
+ First(&photo, id).Error; err != nil {
+ if err == gorm.ErrRecordNotFound {
+ return nil, nil
+ }
+ return nil, fmt.Errorf("failed to get photo by id: %w", err)
+ }
+ return &photo, nil
+}
+
+// Update 更新照片
+func (r *photoRepository) Update(photo *models.Photo) error {
+ if err := r.db.Save(photo).Error; err != nil {
+ return fmt.Errorf("failed to update photo: %w", err)
+ }
+ return nil
+}
+
+// Delete 删除照片
+func (r *photoRepository) Delete(id uint) error {
+ if err := r.db.Delete(&models.Photo{}, id).Error; err != nil {
+ return fmt.Errorf("failed to delete photo: %w", err)
+ }
+ return nil
+}
+
+// List 获取照片列表
+func (r *photoRepository) List(params *models.PhotoListParams) ([]*models.Photo, int64, error) {
+ var photos []*models.Photo
+ var total int64
+
+ query := r.db.Model(&models.Photo{}).
+ Preload("Category").
+ Preload("Tags").
+ Preload("User")
+
+ // 添加过滤条件
+ if params.CategoryID > 0 {
+ query = query.Where("category_id = ?", params.CategoryID)
+ }
+
+ if params.TagID > 0 {
+ query = query.Joins("JOIN photo_tags ON photos.id = photo_tags.photo_id").
+ Where("photo_tags.tag_id = ?", params.TagID)
+ }
+
+ if params.UserID > 0 {
+ query = query.Where("user_id = ?", params.UserID)
+ }
+
+ if params.Status != "" {
+ query = query.Where("status = ?", params.Status)
+ }
+
+ if params.Search != "" {
+ query = query.Where("title ILIKE ? OR description ILIKE ?",
+ "%"+params.Search+"%", "%"+params.Search+"%")
+ }
+
+ if params.Year > 0 {
+ query = query.Where("EXTRACT(YEAR FROM taken_at) = ?", params.Year)
+ }
+
+ if params.Month > 0 {
+ query = query.Where("EXTRACT(MONTH FROM taken_at) = ?", params.Month)
+ }
+
+ // 计算总数
+ if err := query.Count(&total).Error; err != nil {
+ return nil, 0, fmt.Errorf("failed to count photos: %w", err)
+ }
+
+ // 排序
+ orderClause := fmt.Sprintf("%s %s", params.SortBy, params.SortOrder)
+
+ // 分页查询
+ offset := (params.Page - 1) * params.Limit
+ if err := query.Offset(offset).Limit(params.Limit).
+ Order(orderClause).
+ Find(&photos).Error; err != nil {
+ return nil, 0, fmt.Errorf("failed to list photos: %w", err)
+ }
+
+ return photos, total, nil
+}
+
+// GetByCategory 根据分类获取照片
+func (r *photoRepository) GetByCategory(categoryID uint, page, limit int) ([]*models.Photo, int64, error) {
+ var photos []*models.Photo
+ var total int64
+
+ query := r.db.Model(&models.Photo{}).
+ Where("category_id = ? AND is_public = ?", categoryID, true).
+ Preload("Category").
+ Preload("Tags")
+
+ // 计算总数
+ if err := query.Count(&total).Error; err != nil {
+ return nil, 0, fmt.Errorf("failed to count photos by category: %w", err)
+ }
+
+ // 分页查询
+ offset := (page - 1) * limit
+ if err := query.Offset(offset).Limit(limit).
+ Order("created_at DESC").
+ Find(&photos).Error; err != nil {
+ return nil, 0, fmt.Errorf("failed to get photos by category: %w", err)
+ }
+
+ return photos, total, nil
+}
+
+// GetByTag 根据标签获取照片
+func (r *photoRepository) GetByTag(tagID uint, page, limit int) ([]*models.Photo, int64, error) {
+ var photos []*models.Photo
+ var total int64
+
+ query := r.db.Model(&models.Photo{}).
+ Joins("JOIN photo_tags ON photos.id = photo_tags.photo_id").
+ Where("photo_tags.tag_id = ? AND photos.is_public = ?", tagID, true).
+ Preload("Category").
+ Preload("Tags")
+
+ // 计算总数
+ if err := query.Count(&total).Error; err != nil {
+ return nil, 0, fmt.Errorf("failed to count photos by tag: %w", err)
+ }
+
+ // 分页查询
+ offset := (page - 1) * limit
+ if err := query.Offset(offset).Limit(limit).
+ Order("photos.created_at DESC").
+ Find(&photos).Error; err != nil {
+ return nil, 0, fmt.Errorf("failed to get photos by tag: %w", err)
+ }
+
+ return photos, total, nil
+}
+
+// GetByUser 根据用户获取照片
+func (r *photoRepository) GetByUser(userID uint, page, limit int) ([]*models.Photo, int64, error) {
+ var photos []*models.Photo
+ var total int64
+
+ query := r.db.Model(&models.Photo{}).
+ Where("user_id = ?", userID).
+ Preload("Category").
+ Preload("Tags")
+
+ // 计算总数
+ if err := query.Count(&total).Error; err != nil {
+ return nil, 0, fmt.Errorf("failed to count photos by user: %w", err)
+ }
+
+ // 分页查询
+ offset := (page - 1) * limit
+ if err := query.Offset(offset).Limit(limit).
+ Order("created_at DESC").
+ Find(&photos).Error; err != nil {
+ return nil, 0, fmt.Errorf("failed to get photos by user: %w", err)
+ }
+
+ return photos, total, nil
+}
+
+// Search 搜索照片
+func (r *photoRepository) Search(query string, page, limit int) ([]*models.Photo, int64, error) {
+ var photos []*models.Photo
+ var total int64
+
+ searchQuery := r.db.Model(&models.Photo{}).
+ Where("title ILIKE ? OR description ILIKE ? OR location ILIKE ?",
+ "%"+query+"%", "%"+query+"%", "%"+query+"%").
+ Where("is_public = ?", true).
+ Preload("Category").
