阶段性提交

2020-07-22 22:19:39 +08:00
parent cc971be504
commit b984b68089
143 changed files with 22667 additions and 37 deletions
--- a/internal/configs/api_config.go
+++ b/internal/configs/api_config.go
@@ -0,0 +1,30 @@
+package configs
+
+import (
+	"github.com/go-yaml/yaml"
+	"github.com/iwind/TeaGo/Tea"
+	"io/ioutil"
+)
+
+type APIConfig struct {
+	RPC struct {
+		Endpoints []string `yaml:"endpoints"`
+	} `yaml:"rpc"`
+	NodeId string `yaml:"nodeId"`
+	Secret string `yaml:"secret"`
+}
+
+func LoadAPIConfig() (*APIConfig, error) {
+	data, err := ioutil.ReadFile(Tea.ConfigFile("api.yaml"))
+	if err != nil {
+		return nil, err
+	}
+
+	config := &APIConfig{}
+	err = yaml.Unmarshal(data, config)
+	if err != nil {
+		return nil, err
+	}
+
+	return config, nil
+}
--- a/internal/configs/api_config_test.go
+++ b/internal/configs/api_config_test.go
@@ -0,0 +1,14 @@
+package configs
+
+import (
+	_ "github.com/iwind/TeaGo/bootstrap"
+	"testing"
+)
+
+func TestLoadAPIConfig(t *testing.T) {
+	config, err := LoadAPIConfig()
+	if err != nil {
+		t.Fatal(err)
+	}
+	t.Log(config)
+}
--- a/internal/const/const.go
+++ b/internal/const/const.go
@@ -3,12 +3,14 @@ package teaconst
 const (
 	Version = "0.0.1"

-	ProductName = "Edge Admin"
-	ProcessName = "edge-admin"
+	ProductName   = "Edge Admin"
+	ProcessName   = "edge-admin"
+	ProductNameZH = "Edge"

 	Role = "admin"

-	EncryptKey = "8f983f4d69b83aaa0d74b21a212f6967"
+	EncryptKey    = "8f983f4d69b83aaa0d74b21a212f6967"
+	EncryptMethod = "aes-256-cfb"

 	ErrServer = "服务器出了点小问题，请稍后重试"
 )
--- a/internal/encrypt/magic_key.go
+++ b/internal/encrypt/magic_key.go
@@ -0,0 +1,41 @@
+package encrypt
+
+import (
+	"github.com/iwind/TeaGo/logs"
+)
+
+const (
+	MagicKey = "f1c8eafb543f03023e97b7be864a4e9b"
+)
+
+// 加密特殊信息
+func MagicKeyEncode(data []byte) []byte {
+	method, err := NewMethodInstance("aes-256-cfb", MagicKey, MagicKey[:16])
+	if err != nil {
+		logs.Println("[MagicKeyEncode]" + err.Error())
+		return data
+	}
+
+	dst, err := method.Encrypt(data)
+	if err != nil {
+		logs.Println("[MagicKeyEncode]" + err.Error())
+		return data
+	}
+	return dst
+}
+
+// 解密特殊信息
+func MagicKeyDecode(data []byte) []byte {
+	method, err := NewMethodInstance("aes-256-cfb", MagicKey, MagicKey[:16])
+	if err != nil {
+		logs.Println("[MagicKeyEncode]" + err.Error())
+		return data
+	}
+
+	src, err := method.Decrypt(data)
+	if err != nil {
+		logs.Println("[MagicKeyEncode]" + err.Error())
+		return data
+	}
+	return src
+}
--- a/internal/encrypt/magic_key_test.go
+++ b/internal/encrypt/magic_key_test.go
@@ -0,0 +1,11 @@
+package encrypt
+
+import "testing"
+
+func TestMagicKeyEncode(t *testing.T) {
+	dst := MagicKeyEncode([]byte("Hello,World"))
+	t.Log("dst:", string(dst))
+
+	src := MagicKeyDecode(dst)
+	t.Log("src:", string(src))
+}
--- a/internal/encrypt/method.go
+++ b/internal/encrypt/method.go
@@ -0,0 +1,12 @@
+package encrypt
+
+type MethodInterface interface {
+	// 初始化
+	Init(key []byte, iv []byte) error
+
+	// 加密
+	Encrypt(src []byte) (dst []byte, err error)
+
+	// 解密
+	Decrypt(dst []byte) (src []byte, err error)
+}
--- a/internal/encrypt/method_aes_128_cfb.go
+++ b/internal/encrypt/method_aes_128_cfb.go
@@ -0,0 +1,73 @@
+package encrypt
+
+import (
+	"bytes"
+	"crypto/aes"
+	"crypto/cipher"
+)
+
+type AES128CFBMethod struct {
+	iv    []byte
+	block cipher.Block
+}
+
+func (this *AES128CFBMethod) Init(key, iv []byte) error {
+	// 判断key是否为32长度
+	l := len(key)
+	if l > 16 {
+		key = key[:16]
+	} else if l < 16 {
+		key = append(key, bytes.Repeat([]byte{' '}, 16-l)...)
+	}
+
+	// 判断iv长度
+	l2 := len(iv)
+	if l2 > aes.BlockSize {
+		iv = iv[:aes.BlockSize]
+	} else if l2 < aes.BlockSize {
+		iv = append(iv, bytes.Repeat([]byte{' '}, aes.BlockSize-l2)...)
+	}
+
+	this.iv = iv
+
+	// block
+	block, err := aes.NewCipher(key)
+	if err != nil {
+		return err
+	}
+	this.block = block
+
+	return nil
+}
+
+func (this *AES128CFBMethod) Encrypt(src []byte) (dst []byte, err error) {
+	if len(src) == 0 {
+		return
+	}
+
+	defer func() {
+		err = RecoverMethodPanic(recover())
+	}()
+
+	dst = make([]byte, len(src))
+	encrypter := cipher.NewCFBEncrypter(this.block, this.iv)
+	encrypter.XORKeyStream(dst, src)
+
+	return
+}
+
+func (this *AES128CFBMethod) Decrypt(dst []byte) (src []byte, err error) {
+	if len(dst) == 0 {
+		return
+	}
+
+	defer func() {
+		err = RecoverMethodPanic(recover())
+	}()
+
+	src = make([]byte, len(dst))
+	encrypter := cipher.NewCFBDecrypter(this.block, this.iv)
+	encrypter.XORKeyStream(src, dst)
+
+	return
+}
--- a/internal/encrypt/method_aes_128_cfb_test.go
+++ b/internal/encrypt/method_aes_128_cfb_test.go
@@ -0,0 +1,92 @@
+package encrypt
+
+import (
+	"runtime"
+	"strings"
+	"testing"
+)
+
+func TestAES128CFBMethod_Encrypt(t *testing.T) {
+	method, err := NewMethodInstance("aes-128-cfb", "abc", "123")
+	if err != nil {
+		t.Fatal(err)
+	}
+	src := []byte("Hello, World")
+	dst, err := method.Encrypt(src)
+	if err != nil {
+		t.Fatal(err)
+	}
+	dst = dst[:len(src)]
+	t.Log("dst:", string(dst))
+
+	src = make([]byte, len(src))
+	src, err = method.Decrypt(dst)
+	if err != nil {
+		t.Fatal(err)
+	}
+	t.Log("src:", string(src))
+}
+
+func TestAES128CFBMethod_Encrypt2(t *testing.T) {
+	method, err := NewMethodInstance("aes-128-cfb", "abc", "123")
+	if err != nil {
+		t.Fatal(err)
+	}
+
+	sources := [][]byte{}
+
+	{
+		a := []byte{1}
+		_, err = method.Encrypt(a)
+		if err != nil {
+			t.Fatal(err)
+		}
+	}
+
+	for i := 0; i < 10; i++ {
+		src := []byte(strings.Repeat("Hello", 1))
+		dst, err := method.Encrypt(src)
+		if err != nil {
+			t.Fatal(err)
+		}
+
+		sources = append(sources, dst)
+	}
+
+	{
+
+		a := []byte{1}
+		_, err = method.Decrypt(a)
+		if err != nil {
+			t.Fatal(err)
+		}
+	}
+
+	for _, dst := range sources {
+		dst2 := append([]byte{}, dst...)
+		src2 := make([]byte, len(dst2))
+		src2, err := method.Decrypt(dst2)
+		if err != nil {
+			t.Fatal(err)
+		}
+		t.Log(string(src2))
+	}
+}
+
+func BenchmarkAES128CFBMethod_Encrypt(b *testing.B) {
+	runtime.GOMAXPROCS(1)
+
+	method, err := NewMethodInstance("aes-128-cfb", "abc", "123")
+	if err != nil {
+		b.Fatal(err)
+	}
+
+	src := []byte(strings.Repeat("Hello", 1024))
+	for i := 0; i < b.N; i++ {
+		dst, err := method.Encrypt(src)
+		if err != nil {
+			b.Fatal(err)
+		}
+		_ = dst
+	}
+}
--- a/internal/encrypt/method_aes_192_cfb.go
+++ b/internal/encrypt/method_aes_192_cfb.go
@@ -0,0 +1,74 @@
+package encrypt
+
+import (
+	"bytes"
+	"crypto/aes"
+	"crypto/cipher"
+)
+
+type AES192CFBMethod struct {
+	block cipher.Block
+	iv    []byte
+}
+
+func (this *AES192CFBMethod) Init(key, iv []byte) error {
+	// 判断key是否为24长度
+	l := len(key)
+	if l > 24 {
+		key = key[:24]
+	} else if l < 24 {
+		key = append(key, bytes.Repeat([]byte{' '}, 24-l)...)
+	}
+
+	block, err := aes.NewCipher(key)
+	if err != nil {
+		return err
+	}
+	this.block = block
+
+	// 判断iv长度
+	l2 := len(iv)
+	if l2 > aes.BlockSize {
+		iv = iv[:aes.BlockSize]
+	} else if l2 < aes.BlockSize {
+		iv = append(iv, bytes.Repeat([]byte{' '}, aes.BlockSize-l2)...)
+	}
+
+	this.iv = iv
+
+	return nil
+}
+
+func (this *AES192CFBMethod) Encrypt(src []byte) (dst []byte, err error) {
+	if len(src) == 0 {
+		return
+	}
+
+	defer func() {
+		err = RecoverMethodPanic(recover())
+	}()
+
+	dst = make([]byte, len(src))
+
+	encrypter := cipher.NewCFBEncrypter(this.block, this.iv)
+	encrypter.XORKeyStream(dst, src)
+
+	return
+}
+
+func (this *AES192CFBMethod) Decrypt(dst []byte) (src []byte, err error) {
+	if len(dst) == 0 {
+		return
+	}
+
+	defer func() {
+		err = RecoverMethodPanic(recover())
+	}()
+
+	src = make([]byte, len(dst))
+
+	decrypter := cipher.NewCFBDecrypter(this.block, this.iv)
+	decrypter.XORKeyStream(src, dst)
+
+	return
+}
--- a/internal/encrypt/method_aes_192_cfb_test.go
+++ b/internal/encrypt/method_aes_192_cfb_test.go
@@ -0,0 +1,45 @@
+package encrypt
+
+import (
+	"runtime"
+	"strings"
+	"testing"
+)
+
+func TestAES192CFBMethod_Encrypt(t *testing.T) {
+	method, err := NewMethodInstance("aes-192-cfb", "abc", "123")
+	if err != nil {
+		t.Fatal(err)
+	}
+	src := []byte("Hello, World")
+	dst, err := method.Encrypt(src)
+	if err != nil {
+		t.Fatal(err)
+	}
+	dst = dst[:len(src)]
+	t.Log("dst:", string(dst))
+
+	src, err = method.Decrypt(dst)
+	if err != nil {
+		t.Fatal(err)
+	}
+	t.Log("src:", string(src))
+}
+
+func BenchmarkAES192CFBMethod_Encrypt(b *testing.B) {
+	runtime.GOMAXPROCS(1)
+
+	method, err := NewMethodInstance("aes-192-cfb", "abc", "123")
+	if err != nil {
+		b.Fatal(err)
+	}
+
+	src := []byte(strings.Repeat("Hello", 1024))
+	for i := 0; i < b.N; i++ {
+		dst, err := method.Encrypt(src)
+		if err != nil {
+			b.Fatal(err)
+		}
+		_ = dst
+	}
+}
--- a/internal/encrypt/method_aes_256_cfb.go
+++ b/internal/encrypt/method_aes_256_cfb.go
@@ -0,0 +1,72 @@
+package encrypt
+
+import (
+	"bytes"
+	"crypto/aes"
+	"crypto/cipher"
+)
+
+type AES256CFBMethod struct {
+	block cipher.Block
+	iv    []byte
+}
+
+func (this *AES256CFBMethod) Init(key, iv []byte) error {
+	// 判断key是否为32长度
+	l := len(key)
+	if l > 32 {
+		key = key[:32]
+	} else if l < 32 {
+		key = append(key, bytes.Repeat([]byte{' '}, 32-l)...)
