chore: 将后端移动到 api/ 目录，准备合并为单仓库

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

api/account/admin.py

@@ -0,0 +1,24 @@
+from django.contrib import admin
+from django.contrib.auth.admin import UserAdmin
+from django.contrib.auth.models import Group
+from .models import User
+
+admin.site.site_header = "前端开发网站管理"
+admin.site.site_index = "前端开发网站管理"
+admin.site.site_title = "前端开发网站管理"
+
+admin.site.unregister(Group)
+
+
+@admin.register(User)
+class AdminAccount(UserAdmin):
+    fieldsets = ((None, {"fields": ("username", "password", "role", "is_active")}),)
+    add_fieldsets = (
+        (
+            None,
+            {"fields": ("username", "password1", "password2", "role")},
+        ),
+    )
+    list_display = ("username", "role", "is_active")
+    list_filter = ("role", "is_active")
+    search_fields = ("username",)

api/account/api.py

@@ -0,0 +1,147 @@
+from typing import List
+from django.contrib.auth import authenticate, login, logout
+from django.contrib.auth.decorators import login_required
+from ninja import Router
+from ninja.pagination import paginate
+from ninja.errors import HttpError
+from .schemas import (
+    BatchUsersIn,
+    ClassStudentEntry,
+    UserListSchema,
+    UserRegistrationSchema,
+    UserLoginSchema,
+)
+from .models import RoleChoices, User
+from .decorators import super_required
+from django.db import transaction
+import secrets
+import string
+
+router = Router()
+
+
+def generate_password(length=6):
+    """生成更安全的随机密码"""
+    alphabet = string.digits[2:]  # 只使用2-9的数字
+    return "".join(secrets.choice(alphabet) for _ in range(length))
+
+
+@router.post("/register")
+def user_register(request, payload: UserRegistrationSchema):
+    if User.objects.filter(username=payload.username).exists():
+        raise HttpError(400, "用户已存在")
+    User.objects.create_user(
+        username=payload.username,
+        email=payload.email,
+        password=payload.password,
+    )
+    return {"message": "创建成功"}
+
+
+@router.post("/login")
+def user_login(request, payload: UserLoginSchema):
+    user = authenticate(username=payload.username, password=payload.password)
+    if user:
+        login(request, user)
+        return {"username": user.username, "role": user.role}
+    else:
+        raise HttpError(401, "账号密码错误")
+
+
+@router.post("/logout")
+@login_required
+def user_logout(request):
+    logout(request)
+    return {"message": "退出成功"}
+
+
+@router.get("/profile")
+def my_profile(request):
+    # 首页获取用户状态
+    if request.user.is_authenticated:
+        return {"username": request.user.get_username(), "role": request.user.role}
+    else:
+        return {"username": "", "role": RoleChoices.NORMAL}
+
+
+@router.get("/list", response=List[UserListSchema])
+@super_required
+@paginate
+def list(request, username: str, role: str = None):
+    # 用户列表
+    users = User.objects.filter(username__icontains=username)
+    if role:
+        users = users.filter(role=role)
+    return [UserListSchema.get(user) for user in users]
+
+
+@router.post("/batch")
+@super_required
+@transaction.atomic
+def batch_create(request, payload: BatchUsersIn):
+    prefix = "web"
+    usernames = []
+    users_to_create = []
+
+    # 生成用户名列表
+    for name in payload.names:
+        username = prefix + payload.classname + name
+        usernames.append(username)
+
+    # 检查是否存在重复用户名
+    existing_users = User.objects.filter(username__in=usernames)
+    if existing_users.exists():
+        raise HttpError(400, "有些用户已经存在，创建失败")
+
+    # 批量创建用户
+    for username in usernames:
+        password = generate_password()
+        user = User(username=username, classname=payload.classname)
+        user.set_password(password)
+        users_to_create.append(user)
+
+    # 使用 bulk_create 批量保存
+    User.objects.bulk_create(users_to_create, ignore_conflicts=True)
+
+    # 返回创建的用户信息
+    return {"message": "批量创建成功"}
+
+
+@router.put("/active/{id}")
+@super_required
+def toggle_user_is_active(request, id: int):
+    # 封号和解封
+    try:
+        user = User.objects.get(id=id)
+        user.is_active = not user.is_active
+        user.save()
+        return {
+            "message": f"{user.username} {'解封' if user.is_active else '封号'}成功"
+        }
+    except User.DoesNotExist:
+        raise HttpError(404, "查无此人")
+
+
+@router.get("/classes", response=List[str])
+def list_classes(request):
+    """返回所有不重复的非空班级名列表，按字典序升序"""
+    return (
+        User.objects.filter(classname__gt="")
+        .values_list("classname", flat=True)
+        .distinct()
+        .order_by("classname")
+    )
+
+
+@router.get("/names", response=List[ClassStudentEntry])
+def list_names_by_class(request, classname: str):
+    """返回指定班级的学生姓名和用户名列表"""
+    prefix = "web" + classname
+    users = User.objects.filter(
+        classname=classname,
+        username__startswith=prefix,
+    ).order_by("username")
+    return [
+        ClassStudentEntry(name=u.username[len(prefix):], username=u.username)
+        for u in users
+    ]