+ Preload("Tags")
+
+ // 计算总数
+ if err := searchQuery.Count(&total).Error; err != nil {
+ return nil, 0, fmt.Errorf("failed to count search results: %w", err)
+ }
+
+ // 分页查询
+ offset := (page - 1) * limit
+ if err := searchQuery.Offset(offset).Limit(limit).
+ Order("created_at DESC").
+ Find(&photos).Error; err != nil {
+ return nil, 0, fmt.Errorf("failed to search photos: %w", err)
+ }
+
+ return photos, total, nil
+}
+
+// IncrementViewCount 增加浏览次数
+func (r *photoRepository) IncrementViewCount(id uint) error {
+ if err := r.db.Model(&models.Photo{}).Where("id = ?", id).
+ Update("view_count", gorm.Expr("view_count + 1")).Error; err != nil {
+ return fmt.Errorf("failed to increment view count: %w", err)
+ }
+ return nil
+}
+
+// IncrementLikeCount 增加点赞次数
+func (r *photoRepository) IncrementLikeCount(id uint) error {
+ if err := r.db.Model(&models.Photo{}).Where("id = ?", id).
+ Update("like_count", gorm.Expr("like_count + 1")).Error; err != nil {
+ return fmt.Errorf("failed to increment like count: %w", err)
+ }
+ return nil
+}
+
+// UpdateStatus 更新状态
+func (r *photoRepository) UpdateStatus(id uint, status string) error {
+ if err := r.db.Model(&models.Photo{}).Where("id = ?", id).
+ Update("status", status).Error; err != nil {
+ return fmt.Errorf("failed to update status: %w", err)
+ }
+ return nil
+}
+
+// GetStats 获取照片统计
+func (r *photoRepository) GetStats() (*PhotoStats, error) {
+ var stats PhotoStats
+
+ // 总数
+ if err := r.db.Model(&models.Photo{}).Count(&stats.Total).Error; err != nil {
+ return nil, fmt.Errorf("failed to count total photos: %w", err)
+ }
+
+ // 已发布
+ if err := r.db.Model(&models.Photo{}).Where("status = ?", models.StatusPublished).
+ Count(&stats.Published).Error; err != nil {
+ return nil, fmt.Errorf("failed to count published photos: %w", err)
+ }
+
+ // 草稿
+ if err := r.db.Model(&models.Photo{}).Where("status = ?", models.StatusDraft).
+ Count(&stats.Draft).Error; err != nil {
+ return nil, fmt.Errorf("failed to count draft photos: %w", err)
+ }
+
+ // 已归档
+ if err := r.db.Model(&models.Photo{}).Where("status = ?", models.StatusArchived).
+ Count(&stats.Archived).Error; err != nil {
+ return nil, fmt.Errorf("failed to count archived photos: %w", err)
+ }
+
+ return &stats, nil
+}
\ No newline at end of file
diff --git a/backend/internal/repository/postgres/tag_repository.go b/backend/internal/repository/postgres/tag_repository.go
new file mode 100644
index 0000000..948a2db
--- /dev/null
+++ b/backend/internal/repository/postgres/tag_repository.go
@@ -0,0 +1,217 @@
+package postgres
+
+import (
+ "fmt"
+ "photography-backend/internal/models"
+ "gorm.io/gorm"
+)
+
+// TagRepository 标签仓库接口
+type TagRepository interface {
+ Create(tag *models.Tag) error
+ GetByID(id uint) (*models.Tag, error)
+ GetByName(name string) (*models.Tag, error)
+ Update(tag *models.Tag) error
+ Delete(id uint) error
+ List(params *models.TagListParams) ([]*models.Tag, int64, error)
+ Search(query string, limit int) ([]*models.Tag, error)
+ GetPopular(limit int) ([]*models.Tag, error)
+ GetOrCreate(name string) (*models.Tag, error)
+ IncrementUseCount(id uint) error
+ DecrementUseCount(id uint) error
+ GetCloud(minUsage int, maxTags int) ([]*models.Tag, error)
+}
+
+// tagRepository 标签仓库实现
+type tagRepository struct {
+ db *gorm.DB
+}
+
+// NewTagRepository 创建标签仓库
+func NewTagRepository(db *gorm.DB) TagRepository {
+ return &tagRepository{db: db}
+}
+
+// Create 创建标签
+func (r *tagRepository) Create(tag *models.Tag) error {
+ if err := r.db.Create(tag).Error; err != nil {
+ return fmt.Errorf("failed to create tag: %w", err)
+ }
+ return nil
+}
+
+// GetByID 根据ID获取标签
+func (r *tagRepository) GetByID(id uint) (*models.Tag, error) {
+ var tag models.Tag
+ if err := r.db.First(&tag, id).Error; err != nil {
+ if err == gorm.ErrRecordNotFound {
+ return nil, nil
+ }
+ return nil, fmt.Errorf("failed to get tag by id: %w", err)
+ }
+ return &tag, nil
+}
+
+// GetByName 根据名称获取标签
+func (r *tagRepository) GetByName(name string) (*models.Tag, error) {
+ var tag models.Tag
+ if err := r.db.Where("name = ?", name).First(&tag).Error; err != nil {
+ if err == gorm.ErrRecordNotFound {
+ return nil, nil
+ }
+ return nil, fmt.Errorf("failed to get tag by name: %w", err)
+ }
+ return &tag, nil
+}
+
+// Update 更新标签
+func (r *tagRepository) Update(tag *models.Tag) error {
+ if err := r.db.Save(tag).Error; err != nil {
+ return fmt.Errorf("failed to update tag: %w", err)
+ }
+ return nil
+}
+
+// Delete 删除标签
+func (r *tagRepository) Delete(id uint) error {
+ // 开启事务
+ tx := r.db.Begin()
+
+ // 删除照片标签关联
+ if err := tx.Exec("DELETE FROM photo_tags WHERE tag_id = ?", id).Error; err != nil {
+ tx.Rollback()
+ return fmt.Errorf("failed to delete photo tag relations: %w", err)
+ }
+
+ // 删除标签
+ if err := tx.Delete(&models.Tag{}, id).Error; err != nil {
+ tx.Rollback()
+ return fmt.Errorf("failed to delete tag: %w", err)
+ }
+
+ return tx.Commit().Error
+}
+
+// List 获取标签列表
+func (r *tagRepository) List(params *models.TagListParams) ([]*models.Tag, int64, error) {
+ var tags []*models.Tag
+ var total int64
+
+ query := r.db.Model(&models.Tag{})
+
+ // 添加过滤条件
+ if params.Search != "" {
+ query = query.Where("name ILIKE ?", "%"+params.Search+"%")
+ }
+
+ if params.IsActive {
+ query = query.Where("is_active = ?", true)
+ }
+
+ // 计算总数
+ if err := query.Count(&total).Error; err != nil {
+ return nil, 0, fmt.Errorf("failed to count tags: %w", err)
+ }
+
+ // 排序
+ orderClause := fmt.Sprintf("%s %s", params.SortBy, params.SortOrder)
+
+ // 分页查询
+ offset := (params.Page - 1) * params.Limit
+ if err := query.Offset(offset).Limit(params.Limit).