+	}
+
+	block, err := aes.NewCipher(key)
+	if err != nil {
+		return err
+	}
+	this.block = block
+
+	// 判断iv长度
+	l2 := len(iv)
+	if l2 > aes.BlockSize {
+		iv = iv[:aes.BlockSize]
+	} else if l2 < aes.BlockSize {
+		iv = append(iv, bytes.Repeat([]byte{' '}, aes.BlockSize-l2)...)
+	}
+	this.iv = iv
+
+	return nil
+}
+
+func (this *AES256CFBMethod) Encrypt(src []byte) (dst []byte, err error) {
+	if len(src) == 0 {
+		return
+	}
+
+	defer func() {
+		err = RecoverMethodPanic(recover())
+	}()
+
+	dst = make([]byte, len(src))
+
+	encrypter := cipher.NewCFBEncrypter(this.block, this.iv)
+	encrypter.XORKeyStream(dst, src)
+
+	return
+}
+
+func (this *AES256CFBMethod) Decrypt(dst []byte) (src []byte, err error) {
+	if len(dst) == 0 {
+		return
+	}
+
+	defer func() {
+		err = RecoverMethodPanic(recover())
+	}()
+
+	src = make([]byte, len(dst))
+	decrypter := cipher.NewCFBDecrypter(this.block, this.iv)
+	decrypter.XORKeyStream(src, dst)
+
+	return
+}
--- a/internal/encrypt/method_aes_256_cfb_test.go
+++ b/internal/encrypt/method_aes_256_cfb_test.go
@@ -0,0 +1,42 @@
+package encrypt
+
+import "testing"
+
+func TestAES256CFBMethod_Encrypt(t *testing.T) {
+	method, err := NewMethodInstance("aes-256-cfb", "abc", "123")
+	if err != nil {
+		t.Fatal(err)
+	}
+	src := []byte("Hello, World")
+	dst, err := method.Encrypt(src)
+	if err != nil {
+		t.Fatal(err)
+	}
+	dst = dst[:len(src)]
+	t.Log("dst:", string(dst))
+
+	src, err = method.Decrypt(dst)
+	if err != nil {
+		t.Fatal(err)
+	}
+	t.Log("src:", string(src))
+}
+
+func TestAES256CFBMethod_Encrypt2(t *testing.T) {
+	method, err := NewMethodInstance("aes-256-cfb", "abc", "123")
+	if err != nil {
+		t.Fatal(err)
+	}
+	src := []byte("Hello, World")
+	dst, err := method.Encrypt(src)
+	if err != nil {
+		t.Fatal(err)
+	}
+	t.Log("dst:", string(dst))
+
+	src, err = method.Decrypt(dst)
+	if err != nil {
+		t.Fatal(err)
+	}
+	t.Log("src:", string(src))
+}
--- a/internal/encrypt/method_raw.go
+++ b/internal/encrypt/method_raw.go
@@ -0,0 +1,26 @@
+package encrypt
+
+type RawMethod struct {
+}
+
+func (this *RawMethod) Init(key, iv []byte) error {
+	return nil
+}
+
+func (this *RawMethod) Encrypt(src []byte) (dst []byte, err error) {
+	if len(src) == 0 {
+		return
+	}
+	dst = make([]byte, len(src))
+	copy(dst, src)
+	return
+}
+
+func (this *RawMethod) Decrypt(dst []byte) (src []byte, err error) {
+	if len(dst) == 0 {
+		return
+	}
+	src = make([]byte, len(dst))
+	copy(src, dst)
+	return
+}
--- a/internal/encrypt/method_raw_test.go
+++ b/internal/encrypt/method_raw_test.go
@@ -0,0 +1,23 @@
+package encrypt
+
+import "testing"
+
+func TestRawMethod_Encrypt(t *testing.T) {
+	method, err := NewMethodInstance("raw", "abc", "123")
+	if err != nil {
+		t.Fatal(err)
+	}
+	src := []byte("Hello, World")
+	dst, err := method.Encrypt(src)
+	if err != nil {
+		t.Fatal(err)
+	}
+	dst = dst[:len(src)]
+	t.Log("dst:", string(dst))
+
+	src, err = method.Decrypt(dst)
+	if err != nil {
+		t.Fatal(err)
+	}
+	t.Log("src:", string(src))
+}
--- a/internal/encrypt/method_utils.go
+++ b/internal/encrypt/method_utils.go
@@ -0,0 +1,43 @@
+package encrypt
+
+import (
+	"errors"
+	"reflect"
+)
+
+var methods = map[string]reflect.Type{
+	"raw":         reflect.TypeOf(new(RawMethod)).Elem(),
+	"aes-128-cfb": reflect.TypeOf(new(AES128CFBMethod)).Elem(),
+	"aes-192-cfb": reflect.TypeOf(new(AES192CFBMethod)).Elem(),
+	"aes-256-cfb": reflect.TypeOf(new(AES256CFBMethod)).Elem(),
+}
+
+func NewMethodInstance(method string, key string, iv string) (MethodInterface, error) {
+	valueType, ok := methods[method]
+	if !ok {
+		return nil, errors.New("method '" + method + "' not found")
+	}
+	instance, ok := reflect.New(valueType).Interface().(MethodInterface)
+	if !ok {
+		return nil, errors.New("method '" + method + "' must implement MethodInterface")
+	}
+	err := instance.Init([]byte(key), []byte(iv))
+	return instance, err
+}
+
+func RecoverMethodPanic(err interface{}) error {
+	if err != nil {
+		s, ok := err.(string)
+		if ok {
+			return errors.New(s)
+		}
+
+		e, ok := err.(error)
+		if ok {
+			return e
+		}
+
+		return errors.New("unknown error")
+	}
+	return nil
+}
--- a/internal/encrypt/method_utils_test.go
+++ b/internal/encrypt/method_utils_test.go
@@ -0,0 +1,8 @@
+package encrypt
+
+import "testing"
+
+func TestFindMethodInstance(t *testing.T) {
+	t.Log(NewMethodInstance("a", "b", ""))
+	t.Log(NewMethodInstance("aes-256-cfb", "123456", ""))
+}
--- a/internal/oplogs/levels.go
+++ b/internal/oplogs/levels.go
@@ -0,0 +1,10 @@
+package oplogs
+
+const (
+	LevelNone  = "none"
+	LevelInfo  = "info"
+	LevelDebug = "debug"
+	LevelWarn  = "warn"
+	LevelError = "error"
+	LevelFatal = "fatal"
+)
--- a/internal/rpc/admin/service.pb.go
+++ b/internal/rpc/admin/service.pb.go
@@ -0,0 +1,881 @@
+// Code generated by protoc-gen-go. DO NOT EDIT.
+// versions:
+// 	protoc-gen-go v1.25.0
+// 	protoc        v3.12.3
+// source: admin/service.proto
+
+package admin
+
+import (
+	context "context"
+	proto "github.com/golang/protobuf/proto"
+	grpc "google.golang.org/grpc"
+	codes "google.golang.org/grpc/codes"
+	status "google.golang.org/grpc/status"
+	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
+	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	reflect "reflect"
+	sync "sync"
+)
+
+const (
+	// Verify that this generated code is sufficiently up-to-date.
+	_ = protoimpl.EnforceVersion(20 - protoimpl.MinVersion)
+	// Verify that runtime/protoimpl is sufficiently up-to-date.
+	_ = protoimpl.EnforceVersion(protoimpl.MaxVersion - 20)
+)
+
+// This is a compile-time assertion that a sufficiently up-to-date version
+// of the legacy proto package is being used.
+const _ = proto.ProtoPackageIsVersion4
+
+type LoginRequest struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	Username string `protobuf:"bytes,1,opt,name=username,proto3" json:"username,omitempty"`
+	Password string `protobuf:"bytes,2,opt,name=password,proto3" json:"password,omitempty"`
+}
+
+func (x *LoginRequest) Reset() {
+	*x = LoginRequest{}
+	if protoimpl.UnsafeEnabled {
+		mi := &file_admin_service_proto_msgTypes[0]
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		ms.StoreMessageInfo(mi)
+	}
+}
+
+func (x *LoginRequest) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*LoginRequest) ProtoMessage() {}
+
+func (x *LoginRequest) ProtoReflect() protoreflect.Message {
+	mi := &file_admin_service_proto_msgTypes[0]
+	if protoimpl.UnsafeEnabled && x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use LoginRequest.ProtoReflect.Descriptor instead.
+func (*LoginRequest) Descriptor() ([]byte, []int) {
+	return file_admin_service_proto_rawDescGZIP(), []int{0}
+}
+
+func (x *LoginRequest) GetUsername() string {
+	if x != nil {
+		return x.Username
+	}
+	return ""
+}
+
+func (x *LoginRequest) GetPassword() string {
+	if x != nil {
+		return x.Password
+	}
+	return ""
+}
+
+type LoginResponse struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	AdminId int64  `protobuf:"varint,1,opt,name=adminId,proto3" json:"adminId,omitempty"`
+	IsOk    bool   `protobuf:"varint,2,opt,name=isOk,proto3" json:"isOk,omitempty"`
+	Message string `protobuf:"bytes,3,opt,name=message,proto3" json:"message,omitempty"`
+}
+
+func (x *LoginResponse) Reset() {
+	*x = LoginResponse{}
+	if protoimpl.UnsafeEnabled {
+		mi := &file_admin_service_proto_msgTypes[1]
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		ms.StoreMessageInfo(mi)
+	}
+}
+
+func (x *LoginResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*LoginResponse) ProtoMessage() {}
+
+func (x *LoginResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_admin_service_proto_msgTypes[1]
+	if protoimpl.UnsafeEnabled && x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use LoginResponse.ProtoReflect.Descriptor instead.
+func (*LoginResponse) Descriptor() ([]byte, []int) {
+	return file_admin_service_proto_rawDescGZIP(), []int{1}
+}
+
+func (x *LoginResponse) GetAdminId() int64 {
+	if x != nil {
+		return x.AdminId
+	}
+	return 0
+}
+
+func (x *LoginResponse) GetIsOk() bool {
+	if x != nil {
+		return x.IsOk
+	}
+	return false
+}
+
+func (x *LoginResponse) GetMessage() string {
+	if x != nil {
+		return x.Message
+	}
+	return ""
+}
+
+type CreateLogRequest struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	Level       string `protobuf:"bytes,1,opt,name=level,proto3" json:"level,omitempty"`
+	Description string `protobuf:"bytes,2,opt,name=description,proto3" json:"description,omitempty"`
+	Action      string `protobuf:"bytes,3,opt,name=action,proto3" json:"action,omitempty"`
+	Ip          string `protobuf:"bytes,4,opt,name=ip,proto3" json:"ip,omitempty"`
+}
+
+func (x *CreateLogRequest) Reset() {
+	*x = CreateLogRequest{}
+	if protoimpl.UnsafeEnabled {
+		mi := &file_admin_service_proto_msgTypes[2]
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		ms.StoreMessageInfo(mi)
+	}
+}
+
+func (x *CreateLogRequest) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*CreateLogRequest) ProtoMessage() {}
+
+func (x *CreateLogRequest) ProtoReflect() protoreflect.Message {
+	mi := &file_admin_service_proto_msgTypes[2]
+	if protoimpl.UnsafeEnabled && x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use CreateLogRequest.ProtoReflect.Descriptor instead.
