feat: limit the ability of common user to set the remaining usage times of token (#9)

controller/token.go

@@ -76,6 +76,7 @@ func GetToken(c *gin.Context) {
 }
 
 func AddToken(c *gin.Context) {
+	isAdmin := c.GetInt("role") >= common.RoleAdminUser
 	token := model.Token{}
 	err := c.ShouldBindJSON(&token)
 	if err != nil {
@@ -99,8 +100,10 @@ func AddToken(c *gin.Context) {
 		CreatedTime:  common.GetTimestamp(),
 		AccessedTime: common.GetTimestamp(),
 		ExpiredTime:  token.ExpiredTime,
-		RemainTimes:    token.RemainTimes,
+	}
-		UnlimitedTimes: token.UnlimitedTimes,
+	if isAdmin {
+		cleanToken.RemainTimes = token.RemainTimes
+		cleanToken.UnlimitedTimes = token.UnlimitedTimes
 	}
 	err = cleanToken.Insert()
 	if err != nil {
@@ -136,6 +139,7 @@ func DeleteToken(c *gin.Context) {
 }
 
 func UpdateToken(c *gin.Context) {
+	isAdmin := c.GetInt("role") >= common.RoleAdminUser
 	userId := c.GetInt("id")
 	statusOnly := c.Query("status_only")
 	token := model.Token{}
@@ -177,9 +181,11 @@ func UpdateToken(c *gin.Context) {
 		// If you add more fields, please also update token.Update()
 		cleanToken.Name = token.Name
 		cleanToken.ExpiredTime = token.ExpiredTime
+		if isAdmin {
 			cleanToken.RemainTimes = token.RemainTimes
 			cleanToken.UnlimitedTimes = token.UnlimitedTimes
 		}
+	}
 	err = cleanToken.Update()
 	if err != nil {
 		c.JSON(http.StatusOK, gin.H{

web/src/pages/Token/EditToken.js

@@ -1,7 +1,7 @@
 import React, { useEffect, useState } from 'react';
 import { Button, Form, Header, Segment } from 'semantic-ui-react';
 import { useParams } from 'react-router-dom';
-import { API, showError, showSuccess, timestamp2string } from '../../helpers';
+import { API, isAdmin, showError, showSuccess, timestamp2string } from '../../helpers';
 
 const EditToken = () => {
   const params = useParams();
@@ -12,8 +12,9 @@ const EditToken = () => {
     name: '',
     remain_times: 0,
     expired_time: -1,
-    unlimited_times: false,
+    unlimited_times: false
   };
+  const isAdminUser = isAdmin();
   const [inputs, setInputs] = useState(originInputs);
   const { name, remain_times, expired_time, unlimited_times } = inputs;
 
@@ -38,7 +39,7 @@ const EditToken = () => {
 
   const setUnlimitedTimes = () => {
     setInputs({ ...inputs, unlimited_times: !unlimited_times });
-  }
+  };
 
   const loadToken = async () => {
     let res = await API.get(`/api/token/${tokenId}`);
@@ -93,7 +94,7 @@ const EditToken = () => {
   return (
     <>
       <Segment loading={loading}>
-        <Header as='h3'>{isEdit ? "更新令牌信息" : "创建新的令牌"}</Header>
+        <Header as='h3'>{isEdit ? '更新令牌信息' : '创建新的令牌'}</Header>
         <Form autoComplete='off'>
           <Form.Field>
             <Form.Input
@@ -106,6 +107,8 @@ const EditToken = () => {
               required={!isEdit}
             />
           </Form.Field>
+          {
+            isAdminUser && <>
               <Form.Field>
                 <Form.Input
                   label='剩余次数'
@@ -120,7 +123,9 @@ const EditToken = () => {
               </Form.Field>
               <Button type={'button'} onClick={() => {
                 setUnlimitedTimes();
-          }}>{unlimited_times ? "取消无限次" : "设置为无限次"}</Button>
+              }}>{unlimited_times ? '取消无限次' : '设置为无限次'}</Button>
+            </>
+          }
           <Form.Field>
             <Form.Input
               label='过期时间'