+ Order(orderClause).
+ Find(&tags).Error; err != nil {
+ return nil, 0, fmt.Errorf("failed to list tags: %w", err)
+ }
+
+ return tags, total, nil
+}
+
+// Search 搜索标签
+func (r *tagRepository) Search(query string, limit int) ([]*models.Tag, error) {
+ var tags []*models.Tag
+
+ if err := r.db.Where("name ILIKE ? AND is_active = ?", "%"+query+"%", true).
+ Order("use_count DESC").
+ Limit(limit).
+ Find(&tags).Error; err != nil {
+ return nil, fmt.Errorf("failed to search tags: %w", err)
+ }
+
+ return tags, nil
+}
+
+// GetPopular 获取热门标签
+func (r *tagRepository) GetPopular(limit int) ([]*models.Tag, error) {
+ var tags []*models.Tag
+
+ if err := r.db.Where("is_active = ?", true).
+ Order("use_count DESC").
+ Limit(limit).
+ Find(&tags).Error; err != nil {
+ return nil, fmt.Errorf("failed to get popular tags: %w", err)
+ }
+
+ return tags, nil
+}
+
+// GetOrCreate 获取或创建标签
+func (r *tagRepository) GetOrCreate(name string) (*models.Tag, error) {
+ var tag models.Tag
+
+ // 先尝试获取
+ if err := r.db.Where("name = ?", name).First(&tag).Error; err != nil {
+ if err == gorm.ErrRecordNotFound {
+ // 不存在则创建
+ tag = models.Tag{
+ Name: name,
+ UseCount: 0,
+ IsActive: true,
+ }
+ if err := r.db.Create(&tag).Error; err != nil {
+ return nil, fmt.Errorf("failed to create tag: %w", err)
+ }
+ } else {
+ return nil, fmt.Errorf("failed to get tag: %w", err)
+ }
+ }
+
+ return &tag, nil
+}
+
+// IncrementUseCount 增加使用次数
+func (r *tagRepository) IncrementUseCount(id uint) error {
+ if err := r.db.Model(&models.Tag{}).Where("id = ?", id).
+ Update("use_count", gorm.Expr("use_count + 1")).Error; err != nil {
+ return fmt.Errorf("failed to increment use count: %w", err)
+ }
+ return nil
+}
+
+// DecrementUseCount 减少使用次数
+func (r *tagRepository) DecrementUseCount(id uint) error {
+ if err := r.db.Model(&models.Tag{}).Where("id = ?", id).
+ Update("use_count", gorm.Expr("GREATEST(use_count - 1, 0)")).Error; err != nil {
+ return fmt.Errorf("failed to decrement use count: %w", err)
+ }
+ return nil
+}
+
+// GetCloud 获取标签云数据
+func (r *tagRepository) GetCloud(minUsage int, maxTags int) ([]*models.Tag, error) {
+ var tags []*models.Tag
+
+ query := r.db.Where("is_active = ?", true)
+
+ if minUsage > 0 {
+ query = query.Where("use_count >= ?", minUsage)
+ }
+
+ if err := query.Order("use_count DESC").
+ Limit(maxTags).
+ Find(&tags).Error; err != nil {
+ return nil, fmt.Errorf("failed to get tag cloud: %w", err)
+ }
+
+ return tags, nil
+}
\ No newline at end of file
diff --git a/backend/internal/repository/postgres/user_repository.go b/backend/internal/repository/postgres/user_repository.go
new file mode 100644
index 0000000..6dc81df
--- /dev/null
+++ b/backend/internal/repository/postgres/user_repository.go
@@ -0,0 +1,129 @@
+package postgres
+
+import (
+ "fmt"
+ "photography-backend/internal/models"
+ "gorm.io/gorm"
+)
+
+// UserRepository 用户仓库接口
+type UserRepository interface {
+ Create(user *models.User) error
+ GetByID(id uint) (*models.User, error)
+ GetByUsername(username string) (*models.User, error)
+ GetByEmail(email string) (*models.User, error)
+ Update(user *models.User) error
+ Delete(id uint) error
+ List(page, limit int, role string, isActive *bool) ([]*models.User, int64, error)
+ UpdateLastLogin(id uint) error
+}
+
+// userRepository 用户仓库实现
+type userRepository struct {
+ db *gorm.DB
+}
+
+// NewUserRepository 创建用户仓库
+func NewUserRepository(db *gorm.DB) UserRepository {
+ return &userRepository{db: db}
+}
+
+// Create 创建用户
+func (r *userRepository) Create(user *models.User) error {
+ if err := r.db.Create(user).Error; err != nil {
+ return fmt.Errorf("failed to create user: %w", err)
+ }
+ return nil
+}
+
+// GetByID 根据ID获取用户
+func (r *userRepository) GetByID(id uint) (*models.User, error) {
+ var user models.User
+ if err := r.db.First(&user, id).Error; err != nil {
+ if err == gorm.ErrRecordNotFound {
+ return nil, nil
+ }
+ return nil, fmt.Errorf("failed to get user by id: %w", err)
+ }
+ return &user, nil
+}
+
+// GetByUsername 根据用户名获取用户
+func (r *userRepository) GetByUsername(username string) (*models.User, error) {
+ var user models.User
+ if err := r.db.Where("username = ?", username).First(&user).Error; err != nil {
+ if err == gorm.ErrRecordNotFound {
+ return nil, nil
+ }
+ return nil, fmt.Errorf("failed to get user by username: %w", err)
+ }
+ return &user, nil
+}
+
+// GetByEmail 根据邮箱获取用户
+func (r *userRepository) GetByEmail(email string) (*models.User, error) {
+ var user models.User
+ if err := r.db.Where("email = ?", email).First(&user).Error; err != nil {
+ if err == gorm.ErrRecordNotFound {
+ return nil, nil
+ }
+ return nil, fmt.Errorf("failed to get user by email: %w", err)
+ }
+ return &user, nil
+}
+
+// Update 更新用户