+func (*CreateLogRequest) Descriptor() ([]byte, []int) {
+	return file_admin_service_proto_rawDescGZIP(), []int{2}
+}
+
+func (x *CreateLogRequest) GetLevel() string {
+	if x != nil {
+		return x.Level
+	}
+	return ""
+}
+
+func (x *CreateLogRequest) GetDescription() string {
+	if x != nil {
+		return x.Description
+	}
+	return ""
+}
+
+func (x *CreateLogRequest) GetAction() string {
+	if x != nil {
+		return x.Action
+	}
+	return ""
+}
+
+func (x *CreateLogRequest) GetIp() string {
+	if x != nil {
+		return x.Ip
+	}
+	return ""
+}
+
+type CreateLogResponse struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	IsOk bool `protobuf:"varint,1,opt,name=isOk,proto3" json:"isOk,omitempty"`
+}
+
+func (x *CreateLogResponse) Reset() {
+	*x = CreateLogResponse{}
+	if protoimpl.UnsafeEnabled {
+		mi := &file_admin_service_proto_msgTypes[3]
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		ms.StoreMessageInfo(mi)
+	}
+}
+
+func (x *CreateLogResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*CreateLogResponse) ProtoMessage() {}
+
+func (x *CreateLogResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_admin_service_proto_msgTypes[3]
+	if protoimpl.UnsafeEnabled && x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use CreateLogResponse.ProtoReflect.Descriptor instead.
+func (*CreateLogResponse) Descriptor() ([]byte, []int) {
+	return file_admin_service_proto_rawDescGZIP(), []int{3}
+}
+
+func (x *CreateLogResponse) GetIsOk() bool {
+	if x != nil {
+		return x.IsOk
+	}
+	return false
+}
+
+type CheckAdminExistsRequest struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	AdminId int64 `protobuf:"varint,1,opt,name=adminId,proto3" json:"adminId,omitempty"`
+}
+
+func (x *CheckAdminExistsRequest) Reset() {
+	*x = CheckAdminExistsRequest{}
+	if protoimpl.UnsafeEnabled {
+		mi := &file_admin_service_proto_msgTypes[4]
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		ms.StoreMessageInfo(mi)
+	}
+}
+
+func (x *CheckAdminExistsRequest) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*CheckAdminExistsRequest) ProtoMessage() {}
+
+func (x *CheckAdminExistsRequest) ProtoReflect() protoreflect.Message {
+	mi := &file_admin_service_proto_msgTypes[4]
+	if protoimpl.UnsafeEnabled && x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use CheckAdminExistsRequest.ProtoReflect.Descriptor instead.
+func (*CheckAdminExistsRequest) Descriptor() ([]byte, []int) {
+	return file_admin_service_proto_rawDescGZIP(), []int{4}
+}
+
+func (x *CheckAdminExistsRequest) GetAdminId() int64 {
+	if x != nil {
+		return x.AdminId
+	}
+	return 0
+}
+
+type CheckAdminExistsResponse struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	IsOk    bool   `protobuf:"varint,1,opt,name=isOk,proto3" json:"isOk,omitempty"`
+	Message string `protobuf:"bytes,2,opt,name=message,proto3" json:"message,omitempty"`
+}
+
+func (x *CheckAdminExistsResponse) Reset() {
+	*x = CheckAdminExistsResponse{}
+	if protoimpl.UnsafeEnabled {
+		mi := &file_admin_service_proto_msgTypes[5]
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		ms.StoreMessageInfo(mi)
+	}
+}
+
+func (x *CheckAdminExistsResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*CheckAdminExistsResponse) ProtoMessage() {}
+
+func (x *CheckAdminExistsResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_admin_service_proto_msgTypes[5]
+	if protoimpl.UnsafeEnabled && x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use CheckAdminExistsResponse.ProtoReflect.Descriptor instead.
+func (*CheckAdminExistsResponse) Descriptor() ([]byte, []int) {
+	return file_admin_service_proto_rawDescGZIP(), []int{5}
+}
+
+func (x *CheckAdminExistsResponse) GetIsOk() bool {
+	if x != nil {
+		return x.IsOk
+	}
+	return false
+}
+
+func (x *CheckAdminExistsResponse) GetMessage() string {
+	if x != nil {
+		return x.Message
+	}
+	return ""
+}
+
+type FindAdminNameRequest struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	AdminId int64 `protobuf:"varint,1,opt,name=adminId,proto3" json:"adminId,omitempty"`
+}
+
+func (x *FindAdminNameRequest) Reset() {
+	*x = FindAdminNameRequest{}
+	if protoimpl.UnsafeEnabled {
+		mi := &file_admin_service_proto_msgTypes[6]
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		ms.StoreMessageInfo(mi)
+	}
+}
+
+func (x *FindAdminNameRequest) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*FindAdminNameRequest) ProtoMessage() {}
+
+func (x *FindAdminNameRequest) ProtoReflect() protoreflect.Message {
+	mi := &file_admin_service_proto_msgTypes[6]
+	if protoimpl.UnsafeEnabled && x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use FindAdminNameRequest.ProtoReflect.Descriptor instead.
+func (*FindAdminNameRequest) Descriptor() ([]byte, []int) {
+	return file_admin_service_proto_rawDescGZIP(), []int{6}
+}
+
+func (x *FindAdminNameRequest) GetAdminId() int64 {
+	if x != nil {
+		return x.AdminId
+	}
+	return 0
+}
+
+type FindAdminNameResponse struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	Fullname string `protobuf:"bytes,1,opt,name=fullname,proto3" json:"fullname,omitempty"`
+}
+
+func (x *FindAdminNameResponse) Reset() {
+	*x = FindAdminNameResponse{}
+	if protoimpl.UnsafeEnabled {
+		mi := &file_admin_service_proto_msgTypes[7]
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		ms.StoreMessageInfo(mi)
+	}
+}
+
+func (x *FindAdminNameResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*FindAdminNameResponse) ProtoMessage() {}
+
+func (x *FindAdminNameResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_admin_service_proto_msgTypes[7]
+	if protoimpl.UnsafeEnabled && x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use FindAdminNameResponse.ProtoReflect.Descriptor instead.
+func (*FindAdminNameResponse) Descriptor() ([]byte, []int) {
+	return file_admin_service_proto_rawDescGZIP(), []int{7}
+}
+
+func (x *FindAdminNameResponse) GetFullname() string {
+	if x != nil {
+		return x.Fullname
+	}
+	return ""
+}
+
+var File_admin_service_proto protoreflect.FileDescriptor
+
+var file_admin_service_proto_rawDesc = []byte{
+	0x0a, 0x13, 0x61, 0x64, 0x6d, 0x69, 0x6e, 0x2f, 0x73, 0x65, 0x72, 0x76, 0x69, 0x63, 0x65, 0x2e,
+	0x70, 0x72, 0x6f, 0x74, 0x6f, 0x12, 0x05, 0x61, 0x64, 0x6d, 0x69, 0x6e, 0x22, 0x46, 0x0a, 0x0c,
+	0x4c, 0x6f, 0x67, 0x69, 0x6e, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x12, 0x1a, 0x0a, 0x08,
+	0x75, 0x73, 0x65, 0x72, 0x6e, 0x61, 0x6d, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x08,
+	0x75, 0x73, 0x65, 0x72, 0x6e, 0x61, 0x6d, 0x65, 0x12, 0x1a, 0x0a, 0x08, 0x70, 0x61, 0x73, 0x73,
+	0x77, 0x6f, 0x72, 0x64, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x52, 0x08, 0x70, 0x61, 0x73, 0x73,
+	0x77, 0x6f, 0x72, 0x64, 0x22, 0x57, 0x0a, 0x0d, 0x4c, 0x6f, 0x67, 0x69, 0x6e, 0x52, 0x65, 0x73,
+	0x70, 0x6f, 0x6e, 0x73, 0x65, 0x12, 0x18, 0x0a, 0x07, 0x61, 0x64, 0x6d, 0x69, 0x6e, 0x49, 0x64,
+	0x18, 0x01, 0x20, 0x01, 0x28, 0x03, 0x52, 0x07, 0x61, 0x64, 0x6d, 0x69, 0x6e, 0x49, 0x64, 0x12,
+	0x12, 0x0a, 0x04, 0x69, 0x73, 0x4f, 0x6b, 0x18, 0x02, 0x20, 0x01, 0x28, 0x08, 0x52, 0x04, 0x69,
+	0x73, 0x4f, 0x6b, 0x12, 0x18, 0x0a, 0x07, 0x6d, 0x65, 0x73, 0x73, 0x61, 0x67, 0x65, 0x18, 0x03,
+	0x20, 0x01, 0x28, 0x09, 0x52, 0x07, 0x6d, 0x65, 0x73, 0x73, 0x61, 0x67, 0x65, 0x22, 0x72, 0x0a,
+	0x10, 0x43, 0x72, 0x65, 0x61, 0x74, 0x65, 0x4c, 0x6f, 0x67, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73,
+	0x74, 0x12, 0x14, 0x0a, 0x05, 0x6c, 0x65, 0x76, 0x65, 0x6c, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09,
+	0x52, 0x05, 0x6c, 0x65, 0x76, 0x65, 0x6c, 0x12, 0x20, 0x0a, 0x0b, 0x64, 0x65, 0x73, 0x63, 0x72,
+	0x69, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x52, 0x0b, 0x64, 0x65,
+	0x73, 0x63, 0x72, 0x69, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x12, 0x16, 0x0a, 0x06, 0x61, 0x63, 0x74,
+	0x69, 0x6f, 0x6e, 0x18, 0x03, 0x20, 0x01, 0x28, 0x09, 0x52, 0x06, 0x61, 0x63, 0x74, 0x69, 0x6f,
+	0x6e, 0x12, 0x0e, 0x0a, 0x02, 0x69, 0x70, 0x18, 0x04, 0x20, 0x01, 0x28, 0x09, 0x52, 0x02, 0x69,
+	0x70, 0x22, 0x27, 0x0a, 0x11, 0x43, 0x72, 0x65, 0x61, 0x74, 0x65, 0x4c, 0x6f, 0x67, 0x52, 0x65,
+	0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x12, 0x12, 0x0a, 0x04, 0x69, 0x73, 0x4f, 0x6b, 0x18, 0x01,
+	0x20, 0x01, 0x28, 0x08, 0x52, 0x04, 0x69, 0x73, 0x4f, 0x6b, 0x22, 0x33, 0x0a, 0x17, 0x43, 0x68,
+	0x65, 0x63, 0x6b, 0x41, 0x64, 0x6d, 0x69, 0x6e, 0x45, 0x78, 0x69, 0x73, 0x74, 0x73, 0x52, 0x65,
+	0x71, 0x75, 0x65, 0x73, 0x74, 0x12, 0x18, 0x0a, 0x07, 0x61, 0x64, 0x6d, 0x69, 0x6e, 0x49, 0x64,
+	0x18, 0x01, 0x20, 0x01, 0x28, 0x03, 0x52, 0x07, 0x61, 0x64, 0x6d, 0x69, 0x6e, 0x49, 0x64, 0x22,
+	0x48, 0x0a, 0x18, 0x43, 0x68, 0x65, 0x63, 0x6b, 0x41, 0x64, 0x6d, 0x69, 0x6e, 0x45, 0x78, 0x69,
