LuCode3AdminMix 基础功能迁移。

api/.editorconfig

@@ -0,0 +1,18 @@
+root = true
+
+[*]
+charset = utf-8
+end_of_line = lf
+indent_size = 2
+indent_style = space
+insert_final_newline = true
+trim_trailing_whitespace = true
+
+[*.md]
+trim_trailing_whitespace = false
+
+[*.{yml,yaml}]
+indent_size = 2
+
+[docker-compose.yml]
+indent_size = 2

api/.env.example

@@ -0,0 +1,62 @@
+APP_NAME=入魔入佛
+APP_ENV=local
+APP_KEY=base64:q3NPkuRVhdHFRkVskaqQatUEs+fXcFVgJNiDtE9nSAA=
+APP_DEBUG=true
+APP_URL=http://127.0.0.1:8000
+
+REQUEST_LOG=true
+TIMEZONE=Asia/Shanghai
+
+LOG_CHANNEL=stack
+LOG_DEPRECATIONS_CHANNEL=null
+LOG_LEVEL=debug
+
+DB_CONNECTION=mysql
+DB_HOST=127.0.0.1
+DB_PORT=3306
+DB_DATABASE=xxxxxxx
+DB_USERNAME=xxxxxxx
+DB_PASSWORD=xxxxxxx
+
+BROADCAST_DRIVER=log
+CACHE_DRIVER=file
+FILESYSTEM_DISK=local
+QUEUE_CONNECTION=sync
+SESSION_DRIVER=file
+SESSION_LIFETIME=120
+
+MEMCACHED_HOST=127.0.0.1
+
+REDIS_HOST=127.0.0.1
+REDIS_PASSWORD=null
+REDIS_PORT=6379
+
+MAIL_MAILER=smtp
+MAIL_HOST=mailpit
+MAIL_PORT=1025
+MAIL_USERNAME=null
+MAIL_PASSWORD=null
+MAIL_ENCRYPTION=null
+MAIL_FROM_ADDRESS="hello@example.com"
+MAIL_FROM_NAME="${APP_NAME}"
+
+AWS_ACCESS_KEY_ID=
+AWS_SECRET_ACCESS_KEY=
+AWS_DEFAULT_REGION=us-east-1
+AWS_BUCKET=
+AWS_USE_PATH_STYLE_ENDPOINT=false
+
+PUSHER_APP_ID=
+PUSHER_APP_KEY=
+PUSHER_APP_SECRET=
+PUSHER_HOST=
+PUSHER_PORT=443
+PUSHER_SCHEME=https
+PUSHER_APP_CLUSTER=mt1
+
+VITE_APP_NAME="${APP_NAME}"
+VITE_PUSHER_APP_KEY="${PUSHER_APP_KEY}"
+VITE_PUSHER_HOST="${PUSHER_HOST}"
+VITE_PUSHER_PORT="${PUSHER_PORT}"
+VITE_PUSHER_SCHEME="${PUSHER_SCHEME}"
+VITE_PUSHER_APP_CLUSTER="${PUSHER_APP_CLUSTER}"

api/.gitattributes

@@ -0,0 +1,11 @@
+* text=auto eol=lf
+
+*.blade.php diff=html
+*.css diff=css
+*.html diff=html
+*.md diff=markdown
+*.php diff=php
+
+/.github export-ignore
+CHANGELOG.md export-ignore
+.styleci.yml export-ignore

api/.gitignore

@@ -0,0 +1,36 @@
+# ---> Laravel
+/vendor/
+npm-debug.log
+yarn-error.log
+
+# Laravel 4 specific
+bootstrap/compiled.php
+app/storage/
+
+# Laravel 5 & Lumen specific
+public/storage
+
+# Laravel 5 & Lumen specific with changed public path
+public_html/storage
+public_html/hot
+
+storage/app/public/assets/upload
+storage/app/log
+storage/*.key
+.env
+Homestead.yaml
+Homestead.json
+/.vagrant
+.phpunit.result.cache
+
+# ---> Vue
+# gitignore template for Vue.js projects
+#
+# Recommended template: Node.gitignore
+
+# TODO: where does this rule come from?
+docs/_book
+
+# TODO: where does this rule come from?
+test/
+

api/app/Console/Kernel.php

@@ -0,0 +1,27 @@
+<?php
+
+namespace App\Console;
+
+use Illuminate\Console\Scheduling\Schedule;
+use Illuminate\Foundation\Console\Kernel as ConsoleKernel;
+
+class Kernel extends ConsoleKernel
+{
+    /**
+     * Define the application's command schedule.
+     */
+    protected function schedule(Schedule $schedule): void
+    {
+        // $schedule->command('inspire')->hourly();
+    }
+
+    /**
+     * Register the commands for the application.
+     */
+    protected function commands(): void
+    {
+        $this->load(__DIR__.'/Commands');
+
+        require base_path('routes/console.php');
+    }
+}

api/app/Exceptions/Handler.php

@@ -0,0 +1,30 @@
+<?php
+
+namespace App\Exceptions;
+
+use Illuminate\Foundation\Exceptions\Handler as ExceptionHandler;
+use Throwable;
+
+class Handler extends ExceptionHandler
+{
+    /**
+     * The list of the inputs that are never flashed to the session on validation exceptions.
+     *
+     * @var array<int, string>
+     */
+    protected $dontFlash = [
+        'current_password',
+        'password',
+        'password_confirmation',
+    ];
+
+    /**
+     * Register the exception handling callbacks for the application.
+     */
+    public function register(): void
+    {
+        $this->reportable(function (Throwable $e) {
+            //
+        });
+    }
+}

api/app/Http/Controllers/AdminAccountController.php

@@ -0,0 +1,41 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use App\Http\Request\ChangeAdminPassword;
+use App\Models\Admin;
+use App\Models\AdminAccount;
+use Illuminate\Http\Request;
+use Login;
+use Yo;
+
+class AdminAccountController extends Controller
+{
+  public function change_password(ChangeAdminPassword $request)
+  {
+    Login::admin();
+    $hash = $request->post('hash');
+    $code = $request->post('code');
+    $time = $request->post('time');
+    $uuid = $request->post('uuid');
+    $captcha = new ImageCaptchaController();
+    $captcha_check = $captcha->check($hash, $code, $time, $uuid);
+    if ($captcha_check != 0) Yo::error_echo($captcha_check);
+    $old_password = $request->post('old_password');
+    $password = $request->post('password');
+    $admin_account = AdminAccount::where('admin', Login::$info->id)
+      ->where('type', 1)
+      ->where('del', 2)
+      ->first();
+    if (!$admin_account) Yo::error_echo(100001, ['账号']);
+    if (!password_verify($old_password, $admin_account->secret)) Yo::error_echo(100008);
+    if ($old_password == $password) Yo::error_echo(100009);
+    $admin_account->secret = bcrypt($password);
+    $admin_account->save();
+    if (Login::$info->initial_password == 1) {
+      Login::$info->initial_password = 2;
+      Login::$info->save();
+    }
+    return Yo::update_echo(Login::$info->init_password);
+  }
+}

api/app/Http/Controllers/AdminAuthController.php

@@ -0,0 +1,196 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use App\Http\Request\EditAdminAuth;
+use App\Models\AdminAuth;
+use Illuminate\Http\Request;
+use Login;
+use Yo;
+
+class AdminAuthController extends Controller
+{
+  public function create(EditAdminAuth $request)
+  {
+    Login::admin([8]);
+    $admin_auth = new AdminAuth();
+    $admin_auth->name = $request->post('name');
+    $admin_auth->title = $request->post('title');
+    $admin_auth->icon = $request->post('icon') ?? '';
+    $pid = $request->post('pid');
+    $type = $request->post('type');
+    if ($type == 1 && $pid != 0) Yo::error_echo(100029);
+    if ($type == 2 && $pid != 0) {
+      $p_info = AdminAuth::where('id', $pid)->where('pid', 0)->where('type', 1)->first();
+      if (!$p_info) Yo::error_echo(100001, ['组路由']);
+    }
+    $admin_auth->pid = $pid;
+    $admin_auth->type = $type;
+    $admin_auth->check = $request->post('check');
+    $admin_auth->show = $request->post('show');
+    $admin_auth->status = $request->post('status');
+    $admin_auth->message = $request->post('message') ?? '';
+    $admin_auth->order = $request->post('order');
+    $admin_auth->save();
+    $admin_auth = AdminAuth::where('id', $admin_auth->id)->first();
+    return Yo::echo([
+      'info' => $admin_auth
+    ]);
+  }
+
+  public function update(EditAdminAuth $request)
+  {
+    Login::admin([8]);
+    $admin_auth = AdminAuth::where('id', $request->post('id'))->where('del', 2)->first();
+    if (!$admin_auth) Yo::error_echo(100001, ['路由']);
+    $admin_auth->name = $request->post('name');
+    $admin_auth->title = $request->post('title');
+    $admin_auth->icon = $request->post('icon') ?? '';
+    $pid = $request->post('pid');
+    $type = $request->post('type');
+    if ($type == 1 && $pid != 0) Yo::error_echo(100029);
+    if ($type == 2 && $pid != 0) {
+      $p_info = AdminAuth::where('id', $pid)->where('pid', 0)->where('type', 1)->first();
+      if (!$p_info) Yo::error_echo(100001, ['组路由']);
+    }
+    $admin_auth->pid = $pid;
+    $admin_auth->type = $type;
+    $admin_auth->check = $request->post('check');
+    $admin_auth->show = $request->post('show');
+    $admin_auth->status = $request->post('status');
+    $admin_auth->message = $request->post('message') ?? '';
+    $admin_auth->order = $request->post('order');
+    $admin_auth->save();
+    $admin_auth = AdminAuth::where('id', $admin_auth->id)->first();
+    return Yo::echo([
+      'info' => $admin_auth
+    ]);
+  }
+
+  public function delete(Request $request)
+  {
+    Login::admin([8]);
+    $admin_auth = AdminAuth::where('id', $request->post('id'))->where('del', 2)->first();
+    if (!$admin_auth) Yo::error_echo(100001, ['路由']);
+    $son_count = AdminAuth::where('pid', $admin_auth->id)->where('del', 2)->count();
+    if ($son_count != 0) Yo::error_echo(100030);
+    $admin_auth->del = 1;
+    $admin_auth->save();
+    return Yo::delete_echo($admin_auth->id);
+  }
+
+  public function list(Request $request)
+  {
+    Login::admin([8]);
+    $auth_group = AdminAuth::where('pid', 0)->where('type', 1)->where('del', 2)->orderBy('order', 'desc')->get();
+    $list = [];
+    foreach ($auth_group as $item) {
+      $data = [
+        'info' => $item,
+      ];
+      $auth_group_list = AdminAuth::where('pid', $item->id)->where('type', 2)->where('check', 1)->where('del', 2)->orderBy('order', 'desc')->get();
+      $data['list'] = $auth_group_list;
+      $list[] = $data;
+    }
+    $auth_group_single = AdminAuth::where('pid', 0)->where('type', 2)->where('check', 1)->where('del', 2)->orderBy('order', 'desc')->get()->toArray();
+    return Yo::echo([
+      'list' => array_merge($list, $auth_group_single)
+    ]);
+  }
+
+  public function select(Request $request)
+  {
+    Login::admin([8]);
+    $auth_group = AdminAuth::where('pid', 0)->where('type', 1)->where('del', 2)->orderBy('order', 'desc')->get();
+    return Yo::echo([
+      'list' => $auth_group
+    ]);
+  }
+
+  public function choose()
+  {
+    Login::admin();
+    $auth_group = AdminAuth::where('pid', 0)->where('type', 1)->where('del', 2)->orderBy('order', 'desc')->get();
+    $list = [];
+    foreach ($auth_group as $item) {
+      $data = [
+        'info' => $item,
+      ];
+      $auth_group_list = AdminAuth::where('pid', $item->id)->where('type', 2)->where('check', 1)->where('del', 2)->orderBy('order', 'desc')->get();
+      $data['list'] = $auth_group_list;
+      if (count($data['list']) == 0) continue;
+      $list[] = $data;
+    }
+    $auth_group_single = AdminAuth::where('pid', 0)->where('type', 2)->where('check', 1)->where('del', 2)->orderBy('order', 'desc')->get();
+    if (count($auth_group_single) != 0) {
+      $list[] = [
+        'info' => [
+          'id' => 0,
+          'title' => '未分组',
+        ],
+        'list' => $auth_group_single
+      ];
+    }
+    return Yo::echo([
+      'list' => $list
+    ]);
+  }
+
+  public function menu()
+  {
+    Login::admin();
+    $menu_group = AdminAuth::select('id', 'name', 'title', 'icon', 'status', 'type')
+      ->where('pid', 0)->where('show', 1)->where('del', 2)
+      ->orderBy('order', 'desc')->get();
+    $list = [];
+    foreach ($menu_group as $item) {
+      if ($item->type == 2) {
+        $list[] = [
+          "id" => $item->id,
+          "name" => $item->name,
+          "title" => $item->title,
+          "icon" => $item->icon,
+          "status" => $item->status,
+          "children" => []
+        ];
+      } else {
+        switch (Login::$info->admin_auth_group) {
+          case -1:
+            $auth_list = AdminAuth::select('id', 'name', 'title', 'icon', 'status')->where('pid', $item->id)
+              ->where('type', 2)->where('show', 1)->where('status', 1)->where('del', 2)
+              ->orderBy('order', 'desc')->get();
+            break;
+          case 0:
+            $auth_list = AdminAuth::select('id', 'name', 'title', 'icon', 'status')->where('pid', $item->id)
+              ->where('type', 2)->where('check_type', 1)->where('show', 1)->where('status', 1)->where('del', 2)
+              ->orderBy('order', 'desc')->get();
+            break;
+          default:
+            $admin_auth = AdminAuth::find(Login::$info->admin_auth_group);
+            $auths = json_decode($admin_auth->auths, true);
+            $auth_list = AdminAuth::select('id', 'name', 'title', 'icon', 'status')
+              ->where(function ($query) use ($auths, $item) {
+                $query->whereIn('id', $auths)->where('pid', $item->id)->where('type', 2)->where('check_type', 2)->where('show', 1)->where('status', 1)->where('del', 2);
+              })
+              ->orWhere(function ($query) use ($auths, $item) {
+                $query->where('type', 2)->where('pid', $item->id)->where('check_type', 1)->where('show', 1)->where('status', 1)->where('del', 2);
+              })
+              ->orderBy('order', 'desc')->get();
+        }
+        if (count($auth_list) !== 0) {
+          $list[] = [
+            "id" => $item->id,
+            "name" => $item->name,
+            "title" => $item->title,
+            "icon" => $item->icon,
+            "status" => $item->status,
+            "children" => $auth_list
+          ];
+        }
+      }
+    }
+    return Yo::echo([
+      'list' => $list
+    ]);
+  }
+}

api/app/Http/Controllers/AdminAuthGroupController.php

@@ -0,0 +1,71 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use App\Http\Request\EditAdminAuthGroup;
+use App\Models\AdminAuthGroup;
+use Illuminate\Http\Request;
+use Login;
+use Yo;
+
+class AdminAuthGroupController extends Controller
+{
+  public function create(EditAdminAuthGroup $request)
+  {
+    Login::admin([4]);
+    $admin_auth_group = new AdminAuthGroup();
+    $admin_auth_group->name = $request->post('name');
+    $admin_auth_group->admin_auths = $request->post('admin_auths');
+    $admin_auth_group->remark = $request->post('remark') ?? '';
+    $admin_auth_group->status = $request->post('status');
+    $admin_auth_group->save();
+    return Yo::echo([
+      'info' => $admin_auth_group
+    ]);
+  }
+
+  public function update(EditAdminAuthGroup $request)
+  {
+    Login::admin([4]);
+    $admin_auth_group = AdminAuthGroup::where('id', $request->post('id'))
+      ->where('del', 2)->first();
+    if (!$admin_auth_group) Yo::error_echo(100001, ['权限组']);
+    $admin_auth_group->name = $request->post('name');
+    $admin_auth_group->admin_auths = $request->post('admin_auths');
+    $admin_auth_group->remark = $request->post('remark') ?? '';
+    $admin_auth_group->status = $request->post('status');
+    $admin_auth_group->save();
+    return Yo::echo([
+      'info' => $admin_auth_group
+    ]);
+  }
+
+  public function delete(Request $request)
+  {
+    Login::admin([4]);
+    $admin_auth_group = AdminAuthGroup::where('id', $request->post('id'))
+      ->where('del', 2)->first();
+    if (!$admin_auth_group) Yo::error_echo(100001, ['权限组']);
+    $admin_auth_group->del = 1;
+    $admin_auth_group->save();
+    return Yo::delete_echo($admin_auth_group->id);
+  }
+
+  public function list(Request $request)
+  {
+    Login::admin();
+    $admin_auth_group = AdminAuthGroup::where('del', 2)->get();
+    return Yo::echo([
+      'list' => $admin_auth_group
+    ]);
+  }
+
+  public function select(Request $request)
+  {
+    Login::admin();
+    $admin_auth_group = AdminAuthGroup::where('del', 2)->get();
+    return Yo::echo([
+      'list' => $admin_auth_group
+    ]);
+  }
+}

