Enhance documentation with new features: added dark/light/system theme support, instructions page, and application catalog. Updated API and domain model for app management and automatic migrations on startup. Improved frontend structure with new routes and features for user instructions and app management.

2026-07-01 22:38:01 +03:00
parent d8930409fe
commit 1a8d33efa3
229 changed files with 9226 additions and 20 deletions
@@ -0,0 +1,27 @@
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Infrastructure;
+using PnvPanel.Domain.Activation;
+using PnvPanel.Domain.Apps;
+using PnvPanel.Domain.Configs;
+using PnvPanel.Domain.Inbounds;
+using PnvPanel.Domain.Nodes;
+
+namespace PnvPanel.Application.Common.Interfaces;
+
+public interface IAppDbContext
+{
+    DbSet<ActivationRequest> ActivationRequests { get; }
+
+    DbSet<Node> Nodes { get; }
+
+    DbSet<Inbound> Inbounds { get; }
+
+    DbSet<VpnConfig> VpnConfigs { get; }
+
+    DbSet<ClientApp> ClientApps { get; }
+
+    /// <summary>Нужен для advisory-lock при проверке квоты конфигов (см. CreateVpnConfigCommandHandler).</summary>
+    DatabaseFacade Database { get; }
+
+    Task<int> SaveChangesAsync(CancellationToken cancellationToken);
+}
@@ -0,0 +1,8 @@
+namespace PnvPanel.Application.Common.Interfaces;
+
+public interface ICurrentUser
+{
+    Guid? UserId { get; }
+    string? UserName { get; }
+    bool IsAuthenticated { get; }
+}
@@ -0,0 +1,33 @@
+using PnvPanel.Application.Common.Models;
+
+namespace PnvPanel.Application.Common.Interfaces;
+
+public sealed record AuthenticatedUser(Guid Id, string UserName, string Role);
+
+public sealed record CurrentUserProfile(Guid Id, string UserName, Guid RoleId, string Role, bool IsActivated, int MaxConfigs);
+
+public interface IIdentityService
+{
+    Task<Result<Guid>> CreateUserAsync(string userName, string password, CancellationToken cancellationToken);
+
+    Task<Result<AuthenticatedUser>> ValidateCredentialsAsync(string userName, string password, CancellationToken cancellationToken);
+
+    Task<CurrentUserProfile?> GetProfileAsync(Guid userId, CancellationToken cancellationToken);
+
+    Task<Result> ChangePasswordAsync(Guid userId, string currentPassword, string newPassword, CancellationToken cancellationToken);
+
+    /// <summary>
+    /// Помечает пользователя активированным. Изменение не коммитится немедленно (в отличие от
+    /// CreateUserAsync/ChangePasswordAsync) — оно попадает в трекер того же DbContext и сохраняется
+    /// вместе с изменением ActivationRequest одной транзакцией через UnitOfWorkBehavior.
