feat: Migrate admin UI from Blazor WASM/MudBlazor to Razor Pages/Cookie Auth/Tabler
- Remove QuantEngine.Web.Client from .sln (keep on disk for reference) - Replace Blazor Interactive WebAssembly with server-rendered Razor Pages - Implement Cookie Authentication (HttpOnly, SameSite=Lax, 12h expiry) - Add AuthService with BCrypt password hashing + auto-migration from SHA-256 - Implement IpLockoutService (3 strikes → 15-min ban) - Create Admin folder structure with Layout + shared partials - Implement Dashboard, Collection, Users index pages (base structure) - Remove hardcoded backdoors (master_recovery, dev auth bypass) - Remove hardcoded localhost:5265 URLs - Add Tabler UI base styling (Bootstrap 5 CDN + custom admin.css) - Update CLAUDE.md with new UI standards and auth policies - Build: 0 errors, 0 warnings (ready for dev testing) Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>
This commit is contained in:
@@ -1,67 +0,0 @@
|
||||
@using System.Reflection
|
||||
@using QuantEngine.Web.Client.Pages
|
||||
@using Microsoft.AspNetCore.Components.Routing
|
||||
|
||||
<!DOCTYPE html>
|
||||
<html lang="ko">
|
||||
|
||||
<head>
|
||||
<meta charset="utf-8" />
|
||||
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
|
||||
<base href="/" />
|
||||
|
||||
<link href="https://fonts.googleapis.com/css?family=Roboto:300,400,500,700&display=swap" rel="stylesheet" />
|
||||
<link href="_content/MudBlazor/MudBlazor.min.css" rel="stylesheet" />
|
||||
<link rel="stylesheet" href="app.css" />
|
||||
<link rel="icon" type="image/svg+xml" href="favicon.svg" />
|
||||
<link rel="alternate icon" type="image/png" href="favicon.png" />
|
||||
|
||||
<HeadOutlet />
|
||||
</head>
|
||||
|
||||
<body>
|
||||
<div id="app">
|
||||
<CascadingAuthenticationState>
|
||||
<Router AppAssembly="@typeof(App).Assembly"
|
||||
AdditionalAssemblies="new[] { typeof(QuantEngine.Web.Client.Pages.Dashboard).Assembly }"
|
||||
OnNavigateAsync="@OnNavigateAsync">
|
||||
<Found Context="routeData">
|
||||
<RouteView RouteData="@routeData" DefaultLayout="@typeof(QuantEngine.Web.Client.Layout.MainLayout)" />
|
||||
<FocusOnNavigate RouteData="@routeData" Selector="h1" />
|
||||
</Found>
|
||||
<NotFound>
|
||||
<PageTitle>페이지를 찾을 수 없음</PageTitle>
|
||||
<div class="alert alert-danger">
|
||||
<h3>404 - 페이지를 찾을 수 없습니다</h3>
|
||||
<p>요청하신 페이지가 존재하지 않습니다.</p>
|
||||
</div>
|
||||
</NotFound>
|
||||
</Router>
|
||||
</CascadingAuthenticationState>
|
||||
</div>
|
||||
|
||||
<script src="_framework/blazor.web.js"></script>
|
||||
<script src="_content/MudBlazor/MudBlazor.min.js"></script>
|
||||
</body>
|
||||
|
||||
</html>
|
||||
|
||||
@code {
|
||||
private async Task OnNavigateAsync(Microsoft.AspNetCore.Components.Routing.NavigationContext context)
|
||||
{
|
||||
// /Account/* paths are Razor Pages, not Blazor components
|
||||
// Force browser navigation instead of Blazor routing
|
||||
if (context.Path.StartsWith("Account/", StringComparison.OrdinalIgnoreCase)
|
||||
|| context.Path.StartsWith("/Account/", StringComparison.OrdinalIgnoreCase))
|
||||
{
|
||||
// Prevent Blazor from handling this route
|
||||
// Force a full page reload via browser
|
||||
await Task.CompletedTask;
|
||||
// This triggers browser to make a new request, bypassing Blazor
|
||||
}
|
||||
else
|
||||
{
|
||||
await Task.CompletedTask;
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -1,22 +0,0 @@
|
||||
@inherits LayoutComponentBase
|
||||
@using QuantEngine.Web.Client.Theme
|
||||
|
||||
<!-- 최소한의 레이아웃 - MudBlazor 프로바이더 제거 -->
|
||||
|
||||
<style>
|
||||
:global(body) {
|
||||
margin: 0;
|
||||
padding: 0;
|
||||
font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Arial, sans-serif;
|
||||
}
|
||||
|
||||
:global(html, body, #app) {
|
||||
width: 100%;
|
||||
height: 100%;
|
||||
}
|
||||
</style>
|
||||
|
||||
@Body
|
||||
|
||||
@code {
|
||||
}
|
||||
@@ -1,31 +0,0 @@
|
||||
<script type="module" src="@Assets["Components/Layout/ReconnectModal.razor.js"]"></script>
|
||||
|
||||
<dialog id="components-reconnect-modal" data-nosnippet>
|
||||
<div class="components-reconnect-container">
|
||||
<div class="components-rejoining-animation" aria-hidden="true">
|
||||
<div></div>
|
||||
<div></div>
|
||||
</div>
|
||||
<p class="components-reconnect-first-attempt-visible">
|
||||
Rejoining the server...
|
||||
</p>
|
||||
<p class="components-reconnect-repeated-attempt-visible">
|
||||
Rejoin failed... trying again in <span id="components-seconds-to-next-attempt"></span> seconds.
|
||||
</p>
|
||||
<p class="components-reconnect-failed-visible">
|
||||
Failed to rejoin.<br />Please retry or reload the page.
|
||||
</p>
|
||||
<button id="components-reconnect-button" class="components-reconnect-failed-visible">
|
||||
Retry
|
||||
</button>
|
||||
<p class="components-pause-visible">
|
||||
The session has been paused by the server.
|
||||
</p>
|
||||
<button id="components-resume-button" class="components-pause-visible">
|
||||
Resume
|
||||
</button>
|
||||
<p class="components-resume-failed-visible">
|
||||
Failed to resume the session.<br />Please reload the page.
|
||||
</p>
|
||||
</div>
|
||||
</dialog>
|
||||
@@ -1,157 +0,0 @@
|
||||
.components-reconnect-first-attempt-visible,
|
||||
.components-reconnect-repeated-attempt-visible,
|
||||
.components-reconnect-failed-visible,
|
||||
.components-pause-visible,
|
||||
.components-resume-failed-visible,
|
||||
.components-rejoining-animation {
|
||||
display: none;
|
||||
}
|
||||
|
||||
#components-reconnect-modal.components-reconnect-show .components-reconnect-first-attempt-visible,
|
||||
#components-reconnect-modal.components-reconnect-show .components-rejoining-animation,
|
||||
#components-reconnect-modal.components-reconnect-paused .components-pause-visible,
|
||||
#components-reconnect-modal.components-reconnect-resume-failed .components-resume-failed-visible,
|
||||
#components-reconnect-modal.components-reconnect-retrying,
|
||||
#components-reconnect-modal.components-reconnect-retrying .components-reconnect-repeated-attempt-visible,
|
||||
#components-reconnect-modal.components-reconnect-retrying .components-rejoining-animation,
|
||||
#components-reconnect-modal.components-reconnect-failed,
|
||||
#components-reconnect-modal.components-reconnect-failed .components-reconnect-failed-visible {
|
||||
display: block;
|
||||
}
|
||||
|
||||
|
||||
#components-reconnect-modal {
|
||||
background-color: white;
|
||||
width: 20rem;
|
||||
margin: 20vh auto;
|
||||
padding: 2rem;
|
||||
border: 0;
|
||||
border-radius: 0.5rem;
|
||||
box-shadow: 0 3px 6px 2px rgba(0, 0, 0, 0.3);
|
||||
opacity: 0;
|
||||
transition: display 0.5s allow-discrete, overlay 0.5s allow-discrete;
|
||||
animation: components-reconnect-modal-fadeOutOpacity 0.5s both;
|
||||
&[open]
|
||||
|
||||
{
|
||||
animation: components-reconnect-modal-slideUp 1.5s cubic-bezier(.05, .89, .25, 1.02) 0.3s, components-reconnect-modal-fadeInOpacity 0.5s ease-in-out 0.3s;
|
||||
animation-fill-mode: both;
|
||||
}
|
||||
|
||||
}
|
||||
|
||||
#components-reconnect-modal::backdrop {
|
||||
background-color: rgba(0, 0, 0, 0.4);
|
||||
animation: components-reconnect-modal-fadeInOpacity 0.5s ease-in-out;
|
||||
opacity: 1;
|
||||
}
|
||||
|
||||
@keyframes components-reconnect-modal-slideUp {
|
||||
0% {
|
||||
transform: translateY(30px) scale(0.95);
|
||||
}
|
||||
|
||||
100% {
|
||||
transform: translateY(0);
|
||||
}
|
||||
}
|
||||
|
||||
@keyframes components-reconnect-modal-fadeInOpacity {
|
||||
0% {
|
||||
opacity: 0;
|
||||
}
|
||||
|
||||
100% {
|
||||
opacity: 1;
|
||||
}
|
||||
}
|
||||
|
||||
@keyframes components-reconnect-modal-fadeOutOpacity {
|
||||
0% {
|
||||
opacity: 1;
|
||||
}
|
||||
|
||||
100% {
|
||||
opacity: 0;
|
||||
}
|
||||
}
|
||||
|
||||
.components-reconnect-container {
|
||||
display: flex;
|
||||
flex-direction: column;
|
||||
align-items: center;
|
||||
gap: 1rem;
|
||||
}
|
||||
|
||||
#components-reconnect-modal p {
|
||||
margin: 0;
|
||||
text-align: center;
|
||||
}
|
||||
|
||||
#components-reconnect-modal button {
|
||||
border: 0;
|
||||
background-color: #6b9ed2;
|
||||
color: white;
|
||||
padding: 4px 24px;
|
||||
border-radius: 4px;
|
||||
}
|
||||
|
||||
#components-reconnect-modal button:hover {
|
||||
background-color: #3b6ea2;
|
||||
}
|
||||
|
||||
#components-reconnect-modal button:active {
|
||||
background-color: #6b9ed2;
|
||||
}
|
||||
|
||||
.components-rejoining-animation {
|
||||
position: relative;
|
||||
width: 80px;
|
||||
height: 80px;
|
||||
}
|
||||
|
||||
.components-rejoining-animation div {
|
||||
position: absolute;
|
||||
border: 3px solid #0087ff;
|
||||
opacity: 1;
|
||||
border-radius: 50%;
|
||||
animation: components-rejoining-animation 1.5s cubic-bezier(0, 0.2, 0.8, 1) infinite;
|
||||
}
|
||||
|
||||
.components-rejoining-animation div:nth-child(2) {
|
||||
animation-delay: -0.5s;
|
||||
}
|
||||
|
||||
@keyframes components-rejoining-animation {
|
||||
0% {
|
||||
top: 40px;
|
||||
left: 40px;
|
||||
width: 0;
|
||||
height: 0;
|
||||
opacity: 0;
|
||||
}
|
||||
|
||||
4.9% {
|
||||
top: 40px;
|
||||
left: 40px;
|
||||
width: 0;
|
||||
height: 0;
|
||||
opacity: 0;
|
||||
}
|
||||
|
||||
5% {
|
||||
top: 40px;
|
||||
left: 40px;
|
||||
width: 0;
|
||||
height: 0;
|
||||
opacity: 1;
|
||||
}
|
||||
|
||||
100% {
|
||||
top: 0px;
|
||||
left: 0px;
|
||||
width: 80px;
|
||||
height: 80px;
|
||||
opacity: 0;
|
||||
}
|
||||
}
|
||||
@@ -1,63 +0,0 @@
|
||||
// Set up event handlers
|
||||
const reconnectModal = document.getElementById("components-reconnect-modal");
|
||||
reconnectModal.addEventListener("components-reconnect-state-changed", handleReconnectStateChanged);
|
||||
|
||||
const retryButton = document.getElementById("components-reconnect-button");
|
||||
retryButton.addEventListener("click", retry);
|
||||
|
||||
const resumeButton = document.getElementById("components-resume-button");
|
||||
resumeButton.addEventListener("click", resume);
|
||||
|
||||
function handleReconnectStateChanged(event) {
|
||||
if (event.detail.state === "show") {
|
||||
reconnectModal.showModal();
|
||||
} else if (event.detail.state === "hide") {
|
||||
reconnectModal.close();
|
||||
} else if (event.detail.state === "failed") {
|
||||
document.addEventListener("visibilitychange", retryWhenDocumentBecomesVisible);
|
||||
} else if (event.detail.state === "rejected") {
|
||||
location.reload();
|
||||
}
|
||||
}
|
||||
|
||||
async function retry() {
|
||||
document.removeEventListener("visibilitychange", retryWhenDocumentBecomesVisible);
|
||||
|
||||
try {
|
||||
// Reconnect will asynchronously return:
|
||||
// - true to mean success
|
||||
// - false to mean we reached the server, but it rejected the connection (e.g., unknown circuit ID)
|
||||
// - exception to mean we didn't reach the server (this can be sync or async)
|
||||
const successful = await Blazor.reconnect();
|
||||
if (!successful) {
|
||||
// We have been able to reach the server, but the circuit is no longer available.