api/account/apps.py

@@ -0,0 +1,7 @@
+from django.apps import AppConfig
+
+
+class AccountConfig(AppConfig):
+    default_auto_field = "django.db.models.BigAutoField"
+    name = "account"
+    verbose_name = "用户"

api/account/decorators.py

@@ -0,0 +1,28 @@
+from ninja import NinjaAPI
+from functools import wraps
+from typing import Callable, List, Any
+from django.http import HttpRequest
+from django.contrib.auth.decorators import login_required, user_passes_test
+from .models import User, RoleChoices
+
+api = NinjaAPI()
+
+
+def _require(roles: List[RoleChoices]) -> Callable:
+    def check_role(user: User) -> bool:
+        return user.is_authenticated and hasattr(user, "role") and user.role in roles
+
+    def decorator(func: Callable) -> Callable:
+        @wraps(func)
+        @login_required
+        @user_passes_test(check_role, login_url=None)
+        def wrapper(request: HttpRequest, *args: Any, **kwargs: Any) -> Any:
+            return func(request, *args, **kwargs)
+
+        return wrapper
+
+    return decorator
+
+
+admin_required = _require([RoleChoices.ADMIN, RoleChoices.SUPER])
+super_required = _require([RoleChoices.SUPER])

api/account/migrations/0001_initial.py

@@ -0,0 +1,54 @@
+# Generated by Django 5.1.6 on 2025-03-07 01:32
+
+import django.contrib.auth.models
+import django.contrib.auth.validators
+import django.db.models.deletion
+import django.utils.timezone
+from django.conf import settings
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    initial = True
+
+    dependencies = [
+        ('auth', '0012_alter_user_first_name_max_length'),
+    ]
+
+    operations = [
+        migrations.CreateModel(
+            name='User',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('password', models.CharField(max_length=128, verbose_name='password')),
+                ('last_login', models.DateTimeField(blank=True, null=True, verbose_name='last login')),
+                ('is_superuser', models.BooleanField(default=False, help_text='Designates that this user has all permissions without explicitly assigning them.', verbose_name='superuser status')),
+                ('username', models.CharField(error_messages={'unique': 'A user with that username already exists.'}, help_text='Required. 150 characters or fewer. Letters, digits and @/./+/-/_ only.', max_length=150, unique=True, validators=[django.contrib.auth.validators.UnicodeUsernameValidator()], verbose_name='username')),
+                ('email', models.EmailField(blank=True, max_length=254, verbose_name='email address')),
+                ('is_staff', models.BooleanField(default=False, help_text='Designates whether the user can log into this admin site.', verbose_name='staff status')),
+                ('is_active', models.BooleanField(default=True, help_text='Designates whether this user should be treated as active. Unselect this instead of deleting accounts.', verbose_name='active')),
+                ('date_joined', models.DateTimeField(default=django.utils.timezone.now, verbose_name='date joined')),
+                ('role', models.CharField(choices=[('super', '超级管理员'), ('admin', '管理员'), ('normal', '普通')], default='normal', max_length=20, verbose_name='权限')),
+                ('raw_password', models.CharField(blank=True, max_length=20, null=True, verbose_name='明文密码')),
+                ('groups', models.ManyToManyField(blank=True, help_text='The groups this user belongs to. A user will get all permissions granted to each of their groups.', related_name='user_set', related_query_name='user', to='auth.group', verbose_name='groups')),
+                ('user_permissions', models.ManyToManyField(blank=True, help_text='Specific permissions for this user.', related_name='user_set', related_query_name='user', to='auth.permission', verbose_name='user permissions')),
+            ],
+            options={
+                'verbose_name': '用户',
+                'verbose_name_plural': '用户',
+                'ordering': ('-id',),
+            },
+            managers=[
+                ('objects', django.contrib.auth.models.UserManager()),
+            ],
+        ),
+        migrations.CreateModel(
+            name='Profile',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('total_score', models.IntegerField(default=0)),
+                ('user', models.OneToOneField(on_delete=django.db.models.deletion.CASCADE, to=settings.AUTH_USER_MODEL)),
+            ],
+        ),
+    ]

