移除注册功能，管理员创建用户并新增创建用户弹窗

backend/internal/handlers/auth.go

@@ -19,80 +19,6 @@ type AuthHandler struct {
 	CFG *config.Config
 }
 
-func (h *AuthHandler) Register(c *gin.Context) {
-	var req struct {
-		Username string  `json:"username" binding:"required"`
-		Email    *string `json:"email"`
-		Password string  `json:"password" binding:"required"`
-	}
-	if err := c.ShouldBindJSON(&req); err != nil {
-		c.JSON(http.StatusBadRequest, gin.H{"success": false, "error": "请求参数错误"})
-		return
-	}
-
-	if err := validateUsername(req.Username); err != nil {
-		c.JSON(http.StatusBadRequest, gin.H{"success": false, "error": err.Error()})
-		return
-	}
-	if len(req.Password) < 6 {
-		c.JSON(http.StatusBadRequest, gin.H{"success": false, "error": "密码长度至少 6 位"})
-		return
-	}
-
-	username := strings.ToLower(strings.TrimSpace(req.Username))
-
-	var role models.Role
-	if err := h.DB.Where("name = ?", models.RoleUser).First(&role).Error; err != nil {
-		c.JSON(http.StatusInternalServerError, gin.H{"success": false, "error": "internal server error"})
-		return
-	}
-
-	hash, err := hashPassword(req.Password)
-	if err != nil {
-		c.JSON(http.StatusInternalServerError, gin.H{"success": false, "error": "internal server error"})
-		return
-	}
-
-	var email *string
-	if req.Email != nil && *req.Email != "" {
-		e := strings.ToLower(strings.TrimSpace(*req.Email))
-		email = &e
-	}
-
-	user := models.User{
-		Username:     username,
-		Email:        email,
-		PasswordHash: hash,
-		RoleID:       role.ID,
-		Status:       "active",
-	}
-
-	if err := h.DB.Create(&user).Error; err != nil {
-		if strings.Contains(err.Error(), "duplicate key") {
-			c.JSON(http.StatusConflict, gin.H{"success": false, "error": "用户名或邮箱已存在"})
-			return
-		}
-		c.JSON(http.StatusInternalServerError, gin.H{"success": false, "error": "internal server error"})
-		return
-	}
-
-	if err := h.DB.Preload("Role").First(&user, "id = ?", user.ID).Error; err != nil {
-		c.JSON(http.StatusInternalServerError, gin.H{"success": false, "error": "internal server error"})
-		return
-	}
-
-	token, err := middleware.GenerateToken(user.ID, models.RoleUser, h.CFG)
-	if err != nil {
-		c.JSON(http.StatusInternalServerError, gin.H{"success": false, "error": "internal server error"})
-		return
-	}
-
-	c.JSON(http.StatusOK, gin.H{
-		"token": token,
-		"user":  user.ToPublicInfo(),
-	})
-}
-
 func (h *AuthHandler) Login(c *gin.Context) {
 	var req struct {
 		Username string `json:"username" binding:"required"`

backend/internal/middleware/auth.go

@@ -20,8 +20,7 @@ type CurrentUser struct {
 }
 
 var publicPaths = map[string]struct{}{
-	"/api/auth/register": {},
-	"/api/auth/login":    {},
+	"/api/auth/login": {},
 }
 
 func AuthMiddleware(cfg *config.Config, db *gorm.DB) gin.HandlerFunc {

backend/internal/routes/routes.go

@@ -30,8 +30,7 @@ func Setup(cfg *config.Config, db *gorm.DB) *gin.Engine {
 
 	r.Use(middleware.AuthMiddleware(cfg, db))
 
-	// 公开接口（仅登录/注册）
-	r.POST("/api/auth/register", authHandler.Register)
+	// 公开接口（仅登录）
 	r.POST("/api/auth/login", authHandler.Login)
 
 	// 受保护接口