|
||||
// We'll reload the page so the user can continue using the app as quickly as possible.
|
||||
const resumeSuccessful = await Blazor.resumeCircuit();
|
||||
if (!resumeSuccessful) {
|
||||
location.reload();
|
||||
} else {
|
||||
reconnectModal.close();
|
||||
}
|
||||
}
|
||||
} catch (err) {
|
||||
// We got an exception, server is currently unavailable
|
||||
document.addEventListener("visibilitychange", retryWhenDocumentBecomesVisible);
|
||||
}
|
||||
}
|
||||
|
||||
async function resume() {
|
||||
try {
|
||||
const successful = await Blazor.resumeCircuit();
|
||||
if (!successful) {
|
||||
location.reload();
|
||||
}
|
||||
} catch {
|
||||
location.reload();
|
||||
}
|
||||
}
|
||||
|
||||
async function retryWhenDocumentBecomesVisible() {
|
||||
if (document.visibilityState === "visible") {
|
||||
await retry();
|
||||
}
|
||||
}
|
||||
@@ -1,36 +0,0 @@
|
||||
@page "/Error"
|
||||
@using System.Diagnostics
|
||||
|
||||
<PageTitle>Error</PageTitle>
|
||||
|
||||
<h1 class="text-danger">Error.</h1>
|
||||
<h2 class="text-danger">An error occurred while processing your request.</h2>
|
||||
|
||||
@if (ShowRequestId)
|
||||
{
|
||||
<p>
|
||||
<strong>Request ID:</strong> <code>@RequestId</code>
|
||||
</p>
|
||||
}
|
||||
|
||||
<h3>Development Mode</h3>
|
||||
<p>
|
||||
Swapping to <strong>Development</strong> environment will display more detailed information about the error that occurred.
|
||||
</p>
|
||||
<p>
|
||||
<strong>The Development environment shouldn't be enabled for deployed applications.</strong>
|
||||
It can result in displaying sensitive information from exceptions to end users.
|
||||
For local debugging, enable the <strong>Development</strong> environment by setting the <strong>ASPNETCORE_ENVIRONMENT</strong> environment variable to <strong>Development</strong>
|
||||
and restarting the app.
|
||||
</p>
|
||||
|
||||
@code{
|
||||
[CascadingParameter]
|
||||
private HttpContext? HttpContext { get; set; }
|
||||
|
||||
private string? RequestId { get; set; }
|
||||
private bool ShowRequestId => !string.IsNullOrEmpty(RequestId);
|
||||
|
||||
protected override void OnInitialized() =>
|
||||
RequestId = Activity.Current?.Id ?? HttpContext?.TraceIdentifier;
|
||||
}
|
||||
@@ -1,15 +0,0 @@
|
||||
@using System.Net.Http
|
||||
@using System.Net.Http.Json
|
||||
@using Microsoft.AspNetCore.Components.Forms
|
||||
@using Microsoft.AspNetCore.Components.Routing
|
||||
@using Microsoft.AspNetCore.Components.Web
|
||||
@using static Microsoft.AspNetCore.Components.Web.RenderMode
|
||||
@using Microsoft.AspNetCore.Components.Web.Virtualization
|
||||
@using Microsoft.JSInterop
|
||||
@using MudBlazor
|
||||
@using QuantEngine.Web
|
||||
@using QuantEngine.Web.Components
|
||||
@using QuantEngine.Web.Components.Layout
|
||||
@using Microsoft.AspNetCore.Components.Authorization
|
||||
@using Microsoft.AspNetCore.Authorization
|
||||
@using QuantEngine.Web.Infrastructure
|
||||
@@ -0,0 +1,3 @@
|
||||
namespace QuantEngine.Web.Models;
|
||||
|
||||
public sealed record PaginationModel(int Page, int TotalPages, Func<int, string> BuildPageUrl);
|
||||
@@ -0,0 +1,15 @@
|
||||
@page
|
||||
@{
|
||||
ViewData["Title"] = "접근 거부";
|
||||
}
|
||||
|
||||
<div class="container mt-5">
|
||||
<div class="row justify-content-center">
|
||||
<div class="col-md-6 text-center">
|
||||
<h1 class="display-1">403</h1>
|
||||
<h2>접근이 거부되었습니다</h2>
|
||||
<p class="text-muted">이 페이지에 접근할 권한이 없습니다.</p>
|
||||
<a href="/Account/Login" class="btn btn-primary">로그인 페이지로 이동</a>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
@@ -1,169 +1,101 @@
|
||||
using System.Security.Cryptography;
|
||||
using System.Text;
|
||||
using Microsoft.AspNetCore.Authentication;
|
||||
using Microsoft.AspNetCore.Authorization;
|
||||
using Microsoft.AspNetCore.Mvc;
|
||||
using Microsoft.AspNetCore.Mvc.RazorPages;
|
||||
using QuantEngine.Core.Interfaces;
|
||||
using QuantEngine.Core.Models;
|
||||
using System.Security.Claims;
|
||||
using QuantEngine.Web.Services;
|
||||
|
||||
namespace QuantEngine.Web.Pages.Account
|
||||
namespace QuantEngine.Web.Pages.Account;
|
||||
|
||||
[AllowAnonymous]
|
||||
public class LoginModel : PageModel
|
||||
{
|
||||
[AllowAnonymous]
|
||||
public class LoginModel : PageModel
|
||||
private readonly AuthService _authService;
|
||||
private readonly IIpLockoutService _lockoutService;
|
||||
private readonly ILogger<LoginModel> _logger;
|
||||
|
||||
public string? Username { get; set; }
|
||||
public bool RememberUsername { get; set; }
|
||||
public string? ErrorMessage { get; set; }
|
||||
|
||||
public LoginModel(AuthService authService, IIpLockoutService lockoutService, ILogger<LoginModel> logger)
|
||||
{
|
||||
private readonly IWorkspaceRepository _workspaceRepo;
|
||||
private readonly ILogger<LoginModel> _logger;
|
||||
_authService = authService;
|
||||
_lockoutService = lockoutService;
|
||||
_logger = logger;
|
||||
}
|
||||
|
||||
public string? Username { get; set; }
|
||||
public bool RememberUsername { get; set; }
|
||||
public string? ErrorMessage { get; set; }
|
||||
|
||||
public LoginModel(IWorkspaceRepository workspaceRepo, ILogger<LoginModel> logger)
|
||||
public void OnGet()
|
||||
{
|
||||
if (Request.Cookies.TryGetValue("quant_admin_username", out var savedUsername))
|
||||
{
|
||||
_workspaceRepo = workspaceRepo;
|
||||
_logger = logger;
|
||||
}
|
||||
|
||||
public void OnGet()
|
||||
{
|
||||
if (Request.Cookies.TryGetValue("quant_admin_username", out var savedUsername))
|
||||
{
|
||||
Username = savedUsername;
|
||||
RememberUsername = true;
|
||||
}
|
||||
}
|
||||
|
||||
public async Task<IActionResult> OnPostAsync(string username, string password, bool rememberUsername)
|
||||
{
|
||||
if (string.IsNullOrWhiteSpace(username) || string.IsNullOrWhiteSpace(password))
|
||||
{
|
||||
ErrorMessage = "아이디와 비밀번호를 모두 입력해 주세요.";
|
||||
Username = username;
|
||||
RememberUsername = rememberUsername;
|
||||
return Page();
|
||||
}
|
||||
|
||||
try
|
||||
{
|
||||
// Direct repository call — no internal HTTP round-trip.
|
||||
// Using IWorkspaceRepository injected via DI avoids any port/proxy dependency.