api/account/migrations/0002_alter_profile_total_score.py

@@ -0,0 +1,18 @@
+# Generated by Django 6.0.1 on 2026-03-09 11:55
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('account', '0001_initial'),
+    ]
+
+    operations = [
+        migrations.AlterField(
+            model_name='profile',
+            name='total_score',
+            field=models.FloatField(default=0.0),
+        ),
+    ]

api/account/migrations/0003_user_classname.py

@@ -0,0 +1,18 @@
+# Generated by Django 6.0.1 on 2026-03-18 02:33
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('account', '0002_alter_profile_total_score'),
+    ]
+
+    operations = [
+        migrations.AddField(
+            model_name='user',
+            name='classname',
+            field=models.CharField(blank=True, default='', max_length=50, verbose_name='班级'),
+        ),
+    ]

api/account/migrations/0004_remove_profile.py

@@ -0,0 +1,16 @@
+# Generated by Django 6.0.1 on 2026-03-18 10:38
+
+from django.db import migrations
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('account', '0003_user_classname'),
+    ]
+
+    operations = [
+        migrations.DeleteModel(
+            name='Profile',
+        ),
+    ]

api/account/models.py

@@ -0,0 +1,50 @@
+from django.db import models
+from django.contrib.auth.models import AbstractUser
+
+
+class RoleChoices(models.TextChoices):
+    SUPER = "super", "超级管理员"
+    ADMIN = "admin", "管理员"
+    NORMAL = "normal", "普通"
+
+
+class User(AbstractUser):
+    first_name = None
+    last_name = None
+
+    role = models.CharField(
+        max_length=20,
+        choices=RoleChoices.choices,
+        default=RoleChoices.NORMAL,
+        verbose_name="权限",
+    )
+    raw_password = models.CharField(
+        max_length=20,
+        null=True,
+        blank=True,
+        verbose_name="明文密码",
+    )
+    classname = models.CharField(
+        max_length=50,
+        blank=True,
+        default="",
+        verbose_name="班级",
+    )
+
+    def save(self, *args, **kwargs):
+        if self.username:
+            if self.is_superuser:
+                self.role = RoleChoices.SUPER
+            super().save(*args, **kwargs)
+
+    def set_password(self, raw_password):
+        super().set_password(raw_password)
+        self.raw_password = raw_password
+        self.save()
+
+    class Meta:
+        ordering = ("-id",)
+        verbose_name = "用户"
+        verbose_name_plural = verbose_name
+
+

api/account/schemas.py

@@ -0,0 +1,53 @@
+from typing import List
+from ninja import Schema, ModelSchema
+from pydantic import EmailStr, Field
+
+from .models import User, RoleChoices
+
+
+class UserListSchema(ModelSchema):
+    @classmethod
+    def get(cls, obj):
+        raw_password = obj.raw_password if obj.role != RoleChoices.SUPER else ""
+        return cls(
+            id=obj.id,
+            username=obj.username,
+            raw_password=raw_password,
+            role=obj.role,
+            date_joined=obj.date_joined,
+            last_login=obj.last_login,
+            is_active=obj.is_active,
+        )
+
+    class Meta:
+        model = User
+        fields = [
+            "id",
+            "username",
+            "raw_password",
+            "role",
+            "date_joined",
+            "last_login",
+            "is_active",
+        ]
+
+
+class UserRegistrationSchema(Schema):
+    username: str
+    email: EmailStr
+    password: str = Field(min_length=6, max_length=20)
+
+
+class UserLoginSchema(Schema):
+    username: str
+    password: str
+
+
+class BatchUsersIn(Schema):
+    names: List[str]
+    classname: str
+
+
+class ClassStudentEntry(Schema):
+    name: str
+    username: str