feat: 初始化智能物联网设备管理系统前后端基础项目

完成项目整体结构搭建，包含：
1. 前端Vue3+TS+Vite+Antd项目基础配置与核心依赖
2. 后端MidwayJS+TypeORM+JWT权限认证框架
3. 完整的用户、角色、权限、日志数据库表结构
4. 核心业务模块API与基础服务实现
5. 全局样式、路由、状态管理配置

server/src/middleware/rbac.middleware.ts

@@ -0,0 +1,74 @@
+import { Middleware, IMiddleware } from '@midwayjs/core';
+import { Context, NextFunction } from '@midwayjs/koa';
+import { Provide, Inject } from '@midwayjs/core';
+import { PermissionService } from '../service/permission.service';
+
+@Provide()
+export class RbacMiddleware implements IMiddleware<Context, NextFunction> {
+
+  @Inject()
+  permissionService!: PermissionService;
+
+  resolve() {
+    return async (ctx: Context, next: NextFunction) => {
+      const user = ctx.state.user;
+
+      if (!user) {
+        ctx.status = 401;
+        ctx.body = {
+          code: 401,
+          message: '未登录',
+        };
+        return;
+      }
+
+      // 获取当前请求路径和方法，转换为权限码
+      // 例如：GET /api/user/list -> user:list
+      const permissionCode = this.extractPermissionCode(ctx);
+
+      // 超级管理员拥有所有权限
+      if (user.roles && user.roles.includes('super_admin')) {
+        await next();
+        return;
+      }
+
+      // 检查用户是否拥有该权限
+      const hasPermission = await this.permissionService.checkUserPermission(
+        user.userId,
+        permissionCode
+      );
+
+      if (!hasPermission) {
+        ctx.status = 403;
+        ctx.body = {
+          code: 403,
+          message: '没有访问权限',
+        };
+        return;
+      }
+
+      await next();
+    };
+  }
+
+  private extractPermissionCode(ctx: Context): string {
+    const url = ctx.path.replace('/api/', '').replace(/^\//, '');
+    const method = ctx.method.toLowerCase();
+
+    const methodMap: Record<string, string> = {
+      post: 'create',
+      put: 'update',
+      delete: 'delete',
+      get: 'list',
+    };
+
+    const action = methodMap[method] || method;
+
+    const parts = url.split('/');
+    if (parts.length >= 2) {
+      return `${parts[0]}:${action}`;
+    }
+
+    return `${url}:${action}`;
+  }
+}