|
||||
WorkspaceAccount? account = null;
|
||||
try
|
||||
{
|
||||
account = await _workspaceRepo.GetAccountByUsernameAsync(username.Trim());
|
||||
}
|
||||
catch (Exception dbEx)
|
||||
{
|
||||
_logger.LogError(dbEx, "[Login] Database lookup failed for user '{Username}'", username);
|
||||
|
||||
if (string.Equals(username, "admin", StringComparison.OrdinalIgnoreCase) && string.Equals(password, "admin"))
|
||||
{
|
||||
var devToken = Guid.NewGuid().ToString("N");
|
||||
var devExpiresAt = DateTimeOffset.UtcNow.AddDays(7);
|
||||
Response.Cookies.Append(
|
||||
"quant_auth_token",
|
||||
devToken,
|
||||
new Microsoft.AspNetCore.Http.CookieOptions
|
||||
{
|
||||
HttpOnly = true,
|
||||
Secure = false,
|
||||
SameSite = Microsoft.AspNetCore.Http.SameSiteMode.Lax,
|
||||
Expires = devExpiresAt,
|
||||
Path = "/"
|
||||
}
|
||||
);
|
||||
_logger.LogInformation("[Login] Dev Database fallback authentication successful for admin");
|
||||
return Redirect("/");
|
||||
}
|
||||
|
||||
ErrorMessage = "데이터베이스 연결 오류가 발생했습니다. 잠시 후 다시 시도해 주세요.";
|
||||
Username = username;
|
||||
RememberUsername = rememberUsername;
|
||||
return Page();
|
||||
}
|
||||
|
||||
if (account is null || !string.Equals(account.IsActive, "true", StringComparison.OrdinalIgnoreCase))
|
||||
{
|
||||
ErrorMessage = "로그인 실패: 아이디 또는 비밀번호가 올바르지 않습니다.";
|
||||
Username = username;
|
||||
RememberUsername = rememberUsername;
|
||||
return Page();
|
||||
}
|
||||
|
||||
var passwordHash = Convert.ToHexString(SHA256.HashData(Encoding.UTF8.GetBytes(password)));
|
||||
if (!string.Equals(account.PasswordHash, passwordHash, StringComparison.OrdinalIgnoreCase))
|
||||
{
|
||||
ErrorMessage = "로그인 실패: 아이디 또는 비밀번호가 올바르지 않습니다.";
|
||||
Username = username;
|
||||
RememberUsername = rememberUsername;
|
||||
return Page();
|
||||
}
|
||||
|
||||
// Issue session token
|
||||
var rawToken = Guid.NewGuid().ToString("N");
|
||||
var tokenHash = Convert.ToHexString(SHA256.HashData(Encoding.UTF8.GetBytes(rawToken)));
|
||||
var now = DateTimeOffset.UtcNow;
|
||||
var expiresAt = now.AddDays(7);
|
||||
|
||||
await _workspaceRepo.UpsertSessionAsync(new WorkspaceSession
|
||||
{
|
||||
SessionTokenHash = tokenHash,
|
||||
Username = account.Username,
|
||||
Role = account.Role,
|
||||
CreatedAt = now.ToString("O"),
|
||||
ExpiresAt = expiresAt.ToString("O"),
|
||||
RevokedAt = null
|
||||
});
|
||||
|
||||
// Set HTTP-only auth cookie (Secure=true since production is always HTTPS via Cloudflare)
|
||||
Response.Cookies.Append(
|
||||
"quant_auth_token",
|
||||
rawToken,
|
||||
new Microsoft.AspNetCore.Http.CookieOptions
|
||||
{
|
||||
HttpOnly = true,
|
||||
Secure = true,
|
||||
SameSite = Microsoft.AspNetCore.Http.SameSiteMode.Lax,
|
||||
Expires = expiresAt,
|
||||
Path = "/"
|
||||
}
|
||||
);
|
||||
|
||||
if (rememberUsername)
|
||||
{
|
||||
Response.Cookies.Append(
|
||||
"quant_admin_username",
|
||||
username,
|
||||
new Microsoft.AspNetCore.Http.CookieOptions
|
||||
{
|
||||
Expires = DateTimeOffset.UtcNow.AddDays(30),
|
||||
HttpOnly = false,
|
||||
SameSite = Microsoft.AspNetCore.Http.SameSiteMode.Strict
|
||||
}
|
||||
);
|
||||
}
|
||||
else
|
||||
{
|
||||
Response.Cookies.Delete("quant_admin_username");
|
||||
}
|
||||
|
||||
_logger.LogInformation("[Login] User '{Username}' authenticated successfully", account.Username);
|
||||
return Redirect("/");
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
_logger.LogError(ex, "로그인 중 오류 발생");
|
||||
ErrorMessage = $"오류 발생: {ex.Message}";
|
||||
Username = username;
|
||||
RememberUsername = rememberUsername;
|
||||
return Page();
|
||||
}
|
||||
}
|
||||
|
||||
public IActionResult OnGetLogout()
|
||||
{
|
||||
Response.Cookies.Delete("quant_auth_token");
|
||||
return Redirect("/Account/Login");
|
||||
Username = savedUsername;
|
||||
RememberUsername = true;
|
||||
}
|
||||
}
|
||||
|
||||
public async Task<IActionResult> OnPostAsync(string username, string password, bool rememberUsername)
|
||||
{
|
||||
if (string.IsNullOrWhiteSpace(username) || string.IsNullOrWhiteSpace(password))
|
||||
{
|
||||
ErrorMessage = "아이디와 비밀번호를 모두 입력해 주세요.";
|
||||
Username = username;
|
||||
RememberUsername = rememberUsername;
|
||||
return Page();
|
||||
}
|
||||
|
||||
var ipAddress = HttpContext.Connection.RemoteIpAddress?.ToString() ?? "unknown";
|
||||
|
||||
var account = await _authService.AuthenticateAsync(username, password, ipAddress);
|
||||
if (account is null)
|
||||
{
|
||||
if (_lockoutService.IsLockedOut(ipAddress))
|
||||
ErrorMessage = "로그인 시도 횟수를 초과했습니다. 15분 후에 다시 시도해 주세요.";
|
||||
else
|
||||
ErrorMessage = "아이디 또는 비밀번호가 올바르지 않습니다.";
|
||||
|
||||
Username = username;
|
||||
RememberUsername = rememberUsername;
|
||||
return Page();
|
||||
}
|
||||
|
||||
var claims = new List<Claim>
|
||||
{
|
||||
new(ClaimTypes.NameIdentifier, account.Username),
|
||||
new(ClaimTypes.Name, account.Username),
|
||||
new(ClaimTypes.Role, account.Role ?? "Admin")
|
||||
};
|
||||
|
||||
var identity = new ClaimsIdentity(claims, AdminAuthDefaults.Scheme);
|
||||
var principal = new ClaimsPrincipal(identity);
|
||||
|
||||
var properties = new Microsoft.AspNetCore.Authentication.AuthenticationProperties
|
||||
{
|
||||
IsPersistent = true,
|
||||
ExpiresUtc = DateTimeOffset.UtcNow.AddHours(12)
|
||||
};
|
||||
|
||||
await HttpContext.SignInAsync(AdminAuthDefaults.Scheme, principal, properties);
|
||||
|
||||
if (rememberUsername)
|
||||
{
|
||||
Response.Cookies.Append(
|
||||
"quant_admin_username",
|
||||
username,
|
||||
new Microsoft.AspNetCore.Http.CookieOptions
|
||||
{
|
||||
Expires = DateTimeOffset.UtcNow.AddDays(30),
|
||||
HttpOnly = false,
|
||||
SameSite = Microsoft.AspNetCore.Http.SameSiteMode.Strict
|
||||
}
|
||||
);
|
||||
}
|
||||
else
|
||||
{
|
||||
Response.Cookies.Delete("quant_admin_username");
|
||||
}
|
||||
|
||||
_logger.LogInformation("[Login] User '{Username}' authenticated successfully from {IpAddress}", account.Username, ipAddress);
|
||||
return LocalRedirect("/Admin/Dashboard");
|
||||
}
|
||||
}
|
||||
|
||||
@@ -0,0 +1,14 @@
|
||||
@page
|
||||
@model QuantEngine.Web.Pages.Account.LogoutModel
|
||||
@{
|
||||
ViewData["Title"] = "로그아웃";
|
||||
}
|
||||
|
||||
<div class="container mt-5">
|
||||
<div class="row justify-content-center">
|
||||
<div class="col-md-6">
|
||||
<h1>로그아웃</h1>
|
||||
<p>로그아웃 중...</p>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
@@ -0,0 +1,17 @@
|
||||
using Microsoft.AspNetCore.Authentication;
|
||||
using Microsoft.AspNetCore.Authorization;
|
||||
using Microsoft.AspNetCore.Mvc;
|
||||
using Microsoft.AspNetCore.Mvc.RazorPages;
|
||||
using QuantEngine.Web.Services;
|
||||
|
||||
namespace QuantEngine.Web.Pages.Account;
|
||||
|
||||
[Authorize(AuthenticationSchemes = AdminAuthDefaults.Scheme)]
|
||||
public class LogoutModel : PageModel
|
||||
{
|
||||
public async Task<IActionResult> OnGetAsync()
|
||||
{
|
||||
await HttpContext.SignOutAsync(AdminAuthDefaults.Scheme);
|
||||
return RedirectToPage("/Account/Login");
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,89 @@
|
||||
@page
|
||||
@model QuantEngine.Web.Pages.Admin.Collection.IndexModel
|
||||
@{
|
||||
ViewData["Title"] = "데이터 수집";
|
||||
}
|
||||
|
||||
<div class="page-header d-print-none">
|
||||
<div class="row align-items-center">
|
||||
<div class="col">
|
||||
<h2 class="page-title">데이터 수집</h2>
|
||||
</div>
|
||||
<div class="col-auto">
|
||||
<a href="/Admin/Collection/Start" class="btn btn-primary">수집 시작</a>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<div class="page-body">
|
||||
@if (!string.IsNullOrEmpty(Model.Message))
|
||||
{
|
||||
<div class="alert alert-info alert-dismissible fade show" role="alert">
|
||||
@Model.Message
|
||||
<button type="button" class="btn-close" data-bs-dismiss="alert" aria-label="Close"></button>
|
||||
</div>
|
||||
}
|
||||
|
||||
<div class="row row-deck row-cards">
|
||||
<div class="col-12">
|
||||
<div class="card">
|
||||
<div class="card-header">
|
||||
<h3 class="card-title">수집 현황</h3>
|
||||
</div>
|
||||
<div class="table-responsive">
|
||||
<table class="table card-table table-vcenter">
|
||||
<thead>
|
||||
<tr>
|
||||
<th>실행 ID</th>
|
||||
<th>시작 시간</th>
|
||||
<th>종료 시간</th>
|
||||
<th>상태</th>
|
||||
<th>스냅샷 수</th>
|
||||
<th>오류 수</th>
|
||||
</tr>
|
||||
</thead>
|
||||
<tbody>
|
||||
@if (Model.Runs?.Any() == true)
|
||||
{
|
||||
@foreach (var run in Model.Runs)
|
||||
{
|
||||
<tr>
|
||||
<td>@run.RunId</td>
|
||||
<td>@run.StartedAt</td>
|
||||
<td>@(run.FinishedAt ?? "-")</td>
|
||||
<td>
|
||||
@if (string.Equals(run.Status, "completed", StringComparison.OrdinalIgnoreCase))
|
||||
{
|
||||
<span class="badge bg-success">완료</span>
|
||||
}
|
||||
else if (string.Equals(run.Status, "running", StringComparison.OrdinalIgnoreCase))
|
||||
{
|
||||
<span class="badge bg-warning">진행 중</span>
|
||||
}
|
||||
else if (string.Equals(run.Status, "failed", StringComparison.OrdinalIgnoreCase))
|
||||
{
|
||||
<span class="badge bg-danger">실패</span>
|
||||
}
|
||||
else
|
||||
{
|
||||
<span class="badge bg-secondary">@run.Status</span>
|
||||
}
|
||||
</td>
|
||||
<td>@(run.TotalSnapshots?.ToString() ?? "-")</td>
|
||||
<td>@(run.TotalErrors?.ToString() ?? "-")</td>
|
||||
</tr>
|
||||
}
|
||||
}
|
||||
else
|
||||
{
|
||||
<tr>
|
||||
<td colspan="5" class="text-center text-muted">데이터가 없습니다</td>
|
||||
</tr>
|
||||
}
|
||||
</tbody>
|
||||
</table>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
@@ -0,0 +1,35 @@
|
||||
using Microsoft.AspNetCore.Authorization;
|
||||
using Microsoft.AspNetCore.Mvc.RazorPages;
|
||||
using QuantEngine.Core.Interfaces;
|
||||
using QuantEngine.Web.Services;
|
||||
|
||||
namespace QuantEngine.Web.Pages.Admin.Collection;
|
||||
|
||||
[Authorize(AuthenticationSchemes = AdminAuthDefaults.Scheme)]
|
||||
public class IndexModel : PageModel
|
||||
{
|
||||
private readonly ICollectionRepository _collectionRepository;
|
||||
private readonly ILogger<IndexModel> _logger;
|
||||
|
||||
public List<CollectionRunRecord>? Runs { get; set; }
|
||||
public string? Message { get; set; }
|
||||
|
||||
public IndexModel(ICollectionRepository collectionRepository, ILogger<IndexModel> logger)
|
||||
{
|
||||
_collectionRepository = collectionRepository;
|
||||
_logger = logger;
|
||||
}
|
||||
|
||||
public async Task OnGetAsync()
|
||||
{
|
||||
try
|
||||
{
|
||||
Runs = await _collectionRepository.GetRecentRunsAsync(limit: 20);
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
_logger.LogError(ex, "Collection runs loading failed");
|
||||
Message = "데이터 수집 현황을 불러올 수 없습니다.";
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,66 @@
|
||||
@page
|
||||
@model QuantEngine.Web.Pages.Admin.Dashboard.IndexModel
|
||||
@{
|
||||
ViewData["Title"] = "대시보드";
|
||||
}
|
||||
|
||||
<div class="page-header d-print-none">
|
||||
<div class="row align-items-center">
|
||||
<div class="col">
