jiu/backend/main.go

package main

import (
	"fmt"
	"log"

	"github.com/gin-gonic/gin"
	"gorm.io/driver/mysql"
	"gorm.io/gorm"
	"gorm.io/gorm/logger"

	"github.com/wangjia/jiu/backend/config"
	"github.com/wangjia/jiu/backend/internal/model"
	"github.com/wangjia/jiu/backend/internal/router"
	"github.com/wangjia/jiu/backend/internal/service"
)

func main() {
	// 加载配置
	config.Load()

	// 生产环境启动前置检查
	if config.C.Server.Mode == "release" {
		if config.C.Server.CORSOrigin == "*" {
			log.Fatal("server.cors_origin must not be '*' in production — set it to the actual frontend origin")
		}
		if config.C.License.Ed25519PrivateKey == "" {
			log.Fatal("license.ed25519_private_key is required in production — store the key in Bitwarden and inject via env LICENSE_ED25519PRIVATEKEY")
		}
	}

	// 初始化数据库
	db := initDB()

	// ALTER 已有数据库的 enum，使 superadmin 在已运行实例上也生效（忽略错误）
	db.Exec("ALTER TABLE users MODIFY COLUMN role ENUM('admin','operator','readonly','superadmin') NOT NULL DEFAULT 'operator'")

	// 自动迁移（GORM AutoMigrate 只增不删，生产安全）
	autoMigrate(db)

	// 启动会话/失败登录保留期清理任务（后台 goroutine）
	service.StartSessionCleanup(db, config.C.Session.RetentionDays)

	// 启动 Gin
	gin.SetMode(config.C.Server.Mode)
	r := gin.New()
	r.Use(gin.Logger(), gin.Recovery())

	// CORS
	corsOrigin := config.C.Server.CORSOrigin
	r.Use(func(c *gin.Context) {
		c.Header("Access-Control-Allow-Origin", corsOrigin)
		c.Header("Access-Control-Allow-Methods", "GET,POST,PUT,DELETE,OPTIONS")
		c.Header("Access-Control-Allow-Headers", "Authorization,Content-Type")
		if c.Request.Method == "OPTIONS" {
			c.AbortWithStatus(204)
			return
		}
		c.Next()
	})

	// Serve uploaded images (in production, Nginx handles /images/)
	r.Static("/images", config.C.Storage.UploadDir)

	router.Setup(r, db)

	addr := fmt.Sprintf(":%s", config.C.Server.Port)
	log.Printf("Server starting on %s (mode: %s)", addr, config.C.Server.Mode)
	if err := r.Run(addr); err != nil {
		log.Fatalf("Server failed: %v", err)
	}
}

func initDB() *gorm.DB {
	dsn := config.C.Database.DSN
	if dsn == "" {
		log.Fatal("database.dsn is required in config")
	}

	logLevel := logger.Silent
	if config.C.Server.Mode == "debug" {
		logLevel = logger.Info
	}

	db, err := gorm.Open(mysql.Open(dsn), &gorm.Config{
		Logger: logger.Default.LogMode(logLevel),
	})
	if err != nil {
		log.Fatalf("failed to connect database: %v", err)
	}

	sqlDB, _ := db.DB()
	sqlDB.SetMaxIdleConns(config.C.Database.MaxIdleConns)
	sqlDB.SetMaxOpenConns(config.C.Database.MaxOpenConns)
	return db
}

func autoMigrate(db *gorm.DB) {
	err := db.AutoMigrate(
		&model.Shop{},
		&model.User{},
		&model.License{},
		&model.LicenseDevice{},
		&model.UserSession{},
		&model.LoginAttempt{},
		&model.ProductCategory{},
		&model.Product{},
		&model.Warehouse{},
		&model.Partner{},
		&model.StockInOrder{},
		&model.StockInItem{},
		&model.StockOutOrder{},
		&model.StockOutItem{},
		&model.Inventory{},
		&model.InventoryLog{},
		&model.InventoryCheck{},
		&model.InventoryCheckItem{},
		&model.FinanceRecord{},
		&model.NumberRule{},
		&model.ProductNameOption{},
		&model.ProductSeriesOption{},
		&model.ProductSpecOption{},
		&model.ProductOriginOption{},
		&model.ProductShelfLifeOption{},
		&model.ProductStorageOption{},
		&model.ProductDescriptionDoc{},
		&model.ProductImage{},
		&model.ErrorReport{},
		&model.Feedback{},
	)
	if err != nil {
		log.Fatalf("auto migrate failed: %v", err)
	}
	log.Println("AutoMigrate completed")
}