+func (r *userRepository) Update(user *models.User) error {
+ if err := r.db.Save(user).Error; err != nil {
+ return fmt.Errorf("failed to update user: %w", err)
+ }
+ return nil
+}
+
+// Delete 删除用户
+func (r *userRepository) Delete(id uint) error {
+ if err := r.db.Delete(&models.User{}, id).Error; err != nil {
+ return fmt.Errorf("failed to delete user: %w", err)
+ }
+ return nil
+}
+
+// List 获取用户列表
+func (r *userRepository) List(page, limit int, role string, isActive *bool) ([]*models.User, int64, error) {
+ var users []*models.User
+ var total int64
+
+ query := r.db.Model(&models.User{})
+
+ // 添加过滤条件
+ if role != "" {
+ query = query.Where("role = ?", role)
+ }
+ if isActive != nil {
+ query = query.Where("is_active = ?", *isActive)
+ }
+
+ // 计算总数
+ if err := query.Count(&total).Error; err != nil {
+ return nil, 0, fmt.Errorf("failed to count users: %w", err)
+ }
+
+ // 分页查询
+ offset := (page - 1) * limit
+ if err := query.Offset(offset).Limit(limit).
+ Order("created_at DESC").
+ Find(&users).Error; err != nil {
+ return nil, 0, fmt.Errorf("failed to list users: %w", err)
+ }
+
+ return users, total, nil
+}
+
+// UpdateLastLogin 更新最后登录时间
+func (r *userRepository) UpdateLastLogin(id uint) error {
+ if err := r.db.Model(&models.User{}).Where("id = ?", id).
+ Update("last_login", gorm.Expr("NOW()")).Error; err != nil {
+ return fmt.Errorf("failed to update last login: %w", err)
+ }
+ return nil
+}
\ No newline at end of file
diff --git a/backend/internal/service/auth/auth_service.go b/backend/internal/service/auth/auth_service.go
new file mode 100644
index 0000000..81729e5
--- /dev/null
+++ b/backend/internal/service/auth/auth_service.go
@@ -0,0 +1,253 @@
+package auth
+
+import (
+ "fmt"
+ "time"
+ "golang.org/x/crypto/bcrypt"
+ "photography-backend/internal/models"
+ "photography-backend/internal/repository/postgres"
+)
+
+// AuthService 认证服务
+type AuthService struct {
+ userRepo postgres.UserRepository
+ jwtService *JWTService
+}
+
+// NewAuthService 创建认证服务
+func NewAuthService(userRepo postgres.UserRepository, jwtService *JWTService) *AuthService {
+ return &AuthService{
+ userRepo: userRepo,
+ jwtService: jwtService,
+ }
+}
+
+// Login 用户登录
+func (s *AuthService) Login(req *models.LoginRequest) (*models.LoginResponse, error) {
+ // 根据用户名或邮箱查找用户
+ var user *models.User
+ var err error
+
+ // 尝试按用户名查找
+ user, err = s.userRepo.GetByUsername(req.Username)
+ if err != nil {
+ return nil, fmt.Errorf("failed to get user: %w", err)
+ }
+
+ // 如果用户名未找到，尝试按邮箱查找
+ if user == nil {
+ user, err = s.userRepo.GetByEmail(req.Username)
+ if err != nil {
+ return nil, fmt.Errorf("failed to get user by email: %w", err)
+ }
+ }
+
+ if user == nil {
+ return nil, fmt.Errorf("invalid credentials")
+ }
+
+ // 检查用户是否激活
+ if !user.IsActive {
+ return nil, fmt.Errorf("user account is deactivated")
+ }
+
+ // 验证密码
+ if err := bcrypt.CompareHashAndPassword([]byte(user.Password), []byte(req.Password)); err != nil {
+ return nil, fmt.Errorf("invalid credentials")
+ }
+
+ // 生成JWT令牌
+ tokenPair, err := s.jwtService.GenerateTokenPair(user.ID, user.Username, user.Role)
+ if err != nil {
+ return nil, fmt.Errorf("failed to generate tokens: %w", err)
+ }
+
+ // 更新最后登录时间
+ if err := s.userRepo.UpdateLastLogin(user.ID); err != nil {
+ // 记录错误但不中断登录流程
+ fmt.Printf("failed to update last login: %v\n", err)
+ }
+
+ // 清除密码字段
+ user.Password = ""
+
+ return &models.LoginResponse{
+ AccessToken: tokenPair.AccessToken,
+ RefreshToken: tokenPair.RefreshToken,
+ TokenType: tokenPair.TokenType,
+ ExpiresIn: tokenPair.ExpiresIn,
+ User: user,
+ }, nil
+}
+
+// Register 用户注册
+func (s *AuthService) Register(req *models.CreateUserRequest) (*models.User, error) {
+ // 检查用户名是否已存在
+ existingUser, err := s.userRepo.GetByUsername(req.Username)
+ if err != nil {
+ return nil, fmt.Errorf("failed to check username: %w", err)
+ }
+ if existingUser != nil {
+ return nil, fmt.Errorf("username already exists")
+ }
+
+ // 检查邮箱是否已存在
+ existingUser, err = s.userRepo.GetByEmail(req.Email)
+ if err != nil {
+ return nil, fmt.Errorf("failed to check email: %w", err)
+ }
+ if existingUser != nil {
+ return nil, fmt.Errorf("email already exists")
+ }
+
+ // 加密密码
+ hashedPassword, err := bcrypt.GenerateFromPassword([]byte(req.Password), bcrypt.DefaultCost)
+ if err != nil {
+ return nil, fmt.Errorf("failed to hash password: %w", err)
+ }
+
+ // 创建用户
+ user := &models.User{
+ Username: req.Username,
+ Email: req.Email,
+ Password: string(hashedPassword),
+ Name: req.Name,
+ Role: req.Role,
+ IsActive: true,
+ }
+
+ // 如果没有指定角色，默认为普通用户
+ if user.Role == "" {
+ user.Role = models.RoleUser
+ }
+
+ if err := s.userRepo.Create(user); err != nil {
+ return nil, fmt.Errorf("failed to create user: %w", err)