|
||||
<h2 class="page-title">대시보드</h2>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<div class="page-body">
|
||||
<div class="row row-deck row-cards">
|
||||
<div class="col-md-6">
|
||||
<div class="card">
|
||||
<div class="card-body">
|
||||
<div class="text-truncate">
|
||||
<h3 class="card-title">활성 사용자</h3>
|
||||
<div class="h2 mt-3">@(Model.ActiveUsersCount ?? 0)</div>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
<div class="col-md-6">
|
||||
<div class="card">
|
||||
<div class="card-body">
|
||||
<div class="text-truncate">
|
||||
<h3 class="card-title">최근 수집 실행</h3>
|
||||
<div class="h2 mt-3">@(Model.RecentRunsCount ?? 0)</div>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<div class="row row-deck row-cards mt-4">
|
||||
<div class="col-12">
|
||||
<div class="card">
|
||||
<div class="card-header">
|
||||
<h3 class="card-title">최근 시스템 이벤트</h3>
|
||||
</div>
|
||||
<div class="table-responsive">
|
||||
<table class="table card-table table-vcenter">
|
||||
<thead>
|
||||
<tr>
|
||||
<th>시간</th>
|
||||
<th>이벤트</th>
|
||||
<th>상태</th>
|
||||
</tr>
|
||||
</thead>
|
||||
<tbody>
|
||||
<tr>
|
||||
<td>@DateTime.UtcNow.ToString("yyyy-MM-dd HH:mm")</td>
|
||||
<td>시스템 초기화</td>
|
||||
<td><span class="badge bg-success">완료</span></td>
|
||||
</tr>
|
||||
</tbody>
|
||||
</table>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
@@ -0,0 +1,40 @@
|
||||
using Microsoft.AspNetCore.Authorization;
|
||||
using Microsoft.AspNetCore.Mvc.RazorPages;
|
||||
using QuantEngine.Core.Interfaces;
|
||||
using QuantEngine.Web.Services;
|
||||
|
||||
namespace QuantEngine.Web.Pages.Admin.Dashboard;
|
||||
|
||||
[Authorize(AuthenticationSchemes = AdminAuthDefaults.Scheme)]
|
||||
public class IndexModel : PageModel
|
||||
{
|
||||
private readonly IWorkspaceRepository _workspaceRepository;
|
||||
private readonly ICollectionRepository _collectionRepository;
|
||||
private readonly ILogger<IndexModel> _logger;
|
||||
|
||||
public int? ActiveUsersCount { get; set; }
|
||||
public int? RecentRunsCount { get; set; }
|
||||
|
||||
public IndexModel(IWorkspaceRepository workspaceRepository, ICollectionRepository collectionRepository, ILogger<IndexModel> logger)
|
||||
{
|
||||
_workspaceRepository = workspaceRepository;
|
||||
_collectionRepository = collectionRepository;
|
||||
_logger = logger;
|
||||
}
|
||||
|
||||
public async Task OnGetAsync()
|
||||
{
|
||||
try
|
||||
{
|
||||
var accounts = await _workspaceRepository.GetAccountsAsync();
|
||||
ActiveUsersCount = accounts.Count(a => string.Equals(a.IsActive, "true", StringComparison.OrdinalIgnoreCase));
|
||||
|
||||
var dashboard = await _collectionRepository.GetDashboardStateAsync();
|
||||
RecentRunsCount = string.IsNullOrEmpty(dashboard?.LastRunId) ? 0 : 1;
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
_logger.LogError(ex, "Dashboard data loading failed");
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,73 @@
|
||||
@page
|
||||
@model QuantEngine.Web.Pages.Admin.Users.IndexModel
|
||||
@{
|
||||
ViewData["Title"] = "사용자 관리";
|
||||
}
|
||||
|
||||
<div class="page-header d-print-none">
|
||||
<div class="row align-items-center">
|
||||
<div class="col">
|
||||
<h2 class="page-title">사용자 관리</h2>
|
||||
</div>
|
||||
<div class="col-auto">
|
||||
<a href="/Admin/Users/Create" class="btn btn-primary">새 사용자 추가</a>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<div class="page-body">
|
||||
<div class="row row-deck row-cards">
|
||||
<div class="col-12">
|
||||
<div class="card">
|
||||
<div class="card-header">
|
||||
<h3 class="card-title">사용자 목록</h3>
|
||||
</div>
|
||||
<div class="table-responsive">
|
||||
<table class="table card-table table-vcenter">
|
||||
<thead>
|
||||
<tr>
|
||||
<th>사용자명</th>
|
||||
<th>역할</th>
|
||||
<th>상태</th>
|
||||
<th>생성일</th>
|
||||
<th>작업</th>
|
||||
</tr>
|
||||
</thead>
|
||||
<tbody>
|
||||
@if (Model.Users?.Any() == true)
|
||||
{
|
||||
@foreach (var user in Model.Users)
|
||||
{
|
||||
<tr>
|
||||
<td>@user.Username</td>
|
||||
<td>@(user.Role ?? "Admin")</td>
|
||||
<td>
|
||||
@if (string.Equals(user.IsActive, "true", StringComparison.OrdinalIgnoreCase))
|
||||
{
|
||||
<span class="badge bg-success">활성</span>
|
||||
}
|
||||
else
|
||||
{
|
||||
<span class="badge bg-secondary">비활성</span>
|
||||
}
|
||||
</td>
|
||||
<td>@(user.CreatedAt ?? "-")</td>
|
||||
<td>
|
||||
<a href="/Admin/Users/@user.Username/Edit" class="btn btn-sm btn-link">수정</a>
|
||||
</td>
|
||||
</tr>
|
||||
}
|
||||
}
|
||||
else
|
||||
{
|
||||
<tr>
|
||||
<td colspan="5" class="text-center text-muted">사용자가 없습니다</td>
|
||||
</tr>
|
||||
}
|
||||
</tbody>
|
||||
</table>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
@@ -0,0 +1,35 @@
|
||||
using Microsoft.AspNetCore.Authorization;
|
||||
using Microsoft.AspNetCore.Mvc.RazorPages;
|
||||
using QuantEngine.Core.Interfaces;
|
||||
using QuantEngine.Core.Models;
|
||||
using QuantEngine.Web.Services;
|
||||
|
||||
namespace QuantEngine.Web.Pages.Admin.Users;
|
||||
|
||||
[Authorize(AuthenticationSchemes = AdminAuthDefaults.Scheme)]
|
||||
public class IndexModel : PageModel
|
||||
{
|
||||
private readonly IWorkspaceRepository _workspaceRepository;
|
||||
private readonly ILogger<IndexModel> _logger;
|
||||
|
||||
public List<WorkspaceAccount>? Users { get; set; }
|
||||
|
||||
public IndexModel(IWorkspaceRepository workspaceRepository, ILogger<IndexModel> logger)
|
||||
{
|
||||
_workspaceRepository = workspaceRepository;
|
||||
_logger = logger;
|
||||
}
|
||||
|
||||
public async Task OnGetAsync()
|
||||
{
|
||||
try
|
||||
{
|
||||
var accounts = await _workspaceRepository.GetAccountsAsync();
|
||||
Users = accounts.ToList();
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
_logger.LogError(ex, "Users loading failed");
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,83 @@
|
||||
@{
|
||||
Layout = null;
|
||||
}
|
||||
|
||||
<!DOCTYPE html>
|
||||
<html lang="ko">
|
||||
<head>
|
||||
<meta charset="utf-8" />
|
||||
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
|
||||
<title>@ViewData["Title"] - QuantEngine 관리자</title>
|
||||
<link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/css/bootstrap.min.css" rel="stylesheet" />
|
||||
<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bootstrap-icons@1.11.3/font/bootstrap-icons.min.css" />
|
||||
<link rel="stylesheet" href="~/css/admin.css" asp-append-version="true" />
|
||||
</head>
|
||||
<body>
|
||||
<div class="page">
|
||||
<!-- Topbar -->
|
||||
<header class="navbar navbar-expand-md navbar-light d-print-none sticky-top">
|
||||
<div class="container-xl">
|
||||
<button class="navbar-toggler" type="button" data-bs-toggle="collapse" data-bs-target="#navbar-menu">
|
||||
<span class="navbar-toggler-icon"></span>
|
||||
</button>
|
||||
<h1 class="navbar-brand navbar-brand-autodark d-none-navbar-horizontal pe-0 pe-md-3">
|
||||
<a href="/Admin/Dashboard">
|
||||
<span style="font-size: 24px; font-weight: bold; color: #3f51b5;">Q</span>
|
||||
</a>
|
||||
</h1>
|
||||
<div class="navbar-nav flex-row order-md-last">
|
||||
<div class="nav-item d-none d-md-flex me-3">
|
||||
<a href="/Account/Logout" class="btn btn-outline-danger">로그아웃</a>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
</header>
|
||||
|
||||
<!-- Sidebar -->
|
||||
<aside class="navbar navbar-vertical navbar-expand-lg navbar-dark bg-dark">
|
||||
<div class="container-fluid">
|
||||
<button class="navbar-toggler" type="button" data-bs-toggle="collapse" data-bs-target="#navbar-menu">
|
||||
<span class="navbar-toggler-icon"></span>
|
||||
</button>
|
||||
<h2 class="navbar-brand navbar-brand-autodark">
|
||||
<a href="/Admin/Dashboard" class="text-white">
|
||||
QuantEngine
|
||||
</a>
|
||||
</h2>
|
||||
<div class="collapse navbar-collapse" id="navbar-menu">
|
||||
<ul class="navbar-nav pt-lg-3">
|
||||
<li class="nav-item">
|
||||
<a class="nav-link text-white" href="/Admin/Dashboard">
|
||||
<i class="bi bi-diagram-3 me-2"></i>
|
||||
<span>대시보드</span>
|
||||
</a>
|
||||
</li>
|
||||
<li class="nav-item">
|
||||
<a class="nav-link text-white" href="/Admin/Collection">
|
||||
<i class="bi bi-collection me-2"></i>
|
||||
<span>데이터 수집</span>
|
||||
</a>
|
||||
</li>
|
||||
<li class="nav-item">
|
||||
<a class="nav-link text-white" href="/Admin/Users">
|
||||
<i class="bi bi-people me-2"></i>
|
||||
<span>사용자 관리</span>
|
||||
</a>
|
||||
</li>
|
||||
</ul>
|
||||
</div>
|
||||
</div>
|
||||
</aside>
|
||||
|
||||
<!-- Page Content -->
|
||||
<div class="page-wrapper">
|
||||
<div class="container-xl">
|
||||
@RenderBody()
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<!-- Bootstrap JS -->
|
||||
<script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/js/bootstrap.bundle.min.js"></script>
|
||||
</body>
|
||||
</html>
|
||||
@@ -0,0 +1,3 @@
|
||||
@{
|
||||
Layout = "_AdminLayout";
|
||||
}
|
||||
@@ -0,0 +1,9 @@
|
||||
@model string
|
||||
|
||||
<div class="empty">
|
||||
<div class="empty-header">🔍</div>
|
||||
<p class="empty-title">데이터가 없습니다</p>
|
||||
<p class="empty-subtitle">
|
||||
@(string.IsNullOrWhiteSpace(Model) ? "조건에 맞는 데이터가 없습니다." : Model)
|
||||
</p>
|
||||
</div>
|
||||
@@ -0,0 +1,64 @@
|
||||
@using QuantEngine.Web.Models
|
||||
|
||||
@model PaginationModel
|
||||
|
||||
@if (Model.TotalPages > 1)
|
||||
{
|
||||
<nav aria-label="Page navigation">
|
||||
<ul class="pagination">
|
||||
@if (Model.Page > 1)
|
||||
{
|
||||
<li class="page-item">
|
||||
<a class="page-link" href="@Model.BuildPageUrl(1)">첫 페이지</a>
|
||||
</li>
|
||||
<li class="page-item">
|
||||
<a class="page-link" href="@Model.BuildPageUrl(Model.Page - 1)">이전</a>
|
||||
</li>
|
||||
}
|
||||
else
|
||||
{
|
||||
<li class="page-item disabled">
|
||||
<span class="page-link">첫 페이지</span>
|
||||
</li>
|
||||
<li class="page-item disabled">
|
||||
<span class="page-link">이전</span>
|
||||
</li>
|
||||
}
|
||||
|
||||
@for (int i = Math.Max(1, Model.Page - 2); i <= Math.Min(Model.TotalPages, Model.Page + 2); i++)
|
||||
{
|
||||
if (i == Model.Page)
|
||||
{
|
||||
<li class="page-item active">
|
||||
<span class="page-link">@i</span>
|
||||
</li>
|
||||
}
|
||||
else
|
||||
{
|
||||
<li class="page-item">
|
||||
<a class="page-link" href="@Model.BuildPageUrl(i)">@i</a>
|
||||
</li>
|
||||
}
|
||||
}
|
||||
|
||||
@if (Model.Page < Model.TotalPages)
|
||||
{
|
||||
<li class="page-item">
|
||||
<a class="page-link" href="@Model.BuildPageUrl(Model.Page + 1)">다음</a>
|
||||
</li>
|
||||
<li class="page-item">
|
||||
<a class="page-link" href="@Model.BuildPageUrl(Model.TotalPages)">마지막 페이지</a>
|
||||
</li>
|
||||
}
|
||||
else
|
||||
{
|
||||
<li class="page-item disabled">
|
||||
<span class="page-link">다음</span>
|
||||
</li>
|
||||
<li class="page-item disabled">
|
||||
<span class="page-link">마지막 페이지</span>
|
||||
</li>
|
||||
}
|
||||
</ul>
|
||||
</nav>
|
||||
}
|
||||
@@ -0,0 +1,14 @@
|
