新增支付配置备份导出功能

backend/internal/modules/paymentconfig/dto.go

@@ -106,3 +106,13 @@ type ListResponse struct {
 	Page     int         `json:"page"`
 	PageSize int         `json:"page_size"`
 }
+
+// ExportBackup 支付配置备份导出内容。
+type ExportBackup struct {
+	Type       string      `json:"type"`
+	Version    int         `json:"version"`
+	ExportedAt string      `json:"exported_at"`
+	ExportedBy uint64      `json:"exported_by"`
+	Total      int         `json:"total"`
+	Configs    []ConfigDTO `json:"configs"`
+}

backend/internal/modules/paymentconfig/handler.go

@@ -1,8 +1,10 @@
 package paymentconfig
 
 import (
+	"encoding/json"
 	"net/http"
 	"strconv"
+	"time"
 
 	"hfb_sys/backend/internal/middleware"
 	"hfb_sys/backend/pkg/response"
@@ -73,6 +75,40 @@ func (h *Handler) Get(c *gin.Context) {
 	response.OK(c, config)
 }
 
+// ExportBackup 导出支付配置备份
+// @Summary 导出支付配置备份
+// @Tags 管理后台-支付配置
+// @Success 200 {file} file "支付配置备份 JSON"
+// @Router /admin/payment-configs/export [get]
+func (h *Handler) ExportBackup(c *gin.Context) {
+	adminID, ok := currentAdminID(c)
+	if !ok {
+		response.Unauthorized(c, "未授权")
+		return
+	}
+
+	backup, err := h.service.ExportBackup(adminID, auditMeta(c))
+	if err == ErrDecryptionFailed {
+		response.Error(c, http.StatusInternalServerError, "decrypt_failed", "密钥解密失败")
+		return
+	}
+	if err != nil {
+		response.Error(c, http.StatusInternalServerError, "internal_error", "导出失败")
+		return
+	}
+
+	data, err := json.MarshalIndent(backup, "", "  ")
+	if err != nil {
+		response.Error(c, http.StatusInternalServerError, "internal_error", "导出失败")
+		return
+	}
+
+	filename := "payment-config-backup-" + time.Now().Format("20060102-150405") + ".json"
+	contentType := "application/json; charset=utf-8"
+	c.Header("Content-Disposition", `attachment; filename="`+filename+`"`)
+	c.Data(http.StatusOK, contentType, data)
+}
+
 // Create 创建支付配置
 // @Summary 创建支付配置
 // @Tags 管理后台-支付配置

backend/internal/modules/paymentconfig/repository.go

@@ -153,6 +153,45 @@ func (r *Repository) FindByProviderMerchant(provider string, merchantID string,
 	return &dto, nil
 }
 
+// ExportBackup 导出所有支付配置备份，包含解密后的密钥。
+func (r *Repository) ExportBackup(actorID uint64, meta AuditMeta) (*ExportBackup, error) {
+	var backup *ExportBackup
+	err := r.db.Transaction(func(tx *gorm.DB) error {
+		var items []model.PaymentMerchantConfig
+		if err := tx.Order("is_default DESC, id DESC").Find(&items).Error; err != nil {
+			return err
+		}
+
+		configs := make([]ConfigDTO, 0, len(items))
+		for _, item := range items {
+			dto, err := r.toDTO(item, true)
+			if err != nil {
+				return err
+			}
+			configs = append(configs, dto)
+		}
+
+		exportedAt := time.Now().Format(time.RFC3339)
+		backup = &ExportBackup{
+			Type:       "payment_config_backup",
+			Version:    1,
+			ExportedAt: exportedAt,
+			ExportedBy: actorID,
+			Total:      len(configs),
+			Configs:    configs,
+		}
+
+		return appendAuditLog(tx, actorID, "payment_config.export", 0, meta, map[string]any{
+			"total":       len(configs),
+			"exported_at": exportedAt,
+		})
+	})
+	if err != nil {
+		return nil, err
+	}
+	return backup, nil
+}
+
 // FindActiveByProvider 查询提供商的所有激活配置
 func (r *Repository) FindActiveByProvider(provider string) ([]model.PaymentMerchantConfig, error) {
 	var items []model.PaymentMerchantConfig

backend/internal/modules/paymentconfig/service.go

@@ -37,6 +37,11 @@ func (s *Service) Get(id uint64, includeSecret bool) (*ConfigDTO, error) {
 	return s.repo.FindByID(id, includeSecret)
 }
 