api/app/Http/Controllers/AdminController.php

@@ -0,0 +1,214 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use App\Http\Request\EditAdmin;
+use App\Http\Request\UpdateAdminInfo;
+use App\Models\Admin;
+use App\Models\AdminAccount;
+use App\Models\AdminToken;
+use App\Models\Config;
+use Illuminate\Http\Request;
+use Yo;
+use Login;
+use Illuminate\Support\Str;
+
+class AdminController extends Controller
+{
+  public function create(EditAdmin $request)
+  {
+    Login::admin([5]);
+    $account = $request->post('account');
+    $admin_account = AdminAccount::where('account', $account)->where('type', 1)->where('del', 2)->first();
+    if ($admin_account) Yo::error_echo(100023);
+    $admin = new Admin();
+    $admin->nickname = $request->post('nickname');
+    $admin->avatar = $request->post('avatar');
+    $admin->admin_auth_group = $request->post('admin_auth_group');
+    $admin->initial_password = $request->post('initial_password');
+    $admin->status = $request->post('status');
+    $admin->save();
+    $admin_account = new AdminAccount();
+    $admin_account->admin = $admin->id;
+    $admin_account->account = $account;
+    $admin_account->secret = bcrypt($request->post('password'));
+    $admin_account->type = 1;
+    $admin_account->save();
+    $admin_info = Admin::select(['id', 'nickname', 'avatar', 'status', 'admin_auth_group', 'initial_password'])
+      ->selectRaw("IFNULL((select account from admin_accounts where admin_accounts.admin = admins.id and type = 1),'') as account")
+      ->selectRaw("IFNULL((select name from admin_auth_groups where admin_auth_groups.id = admins.admin_auth_group),'') as admin_auth_group_name")
+      ->where('id', $admin->id)->first();
+    return Yo::echo([
+      'info' => $admin_info
+    ]);
+  }
+
+  public function update(EditAdmin $request)
+  {
+    Login::admin([5]);
+    $id = $request->post('id');
+    $account = $request->post('account');
+    $admin_account = AdminAccount::where('admin', '!=', $id)->where('account', $account)->where('type', 1)->where('del', 2)->first();
+    if ($admin_account) Yo::error_echo(100023);
+    $admin = Admin::where('id', $id)->where('del', 2)->first();
+    if (!$admin) Yo::error_echo(100001, ['管理员']);
+    $admin_account = AdminAccount::where('admin', $id)->where('del', 2)->first();
+    if (!$admin_account) Yo::error_echo(100001, ['管理员']);
+    $admin->nickname = $request->post('nickname');
+    $admin->avatar = $request->post('avatar');
+    $admin->admin_auth_group = $request->post('admin_auth_group');
+    $admin->initial_password = $request->post('initial_password');
+    $admin->status = $request->post('status');
+    $admin->save();
+    if ($admin_account->account != $account) {
+      $admin_account->account = $request->post('account');
+      $admin_account->save();
+    }
+    $admin_info = Admin::select(['id', 'nickname', 'avatar', 'status', 'admin_auth_group', 'initial_password'])
+      ->selectRaw("IFNULL((select account from admin_accounts where admin_accounts.admin = admins.id and type = 1),'') as account")
+      ->selectRaw("IFNULL((select name from admin_auth_groups where admin_auth_groups.id = admins.admin_auth_group),'') as admin_auth_group_name")
+      ->where('id', $admin->id)->first();
+    return Yo::echo([
+      'info' => $admin_info
+    ]);
+  }
+
+  public function delete(Request $request)
+  {
+    Login::admin([5]);
+    $id = $request->post('id');
+    $admin = Admin::where('id', $id)->where('del', 2)->first();
+    if (!$admin) Yo::error_echo(100001, ['管理员']);
+    $admin_account = AdminAccount::where('admin', $id)->where('del', 2)->first();
+    if (!$admin_account) Yo::error_echo(100001, ['管理员']);
+    $admin->del = 1;
+    $admin->save();
+    $admin_account->del = 1;
+    $admin_account->save();
+    return Yo::delete_echo($admin->id);
+  }
+
+  public function list(Request $request)
+  {
+    Login::admin([5]);
+    $status = $request->post('status');
+    $search = $request->post('search');
+    $admin_auth_group = $request->post('admin_auth_group');
+    $initial_password = $request->post('initial_password');
+    $admin_list = Admin::select(['id', 'nickname', 'avatar', 'status', 'admin_auth_group', 'initial_password'])
+      ->selectRaw("IFNULL((select account from admin_accounts where admin_accounts.admin = admins.id and type = 1),'') as account")
+      ->selectRaw("IFNULL((select name from admin_auth_groups where admin_auth_groups.id = admins.admin_auth_group),'') as admin_auth_group_name")
+      ->where(function ($query) use ($status) {
+        if ($status != 0) $query->where('status', $status);
+      })
+      ->where(function ($query) use ($admin_auth_group) {
+        if ($admin_auth_group != 0) $query->where('admin_auth_group', $admin_auth_group);
+      })
+      ->where(function ($query) use ($initial_password) {
+        if ($initial_password != 0) $query->where('initial_password', $initial_password);
+      })
+      ->where(function ($query) use ($search) {
+        if ($search != '') $query->where('nickname', 'like', "%$search%");
+      })
+      ->where('del', 2)
+      ->paginate(20);
+    return Yo::echo([
+      'list' => $admin_list
+    ]);
+  }
+
+  public function quit()
+  {
+    Login::admin_check();
+    if (!!Login::$token) {
+      Login::$token->del = 1;
+      Login::$token->save();
+    }
+    return Yo::echo();
+  }
+
+  public function update_self(UpdateAdminInfo $request)
+  {
+    Login::admin();
+    $nickname = $request->post('nickname');
+    $avatar = $request->post('avatar');
+    Login::$info->nickname = $nickname;
+    Login::$info->avatar = $avatar;
+    Login::$info->save();
+    return Yo::update_echo(Login::$info->id);
+  }
+
+  public function login(Request $request)
+  {
+    $captcha_type_config = Config::where('name', '后台密码登录验证')->first();
+    if (!!$captcha_type_config) {
+      if ($captcha_type_config->value != '0') {
+        $hash = $request->post('hash');
+        $code = $request->post('code');
+        $time = $request->post('time');
+        $uuid = $request->post('uuid');
+        $captcha = null;
+        switch ($captcha_type_config->value) {
+          case '1':
+            $captcha = new ImageCaptchaController();
+            break;
+        }
+        $captcha_check = $captcha->check($hash, $code, $time, $uuid);
+        if ($captcha_check != 0) Yo::error_echo($captcha_check);
+      }
+    }
+    $account = $request->post('account');
+    $password = $request->post('password');
+    $type = 1;
+    $admin_account = AdminAccount::where('account', $account)
+      ->where('type', $type)
+      ->where('del', 2)
+      ->first();
+    if (!$admin_account) Yo::error_echo(100007);
+    if (!password_verify($password, $admin_account->secret)) Yo::error_echo(100007);
+    $admin = Admin::where('id', $admin_account->admin)
+      ->where('status', 1)
+      ->where('del', 2)
+      ->first();
+    if (!$admin) Yo::error_echo(100003);
+    Login::$info = $admin;
+    Login::$type = 'admin';
+    $token = $this->create_token($admin, $type);
+    return Yo::echo([
+      'token' => $token
+    ]);
+  }
+
+  public function status()
+  {
+    Login::admin();
+    return Yo::echo();
+  }
+
+  public function info()
+  {
+    Login::admin();
+    return Yo::echo([
+      'info' => [
+        'id' => Login::$info->id,
+        'nickname' => Login::$info->nickname,
+        'avatar' => Login::$info->avatar,
+        'initial_password' => Login::$info->initial_password,
+      ]
+    ]);
+  }
+
+  public function create_token($info, $type = 1): string
+  {
+    if ($info->status != 1) Yo::error_echo(100003);
+    if ($info->del != 2) Yo::error_echo(100003);
+    $token_str = Str::orderedUuid();
+    $token = new AdminToken();
+    $token->admin = $info->id;
+    $token->token = $token_str;
+    // $type 1-密码登录
+    $token->type = $type;
+    $token->save();
+    return $token_str;
+  }
+}

api/app/Http/Controllers/ConfigController.php

@@ -0,0 +1,105 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use App\Http\Request\EditConfig;
+use App\Models\Config;
+use Illuminate\Http\Request;
+use Login;
+use Yo;
+
+class ConfigController extends Controller
+{
+  public function create(EditConfig $request)
+  {
+    Login::admin([7]);
+    $config = new Config();
+    $config->name = $request->post('name');
+    $config->value = $request->post('value') ?? '';
+    $config->type = $request->post('type');
+    $config->client = $request->post('client');
+    $config->login = $request->post('login');
+    $config->remark = $request->post('remark') ?? '';
+    $config->save();
+    $config = Config::find($config->id);
+    if (in_array($config->type, [3, 4, 5])) $config->value = json_decode($config->value, true);
+    return Yo::echo([
+      'info' => $config
+    ]);
+  }
+
+  public function update(EditConfig $request)
+  {
+    Login::admin([7]);
+    $config = Config::where('id', $request->post('id'))->first();
+    if (!$config) Yo::error_echo(100001, ['配置']);
+    $config->name = $request->post('name');
+    $config->value = $request->post('value');
+    $config->type = $request->post('type');
+    $config->client = $request->post('client');
+    $config->login = $request->post('login');
+    $config->remark = $request->post('remark') ?? '';
+    $config->save();
+    if (in_array($config->type, [3, 4, 5])) $config->value = json_decode($config->value, true);
+    return Yo::echo([
+      'info' => $config
+    ]);
+  }
+
+  public function delete(Request $request)
+  {
+    Login::admin([7]);
+    $config = Config::where('id', $request->post('id'))->first();
+    if (!$config) Yo::error_echo(100001, ['配置']);
+    $config->delete();
+    if (in_array($config->type, [3, 4, 5])) $config->value = json_decode($config->value, true);
+    return Yo::delete_echo($config->id);
+  }
+
+  public function list()
+  {
+    Login::admin([7]);
+    $config = Config::get();
+    foreach ($config as $item) {
+      if (in_array($item->type, [3, 4, 5])) $item->value = json_decode($item->value, true);
+    }
+    return Yo::echo([
+      'list' => $config
+    ]);
+  }
+
+  public function get(Request $request)
+  {
+    $client = $request->get('client');
+    if (!$client) $client = 'public';
+    $client_number = 0;
+    switch ($client) {
+      case 'admin':
+        $client_number = 1;
+        Login::admin_check();
+        break;
+    }
+    $config_arr = $request->post('config_arr');
+    if (!$config_arr) $config_arr = [];
+    $configs = $this->getConfigList($config_arr, $client_number);
+    return Yo::echo($configs);
+  }
+
+  public function getConfigList($arr, $client)
+  {
+    $config_arr = [];
+    foreach ($arr as $item) $config_arr[$item] = '';
+    $config_db = Config::whereIn('name', $arr);
+    if (!Login::$info) $config_db->where('login', 2);
+    if ($client != 0) $config_db->whereIn('client', [0, $client]);
+    $config = $config_db->get();
+    foreach ($config as $item) {
+      $value = $item->value;
+      if (in_array($item->type, [3, 4, 5])) {
+        $value = json_decode($value, true);
+      }
+      $config_arr[$item->name] = $value;
+    }
+    return $config_arr;
+  }
+}

api/app/Http/Controllers/Controller.php

@@ -0,0 +1,18 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use Illuminate\Foundation\Auth\Access\AuthorizesRequests;
+use Illuminate\Foundation\Validation\ValidatesRequests;
+use Illuminate\Routing\Controller as BaseController;
+use Lu;
+
+class Controller extends BaseController
+{
+  use AuthorizesRequests, ValidatesRequests;
+
+  public function __construct()
+  {
+    Lu::RequestLog();
+  }
+}

api/app/Http/Controllers/ImageCaptchaController.php

@@ -0,0 +1,113 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use App\Models\ImageCaptcha;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Hash;
+use Illuminate\Support\Facades\Storage;
+use Illuminate\Support\Str;
+use Yo;
+
+class ImageCaptchaController extends Controller
+{
+  public function check($hash, $code, $time, $uuid)
+  {
+    $code = mb_strtoupper($code);
+    $captcha = ImageCaptcha::where('uuid', $uuid)->first();
+    if ($captcha) return 100005;
+    if (time() - $time > 60 * 3) return 100005;
+    if (Hash::check($code . ',Captcha,' . $uuid . ',' . $time, $hash)) {
+      $captcha = new ImageCaptcha();
+      $captcha->uuid = $uuid;
+      $captcha->save();
+      return 0;
+    } else {
+      return 100006;
+    }
+  }
+
+  public function create()
+  {
+    $captcha = $this->generateCaptcha();
+    $imageBase64 = $this->getImageBase64($captcha['image']);
+    $time = time();
+    $uuid = Str::orderedUuid();
+    $code = mb_strtoupper($captcha['code']);
+    $hash = Hash::make($code . ',Captcha,' . $uuid . ',' . $time);
+    $ret = [
+      'image' => $imageBase64,
+      'hash' => $hash,
+      'time' => $time,
+      'uuid' => $uuid,
+    ];
+    if (app()->isLocal()) {
+      $ret['code'] = $code;
+      $ret['account'] = 'admin';
+      $ret['password'] = '000000';
+    }
+    return Yo::echo($ret);
+  }
+
+  private function generateCaptcha()
+  {
+    $code = $this->generateRandomCode();
+    $image = $this->generateImage($code);
+    return [
+      'code' => $code,
+      'image' => $image
+    ];
+  }
+
+  private function generateRandomCode()
+  {
+    $code = '';
+    $characters = '34acdefhkmnprstwxyACDEFGHKMNPQRWXY';
+    for ($i = 0; $i < 6; $i++) {
+      $code .= $characters[rand(0, strlen($characters) - 1)];
+    }
+    return $code;
+  }
+
+  private function generateImage($code)
+  {
+    $draw_width = 120;
+    $draw_height = 40;
+    $image = imagecreate($draw_width, $draw_height);
+    imagecolorallocate($image, 255, 255, 255);
+    for ($i = 0; $i < 100; $i++) {
+      $x = rand(0, 120);
+      $y = rand(0, 40);
+      $color = imagecolorallocate($image, rand(0, 255), rand(0, 255), rand(0, 255));
+      imagesetpixel($image, $x, $y, $color);
+    }
+    for ($i = 0; $i < 5; $i++) {
+      $x1 = rand(0, 120);
+      $y1 = rand(0, 40);
+      $x2 = rand(0, 120);
+      $y2 = rand(0, 40);
+      $color = imagecolorallocate($image, rand(0, 255), rand(0, 255), rand(0, 255));
+      imageline($image, $x1, $y1, $x2, $y2, $color);
+    }
+    $font_file = 'assets/captcha.ttf';
+    $original_path = Storage::disk('public')->path($font_file);
+    $code_size = 26;
+    for ($i = 0; $i < mb_strlen($code); $i++) {
+      $c = mb_substr($code, $i, 1);
+      $r = rand(-20, 20);
+      $c_box = imagettfbbox($code_size, $r, $original_path, $c);
+      imagettftext($image, $code_size, $r, 2 + ceil((18 - $c_box[2]) / 2) + (18 * $i), ceil(($draw_height - $c_box[5]) / 2),
+        imagecolorallocate($image, rand(0, 200), rand(0, 200), rand(0, 200)), $original_path, $c);
+    }
+    ob_start();
+    imagepng($image);
+    $imageData = ob_get_clean();
+    return $imageData;
+  }
+
+  private function getImageBase64($imageData)
+  {
+    $imageBase64 = base64_encode($imageData);
+    return 'data:image/png;base64,' . $imageBase64;
+  }
+}

api/app/Http/Controllers/RequestLogController.php

@@ -0,0 +1,90 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use App\Models\Upload;
+use Illuminate\Support\Facades\DB;
+use Lu;
+use Yo;
+use Login;
+use Illuminate\Http\Request;
+use function Symfony\Component\Translation\t;
+
+class RequestLogController extends Controller
+{
+  public function txt(Request $request)
+  {
+    Login::admin([9]);
+    $id = $request->post('id');
+    $type = $request->post('type');
+    $log = DB::table('zz_request_log_' . date('ym', strtotime($request->post('created_at'))))->where('id', $id)->first();
+    if (!$log) Yo::error_echo(100001, ['日志']);
+    $content = file_get_contents(base_path("/storage/app/$log->input"));
+    $sections = explode('-------------------------------', $content);
+    $data = '{}';
+    if ($type == 'input') {
+      $post = self::txtClear($sections[0], 1);
+      $header = self::txtClear($sections[1], 1);
+      $data = '{
+  "params":' . $log->params . ',
+  "input":' . $post . ',
+  "header":' . $header . '
+}';
+    } else {
+      $result = self::txtClear($sections[2], 0);
+      $data = $result;
+    }
+    return Yo::echo([
+      'data' => $data,
+    ]);
+  }
+
+  public function txtClear($content, $index)
+  {
+    $content_arr = explode("\n", $content);
+    return $content_arr[count($content_arr) - 1 - $index];
+  }
+
+  public function list(Request $request)
+  {
+    Login::admin([9]);
+    $search = $request->post('search');
+    $time = $request->post('time');
+    $method = $request->post('method');
+    $code = $request->post('code');
+    $start_time = !!$time[0] ? Lu::date(strtotime($time[0]), 'Y-m-d') : date('Y-m-01');
+    $end_time = !!$time[1] ? Lu::date(strtotime($time[1]), 'Y-m-d') : date('Y-m-t');
+    $ym_check = [
+      date('Y-m', strtotime($start_time)),
+      date('Y-m', strtotime($end_time)),
+    ];
+    if ($ym_check[0] !== $ym_check[1]) Yo::error_echo(100024);
+    $table_name = 'zz_request_log_' . date('ym', strtotime($start_time));
+    $table_count = DB::select('select count(1) as c from information_schema.TABLES where table_schema = ? and table_name = ?', [env('DB_DATABASE'), $table_name])[0];
+    if ($table_count->c === 0) Yo::error_echo(100001, ['日志表']);
+    $request_list = DB::table($table_name)->where(function ($query) use ($search) {
+      if ($search != '') $query->where('uuid', $search)
+        ->orWhere('token', $search)
+        ->orWhere('url', $search)
+        ->orWhere('ip', $search);
+    })
+      ->where(function ($query) use ($start_time) {
+        if ($start_time != '') $query->where('created_at', '>=', $start_time);
+      })
+      ->where(function ($query) use ($end_time) {
+        if ($end_time != '') $query->where('created_at', '<=', $end_time);
+      })
+      ->where(function ($query) use ($method) {
+        if ($method != '') $query->where('method', $method);
+      })
+      ->where(function ($query) use ($code) {
+        if ($code != '') $query->where('code', $code);
+      })
+      ->orderBy('id', 'desc')
+      ->paginate(20);
+    return Yo::echo([
+      'list' => $request_list,
+      'time' => [$start_time, $end_time],
+    ]);
+  }
+}