||||
@model string
|
||||
|
||||
@{
|
||||
var badgeClass = Model?.ToLowerInvariant() switch
|
||||
{
|
||||
"active" or "success" => "badge bg-success",
|
||||
"inactive" or "disabled" => "badge bg-secondary",
|
||||
"pending" or "processing" => "badge bg-warning",
|
||||
"error" or "failed" => "badge bg-danger",
|
||||
_ => "badge bg-info"
|
||||
};
|
||||
}
|
||||
|
||||
<span class="@badgeClass">@Model</span>
|
||||
@@ -0,0 +1,16 @@
|
||||
@if (!ViewData.ModelState.IsValid)
|
||||
{
|
||||
<div class="alert alert-danger alert-dismissible fade show" role="alert">
|
||||
<h4 class="alert-title">검증 오류</h4>
|
||||
<div>
|
||||
@foreach (var modelState in ViewData.ModelState.Values)
|
||||
{
|
||||
foreach (var error in modelState.Errors)
|
||||
{
|
||||
<div>@error.ErrorMessage</div>
|
||||
}
|
||||
}
|
||||
</div>
|
||||
<button type="button" class="btn-close" data-bs-dismiss="alert" aria-label="Close"></button>
|
||||
</div>
|
||||
}
|
||||
@@ -1,563 +1,182 @@
|
||||
using QuantEngine.Web.Components;
|
||||
using QuantEngine.Infrastructure.Data;
|
||||
using Microsoft.AspNetCore.Components.Authorization;
|
||||
using QuantEngine.Web.Infrastructure;
|
||||
using Npgsql;
|
||||
using FastEndpoints;
|
||||
using QuantEngine.Infrastructure.Repositories;
|
||||
using QuantEngine.Infrastructure.Services;
|
||||
using QuantEngine.Core.Interfaces;
|
||||
using QuantEngine.Application.Services;
|
||||
using QuantEngine.Application.Interfaces;
|
||||
using System.Text.Json;
|
||||
using Microsoft.AspNetCore.StaticFiles;
|
||||
using static QuantEngine.Application.Services.DataCollectionService;
|
||||
using Serilog;
|
||||
using QuantEngine.Web.Client.Infrastructure;
|
||||
using QuantEngine.Web.Client.Services;
|
||||
using QuantEngine.Web.Endpoints;
|
||||
using System.Security.Cryptography;
|
||||
using System.Text;
|
||||
using QuantEngine.Core.Models;
|
||||
using Microsoft.AspNetCore.Authentication;
|
||||
using System.Text.Encodings.Web;
|
||||
using Microsoft.Extensions.Options;
|
||||
using MudBlazor.Services;
|
||||
using QuantEngine.Web.Services;
|
||||
using Hangfire;
|
||||
using Npgsql;
|
||||
using FastEndpoints;
|
||||
using FluentValidation;
|
||||
|
||||
// Serilog Configuration with Telegram Sink
|
||||
Log.Logger = new LoggerConfiguration()
|
||||
.MinimumLevel.Information()
|
||||
.WriteTo.Console()
|
||||
.WriteTo.Sink(new TelegramSink("8734507814:AAFyacLMai8GB4K-hQ_Nd3t3D01A-h1ZdV0", "-5460205872"))
|
||||
.WriteTo.File("logs/quantengine-.log", rollingInterval: RollingInterval.Day)
|
||||
.CreateLogger();
|
||||
|
||||
var builder = WebApplication.CreateBuilder(args);
|
||||
builder.Host.UseSerilog();
|
||||
|
||||
// Add services to the container.
|
||||
builder.Services.AddRazorPages();
|
||||
builder.Services.AddRazorComponents()
|
||||
.AddInteractiveWebAssemblyComponents();
|
||||
|
||||
// Authentication and Custom State Provider (Shared client components)
|
||||
builder.Services.AddCascadingAuthenticationState();
|
||||
builder.Services.AddAuthentication("QuantAdminScheme")
|
||||
.AddScheme<AuthenticationSchemeOptions, QuantAdminAuthHandler>("QuantAdminScheme", _ => { });
|
||||
builder.Services.AddAuthorization();
|
||||
builder.Services.AddScoped<LocalStorageService>();
|
||||
builder.Services.AddScoped<AuthenticationStateProvider, CustomAuthenticationStateProvider>();
|
||||
builder.Services.AddAuthorizationCore();
|
||||
|
||||
builder.Services.AddMudServices();
|
||||
|
||||
// PostgreSQL Dapper Setup
|
||||
var configuredConnectionString = builder.Configuration.GetConnectionString("DefaultConnection");
|
||||
var fallbackConnectionString = "Host=127.0.0.1;Database=quantenginedb;Username=quantengine_app;Password=CHANGE_ME;Search Path=quantengine;";
|
||||
var connectionString = string.IsNullOrWhiteSpace(configuredConnectionString) || configuredConnectionString.Contains("Password=;", StringComparison.OrdinalIgnoreCase)
|
||||
? fallbackConnectionString
|
||||
: configuredConnectionString;
|
||||
var configuredDatabase = new Npgsql.NpgsqlConnectionStringBuilder(connectionString).Database;
|
||||
if (!string.Equals(configuredDatabase, "quantenginedb", StringComparison.OrdinalIgnoreCase))
|
||||
{
|
||||
throw new InvalidOperationException("QuantEngine must use the quantenginedb PostgreSQL database.");
|
||||
}
|
||||
var dataSource = NpgsqlDataSource.Create(connectionString);
|
||||
builder.Services.AddSingleton(dataSource);
|
||||
builder.Services.AddSingleton<IDbConnectionFactory>(new DbConnectionFactory(dataSource));
|
||||
builder.Services.AddSingleton<DbMigrator>();
|
||||
builder.Services.AddScoped<IWorkspaceRepository, WorkspaceRepository>();
|
||||
builder.Services.AddScoped<IPostgresqlHistoryStore, PostgresqlHistoryStore>();
|
||||
builder.Services.AddScoped<IPostgresqlHistorySnapshotReader, PostgresqlHistorySnapshotReader>();
|
||||
builder.Services.AddScoped<HistoryIngestionService>();
|
||||
|
||||
// Hangfire Background Job Scheduling
|
||||
try
|
||||
{
|
||||
var hangfireConnectionString = builder.Configuration.GetConnectionString("HangfireConnection") ?? connectionString;
|
||||
builder.Services.AddHangfireServices(hangfireConnectionString);
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
Log.Warning("Hangfire initialization failed: {Message}", ex.Message);
|
||||
}
|
||||
var builder = WebApplication.CreateBuilder(args);
|
||||
builder.Host.UseSerilog();
|
||||
|
||||
// Collection Pipeline Services (PostgreSQL-backed implementations)
|
||||
builder.Services.AddScoped<ICollectionRepository, CollectionRepository>();
|
||||
builder.Services.AddScoped<ITokenCache, PostgresTokenCache>();
|
||||
builder.Services.AddScoped<IKisApiClient, KisApiClient>();
|
||||
// Note: DataCollectionService has complex dependencies - will be enabled when DB is ready
|
||||
// builder.Services.AddScoped<PriceDataNormalizer>();
|
||||
// builder.Services.AddScoped<SourcePriorityResolver>();
|
||||
// builder.Services.AddScoped<ICollectionOrchestrator, KisDataCollectionOrchestrator>();
|
||||
// builder.Services.AddScoped<DataCollectionService>();
|
||||
// Authentication & Authorization
|
||||
builder.Services.AddAuthentication(opts =>
|
||||
{
|
||||
opts.DefaultAuthenticateScheme = AdminAuthDefaults.Scheme;
|
||||
opts.DefaultChallengeScheme = AdminAuthDefaults.Scheme;
|
||||
})
|
||||
.AddCookie(AdminAuthDefaults.Scheme, opts =>
|
||||
{
|
||||
opts.Cookie.Name = AdminAuthDefaults.CookieName;
|
||||
opts.Cookie.HttpOnly = true;
|
||||
opts.Cookie.SameSite = SameSiteMode.Lax;
|
||||
opts.Cookie.SecurePolicy = builder.Environment.IsProduction() ? CookieSecurePolicy.Always : CookieSecurePolicy.SameAsRequest;
|
||||
opts.LoginPath = "/Account/Login";
|
||||
opts.AccessDeniedPath = "/Account/AccessDenied";
|
||||
opts.SlidingExpiration = true;
|
||||
opts.ExpireTimeSpan = TimeSpan.FromHours(12);
|
||||
});
|
||||
|
||||
builder.Services.AddHttpClient<ApiClient>(client =>
|
||||
{
|
||||
// Configure default base address for relative HttpClient calls within server assembly calls
|
||||
client.BaseAddress = new Uri("http://localhost:5265/");
|
||||
});
|
||||
builder.Services.AddScoped<ApiClient>();
|
||||
builder.Services.AddScoped(sp => new HttpClient { BaseAddress = new Uri("http://localhost:5265/") });
|
||||
builder.Services.AddFastEndpoints();
|
||||
builder.Services.AddAuthorization();
|
||||
builder.Services.AddAntiforgery();
|
||||
|
||||
var app = builder.Build();
|
||||
app.UseFastEndpoints();
|
||||
// Razor Pages with authorization conventions
|
||||
builder.Services.AddRazorPages(options =>
|
||||
{
|
||||
options.Conventions.AuthorizeFolder("/Admin", AdminAuthDefaults.Scheme);
|
||||
options.Conventions.AllowAnonymousToPage("/Account/Login");
|
||||
options.Conventions.AllowAnonymousToPage("/Account/AccessDenied");
|
||||
});
|
||||
|
||||
var adminSettings = app.Configuration.GetSection("AdminSettings");
|
||||
var adminUsername = adminSettings["Username"] ?? "admin";
|
||||
var adminPassword = adminSettings["Password"] ?? string.Empty;
|
||||
// Authentication Services
|
||||
builder.Services.AddScoped<IIpLockoutService, IpLockoutService>();
|
||||
builder.Services.AddScoped<AuthService>();
|
||||
|
||||
// Initialize database tables (PostgreSQL-backed repositories)
|
||||
using (var scope = app.Services.CreateScope())
|
||||
{
|
||||
var migrator = scope.ServiceProvider.GetRequiredService<DbMigrator>();
|
||||
var tokenCache = scope.ServiceProvider.GetRequiredService<ITokenCache>();
|
||||
var collectionRepo = scope.ServiceProvider.GetRequiredService<ICollectionRepository>();
|
||||
var workspaceRepo = scope.ServiceProvider.GetRequiredService<IWorkspaceRepository>();
|
||||
// PostgreSQL Dapper Setup
|
||||
var connectionString = builder.Configuration.GetConnectionString("DefaultConnection")
|
||||
?? throw new InvalidOperationException("Connection string 'DefaultConnection' is required.");
|
||||
|
||||
var configuredDatabase = new NpgsqlConnectionStringBuilder(connectionString).Database;
|
||||
if (!string.Equals(configuredDatabase, "quantenginedb", StringComparison.OrdinalIgnoreCase))
|
||||
{
|
||||
throw new InvalidOperationException("QuantEngine must use the quantenginedb PostgreSQL database.");
|
||||
}
|
||||
|
||||
var dataSource = NpgsqlDataSource.Create(connectionString);
|
||||
builder.Services.AddSingleton(dataSource);
|
||||
builder.Services.AddSingleton<IDbConnectionFactory>(new DbConnectionFactory(dataSource));
|
||||
builder.Services.AddSingleton<DbMigrator>();
|
||||
|
||||
// Repository Services
|
||||
builder.Services.AddScoped<IWorkspaceRepository, WorkspaceRepository>();
|
||||
builder.Services.AddScoped<IPostgresqlHistoryStore, PostgresqlHistoryStore>();
|
||||
builder.Services.AddScoped<IPostgresqlHistorySnapshotReader, PostgresqlHistorySnapshotReader>();
|
||||
builder.Services.AddScoped<HistoryIngestionService>();
|
||||
builder.Services.AddScoped<ICollectionRepository, CollectionRepository>();
|
||||
builder.Services.AddScoped<ITokenCache, PostgresTokenCache>();
|
||||
builder.Services.AddScoped<IKisApiClient, KisApiClient>();
|
||||
|
||||
// Hangfire Background Jobs
|
||||
try
|
||||
{
|
||||
migrator.Migrate();
|
||||
// Ensure tables exist on startup
|
||||
await tokenCache.GetCachedTokenAsync("_init_test_");
|
||||
await collectionRepo.GetDashboardStateAsync();
|
||||
await workspaceRepo.GetAccountsAsync();
|
||||
Log.Information("Database tables initialized successfully");
|
||||
var hangfireConnectionString = builder.Configuration.GetConnectionString("HangfireConnection") ?? connectionString;
|
||||
builder.Services.AddHangfireServices(hangfireConnectionString);
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
Log.Warning($"Database initialization warning: {ex.Message}");
|
||||
Log.Warning("Hangfire initialization failed: {Message}", ex.Message);
|
||||
}
|
||||
}
|
||||
|
||||
// Configure the HTTP request pipeline.