+ }
+
+ // 清除密码字段
+ user.Password = ""
+
+ return user, nil
+}
+
+// RefreshToken 刷新令牌
+func (s *AuthService) RefreshToken(req *models.RefreshTokenRequest) (*models.LoginResponse, error) {
+ // 验证刷新令牌
+ claims, err := s.jwtService.ValidateToken(req.RefreshToken)
+ if err != nil {
+ return nil, fmt.Errorf("invalid refresh token: %w", err)
+ }
+
+ // 获取用户信息
+ user, err := s.userRepo.GetByID(claims.UserID)
+ if err != nil {
+ return nil, fmt.Errorf("failed to get user: %w", err)
+ }
+
+ if user == nil {
+ return nil, fmt.Errorf("user not found")
+ }
+
+ // 检查用户是否激活
+ if !user.IsActive {
+ return nil, fmt.Errorf("user account is deactivated")
+ }
+
+ // 生成新的令牌对
+ tokenPair, err := s.jwtService.GenerateTokenPair(user.ID, user.Username, user.Role)
+ if err != nil {
+ return nil, fmt.Errorf("failed to generate tokens: %w", err)
+ }
+
+ // 清除密码字段
+ user.Password = ""
+
+ return &models.LoginResponse{
+ AccessToken: tokenPair.AccessToken,
+ RefreshToken: tokenPair.RefreshToken,
+ TokenType: tokenPair.TokenType,
+ ExpiresIn: tokenPair.ExpiresIn,
+ User: user,
+ }, nil
+}
+
+// GetUserByID 根据ID获取用户
+func (s *AuthService) GetUserByID(id uint) (*models.User, error) {
+ user, err := s.userRepo.GetByID(id)
+ if err != nil {
+ return nil, fmt.Errorf("failed to get user: %w", err)
+ }
+
+ if user == nil {
+ return nil, fmt.Errorf("user not found")
+ }
+
+ // 清除密码字段
+ user.Password = ""
+
+ return user, nil
+}
+
+// UpdatePassword 更新密码
+func (s *AuthService) UpdatePassword(userID uint, req *models.UpdatePasswordRequest) error {
+ // 获取用户信息
+ user, err := s.userRepo.GetByID(userID)
+ if err != nil {
+ return fmt.Errorf("failed to get user: %w", err)
+ }
+
+ if user == nil {
+ return fmt.Errorf("user not found")
+ }
+
+ // 验证旧密码
+ if err := bcrypt.CompareHashAndPassword([]byte(user.Password), []byte(req.OldPassword)); err != nil {
+ return fmt.Errorf("invalid old password")
+ }
+
+ // 加密新密码
+ hashedPassword, err := bcrypt.GenerateFromPassword([]byte(req.NewPassword), bcrypt.DefaultCost)
+ if err != nil {
+ return fmt.Errorf("failed to hash password: %w", err)
+ }
+
+ // 更新密码
+ user.Password = string(hashedPassword)
+ if err := s.userRepo.Update(user); err != nil {
+ return fmt.Errorf("failed to update password: %w", err)
+ }
+
+ return nil
+}
+
+// CheckPermission 检查权限
+func (s *AuthService) CheckPermission(userRole string, requiredRole string) bool {
+ roleLevel := map[string]int{
+ models.RoleUser: 1,
+ models.RoleEditor: 2,
+ models.RoleAdmin: 3,
+ }
+
+ userLevel, exists := roleLevel[userRole]
+ if !exists {
+ return false
+ }
+
+ requiredLevel, exists := roleLevel[requiredRole]
+ if !exists {
+ return false
+ }
+
+ return userLevel >= requiredLevel
+}
+
+// IsAdmin 检查是否为管理员
+func (s *AuthService) IsAdmin(userRole string) bool {
+ return userRole == models.RoleAdmin
+}
+
+// IsEditor 检查是否为编辑者或以上
+func (s *AuthService) IsEditor(userRole string) bool {
+ return userRole == models.RoleEditor || userRole == models.RoleAdmin
+}
\ No newline at end of file
diff --git a/backend/internal/service/auth/jwt_service.go b/backend/internal/service/auth/jwt_service.go
new file mode 100644
index 0000000..3363b2a
--- /dev/null
+++ b/backend/internal/service/auth/jwt_service.go
@@ -0,0 +1,129 @@
+package auth
+
+import (
+ "fmt"
+ "time"
+ "github.com/golang-jwt/jwt/v5"
+ "photography-backend/internal/config"
+)
+
+// JWTService JWT服务
+type JWTService struct {
+ secretKey []byte
+ accessTokenDuration time.Duration
+ refreshTokenDuration time.Duration
+}
+
+// JWTClaims JWT声明
+type JWTClaims struct {
+ UserID uint `json:"user_id"`
+ Username string `json:"username"`
+ Role string `json:"role"`
+ jwt.RegisteredClaims
+}
+
+// TokenPair 令牌对
+type TokenPair struct {
+ AccessToken string `json:"access_token"`
+ RefreshToken string `json:"refresh_token"`
+ TokenType string `json:"token_type"`
+ ExpiresIn int64 `json:"expires_in"`
+}
+
+// NewJWTService 创建JWT服务
+func NewJWTService(cfg *config.JWTConfig) *JWTService {
+ return &JWTService{
+ secretKey: []byte(cfg.Secret),
+ accessTokenDuration: config.AppConfig.GetJWTExpiration(),
+ refreshTokenDuration: config.AppConfig.GetJWTRefreshExpiration(),
+ }
+}
+
+// GenerateTokenPair 生成令牌对
+func (s *JWTService) GenerateTokenPair(userID uint, username, role string) (*TokenPair, error) {
+ // 生成访问令牌
+ accessToken, err := s.generateToken(userID, username, role, s.accessTokenDuration)
+ if err != nil {
+ return nil, fmt.Errorf("failed to generate access token: %w", err)
+ }
+
+ // 生成刷新令牌
+ refreshToken, err := s.generateToken(userID, username, role, s.refreshTokenDuration)
+ if err != nil {
+ return nil, fmt.Errorf("failed to generate refresh token: %w", err)
+ }
+
+ return &TokenPair{