+// ExportBackup 导出支付配置备份。
+func (s *Service) ExportBackup(actorID uint64, meta AuditMeta) (*ExportBackup, error) {
+	return s.repo.ExportBackup(actorID, meta)
+}
+
 // Create 创建配置
 func (s *Service) Create(req CreateRequest, actorID uint64, meta AuditMeta) (*ConfigDTO, error) {
 	return s.repo.Create(req, actorID, meta)

backend/internal/router/router.go

@@ -424,6 +424,7 @@ func New(cfg config.Config, deps Dependencies, logger *zap.Logger) *gin.Engine {
 			// 支付配置管理
 			if paymentConfigHandler != nil {
 				adminRoutes.GET("/payment-configs", requirePerm("payment_config:list"), paymentConfigHandler.List)
+				adminRoutes.GET("/payment-configs/export", requirePerm("payment_config:view_secret"), paymentConfigHandler.ExportBackup)
 				adminRoutes.GET("/payment-configs/:id", requirePerm("payment_config:list"), paymentConfigHandler.Get)
 				adminRoutes.POST("/payment-configs", requirePerm("payment_config:create"), paymentConfigHandler.Create)
 				adminRoutes.PUT("/payment-configs/:id", requirePerm("payment_config:update"), paymentConfigHandler.Update)

backend/migrations/000002_payment_lakala_multichannel.sql

@@ -1,10 +0,0 @@
--- 支付多渠道和拉卡拉配置字段扩展
-ALTER TABLE payment_orders
-  MODIFY COLUMN provider VARCHAR(32) NOT NULL COMMENT '支付服务商: leshua乐刷, lakala拉卡拉, mock模拟',
-  MODIFY COLUMN merchant_id VARCHAR(128) NOT NULL DEFAULT '' COMMENT '商户号';
-
-ALTER TABLE payment_merchant_configs
-  MODIFY COLUMN provider VARCHAR(32) NOT NULL COMMENT '支付服务商: leshua乐刷, lakala拉卡拉, mock模拟',
-  MODIFY COLUMN sign_key TEXT NULL COMMENT '签名密钥/商户私钥（加密存储）',
-  MODIFY COLUMN notify_key TEXT NULL COMMENT '通知验签密钥/平台通知证书（加密存储）',
-  MODIFY COLUMN sign_type VARCHAR(32) NOT NULL DEFAULT 'MD5' COMMENT '签名类型: MD5, SHA256withRSA';

frontend/package.json

@@ -4,8 +4,8 @@
   "private": true,
   "type": "module",
   "scripts": {
-    "dev": "vue-tsc -b --watch & vite --host 0.0.0.0",
+    "dev": "vue-tsc -b --noEmit --watch & vite --host 0.0.0.0",
-    "build": "vue-tsc -b && vite build",
+    "build": "vue-tsc -b --noEmit && vite build",
     "preview": "vite preview --host 0.0.0.0",
     "typecheck": "vue-tsc -b --noEmit"
   },

frontend/src/features/admin/api/paymentConfig.ts

@@ -92,6 +92,16 @@ export async function fetchPaymentConfig(id: number, includeSecret = false) {
   return data.data
 }
 
+export async function exportPaymentConfigBackup() {
+  const response = await apiClient.get<Blob>('/admin/payment-configs/export', {
+    responseType: 'blob',
+  })
+  return {
+    blob: response.data,
+    filename: readDownloadFilename(response.headers['content-disposition']) || fallbackBackupFilename(),
+  }
+}
+
 export async function createPaymentConfig(payload: CreatePaymentConfigRequest) {
   const { data } = await apiClient.post<ApiResponse<PaymentConfig>>('/admin/payment-configs', payload)
   return data.data
@@ -106,3 +116,15 @@ export async function deletePaymentConfig(id: number) {
   const { data } = await apiClient.delete<ApiResponse<{ message: string }>>(`/admin/payment-configs/${id}`)
   return data.data
 }
+
+function readDownloadFilename(contentDisposition: unknown) {
+  if (typeof contentDisposition !== 'string') return ''
+  const encoded = contentDisposition.match(/filename\*=UTF-8''([^;]+)/i)?.[1]
+  if (encoded) return decodeURIComponent(encoded)
+  return contentDisposition.match(/filename="?([^";]+)"?/i)?.[1] || ''
+}
+
+function fallbackBackupFilename() {
+  const stamp = new Date().toISOString().replace(/[-:]/g, '').replace(/\.\d{3}Z$/, '')
+  return `payment-config-backup-${stamp}.json`
+}

