加固后台管理安全

backend/migrations/000001_init.sql

@@ -383,6 +383,8 @@ CREATE TABLE IF NOT EXISTS admin_users (
   nickname VARCHAR(64) NOT NULL DEFAULT '' COMMENT '昵称',
   status VARCHAR(32) NOT NULL DEFAULT 'active' COMMENT '状态: active正常, inactive停用',
   support_status VARCHAR(16) NOT NULL DEFAULT 'offline' COMMENT '客服状态: online在线, offline离线, busy忙碌',
+  token_version BIGINT NOT NULL DEFAULT 1 COMMENT '后台凭证版本，递增后旧 token 失效',
+  password_must_change TINYINT(1) NOT NULL DEFAULT 0 COMMENT '是否必须先修改密码',
   last_login_at DATETIME NULL COMMENT '最后登录时间',
   created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
   updated_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
@@ -654,24 +656,8 @@ WHERE r.code = 'finance' AND p.code IN (
 -- 管理员账号初始化
 -- -------------------------------------------
 
--- 初始化管理员账号（密码: admin123456）
-INSERT INTO admin_users (username, password_hash, nickname, status) VALUES
-('admin', '$2a$10$vvDd.cYJCOBl9kr5jdRYXu9C/7GXcHmXsG17zJPHzPOZ0XGbqcWNS', '超级管理员', 'active'),
-('kf1', '$2a$10$7cx3B4IWunLZO24o11YVGu4qY1J1naDdsTyvoCpcnOO.GV15qaf3C', '客服1', 'active'),
-('kf2', '$2a$10$m6kLCXciFygpqIGUZ9LQtuEFAl40hb.S7zJmMiuC83WrU7OQM3TPC', '客服2', 'active')
-ON DUPLICATE KEY UPDATE
-  nickname = VALUES(nickname),
-  status = VALUES(status);
-
--- admin 关联 super_admin 角色
-INSERT IGNORE INTO admin_user_roles (admin_user_id, role_id)
-SELECT au.id, r.id FROM admin_users au, roles r
-WHERE au.username = 'admin' AND r.code = 'super_admin';
-
--- 客服关联 cs 角色
-INSERT IGNORE INTO admin_user_roles (admin_user_id, role_id)
-SELECT au.id, r.id FROM admin_users au, roles r
-WHERE au.username IN ('kf1', 'kf2') AND r.code = 'cs';
+-- 管理员账号不再由迁移创建，首个超级管理员由启动时的
+-- ADMIN_BOOTSTRAP_USERNAME / ADMIN_BOOTSTRAP_PASSWORD 一次性生成。
 
 -- -------------------------------------------
 -- 系统配置初始化

backend/migrations/000002_admin_security.sql

@@ -0,0 +1,19 @@
+-- +goose Up
+-- +goose StatementBegin
+ALTER TABLE admin_users
+  ADD COLUMN IF NOT EXISTS token_version BIGINT NOT NULL DEFAULT 1 COMMENT '后台凭证版本，递增后旧 token 失效'
+  AFTER support_status;
+
+ALTER TABLE admin_users
+  ADD COLUMN IF NOT EXISTS password_must_change TINYINT(1) NOT NULL DEFAULT 0 COMMENT '是否必须先修改密码'
+  AFTER token_version;
+-- +goose StatementEnd
+
+-- +goose Down
+-- +goose StatementBegin
+ALTER TABLE admin_users
+  DROP COLUMN IF EXISTS password_must_change;
+
+ALTER TABLE admin_users
+  DROP COLUMN IF EXISTS token_version;
+-- +goose StatementEnd