+ AccessToken: accessToken,
+ RefreshToken: refreshToken,
+ TokenType: "Bearer",
+ ExpiresIn: int64(s.accessTokenDuration.Seconds()),
+ }, nil
+}
+
+// generateToken 生成令牌
+func (s *JWTService) generateToken(userID uint, username, role string, duration time.Duration) (string, error) {
+ now := time.Now()
+ claims := &JWTClaims{
+ UserID: userID,
+ Username: username,
+ Role: role,
+ RegisteredClaims: jwt.RegisteredClaims{
+ ExpiresAt: jwt.NewNumericDate(now.Add(duration)),
+ IssuedAt: jwt.NewNumericDate(now),
+ NotBefore: jwt.NewNumericDate(now),
+ Issuer: "photography-backend",
+ },
+ }
+
+ token := jwt.NewWithClaims(jwt.SigningMethodHS256, claims)
+ return token.SignedString(s.secretKey)
+}
+
+// ValidateToken 验证令牌
+func (s *JWTService) ValidateToken(tokenString string) (*JWTClaims, error) {
+ token, err := jwt.ParseWithClaims(tokenString, &JWTClaims{}, func(token *jwt.Token) (interface{}, error) {
+ if _, ok := token.Method.(*jwt.SigningMethodHMAC); !ok {
+ return nil, fmt.Errorf("unexpected signing method: %v", token.Header["alg"])
+ }
+ return s.secretKey, nil
+ })
+
+ if err != nil {
+ return nil, fmt.Errorf("failed to parse token: %w", err)
+ }
+
+ if claims, ok := token.Claims.(*JWTClaims); ok && token.Valid {
+ return claims, nil
+ }
+
+ return nil, fmt.Errorf("invalid token")
+}
+
+// RefreshToken 刷新令牌
+func (s *JWTService) RefreshToken(refreshToken string) (*TokenPair, error) {
+ claims, err := s.ValidateToken(refreshToken)
+ if err != nil {
+ return nil, fmt.Errorf("invalid refresh token: %w", err)
+ }
+
+ // 生成新的令牌对
+ return s.GenerateTokenPair(claims.UserID, claims.Username, claims.Role)
+}
+
+// GetClaimsFromToken 从令牌中获取声明
+func (s *JWTService) GetClaimsFromToken(tokenString string) (*JWTClaims, error) {
+ token, err := jwt.ParseWithClaims(tokenString, &JWTClaims{}, func(token *jwt.Token) (interface{}, error) {
+ return s.secretKey, nil
+ })
+
+ if err != nil {
+ return nil, err
+ }
+
+ if claims, ok := token.Claims.(*JWTClaims); ok {
+ return claims, nil
+ }
+
+ return nil, fmt.Errorf("invalid claims")
+}
\ No newline at end of file
diff --git a/backend/migrations/001_create_users.sql b/backend/migrations/001_create_users.sql
new file mode 100644
index 0000000..0a0b5f8
--- /dev/null
+++ b/backend/migrations/001_create_users.sql
@@ -0,0 +1,30 @@
+-- +migrate Up
+
+CREATE TABLE users (
+ id SERIAL PRIMARY KEY,
+ username VARCHAR(50) UNIQUE NOT NULL,
+ email VARCHAR(100) UNIQUE NOT NULL,
+ password VARCHAR(255) NOT NULL,
+ name VARCHAR(100),
+ avatar VARCHAR(500),
+ role VARCHAR(20) DEFAULT 'user',
+ is_active BOOLEAN DEFAULT true,
+ last_login TIMESTAMP,
+ created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+ updated_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+ deleted_at TIMESTAMP
+);
+
+-- 创建索引
+CREATE INDEX idx_users_username ON users(username);
+CREATE INDEX idx_users_email ON users(email);
+CREATE INDEX idx_users_role ON users(role);
+CREATE INDEX idx_users_deleted_at ON users(deleted_at);
+
+-- 插入默认管理员用户 (密码: admin123)
+INSERT INTO users (username, email, password, name, role) VALUES
+('admin', 'admin@photography.com', '$2a$10$D4Zz6m3j1YJzp8Y7zW4l2OXcQ5f6g7h8i9j0k1l2m3n4o5p6q7r8s9t0', '管理员', 'admin');
+
+-- +migrate Down
+
+DROP TABLE IF EXISTS users;
\ No newline at end of file
diff --git a/backend/migrations/002_create_categories.sql b/backend/migrations/002_create_categories.sql
new file mode 100644
index 0000000..c674c98
--- /dev/null
+++ b/backend/migrations/002_create_categories.sql
@@ -0,0 +1,33 @@
+-- +migrate Up
+
+CREATE TABLE categories (
+ id SERIAL PRIMARY KEY,
+ name VARCHAR(100) NOT NULL,
+ description TEXT,
+ parent_id INTEGER REFERENCES categories(id),
+ color VARCHAR(7) DEFAULT '#3b82f6',
+ cover_image VARCHAR(500),
+ sort INTEGER DEFAULT 0,
+ is_active BOOLEAN DEFAULT true,
+ created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+ updated_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+ deleted_at TIMESTAMP
+);
+
+-- 创建索引
+CREATE INDEX idx_categories_parent_id ON categories(parent_id);
+CREATE INDEX idx_categories_is_active ON categories(is_active);
+CREATE INDEX idx_categories_sort ON categories(sort);
+CREATE INDEX idx_categories_deleted_at ON categories(deleted_at);
+
+-- 插入默认分类
+INSERT INTO categories (name, description, color, sort) VALUES
+('风景摄影', '自然风景摄影作品', '#10b981', 1),
+('人像摄影', '人物肖像摄影作品', '#f59e0b', 2),
+('街头摄影', '街头纪实摄影作品', '#ef4444', 3),
+('建筑摄影', '建筑和城市摄影作品', '#3b82f6', 4),
+('抽象摄影', '抽象艺术摄影作品', '#8b5cf6', 5);
+
+-- +migrate Down
+
+DROP TABLE IF EXISTS categories;
\ No newline at end of file
diff --git a/backend/migrations/003_create_tags.sql b/backend/migrations/003_create_tags.sql
new file mode 100644
index 0000000..35e664f
--- /dev/null