api/app/Http/Controllers/UploadController.php

@@ -0,0 +1,110 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use App\Models\Upload;
+use Illuminate\Support\Facades\Storage;
+use Illuminate\Support\Str;
+use Illuminate\Http\Request;
+use Lu;
+use Yo;
+use Login;
+
+class UploadController extends Controller
+{
+  public function search()
+  {
+    $ext = Upload::select('ext')->groupBy('ext')->get();
+    $from = ['AdminImage'];
+    return Yo::echo([
+      'ext' => $ext,
+      'from' => $from,
+    ]);
+  }
+
+  public function list(Request $request)
+  {
+    Login::admin([10]);
+    $search = $request->post('search');
+    $time = $request->post('time');
+    $start_time = !!$time[0] ? Lu::date(strtotime($time[0])) : '';
+    $end_time = !!$time[1] ? Lu::date(strtotime($time[1])) : '';
+    $ext = $request->post('ext');
+    $from = $request->post('from');
+    $from_map = [
+      'AdminImage' => '/api/Admin/Upload/image',
+    ];
+    $from_search = '';
+    if (!!$from) $from_search = $from_map[$from];
+    $upload_list = Upload::where(function ($query) use ($search) {
+      if ($search != '') $query->where('uuid', $search)
+        ->orWhere('name', $search)
+        ->orWhere('md5', $search);
+    })
+      ->where(function ($query) use ($start_time) {
+        if ($start_time != '') $query->where('created_at', '>=', $start_time);
+      })
+      ->where(function ($query) use ($end_time) {
+        if ($end_time != '') $query->where('created_at', '<=', $end_time);
+      })
+      ->where(function ($query) use ($ext) {
+        if ($ext != '') $query->where('ext', $ext);
+      })
+      ->where(function ($query) use ($from_search) {
+        if ($from_search != '') $query->where('from', $from_search);
+      })
+      ->orderBy('id', 'desc')
+      ->paginate(20);
+    return Yo::echo([
+      'list' => $upload_list
+    ]);
+  }
+
+  public function delete(Request $request)
+  {
+    Login::admin([10]);
+    $id = $request->post('id');
+    $upload = Upload::where('id', $id)->first();
+    if (!$upload) Yo::error_echo(100001, ['上传文件']);
+    $upload->delete();
+    unlink($upload->path);
+    return Yo::delete_echo($upload->id);
+  }
+
+  public function image(Request $request)
+  {
+    $base64 = $request->post('base64');
+    if (preg_match('/^(data:\s*image\/(\w+);base64,)/', $base64, $result)) {
+      $type = ['png', 'jpeg', 'jpg', 'gif'];
+      if (!in_array($result[2], $type)) Yo::error_echo(100015);
+      $md5 = md5($base64);
+      $upload = Upload::where('md5', $md5)->first();
+      if (!$upload) {
+        $disk = Storage::disk('public');
+        $name = Str::orderedUuid();
+        $date = date('Y/m');
+        $path = "/assets/upload/image/$date/$name.$result[2]";
+        $put = $disk->put($path, base64_decode(str_replace($result[1], '', $base64)));
+        if (!$put) Yo::error_echo(100016, ['put']);
+        $save = "/storage/assets/upload/image/$date/$name.$result[2]";
+        $size = $disk->size($path);
+        $p = $disk->path($path);
+        $upload = new Upload();
+        $upload->uuid = $name;
+        $upload->name = 'Base64-' . $md5;
+        $upload->path = $p;
+        $upload->url = $save;
+        $upload->from = explode('?', $_SERVER['REQUEST_URI'])[0];
+        $upload->size = $size / 1024 / 1024;
+        $upload->ext = $result[2];
+        $upload->md5 = $md5;
+        $upload->save();
+      }
+      return Yo::echo([
+        'url' => $upload->url
+      ]);
+    } else {
+      Yo::error_echo(100016, ['base64']);
+    }
+  }
+}

api/app/Http/Controllers/YoController.php

@@ -0,0 +1,18 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use Yo as Yoo;
+use Lu;
+
+class YoController extends Controller
+{
+  public function __invoke()
+  {
+    return Yoo::echo([
+      'app_name' => env('APP_NAME'),
+      'datetime' => Lu::date(),
+      'data' => request()->all()
+    ]);
+  }
+}

api/app/Http/Kernel.php

@@ -0,0 +1,68 @@
+<?php
+
+namespace App\Http;
+
+use Illuminate\Foundation\Http\Kernel as HttpKernel;
+
+class Kernel extends HttpKernel
+{
+    /**
+     * The application's global HTTP middleware stack.
+     *
+     * These middleware are run during every request to your application.
+     *
+     * @var array<int, class-string|string>
+     */
+    protected $middleware = [
+        // \App\Http\Middleware\TrustHosts::class,
+        \App\Http\Middleware\TrustProxies::class,
+        \Illuminate\Http\Middleware\HandleCors::class,
+        \App\Http\Middleware\PreventRequestsDuringMaintenance::class,
+        \Illuminate\Foundation\Http\Middleware\ValidatePostSize::class,
+        \App\Http\Middleware\TrimStrings::class,
+        \Illuminate\Foundation\Http\Middleware\ConvertEmptyStringsToNull::class,
+    ];
+
+    /**
+     * The application's route middleware groups.
+     *
+     * @var array<string, array<int, class-string|string>>
+     */
+    protected $middlewareGroups = [
+        'web' => [
+            \App\Http\Middleware\EncryptCookies::class,
+            \Illuminate\Cookie\Middleware\AddQueuedCookiesToResponse::class,
+            \Illuminate\Session\Middleware\StartSession::class,
+            \Illuminate\View\Middleware\ShareErrorsFromSession::class,
+            \App\Http\Middleware\VerifyCsrfToken::class,
+            \Illuminate\Routing\Middleware\SubstituteBindings::class,
+        ],
+
+        'api' => [
+            // \Laravel\Sanctum\Http\Middleware\EnsureFrontendRequestsAreStateful::class,
+            \Illuminate\Routing\Middleware\ThrottleRequests::class.':api',
+            \Illuminate\Routing\Middleware\SubstituteBindings::class,
+        ],
+    ];
+
+    /**
+     * The application's middleware aliases.
+     *
+     * Aliases may be used instead of class names to conveniently assign middleware to routes and groups.
+     *
+     * @var array<string, class-string|string>
+     */
+    protected $middlewareAliases = [
+        'auth' => \App\Http\Middleware\Authenticate::class,
+        'auth.basic' => \Illuminate\Auth\Middleware\AuthenticateWithBasicAuth::class,
+        'auth.session' => \Illuminate\Session\Middleware\AuthenticateSession::class,
+        'cache.headers' => \Illuminate\Http\Middleware\SetCacheHeaders::class,
+        'can' => \Illuminate\Auth\Middleware\Authorize::class,
+        'guest' => \App\Http\Middleware\RedirectIfAuthenticated::class,
+        'password.confirm' => \Illuminate\Auth\Middleware\RequirePassword::class,
+        'precognitive' => \Illuminate\Foundation\Http\Middleware\HandlePrecognitiveRequests::class,
+        'signed' => \App\Http\Middleware\ValidateSignature::class,
+        'throttle' => \Illuminate\Routing\Middleware\ThrottleRequests::class,
+        'verified' => \Illuminate\Auth\Middleware\EnsureEmailIsVerified::class,
+    ];
+}

api/app/Http/Middleware/Authenticate.php

@@ -0,0 +1,17 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use Illuminate\Auth\Middleware\Authenticate as Middleware;
+use Illuminate\Http\Request;
+
+class Authenticate extends Middleware
+{
+    /**
+     * Get the path the user should be redirected to when they are not authenticated.
+     */
+    protected function redirectTo(Request $request): ?string
+    {
+        return $request->expectsJson() ? null : route('login');
+    }
+}

api/app/Http/Middleware/EncryptCookies.php

@@ -0,0 +1,17 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use Illuminate\Cookie\Middleware\EncryptCookies as Middleware;
+
+class EncryptCookies extends Middleware
+{
+    /**
+     * The names of the cookies that should not be encrypted.
+     *
+     * @var array<int, string>
+     */
+    protected $except = [
+        //
+    ];
+}

api/app/Http/Middleware/PreventRequestsDuringMaintenance.php

@@ -0,0 +1,17 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use Illuminate\Foundation\Http\Middleware\PreventRequestsDuringMaintenance as Middleware;
+
+class PreventRequestsDuringMaintenance extends Middleware
+{
+    /**
+     * The URIs that should be reachable while maintenance mode is enabled.
+     *
+     * @var array<int, string>
+     */
+    protected $except = [
+        //
+    ];
+}

api/app/Http/Middleware/RedirectIfAuthenticated.php

@@ -0,0 +1,30 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use App\Providers\RouteServiceProvider;
+use Closure;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Auth;
+use Symfony\Component\HttpFoundation\Response;
+
+class RedirectIfAuthenticated
+{
+    /**
+     * Handle an incoming request.
+     *
+     * @param  \Closure(\Illuminate\Http\Request): (\Symfony\Component\HttpFoundation\Response)  $next
+     */
+    public function handle(Request $request, Closure $next, string ...$guards): Response
+    {
+        $guards = empty($guards) ? [null] : $guards;
+
+        foreach ($guards as $guard) {
+            if (Auth::guard($guard)->check()) {
+                return redirect(RouteServiceProvider::HOME);
+            }
+        }
+
+        return $next($request);
+    }
+}

api/app/Http/Middleware/TrimStrings.php

@@ -0,0 +1,19 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use Illuminate\Foundation\Http\Middleware\TrimStrings as Middleware;
+
+class TrimStrings extends Middleware
+{
+    /**
+     * The names of the attributes that should not be trimmed.
+     *
+     * @var array<int, string>
+     */
+    protected $except = [
+        'current_password',
+        'password',
+        'password_confirmation',
+    ];
+}

api/app/Http/Middleware/TrustHosts.php

@@ -0,0 +1,20 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use Illuminate\Http\Middleware\TrustHosts as Middleware;
+
+class TrustHosts extends Middleware
+{
+    /**
+     * Get the host patterns that should be trusted.
+     *
+     * @return array<int, string|null>
+     */
+    public function hosts(): array
+    {
+        return [
+            $this->allSubdomainsOfApplicationUrl(),
+        ];
+    }
+}

api/app/Http/Middleware/TrustProxies.php

@@ -0,0 +1,28 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use Illuminate\Http\Middleware\TrustProxies as Middleware;
+use Illuminate\Http\Request;
+
+class TrustProxies extends Middleware
+{
+    /**
+     * The trusted proxies for this application.
+     *
+     * @var array<int, string>|string|null
+     */
+    protected $proxies;
+
+    /**
+     * The headers that should be used to detect proxies.
+     *
+     * @var int
+     */
+    protected $headers =
+        Request::HEADER_X_FORWARDED_FOR |
+        Request::HEADER_X_FORWARDED_HOST |
+        Request::HEADER_X_FORWARDED_PORT |
+        Request::HEADER_X_FORWARDED_PROTO |
+        Request::HEADER_X_FORWARDED_AWS_ELB;
+}

api/app/Http/Middleware/ValidateSignature.php

@@ -0,0 +1,22 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use Illuminate\Routing\Middleware\ValidateSignature as Middleware;
+
+class ValidateSignature extends Middleware
+{
+    /**
+     * The names of the query string parameters that should be ignored.
+     *
+     * @var array<int, string>
+     */
+    protected $except = [
+        // 'fbclid',
+        // 'utm_campaign',
+        // 'utm_content',
+        // 'utm_medium',
+        // 'utm_source',
+        // 'utm_term',
+    ];
+}

api/app/Http/Middleware/VerifyCsrfToken.php

@@ -0,0 +1,17 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use Illuminate\Foundation\Http\Middleware\VerifyCsrfToken as Middleware;
+
+class VerifyCsrfToken extends Middleware
+{
+  /**
+   * The URIs that should be excluded from CSRF verification.
+   *
+   * @var array<int, string>
+   */
+  protected $except = [
+    '*'
+  ];
+}

api/app/Http/Request/ChangeAdminPassword.php

@@ -0,0 +1,45 @@
+<?php
+
+namespace App\Http\Request;
+
+use Illuminate\Contracts\Validation\Validator;
+use Illuminate\Foundation\Http\FormRequest;
+use Yo;
+
+class ChangeAdminPassword extends FormRequest
+{
+  /**
+   * Determine if the user is authorized to make this request.
+   *
+   * @return bool
+   */
+  public function authorize()
+  {
+    return true;
+  }
+
+  /**
+   * Get the validation rules that apply to the request.
+   *
+   * @return array
+   */
+  public function rules()
+  {
+    return [
+      'password' => ['required', 'between:6,20'],
+    ];
+  }
+
+  public function messages()
+  {
+    return [
+      'password.required' => 100009,
+      'password.between' => 100010,
+    ];
+  }
+
+  public function failedValidation(Validator $validator)
+  {
+    Yo::error_echo($validator->errors()->first());
+  }
+}

api/app/Http/Request/EditAdmin.php

@@ -0,0 +1,53 @@
+<?php
+
+namespace App\Http\Request;
+
+use Illuminate\Contracts\Validation\Validator;
+use Illuminate\Foundation\Http\FormRequest;
+use Yo;
+
+class EditAdmin extends FormRequest
+{
+  /**
+   * Determine if the user is authorized to make this request.
+   *
+   * @return bool
+   */
+  public function authorize()
+  {
+    return true;
+  }
+
+  /**
+   * Get the validation rules that apply to the request.
+   *
+   * @return array
+   */
+  public function rules()
+  {
+    return [
+      'account' => ['required', 'between:1,50'],
+      'nickname' => ['required', 'between:1,50'],
+      'avatar' => ['between:0,200'],
+      'password' => ['required', 'between:6,20'],
+    ];
+  }
+
+  public function messages()
+  {
+    return [
+      'account.required' => 100020,
+      'account.between' => 100021,
+      'nickname.required' => 100012,
+      'nickname.between' => 100013,
+      'avatar.between' => 100014,
+      'password.required' => 100022,
+      'password.between' => 100010,
+    ];
+  }
+
+  public function failedValidation(Validator $validator)
+  {
+    Yo::error_echo($validator->errors()->first());
+  }
+}

api/app/Http/Request/EditAdminAuth.php

@@ -0,0 +1,52 @@
+<?php
+
+namespace App\Http\Request;
+
+use Illuminate\Contracts\Validation\Validator;
+use Illuminate\Foundation\Http\FormRequest;
+use Yo;
+
+class EditAdminAuth extends FormRequest
+{
+  /**
+   * Determine if the user is authorized to make this request.
+   *
+   * @return bool
+   */
+  public function authorize()
+  {
+    return true;
+  }
+
+  /**
+   * Get the validation rules that apply to the request.
+   *
+   * @return array
+   */
+  public function rules()
+  {
+    return [
+      'name' => ['required', 'between:1,200'],
+      'title' => ['required', 'between:1,20'],
+      'icon' => ['between:0,100'],
+      'message' => ['between:0,50'],
+    ];
+  }
+
+  public function messages()
+  {
+    return [
+      'name.required' => 100025,
+      'name.between' => 100026,
+      'title.required' => 100017,
+      'title.between' => 100018,
+      'icon.between' => 100027,
+      'message.between' => 100028,
+    ];
+  }
+
+  public function failedValidation(Validator $validator)
+  {
+    Yo::error_echo($validator->errors()->first());
+  }
+}

api/app/Http/Request/EditAdminAuthGroup.php

@@ -0,0 +1,47 @@
+<?php
+
+namespace App\Http\Request;
+
+use Illuminate\Contracts\Validation\Validator;
+use Illuminate\Foundation\Http\FormRequest;
+use Yo;
+
+class EditAdminAuthGroup extends FormRequest
+{
+  /**
+   * Determine if the user is authorized to make this request.
+   *
+   * @return bool
+   */
+  public function authorize()
+  {
+    return true;
+  }
+
+  /**
+   * Get the validation rules that apply to the request.
+   *
+   * @return array
+   */
+  public function rules()
+  {
+    return [
+      'name' => ['required', 'between:1,20'],
+      'remark' => ['between:0,100'],
+    ];
+  }
+
+  public function messages()
+  {
+    return [
+      'name.required' => 100017,
+      'name.between' => 100018,
+      'remark.between' => 100019,
+    ];
+  }
+
+  public function failedValidation(Validator $validator)
+  {
+    Yo::error_echo($validator->errors()->first());
+  }
+}

api/app/Http/Request/EditConfig.php

@@ -0,0 +1,47 @@
+<?php
+
+namespace App\Http\Request;
+
+use Illuminate\Contracts\Validation\Validator;
+use Illuminate\Foundation\Http\FormRequest;
+use Yo;
+
+class EditConfig extends FormRequest
+{
+  /**
+   * Determine if the user is authorized to make this request.
+   *
+   * @return bool
+   */
+  public function authorize()
+  {
+    return true;
+  }
+
+  /**
+   * Get the validation rules that apply to the request.
+   *
+   * @return array
+   */
+  public function rules()
+  {
+    return [
+      'name' => ['required', 'between:1,50'],
+      'remark' => ['between:0,100'],
+    ];
+  }
+
+  public function messages()
+  {
+    return [
+      'name.required' => 100031,
+      'name.between' => 100032,
+      'remark.between' => 100019,
+    ];
+  }
+
+  public function failedValidation(Validator $validator)
+  {
+    Yo::error_echo($validator->errors()->first());
+  }
+}

api/app/Http/Request/UpdateAdminInfo.php

@@ -0,0 +1,47 @@
+<?php
+
+namespace App\Http\Request;
+
+use Illuminate\Contracts\Validation\Validator;
+use Illuminate\Foundation\Http\FormRequest;
+use Yo;
+
+class UpdateAdminInfo extends FormRequest
+{
+  /**
+   * Determine if the user is authorized to make this request.
+   *
+   * @return bool
+   */
+  public function authorize()
+  {
+    return true;
+  }
+
+  /**
+   * Get the validation rules that apply to the request.
+   *
+   * @return array
+   */
+  public function rules()
+  {
+    return [
+      'nickname' => ['required', 'between:1,50'],
+      'avatar' => ['between:0,200'],
+    ];
+  }
+
+  public function messages()
+  {
+    return [
+      'nickname.required' => 100012,
+      'nickname.between' => 100013,
+      'avatar.between' => 100014,
+    ];
+  }
+
+  public function failedValidation(Validator $validator)
+  {
+    Yo::error_echo($validator->errors()->first());
+  }
+}

api/app/Libraries/Login.php

@@ -0,0 +1,77 @@
+<?php
+
+use App\Models\Admin;
+use App\Models\AdminAuth;
+use App\Models\AdminToken;
+use App\Models\AdminAuthGroup;
+
+class Login
+{
+  public static $info;
+  public static $type;
+  public static $token;
+
+  public static function check_admin_auth($auth = 0): array
+  {
+    if (self::$info->id === 1) return ['code' => 0];
+    if (self::$info->admin_auth_group === -1) return ['code' => 0];
+    $auth = AdminAuth::where('id', $auth)->where('status', 1)->where('del', 2)->first();
+    if (!$auth) return ['code' => 100004, 'message' => '权限不足'];
+    if (self::$info->admin_auth_group === 0) {
+      if ($auth->check !== 1) return ['code' => 100004, 'message' => '权限不足'];
+    } else {
+      if ($auth->check === 1) return ['code' => 0];
+      $admin_auth = AdminAuthGroup::select('id')
+        ->where('id', self::$info->admin_auth_group)
+        ->where('del', 2)
+        ->first();
+      if (!$admin_auth) return ['code' => 100004, 'message' => '权限不足'];
+      if ($admin_auth->status != 1) return ['code' => 100004, 'message' => !!$admin_auth->message ? $admin_auth->message : '权限不足'];
+      $admin_auths = json_decode($admin_auth, true);
+      if (!in_array((string)$auth, $admin_auths)) return ['code' => 100004, 'message' => !!$admin_auth->message ? $admin_auth->message : '权限不足'];
+    }
+    return ['code' => 0];
+  }
+
+  public static function admin_check($auths = [], $or_ids = []): array
+  {
+    if (!request()->header('Authorization')) return ['code' => 100002];
+    $token_arr = explode('Bearer ', request()->header('Authorization'));
+    if (!isset($token_arr[1])) return ['code' => 100002];
+    $token = $token_arr[1];
+    if (!$token) return ['code' => 100002];
+    $admin_token = AdminToken::where('token', $token)->where('del', 2)->where('updated_at', '>', Lu::date(time() - (60 * 60 * 24 * 3)))->first();
+    if (!$admin_token) return ['code' => 100002];
+    $admin = Admin::where('id', $admin_token->admin)->where('del', 2)->where('status', 1)->first();
+    if (!$admin) return ['code' => 100003];
+    self::$info = $admin;
+    self::$token = $admin_token;
+    self::$type = 'admin';
+    foreach ($auths as $item) {
+      $auth_check_res = self::check_admin_auth($item);
+      if ($auth_check_res['code'] != 0) return $auth_check_res;
+    }
+    $ret = 0;
+    $ret_code = ['code' => 0];
+    foreach ($or_ids as $item) {
+      $auth_check_res = self::check_admin_auth($item);
+      if ($auth_check_res['code'] == 0) {
+        $ret++;
+      } else {
+        $ret_code = $auth_check_res;
+      }
+    }
+    if ($ret == 0 && $ret_code != 0) return $ret_code;
+    $admin_token->updated_at = Lu::date();
+    $admin_token->save();
+    return ['code' => 0];
+  }
+
+  public static function admin($auths = [], $or_ids = [])
+  {
+    $check_res = self::admin_check($auths, $or_ids);
+    if ($check_res['code'] != 0) Yo::error_echo($check_res['code'], [
+      isset($check_res['message']) && !!$check_res['message'] ? $check_res['message'] : ''
+    ]);
+  }
+}