+	0x73, 0x74, 0x73, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x12, 0x12, 0x0a, 0x04, 0x69,
+	0x73, 0x4f, 0x6b, 0x18, 0x01, 0x20, 0x01, 0x28, 0x08, 0x52, 0x04, 0x69, 0x73, 0x4f, 0x6b, 0x12,
+	0x18, 0x0a, 0x07, 0x6d, 0x65, 0x73, 0x73, 0x61, 0x67, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09,
+	0x52, 0x07, 0x6d, 0x65, 0x73, 0x73, 0x61, 0x67, 0x65, 0x22, 0x30, 0x0a, 0x14, 0x46, 0x69, 0x6e,
+	0x64, 0x41, 0x64, 0x6d, 0x69, 0x6e, 0x4e, 0x61, 0x6d, 0x65, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73,
+	0x74, 0x12, 0x18, 0x0a, 0x07, 0x61, 0x64, 0x6d, 0x69, 0x6e, 0x49, 0x64, 0x18, 0x01, 0x20, 0x01,
+	0x28, 0x03, 0x52, 0x07, 0x61, 0x64, 0x6d, 0x69, 0x6e, 0x49, 0x64, 0x22, 0x33, 0x0a, 0x15, 0x46,
+	0x69, 0x6e, 0x64, 0x41, 0x64, 0x6d, 0x69, 0x6e, 0x4e, 0x61, 0x6d, 0x65, 0x52, 0x65, 0x73, 0x70,
+	0x6f, 0x6e, 0x73, 0x65, 0x12, 0x1a, 0x0a, 0x08, 0x66, 0x75, 0x6c, 0x6c, 0x6e, 0x61, 0x6d, 0x65,
+	0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x08, 0x66, 0x75, 0x6c, 0x6c, 0x6e, 0x61, 0x6d, 0x65,
+	0x32, 0xaa, 0x02, 0x0a, 0x07, 0x53, 0x65, 0x72, 0x76, 0x69, 0x63, 0x65, 0x12, 0x34, 0x0a, 0x05,
+	0x6c, 0x6f, 0x67, 0x69, 0x6e, 0x12, 0x13, 0x2e, 0x61, 0x64, 0x6d, 0x69, 0x6e, 0x2e, 0x4c, 0x6f,
+	0x67, 0x69, 0x6e, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x1a, 0x14, 0x2e, 0x61, 0x64, 0x6d,
+	0x69, 0x6e, 0x2e, 0x4c, 0x6f, 0x67, 0x69, 0x6e, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65,
+	0x22, 0x00, 0x12, 0x40, 0x0a, 0x09, 0x63, 0x72, 0x65, 0x61, 0x74, 0x65, 0x4c, 0x6f, 0x67, 0x12,
+	0x17, 0x2e, 0x61, 0x64, 0x6d, 0x69, 0x6e, 0x2e, 0x43, 0x72, 0x65, 0x61, 0x74, 0x65, 0x4c, 0x6f,
+	0x67, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x1a, 0x18, 0x2e, 0x61, 0x64, 0x6d, 0x69, 0x6e,
+	0x2e, 0x43, 0x72, 0x65, 0x61, 0x74, 0x65, 0x4c, 0x6f, 0x67, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e,
+	0x73, 0x65, 0x22, 0x00, 0x12, 0x55, 0x0a, 0x10, 0x63, 0x68, 0x65, 0x63, 0x6b, 0x41, 0x64, 0x6d,
+	0x69, 0x6e, 0x45, 0x78, 0x69, 0x73, 0x74, 0x73, 0x12, 0x1e, 0x2e, 0x61, 0x64, 0x6d, 0x69, 0x6e,
+	0x2e, 0x43, 0x68, 0x65, 0x63, 0x6b, 0x41, 0x64, 0x6d, 0x69, 0x6e, 0x45, 0x78, 0x69, 0x73, 0x74,
+	0x73, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x1a, 0x1f, 0x2e, 0x61, 0x64, 0x6d, 0x69, 0x6e,
+	0x2e, 0x43, 0x68, 0x65, 0x63, 0x6b, 0x41, 0x64, 0x6d, 0x69, 0x6e, 0x45, 0x78, 0x69, 0x73, 0x74,
+	0x73, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x22, 0x00, 0x12, 0x50, 0x0a, 0x11, 0x66,
+	0x69, 0x6e, 0x64, 0x41, 0x64, 0x6d, 0x69, 0x6e, 0x46, 0x75, 0x6c, 0x6c, 0x6e, 0x61, 0x6d, 0x65,
+	0x12, 0x1b, 0x2e, 0x61, 0x64, 0x6d, 0x69, 0x6e, 0x2e, 0x46, 0x69, 0x6e, 0x64, 0x41, 0x64, 0x6d,
+	0x69, 0x6e, 0x4e, 0x61, 0x6d, 0x65, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x1a, 0x1c, 0x2e,
+	0x61, 0x64, 0x6d, 0x69, 0x6e, 0x2e, 0x46, 0x69, 0x6e, 0x64, 0x41, 0x64, 0x6d, 0x69, 0x6e, 0x4e,
+	0x61, 0x6d, 0x65, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x22, 0x00, 0x42, 0x09, 0x5a,
+	0x07, 0x2e, 0x2f, 0x61, 0x64, 0x6d, 0x69, 0x6e, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
+}
+
+var (
+	file_admin_service_proto_rawDescOnce sync.Once
+	file_admin_service_proto_rawDescData = file_admin_service_proto_rawDesc
+)
+
+func file_admin_service_proto_rawDescGZIP() []byte {
+	file_admin_service_proto_rawDescOnce.Do(func() {
+		file_admin_service_proto_rawDescData = protoimpl.X.CompressGZIP(file_admin_service_proto_rawDescData)
+	})
+	return file_admin_service_proto_rawDescData
+}
+
+var file_admin_service_proto_msgTypes = make([]protoimpl.MessageInfo, 8)
+var file_admin_service_proto_goTypes = []interface{}{
+	(*LoginRequest)(nil),             // 0: admin.LoginRequest
+	(*LoginResponse)(nil),            // 1: admin.LoginResponse
+	(*CreateLogRequest)(nil),         // 2: admin.CreateLogRequest
+	(*CreateLogResponse)(nil),        // 3: admin.CreateLogResponse
+	(*CheckAdminExistsRequest)(nil),  // 4: admin.CheckAdminExistsRequest
+	(*CheckAdminExistsResponse)(nil), // 5: admin.CheckAdminExistsResponse
+	(*FindAdminNameRequest)(nil),     // 6: admin.FindAdminNameRequest
+	(*FindAdminNameResponse)(nil),    // 7: admin.FindAdminNameResponse
+}
+var file_admin_service_proto_depIdxs = []int32{
+	0, // 0: admin.Service.login:input_type -> admin.LoginRequest
+	2, // 1: admin.Service.createLog:input_type -> admin.CreateLogRequest
+	4, // 2: admin.Service.checkAdminExists:input_type -> admin.CheckAdminExistsRequest
+	6, // 3: admin.Service.findAdminFullname:input_type -> admin.FindAdminNameRequest
+	1, // 4: admin.Service.login:output_type -> admin.LoginResponse
+	3, // 5: admin.Service.createLog:output_type -> admin.CreateLogResponse
+	5, // 6: admin.Service.checkAdminExists:output_type -> admin.CheckAdminExistsResponse
+	7, // 7: admin.Service.findAdminFullname:output_type -> admin.FindAdminNameResponse
+	4, // [4:8] is the sub-list for method output_type
+	0, // [0:4] is the sub-list for method input_type
+	0, // [0:0] is the sub-list for extension type_name
+	0, // [0:0] is the sub-list for extension extendee
+	0, // [0:0] is the sub-list for field type_name
+}
+
+func init() { file_admin_service_proto_init() }
+func file_admin_service_proto_init() {
+	if File_admin_service_proto != nil {
+		return
+	}
+	if !protoimpl.UnsafeEnabled {
+		file_admin_service_proto_msgTypes[0].Exporter = func(v interface{}, i int) interface{} {
+			switch v := v.(*LoginRequest); i {
+			case 0:
+				return &v.state
+			case 1:
+				return &v.sizeCache
+			case 2:
+				return &v.unknownFields
+			default:
+				return nil
+			}
+		}
+		file_admin_service_proto_msgTypes[1].Exporter = func(v interface{}, i int) interface{} {
+			switch v := v.(*LoginResponse); i {
+			case 0:
+				return &v.state
+			case 1:
+				return &v.sizeCache
+			case 2:
+				return &v.unknownFields
+			default:
+				return nil
+			}
+		}
+		file_admin_service_proto_msgTypes[2].Exporter = func(v interface{}, i int) interface{} {
+			switch v := v.(*CreateLogRequest); i {
+			case 0:
+				return &v.state
+			case 1:
+				return &v.sizeCache
+			case 2:
+				return &v.unknownFields
+			default:
+				return nil
+			}
+		}
+		file_admin_service_proto_msgTypes[3].Exporter = func(v interface{}, i int) interface{} {
+			switch v := v.(*CreateLogResponse); i {
+			case 0:
+				return &v.state
+			case 1:
+				return &v.sizeCache
+			case 2:
+				return &v.unknownFields
+			default:
+				return nil
+			}
+		}
+		file_admin_service_proto_msgTypes[4].Exporter = func(v interface{}, i int) interface{} {
+			switch v := v.(*CheckAdminExistsRequest); i {
+			case 0:
+				return &v.state
+			case 1:
+				return &v.sizeCache
+			case 2:
+				return &v.unknownFields
+			default:
+				return nil
+			}
+		}
+		file_admin_service_proto_msgTypes[5].Exporter = func(v interface{}, i int) interface{} {
+			switch v := v.(*CheckAdminExistsResponse); i {
+			case 0:
+				return &v.state
+			case 1:
+				return &v.sizeCache
+			case 2:
+				return &v.unknownFields
+			default:
+				return nil
+			}
+		}
+		file_admin_service_proto_msgTypes[6].Exporter = func(v interface{}, i int) interface{} {
+			switch v := v.(*FindAdminNameRequest); i {
+			case 0:
+				return &v.state
+			case 1:
+				return &v.sizeCache
+			case 2:
+				return &v.unknownFields
+			default:
+				return nil
+			}
+		}
+		file_admin_service_proto_msgTypes[7].Exporter = func(v interface{}, i int) interface{} {
+			switch v := v.(*FindAdminNameResponse); i {
+			case 0:
+				return &v.state
+			case 1:
+				return &v.sizeCache
+			case 2:
+				return &v.unknownFields
+			default:
+				return nil
+			}
+		}
+	}
+	type x struct{}
+	out := protoimpl.TypeBuilder{
+		File: protoimpl.DescBuilder{
+			GoPackagePath: reflect.TypeOf(x{}).PkgPath(),
+			RawDescriptor: file_admin_service_proto_rawDesc,
+			NumEnums:      0,
+			NumMessages:   8,
+			NumExtensions: 0,
+			NumServices:   1,
+		},
+		GoTypes:           file_admin_service_proto_goTypes,
+		DependencyIndexes: file_admin_service_proto_depIdxs,
+		MessageInfos:      file_admin_service_proto_msgTypes,
+	}.Build()
+	File_admin_service_proto = out.File
+	file_admin_service_proto_rawDesc = nil
+	file_admin_service_proto_goTypes = nil
+	file_admin_service_proto_depIdxs = nil
+}
+
+// Reference imports to suppress errors if they are not otherwise used.
+var _ context.Context
+var _ grpc.ClientConnInterface
+
+// This is a compile-time assertion to ensure that this generated file
+// is compatible with the grpc package it is being compiled against.
+const _ = grpc.SupportPackageIsVersion6
+
+// ServiceClient is the client API for Service service.
+//
+// For semantics around ctx use and closing/ending streaming RPCs, please refer to https://godoc.org/google.golang.org/grpc#ClientConn.NewStream.