+++ b/backend/migrations/003_create_tags.sql
@@ -0,0 +1,35 @@
+-- +migrate Up
+
+CREATE TABLE tags (
+ id SERIAL PRIMARY KEY,
+ name VARCHAR(50) UNIQUE NOT NULL,
+ color VARCHAR(7) DEFAULT '#6b7280',
+ use_count INTEGER DEFAULT 0,
+ is_active BOOLEAN DEFAULT true,
+ created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+ updated_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+ deleted_at TIMESTAMP
+);
+
+-- 创建索引
+CREATE INDEX idx_tags_name ON tags(name);
+CREATE INDEX idx_tags_use_count ON tags(use_count);
+CREATE INDEX idx_tags_is_active ON tags(is_active);
+CREATE INDEX idx_tags_deleted_at ON tags(deleted_at);
+
+-- 插入默认标签
+INSERT INTO tags (name, color) VALUES
+('自然', '#10b981'),
+('人物', '#f59e0b'),
+('城市', '#3b82f6'),
+('夜景', '#1f2937'),
+('黑白', '#6b7280'),
+('色彩', '#ec4899'),
+('构图', '#8b5cf6'),
+('光影', '#f97316'),
+('街头', '#ef4444'),
+('建筑', '#0891b2');
+
+-- +migrate Down
+
+DROP TABLE IF EXISTS tags;
\ No newline at end of file
diff --git a/backend/migrations/004_create_photos.sql b/backend/migrations/004_create_photos.sql
new file mode 100644
index 0000000..359f8e7
--- /dev/null
+++ b/backend/migrations/004_create_photos.sql
@@ -0,0 +1,55 @@
+-- +migrate Up
+
+CREATE TABLE photos (
+ id SERIAL PRIMARY KEY,
+ title VARCHAR(255) NOT NULL,
+ description TEXT,
+ filename VARCHAR(255) NOT NULL,
+ file_path VARCHAR(500) NOT NULL,
+ file_size BIGINT,
+ mime_type VARCHAR(100),
+ width INTEGER,
+ height INTEGER,
+ category_id INTEGER REFERENCES categories(id),
+ exif JSONB,
+ taken_at TIMESTAMP,
+ location VARCHAR(255),
+ is_public BOOLEAN DEFAULT true,
+ status VARCHAR(20) DEFAULT 'draft',
+ view_count INTEGER DEFAULT 0,
+ like_count INTEGER DEFAULT 0,
+ user_id INTEGER NOT NULL REFERENCES users(id),
+ created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+ updated_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+ deleted_at TIMESTAMP
+);
+
+-- 创建照片标签关联表
+CREATE TABLE photo_tags (
+ photo_id INTEGER REFERENCES photos(id) ON DELETE CASCADE,
+ tag_id INTEGER REFERENCES tags(id) ON DELETE CASCADE,
+ PRIMARY KEY (photo_id, tag_id)
+);
+
+-- 创建索引
+CREATE INDEX idx_photos_category_id ON photos(category_id);
+CREATE INDEX idx_photos_user_id ON photos(user_id);
+CREATE INDEX idx_photos_status ON photos(status);
+CREATE INDEX idx_photos_is_public ON photos(is_public);
+CREATE INDEX idx_photos_taken_at ON photos(taken_at);
+CREATE INDEX idx_photos_created_at ON photos(created_at);
+CREATE INDEX idx_photos_view_count ON photos(view_count);
+CREATE INDEX idx_photos_like_count ON photos(like_count);
+CREATE INDEX idx_photos_deleted_at ON photos(deleted_at);
+
+-- 为JSONB字段创建GIN索引（支持高效的JSON查询）
+CREATE INDEX idx_photos_exif_gin ON photos USING GIN (exif);
+
+-- 全文搜索索引
+CREATE INDEX idx_photos_title_gin ON photos USING GIN (to_tsvector('english', title));
+CREATE INDEX idx_photos_description_gin ON photos USING GIN (to_tsvector('english', description));
+
+-- +migrate Down
+
+DROP TABLE IF EXISTS photo_tags;
+DROP TABLE IF EXISTS photos;
\ No newline at end of file
diff --git a/backend/pkg/logger/logger.go b/backend/pkg/logger/logger.go
new file mode 100644
index 0000000..e1b9149
--- /dev/null
+++ b/backend/pkg/logger/logger.go
@@ -0,0 +1,76 @@
+package logger
+
+import (
+ "os"
+ "go.uber.org/zap"
+ "go.uber.org/zap/zapcore"
+ "gopkg.in/natefinch/lumberjack.v2"
+ "photography-backend/internal/config"
+)
+
+// InitLogger 初始化日志记录器
+func InitLogger(cfg *config.LoggerConfig) (*zap.Logger, error) {
+ // 设置日志级别
+ var level zapcore.Level
+ switch cfg.Level {
+ case "debug":
+ level = zapcore.DebugLevel
+ case "info":
+ level = zapcore.InfoLevel
+ case "warn":
+ level = zapcore.WarnLevel
+ case "error":
+ level = zapcore.ErrorLevel
+ default:
+ level = zapcore.InfoLevel
+ }
+
+ // 创建编码器配置
+ encoderConfig := zap.NewProductionEncoderConfig()
+ encoderConfig.TimeKey = "timestamp"
+ encoderConfig.EncodeTime = zapcore.ISO8601TimeEncoder
+ encoderConfig.EncodeLevel = zapcore.CapitalLevelEncoder
+
+ // 创建编码器
+ var encoder zapcore.Encoder
+ if cfg.Format == "json" {
+ encoder = zapcore.NewJSONEncoder(encoderConfig)
+ } else {
+ encoder = zapcore.NewConsoleEncoder(encoderConfig)
+ }
+
+ // 创建写入器
+ var writers []zapcore.WriteSyncer
+
+ // 控制台输出
+ writers = append(writers, zapcore.AddSync(os.Stdout))
+
+ // 文件输出
+ if cfg.Output == "file" && cfg.Filename != "" {
+ // 确保日志目录存在
+ if err := os.MkdirAll("logs", 0755); err != nil {
+ return nil, err
+ }
+
+ fileWriter := &lumberjack.Logger{
+ Filename: cfg.Filename,
+ MaxSize: cfg.MaxSize,
+ MaxAge: cfg.MaxAge,
+ MaxBackups: 10,
+ LocalTime: true,
+ Compress: cfg.Compress,
+ }
+ writers = append(writers, zapcore.AddSync(fileWriter))
+ }
+
+ // 合并写入器
+ writer := zapcore.NewMultiWriteSyncer(writers...)