api/app/Libraries/Lu.php

@@ -0,0 +1,185 @@
+<?php
+
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+use Illuminate\Support\Facades\DB;
+use Illuminate\Support\Facades\Storage;
+use Illuminate\Support\Str;
+
+class Lu
+{
+
+  public static $request = null;
+  public static $spend = 0;
+  public static $path = '';
+
+  public static function CheckTableName()
+  {
+    $table_name = 'zz_request_log_' . date('ym');
+    $table_count = DB::select('select count(1) as c from information_schema.TABLES where table_schema = ? and table_name = ?', [env('DB_DATABASE'), $table_name])[0];
+    if ($table_count->c === 0) {
+      Schema::create($table_name, function (Blueprint $table) {
+        $table->id();
+        $table->string('uuid', 50);
+        $table->string('token', 50);
+        $table->string('ip', 15);
+        $table->string('url', 300);
+        $table->string('method', 10);
+        $table->longtext('params');
+        $table->tinyInteger('type')->comment('1-文字 2-文件');
+        $table->longtext('input');
+        $table->longtext('header');
+        $table->string('code', 10)->nullable();
+        $table->text('result')->nullable();
+        $table->decimal('spend', 6, 3)->nullable();
+        $table->timestamps();
+      });
+    }
+    self::$request = new \App\Models\RequestLog;
+    self::$request->setTable($table_name);
+  }
+
+  public static function RequestLog()
+  {
+    if ($_SERVER['REQUEST_METHOD'] !== 'OPTIONS' && env('REQUEST_LOG') && !self::$request) {
+      self::CheckTableName();
+      self::$spend = self::time();
+      $token = '';
+      if (!!request()->header('Authorization')) {
+        $token_arr = explode('Bearer ', request()->header('Authorization'));
+        $token = $token_arr[1] ?? '';
+      }
+      $uuid = Str::orderedUuid();
+      $date = date('Y/m/d');
+      self::$path = "log/$date/$uuid.txt";
+      self::$request->uuid = $uuid;
+      self::$request->token = $token;
+      self::$request->ip = self::ip();
+      self::$request->url = explode('?', $_SERVER['REQUEST_URI'])[0];
+      self::$request->method = $_SERVER['REQUEST_METHOD'];
+      $type = 1;
+      $input_data = !!request()->post() ? json_encode(request()->post(), JSON_UNESCAPED_UNICODE) : '{}';
+      $str_len = mb_strlen($input_data);
+      $str_size = $str_len / 1024;
+      if ($str_size > 40) $type = 2;
+      $params_data = !!$_GET ? json_encode($_GET, JSON_UNESCAPED_UNICODE) : '{}';
+      $header_data = !!request()->header() ? self::transformedHeaders() : '{}';
+      $str_len = mb_strlen($header_data);
+      $str_size = $str_len / 1024;
+      if ($str_size > 40) $type = 2;
+      self::$request->input = $input_data;
+      self::$request->params = $params_data;
+      self::$request->header = $header_data;
+      self::$request->type = $type;
+      self::$request->save();
+    }
+  }
+
+  public static function transformedHeaders()
+  {
+    $header_data = request()->header();
+    $header = [];
+    foreach ($header_data as $key => $header_datum) {
+      if (count($header_datum) == 1) {
+        $header[$key] = $header_datum[0];
+      } else {
+        $header[$key] = $header_datum;
+      }
+    }
+    return json_encode($header, JSON_UNESCAPED_UNICODE);
+  }
+
+  public static function ip()
+  {
+    if (getenv('HTTP_CLIENT_IP') && strcasecmp(getenv('HTTP_CLIENT_IP'), 'unknown')) {
+      $ip = getenv('HTTP_CLIENT_IP');
+    } elseif (getenv('HTTP_X_FORWARDED_FOR') && strcasecmp(getenv('HTTP_X_FORWARDED_FOR'), 'unknown')) {
+      $ip = getenv('HTTP_X_FORWARDED_FOR');
+    } elseif (getenv('REMOTE_ADDR') && strcasecmp(getenv('REMOTE_ADDR'), 'unknown')) {
+      $ip = getenv('REMOTE_ADDR');
+    } elseif (isset($_SERVER['REMOTE_ADDR']) && $_SERVER['REMOTE_ADDR'] && strcasecmp($_SERVER['REMOTE_ADDR'], 'unknown')) {
+      $ip = $_SERVER['REMOTE_ADDR'];
+    }
+    $res = preg_match('/[\d\.]{7,15}/', $ip, $matches) ? $matches [0] : '';
+    return $res;
+  }
+
+  public static function date($time = false, $format = "Y-m-d H:i:s")
+  {
+    if (!$time) $time = time();
+    return date($format, $time);
+  }
+
+  public static function time()
+  {
+    return floor(microtime(true) * 1000);
+  }
+
+  public static function exit($data = [])
+  {
+    $res = $data;
+    if ($_SERVER['REQUEST_METHOD'] !== 'OPTIONS' && env('REQUEST_LOG') && !!self::$request) {
+      $data_str = !!$data ? json_encode($data, JSON_UNESCAPED_UNICODE) : '{}';
+      $str_len = strlen($data_str);
+      $str_size = $str_len / 1024;
+      $type = self::$request->type;
+      if ($str_size > 40) $type = 2;
+      if ($type == 2) {
+        $input_data = self::$request->input;
+        $header_data = self::$request->header;
+        $disk = Storage::disk('local');
+        $disk->append(self::$path, "POST:
+$input_data
+-------------------------------
+HEADER:
+$header_data
+-------------------------------
+RESULT:
+$data_str");
+        self::$request->input = self::$path;
+        self::$request->header = self::$path;
+        self::$request->result = self::$path;
+        self::$request->type = 2;
+      } else {
+        self::$request->result = $data_str;
+      }
+      self::$request->code = (isset($data['code']) && !!$data['code']) ? $data['code'] : 0;
+      self::$request->spend = (self::time() - self::$spend) / 1000;
+      self::$request->save();
+    }
+    return response()->json($res)->setEncodingOptions(JSON_UNESCAPED_UNICODE);
+  }
+
+  public static function echo($message = '', $code = 200, $data = [])
+  {
+    $return = [];
+    $return['code'] = intval($code);
+    if ($message) $return['message'] = $message;
+    if ($data) $return['data'] = $data;
+    return self::exit($return);
+  }
+
+  public static function post($url, $data, $type = 'json')
+  {
+    $curl = curl_init();
+    curl_setopt($curl, CURLOPT_URL, $url);
+    curl_setopt($curl, CURLOPT_RETURNTRANSFER, true);
+    curl_setopt($curl, CURLOPT_POST, true);
+    if ($type === 'data') {
+      curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, false);
+      curl_setopt($curl, CURLOPT_POSTFIELDS, $data);
+      curl_setopt($curl, CURLOPT_FOLLOWLOCATION, true);
+    }
+    if ($type === 'json') {
+      $data_string = json_encode($data, JSON_UNESCAPED_UNICODE);
+      curl_setopt($curl, CURLOPT_HTTPHEADER, [
+        'Content-Type: application/json; charset=utf-8',
+        'Content-Length: ' . strlen($data_string)
+      ]);
+      curl_setopt($curl, CURLOPT_POSTFIELDS, $data_string);
+    }
+    $r = curl_exec($curl);
+    curl_close($curl);
+    return $r;
+  }
+}

api/app/Libraries/Yo.php

@@ -0,0 +1,39 @@
+<?php
+
+use Illuminate\Http\Exceptions\HttpResponseException;
+use Illuminate\Support\Str;
+
+class Yo
+{
+  public static function create_echo($id = 0)
+  {
+    return Lu::echo(config('code.200.c'), 200, ['id' => $id]);
+  }
+
+  public static function delete_echo($id = 0)
+  {
+    return Lu::echo(config('code.200.d'), 200, ['id' => $id]);
+  }
+
+  public static function update_echo($id = 0)
+  {
+    return Lu::echo(config('code.200.u'), 200, ['id' => $id]);
+  }
+
+  public static function error_echo($code, $replace = [])
+  {
+    $msg = config("code.{$code}");
+    if (count($replace)) $msg = Str::replaceArray('?', $replace, $msg);
+    throw new HttpResponseException(Lu::echo($msg, $code));
+  }
+
+  public static function debug($data)
+  {
+    throw new HttpResponseException(Lu::echo('Debug', 100000, $data));
+  }
+
+  public static function echo($data = [])
+  {
+    return Lu::echo(config('code.200.r'), 200, $data);
+  }
+}

api/app/Models/Admin.php

@@ -0,0 +1,10 @@
+<?php
+
+namespace App\Models;
+
+use Illuminate\Database\Eloquent\Factories\HasFactory;
+
+class Admin extends Model
+{
+  use HasFactory;
+}

api/app/Models/AdminAccount.php

@@ -0,0 +1,10 @@
+<?php
+
+namespace App\Models;
+
+use Illuminate\Database\Eloquent\Factories\HasFactory;
+
+class AdminAccount extends Model
+{
+  use HasFactory;
+}

api/app/Models/AdminAuth.php

@@ -0,0 +1,10 @@
+<?php
+
+namespace App\Models;
+
+use Illuminate\Database\Eloquent\Factories\HasFactory;
+
+class AdminAuth extends Model
+{
+  use HasFactory;
+}

api/app/Models/AdminAuthGroup.php

@@ -0,0 +1,10 @@
+<?php
+
+namespace App\Models;
+
+use Illuminate\Database\Eloquent\Factories\HasFactory;
+
+class AdminAuthGroup extends Model
+{
+  use HasFactory;
+}

api/app/Models/AdminToken.php

@@ -0,0 +1,10 @@
+<?php
+
+namespace App\Models;
+
+use Illuminate\Database\Eloquent\Factories\HasFactory;
+
+class AdminToken extends Model
+{
+  use HasFactory;
+}

api/app/Models/Config.php

@@ -0,0 +1,10 @@
+<?php
+
+namespace App\Models;
+
+use Illuminate\Database\Eloquent\Factories\HasFactory;
+
+class Config extends Model
+{
+  use HasFactory;
+}

api/app/Models/ImageCaptcha.php

@@ -0,0 +1,10 @@
+<?php
+
+namespace App\Models;
+
+use Illuminate\Database\Eloquent\Factories\HasFactory;
+
+class ImageCaptcha extends Model
+{
+  use HasFactory;
+}

api/app/Models/Model.php

@@ -0,0 +1,14 @@
+<?php
+
+namespace App\Models;
+
+use DateTimeInterface;
+use Illuminate\Database\Eloquent\Model as M;
+
+class Model extends M
+{
+  public function serializeDate(DateTimeInterface $date)
+  {
+    return $date->format('Y-m-d H:i:s');
+  }
+}

api/app/Models/RequestLog.php

@@ -0,0 +1,10 @@
+<?php
+
+namespace App\Models;
+
+use Illuminate\Database\Eloquent\Factories\HasFactory;
+
+class RequestLog extends Model
+{
+  use HasFactory;
+}

api/app/Models/Upload.php

@@ -0,0 +1,10 @@
+<?php
+
+namespace App\Models;
+
+use Illuminate\Database\Eloquent\Factories\HasFactory;
+
+class Upload extends Model
+{
+  use HasFactory;
+}

api/app/Providers/AppServiceProvider.php

@@ -0,0 +1,25 @@
+<?php
+
+namespace App\Providers;
+
+use Illuminate\Support\Carbon;
+use Illuminate\Support\ServiceProvider;
+
+class AppServiceProvider extends ServiceProvider
+{
+  /**
+   * Register any application services.
+   */
+  public function register(): void
+  {
+    //
+  }
+
+  /**
+   * Bootstrap any application services.
+   */
+  public function boot(): void
+  {
+    //
+  }
+}

api/app/Providers/AuthServiceProvider.php

@@ -0,0 +1,26 @@
+<?php
+
+namespace App\Providers;
+
+// use Illuminate\Support\Facades\Gate;
+use Illuminate\Foundation\Support\Providers\AuthServiceProvider as ServiceProvider;
+
+class AuthServiceProvider extends ServiceProvider
+{
+    /**
+     * The model to policy mappings for the application.
+     *
+     * @var array<class-string, class-string>
+     */
+    protected $policies = [
+        //
+    ];
+
+    /**
+     * Register any authentication / authorization services.
+     */
+    public function boot(): void
+    {
+        //
+    }
+}

api/app/Providers/BroadcastServiceProvider.php

@@ -0,0 +1,19 @@
+<?php
+
+namespace App\Providers;
+
+use Illuminate\Support\Facades\Broadcast;
+use Illuminate\Support\ServiceProvider;
+
+class BroadcastServiceProvider extends ServiceProvider
+{
+    /**
+     * Bootstrap any application services.
+     */
+    public function boot(): void
+    {
+        Broadcast::routes();
+
+        require base_path('routes/channels.php');
+    }
+}

api/app/Providers/EventServiceProvider.php

@@ -0,0 +1,38 @@
+<?php
+
+namespace App\Providers;
+
+use Illuminate\Auth\Events\Registered;
+use Illuminate\Auth\Listeners\SendEmailVerificationNotification;
+use Illuminate\Foundation\Support\Providers\EventServiceProvider as ServiceProvider;
+use Illuminate\Support\Facades\Event;
+
+class EventServiceProvider extends ServiceProvider
+{
+    /**
+     * The event to listener mappings for the application.
+     *
+     * @var array<class-string, array<int, class-string>>
+     */
+    protected $listen = [
+        Registered::class => [
+            SendEmailVerificationNotification::class,
+        ],
+    ];
+
+    /**
+     * Register any events for your application.
+     */
+    public function boot(): void
+    {
+        //
+    }
+
+    /**
+     * Determine if events and listeners should be automatically discovered.
+     */
+    public function shouldDiscoverEvents(): bool
+    {
+        return false;
+    }
+}

api/app/Providers/RouteServiceProvider.php

@@ -0,0 +1,40 @@
+<?php
+
+namespace App\Providers;
+
+use Illuminate\Cache\RateLimiting\Limit;
+use Illuminate\Foundation\Support\Providers\RouteServiceProvider as ServiceProvider;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\RateLimiter;
+use Illuminate\Support\Facades\Route;
+
+class RouteServiceProvider extends ServiceProvider
+{
+    /**
+     * The path to your application's "home" route.
+     *
+     * Typically, users are redirected here after authentication.
+     *
+     * @var string
+     */
+    public const HOME = '/home';
+
+    /**
+     * Define your route model bindings, pattern filters, and other route configuration.
+     */
+    public function boot(): void
+    {
+        RateLimiter::for('api', function (Request $request) {
+            return Limit::perMinute(60)->by($request->user()?->id ?: $request->ip());
+        });
+
+        $this->routes(function () {
+            Route::middleware('api')
+                ->prefix('api')
+                ->group(base_path('routes/api.php'));
+
+            Route::middleware('web')
+                ->group(base_path('routes/web.php'));
+        });
+    }
+}

api/artisan

@@ -0,0 +1,53 @@
+#!/usr/bin/env php
+<?php
+
+define('LARAVEL_START', microtime(true));
+
+/*
+|--------------------------------------------------------------------------
+| Register The Auto Loader
+|--------------------------------------------------------------------------
+|
+| Composer provides a convenient, automatically generated class loader
+| for our application. We just need to utilize it! We'll require it
+| into the script here so that we do not have to worry about the
+| loading of any of our classes manually. It's great to relax.
+|
+*/
+
+require __DIR__.'/vendor/autoload.php';
+
+$app = require_once __DIR__.'/bootstrap/app.php';
+
+/*
+|--------------------------------------------------------------------------
+| Run The Artisan Application
+|--------------------------------------------------------------------------
+|
+| When we run the console application, the current CLI command will be
+| executed in this console and the response sent back to a terminal
+| or another output device for the developers. Here goes nothing!
+|
+*/
+
+$kernel = $app->make(Illuminate\Contracts\Console\Kernel::class);
+
+$status = $kernel->handle(
+    $input = new Symfony\Component\Console\Input\ArgvInput,
+    new Symfony\Component\Console\Output\ConsoleOutput
+);
+
+/*
+|--------------------------------------------------------------------------
+| Shutdown The Application
+|--------------------------------------------------------------------------
+|
+| Once Artisan has finished running, we will fire off the shutdown events
+| so that any final work may be done by the application before we shut
+| down the process. This is the last thing to happen to the request.
+|
+*/
+
+$kernel->terminate($input, $status);
+
+exit($status);

api/bootstrap/app.php

@@ -0,0 +1,55 @@
+<?php
+
+/*
+|--------------------------------------------------------------------------
+| Create The Application
+|--------------------------------------------------------------------------
+|
+| The first thing we will do is create a new Laravel application instance
+| which serves as the "glue" for all the components of Laravel, and is
+| the IoC container for the system binding all of the various parts.
+|
+*/
+
+$app = new Illuminate\Foundation\Application(
+    $_ENV['APP_BASE_PATH'] ?? dirname(__DIR__)
+);
+
+/*
+|--------------------------------------------------------------------------
+| Bind Important Interfaces
+|--------------------------------------------------------------------------
+|
+| Next, we need to bind some important interfaces into the container so
+| we will be able to resolve them when needed. The kernels serve the
+| incoming requests to this application from both the web and CLI.
+|
+*/
+
+$app->singleton(
+    Illuminate\Contracts\Http\Kernel::class,
+    App\Http\Kernel::class
+);
+
+$app->singleton(
+    Illuminate\Contracts\Console\Kernel::class,
+    App\Console\Kernel::class
+);
+
+$app->singleton(
+    Illuminate\Contracts\Debug\ExceptionHandler::class,
+    App\Exceptions\Handler::class
+);
+
+/*
+|--------------------------------------------------------------------------
+| Return The Application
+|--------------------------------------------------------------------------
+|
+| This script returns the application instance. The instance is given to
+| the calling script so we can separate the building of the instances
+| from the actual running of the application and sending responses.
+|
+*/
+
+return $app;