+type ServiceClient interface {
+	// 登录
+	Login(ctx context.Context, in *LoginRequest, opts ...grpc.CallOption) (*LoginResponse, error)
+	// 创建操作日志
+	CreateLog(ctx context.Context, in *CreateLogRequest, opts ...grpc.CallOption) (*CreateLogResponse, error)
+	// 检查管理员是否存在
+	CheckAdminExists(ctx context.Context, in *CheckAdminExistsRequest, opts ...grpc.CallOption) (*CheckAdminExistsResponse, error)
+	// 获取管理员名称
+	FindAdminFullname(ctx context.Context, in *FindAdminNameRequest, opts ...grpc.CallOption) (*FindAdminNameResponse, error)
+}
+
+type serviceClient struct {
+	cc grpc.ClientConnInterface
+}
+
+func NewServiceClient(cc grpc.ClientConnInterface) ServiceClient {
+	return &serviceClient{cc}
+}
+
+func (c *serviceClient) Login(ctx context.Context, in *LoginRequest, opts ...grpc.CallOption) (*LoginResponse, error) {
+	out := new(LoginResponse)
+	err := c.cc.Invoke(ctx, "/admin.Service/login", in, out, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *serviceClient) CreateLog(ctx context.Context, in *CreateLogRequest, opts ...grpc.CallOption) (*CreateLogResponse, error) {
+	out := new(CreateLogResponse)
+	err := c.cc.Invoke(ctx, "/admin.Service/createLog", in, out, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *serviceClient) CheckAdminExists(ctx context.Context, in *CheckAdminExistsRequest, opts ...grpc.CallOption) (*CheckAdminExistsResponse, error) {
+	out := new(CheckAdminExistsResponse)
+	err := c.cc.Invoke(ctx, "/admin.Service/checkAdminExists", in, out, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *serviceClient) FindAdminFullname(ctx context.Context, in *FindAdminNameRequest, opts ...grpc.CallOption) (*FindAdminNameResponse, error) {
+	out := new(FindAdminNameResponse)
+	err := c.cc.Invoke(ctx, "/admin.Service/findAdminFullname", in, out, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+// ServiceServer is the server API for Service service.
+type ServiceServer interface {
+	// 登录
+	Login(context.Context, *LoginRequest) (*LoginResponse, error)
+	// 创建操作日志
+	CreateLog(context.Context, *CreateLogRequest) (*CreateLogResponse, error)
+	// 检查管理员是否存在
+	CheckAdminExists(context.Context, *CheckAdminExistsRequest) (*CheckAdminExistsResponse, error)
+	// 获取管理员名称
+	FindAdminFullname(context.Context, *FindAdminNameRequest) (*FindAdminNameResponse, error)
+}
+
+// UnimplementedServiceServer can be embedded to have forward compatible implementations.
+type UnimplementedServiceServer struct {
+}
+
+func (*UnimplementedServiceServer) Login(context.Context, *LoginRequest) (*LoginResponse, error) {
+	return nil, status.Errorf(codes.Unimplemented, "method Login not implemented")
+}
+func (*UnimplementedServiceServer) CreateLog(context.Context, *CreateLogRequest) (*CreateLogResponse, error) {
+	return nil, status.Errorf(codes.Unimplemented, "method CreateLog not implemented")
+}
+func (*UnimplementedServiceServer) CheckAdminExists(context.Context, *CheckAdminExistsRequest) (*CheckAdminExistsResponse, error) {
+	return nil, status.Errorf(codes.Unimplemented, "method CheckAdminExists not implemented")
+}
+func (*UnimplementedServiceServer) FindAdminFullname(context.Context, *FindAdminNameRequest) (*FindAdminNameResponse, error) {
+	return nil, status.Errorf(codes.Unimplemented, "method FindAdminFullname not implemented")
+}
+
+func RegisterServiceServer(s *grpc.Server, srv ServiceServer) {
+	s.RegisterService(&_Service_serviceDesc, srv)
+}
+
+func _Service_Login_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(LoginRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(ServiceServer).Login(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/admin.Service/Login",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(ServiceServer).Login(ctx, req.(*LoginRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _Service_CreateLog_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(CreateLogRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(ServiceServer).CreateLog(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/admin.Service/CreateLog",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(ServiceServer).CreateLog(ctx, req.(*CreateLogRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _Service_CheckAdminExists_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(CheckAdminExistsRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(ServiceServer).CheckAdminExists(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/admin.Service/CheckAdminExists",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(ServiceServer).CheckAdminExists(ctx, req.(*CheckAdminExistsRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _Service_FindAdminFullname_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(FindAdminNameRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(ServiceServer).FindAdminFullname(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/admin.Service/FindAdminFullname",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(ServiceServer).FindAdminFullname(ctx, req.(*FindAdminNameRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+var _Service_serviceDesc = grpc.ServiceDesc{
+	ServiceName: "admin.Service",
+	HandlerType: (*ServiceServer)(nil),
+	Methods: []grpc.MethodDesc{
+		{
+			MethodName: "login",
+			Handler:    _Service_Login_Handler,
+		},
+		{
+			MethodName: "createLog",
+			Handler:    _Service_CreateLog_Handler,
+		},
+		{
+			MethodName: "checkAdminExists",
+			Handler:    _Service_CheckAdminExists_Handler,
+		},
+		{
+			MethodName: "findAdminFullname",
+			Handler:    _Service_FindAdminFullname_Handler,
+		},
+	},
+	Streams:  []grpc.StreamDesc{},
+	Metadata: "admin/service.proto",
+}
--- a/internal/rpc/admin/service.proto
+++ b/internal/rpc/admin/service.proto
@@ -0,0 +1,64 @@
+syntax = "proto3";
+option go_package = "./admin";
+
+package admin;
+
+service Service {
+	// 登录
+	rpc login (LoginRequest) returns (LoginResponse) {
+	}
+
+	// 创建操作日志
+	rpc createLog (CreateLogRequest) returns (CreateLogResponse) {
+	}
+
+	// 检查管理员是否存在
+	rpc checkAdminExists (CheckAdminExistsRequest) returns (CheckAdminExistsResponse) {
+
+	}
+
+	// 获取管理员名称
+	rpc findAdminFullname (FindAdminNameRequest) returns (FindAdminNameResponse) {
+
+	}
+}
+
+message LoginRequest {
+	string username = 1;
+	string password = 2;
+}
+
+message LoginResponse {
+	int64 adminId = 1;
+	bool isOk = 2;
+	string message = 3;
+}
+
+message CreateLogRequest {
+	string level = 1;
+	string description = 2;
+	string action = 3;
+	string ip = 4;
+}
+
+message CreateLogResponse {
+	bool isOk = 1;
+}
+
+message CheckAdminExistsRequest {
+	int64 adminId = 1;
+}
+
+message CheckAdminExistsResponse {
+	bool isOk = 1;
+	string message = 2;
+}
+
+
+message FindAdminNameRequest {
+	int64 adminId = 1;
+}
+
+message FindAdminNameResponse {
+	string fullname = 1;
+}
--- a/internal/rpc/rpc_client.go
+++ b/internal/rpc/rpc_client.go
@@ -0,0 +1,80 @@
+package rpc
+
+import (
+	"context"
+	"encoding/base64"
+	"errors"
+	"github.com/TeaOSLab/EdgeAdmin/internal/configs"
+	teaconst "github.com/TeaOSLab/EdgeAdmin/internal/const"
+	"github.com/TeaOSLab/EdgeAdmin/internal/encrypt"
+	"github.com/TeaOSLab/EdgeAdmin/internal/rpc/admin"
+	"github.com/TeaOSLab/EdgeAdmin/internal/utils"
+	"github.com/iwind/TeaGo/maps"
+	"github.com/iwind/TeaGo/rands"
+	"google.golang.org/grpc"
+	"google.golang.org/grpc/metadata"
+	"time"
+)
+
+type RPCClient struct {
+	apiConfig    *configs.APIConfig
+	adminClients []admin.ServiceClient
+}
+
+func NewRPCClient(apiConfig *configs.APIConfig) (*RPCClient, error) {
+	if apiConfig == nil {
+		return nil, errors.New("api config should not be nil")
+	}
+
+	adminClients := []admin.ServiceClient{}
+
+	conns := []*grpc.ClientConn{}
+	for _, endpoint := range apiConfig.RPC.Endpoints {
+		conn, err := grpc.Dial(endpoint, grpc.WithInsecure())
+		if err != nil {
+			return nil, err
+		}
+		conns = append(conns, conn)
+	}
+	if len(conns) == 0 {
+		return nil, errors.New("[RPC]no available endpoints")
+	}
+
+	// node clients
+	for _, conn := range conns {
+		adminClients = append(adminClients, admin.NewServiceClient(conn))
+	}
+
+	return &RPCClient{
+		apiConfig:    apiConfig,
+		adminClients: adminClients,
+	}, nil
+}
+
+func (this *RPCClient) AdminRPC() admin.ServiceClient {
+	if len(this.adminClients) > 0 {
+		return this.adminClients[rands.Int(0, len(this.adminClients)-1)]
+	}
+	return nil
+}
+
+func (this *RPCClient) Context(adminId int) context.Context {
+	ctx := context.Background()
+	m := maps.Map{
+		"timestamp": time.Now().Unix(),
+		"adminId":   adminId,
+	}
+	method, err := encrypt.NewMethodInstance(teaconst.EncryptMethod, this.apiConfig.Secret, this.apiConfig.NodeId)
+	if err != nil {
+		utils.PrintError(err)
+		return context.Background()
+	}
+	data, err := method.Encrypt(m.AsJSON())
+	if err != nil {
+		utils.PrintError(err)
+		return context.Background()
+	}
+	token := base64.StdEncoding.EncodeToString(data)
+	ctx = metadata.AppendToOutgoingContext(ctx, "nodeId", this.apiConfig.NodeId, "token", token)
+	return ctx
+}
--- a/internal/rpc/rpc_client_test.go
+++ b/internal/rpc/rpc_client_test.go
@@ -0,0 +1,33 @@
+package rpc
+
+import (
+	"github.com/TeaOSLab/EdgeAdmin/internal/configs"
+	"github.com/TeaOSLab/EdgeAdmin/internal/rpc/admin"
+	_ "github.com/iwind/TeaGo/bootstrap"
+	stringutil "github.com/iwind/TeaGo/utils/string"
+	"testing"
+	"time"
+)
+
+func TestRPCClient_NodeRPC(t *testing.T) {
+	before := time.Now()
+	defer func() {
+		t.Log(time.Since(before).Seconds()*1000, "ms")
+	}()
+	config, err := configs.LoadAPIConfig()
+	if err != nil {
+		t.Fatal(err)
+	}
+	rpc, err := NewRPCClient(config)
+	if err != nil {
+		t.Fatal(err)
+	}
+	resp, err := rpc.AdminRPC().Login(rpc.Context(0), &admin.LoginRequest{
+		Username: "admin",
+		Password: stringutil.Md5("123456"),
+	})
+	if err != nil {
+		t.Fatal(err)
+	}
+	t.Log(resp)
+}
--- a/internal/rpc/rpc_utils.go
+++ b/internal/rpc/rpc_utils.go
@@ -0,0 +1,30 @@
+package rpc
+
