Major Features: - ✅ Multi-tenant architecture (tenant isolation) - ✅ Employee CRUD with lifecycle management (onboarding/offboarding) - ✅ Department tree structure with email domain management - ✅ Company info management (single-record editing) - ✅ System functions CRUD (permission management) - ✅ Email account management (multi-account per employee) - ✅ Keycloak SSO integration (auth.lab.taipei) - ✅ Redis session storage (10.1.0.254:6379) - Solves Cookie 4KB limitation - Cross-system session sharing - Sliding expiration (8 hours) - Automatic token refresh Technical Stack: Backend: - FastAPI + SQLAlchemy - PostgreSQL 16 (10.1.0.20:5433) - Keycloak Admin API integration - Docker Mailserver integration (SSH) - Alembic migrations Frontend: - Next.js 14 (App Router) - NextAuth 4 with Keycloak Provider - Redis session storage (ioredis) - Tailwind CSS Infrastructure: - Redis 7 (10.1.0.254:6379) - Session + Cache - Keycloak 26.1.0 (auth.lab.taipei) - Docker Mailserver (10.1.0.254) Architecture Highlights: - Session管理由 Keycloak + Redis 統一控制 - 支援多系統 (HR/WebMail/Calendar/Drive/Office) 共享 session - Token 自動刷新,異質服務整合 - 未來可無縫遷移到雲端 Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
46 lines
960 B
Python
46 lines
960 B
Python
"""
|
|
修正租戶的 keycloak_realm 為小寫
|
|
"""
|
|
import psycopg2
|
|
|
|
conn = psycopg2.connect(
|
|
host="10.1.0.20",
|
|
port=5433,
|
|
database="hr_portal",
|
|
user="admin",
|
|
password="DC1qaz2wsx"
|
|
)
|
|
conn.autocommit = False
|
|
cur = conn.cursor()
|
|
|
|
try:
|
|
print("Updating keycloak_realm to lowercase...")
|
|
|
|
# 更新為小寫
|
|
cur.execute("""
|
|
UPDATE tenants
|
|
SET keycloak_realm = LOWER(keycloak_realm)
|
|
WHERE id = 1;
|
|
""")
|
|
|
|
conn.commit()
|
|
print("SUCCESS: keycloak_realm updated")
|
|
|
|
# 驗證
|
|
cur.execute("SELECT id, code, keycloak_realm FROM tenants WHERE id = 1;")
|
|
result = cur.fetchone()
|
|
if result:
|
|
print(f"\nVerified:")
|
|
print(f" ID: {result[0]}")
|
|
print(f" Code: {result[1]}")
|
|
print(f" Keycloak Realm: {result[2]}")
|
|
|
|
except Exception as e:
|
|
conn.rollback()
|
|
print(f"ERROR: {e}")
|
|
import traceback
|
|
traceback.print_exc()
|
|
finally:
|
|
cur.close()
|
|
conn.close()
|