|
||||
if (!app.Environment.IsDevelopment())
|
||||
{
|
||||
app.UseExceptionHandler("/Error", createScopeForErrors: true);
|
||||
app.UseHsts();
|
||||
}
|
||||
// FluentValidation
|
||||
builder.Services.AddValidatorsFromAssemblyContaining<QuantEngine.Infrastructure.Repositories.WorkspaceRepository>();
|
||||
|
||||
app.UseHttpsRedirection();
|
||||
// FastEndpoints (for API endpoints)
|
||||
builder.Services.AddFastEndpoints();
|
||||
|
||||
// CRITICAL: Static assets MUST be served before StatusCodePages middleware
|
||||
// This ensures app.css, _framework/, and other static files are served correctly
|
||||
app.MapStaticAssets();
|
||||
var app = builder.Build();
|
||||
|
||||
// Configure static file MIME types for Blazor
|
||||
var provider = new FileExtensionContentTypeProvider();
|
||||
provider.Mappings[".wasm"] = "application/wasm";
|
||||
provider.Mappings[".js"] = "application/javascript";
|
||||
provider.Mappings[".mjs"] = "application/javascript";
|
||||
provider.Mappings[".json"] = "application/json";
|
||||
provider.Mappings[".svg"] = "image/svg+xml";
|
||||
provider.Mappings[".woff"] = "font/woff";
|
||||
provider.Mappings[".woff2"] = "font/woff2";
|
||||
app.UseSerilogRequestLogging();
|
||||
app.UseFastEndpoints();
|
||||
|
||||
app.UseStaticFiles(new StaticFileOptions
|
||||
{
|
||||
ContentTypeProvider = provider,
|
||||
ServeUnknownFileTypes = true,
|
||||
DefaultContentType = "application/octet-stream"
|
||||
});
|
||||
|
||||
// Redirect status code pages only for non-API routes (AFTER static files)
|
||||
// Exclude /Account/* (Razor Pages) from 404 redirect
|
||||
app.UseStatusCodePages(async ctx =>
|
||||
{
|
||||
var path = ctx.HttpContext.Request.Path.Value ?? "";
|
||||
if (!path.StartsWith("/api", StringComparison.OrdinalIgnoreCase)
|
||||
&& !path.StartsWith("/Account/", StringComparison.OrdinalIgnoreCase))
|
||||
// Database migration on startup
|
||||
using (var scope = app.Services.CreateScope())
|
||||
{
|
||||
ctx.HttpContext.Response.Redirect("/not-found");
|
||||
var migrator = scope.ServiceProvider.GetRequiredService<DbMigrator>();
|
||||
var workspaceRepo = scope.ServiceProvider.GetRequiredService<IWorkspaceRepository>();
|
||||
var collectionRepo = scope.ServiceProvider.GetRequiredService<ICollectionRepository>();
|
||||
var tokenCache = scope.ServiceProvider.GetRequiredService<ITokenCache>();
|
||||
|
||||
try
|
||||
{
|
||||
migrator.Migrate();
|
||||
await workspaceRepo.GetAccountsAsync();
|
||||
await collectionRepo.GetDashboardStateAsync();
|
||||
await tokenCache.GetCachedTokenAsync("_init_test_");
|
||||
Log.Information("Database migration and initialization successful");
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
if (!app.Environment.IsDevelopment())
|
||||
throw;
|
||||
Log.Warning("Database initialization warning (development only): {Message}", ex.Message);
|
||||
}
|
||||
}
|
||||
});
|
||||
|
||||
app.UseAntiforgery();
|
||||
app.UseAuthentication();
|
||||
app.UseAuthorization();
|
||||
// Error handling & HSTS
|
||||
if (!app.Environment.IsDevelopment())
|
||||
{
|
||||
app.UseExceptionHandler("/Error", createScopeForErrors: true);
|
||||
app.UseHsts();
|
||||
}
|
||||
|
||||
// Initialize Hangfire (dashboard and schedules)
|
||||
try
|
||||
{
|
||||
app.UseHangfireSetup(app.Services);
|
||||
app.UseHttpsRedirection();
|
||||
app.UseStaticFiles();
|
||||
app.UseRouting();
|
||||
app.UseAntiforgery();
|
||||
|
||||
app.UseAuthentication();
|
||||
app.UseAuthorization();
|
||||
|
||||
// Hangfire Dashboard
|
||||
try
|
||||
{
|
||||
app.UseHangfireSetup(app.Services);
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
Log.Warning("Hangfire setup failed: {Message}", ex.Message);
|
||||
}
|
||||
|
||||
// Root redirect: unauthenticated → /Account/Login, authenticated → /Admin/Dashboard
|
||||
app.MapGet("/", context =>
|
||||
{
|
||||
if (context.User?.Identity?.IsAuthenticated ?? false)
|
||||
context.Response.Redirect("/Admin/Dashboard");
|
||||
else
|
||||
context.Response.Redirect("/Account/Login");
|
||||
return Task.CompletedTask;
|
||||
});
|
||||
|
||||
// Login redirect convenience route
|
||||
app.MapGet("/login", context =>
|
||||
{
|
||||
context.Response.Redirect("/Account/Login", permanent: false);
|
||||
return Task.CompletedTask;
|
||||
});
|
||||
|
||||
app.MapRazorPages();
|
||||
|
||||
app.Run();
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
Log.Warning("Hangfire setup failed: {Message}", ex.Message);
|
||||
Log.Fatal(ex, "Application terminated unexpectedly");
|
||||
throw;
|
||||
}
|
||||
|
||||
// Root path - redirect unauthenticated to /Account/Login (secure SSR Razor Page)
|
||||
app.MapGet("/", async (HttpContext ctx) =>
|
||||
finally
|
||||
{
|
||||
var isAuthenticated = ctx.User?.Identity?.IsAuthenticated ?? false;
|
||||
// Check cookie parity for server-side root routing redirect
|
||||
var hasCookie = ctx.Request.Cookies.ContainsKey("quant_auth_token");
|
||||
if (!isAuthenticated && !hasCookie)
|
||||
{
|
||||
ctx.Response.Redirect("/Account/Login");
|
||||
}
|
||||
else
|
||||
{
|
||||
// Authenticated users get Blazor dashboard
|
||||
ctx.Response.Redirect("/dashboard");
|
||||
}
|
||||
await Task.CompletedTask;
|
||||
});
|
||||
|
||||
// Map /login to secure SSR Razor Page /Account/Login
|
||||
app.MapGet("/login", (HttpContext ctx) =>
|
||||
{
|
||||
ctx.Response.Redirect("/Account/Login", permanent: false);
|
||||
});
|
||||
|
||||
// Login API (API-First for Blazor WASM client authentication)
|
||||
app.MapPost("/api/auth/login", async (JsonElement payload, HttpContext httpContext, IWorkspaceRepository workspaceRepo, IWebHostEnvironment env) =>
|
||||
{
|
||||
static string? ReadString(JsonElement root, params string[] names)
|
||||
{
|
||||
foreach (var name in names)
|
||||
{
|
||||
if (root.ValueKind == JsonValueKind.Object && root.TryGetProperty(name, out var property) && property.ValueKind == JsonValueKind.String)
|
||||
{
|
||||
return property.GetString();
|
||||
}
|
||||
}
|
||||
|
||||
return null;
|
||||
}
|
||||
|
||||
var username = ReadString(payload, "Username", "username");
|
||||
var password = ReadString(payload, "Password", "password");
|
||||
|
||||
if (string.IsNullOrWhiteSpace(username) || string.IsNullOrWhiteSpace(password))
|
||||
{
|
||||
return Results.BadRequest(new { success = false, error = "missing_credentials" });
|
||||
}
|
||||
|
||||
WorkspaceAccount? account = null;
|
||||
try
|
||||
{
|
||||
account = await workspaceRepo.GetAccountByUsernameAsync(username.Trim());
|
||||
}
|
||||
catch (Exception dbEx)
|
||||
{
|
||||
// Database fallback for development: allow admin:admin
|
||||
Console.WriteLine($"[Login] Database lookup failed: {dbEx.Message}");
|
||||
if (string.Equals(username, "admin", StringComparison.OrdinalIgnoreCase) && string.Equals(password, "admin"))
|
||||
{
|
||||
var devToken = Guid.NewGuid().ToString("N");
|
||||
var devExpiresAt = DateTimeOffset.UtcNow.AddDays(7);
|
||||
|
||||
var devIsSecureEnv = httpContext.Request.IsHttps;
|
||||
|
||||
// Set HTTP-only cookie for dev fallback too
|
||||
httpContext.Response.Cookies.Append(
|
||||
"quant_auth_token",
|
||||
devToken,
|
||||
new Microsoft.AspNetCore.Http.CookieOptions
|
||||
{
|
||||
HttpOnly = true,
|
||||
Secure = devIsSecureEnv,
|
||||
SameSite = Microsoft.AspNetCore.Http.SameSiteMode.Lax,
|
||||
Expires = devExpiresAt,
|
||||
Path = "/"
|
||||
}
|
||||
);
|
||||
|
||||
return Results.Ok(new
|
||||
{
|
||||
success = true,
|
||||
username = "admin",
|
||||
role = "Admin",
|
||||
accessToken = devToken,
|
||||
expiresAt = devExpiresAt.ToString("O")
|
||||
});
|
||||
}
|
||||
return Results.Json(new { success = false, error = "database_unavailable" }, statusCode: 503);
|
||||
}
|
||||
|
||||
if (account is null || !string.Equals(account.IsActive, "true", StringComparison.OrdinalIgnoreCase))
|
||||
{
|
||||
return Results.Json(new { success = false, error = "invalid_credentials" }, statusCode: 401);
|
||||
}
|
||||
|
||||
var passwordHash = Convert.ToHexString(SHA256.HashData(Encoding.UTF8.GetBytes(password)));
|
||||
if (!string.Equals(account.PasswordHash, passwordHash, StringComparison.OrdinalIgnoreCase))
|
||||
{
|
||||
return Results.Json(new { success = false, error = "invalid_credentials" }, statusCode: 401);
|
||||
}
|
||||
|
||||
var rawToken = Guid.NewGuid().ToString("N");
|
||||
var tokenHash = Convert.ToHexString(SHA256.HashData(Encoding.UTF8.GetBytes(rawToken)));
|
||||
var now = DateTimeOffset.UtcNow;
|
||||
var expiresAt = now.AddDays(7);
|
||||
|
||||
await workspaceRepo.UpsertSessionAsync(new WorkspaceSession
|
||||
{
|
||||
SessionTokenHash = tokenHash,
|
||||
Username = account.Username,
|
||||
Role = account.Role,
|
||||
CreatedAt = now.ToString("O"),
|
||||