+import (
+	"github.com/TeaOSLab/EdgeAdmin/internal/configs"
+	"sync"
+)
+
+var sharedRPC *RPCClient = nil
+var locker = &sync.Mutex{}
+
+func SharedRPC() (*RPCClient, error) {
+	locker.Lock()
+	defer locker.Unlock()
+
+	if sharedRPC != nil {
+		return sharedRPC, nil
+	}
+
+	config, err := configs.LoadAPIConfig()
+	if err != nil {
+		return nil, err
+	}
+	client, err := NewRPCClient(config)
+	if err != nil {
+		return nil, err
+	}
+
+	sharedRPC = client
+	return sharedRPC, nil
+}
--- a/internal/utils/errors.go
+++ b/internal/utils/errors.go
@@ -0,0 +1,8 @@
+package utils
+
+import "github.com/iwind/TeaGo/logs"
+
+func PrintError(err error) {
+	// TODO 记录调用的文件名、行数
+	logs.Println("[ERROR]" + err.Error())
+}
--- a/internal/web/actions.go
+++ b/internal/web/actions.go
@@ -1,5 +0,0 @@
-package web
-
-import (
-	_ "github.com/TeaOSLab/EdgeAdmin/internal/web/actions/default/index"
-)
--- a/internal/web/actions/actionutils/menu.go
+++ b/internal/web/actions/actionutils/menu.go
@@ -0,0 +1,44 @@
+package actionutils
+
+// 子菜单定义
+type Menu struct {
+	Id               string      `json:"id"`
+	Name             string      `json:"name"`
+	Items            []*MenuItem `json:"items"`
+	IsActive         bool        `json:"isActive"`
+	AlwaysActive     bool        `json:"alwaysActive"`
+	Index            int         `json:"index"`
+	CountNormalItems int         `json:"countNormalItems"`
+}
+
+// 获取新对象
+func NewMenu() *Menu {
+	return &Menu{
+		Items: []*MenuItem{},
+	}
+}
+
+// 添加菜单项
+func (this *Menu) Add(name string, subName string, url string, isActive bool) *MenuItem {
+	item := &MenuItem{
+		Name:     name,
+		SubName:  subName,
+		URL:      url,
+		IsActive: isActive,
+	}
+	this.CountNormalItems++
+	this.Items = append(this.Items, item)
+
+	if isActive {
+		this.IsActive = true
+	}
+
+	return item
+}
+
+// 添加特殊菜单项，不计数
+func (this *Menu) AddSpecial(name string, subName string, url string, isActive bool) *MenuItem {
+	item := this.Add(name, subName, url, isActive)
+	this.CountNormalItems--
+	return item
+}
--- a/internal/web/actions/actionutils/menu_group.go
+++ b/internal/web/actions/actionutils/menu_group.go
@@ -0,0 +1,48 @@
+package actionutils
+
+import (
+	"github.com/iwind/TeaGo/actions"
+	"github.com/iwind/TeaGo/lists"
+)
+
+// 菜单分组
+type MenuGroup struct {
+	Menus      []*Menu `json:"menus"`
+	AlwaysMenu *Menu   `json:"alwaysMenu"`
+}
+
+// 获取新菜单分组对象
+func NewMenuGroup() *MenuGroup {
+	return &MenuGroup{
+		Menus: []*Menu{},
+	}
+}
+
+// 查找菜单，如果找不到则自动创建
+func (this *MenuGroup) FindMenu(menuId string, menuName string) *Menu {
+	for _, m := range this.Menus {
+		if m.Id == menuId {
+			return m
+		}
+	}
+	menu := NewMenu()
+	menu.Id = menuId
+	menu.Name = menuName
+	menu.Items = []*MenuItem{}
+	this.Menus = append(this.Menus, menu)
+	return menu
+}
+
+// 排序
+func (this *MenuGroup) Sort() {
+	lists.Sort(this.Menus, func(i int, j int) bool {
+		menu1 := this.Menus[i]
+		menu2 := this.Menus[j]
+		return menu1.Index < menu2.Index
+	})
+}
+
+// 设置子菜单
+func SetSubMenu(action actions.ActionWrapper, menu *MenuGroup) {
+	action.Object().Data["teaSubMenus"] = menu
+}
--- a/internal/web/actions/actionutils/menu_item.go
+++ b/internal/web/actions/actionutils/menu_item.go
@@ -0,0 +1,14 @@
+package actionutils
+
+// 菜单项
+type MenuItem struct {
+	Id         string `json:"id"`
+	Name       string `json:"name"`
+	SubName    string `json:"subName"` // 副标题
+	SupName    string `json:"supName"` // 头标
+	URL        string `json:"url"`
+	IsActive   bool   `json:"isActive"`
+	Icon       string `json:"icon"`
+	IsSortable bool   `json:"isSortable"`
+	SubColor   string `json:"subColor"`
+}
--- a/internal/web/actions/actionutils/page.go
+++ b/internal/web/actions/actionutils/page.go
@@ -0,0 +1,161 @@
+package actionutils
+
+import (
+	"github.com/iwind/TeaGo/actions"
+	"math"
+	"net/url"
+	"strconv"
+	"strings"
+)
+
+type Page struct {
+	Offset  int // 开始位置
+	Size    int // 每页显示数量
+	Current int // 当前页码
+	Max     int // 最大页码
+	Total   int // 总数量
+
+	Path  string
+	Query url.Values
+}
+
+func NewActionPage(actionPtr actions.ActionWrapper, total int, size int) *Page {
+	action := actionPtr.Object()
+	currentPage := action.ParamInt("page")
+
+	paramSize := action.ParamInt("pageSize")
+	if paramSize > 0 {
+		size = paramSize
+	}
+
+	if size <= 0 {
+		size = 10
+	}
+
+	page := &Page{
+		Current: currentPage,
+		Total:   total,
+		Size:    size,
+		Path:    action.Request.URL.Path,
+		Query:   action.Request.URL.Query(),
+	}
+	page.calculate()
+	return page
+}
+
+func (this *Page) calculate() {
+	if this.Current < 1 {
+		this.Current = 1
+	}
+	if this.Size <= 0 {
+		this.Size = 10
+	}
+
+	this.Offset = this.Size * (this.Current - 1)
+	this.Max = int(math.Ceil(float64(this.Total) / float64(this.Size)))
+}
+
+func (this *Page) AsHTML() string {
+	if this.Total <= this.Size {
+		return ""
+	}
+
+	result := []string{}
+
+	// 首页
+	if this.Max > 0 {
+		result = append(result, `<a href="`+this.composeURL(1)+`">首页</a>`)
+	} else {
+		result = append(result, `<a>首页</a>`)
+	}
+
+	// 上一页
+	if this.Current <= 1 {
+		result = append(result, `<a>上一页</a>`)
+	} else {
+		result = append(result, `<a href="`+this.composeURL(this.Current-1)+`">上一页</a>`)
+	}
+
+	// 中间页数
+	before5 := this.max(this.Current-5, 1)
+	after5 := this.min(before5+9, this.Max)
+
+	if before5 > 1 {
+		result = append(result, `<a>...</a>`)
+	}
+
+	for i := before5; i <= after5; i++ {
+		if i == this.Current {
+			result = append(result, `<a href="`+this.composeURL(i)+`" class="active">`+strconv.Itoa(i)+`</a>`)
+		} else {
+			result = append(result, `<a href="`+this.composeURL(i)+`">`+strconv.Itoa(i)+`</a>`)
+		}
+	}
+
+	if after5 < this.Max {
+		result = append(result, `<a>...</a>`)
+	}
+
+	// 下一页
+	if this.Current >= this.Max {
+		result = append(result, "<a>下一页</a>")
+	} else {
+		result = append(result, `<a href="`+this.composeURL(this.Current+1)+`">下一页</a>`)
+	}
+
+	// 尾页
+	if this.Max > 0 {
+		result = append(result, `<a href="`+this.composeURL(this.Max)+`">尾页</a>`)
+	} else {
+		result = append(result, `<a>尾页</a>`)
+	}
+
+	// 每页数
+	result = append(result, `<select class="ui dropdown" style="height:34px;padding-top:0;padding-bottom:0;margin-left:1em;color:#666" onchange="ChangePageSize(this.value)">
+	<option value="10">[每页]</option>`+this.renderSizeOption(10)+
+		this.renderSizeOption(20)+
+		this.renderSizeOption(30)+
+		this.renderSizeOption(40)+
+		this.renderSizeOption(50)+
+		this.renderSizeOption(60)+
+		this.renderSizeOption(70)+
+		this.renderSizeOption(80)+
+		this.renderSizeOption(90)+
+		this.renderSizeOption(100)+`
+</select>`)
+
+	return `<div class="page">` + strings.Join(result, "") + `</div>`
+}
+
+// 判断是否为最后一页
+func (this *Page) IsLastPage() bool {
+	return this.Current == this.Max
+}
+
+func (this *Page) composeURL(page int) string {
+	this.Query["page"] = []string{strconv.Itoa(page)}
+	return this.Path + "?" + this.Query.Encode()
+}
+
+func (this *Page) min(i, j int) int {
+	if i < j {
+		return i
+	}
+	return j
+}
+
+func (this *Page) max(i, j int) int {
+	if i < j {
+		return j
+	}
+	return i
+}
+
+func (this *Page) renderSizeOption(size int) string {
+	o := `<option value="` + strconv.Itoa(size) + `"`
+	if size == this.Size {
+		o += ` selected="selected"`
+	}
+	o += `>` + strconv.Itoa(size) + `条</option>`
+	return o
+}
--- a/internal/web/actions/actionutils/page_test.go
+++ b/internal/web/actions/actionutils/page_test.go
@@ -0,0 +1,40 @@
+package actionutils
+
+import (
+	"net/url"
+	"testing"
+)
+
+func TestNewActionPage(t *testing.T) {
+	page := &Page{
+		Current: 3,
+		Total:   105,
+		Size:    20,
+		Path:    "/hello",
+		Query: url.Values{
+			"a":    []string{"b"},
+			"c":    []string{"d"},
+			"page": []string{"3"},
+		},
+	}
+	page.calculate()
+	t.Log(page.AsHTML())
+	//logs.PrintAsJSON(page, t)
+}
+
+func TestNewActionPage2(t *testing.T) {
+	page := &Page{
+		Current: 3,
+		Total:   105,
+		Size:    10,
+		Path:    "/hello",
+		Query: url.Values{
+			"a":    []string{"b"},
+			"c":    []string{"d"},
+			"page": []string{"3"},
+		},
+	}
+	page.calculate()
+	t.Log(page.AsHTML())
+	//logs.PrintAsJSON(page, t)
+}
--- a/internal/web/actions/actionutils/parent_action.go
+++ b/internal/web/actions/actionutils/parent_action.go
@@ -0,0 +1,78 @@
+package actionutils
+
+import (
+	"errors"
+	"fmt"
+	"github.com/TeaOSLab/EdgeAdmin/internal/oplogs"
+	"github.com/TeaOSLab/EdgeAdmin/internal/rpc"
+	"github.com/TeaOSLab/EdgeAdmin/internal/rpc/admin"
+	"github.com/TeaOSLab/EdgeAdmin/internal/utils"
+	"github.com/iwind/TeaGo/actions"
+	"net/http"
+	"strconv"
+)
+
+type ParentAction struct {
+	actions.ActionObject
+}
+
+func (this *ParentAction) ErrorPage(err error) {
+	if err == nil {
+		return
+	}
+
+	// 日志
+	this.CreateLog(oplogs.LevelError, "系统发生错误：%s", err.Error())
+
+	if this.Request.Method == http.MethodGet {
+		FailPage(this, err)
+	} else {
+		Fail(this, err)
+	}
+}
+
+func (this *ParentAction) ErrorText(err string) {
+	this.ErrorPage(errors.New(err))
+}
+
+func (this *ParentAction) NotFound(name string, itemId int) {
+	this.ErrorPage(errors.New(name + " id: '" + strconv.Itoa(itemId) + "' is not found"))
+}
+
+func (this *ParentAction) NewPage(total int, size ...int) *Page {
+	if len(size) > 0 {
+		return NewActionPage(this, total, size[0])
+	}
+	return NewActionPage(this, total, 10)
+}
+
+func (this *ParentAction) Nav(mainMenu string, tab string, firstMenu string) {
+	this.Data["mainMenu"] = mainMenu
+	this.Data["mainTab"] = tab
+	this.Data["firstMenuItem"] = firstMenu
+}
+
+func (this *ParentAction) SecondMenu(menuItem string) {
+	this.Data["secondMenuItem"] = menuItem
+}
+
+func (this *ParentAction) AdminId() int {
+	return this.Context.GetInt("adminId")
+}
+
+func (this *ParentAction) CreateLog(level string, description string, args ...interface{}) {
+	rpcClient, err := rpc.SharedRPC()
+	if err != nil {
+		utils.PrintError(err)
+		return
+	}