frontend/src/features/admin/views/AdminPaymentConfigsView.vue

@@ -1,11 +1,12 @@
 <script setup lang="ts">
 import { ElMessage, ElMessageBox } from 'element-plus'
 import { computed, onMounted, ref } from 'vue'
-import { Plus, Refresh, View, Edit, Delete } from '@element-plus/icons-vue'
+import { Plus, Refresh, View, Edit, Delete, Download } from '@element-plus/icons-vue'
 
 import {
   fetchPaymentConfigs,
   deletePaymentConfig,
+  exportPaymentConfigBackup,
   type PaymentConfig,
 } from '@/features/admin/api/paymentConfig'
 import { formatDateTime } from '@/utils/time'
@@ -17,6 +18,7 @@ const configs = ref<PaymentConfig[]>([])
 const total = ref(0)
 const currentPage = ref(1)
 const pageSize = ref(20)
+const exporting = ref(false)
 
 const dialogVisible = ref(false)
 const dialogMode = ref<'create' | 'edit' | 'view'>('create')
@@ -110,6 +112,38 @@ async function handleDelete(row: PaymentConfig) {
   }
 }
 
+async function handleExportBackup() {
+  try {
+    await ElMessageBox.confirm('备份文件会包含支付密钥明文，请妥善保管。确定导出吗？', '导出支付配置备份', {
+      type: 'warning',
+      confirmButtonText: '导出',
+      cancelButtonText: '取消',
+    })
+
+    exporting.value = true
+    const { blob, filename } = await exportPaymentConfigBackup()
+    downloadBlob(blob, filename)
+    ElMessage.success('导出成功')
+  } catch (error: any) {
+    if (error !== 'cancel') {
+      ElMessage.error(readError(error, '导出备份失败'))
+    }
+  } finally {
+    exporting.value = false
+  }
+}
+
+function downloadBlob(blob: Blob, filename: string) {
+  const url = URL.createObjectURL(blob)
+  const link = document.createElement('a')
+  link.href = url
+  link.download = filename
+  document.body.appendChild(link)
+  link.click()
+  document.body.removeChild(link)
+  URL.revokeObjectURL(url)
+}
+
 function handleDialogClose() {
   dialogVisible.value = false
   currentConfig.value = null
@@ -187,6 +221,7 @@ function deleteDisabledReason(row: PaymentConfig) {
         <el-option v-for="opt in environmentOptions" :key="opt.value" :label="opt.label" :value="opt.value" />
       </el-select>
       <el-button :icon="Refresh" @click="loadConfigs">刷新</el-button>
+      <el-button :icon="Download" :loading="exporting" @click="handleExportBackup">导出备份</el-button>
       <el-button type="primary" :icon="Plus" @click="handleCreate">新增配置</el-button>
     </div>
 
@@ -315,6 +350,8 @@ function deleteDisabledReason(row: PaymentConfig) {
 
 .filter-bar {
   display: flex;
+  align-items: center;
+  flex-wrap: wrap;
   gap: 12px;
   margin-bottom: 16px;
 }

frontend/src/styles/admin.css

@@ -549,7 +549,6 @@ h1 {
   align-items: center;
   gap: 8px;
   flex-shrink: 0;
-}
   padding-bottom: 1px;
   white-space: nowrap;
 }

frontend/vite.config.ts

@@ -37,6 +37,14 @@ export default defineConfig({
   },
   build: {
     rollupOptions: {
+      onwarn(warning, warn) {
+        const isVueusePureWarning =
+          warning.message.includes("#__PURE__") &&
+          typeof warning.id === "string" &&
+          warning.id.includes("node_modules/@vueuse/core/");
+        if (isVueusePureWarning) return;
+        warn(warning);
+      },
       output: {
         manualChunks(id) {
           if (!id.includes("node_modules")) return;