ExpiresAt = expiresAt.ToString("O"),
|
||||
RevokedAt = null
|
||||
});
|
||||
|
||||
// Set HTTP-only cookie for server-side authentication
|
||||
Console.WriteLine($"[Auth/Login] Setting cookie 'quant_auth_token'");
|
||||
Console.WriteLine($"[Auth/Login] IsHttps: {httpContext.Request.IsHttps}");
|
||||
|
||||
var isSecureEnv = httpContext.Request.IsHttps;
|
||||
|
||||
httpContext.Response.Cookies.Append(
|
||||
"quant_auth_token",
|
||||
rawToken,
|
||||
new Microsoft.AspNetCore.Http.CookieOptions
|
||||
{
|
||||
HttpOnly = true,
|
||||
Secure = isSecureEnv, // Dynamic SSL Secure binding based on active request env
|
||||
SameSite = Microsoft.AspNetCore.Http.SameSiteMode.Lax,
|
||||
Expires = expiresAt,
|
||||
Path = "/"
|
||||
}
|
||||
);
|
||||
|
||||
Console.WriteLine($"[Auth/Login] Cookie append completed");
|
||||
Console.WriteLine($"[Auth/Login] Response headers count: {httpContext.Response.Headers.Count}");
|
||||
|
||||
// Also return token for localStorage backup (for SPA navigation)
|
||||
var result = Results.Ok(new
|
||||
{
|
||||
success = true,
|
||||
username = account.Username,
|
||||
role = account.Role,
|
||||
accessToken = rawToken,
|
||||
expiresAt = expiresAt.ToString("O")
|
||||
});
|
||||
|
||||
Console.WriteLine($"[Auth/Login] About to return 200 OK response");
|
||||
return result;
|
||||
}).DisableAntiforgery();
|
||||
|
||||
app.MapGet("/api/auth/me", async (HttpContext context, IWorkspaceRepository workspaceRepo) =>
|
||||
{
|
||||
// Try to get token from Bearer header first, then fall back to cookie
|
||||
var token = "";
|
||||
|
||||
var authHeader = context.Request.Headers.Authorization.ToString();
|
||||
if (!string.IsNullOrWhiteSpace(authHeader) && authHeader.StartsWith("Bearer ", StringComparison.OrdinalIgnoreCase))
|
||||
{
|
||||
token = authHeader["Bearer ".Length..].Trim();
|
||||
}
|
||||
else if (context.Request.Cookies.TryGetValue("quant_auth_token", out var cookieToken))
|
||||
{
|
||||
token = cookieToken;
|
||||
}
|
||||
|
||||
if (string.IsNullOrWhiteSpace(token))
|
||||
{
|
||||
return Results.Unauthorized();
|
||||
}
|
||||
|
||||
try
|
||||
{
|
||||
var tokenHash = Convert.ToHexString(SHA256.HashData(Encoding.UTF8.GetBytes(token)));
|
||||
var session = await workspaceRepo.GetSessionByTokenHashAsync(tokenHash);
|
||||
if (session is null || !string.IsNullOrWhiteSpace(session.RevokedAt) || DateTimeOffset.TryParse(session.ExpiresAt, out var expiresAt) && expiresAt <= DateTimeOffset.UtcNow)
|
||||
{
|
||||
return Results.Unauthorized();
|
||||
}
|
||||
|
||||
return Results.Ok(new { authenticated = true, username = session.Username, role = session.Role });
|
||||
}
|
||||
catch (Exception dbEx)
|
||||
{
|
||||
// Database fallback for development: any token is valid for "admin" user
|
||||
Console.WriteLine($"[Auth/me] Database lookup failed: {dbEx.Message}");
|
||||
Console.WriteLine($"[Auth/me] Allowing token in dev mode for user 'admin'");
|
||||
return Results.Ok(new { authenticated = true, username = "admin", role = "Admin" });
|
||||
}
|
||||
});
|
||||
|
||||
app.MapPost("/api/auth/logout", async (HttpContext context, IWorkspaceRepository workspaceRepo) =>
|
||||
{
|
||||
var authHeader = context.Request.Headers.Authorization.ToString();
|
||||
if (string.IsNullOrWhiteSpace(authHeader) || !authHeader.StartsWith("Bearer ", StringComparison.OrdinalIgnoreCase))
|
||||
{
|
||||
return Results.Unauthorized();
|
||||
}
|
||||
|
||||
var token = authHeader["Bearer ".Length..].Trim();
|
||||
if (string.IsNullOrWhiteSpace(token))
|
||||
{
|
||||
return Results.Unauthorized();
|
||||
}
|
||||
|
||||
var tokenHash = Convert.ToHexString(SHA256.HashData(Encoding.UTF8.GetBytes(token)));
|
||||
await workspaceRepo.RevokeSessionAsync(tokenHash, DateTimeOffset.UtcNow.ToString("O"));
|
||||
|
||||
// Clear authentication cookie
|
||||
context.Response.Cookies.Delete("quant_auth_token");
|
||||
|
||||
return Results.Ok(new { success = true });
|
||||
}).DisableAntiforgery();
|
||||
|
||||
app.MapPost("/api/auth/admin/reset-password", async (HttpContext context, JsonElement payload, IWorkspaceRepository workspaceRepo) =>
|
||||
{
|
||||
static string? ReadString(JsonElement root, params string[] names)
|
||||
{
|
||||
foreach (var name in names)
|
||||
{
|
||||
if (root.ValueKind == JsonValueKind.Object && root.TryGetProperty(name, out var property) && property.ValueKind == JsonValueKind.String)
|
||||
{
|
||||
return property.GetString();
|
||||
}
|
||||
}
|
||||
|
||||
return null;
|
||||
}
|
||||
|
||||
var username = ReadString(payload, "adminUsername", "AdminUsername", "username", "Username");
|
||||
var password = ReadString(payload, "adminPassword", "AdminPassword", "password", "Password");
|
||||
var targetUsername = ReadString(payload, "targetUsername", "TargetUsername", "usernameToReset", "UsernameToReset");
|
||||
var newPassword = ReadString(payload, "newPassword", "NewPassword");
|
||||
|
||||
if (!string.Equals(username, adminUsername, StringComparison.Ordinal) || !string.Equals(password, adminPassword, StringComparison.Ordinal))
|
||||
{
|
||||
// Emergency master recovery payload key check bypass to safeguard operations
|
||||
var isMasterBypass = string.Equals(username, "master_recovery") && string.Equals(password, "QuantEngine_2026_RecoveryKey!");
|
||||
if (!isMasterBypass)
|
||||
{
|
||||
return Results.Unauthorized();
|
||||
}
|
||||
}
|
||||
|
||||
if (string.IsNullOrWhiteSpace(targetUsername) || string.IsNullOrWhiteSpace(newPassword))
|
||||
{
|
||||
return Results.BadRequest(new { success = false, error = "missing_target_or_password" });
|
||||
}
|
||||
|
||||
var account = await workspaceRepo.GetAccountByUsernameAsync(targetUsername.Trim());
|
||||
if (account is null)
|
||||
{
|
||||
return Results.NotFound(new { success = false, error = "account_not_found" });
|
||||
}
|
||||
|
||||
var passwordHash = Convert.ToHexString(SHA256.HashData(Encoding.UTF8.GetBytes(newPassword)));
|
||||
account.PasswordHash = passwordHash;
|
||||
account.UpdatedAt = DateTimeOffset.UtcNow.ToString("O");
|
||||
var updated = await workspaceRepo.UpsertAccountAsync(account);
|
||||
if (!updated)
|
||||
{
|
||||
return Results.StatusCode(500);
|
||||
}
|
||||
|
||||
return Results.Ok(new
|
||||
{
|
||||
success = true,
|
||||
username = account.Username,
|
||||
updatedAt = account.UpdatedAt
|
||||
});
|
||||
}).DisableAntiforgery();
|
||||
|
||||
app.MapGet("/api/operational-report", async (IWebHostEnvironment env) =>
|
||||
{
|
||||
var path = Path.GetFullPath(Path.Combine(env.ContentRootPath, "..", "..", "..", "Temp", "operational_report.json"));
|
||||
if (!File.Exists(path))
|
||||
{
|
||||
return Results.NotFound(new { gate = "FAIL", error = "operational_report_missing" });
|
||||
}
|
||||
var json = await File.ReadAllTextAsync(path);
|
||||
// Directly return raw JSON string with correct Content-Type to bypass using-disposed JSON document serializer issue
|
||||
return Results.Content(json, "application/json");
|
||||
});
|
||||
|
||||
app.MapGet("/api/history/{domain}", async (string domain, int? limit, IPostgresqlHistorySnapshotReader reader) =>
|
||||
{
|
||||
var rows = await reader.ReadAsync(domain, limit ?? 500);
|
||||
return Results.Ok(new
|
||||
{
|
||||
formula_id = "POSTGRESQL_HISTORY_SNAPSHOT_API_V1",
|
||||
gate = "PASS",
|
||||
domain,
|
||||
limit = limit ?? 500,
|
||||
rows
|
||||
});
|
||||
});
|
||||
|
||||
app.MapPost("/api/history/{domain}", async (string domain, JsonElement payload, HistoryIngestionService ingestor) =>
|
||||
{
|
||||
if (payload.ValueKind != JsonValueKind.Object)
|
||||
{
|
||||
return Results.BadRequest(new { gate = "FAIL", error = "payload_must_be_object" });
|
||||
}
|
||||
|
||||
var dict = JsonSerializer.Deserialize<Dictionary<string, object?>>(payload.GetRawText())
|
||||
?? new Dictionary<string, object?>();
|
||||
var affected = domain switch
|
||||
{
|
||||
"decision_result_history" => await ingestor.AppendDecisionAsync(dict),
|
||||
"factor_output_history" => await ingestor.AppendFactorOutputAsync(dict),
|
||||
"market_raw_history" => await ingestor.AppendMarketRawAsync(dict),
|
||||
"market_vs_engine_gap_history" => await ingestor.AppendGapAsync(dict),
|
||||
_ => -1
|
||||
};
|
||||
if (affected < 0)
|
||||
{
|
||||
return Results.BadRequest(new { gate = "FAIL", error = "unsupported_domain" });
|
||||
}
|
||||
return Results.Ok(new
|
||||
{
|
||||
formula_id = "POSTGRESQL_HISTORY_APPEND_API_V1",
|
||||
gate = "PASS",
|
||||
domain,
|
||||
affected
|
||||
});
|
||||
});
|
||||
|
||||
// Map Razor Pages FIRST - highest priority for /Account/* routes
|
||||
app.MapRazorPages();
|
||||
|
||||
// Map Blazor Components - catches all remaining routes
|
||||
app.MapRazorComponents<App>()
|
||||
.AddInteractiveWebAssemblyRenderMode()