+    /// </summary>
+    Task<Result> ActivateUserAsync(Guid userId, Guid activatedBy, CancellationToken cancellationToken);
+
+    Task<IReadOnlyDictionary<Guid, string>> GetUserNamesAsync(IReadOnlyCollection<Guid> userIds, CancellationToken cancellationToken);
+
+    /// <summary>Удаляет аккаунт (самоудаление). Конфиги должны быть отозваны заранее вызывающей стороной.</summary>
+    Task<Result> DeleteUserAsync(Guid userId, CancellationToken cancellationToken);
+
+    /// <summary>Для агрегированной подписки /sub/{userToken} (все активные конфиги пользователя).</summary>
+    Task<Guid?> FindUserIdBySubscriptionTokenAsync(string token, CancellationToken cancellationToken);
+}
@@ -0,0 +1,6 @@
+namespace PnvPanel.Application.Common.Interfaces;
+
+public interface IJwtTokenService
+{
+    (string AccessToken, DateTimeOffset ExpiresAt) GenerateAccessToken(AuthenticatedUser user);
+}
@@ -0,0 +1,16 @@
+using PnvPanel.Application.Common.Models;
+
+namespace PnvPanel.Application.Common.Interfaces;
+
+public sealed record IssuedRefreshToken(string RawToken, DateTimeOffset ExpiresAt);
+
+public sealed record RotatedRefreshToken(Guid UserId, string RawToken, DateTimeOffset ExpiresAt);
+
+public interface IRefreshTokenService
+{
+    Task<IssuedRefreshToken> IssueAsync(Guid userId, CancellationToken cancellationToken);
+
+    Task<Result<RotatedRefreshToken>> RotateAsync(string rawToken, CancellationToken cancellationToken);
+
+    Task RevokeAsync(string rawToken, CancellationToken cancellationToken);
+}
@@ -0,0 +1,18 @@
+using PnvPanel.Application.Common.Models;
+
+namespace PnvPanel.Application.Common.Interfaces;
+
+public sealed record RoleDto(Guid Id, string Name, int MaxConfigs, bool IsSystem);
+
+public interface IRoleService
+{
+    Task<Result<RoleDto>> CreateRoleAsync(string name, int maxConfigs, CancellationToken cancellationToken);
+
+    Task<Result<RoleDto>> UpdateRoleAsync(Guid roleId, int maxConfigs, CancellationToken cancellationToken);
+
+    Task<Result> DeleteRoleAsync(Guid roleId, CancellationToken cancellationToken);
+
+    Task<IReadOnlyList<RoleDto>> ListRolesAsync(CancellationToken cancellationToken);
+
+    Task<Result> ChangeUserRoleAsync(Guid userId, Guid roleId, CancellationToken cancellationToken);
+}
@@ -0,0 +1,9 @@
+namespace PnvPanel.Application.Common.Interfaces;
+
+/// <summary>Шифрование секретов at-rest (пароли нод). Реализация — ASP.NET Core Data Protection.</summary>
+public interface ISecretProtector
+{
+    string Protect(string plaintext);
+
+    string Unprotect(string protectedValue);
+}
@@ -0,0 +1,41 @@
+using PnvPanel.Application.Common.Models;
+using PnvPanel.Domain.Inbounds;
+using PnvPanel.Domain.Nodes;
+
+namespace PnvPanel.Application.Common.Interfaces;
+
+public sealed record RemoteInboundInfo(string RemoteInboundId, VpnProtocol Protocol, string Remark, int Port);
+
+public sealed record NodeProbeResult(bool IsReachable, string? ErrorMessage);
+
+/// <summary>
+/// Оркестрация панелей 3x-ui через ThreeXui.Net. Один BaseAddress в библиотеке, но нод много —
+/// реализация держит клиента per-node (кэш по NodeId), см. XuiPanelGateway.
+/// </summary>
+public interface IXuiPanelGateway
+{
+    Result ValidateBaseAddress(Uri baseAddress);
+
+    Task<NodeProbeResult> ProbeAsync(Node node, CancellationToken cancellationToken);
+
+    Task<Result<IReadOnlyList<RemoteInboundInfo>>> ListInboundsAsync(Node node, CancellationToken cancellationToken);
+
+    void InvalidateClient(Guid nodeId);
+
+    /// <summary>Возвращает ClientExternalId, присвоенный панелью (UUID для VLESS/VMess, пароль для Trojan/Shadowsocks).</summary>
+    Task<Result<string>> AddClientAsync(
+        Node node, string inboundRemoteId, VpnProtocol protocol, string clientEmail, string clientName,
+        int deviceLimit, CancellationToken cancellationToken);
+
+    Task<Result> RemoveClientAsync(
+        Node node, string inboundRemoteId, string clientExternalId, VpnProtocol protocol,
+        CancellationToken cancellationToken);
+
+    Task<Result> UpdateClientAsync(
+        Node node, string inboundRemoteId, string clientExternalId, VpnProtocol protocol,
+        string name, int deviceLimit, bool enable, CancellationToken cancellationToken);
+
+    Task<Result<string>> BuildConnectionStringAsync(
+        Node node, Inbound inbound, string clientExternalId, string clientName, string publicHost,
+        CancellationToken cancellationToken);
+}