api/bootstrap/cache/.gitignore

@@ -0,0 +1,2 @@
+*
+!.gitignore

api/composer.json

@@ -0,0 +1,72 @@
+{
+  "name": "laravel/laravel",
+  "type": "project",
+  "description": "The skeleton application for the Laravel framework.",
+  "keywords": [
+    "laravel",
+    "framework"
+  ],
+  "license": "MIT",
+  "require": {
+    "php": "^8.1",
+    "guzzlehttp/guzzle": "^7.2",
+    "laravel/framework": "^10.10",
+    "laravel/sanctum": "^3.2",
+    "laravel/tinker": "^2.8"
+  },
+  "require-dev": {
+    "fakerphp/faker": "^1.9.1",
+    "laravel/pint": "^1.0",
+    "laravel/sail": "^1.18",
+    "mockery/mockery": "^1.4.4",
+    "nunomaduro/collision": "^7.0",
+    "phpunit/phpunit": "^10.1",
+    "spatie/laravel-ignition": "^2.0"
+  },
+  "autoload": {
+    "classmap": [
+      "app/Libraries"
+    ],
+    "psr-4": {
+      "App\\": "app/",
+      "Database\\Factories\\": "database/factories/",
+      "Database\\Seeders\\": "database/seeders/"
+    }
+  },
+  "autoload-dev": {
+    "psr-4": {
+      "Tests\\": "tests/"
+    }
+  },
+  "scripts": {
+    "post-autoload-dump": [
+      "Illuminate\\Foundation\\ComposerScripts::postAutoloadDump",
+      "@php artisan package:discover --ansi"
+    ],
+    "post-update-cmd": [
+      "@php artisan vendor:publish --tag=laravel-assets --ansi --force"
+    ],
+    "post-root-package-install": [
+      "@php -r \"file_exists('.env') || copy('.env.example', '.env');\""
+    ],
+    "post-create-project-cmd": [
+      "@php artisan key:generate --ansi"
+    ]
+  },
+  "extra": {
+    "laravel": {
+      "dont-discover": []
+    }
+  },
+  "config": {
+    "optimize-autoloader": true,
+    "preferred-install": "dist",
+    "sort-packages": true,
+    "allow-plugins": {
+      "pestphp/pest-plugin": true,
+      "php-http/discovery": true
+    }
+  },
+  "minimum-stability": "stable",
+  "prefer-stable": true
+}

api/config/app.php

@@ -0,0 +1,188 @@
+<?php
+
+use Illuminate\Support\Facades\Facade;
+use Illuminate\Support\ServiceProvider;
+
+return [
+
+  /*
+  |--------------------------------------------------------------------------
+  | Application Name
+  |--------------------------------------------------------------------------
+  |
+  | This value is the name of your application. This value is used when the
+  | framework needs to place the application's name in a notification or
+  | any other location as required by the application or its packages.
+  |
+  */
+
+  'name' => env('APP_NAME', 'Laravel'),
+
+  /*
+  |--------------------------------------------------------------------------
+  | Application Environment
+  |--------------------------------------------------------------------------
+  |
+  | This value determines the "environment" your application is currently
+  | running in. This may determine how you prefer to configure various
+  | services the application utilizes. Set this in your ".env" file.
+  |
+  */
+
+  'env' => env('APP_ENV', 'production'),
+
+  /*
+  |--------------------------------------------------------------------------
+  | Application Debug Mode
+  |--------------------------------------------------------------------------
+  |
+  | When your application is in debug mode, detailed error messages with
+  | stack traces will be shown on every error that occurs within your
+  | application. If disabled, a simple generic error page is shown.
+  |
+  */
+
+  'debug' => (bool)env('APP_DEBUG', false),
+
+  /*
+  |--------------------------------------------------------------------------
+  | Application URL
+  |--------------------------------------------------------------------------
+  |
+  | This URL is used by the console to properly generate URLs when using
+  | the Artisan command line tool. You should set this to the root of
+  | your application so that it is used when running Artisan tasks.
+  |
+  */
+
+  'url' => env('APP_URL', 'http://localhost'),
+
+  'asset_url' => env('ASSET_URL'),
+
+  /*
+  |--------------------------------------------------------------------------
+  | Application Timezone
+  |--------------------------------------------------------------------------
+  |
+  | Here you may specify the default timezone for your application, which
+  | will be used by the PHP date and date-time functions. We have gone
+  | ahead and set this to a sensible default for you out of the box.
+  |
+  */
+
+  'timezone' => env('TIMEZONE'),
+
+  /*
+  |--------------------------------------------------------------------------
+  | Application Locale Configuration
+  |--------------------------------------------------------------------------
+  |
+  | The application locale determines the default locale that will be used
+  | by the translation service provider. You are free to set this value
+  | to any of the locales which will be supported by the application.
+  |
+  */
+
+  'locale' => 'en',
+
+  /*
+  |--------------------------------------------------------------------------
+  | Application Fallback Locale
+  |--------------------------------------------------------------------------
+  |
+  | The fallback locale determines the locale to use when the current one
+  | is not available. You may change the value to correspond to any of
+  | the language folders that are provided through your application.
+  |
+  */
+
+  'fallback_locale' => 'en',
+
+  /*
+  |--------------------------------------------------------------------------
+  | Faker Locale
+  |--------------------------------------------------------------------------
+  |
+  | This locale will be used by the Faker PHP library when generating fake
+  | data for your database seeds. For example, this will be used to get
+  | localized telephone numbers, street address information and more.
+  |
+  */
+
+  'faker_locale' => 'en_US',
+
+  /*
+  |--------------------------------------------------------------------------
+  | Encryption Key
+  |--------------------------------------------------------------------------
+  |
+  | This key is used by the Illuminate encrypter service and should be set
+  | to a random, 32 character string, otherwise these encrypted strings
+  | will not be safe. Please do this before deploying an application!
+  |
+  */
+
+  'key' => env('APP_KEY'),
+
+  'cipher' => 'AES-256-CBC',
+
+  /*
+  |--------------------------------------------------------------------------
+  | Maintenance Mode Driver
+  |--------------------------------------------------------------------------
+  |
+  | These configuration options determine the driver used to determine and
+  | manage Laravel's "maintenance mode" status. The "cache" driver will
+  | allow maintenance mode to be controlled across multiple machines.
+  |
+  | Supported drivers: "file", "cache"
+  |
+  */
+
+  'maintenance' => [
+    'driver' => 'file',
+    // 'store'  => 'redis',
+  ],
+
+  /*
+  |--------------------------------------------------------------------------
+  | Autoloaded Service Providers
+  |--------------------------------------------------------------------------
+  |
+  | The service providers listed here will be automatically loaded on the
+  | request to your application. Feel free to add your own services to
+  | this array to grant expanded functionality to your applications.
+  |
+  */
+
+  'providers' => ServiceProvider::defaultProviders()->merge([
+    /*
+     * Package Service Providers...
+     */
+
+    /*
+     * Application Service Providers...
+     */
+    App\Providers\AppServiceProvider::class,
+    App\Providers\AuthServiceProvider::class,
+    // App\Providers\BroadcastServiceProvider::class,
+    App\Providers\EventServiceProvider::class,
+    App\Providers\RouteServiceProvider::class,
+  ])->toArray(),
+
+  /*
+  |--------------------------------------------------------------------------
+  | Class Aliases
+  |--------------------------------------------------------------------------
+  |
+  | This array of class aliases will be registered when this application
+  | is started. However, feel free to register as many as you wish as
+  | the aliases are "lazy" loaded so they don't hinder performance.
+  |
+  */
+
+  'aliases' => Facade::defaultAliases()->merge([
+    // 'Example' => App\Facades\Example::class,
+  ])->toArray(),
+
+];

api/config/auth.php

@@ -0,0 +1,115 @@
+<?php
+
+return [
+
+    /*
+    |--------------------------------------------------------------------------
+    | Authentication Defaults
+    |--------------------------------------------------------------------------
+    |
+    | This option controls the default authentication "guard" and password
+    | reset options for your application. You may change these defaults
+    | as required, but they're a perfect start for most applications.
+    |
+    */
+
+    'defaults' => [
+        'guard' => 'web',
+        'passwords' => 'users',
+    ],
+
+    /*
+    |--------------------------------------------------------------------------
+    | Authentication Guards
+    |--------------------------------------------------------------------------
+    |
+    | Next, you may define every authentication guard for your application.
+    | Of course, a great default configuration has been defined for you
+    | here which uses session storage and the Eloquent user provider.
+    |
+    | All authentication drivers have a user provider. This defines how the
+    | users are actually retrieved out of your database or other storage
+    | mechanisms used by this application to persist your user's data.
+    |
+    | Supported: "session"
+    |
+    */
+
+    'guards' => [
+        'web' => [
+            'driver' => 'session',
+            'provider' => 'users',
+        ],
+    ],
+
+    /*
+    |--------------------------------------------------------------------------
+    | User Providers
+    |--------------------------------------------------------------------------
+    |
+    | All authentication drivers have a user provider. This defines how the
+    | users are actually retrieved out of your database or other storage
+    | mechanisms used by this application to persist your user's data.
+    |
+    | If you have multiple user tables or models you may configure multiple
+    | sources which represent each model / table. These sources may then
+    | be assigned to any extra authentication guards you have defined.
+    |
+    | Supported: "database", "eloquent"
+    |
+    */
+
+    'providers' => [
+        'users' => [
+            'driver' => 'eloquent',
+            'model' => App\Models\User::class,
+        ],
+
+        // 'users' => [
+        //     'driver' => 'database',
+        //     'table' => 'users',
+        // ],
+    ],
+
+    /*
+    |--------------------------------------------------------------------------
+    | Resetting Passwords
+    |--------------------------------------------------------------------------
+    |
+    | You may specify multiple password reset configurations if you have more
+    | than one user table or model in the application and you want to have
+    | separate password reset settings based on the specific user types.
+    |
+    | The expiry time is the number of minutes that each reset token will be
+    | considered valid. This security feature keeps tokens short-lived so
+    | they have less time to be guessed. You may change this as needed.
+    |
+    | The throttle setting is the number of seconds a user must wait before
+    | generating more password reset tokens. This prevents the user from
+    | quickly generating a very large amount of password reset tokens.
+    |
+    */
+
+    'passwords' => [
+        'users' => [
+            'provider' => 'users',
+            'table' => 'password_reset_tokens',
+            'expire' => 60,
+            'throttle' => 60,
+        ],
+    ],
+
+    /*
+    |--------------------------------------------------------------------------
+    | Password Confirmation Timeout
+    |--------------------------------------------------------------------------
+    |
+    | Here you may define the amount of seconds before a password confirmation
+    | times out and the user is prompted to re-enter their password via the
+    | confirmation screen. By default, the timeout lasts for three hours.
+    |
+    */
+
+    'password_timeout' => 10800,
+
+];

api/config/broadcasting.php

@@ -0,0 +1,71 @@
+<?php
+
+return [
+
+    /*
+    |--------------------------------------------------------------------------
+    | Default Broadcaster
+    |--------------------------------------------------------------------------
+    |
+    | This option controls the default broadcaster that will be used by the
+    | framework when an event needs to be broadcast. You may set this to
+    | any of the connections defined in the "connections" array below.
+    |
+    | Supported: "pusher", "ably", "redis", "log", "null"
+    |
+    */
+
+    'default' => env('BROADCAST_DRIVER', 'null'),
+
+    /*
+    |--------------------------------------------------------------------------
+    | Broadcast Connections
+    |--------------------------------------------------------------------------
+    |
+    | Here you may define all of the broadcast connections that will be used
+    | to broadcast events to other systems or over websockets. Samples of
+    | each available type of connection are provided inside this array.
+    |
+    */
+
+    'connections' => [
+
+        'pusher' => [
+            'driver' => 'pusher',
+            'key' => env('PUSHER_APP_KEY'),
+            'secret' => env('PUSHER_APP_SECRET'),
+            'app_id' => env('PUSHER_APP_ID'),
+            'options' => [
+                'cluster' => env('PUSHER_APP_CLUSTER'),
+                'host' => env('PUSHER_HOST') ?: 'api-'.env('PUSHER_APP_CLUSTER', 'mt1').'.pusher.com',
+                'port' => env('PUSHER_PORT', 443),
+                'scheme' => env('PUSHER_SCHEME', 'https'),
+                'encrypted' => true,
+                'useTLS' => env('PUSHER_SCHEME', 'https') === 'https',
+            ],
+            'client_options' => [
+                // Guzzle client options: https://docs.guzzlephp.org/en/stable/request-options.html
+            ],
+        ],
+
+        'ably' => [
+            'driver' => 'ably',
+            'key' => env('ABLY_KEY'),
+        ],
+
+        'redis' => [
+            'driver' => 'redis',
+            'connection' => 'default',
+        ],
+
+        'log' => [
+            'driver' => 'log',
+        ],
+
+        'null' => [
+            'driver' => 'null',
+        ],
+
+    ],
+
+];

api/config/cache.php

@@ -0,0 +1,111 @@
+<?php
+
+use Illuminate\Support\Str;
+
+return [
+
+    /*
+    |--------------------------------------------------------------------------
+    | Default Cache Store
+    |--------------------------------------------------------------------------
+    |
+    | This option controls the default cache connection that gets used while
+    | using this caching library. This connection is used when another is
+    | not explicitly specified when executing a given caching function.
+    |
+    */
+
+    'default' => env('CACHE_DRIVER', 'file'),
+
+    /*
+    |--------------------------------------------------------------------------
+    | Cache Stores
+    |--------------------------------------------------------------------------
+    |
+    | Here you may define all of the cache "stores" for your application as
+    | well as their drivers. You may even define multiple stores for the
+    | same cache driver to group types of items stored in your caches.
+    |
+    | Supported drivers: "apc", "array", "database", "file",
+    |         "memcached", "redis", "dynamodb", "octane", "null"
+    |
+    */
+
+    'stores' => [
+
+        'apc' => [
+            'driver' => 'apc',
+        ],
+
+        'array' => [
+            'driver' => 'array',
+            'serialize' => false,
+        ],
+
+        'database' => [
+            'driver' => 'database',
+            'table' => 'cache',
+            'connection' => null,
+            'lock_connection' => null,
+        ],
+
+        'file' => [
+            'driver' => 'file',
+            'path' => storage_path('framework/cache/data'),
+            'lock_path' => storage_path('framework/cache/data'),
+        ],
+
+        'memcached' => [
+            'driver' => 'memcached',
+            'persistent_id' => env('MEMCACHED_PERSISTENT_ID'),
+            'sasl' => [
+                env('MEMCACHED_USERNAME'),
+                env('MEMCACHED_PASSWORD'),
+            ],
+            'options' => [
+                // Memcached::OPT_CONNECT_TIMEOUT => 2000,
+            ],
+            'servers' => [
+                [
+                    'host' => env('MEMCACHED_HOST', '127.0.0.1'),
+                    'port' => env('MEMCACHED_PORT', 11211),
+                    'weight' => 100,
+                ],
+            ],
+        ],
+
+        'redis' => [
+            'driver' => 'redis',
+            'connection' => 'cache',
+            'lock_connection' => 'default',
+        ],
+
+        'dynamodb' => [
+            'driver' => 'dynamodb',
+            'key' => env('AWS_ACCESS_KEY_ID'),
+            'secret' => env('AWS_SECRET_ACCESS_KEY'),
+            'region' => env('AWS_DEFAULT_REGION', 'us-east-1'),
+            'table' => env('DYNAMODB_CACHE_TABLE', 'cache'),
+            'endpoint' => env('DYNAMODB_ENDPOINT'),
+        ],
+
+        'octane' => [
+            'driver' => 'octane',
+        ],
+
+    ],
+
+    /*
+    |--------------------------------------------------------------------------
+    | Cache Key Prefix
+    |--------------------------------------------------------------------------
+    |
+    | When utilizing the APC, database, memcached, Redis, or DynamoDB cache
+    | stores there might be other applications using the same cache. For
+    | that reason, you may prefix every cache key to avoid collisions.
+    |
+    */
+
+    'prefix' => env('CACHE_PREFIX', Str::slug(env('APP_NAME', 'laravel'), '_').'_cache_'),
+
+];

api/config/code.php

@@ -0,0 +1,42 @@
+<?php
+return [
+  200 => [
+    'c' => '增加成功',
+    'd' => '删除成功',
+    'u' => '修改成功',
+    'r' => '获取成功',
+  ],
+  100000 => '?',
+  100001 => '?不存在或不可用',
+  100002 => '请登录',
+  100003 => '账号不可用或不存在',
+  100004 => '?',
+  100005 => '验证码已过期',
+  100006 => '验证码错误',
+  100007 => '账号不存在或密码错误',
+  100008 => '旧密码错误',
+  100009 => '请输入新密码',
+  100010 => '密码长度应在6-20位字符之间',
+  100011 => '新旧密码相同',
+  100012 => '请输入昵称',
+  100013 => '昵称长度应在1-50位字符之间',
+  100014 => '头像上传链接异常',
+  100015 => '请上传规定以内的图片格式',
+  100016 => '上传图片失败,[?]错误',
+  100017 => '请输入权限名称',
+  100018 => '权限名称长度应在1-20位字符之间',
+  100019 => '备注长度应在100位字符以内',
+  100020 => '请输入账号',
+  100021 => '账号长度应在1-50位字符之间',
+  100022 => '请输入密码',
+  100023 => '账号已存在',
+  100024 => '请求日志不支持跨月查询',
+  100025 => '请输入权限路径',
+  100026 => '路径名称长度应在1-200位字符之间',
+  100027 => '图标长度应在100位字符以内',
+  100028 => '提示消息长度应在50位字符以内',
+  100029 => '路由组不能添加到子级',
+  100030 => '请先删除该组下的子级',
+  100031 => '请输入参数名称',
+  100032 => '参数名称长度应在1-50位字符之间',
+];

api/config/cors.php

@@ -0,0 +1,34 @@
+<?php
+
+return [
+
+    /*
+    |--------------------------------------------------------------------------
+    | Cross-Origin Resource Sharing (CORS) Configuration
+    |--------------------------------------------------------------------------
+    |
+    | Here you may configure your settings for cross-origin resource sharing
+    | or "CORS". This determines what cross-origin operations may execute
+    | in web browsers. You are free to adjust these settings as needed.
+    |
+    | To learn more: https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS
+    |
+    */
+
+    'paths' => ['api/*', 'sanctum/csrf-cookie'],
+
+    'allowed_methods' => ['*'],
+
+    'allowed_origins' => ['*'],
+
+    'allowed_origins_patterns' => [],
+
+    'allowed_headers' => ['*'],
+
+    'exposed_headers' => [],
+
+    'max_age' => 0,
+
+    'supports_credentials' => false,
+
+];