+	_, err = rpcClient.AdminRPC().CreateLog(rpcClient.Context(this.AdminId()), &admin.CreateLogRequest{
+		Level:       level,
+		Description: fmt.Sprintf(description, args...),
+		Action:      this.Request.URL.Path,
+		Ip:          this.RequestRemoteIP(),
+	})
+	if err != nil {
+		utils.PrintError(err)
+	}
+}
--- a/internal/web/actions/actionutils/tabbar.go
+++ b/internal/web/actions/actionutils/tabbar.go
@@ -0,0 +1,41 @@
+package actionutils
+
+import (
+	"github.com/iwind/TeaGo/actions"
+	"github.com/iwind/TeaGo/maps"
+)
+
+// Tabbar定义
+type Tabbar struct {
+	items []maps.Map
+}
+
+// 获取新对象
+func NewTabbar() *Tabbar {
+	return &Tabbar{
+		items: []maps.Map{},
+	}
+}
+
+// 添加菜单项
+func (this *Tabbar) Add(name string, subName string, url string, icon string, active bool) maps.Map {
+	m := maps.Map{
+		"name":    name,
+		"subName": subName,
+		"url":     url,
+		"icon":    icon,
+		"active":  active,
+	}
+	this.items = append(this.items, m)
+	return m
+}
+
+// 取得所有的Items
+func (this *Tabbar) Items() []maps.Map {
+	return this.items
+}
+
+// 设置子菜单
+func SetTabbar(action actions.ActionWrapper, tabbar *Tabbar) {
+	action.Object().Data["teaTabbar"] = tabbar.Items()
+}
--- a/internal/web/actions/actionutils/utils.go
+++ b/internal/web/actions/actionutils/utils.go
@@ -0,0 +1,66 @@
+package actionutils
+
+import (
+	"fmt"
+	teaconst "github.com/TeaOSLab/EdgeAdmin/internal/const"
+	"github.com/iwind/TeaGo/actions"
+	"github.com/iwind/TeaGo/logs"
+	"os"
+	"path/filepath"
+	"reflect"
+	"runtime"
+	"strings"
+)
+
+// 提示服务器错误信息
+func Fail(action actions.ActionWrapper, err error) {
+	if err != nil {
+		logs.Println("[" + reflect.TypeOf(action).String() + "]" + findStack(err.Error()))
+	}
+	action.Object().Fail(teaconst.ErrServer)
+}
+
+// 提示页面错误信息
+func FailPage(action actions.ActionWrapper, err error) {
+	if err != nil {
+		logs.Println("[" + reflect.TypeOf(action).String() + "]" + findStack(err.Error()))
+	}
+	action.Object().WriteString(teaconst.ErrServer)
+}
+
+// 判断动作的文件路径是否相当
+func MatchPath(action *actions.ActionObject, path string) bool {
+	return action.Request.URL.Path == path
+}
+
+func findStack(err string) string {
+	_, currentFilename, _, currentOk := runtime.Caller(1)
+	if currentOk {
+		for i := 1; i < 32; i++ {
+			_, filename, lineNo, ok := runtime.Caller(i)
+			if !ok {
+				break
+			}
+
+			if filename == currentFilename || filepath.Base(filename) == "parent_action.go" {
+				continue
+			}
+
+			goPath := os.Getenv("GOPATH")
+			if len(goPath) > 0 {
+				absGoPath, err := filepath.Abs(goPath)
+				if err == nil {
+					filename = strings.TrimPrefix(filename, absGoPath)[1:]
+				}
+			} else if strings.Contains(filename, "src") {
+				filename = filename[strings.Index(filename, "src"):]
+			}
+
+			err += "\n\t\t" + string(filename) + ":" + fmt.Sprintf("%d", lineNo)
+
+			break
+		}
+	}
+
+	return err
+}
--- a/internal/web/actions/default/dashboard/index.go
+++ b/internal/web/actions/default/dashboard/index.go
@@ -0,0 +1,15 @@
+package dashboard
+
+import "github.com/TeaOSLab/EdgeAdmin/internal/web/actions/actionutils"
+
+type IndexAction struct {
+	actionutils.ParentAction
+}
+
+func (this *IndexAction) Init() {
+	this.Nav("", "", "")
+}
+
+func (this *IndexAction) RunGet(params struct{}) {
+	this.RedirectURL("/servers")
+}
--- a/internal/web/actions/default/dashboard/init.go
+++ b/internal/web/actions/default/dashboard/init.go
@@ -0,0 +1,15 @@
+package dashboard
+
+import (
+	"github.com/TeaOSLab/EdgeAdmin/internal/web/helpers"
+	"github.com/iwind/TeaGo"
+)
+
+func init() {
+	TeaGo.BeforeStart(func(server *TeaGo.Server) {
+		server.Prefix("/dashboard").
+			Helper(new(helpers.UserMustAuth)).
+			GetPost("", new(IndexAction)).
+			EndAll()
+	})
+}
--- a/internal/web/actions/default/index/index.go
+++ b/internal/web/actions/default/index/index.go
@@ -1,8 +1,17 @@
 package index

 import (
+	"fmt"
+	"github.com/TeaOSLab/EdgeAdmin/internal/oplogs"
+	"github.com/TeaOSLab/EdgeAdmin/internal/rpc"
+	"github.com/TeaOSLab/EdgeAdmin/internal/rpc/admin"
+	"github.com/TeaOSLab/EdgeAdmin/internal/utils"
+	"github.com/TeaOSLab/EdgeAdmin/internal/web/actions/actionutils"
+	"github.com/TeaOSLab/EdgeAdmin/internal/web/helpers"
 	"github.com/iwind/TeaGo/actions"
+	"github.com/iwind/TeaGo/types"
 	stringutil "github.com/iwind/TeaGo/utils/string"
+	"time"
 )

 type IndexAction actions.Action
@@ -13,6 +22,107 @@ var TokenSalt = stringutil.Rand(32)

 func (this *IndexAction) RunGet(params struct {
 	From string
+
+	Auth *helpers.UserShouldAuth
 }) {
-	this.WriteString("Hello, i am index")
+	// 已登录跳转到dashboard
+	if params.Auth.IsUser() {
+		this.RedirectURL("/dashboard")
+		return
+	}
+
+	this.Data["isUser"] = false
+	this.Data["menu"] = "signIn"
+
+	timestamp := fmt.Sprintf("%d", time.Now().Unix())
+	this.Data["token"] = stringutil.Md5(TokenSalt+timestamp) + timestamp
+	this.Data["from"] = params.From
+
+	this.Show()
+}
+
+// 提交
+func (this *IndexAction) RunPost(params struct {
+	Token    string
+	Username string
+	Password string
+	Remember bool
+	Must     *actions.Must
+	Auth     *helpers.UserShouldAuth
+}) {
+	params.Must.
+		Field("username", params.Username).
+		Require("请输入用户名").
+		Field("password", params.Password).
+		Require("请输入密码")
+
+	if params.Password == stringutil.Md5("") {
+		this.FailField("password", "请输入密码")
+	}
+
+	// 检查token
+	if len(params.Token) <= 32 {
+		this.Fail("请通过登录页面登录")
+	}
+	timestampString := params.Token[32:]
+	if stringutil.Md5(TokenSalt+timestampString) != params.Token[:32] {
+		this.FailField("refresh", "登录页面已过期，请刷新后重试")
+	}
+	timestamp := types.Int64(timestampString)
+	if timestamp < time.Now().Unix()-1800 {
+		this.FailField("refresh", "登录页面已过期，请刷新后重试")
+	}
+
+	rpcClient, err := rpc.SharedRPC()
+	if err != nil {
+		this.Fail("服务器出了点小问题：" + err.Error())
+	}
+	resp, err := rpcClient.AdminRPC().Login(rpcClient.Context(0), &admin.LoginRequest{
+		Username: params.Username,
+		Password: params.Password,
+	})
+
+	if err != nil {
+		_, err = rpcClient.AdminRPC().CreateLog(rpcClient.Context(0), &admin.CreateLogRequest{
+			Level:       oplogs.LevelError,
+			Description: "登录时发生系统错误：" + err.Error(),
+			Action:      this.Request.URL.Path,
+			Ip:          this.RequestRemoteIP(),
+		})
+		if err != nil {
+			utils.PrintError(err)
+		}
+
+		actionutils.Fail(this, err)
+	}
+
+	if !resp.IsOk {
+		_, err = rpcClient.AdminRPC().CreateLog(rpcClient.Context(0), &admin.CreateLogRequest{
+			Level:       oplogs.LevelWarn,
+			Description: "登录失败，用户名：" + params.Username,
+			Action:      this.Request.URL.Path,
+			Ip:          this.RequestRemoteIP(),
+		})
+		if err != nil {
+			utils.PrintError(err)
+		}
+
+		this.Fail("请输入正确的用户名密码")
+	}
+
+	adminId := int(resp.AdminId)
+	params.Auth.StoreAdmin(adminId, params.Remember)
+
+	// 记录日志
+	_, err = rpcClient.AdminRPC().CreateLog(rpcClient.Context(0), &admin.CreateLogRequest{
+		Level:       oplogs.LevelInfo,
+		Description: "成功登录系统，用户名：" + params.Username,
+		Action:      this.Request.URL.Path,
+		Ip:          this.RequestRemoteIP(),
+	})
+	if err != nil {
+		utils.PrintError(err)
+	}
+
+	this.Success()
 }
--- a/internal/web/actions/default/logout/index.go
+++ b/internal/web/actions/default/logout/index.go
@@ -0,0 +1,16 @@
+package logout
+
+import (
+	"github.com/TeaOSLab/EdgeAdmin/internal/web/helpers"
+	"github.com/iwind/TeaGo/actions"
+)
+
+type IndexAction actions.Action
+
+// 退出登录
+func (this *IndexAction) Run(params struct {
+	Auth *helpers.UserShouldAuth
+}) {
+	params.Auth.Logout()
+	this.RedirectURL("/")
+}
--- a/internal/web/actions/default/logout/init.go
+++ b/internal/web/actions/default/logout/init.go
@@ -0,0 +1,12 @@
+package logout
+
+import "github.com/iwind/TeaGo"
+
+func init() {
+	TeaGo.BeforeStart(func(server *TeaGo.Server) {
+		server.
+			Prefix("/logout").
+			Get("", new(IndexAction)).
+			EndAll()
+	})
+}
--- a/internal/web/actions/default/nodes/create.go
+++ b/internal/web/actions/default/nodes/create.go
@@ -0,0 +1,51 @@
+package nodes
+
+import (
+	"github.com/TeaOSLab/EdgeAdmin/internal/web/actions/actionutils"
+	"github.com/iwind/TeaGo/actions"
+)
+
+type CreateAction struct {
+	actionutils.ParentAction
+}
+
+func (this *CreateAction) Init() {
+	this.Nav("", "", "create")
+}
+
+func (this *CreateAction) RunGet(params struct{}) {
+	// 所有集群
+	/**clusters, err := models.SharedNodeClusterDAO.FindAllEnableClusters()
+	if err != nil {
+		this.ErrorPage(err)
+		return
+	}
+	clusterMaps := []maps.Map{}
+	for _, cluster := range clusters {
+		clusterMaps = append(clusterMaps, maps.Map{
+			"id":   cluster.Id,
+			"name": cluster.Name,
+		})
+	}
+	this.Data["clusters"] = clusterMaps**/
+
+	this.Show()
+}
+
+func (this *CreateAction) RunPost(params struct {
+	Name      string
+	ClusterId int
+
+	Must *actions.Must
+}) {
+	params.Must.
+		Field("name", params.Name).
+		Require("请输入节点名称")
+
+	// TODO 检查cluster
+	if params.ClusterId <= 0 {
+		this.Fail("请选择所在集群")
+	}
+
+	// TODO 检查SSH授权
+}
--- a/internal/web/actions/default/nodes/helper.go
+++ b/internal/web/actions/default/nodes/helper.go
@@ -0,0 +1,10 @@
+package nodes
+
+import "github.com/iwind/TeaGo/actions"
+
+type Helper struct {
+}
+
+func (this *Helper) BeforeAction(action *actions.ActionObject) {
+	action.Data["teaMenu"] = "nodes"
+}
--- a/internal/web/actions/default/nodes/index.go
+++ b/internal/web/actions/default/nodes/index.go
@@ -0,0 +1,15 @@
+package nodes
+
+import "github.com/TeaOSLab/EdgeAdmin/internal/web/actions/actionutils"
+
+type IndexAction struct {
+	actionutils.ParentAction
+}
+
+func (this *IndexAction) Init() {
+	this.Nav("", "", "index")
+}
+
+func (this *IndexAction) RunGet(params struct{}) {
+	this.Show()
+}
--- a/internal/web/actions/default/nodes/init.go
+++ b/internal/web/actions/default/nodes/init.go
@@ -0,0 +1,18 @@
+package nodes
+
+import (
+	"github.com/TeaOSLab/EdgeAdmin/internal/web/helpers"
+	"github.com/iwind/TeaGo"
+)
+
+func init() {
+	TeaGo.BeforeStart(func(server *TeaGo.Server) {
+		server.
