|
|
603a7f68cb
|
refactor(ui): 提取共享 UI 组件，消除跨页面重复
新增 src/components/ui.rs 作为通用 UI 原子层，封装：
组件：
- <Pagination variant="admin"|"frontend">：合并 posts/comments/trash/home
四个重复的分页实现，用 variant 区分配色（admin 灰黑 / 前台主题绿）
- <StatusBadge>：统一文章状态、评论状态、回收站剩余天数的徽章外层
- <EmptyState variant="default"|"error">：统一列表空态与加载失败占位
类名常量：
- ADMIN_CARD_CLASS / ADMIN_TABLE_CLASS / ADMIN_ROW_HOVER / CHECKBOX_CLASS
- BTN_SOLID_{GREEN,AMBER,RED}：批量操作实心按钮
- BTN_TEXT_{GREEN,AMBER,RED,ACCENT}：行内文字按钮
清理：
- 删除 input.css 中零引用的 .btn-primary 死代码（22 行）
- 删除 4 个重复的分页组件函数
注意：
- 前台空状态（home/search/archives/tags）保持 text-paper-secondary 配色，
未强行统一到 admin 的灰色 token，避免改变视觉
- 回收站分页计数单位从"条"修正为"篇"（回收站里是文章）
|
2026-06-16 14:20:05 +08:00 |
|
|
|
04737300e6
|
feat(comments): add complete comment system with guest commenting, moderation, and admin UI
Implements a fully self-built comment system for the blog:
Data layer:
- comments table with BIGSERIAL PK, parent_id self-reference (ON DELETE SET NULL),
depth tracking (max 20), status workflow (pending/approved/spam/trash),
content hashing for dedup, GDPR consent tracking, IP/UA storage with auto-purge
- 5 partial indexes optimized for read patterns
- updated_at auto-trigger
API (9 Dioxus server functions):
- Public: get_comments, get_comment_count, create_comment
- Admin: get_pending_comments, get_pending_count, get_all_comments,
approve_comment (with ancestor auto-approval), spam_comment, trash_comment,
batch_update_comment_status
Security:
- Function-level rate limiting (1/sec, burst 5) via FullstackContext IP extraction
- Input validation (name, email, URL scheme, content length, consent)
- Parent chain validation (must be approved, same post)
- Strict comment Markdown renderer (headings→strong, no img/id/data URIs, nofollow links)
- Honeypot anti-spam field
- 5-minute dedup window via SHA-256 content hash
Frontend:
- CommentSection with SuspenseBoundary isolation
- Flat-list rendering with depth-based CSS indentation (responsive)
- Gravatar via cravatar.cn (server-computed, email never exposed)
- Inline reply forms (one-at-a-time via Signal)
- Admin action buttons (approve/spam/delete) visible per-comment
- CommentForm with privacy consent, Markdown hint, loading states
Admin:
- /admin/comments page with status tabs, batch operations, pagination
- Pending count badge on admin dashboard
Infrastructure:
- Shared get_current_admin_user moved from posts/helpers to auth module
- COMMENT_LIMITER rate limiter tier
- Moka caches (60s TTL for comments, 10s for pending count)
- IP/UA purge background task (daily, 90-day retention)
|
2026-06-11 12:34:26 +08:00 |
|