api/config/database.php

@@ -0,0 +1,151 @@
+<?php
+
+use Illuminate\Support\Str;
+
+return [
+
+    /*
+    |--------------------------------------------------------------------------
+    | Default Database Connection Name
+    |--------------------------------------------------------------------------
+    |
+    | Here you may specify which of the database connections below you wish
+    | to use as your default connection for all database work. Of course
+    | you may use many connections at once using the Database library.
+    |
+    */
+
+    'default' => env('DB_CONNECTION', 'mysql'),
+
+    /*
+    |--------------------------------------------------------------------------
+    | Database Connections
+    |--------------------------------------------------------------------------
+    |
+    | Here are each of the database connections setup for your application.
+    | Of course, examples of configuring each database platform that is
+    | supported by Laravel is shown below to make development simple.
+    |
+    |
+    | All database work in Laravel is done through the PHP PDO facilities
+    | so make sure you have the driver for your particular database of
+    | choice installed on your machine before you begin development.
+    |
+    */
+
+    'connections' => [
+
+        'sqlite' => [
+            'driver' => 'sqlite',
+            'url' => env('DATABASE_URL'),
+            'database' => env('DB_DATABASE', database_path('database.sqlite')),
+            'prefix' => '',
+            'foreign_key_constraints' => env('DB_FOREIGN_KEYS', true),
+        ],
+
+        'mysql' => [
+            'driver' => 'mysql',
+            'url' => env('DATABASE_URL'),
+            'host' => env('DB_HOST', '127.0.0.1'),
+            'port' => env('DB_PORT', '3306'),
+            'database' => env('DB_DATABASE', 'forge'),
+            'username' => env('DB_USERNAME', 'forge'),
+            'password' => env('DB_PASSWORD', ''),
+            'unix_socket' => env('DB_SOCKET', ''),
+            'charset' => 'utf8mb4',
+            'collation' => 'utf8mb4_unicode_ci',
+            'prefix' => '',
+            'prefix_indexes' => true,
+            'strict' => true,
+            'engine' => null,
+            'options' => extension_loaded('pdo_mysql') ? array_filter([
+                PDO::MYSQL_ATTR_SSL_CA => env('MYSQL_ATTR_SSL_CA'),
+            ]) : [],
+        ],
+
+        'pgsql' => [
+            'driver' => 'pgsql',
+            'url' => env('DATABASE_URL'),
+            'host' => env('DB_HOST', '127.0.0.1'),
+            'port' => env('DB_PORT', '5432'),
+            'database' => env('DB_DATABASE', 'forge'),
+            'username' => env('DB_USERNAME', 'forge'),
+            'password' => env('DB_PASSWORD', ''),
+            'charset' => 'utf8',
+            'prefix' => '',
+            'prefix_indexes' => true,
+            'search_path' => 'public',
+            'sslmode' => 'prefer',
+        ],
+
+        'sqlsrv' => [
+            'driver' => 'sqlsrv',
+            'url' => env('DATABASE_URL'),
+            'host' => env('DB_HOST', 'localhost'),
+            'port' => env('DB_PORT', '1433'),
+            'database' => env('DB_DATABASE', 'forge'),
+            'username' => env('DB_USERNAME', 'forge'),
+            'password' => env('DB_PASSWORD', ''),
+            'charset' => 'utf8',
+            'prefix' => '',
+            'prefix_indexes' => true,
+            // 'encrypt' => env('DB_ENCRYPT', 'yes'),
+            // 'trust_server_certificate' => env('DB_TRUST_SERVER_CERTIFICATE', 'false'),
+        ],
+
+    ],
+
+    /*
+    |--------------------------------------------------------------------------
+    | Migration Repository Table
+    |--------------------------------------------------------------------------
+    |
+    | This table keeps track of all the migrations that have already run for
+    | your application. Using this information, we can determine which of
+    | the migrations on disk haven't actually been run in the database.
+    |
+    */
+
+    'migrations' => 'migrations',
+
+    /*
+    |--------------------------------------------------------------------------
+    | Redis Databases
+    |--------------------------------------------------------------------------
+    |
+    | Redis is an open source, fast, and advanced key-value store that also
+    | provides a richer body of commands than a typical key-value system
+    | such as APC or Memcached. Laravel makes it easy to dig right in.
+    |
+    */
+
+    'redis' => [
+
+        'client' => env('REDIS_CLIENT', 'phpredis'),
+
+        'options' => [
+            'cluster' => env('REDIS_CLUSTER', 'redis'),
+            'prefix' => env('REDIS_PREFIX', Str::slug(env('APP_NAME', 'laravel'), '_').'_database_'),
+        ],
+
+        'default' => [
+            'url' => env('REDIS_URL'),
+            'host' => env('REDIS_HOST', '127.0.0.1'),
+            'username' => env('REDIS_USERNAME'),
+            'password' => env('REDIS_PASSWORD'),
+            'port' => env('REDIS_PORT', '6379'),
+            'database' => env('REDIS_DB', '0'),
+        ],
+
+        'cache' => [
+            'url' => env('REDIS_URL'),
+            'host' => env('REDIS_HOST', '127.0.0.1'),
+            'username' => env('REDIS_USERNAME'),
+            'password' => env('REDIS_PASSWORD'),
+            'port' => env('REDIS_PORT', '6379'),
+            'database' => env('REDIS_CACHE_DB', '1'),
+        ],
+
+    ],
+
+];

api/config/filesystems.php

@@ -0,0 +1,76 @@
+<?php
+
+return [
+
+    /*
+    |--------------------------------------------------------------------------
+    | Default Filesystem Disk
+    |--------------------------------------------------------------------------
+    |
+    | Here you may specify the default filesystem disk that should be used
+    | by the framework. The "local" disk, as well as a variety of cloud
+    | based disks are available to your application. Just store away!
+    |
+    */
+
+    'default' => env('FILESYSTEM_DISK', 'local'),
+
+    /*
+    |--------------------------------------------------------------------------
+    | Filesystem Disks
+    |--------------------------------------------------------------------------
+    |
+    | Here you may configure as many filesystem "disks" as you wish, and you
+    | may even configure multiple disks of the same driver. Defaults have
+    | been set up for each driver as an example of the required values.
+    |
+    | Supported Drivers: "local", "ftp", "sftp", "s3"
+    |
+    */
+
+    'disks' => [
+
+        'local' => [
+            'driver' => 'local',
+            'root' => storage_path('app'),
+            'throw' => false,
+        ],
+
+        'public' => [
+            'driver' => 'local',
+            'root' => storage_path('app/public'),
+            'url' => env('APP_URL').'/storage',
+            'visibility' => 'public',
+            'throw' => false,
+        ],
+
+        's3' => [
+            'driver' => 's3',
+            'key' => env('AWS_ACCESS_KEY_ID'),
+            'secret' => env('AWS_SECRET_ACCESS_KEY'),
+            'region' => env('AWS_DEFAULT_REGION'),
+            'bucket' => env('AWS_BUCKET'),
+            'url' => env('AWS_URL'),
+            'endpoint' => env('AWS_ENDPOINT'),
+            'use_path_style_endpoint' => env('AWS_USE_PATH_STYLE_ENDPOINT', false),
+            'throw' => false,
+        ],
+
+    ],
+
+    /*
+    |--------------------------------------------------------------------------
+    | Symbolic Links
+    |--------------------------------------------------------------------------
+    |
+    | Here you may configure the symbolic links that will be created when the
+    | `storage:link` Artisan command is executed. The array keys should be
+    | the locations of the links and the values should be their targets.
+    |
+    */
+
+    'links' => [
+        public_path('storage') => storage_path('app/public'),
+    ],
+
+];

api/config/hashing.php

@@ -0,0 +1,52 @@
+<?php
+
+return [
+
+    /*
+    |--------------------------------------------------------------------------
+    | Default Hash Driver
+    |--------------------------------------------------------------------------
+    |
+    | This option controls the default hash driver that will be used to hash
+    | passwords for your application. By default, the bcrypt algorithm is
+    | used; however, you remain free to modify this option if you wish.
+    |
+    | Supported: "bcrypt", "argon", "argon2id"
+    |
+    */
+
+    'driver' => 'bcrypt',
+
+    /*
+    |--------------------------------------------------------------------------
+    | Bcrypt Options
+    |--------------------------------------------------------------------------
+    |
+    | Here you may specify the configuration options that should be used when
+    | passwords are hashed using the Bcrypt algorithm. This will allow you
+    | to control the amount of time it takes to hash the given password.
+    |
+    */
+
+    'bcrypt' => [
+        'rounds' => env('BCRYPT_ROUNDS', 10),
+    ],
+
+    /*
+    |--------------------------------------------------------------------------
+    | Argon Options
+    |--------------------------------------------------------------------------
+    |
+    | Here you may specify the configuration options that should be used when
+    | passwords are hashed using the Argon algorithm. These will allow you
+    | to control the amount of time it takes to hash the given password.
+    |
+    */
+
+    'argon' => [
+        'memory' => 65536,
+        'threads' => 1,
+        'time' => 4,
+    ],
+
+];

api/config/logging.php

@@ -0,0 +1,131 @@
+<?php
+
+use Monolog\Handler\NullHandler;
+use Monolog\Handler\StreamHandler;
+use Monolog\Handler\SyslogUdpHandler;
+use Monolog\Processor\PsrLogMessageProcessor;
+
+return [
+
+    /*
+    |--------------------------------------------------------------------------
+    | Default Log Channel
+    |--------------------------------------------------------------------------
+    |
+    | This option defines the default log channel that gets used when writing
+    | messages to the logs. The name specified in this option should match
+    | one of the channels defined in the "channels" configuration array.
+    |
+    */
+
+    'default' => env('LOG_CHANNEL', 'stack'),
+
+    /*
+    |--------------------------------------------------------------------------
+    | Deprecations Log Channel
+    |--------------------------------------------------------------------------
+    |
+    | This option controls the log channel that should be used to log warnings
+    | regarding deprecated PHP and library features. This allows you to get
+    | your application ready for upcoming major versions of dependencies.
+    |
+    */
+
+    'deprecations' => [
+        'channel' => env('LOG_DEPRECATIONS_CHANNEL', 'null'),
+        'trace' => false,
+    ],
+
+    /*
+    |--------------------------------------------------------------------------
+    | Log Channels
+    |--------------------------------------------------------------------------
+    |
+    | Here you may configure the log channels for your application. Out of
+    | the box, Laravel uses the Monolog PHP logging library. This gives
+    | you a variety of powerful log handlers / formatters to utilize.
+    |
+    | Available Drivers: "single", "daily", "slack", "syslog",
+    |                    "errorlog", "monolog",
+    |                    "custom", "stack"
+    |
+    */
+
+    'channels' => [
+        'stack' => [
+            'driver' => 'stack',
+            'channels' => ['single'],
+            'ignore_exceptions' => false,
+        ],
+
+        'single' => [
+            'driver' => 'single',
+            'path' => storage_path('logs/laravel.log'),
+            'level' => env('LOG_LEVEL', 'debug'),
+            'replace_placeholders' => true,
+        ],
+
+        'daily' => [
+            'driver' => 'daily',
+            'path' => storage_path('logs/laravel.log'),
+            'level' => env('LOG_LEVEL', 'debug'),
+            'days' => 14,
+            'replace_placeholders' => true,
+        ],
+
+        'slack' => [
+            'driver' => 'slack',
+            'url' => env('LOG_SLACK_WEBHOOK_URL'),
+            'username' => 'Laravel Log',
+            'emoji' => ':boom:',
+            'level' => env('LOG_LEVEL', 'critical'),
+            'replace_placeholders' => true,
+        ],
+
+        'papertrail' => [
+            'driver' => 'monolog',
+            'level' => env('LOG_LEVEL', 'debug'),
+            'handler' => env('LOG_PAPERTRAIL_HANDLER', SyslogUdpHandler::class),
+            'handler_with' => [
+                'host' => env('PAPERTRAIL_URL'),
+                'port' => env('PAPERTRAIL_PORT'),
+                'connectionString' => 'tls://'.env('PAPERTRAIL_URL').':'.env('PAPERTRAIL_PORT'),
+            ],
+            'processors' => [PsrLogMessageProcessor::class],
+        ],
+
+        'stderr' => [
+            'driver' => 'monolog',
+            'level' => env('LOG_LEVEL', 'debug'),
+            'handler' => StreamHandler::class,
+            'formatter' => env('LOG_STDERR_FORMATTER'),
+            'with' => [
+                'stream' => 'php://stderr',
+            ],
+            'processors' => [PsrLogMessageProcessor::class],
+        ],
+
+        'syslog' => [
+            'driver' => 'syslog',
+            'level' => env('LOG_LEVEL', 'debug'),
+            'facility' => LOG_USER,
+            'replace_placeholders' => true,
+        ],
+
+        'errorlog' => [
+            'driver' => 'errorlog',
+            'level' => env('LOG_LEVEL', 'debug'),
+            'replace_placeholders' => true,
+        ],
+
+        'null' => [
+            'driver' => 'monolog',
+            'handler' => NullHandler::class,
+        ],
+
+        'emergency' => [
+            'path' => storage_path('logs/laravel.log'),
+        ],
+    ],
+
+];

api/config/mail.php

@@ -0,0 +1,125 @@
+<?php
+
+return [
+
+    /*
+    |--------------------------------------------------------------------------
+    | Default Mailer
+    |--------------------------------------------------------------------------
+    |
+    | This option controls the default mailer that is used to send any email
+    | messages sent by your application. Alternative mailers may be setup
+    | and used as needed; however, this mailer will be used by default.
+    |
+    */
+
+    'default' => env('MAIL_MAILER', 'smtp'),
+
+    /*
+    |--------------------------------------------------------------------------
+    | Mailer Configurations
+    |--------------------------------------------------------------------------
+    |
+    | Here you may configure all of the mailers used by your application plus
+    | their respective settings. Several examples have been configured for
+    | you and you are free to add your own as your application requires.
+    |
+    | Laravel supports a variety of mail "transport" drivers to be used while
+    | sending an e-mail. You will specify which one you are using for your
+    | mailers below. You are free to add additional mailers as required.
+    |
+    | Supported: "smtp", "sendmail", "mailgun", "ses", "ses-v2",
+    |            "postmark", "log", "array", "failover"
+    |
+    */
+
+    'mailers' => [
+        'smtp' => [
+            'transport' => 'smtp',
+            'url' => env('MAIL_URL'),
+            'host' => env('MAIL_HOST', 'smtp.mailgun.org'),
+            'port' => env('MAIL_PORT', 587),
+            'encryption' => env('MAIL_ENCRYPTION', 'ssl'),
+            'username' => env('MAIL_USERNAME'),
+            'password' => env('MAIL_PASSWORD'),
+            'timeout' => null,
+            'local_domain' => env('MAIL_EHLO_DOMAIN'),
+        ],
+
+        'ses' => [
+            'transport' => 'ses',
+        ],
+
+        'mailgun' => [
+            'transport' => 'mailgun',
+            // 'client' => [
+            //     'timeout' => 5,
+            // ],
+        ],
+
+        'postmark' => [
+            'transport' => 'postmark',
+            // 'client' => [
+            //     'timeout' => 5,
+            // ],
+        ],
+
+        'sendmail' => [
+            'transport' => 'sendmail',
+            'path' => env('MAIL_SENDMAIL_PATH', '/usr/sbin/sendmail -bs -i'),
+        ],
+
+        'log' => [
+            'transport' => 'log',
+            'channel' => env('MAIL_LOG_CHANNEL'),
+        ],
+
+        'array' => [
+            'transport' => 'array',
+        ],
+
+        'failover' => [
+            'transport' => 'failover',
+            'mailers' => [
+                'smtp',
+                'log',
+            ],
+        ],
+    ],
+
+    /*
+    |--------------------------------------------------------------------------
+    | Global "From" Address
+    |--------------------------------------------------------------------------
+    |
+    | You may wish for all e-mails sent by your application to be sent from
+    | the same address. Here, you may specify a name and address that is
+    | used globally for all e-mails that are sent by your application.
+    |
+    */
+
+    'from' => [
+        'address' => env('MAIL_FROM_ADDRESS', 'hello@example.com'),
+        'name' => env('MAIL_FROM_NAME', 'Example'),
+    ],
+
+    /*
+    |--------------------------------------------------------------------------
+    | Markdown Mail Settings
+    |--------------------------------------------------------------------------
+    |
+    | If you are using Markdown based email rendering, you may configure your
+    | theme and component paths here, allowing you to customize the design
+    | of the emails. Or, you may simply stick with the Laravel defaults!
+    |
+    */
+
+    'markdown' => [
+        'theme' => 'default',
+
+        'paths' => [
+            resource_path('views/vendor/mail'),
+        ],
+    ],
+
+];

api/config/queue.php

@@ -0,0 +1,109 @@
+<?php
+
+return [
+
+    /*
+    |--------------------------------------------------------------------------
+    | Default Queue Connection Name
+    |--------------------------------------------------------------------------
+    |
+    | Laravel's queue API supports an assortment of back-ends via a single
+    | API, giving you convenient access to each back-end using the same
+    | syntax for every one. Here you may define a default connection.
+    |
+    */
+
+    'default' => env('QUEUE_CONNECTION', 'sync'),
+
+    /*
+    |--------------------------------------------------------------------------
+    | Queue Connections
+    |--------------------------------------------------------------------------
+    |
+    | Here you may configure the connection information for each server that
+    | is used by your application. A default configuration has been added
+    | for each back-end shipped with Laravel. You are free to add more.
+    |
+    | Drivers: "sync", "database", "beanstalkd", "sqs", "redis", "null"
+    |
+    */
+
+    'connections' => [
+
+        'sync' => [
+            'driver' => 'sync',
+        ],
+
+        'database' => [
+            'driver' => 'database',
+            'table' => 'jobs',
+            'queue' => 'default',
+            'retry_after' => 90,
+            'after_commit' => false,
+        ],
+
+        'beanstalkd' => [
+            'driver' => 'beanstalkd',
+            'host' => 'localhost',
+            'queue' => 'default',
+            'retry_after' => 90,
+            'block_for' => 0,
+            'after_commit' => false,
+        ],
+
+        'sqs' => [
+            'driver' => 'sqs',
+            'key' => env('AWS_ACCESS_KEY_ID'),
+            'secret' => env('AWS_SECRET_ACCESS_KEY'),
+            'prefix' => env('SQS_PREFIX', 'https://sqs.us-east-1.amazonaws.com/your-account-id'),
+            'queue' => env('SQS_QUEUE', 'default'),
+            'suffix' => env('SQS_SUFFIX'),
+            'region' => env('AWS_DEFAULT_REGION', 'us-east-1'),
+            'after_commit' => false,
+        ],
+
+        'redis' => [
+            'driver' => 'redis',
+            'connection' => 'default',
+            'queue' => env('REDIS_QUEUE', 'default'),
+            'retry_after' => 90,
+            'block_for' => null,
+            'after_commit' => false,
+        ],
+
+    ],
+
+    /*
+    |--------------------------------------------------------------------------
+    | Job Batching
+    |--------------------------------------------------------------------------
+    |
+    | The following options configure the database and table that store job
+    | batching information. These options can be updated to any database
+    | connection and table which has been defined by your application.
+    |
+    */
+
+    'batching' => [
+        'database' => env('DB_CONNECTION', 'mysql'),
+        'table' => 'job_batches',
+    ],
+
+    /*
+    |--------------------------------------------------------------------------
+    | Failed Queue Jobs
+    |--------------------------------------------------------------------------
+    |
+    | These options configure the behavior of failed queue job logging so you
+    | can control which database and table are used to store the jobs that
+    | have failed. You may change them to any database / table you wish.
+    |
+    */
+
+    'failed' => [
+        'driver' => env('QUEUE_FAILED_DRIVER', 'database-uuids'),
+        'database' => env('DB_CONNECTION', 'mysql'),
+        'table' => 'failed_jobs',
+    ],
+
+];

