fix: 统一API响应格式并修复前端测试

- 所有Handler方法使用标准{code:0,message:"success",data:...}响应格式
- 修复Cursor分页响应包装(GetAllDevices,GetLoginLogs,ListUsers等)
- 修复AuthHandler和SMSHandler认证方法响应格式
- 修复operation_log.go admin用户operation_type前缀问题
- 修复DashboardPage嵌套stats结构
- 修复LoginLogsPage reset功能stale closure问题
- 修复UsersPage批量操作API调用
- 修复多个前端测试(mock格式、按钮选择、断言逻辑)
- 添加OAuth测试域名白名单
- 新增代码审查流程文档

internal/api/handler/device_handler.go

@@ -41,7 +41,11 @@ func (h *DeviceHandler) CreateDevice(c *gin.Context) {
 		return
 	}
 
-	c.JSON(http.StatusCreated, device)
+	c.JSON(http.StatusCreated, gin.H{
+		"code":    0,
+		"message": "success",
+		"data":    device,
+	})
 }
 
 func (h *DeviceHandler) GetMyDevices(c *gin.Context) {
@@ -61,10 +65,14 @@ func (h *DeviceHandler) GetMyDevices(c *gin.Context) {
 	}
 
 	c.JSON(http.StatusOK, gin.H{
-		"devices":   devices,
-		"total":    total,
-		"page":     page,
-		"page_size": pageSize,
+		"code": 0,
+		"message": "success",
+		"data": gin.H{
+			"items":    devices,
+			"total":   total,
+			"page":    page,
+			"page_size": pageSize,
+		},
 	})
 }
 
@@ -81,7 +89,11 @@ func (h *DeviceHandler) GetDevice(c *gin.Context) {
 		return
 	}
 
-	c.JSON(http.StatusOK, device)
+	c.JSON(http.StatusOK, gin.H{
+		"code":    0,
+		"message": "success",
+		"data":    device,
+	})
 }
 
 func (h *DeviceHandler) UpdateDevice(c *gin.Context) {
@@ -103,7 +115,11 @@ func (h *DeviceHandler) UpdateDevice(c *gin.Context) {
 		return
 	}
 
-	c.JSON(http.StatusOK, device)
+	c.JSON(http.StatusOK, gin.H{
+		"code":    0,
+		"message": "success",
+		"data":    device,
+	})
 }
 
 func (h *DeviceHandler) DeleteDevice(c *gin.Context) {
@@ -118,7 +134,10 @@ func (h *DeviceHandler) DeleteDevice(c *gin.Context) {
 		return
 	}
 
-	c.JSON(http.StatusOK, gin.H{"message": "device deleted"})
+	c.JSON(http.StatusOK, gin.H{
+		"code":    0,
+		"message": "device deleted",
+	})
 }
 
 func (h *DeviceHandler) UpdateDeviceStatus(c *gin.Context) {
@@ -153,7 +172,10 @@ func (h *DeviceHandler) UpdateDeviceStatus(c *gin.Context) {
 		return
 	}
 
-	c.JSON(http.StatusOK, gin.H{"message": "status updated"})
+	c.JSON(http.StatusOK, gin.H{
+		"code":    0,
+		"message": "status updated",
+	})
 }
 
 func (h *DeviceHandler) GetUserDevices(c *gin.Context) {
@@ -199,10 +221,14 @@ func (h *DeviceHandler) GetUserDevices(c *gin.Context) {
 	}
 
 	c.JSON(http.StatusOK, gin.H{
-		"devices":    devices,
-		"total":     total,
-		"page":      page,
-		"page_size": pageSize,
+		"code": 0,
+		"message": "success",
+		"data": gin.H{
+			"items":     devices,
+			"total":    total,
+			"page":     page,
+			"page_size": pageSize,
+		},
 	})
 }
 
@@ -221,7 +247,11 @@ func (h *DeviceHandler) GetAllDevices(c *gin.Context) {
 			handleError(c, err)
 			return
 		}
-		c.JSON(http.StatusOK, result)
+		c.JSON(http.StatusOK, gin.H{
+			"code":    0,
+			"message": "success",
+			"data":    result,
+		})
 		return
 	}
 
@@ -233,10 +263,14 @@ func (h *DeviceHandler) GetAllDevices(c *gin.Context) {
 	}
 
 	c.JSON(http.StatusOK, gin.H{
-		"devices":   devices,
-		"total":     total,
-		"page":      req.Page,
-		"page_size": req.PageSize,
+		"code": 0,
+		"message": "success",
+		"data": gin.H{
+			"items":    devices,
+			"total":   total,
+			"page":    req.Page,
+			"page_size": req.PageSize,
+		},
 	})
 }
 
@@ -267,7 +301,10 @@ func (h *DeviceHandler) TrustDevice(c *gin.Context) {
 		return
 	}
 
-	c.JSON(http.StatusOK, gin.H{"message": "device trusted"})
+	c.JSON(http.StatusOK, gin.H{
+		"code":    0,
+		"message": "device trusted",
+	})
 }
 
 // TrustDeviceByDeviceID 根据设备标识字符串设置设备为信任状态
@@ -298,7 +335,10 @@ func (h *DeviceHandler) TrustDeviceByDeviceID(c *gin.Context) {
 		return
 	}
 
-	c.JSON(http.StatusOK, gin.H{"message": "device trusted"})
+	c.JSON(http.StatusOK, gin.H{
+		"code":    0,
+		"message": "device trusted",
+	})
 }
 
 // UntrustDevice 取消设备信任状态
@@ -314,7 +354,10 @@ func (h *DeviceHandler) UntrustDevice(c *gin.Context) {
 		return
 	}
 
-	c.JSON(http.StatusOK, gin.H{"message": "device untrusted"})
+	c.JSON(http.StatusOK, gin.H{
+		"code":    0,
+		"message": "device untrusted",
+	})
 }
 
 // GetMyTrustedDevices 获取我的信任设备列表
@@ -331,7 +374,11 @@ func (h *DeviceHandler) GetMyTrustedDevices(c *gin.Context) {
 		return
 	}
 
-	c.JSON(http.StatusOK, gin.H{"devices": devices})
+	c.JSON(http.StatusOK, gin.H{
+		"code":    0,
+		"message": "success",
+		"data":    devices,
+	})
 }
 
 // LogoutAllOtherDevices 登出所有其他设备
@@ -355,7 +402,10 @@ func (h *DeviceHandler) LogoutAllOtherDevices(c *gin.Context) {
 		return
 	}
 
-	c.JSON(http.StatusOK, gin.H{"message": "all other devices logged out"})
+	c.JSON(http.StatusOK, gin.H{
+		"code":    0,
+		"message": "all other devices logged out",
+	})
 }
 
 // parseDuration 解析duration字符串，如 "30d" -> 30天的time.Duration