+			Helper(new(helpers.UserMustAuth)).
+			Helper(new(Helper)).
+			Prefix("/nodes").
+			Get("", new(IndexAction)).
+			GetPost("/create", new(CreateAction)).
+			EndAll()
+	})
+}
--- a/internal/web/actions/default/servers/helper.go
+++ b/internal/web/actions/default/servers/helper.go
@@ -0,0 +1,14 @@
+package servers
+
+import "github.com/iwind/TeaGo/actions"
+
+type Helper struct {
+}
+
+func NewHelper() *Helper {
+	return &Helper{}
+}
+
+func (this *Helper) BeforeAction(action *actions.ActionObject) {
+	action.Data["teaMenu"] = "servers"
+}
--- a/internal/web/actions/default/servers/index.go
+++ b/internal/web/actions/default/servers/index.go
@@ -0,0 +1,15 @@
+package servers
+
+import "github.com/TeaOSLab/EdgeAdmin/internal/web/actions/actionutils"
+
+type IndexAction struct {
+	actionutils.ParentAction
+}
+
+func (this *IndexAction) Init() {
+	this.Nav("", "", "")
+}
+
+func (this *IndexAction) RunGet(params struct{}) {
+	this.Show()
+}
--- a/internal/web/actions/default/servers/init.go
+++ b/internal/web/actions/default/servers/init.go
@@ -0,0 +1,17 @@
+package servers
+
+import (
+	"github.com/TeaOSLab/EdgeAdmin/internal/web/helpers"
+	"github.com/iwind/TeaGo"
+)
+
+func init() {
+	TeaGo.BeforeStart(func(server *TeaGo.Server) {
+		server.
+			Helper(helpers.NewUserMustAuth()).
+			Helper(NewHelper()).
+			Prefix("/servers").
+			Get("", new(IndexAction)).
+			EndAll()
+	})
+}
--- a/internal/web/actions/default/settings/helper.go
+++ b/internal/web/actions/default/settings/helper.go
@@ -0,0 +1,14 @@
+package settings
+
+import "github.com/iwind/TeaGo/actions"
+
+type Helper struct {
+}
+
+func NewHelper() *Helper {
+	return &Helper{}
+}
+
+func (this *Helper) BeforeAction(action *actions.ActionObject) {
+	action.Data["teaMenu"] = "settings"
+}
--- a/internal/web/actions/default/settings/index.go
+++ b/internal/web/actions/default/settings/index.go
@@ -0,0 +1,15 @@
+package settings
+
+import "github.com/TeaOSLab/EdgeAdmin/internal/web/actions/actionutils"
+
+type IndexAction struct {
+	actionutils.ParentAction
+}
+
+func (this *IndexAction) Init() {
+	this.Nav("", "", "")
+}
+
+func (this *IndexAction) RunGet(params struct{}) {
+	this.Show()
+}
--- a/internal/web/actions/default/settings/init.go
+++ b/internal/web/actions/default/settings/init.go
@@ -0,0 +1,17 @@
+package settings
+
+import (
+	"github.com/TeaOSLab/EdgeAdmin/internal/web/helpers"
+	"github.com/iwind/TeaGo"
+)
+
+func init() {
+	TeaGo.BeforeStart(func(server *TeaGo.Server) {
+		server.
+			Helper(helpers.NewUserMustAuth()).
+			Helper(NewHelper()).
+			Prefix("/settings").
+			Get("", new(IndexAction)).
+			EndAll()
+	})
+}
--- a/internal/web/actions/default/ui/components.go
+++ b/internal/web/actions/default/ui/components.go
@@ -0,0 +1,42 @@
+package ui
+
+import (
+	"bytes"
+	"github.com/iwind/TeaGo/Tea"
+	"github.com/iwind/TeaGo/actions"
+	"github.com/iwind/TeaGo/files"
+	"github.com/iwind/TeaGo/logs"
+)
+
+type ComponentsAction actions.Action
+
+func (this *ComponentsAction) RunGet(params struct{}) {
+	this.AddHeader("Content-Type", "text/javascript; charset=utf-8")
+
+	var webRoot string
+	if Tea.IsTesting() {
+		webRoot = Tea.Root + "/../web/public/js/components/"
+	} else {
+		webRoot = Tea.Root + "/web/public/js/components/"
+	}
+	f := files.NewFile(webRoot)
+
+	buf := bytes.NewBuffer([]byte{})
+	f.Range(func(file *files.File) {
+		if !file.IsFile() {
+			return
+		}
+		if file.Ext() != ".js" {
+			return
+		}
+		data, err := file.ReadAll()
+		if err != nil {
+			logs.Error(err)
+			return
+		}
+		buf.Write(data)
+		buf.WriteByte('\n')
+		buf.WriteByte('\n')
+	})
+	this.Write(buf.Bytes())
+}
--- a/internal/web/actions/default/ui/init.go
+++ b/internal/web/actions/default/ui/init.go
@@ -0,0 +1,16 @@
+package ui
+
+import (
+	"github.com/iwind/TeaGo"
+	"github.com/iwind/TeaGo/actions"
+)
+
+func init() {
+	TeaGo.BeforeStart(func(server *TeaGo.Server) {
+		server.
+			Helper(new(actions.Gzip)).
+			Prefix("/ui").
+			Get("/components.js", new(ComponentsAction)).
+			EndAll()
+	})
+}
--- a/internal/web/helpers/user_must_auth.go
+++ b/internal/web/helpers/user_must_auth.go
@@ -0,0 +1,117 @@
+package helpers
+
+import (
+	teaconst "github.com/TeaOSLab/EdgeAdmin/internal/const"
+	nodes "github.com/TeaOSLab/EdgeAdmin/internal/rpc"
+	"github.com/TeaOSLab/EdgeAdmin/internal/rpc/admin"
+	"github.com/TeaOSLab/EdgeAdmin/internal/utils"
+	"github.com/iwind/TeaGo/actions"
+	"github.com/iwind/TeaGo/logs"
+	"net/http"
+	"reflect"
+)
+
+// 认证拦截
+type UserMustAuth struct {
+	AdminId int
+	Grant   string
+}
+
+func NewUserMustAuth() *UserMustAuth {
+	return &UserMustAuth{}
+}
+
+func (this *UserMustAuth) BeforeAction(actionPtr actions.ActionWrapper, paramName string) (goNext bool) {
+	var action = actionPtr.Object()
+
+	var session = action.Session()
+	var adminId = session.GetInt("adminId")
+	if adminId <= 0 {
+		this.login(action)
+		return false
+	}
+
+	// 检查用户是否存在
+	rpc, err := nodes.SharedRPC()
+	if err != nil {
+		utils.PrintError(err)
+		return false
+	}
+
+	rpcResp, err := rpc.AdminRPC().CheckAdminExists(rpc.Context(0), &admin.CheckAdminExistsRequest{AdminId: int64(adminId)})
+	if err != nil {
+		logs.Error(err)
+		return false
+	}
+
+	if !rpcResp.IsOk {
+		session.Delete()
+
+		this.login(action)
+		return false
+	}
+
+	this.AdminId = adminId
+	action.Context.Set("adminId", this.AdminId)
+
+	if action.Request.Method != http.MethodGet {
+		return true
+	}
+
+	// 初始化内置方法
+	action.ViewFunc("teaTitle", func() string {
+		return action.Data["teaTitle"].(string)
+	})
+
+	// 初始化变量
+	modules := []map[string]interface{}{
+		{
+			"code":     "servers",
+			"menuName": "服务管理",
+			"icon":     "clone outsize",
+		},
+		{
+			"code":     "nodes",
+			"menuName": "节点管理",
+			"icon":     "server",
+		},
+	}
+
+	action.Data["teaTitle"] = teaconst.ProductNameZH
+	action.Data["teaName"] = teaconst.ProductNameZH
+
+	resp, err := rpc.AdminRPC().FindAdminFullname(rpc.Context(0), &admin.FindAdminNameRequest{AdminId: int64(this.AdminId)})
+	if err != nil {
+		utils.PrintError(err)
+		action.Data["teaUsername"] = ""
+	} else {
+		action.Data["teaUsername"] = resp.Fullname
+	}
+
+	action.Data["teaUserAvatar"] = ""
+
+	action.Data["teaMenu"] = ""
+	action.Data["teaModules"] = modules
+	action.Data["teaSubMenus"] = []map[string]interface{}{}
+	action.Data["teaTabbar"] = []map[string]interface{}{}
+	action.Data["teaVersion"] = teaconst.Version
+	action.Data["teaIsSuper"] = false
+
+	// 菜单
+	action.Data["firstMenuItem"] = ""
+
+	// 未读消息数
+	action.Data["teaBadge"] = 0
+
+	// 调用Init
+	initMethod := reflect.ValueOf(actionPtr).MethodByName("Init")
+	if initMethod.IsValid() {
+		initMethod.Call([]reflect.Value{})
+	}
+
+	return true
+}
+
+func (this *UserMustAuth) login(action *actions.ActionObject) {
+	action.RedirectURL("/")
+}
--- a/internal/web/helpers/user_should_auth.go
+++ b/internal/web/helpers/user_should_auth.go
@@ -0,0 +1,51 @@
+package helpers
+
+import (
+	"github.com/iwind/TeaGo/actions"
+	"net/http"
+	"strconv"
+)
+
+type UserShouldAuth struct {
+	action *actions.ActionObject
+}
+
+func (this *UserShouldAuth) BeforeAction(actionPtr actions.ActionWrapper, paramName string) (goNext bool) {
+	this.action = actionPtr.Object()
+	return true
+}
+
+// 存储用户名到SESSION
+func (this *UserShouldAuth) StoreAdmin(adminId int, remember bool) {
+	// 修改sid的时间
+	if remember {
+		cookie := &http.Cookie{
+			Name:   "sid",
+			Value:  this.action.Session().Sid,
+			Path:   "/",
+			MaxAge: 14 * 86400,
+		}
+		this.action.AddCookie(cookie)
+	} else {
+		cookie := &http.Cookie{
+			Name:   "sid",
+			Value:  this.action.Session().Sid,
+			Path:   "/",
+			MaxAge: 0,
+		}
+		this.action.AddCookie(cookie)
+	}
+	this.action.Session().Write("adminId", strconv.Itoa(adminId))
+}
+
+func (this *UserShouldAuth) IsUser() bool {
+	return this.action.Session().GetInt("adminId") > 0
+}
+
+func (this *UserShouldAuth) AdminId() int {
+	return this.action.Session().GetInt("adminId")
+}
+
+func (this *UserShouldAuth) Logout() {
+	this.action.Session().Delete()
+}
--- a/internal/web/import.go
+++ b/internal/web/import.go
@@ -0,0 +1,11 @@
+package web
+
+import (
+	_ "github.com/TeaOSLab/EdgeAdmin/internal/web/actions/default/dashboard"
+	_ "github.com/TeaOSLab/EdgeAdmin/internal/web/actions/default/index"
+	_ "github.com/TeaOSLab/EdgeAdmin/internal/web/actions/default/logout"
+	_ "github.com/TeaOSLab/EdgeAdmin/internal/web/actions/default/nodes"
+	_ "github.com/TeaOSLab/EdgeAdmin/internal/web/actions/default/servers"
+	_ "github.com/TeaOSLab/EdgeAdmin/internal/web/actions/default/settings"
+	_ "github.com/TeaOSLab/EdgeAdmin/internal/web/actions/default/ui"
+)