api/config/sanctum.php

@@ -0,0 +1,67 @@
+<?php
+
+use Laravel\Sanctum\Sanctum;
+
+return [
+
+    /*
+    |--------------------------------------------------------------------------
+    | Stateful Domains
+    |--------------------------------------------------------------------------
+    |
+    | Requests from the following domains / hosts will receive stateful API
+    | authentication cookies. Typically, these should include your local
+    | and production domains which access your API via a frontend SPA.
+    |
+    */
+
+    'stateful' => explode(',', env('SANCTUM_STATEFUL_DOMAINS', sprintf(
+        '%s%s',
+        'localhost,localhost:3000,127.0.0.1,127.0.0.1:8000,::1',
+        Sanctum::currentApplicationUrlWithPort()
+    ))),
+
+    /*
+    |--------------------------------------------------------------------------
+    | Sanctum Guards
+    |--------------------------------------------------------------------------
+    |
+    | This array contains the authentication guards that will be checked when
+    | Sanctum is trying to authenticate a request. If none of these guards
+    | are able to authenticate the request, Sanctum will use the bearer
+    | token that's present on an incoming request for authentication.
+    |
+    */
+
+    'guard' => ['web'],
+
+    /*
+    |--------------------------------------------------------------------------
+    | Expiration Minutes
+    |--------------------------------------------------------------------------
+    |
+    | This value controls the number of minutes until an issued token will be
+    | considered expired. If this value is null, personal access tokens do
+    | not expire. This won't tweak the lifetime of first-party sessions.
+    |
+    */
+
+    'expiration' => null,
+
+    /*
+    |--------------------------------------------------------------------------
+    | Sanctum Middleware
+    |--------------------------------------------------------------------------
+    |
+    | When authenticating your first-party SPA with Sanctum you may need to
+    | customize some of the middleware Sanctum uses while processing the
+    | request. You may change the middleware listed below as required.
+    |
+    */
+
+    'middleware' => [
+        'verify_csrf_token' => App\Http\Middleware\VerifyCsrfToken::class,
+        'encrypt_cookies' => App\Http\Middleware\EncryptCookies::class,
+    ],
+
+];

api/config/services.php

@@ -0,0 +1,34 @@
+<?php
+
+return [
+
+    /*
+    |--------------------------------------------------------------------------
+    | Third Party Services
+    |--------------------------------------------------------------------------
+    |
+    | This file is for storing the credentials for third party services such
+    | as Mailgun, Postmark, AWS and more. This file provides the de facto
+    | location for this type of information, allowing packages to have
+    | a conventional file to locate the various service credentials.
+    |
+    */
+
+    'mailgun' => [
+        'domain' => env('MAILGUN_DOMAIN'),
+        'secret' => env('MAILGUN_SECRET'),
+        'endpoint' => env('MAILGUN_ENDPOINT', 'api.mailgun.net'),
+        'scheme' => 'https',
+    ],
+
+    'postmark' => [
+        'token' => env('POSTMARK_TOKEN'),
+    ],
+
+    'ses' => [
+        'key' => env('AWS_ACCESS_KEY_ID'),
+        'secret' => env('AWS_SECRET_ACCESS_KEY'),
+        'region' => env('AWS_DEFAULT_REGION', 'us-east-1'),
+    ],
+
+];

api/config/session.php

@@ -0,0 +1,201 @@
+<?php
+
+use Illuminate\Support\Str;
+
+return [
+
+    /*
+    |--------------------------------------------------------------------------
+    | Default Session Driver
+    |--------------------------------------------------------------------------
+    |
+    | This option controls the default session "driver" that will be used on
+    | requests. By default, we will use the lightweight native driver but
+    | you may specify any of the other wonderful drivers provided here.
+    |
+    | Supported: "file", "cookie", "database", "apc",
+    |            "memcached", "redis", "dynamodb", "array"
+    |
+    */
+
+    'driver' => env('SESSION_DRIVER', 'file'),
+
+    /*
+    |--------------------------------------------------------------------------
+    | Session Lifetime
+    |--------------------------------------------------------------------------
+    |
+    | Here you may specify the number of minutes that you wish the session
+    | to be allowed to remain idle before it expires. If you want them
+    | to immediately expire on the browser closing, set that option.
+    |
+    */
+
+    'lifetime' => env('SESSION_LIFETIME', 120),
+
+    'expire_on_close' => false,
+
+    /*
+    |--------------------------------------------------------------------------
+    | Session Encryption
+    |--------------------------------------------------------------------------
+    |
+    | This option allows you to easily specify that all of your session data
+    | should be encrypted before it is stored. All encryption will be run
+    | automatically by Laravel and you can use the Session like normal.
+    |
+    */
+
+    'encrypt' => false,
+
+    /*
+    |--------------------------------------------------------------------------
+    | Session File Location
+    |--------------------------------------------------------------------------
+    |
+    | When using the native session driver, we need a location where session
+    | files may be stored. A default has been set for you but a different
+    | location may be specified. This is only needed for file sessions.
+    |
+    */
+
+    'files' => storage_path('framework/sessions'),
+
+    /*
+    |--------------------------------------------------------------------------
+    | Session Database Connection
+    |--------------------------------------------------------------------------
+    |
+    | When using the "database" or "redis" session drivers, you may specify a
+    | connection that should be used to manage these sessions. This should
+    | correspond to a connection in your database configuration options.
+    |
+    */
+
+    'connection' => env('SESSION_CONNECTION'),
+
+    /*
+    |--------------------------------------------------------------------------
+    | Session Database Table
+    |--------------------------------------------------------------------------
+    |
+    | When using the "database" session driver, you may specify the table we
+    | should use to manage the sessions. Of course, a sensible default is
+    | provided for you; however, you are free to change this as needed.
+    |
+    */
+
+    'table' => 'sessions',
+
+    /*
+    |--------------------------------------------------------------------------
+    | Session Cache Store
+    |--------------------------------------------------------------------------
+    |
+    | While using one of the framework's cache driven session backends you may
+    | list a cache store that should be used for these sessions. This value
+    | must match with one of the application's configured cache "stores".
+    |
+    | Affects: "apc", "dynamodb", "memcached", "redis"
+    |
+    */
+
+    'store' => env('SESSION_STORE'),
+
+    /*
+    |--------------------------------------------------------------------------
+    | Session Sweeping Lottery
+    |--------------------------------------------------------------------------
+    |
+    | Some session drivers must manually sweep their storage location to get
+    | rid of old sessions from storage. Here are the chances that it will
+    | happen on a given request. By default, the odds are 2 out of 100.
+    |
+    */
+
+    'lottery' => [2, 100],
+
+    /*
+    |--------------------------------------------------------------------------
+    | Session Cookie Name
+    |--------------------------------------------------------------------------
+    |
+    | Here you may change the name of the cookie used to identify a session
+    | instance by ID. The name specified here will get used every time a
+    | new session cookie is created by the framework for every driver.
+    |
+    */
+
+    'cookie' => env(
+        'SESSION_COOKIE',
+        Str::slug(env('APP_NAME', 'laravel'), '_').'_session'
+    ),
+
+    /*
+    |--------------------------------------------------------------------------
+    | Session Cookie Path
+    |--------------------------------------------------------------------------
+    |
+    | The session cookie path determines the path for which the cookie will
+    | be regarded as available. Typically, this will be the root path of
+    | your application but you are free to change this when necessary.
+    |
+    */
+
+    'path' => '/',
+
+    /*
+    |--------------------------------------------------------------------------
+    | Session Cookie Domain
+    |--------------------------------------------------------------------------
+    |
+    | Here you may change the domain of the cookie used to identify a session
+    | in your application. This will determine which domains the cookie is
+    | available to in your application. A sensible default has been set.
+    |
+    */
+
+    'domain' => env('SESSION_DOMAIN'),
+
+    /*
+    |--------------------------------------------------------------------------
+    | HTTPS Only Cookies
+    |--------------------------------------------------------------------------
+    |
+    | By setting this option to true, session cookies will only be sent back
+    | to the server if the browser has a HTTPS connection. This will keep
+    | the cookie from being sent to you when it can't be done securely.
+    |
+    */
+
+    'secure' => env('SESSION_SECURE_COOKIE'),
+
+    /*
+    |--------------------------------------------------------------------------
+    | HTTP Access Only
+    |--------------------------------------------------------------------------
+    |
+    | Setting this value to true will prevent JavaScript from accessing the
+    | value of the cookie and the cookie will only be accessible through
+    | the HTTP protocol. You are free to modify this option if needed.
+    |
+    */
+
+    'http_only' => true,
+
+    /*
+    |--------------------------------------------------------------------------
+    | Same-Site Cookies
+    |--------------------------------------------------------------------------
+    |
+    | This option determines how your cookies behave when cross-site requests
+    | take place, and can be used to mitigate CSRF attacks. By default, we
+    | will set this value to "lax" since this is a secure default value.
+    |
+    | Supported: "lax", "strict", "none", null
+    |
+    */
+
+    'same_site' => 'lax',
+
+];

api/config/view.php

@@ -0,0 +1,36 @@
+<?php
+
+return [
+
+    /*
+    |--------------------------------------------------------------------------
+    | View Storage Paths
+    |--------------------------------------------------------------------------
+    |
+    | Most templating systems load templates from disk. Here you may specify
+    | an array of paths that should be checked for your views. Of course
+    | the usual Laravel view path has already been registered for you.
+    |
+    */
+
+    'paths' => [
+        resource_path('views'),
+    ],
+
+    /*
+    |--------------------------------------------------------------------------
+    | Compiled View Path
+    |--------------------------------------------------------------------------
+    |
+    | This option determines where all the compiled Blade templates will be
+    | stored for your application. Typically, this is within the storage
+    | directory. However, as usual, you are free to change this value.
+    |
+    */
+
+    'compiled' => env(
+        'VIEW_COMPILED_PATH',
+        realpath(storage_path('framework/views'))
+    ),
+
+];

api/database/.gitignore

@@ -0,0 +1 @@
+*.sqlite*

api/database/factories/UserFactory.php

@@ -0,0 +1,38 @@
+<?php
+
+namespace Database\Factories;
+
+use Illuminate\Database\Eloquent\Factories\Factory;
+use Illuminate\Support\Str;
+
+/**
+ * @extends \Illuminate\Database\Eloquent\Factories\Factory<\App\Models\User>
+ */
+class UserFactory extends Factory
+{
+    /**
+     * Define the model's default state.
+     *
+     * @return array<string, mixed>
+     */
+    public function definition(): array
+    {
+        return [
+            'name' => fake()->name(),
+            'email' => fake()->unique()->safeEmail(),
+            'email_verified_at' => now(),
+            'password' => '$2y$10$92IXUNpkjO0rOQ5byMi.Ye4oKoEa3Ro9llC/.og/at2.uheWG/igi', // password
+            'remember_token' => Str::random(10),
+        ];
+    }
+
+    /**
+     * Indicate that the model's email address should be unverified.
+     */
+    public function unverified(): static
+    {
+        return $this->state(fn (array $attributes) => [
+            'email_verified_at' => null,
+        ]);
+    }
+}

api/database/migrations/2023_07_29_021050_create_configs_table.php

@@ -0,0 +1,32 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration {
+  /**
+   * Run the migrations.
+   */
+  public function up(): void
+  {
+    Schema::create('configs', function (Blueprint $table) {
+      $table->id();
+      $table->string('name', 50)->index();
+      $table->longText('value');
+      $table->tinyInteger('type')->comment('1-文字 2-图片 3-文字数组 4-图片数组 5-JSON 6-富文本 7-开关 8-颜色')->index();
+      $table->tinyInteger('client')->comment('类型 0-公共 1-后台')->index();
+      $table->tinyInteger('login')->comment('登录类型 1-登录获取 2-随时获取')->index();
+      $table->string('remark', 100);
+      $table->timestamps();
+    });
+  }
+
+  /**
+   * Reverse the migrations.
+   */
+  public function down(): void
+  {
+    Schema::dropIfExists('configs');
+  }
+};

api/database/migrations/2023_07_29_042032_create_admins_table.php

@@ -0,0 +1,32 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration {
+  /**
+   * Run the migrations.
+   */
+  public function up(): void
+  {
+    Schema::create('admins', function (Blueprint $table) {
+      $table->id();
+      $table->string('nickname', 50)->comment('名称');
+      $table->string('avatar', 200)->default('')->comment('头像');
+      $table->integer('admin_auth_group')->comment('权限组ID')->index();
+      $table->integer('initial_password')->default(1)->comment('1-下次登录需要修改密码 2-已经修改密码');
+      $table->tinyInteger('status')->default(1)->comment('1-正常 2-禁用');
+      $table->tinyInteger('del')->default(2)->comment('1-删除 2-正常');
+      $table->timestamps();
+    });
+  }
+
+  /**
+   * Reverse the migrations.
+   */
+  public function down(): void
+  {
+    Schema::dropIfExists('admins');
+  }
+};

api/database/migrations/2023_07_29_042123_create_admin_accounts_table.php

@@ -0,0 +1,31 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration {
+  /**
+   * Run the migrations.
+   */
+  public function up(): void
+  {
+    Schema::create('admin_accounts', function (Blueprint $table) {
+      $table->id();
+      $table->bigInteger('admin')->index();
+      $table->string('account', 50)->index();
+      $table->string('secret', 80);
+      $table->tinyInteger('type')->comment('1-账号密码');
+      $table->tinyInteger('del')->default(2)->comment('1-删除 2-正常');
+      $table->timestamps();
+    });
+  }
+
+  /**
+   * Reverse the migrations.
+   */
+  public function down(): void
+  {
+    Schema::dropIfExists('admin_accounts');
+  }
+};

api/database/migrations/2023_07_29_042139_create_admin_auth_groups_table.php

@@ -0,0 +1,31 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration {
+  /**
+   * Run the migrations.
+   */
+  public function up(): void
+  {
+    Schema::create('admin_auth_groups', function (Blueprint $table) {
+      $table->id();
+      $table->string('name', 20)->comment('名称');
+      $table->string('admin_auths', 1000)->comment('权限IDS JSON');
+      $table->string('remark', 100)->comment('备注');
+      $table->tinyInteger('status')->default(1)->comment('1-可用 2-禁用');
+      $table->tinyInteger('del')->default(2)->comment('1-删除 2-正常');
+      $table->timestamps();
+    });
+  }
+
+  /**
+   * Reverse the migrations.
+   */
+  public function down(): void
+  {
+    Schema::dropIfExists('admin_auth_groups');
+  }
+};

api/database/migrations/2023_07_29_042142_create_admin_auths_table.php

@@ -0,0 +1,37 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration {
+  /**
+   * Run the migrations.
+   */
+  public function up(): void
+  {
+    Schema::create('admin_auths', function (Blueprint $table) {
+      $table->id();
+      $table->string('name', 200)->comment('名称');
+      $table->string('title', 20)->comment('显示标题');
+      $table->string('icon', 100)->default('')->comment('显示图标');
+      $table->integer('pid')->comment('上级ID');
+      $table->tinyInteger('type')->comment('1-分组 2-页面/接口');
+      $table->tinyInteger('check')->comment('1-需要验证 2-不需要验证');
+      $table->tinyInteger('show')->default(1)->comment('1-显示 2-不显示');
+      $table->tinyInteger('status')->default(1)->comment('1-正常 2-禁用');
+      $table->tinyInteger('del')->default(2)->comment('1-删除 2-正常');
+      $table->string('message', 50)->comment('验证失败的提示信息');
+      $table->integer('order')->default(0)->comment('排序');
+      $table->timestamps();
+    });
+  }
+
+  /**
+   * Reverse the migrations.
+   */
+  public function down(): void
+  {
+    Schema::dropIfExists('admin_auths');
+  }
+};

api/database/migrations/2023_07_29_042151_create_admin_tokens_table.php

@@ -0,0 +1,30 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration {
+  /**
+   * Run the migrations.
+   */
+  public function up(): void
+  {
+    Schema::create('admin_tokens', function (Blueprint $table) {
+      $table->id();
+      $table->bigInteger('admin')->index()->comment('账号ID');
+      $table->string('token', 50)->comment('TOKEN')->index();
+      $table->tinyInteger('type')->comment('1-后台');
+      $table->tinyInteger('del')->default(2)->comment('1-删除 2-正常');
+      $table->timestamps();
+    });
+  }
+
+  /**
+   * Reverse the migrations.
+   */
+  public function down(): void
+  {
+    Schema::dropIfExists('admin_tokens');
+  }
+};

api/database/migrations/2023_07_29_105144_push_admin_data.php

@@ -0,0 +1,47 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+class PushAdminData extends Migration
+{
+  /**
+   * Run the migrations.
+   *
+   * @return void
+   */
+  public function up()
+  {
+    $data = [
+      [
+        'account' => 'admin',
+        'nickname' => '超级管理员',
+        'password' => bcrypt('000000'),
+        'admin_auth_group' => -1,
+      ],
+    ];
+    foreach ($data as $datum) {
+      $admin = new App\Models\Admin();
+      $admin->nickname = $datum['nickname'];
+      $admin->admin_auth_group = $datum['admin_auth_group'];
+      $admin->save();
+      $admin_account = new App\Models\AdminAccount();
+      $admin_account->admin = $admin->id;
+      $admin_account->account = $datum['account'];
+      $admin_account->secret = $datum['password'];
+      $admin_account->type = 1;
+      $admin_account->save();
+    }
+  }
+
+  /**
+   * Reverse the migrations.
+   *
+   * @return void
+   */
+  public function down()
+  {
+    //
+  }
+}