+
+ // 创建核心
+ core := zapcore.NewCore(encoder, writer, level)
+
+ // 创建日志记录器
+ logger := zap.New(core, zap.AddCaller(), zap.AddCallerSkip(1))
+
+ return logger, nil
+}
\ No newline at end of file
diff --git a/backend/pkg/response/response.go b/backend/pkg/response/response.go
new file mode 100644
index 0000000..06fbf7e
--- /dev/null
+++ b/backend/pkg/response/response.go
@@ -0,0 +1,165 @@
+package response
+
+import (
+ "net/http"
+ "time"
+)
+
+// Response 统一响应结构
+type Response struct {
+ Success bool `json:"success"`
+ Code int `json:"code"`
+ Message string `json:"message"`
+ Data interface{} `json:"data,omitempty"`
+ Meta *Meta `json:"meta,omitempty"`
+}
+
+// Meta 元数据
+type Meta struct {
+ Timestamp string `json:"timestamp"`
+ RequestID string `json:"request_id,omitempty"`
+}
+
+// PaginatedResponse 分页响应
+type PaginatedResponse struct {
+ Success bool `json:"success"`
+ Code int `json:"code"`
+ Message string `json:"message"`
+ Data interface{} `json:"data"`
+ Pagination *Pagination `json:"pagination"`
+ Meta *Meta `json:"meta,omitempty"`
+}
+
+// Pagination 分页信息
+type Pagination struct {
+ Page int `json:"page"`
+ Limit int `json:"limit"`
+ Total int64 `json:"total"`
+ TotalPages int `json:"total_pages"`
+ HasNext bool `json:"has_next"`
+ HasPrev bool `json:"has_prev"`
+}
+
+// Success 成功响应
+func Success(data interface{}) *Response {
+ return &Response{
+ Success: true,
+ Code: http.StatusOK,
+ Message: "Success",
+ Data: data,
+ Meta: &Meta{
+ Timestamp: time.Now().Format(time.RFC3339),
+ },
+ }
+}
+
+// Error 错误响应
+func Error(code int, message string) *Response {
+ return &Response{
+ Success: false,
+ Code: code,
+ Message: message,
+ Meta: &Meta{
+ Timestamp: time.Now().Format(time.RFC3339),
+ },
+ }
+}
+
+// Created 创建成功响应
+func Created(data interface{}) *Response {
+ return &Response{
+ Success: true,
+ Code: http.StatusCreated,
+ Message: "Created successfully",
+ Data: data,
+ Meta: &Meta{
+ Timestamp: time.Now().Format(time.RFC3339),
+ },
+ }
+}
+
+// Updated 更新成功响应
+func Updated(data interface{}) *Response {
+ return &Response{
+ Success: true,
+ Code: http.StatusOK,
+ Message: "Updated successfully",
+ Data: data,
+ Meta: &Meta{
+ Timestamp: time.Now().Format(time.RFC3339),
+ },
+ }
+}
+
+// Deleted 删除成功响应
+func Deleted() *Response {
+ return &Response{
+ Success: true,
+ Code: http.StatusOK,
+ Message: "Deleted successfully",
+ Meta: &Meta{
+ Timestamp: time.Now().Format(time.RFC3339),
+ },
+ }
+}
+
+// Paginated 分页响应
+func Paginated(data interface{}, page, limit int, total int64) *PaginatedResponse {
+ totalPages := int((total + int64(limit) - 1) / int64(limit))
+
+ return &PaginatedResponse{
+ Success: true,
+ Code: http.StatusOK,
+ Message: "Success",
+ Data: data,
+ Pagination: &Pagination{
+ Page: page,
+ Limit: limit,
+ Total: total,
+ TotalPages: totalPages,
+ HasNext: page < totalPages,
+ HasPrev: page > 1,
+ },
+ Meta: &Meta{
+ Timestamp: time.Now().Format(time.RFC3339),
+ },
+ }
+}
+
+// BadRequest 400错误
+func BadRequest(message string) *Response {
+ return Error(http.StatusBadRequest, message)
+}
+
+// Unauthorized 401错误
+func Unauthorized(message string) *Response {
+ return Error(http.StatusUnauthorized, message)
+}
+
+// Forbidden 403错误
+func Forbidden(message string) *Response {
+ return Error(http.StatusForbidden, message)
+}
+
+// NotFound 404错误
+func NotFound(message string) *Response {
+ return Error(http.StatusNotFound, message)
+}
+
+// InternalServerError 500错误
+func InternalServerError(message string) *Response {
+ return Error(http.StatusInternalServerError, message)
+}
+
+// ValidationError 验证错误
+func ValidationError(errors map[string]string) *Response {
+ return &Response{
+ Success: false,
+ Code: http.StatusUnprocessableEntity,
+ Message: "Validation failed",
+ Data: errors,
+ Meta: &Meta{
+ Timestamp: time.Now().Format(time.RFC3339),
+ },
+ }
+}
\ No newline at end of file