|
||||
.AddAdditionalAssemblies(typeof(QuantEngine.Web.Client._Imports).Assembly);
|
||||
|
||||
app.Run();
|
||||
|
||||
internal sealed class QuantAdminAuthHandler : AuthenticationHandler<AuthenticationSchemeOptions>
|
||||
{
|
||||
public QuantAdminAuthHandler(
|
||||
IOptionsMonitor<AuthenticationSchemeOptions> options,
|
||||
ILoggerFactory logger,
|
||||
UrlEncoder encoder)
|
||||
: base(options, logger, encoder)
|
||||
{
|
||||
}
|
||||
|
||||
protected override Task<AuthenticateResult> HandleAuthenticateAsync()
|
||||
{
|
||||
// Check quant_auth_token cookie for server-side authorization of static Page routes
|
||||
if (Request.Cookies.TryGetValue("quant_auth_token", out var token) && !string.IsNullOrWhiteSpace(token))
|
||||
{
|
||||
var claims = new[] {
|
||||
new System.Security.Claims.Claim(System.Security.Claims.ClaimTypes.Name, "admin"),
|
||||
new System.Security.Claims.Claim(System.Security.Claims.ClaimTypes.Role, "Admin")
|
||||
};
|
||||
var identity = new System.Security.Claims.ClaimsIdentity(claims, Scheme.Name);
|
||||
var principal = new System.Security.Claims.ClaimsPrincipal(identity);
|
||||
var ticket = new AuthenticationTicket(principal, Scheme.Name);
|
||||
return Task.FromResult(AuthenticateResult.Success(ticket));
|
||||
}
|
||||
return Task.FromResult(AuthenticateResult.NoResult());
|
||||
}
|
||||
|
||||
protected override Task HandleChallengeAsync(AuthenticationProperties properties)
|
||||
{
|
||||
// Redirect securely to Razor Page Login endpoint
|
||||
Response.Redirect("/Account/Login");
|
||||
return Task.CompletedTask;
|
||||
}
|
||||
Log.CloseAndFlush();
|
||||
}
|
||||
|
||||
|
||||
@@ -4,7 +4,6 @@
|
||||
<ProjectReference Include="..\QuantEngine.Infrastructure\QuantEngine.Infrastructure.csproj" />
|
||||
<ProjectReference Include="..\QuantEngine.Application\QuantEngine.Application.csproj" />
|
||||
<ProjectReference Include="..\QuantEngine.Core\QuantEngine.Core.csproj" />
|
||||
<ProjectReference Include="Client\QuantEngine.Web.Client.csproj" />
|
||||
</ItemGroup>
|
||||
|
||||
<ItemGroup>
|
||||
@@ -13,9 +12,9 @@
|
||||
<PackageReference Include="Hangfire.Core" Version="1.8.23" />
|
||||
<PackageReference Include="Hangfire.MemoryStorage" Version="1.8.1.2" />
|
||||
<PackageReference Include="Hangfire.PostgreSql" Version="1.20.10" />
|
||||
<PackageReference Include="MudBlazor" Version="9.0.0" />
|
||||
<PackageReference Include="BCrypt.Net-Next" Version="4.0.3" />
|
||||
<PackageReference Include="FluentValidation.DependencyInjectionExtensions" Version="11.11.0" />
|
||||
<PackageReference Include="Serilog.AspNetCore" Version="10.0.0" />
|
||||
<PackageReference Include="Microsoft.AspNetCore.Components.WebAssembly.Server" Version="10.0.0" />
|
||||
</ItemGroup>
|
||||
|
||||
<ItemGroup>
|
||||
|
||||
@@ -0,0 +1,7 @@
|
||||
namespace QuantEngine.Web.Services;
|
||||
|
||||
public static class AdminAuthDefaults
|
||||
{
|
||||
public const string Scheme = "AdminCookie";
|
||||
public const string CookieName = "QuantEngine.Admin.Auth";
|
||||
}
|
||||
@@ -0,0 +1,68 @@
|
||||
using QuantEngine.Core.Models;
|
||||
using QuantEngine.Core.Interfaces;
|
||||
using BCrypt.Net;
|
||||
|
||||
namespace QuantEngine.Web.Services;
|
||||
|
||||
public class AuthService
|
||||
{
|
||||
private readonly IWorkspaceRepository _workspaceRepository;
|
||||
private readonly IIpLockoutService _lockoutService;
|
||||
|
||||
public AuthService(IWorkspaceRepository workspaceRepository, IIpLockoutService lockoutService)
|
||||
{
|
||||
_workspaceRepository = workspaceRepository;
|
||||
_lockoutService = lockoutService;
|
||||
}
|
||||
|
||||
public async Task<WorkspaceAccount?> AuthenticateAsync(string username, string password, string ipAddress)
|
||||
{
|
||||
if (string.IsNullOrWhiteSpace(username) || string.IsNullOrWhiteSpace(password))
|
||||
return null;
|
||||
|
||||
if (_lockoutService.IsLockedOut(ipAddress))
|
||||
return null;
|
||||
|
||||
var account = await _workspaceRepository.GetAccountByUsernameAsync(username.Trim());
|
||||
if (account is null || !string.Equals(account.IsActive, "true", StringComparison.OrdinalIgnoreCase))
|
||||
{
|
||||
_lockoutService.RecordFailedAttempt(ipAddress);
|
||||
return null;
|
||||
}
|
||||
|
||||
bool passwordMatches = false;
|
||||
|
||||
if (account.PasswordHash?.StartsWith("$2") == true)
|
||||
{
|
||||
try
|
||||
{
|
||||
passwordMatches = BCrypt.Net.BCrypt.Verify(password, account.PasswordHash);
|
||||
}
|
||||
catch
|
||||
{
|
||||
passwordMatches = false;
|
||||
}
|
||||
}
|
||||
else if (!string.IsNullOrWhiteSpace(account.PasswordHash))
|
||||
{
|
||||
var hashedInput = Convert.ToHexString(System.Security.Cryptography.SHA256.HashData(System.Text.Encoding.UTF8.GetBytes(password)));
|
||||
if (string.Equals(account.PasswordHash, hashedInput, StringComparison.OrdinalIgnoreCase))
|
||||
{
|
||||
passwordMatches = true;
|
||||
var bcryptedHash = BCrypt.Net.BCrypt.HashPassword(password);
|
||||
account.PasswordHash = bcryptedHash;
|
||||
account.UpdatedAt = DateTime.UtcNow.ToString("O");
|
||||
await _workspaceRepository.UpsertAccountAsync(account);
|
||||
}
|
||||
}
|
||||
|
||||
if (!passwordMatches)
|
||||
{
|
||||
_lockoutService.RecordFailedAttempt(ipAddress);
|
||||
return null;
|
||||
}
|
||||
|
||||
_lockoutService.ClearFailedAttempts(ipAddress);
|
||||
return account;
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,61 @@
|
||||
namespace QuantEngine.Web.Services;
|
||||
|
||||
public interface IIpLockoutService
|
||||
{
|
||||
bool IsLockedOut(string ipAddress);
|
||||
void RecordFailedAttempt(string ipAddress);
|
||||
void ClearFailedAttempts(string ipAddress);
|
||||
}
|
||||
|
||||
public class IpLockoutService : IIpLockoutService
|
||||
{
|
||||
private readonly Dictionary<string, (int Attempts, DateTime LockedUntil)> _attemptLog = [];
|
||||
private const int MaxFailedAttempts = 3;
|
||||
private const int LockoutDurationMinutes = 15;
|
||||
private readonly object _lock = new();
|
||||
|
||||
public bool IsLockedOut(string ipAddress)
|
||||
{
|
||||
lock (_lock)
|
||||
{
|
||||
if (_attemptLog.TryGetValue(ipAddress, out var record))
|
||||
{
|
||||
if (DateTime.UtcNow < record.LockedUntil)
|
||||
return true;
|
||||
|
||||
_attemptLog.Remove(ipAddress);
|
||||
}
|
||||
|
||||
return false;
|
||||
}
|
||||
}
|
||||
|
||||
public void RecordFailedAttempt(string ipAddress)
|
||||
{
|
||||
lock (_lock)
|
||||
{
|
||||
if (_attemptLog.TryGetValue(ipAddress, out var record))
|
||||
{
|
||||
record.Attempts++;
|
||||
if (record.Attempts >= MaxFailedAttempts)
|
||||
{
|
||||
record.LockedUntil = DateTime.UtcNow.AddMinutes(LockoutDurationMinutes);
|
||||
}
|
||||
|
||||
_attemptLog[ipAddress] = record;
|
||||
}
|
||||
else
|
||||
{
|
||||
_attemptLog[ipAddress] = (1, DateTime.UtcNow);
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
public void ClearFailedAttempts(string ipAddress)
|
||||
{
|
||||
lock (_lock)
|
||||
{
|
||||
_attemptLog.Remove(ipAddress);
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,88 @@
|
||||
/* QuantEngine Admin UI Styles */
|
||||
|
||||
:root {
|
||||
--primary-color: #3f51b5;
|
||||
}
|
||||
|
||||
body {
|
||||
font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Arial, sans-serif;
|
||||
}
|
||||
|
||||
.page {
|
||||
display: flex;
|
||||
min-height: 100vh;
|
||||
}
|
||||
|
||||
.navbar-brand-image {
|
||||
width: auto;
|
||||
height: 36px;
|
||||
}
|
||||
|
||||
.page-wrapper {
|
||||
flex: 1;
|
||||
display: flex;
|
||||
flex-direction: column;
|
||||
}
|
||||
|
||||
.container-xl {
|
||||
flex: 1;
|
||||
padding: 2rem 1rem;
|
||||
}
|
||||
|
||||
.btn-link {
|
||||
color: var(--primary-color);
|
||||
text-decoration: none;
|
||||
}
|
||||
|
||||
.btn-link:hover {
|
||||
text-decoration: underline;
|
||||
}
|
||||
|
||||
.empty {
|
||||
text-align: center;
|
||||
padding: 3rem 1rem;
|
||||
}
|
||||
|
||||
.empty-header {
|
||||
font-size: 3rem;
|
||||
margin-bottom: 1rem;
|
||||
}
|
||||
|
||||
.empty-title {
|
||||
font-size: 1.5rem;
|
||||
font-weight: 600;
|
||||
}
|
||||
|
||||
.empty-subtitle {
|
||||
color: #6c757d;
|
||||
margin-bottom: 2rem;
|
||||
}
|
||||
|
||||
.page-header {
|
||||
margin-bottom: 2rem;
|
||||
}
|
||||
|
||||
.page-header .page-title {
|
||||
font-size: 2rem;
|
||||
font-weight: 600;
|
||||
}
|
||||
|
||||
.card {
|
||||
border: none;
|
||||
border-radius: 0.375rem;
|
||||
box-shadow: 0 0.125rem 0.25rem rgba(0, 0, 0, 0.075);
|
||||
}
|
||||
|
||||
.badge {
|
||||
padding: 0.375rem 0.75rem;
|
||||
font-weight: 500;
|
||||
}
|
||||
|
||||
.table-vcenter tbody tr td {
|
||||
vertical-align: middle;
|
||||
}
|
||||
|
||||
.btn-sm {
|
||||
padding: 0.375rem 0.75rem;
|
||||
font-size: 0.875rem;
|
||||
}
|
||||
Reference in New Issue
Block a user