api/database/migrations/2023_07_29_105144_push_auth_data.php

@@ -0,0 +1,131 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+class PushAuthData extends Migration
+{
+  /**
+   * Run the migrations.
+   *
+   * @return void
+   */
+  public function up()
+  {
+    $data = [[
+      'name' => 'admin_basics',
+      'title' => '后台基础接口',
+      'icon' => '',
+      'pid' => '0',
+      'type' => '1',
+      'check' => '2',
+      'show' => '2',
+    ], [
+      'name' => 'admin_basics_login',
+      'title' => '后台登录',
+      'icon' => '',
+      'pid' => '1',
+      'type' => '2',
+      'check' => '1',
+      'show' => '2',
+      'message' => '该账号所属权限组已被禁止登录后台'
+    ], [
+      'name' => 'admin',
+      'title' => '管理员设置',
+      'icon' => 'every-user',
+      'pid' => '0',
+      'type' => '1',
+      'check' => '2',
+      'show' => '1',
+      'message' => ''
+    ], [
+      'name' => 'admin-auth',
+      'title' => '权限管理',
+      'icon' => 'personal-privacy',
+      'pid' => '3',
+      'type' => '2',
+      'check' => '1',
+      'show' => '1',
+      'message' => '该账号所属权限组不能对权限分组进行设置'
+    ], [
+      'name' => 'admin-list',
+      'title' => '管理员列表',
+      'icon' => 'every-user',
+      'pid' => '3',
+      'type' => '2',
+      'check' => '1',
+      'show' => '1',
+      'message' => '该账号所属权限组不能对管理员进行设置'
+    ], [
+      'name' => 'config',
+      'title' => '后台管理',
+      'icon' => 'setting',
+      'pid' => '0',
+      'type' => '1',
+      'check' => '2',
+      'show' => '1',
+    ], [
+      'name' => 'config-config',
+      'title' => '后台配置',
+      'icon' => 'setting-config',
+      'pid' => '6',
+      'type' => '2',
+      'check' => '1',
+      'show' => '1',
+      'message' => '该账号所属权限组不能对参数配置进行设置'
+    ], [
+      'name' => 'config-router',
+      'title' => '路由配置',
+      'icon' => 'left-and-right-branch',
+      'pid' => '6',
+      'type' => '2',
+      'check' => '1',
+      'show' => '1',
+      'message' => '该账号所属权限组不能对路由进行设置'
+    ], [
+      'name' => 'config-log',
+      'title' => '请求日志',
+      'icon' => 'log',
+      'pid' => '6',
+      'type' => '2',
+      'check' => '1',
+      'show' => '1',
+      'message' => '该账号所属权限组不能查看请求日志'
+    ], [
+      'name' => 'config-upload',
+      'title' => '上传管理',
+      'icon' => 'upload',
+      'pid' => '6',
+      'type' => '2',
+      'check' => '1',
+      'show' => '1',
+      'message' => '该账号所属权限组不能查看上传管理'
+    ]];
+    foreach ($data as $datum) {
+      $auth = new App\Models\AdminAuth();
+      $auth->name = $datum['name'];
+      $auth->title = $datum['title'];
+      $auth->icon = $datum['icon'];
+      $auth->pid = $datum['pid'];
+      $auth->type = $datum['type'];
+      $auth->check = $datum['check'];
+      $auth->show = $datum['show'];
+      $auth->message = $datum['message'] ?? '';
+      $auth->status = 1;
+      $auth->del = 2;
+      $auth->order = 0;
+      $auth->save();
+    }
+  }
+
+  /**
+   * Reverse the migrations.
+   *
+   * @return void
+   */
+  public function down()
+  {
+    //
+  }
+}

api/database/migrations/2023_07_29_143353_push_config_data.php

@@ -0,0 +1,94 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+class PushConfigData extends Migration
+{
+  /**
+   * Run the migrations.
+   *
+   * @return void
+   */
+  public function up()
+  {
+    $data = [[
+      'name' => 'Logo',
+      'value' => '/storage/assets/default/logo.png',
+      'type' => '2',
+      'client' => '0',
+      'login' => '2',
+    ], [
+      'name' => 'Favicon',
+      'value' => '/storage/assets/default/favicon.png',
+      'type' => '2',
+      'client' => '0',
+      'login' => '2',
+    ], [
+      'name' => 'Login欢迎图片',
+      'value' => '/storage/assets/default/login_cover.png',
+      'type' => '2',
+      'client' => '1',
+      'login' => '2',
+    ], [
+      'name' => 'Login背景图',
+      'value' => '/storage/assets/default/login_bg.png',
+      'type' => '2',
+      'client' => '1',
+      'login' => '2',
+    ], [
+      'name' => 'Login背景色',
+      'value' => '#1681fd',
+      'type' => '8',
+      'client' => '1',
+      'login' => '2',
+    ], [
+      'name' => '网站名称',
+      'value' => env('APP_NAME'),
+      'type' => '1',
+      'client' => '0',
+      'login' => '2',
+    ], [
+      'name' => '网站介绍',
+      'value' => '中后台前后端一站式解决方案',
+      'type' => '1',
+      'client' => '0',
+      'login' => '2',
+    ], [
+      'name' => '后台密码登录验证',
+      'value' => '1',
+      'type' => '7',
+      'client' => '1',
+      'login' => '2',
+      'remark' => '0-关闭 1-图形',
+    ], [
+      'name' => '后台扫码登录开关',
+      'value' => '0',
+      'type' => '7',
+      'client' => '1',
+      'login' => '2',
+      'remark' => '0-关闭 1-开启',
+    ]];
+    foreach ($data as $datum) {
+      $config = new App\Models\Config();
+      $config->name = $datum['name'];
+      $config->value = $datum['value'];
+      $config->type = $datum['type'];
+      $config->client = $datum['client'];
+      $config->login = $datum['login'];
+      $config->remark = $datum['remark'] ?? '';
+      $config->save();
+    }
+  }
+
+  /**
+   * Reverse the migrations.
+   *
+   * @return void
+   */
+  public function down()
+  {
+    //
+  }
+}

api/database/migrations/2023_07_29_214939_create_image_captchas_table.php

@@ -0,0 +1,27 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration {
+  /**
+   * Run the migrations.
+   */
+  public function up(): void
+  {
+    Schema::create('image_captchas', function (Blueprint $table) {
+      $table->id();
+      $table->string('uuid', 60)->index();
+      $table->timestamps();
+    });
+  }
+
+  /**
+   * Reverse the migrations.
+   */
+  public function down(): void
+  {
+    Schema::dropIfExists('image_captchas');
+  }
+};

api/database/migrations/2023_08_08_092916_create_uploads_table.php

@@ -0,0 +1,34 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration {
+  /**
+   * Run the migrations.
+   */
+  public function up(): void
+  {
+    Schema::create('uploads', function (Blueprint $table) {
+      $table->id();
+      $table->string('uuid', 80)->comment('UUID')->index();
+      $table->string('name', 100)->comment('文件名')->index();
+      $table->string('path', 200)->comment('路径');
+      $table->string('url', 200)->comment('访问链接');
+      $table->string('from', 100)->comment('上传接口')->index();
+      $table->decimal('size', 20, 4)->comment('大小');
+      $table->string('ext', 10)->comment('后缀')->index();
+      $table->string('md5', 80)->comment('MD5')->index();
+      $table->timestamps();
+    });
+  }
+
+  /**
+   * Reverse the migrations.
+   */
+  public function down(): void
+  {
+    Schema::dropIfExists('uploads');
+  }
+};

api/database/seeders/DatabaseSeeder.php

@@ -0,0 +1,22 @@
+<?php
+
+namespace Database\Seeders;
+
+// use Illuminate\Database\Console\Seeds\WithoutModelEvents;
+use Illuminate\Database\Seeder;
+
+class DatabaseSeeder extends Seeder
+{
+    /**
+     * Seed the application's database.
+     */
+    public function run(): void
+    {
+        // \App\Models\User::factory(10)->create();
+
+        // \App\Models\User::factory()->create([
+        //     'name' => 'Test User',
+        //     'email' => 'test@example.com',
+        // ]);
+    }
+}

api/public/index.php

@@ -0,0 +1,55 @@
+<?php
+
+use Illuminate\Contracts\Http\Kernel;
+use Illuminate\Http\Request;
+
+define('LARAVEL_START', microtime(true));
+
+/*
+|--------------------------------------------------------------------------
+| Check If The Application Is Under Maintenance
+|--------------------------------------------------------------------------
+|
+| If the application is in maintenance / demo mode via the "down" command
+| we will load this file so that any pre-rendered content can be shown
+| instead of starting the framework, which could cause an exception.
+|
+*/
+
+if (file_exists($maintenance = __DIR__.'/../storage/framework/maintenance.php')) {
+    require $maintenance;
+}
+
+/*
+|--------------------------------------------------------------------------
+| Register The Auto Loader
+|--------------------------------------------------------------------------
+|
+| Composer provides a convenient, automatically generated class loader for
+| this application. We just need to utilize it! We'll simply require it
+| into the script here so we don't need to manually load our classes.
+|
+*/
+
+require __DIR__.'/../vendor/autoload.php';
+
+/*
+|--------------------------------------------------------------------------
+| Run The Application
+|--------------------------------------------------------------------------
+|
+| Once we have the application, we can handle the incoming request using
+| the application's HTTP kernel. Then, we will send the response back
+| to this client's browser, allowing them to enjoy our application.
+|
+*/
+
+$app = require_once __DIR__.'/../bootstrap/app.php';
+
+$kernel = $app->make(Kernel::class);
+
+$response = $kernel->handle(
+    $request = Request::capture()
+)->send();
+
+$kernel->terminate($request, $response);

api/public/robots.txt

@@ -0,0 +1,2 @@
+User-agent: *
+Disallow:

api/resources/js/app.js

@@ -0,0 +1 @@
+import './bootstrap';

api/resources/js/bootstrap.js

@@ -0,0 +1,32 @@
+/**
+ * We'll load the axios HTTP library which allows us to easily issue requests
+ * to our Laravel back-end. This library automatically handles sending the
+ * CSRF token as a header based on the value of the "XSRF" token cookie.
+ */
+
+import axios from 'axios';
+window.axios = axios;
+
+window.axios.defaults.headers.common['X-Requested-With'] = 'XMLHttpRequest';
+
+/**
+ * Echo exposes an expressive API for subscribing to channels and listening
+ * for events that are broadcast by Laravel. Echo and event broadcasting
+ * allows your team to easily build robust real-time web applications.
+ */
+
+// import Echo from 'laravel-echo';
+
+// import Pusher from 'pusher-js';
+// window.Pusher = Pusher;
+
+// window.Echo = new Echo({
+//     broadcaster: 'pusher',
+//     key: import.meta.env.VITE_PUSHER_APP_KEY,
+//     cluster: import.meta.env.VITE_PUSHER_APP_CLUSTER ?? 'mt1',
+//     wsHost: import.meta.env.VITE_PUSHER_HOST ? import.meta.env.VITE_PUSHER_HOST : `ws-${import.meta.env.VITE_PUSHER_APP_CLUSTER}.pusher.com`,
+//     wsPort: import.meta.env.VITE_PUSHER_PORT ?? 80,
+//     wssPort: import.meta.env.VITE_PUSHER_PORT ?? 443,
+//     forceTLS: (import.meta.env.VITE_PUSHER_SCHEME ?? 'https') === 'https',
+//     enabledTransports: ['ws', 'wss'],
+// });

api/resources/views/emails/example.blade.php

@@ -0,0 +1,16 @@
+<!doctype html>
+<html lang="zh">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport"
+        content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
+  <meta http-equiv="X-UA-Compatible" content="ie=edge">
+  <title>Example Email</title>
+</head>
+<body>
+<div>
+  <h1>欢迎 {{ $data['name'] }}！</h1>
+  <p>{{ $data['date'] }}</p>
+</div>
+</body>
+</html>

api/routes/api.php

@@ -0,0 +1,19 @@
+<?php
+
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Route;
+
+/*
+|--------------------------------------------------------------------------
+| API Routes
+|--------------------------------------------------------------------------
+|
+| Here is where you can register API routes for your application. These
+| routes are loaded by the RouteServiceProvider and all of them will
+| be assigned to the "api" middleware group. Make something great!
+|
+*/
+
+Route::middleware('auth:sanctum')->get('/user', function (Request $request) {
+    return $request->user();
+});

api/routes/channels.php

@@ -0,0 +1,18 @@
+<?php
+
+use Illuminate\Support\Facades\Broadcast;
+
+/*
+|--------------------------------------------------------------------------
+| Broadcast Channels
+|--------------------------------------------------------------------------
+|
+| Here you may register all of the event broadcasting channels that your
+| application supports. The given channel authorization callbacks are
+| used to check if an authenticated user can listen to the channel.
+|
+*/
+
+Broadcast::channel('App.Models.User.{id}', function ($user, $id) {
+    return (int) $user->id === (int) $id;
+});

api/routes/console.php

@@ -0,0 +1,19 @@
+<?php
+
+use Illuminate\Foundation\Inspiring;
+use Illuminate\Support\Facades\Artisan;
+
+/*
+|--------------------------------------------------------------------------
+| Console Routes
+|--------------------------------------------------------------------------
+|
+| This file is where you may define all of your Closure based console
+| commands. Each Closure is bound to a command instance allowing a
+| simple approach to interacting with each command's IO methods.
+|
+*/
+
+Artisan::command('inspire', function () {
+    $this->comment(Inspiring::quote());
+})->purpose('Display an inspiring quote');

api/routes/web.php

@@ -0,0 +1,65 @@
+<?php
+
+use Illuminate\Support\Facades\Route;
+
+/*
+|--------------------------------------------------------------------------
+| Web Routes
+|--------------------------------------------------------------------------
+|
+| Here is where you can register web routes for your application. These
+| routes are loaded by the RouteServiceProvider and all of them will
+| be assigned to the "web" middleware group. Make something great!
+|
+*/
+$admin_path = 'Admin';
+$zero_path = 'Zero';
+$app_path = 'App';
+Route::get("open/Gzh/auth/{app_id}", [\App\Http\Controllers\WeChatController::class, 'auth']);
+
+Route::get("api/Test/Excel/excel_test", [\App\Http\Controllers\ExcelController::class, 'excel_test']);
+Route::post("api/Test/Email/email_test", [\App\Http\Controllers\EmailController::class, 'email_test']);
+Route::post("api/Test/WeChatPay/callback_test/{app_id}", [\App\Http\Controllers\WeChatPayController::class, 'callback_test']);
+Route::post("api/Test/WeChatPay/pay_test", [\App\Http\Controllers\WeChatPayController::class, 'pay_test']);
+Route::post("api/Test/WeChat/login_test", [\App\Http\Controllers\WeChatController::class, 'login_test']);
+
+Route::post("api/Gateway/close", [\App\Http\Controllers\GatewayController::class, 'close']);
+Route::post("api/$admin_path/Config/create", [\App\Http\Controllers\ConfigController::class, 'create']);
+Route::post("api/$admin_path/Config/update", [\App\Http\Controllers\ConfigController::class, 'update']);
+Route::post("api/$admin_path/Config/delete", [\App\Http\Controllers\ConfigController::class, 'delete']);
+Route::post("api/$admin_path/Config/list", [\App\Http\Controllers\ConfigController::class, 'list']);
+Route::post("api/$admin_path/AdminAuth/select", [\App\Http\Controllers\AdminAuthController::class, 'select']);
+Route::post("api/$admin_path/AdminAuth/create", [\App\Http\Controllers\AdminAuthController::class, 'create']);
+Route::post("api/$admin_path/AdminAuth/update", [\App\Http\Controllers\AdminAuthController::class, 'update']);
+Route::post("api/$admin_path/AdminAuth/delete", [\App\Http\Controllers\AdminAuthController::class, 'delete']);
+Route::post("api/$admin_path/AdminAuth/list", [\App\Http\Controllers\AdminAuthController::class, 'list']);
+Route::post("api/$admin_path/RequestLog/txt", [\App\Http\Controllers\RequestLogController::class, 'txt']);
+Route::post("api/$admin_path/RequestLog/list", [\App\Http\Controllers\RequestLogController::class, 'list']);
+Route::post("api/$admin_path/Upload/list", [\App\Http\Controllers\UploadController::class, 'list']);
+Route::post("api/$admin_path/Upload/delete", [\App\Http\Controllers\UploadController::class, 'delete']);
+Route::post("api/$admin_path/Upload/search", [\App\Http\Controllers\UploadController::class, 'search']);
+Route::post("api/$admin_path/Admin/create", [\App\Http\Controllers\AdminController::class, 'create']);
+Route::post("api/$admin_path/Admin/update", [\App\Http\Controllers\AdminController::class, 'update']);
+Route::post("api/$admin_path/Admin/delete", [\App\Http\Controllers\AdminController::class, 'delete']);
+Route::post("api/$admin_path/Admin/list", [\App\Http\Controllers\AdminController::class, 'list']);
+Route::post("api/$admin_path/AdminAuthGroup/select", [\App\Http\Controllers\AdminAuthGroupController::class, 'select']);
+Route::post("api/$admin_path/AdminAuthGroup/create", [\App\Http\Controllers\AdminAuthGroupController::class, 'create']);
+Route::post("api/$admin_path/AdminAuthGroup/update", [\App\Http\Controllers\AdminAuthGroupController::class, 'update']);
+Route::post("api/$admin_path/AdminAuthGroup/delete", [\App\Http\Controllers\AdminAuthGroupController::class, 'delete']);
+Route::post("api/$admin_path/AdminAuthGroup/list", [\App\Http\Controllers\AdminAuthGroupController::class, 'list']);
+Route::post("api/$admin_path/AdminAuth/choose", [\App\Http\Controllers\AdminAuthController::class, 'choose']);
+Route::post("api/$admin_path/Upload/image", [\App\Http\Controllers\UploadController::class, 'image']);
+Route::post("api/$admin_path/Admin/update_self", [\App\Http\Controllers\AdminController::class, 'update_self']);
+Route::post("api/$admin_path/AdminAccount/change_password", [\App\Http\Controllers\AdminAccountController::class, 'change_password']);
+Route::post("api/$admin_path/AdminAuth/menu", [\App\Http\Controllers\AdminAuthController::class, 'menu']);
+Route::post("api/$admin_path/Admin/quit", [\App\Http\Controllers\AdminController::class, 'quit']);
+Route::post("api/$admin_path/Admin/status", [\App\Http\Controllers\AdminController::class, 'status']);
+Route::post("api/$admin_path/Admin/info", [\App\Http\Controllers\AdminController::class, 'info']);
+Route::post("api/$admin_path/Admin/login", [\App\Http\Controllers\AdminController::class, 'login']);
+Route::post("api/$admin_path/ImageCaptcha/create", [\App\Http\Controllers\ImageCaptchaController::class, 'create']);
+Route::post("api/$admin_path/Config/get", [\App\Http\Controllers\ConfigController::class, 'get']);
+Route::post("api/$zero_path/Config/get", [\App\Http\Controllers\ConfigController::class, 'get']);
+Route::any('api/yo', \App\Http\Controllers\YoController::class);
+Route::get('/', function () {
+  return view('welcome');
+});