开启集群数据权限，同一浏览器不同账号登录看到其它账号集群信息bug fixed.

brokerId不是从0开始，topic管理->变更副本失败fixed.
升级kafka到3.5.0版本.
2024-06-16 20:36:00 +08:00 · 2024-06-11 20:00:23 +08:00 · 2024-05-23 21:37:38 +08:00 · 2024-05-23 21:35:34 +08:00 · 2024-03-03 21:46:45 +08:00 · 2024-02-25 21:47:06 +08:00
142 changed files with 5900 additions and 490 deletions
--- a/README.md
+++ b/README.md
@@ -1,7 +1,7 @@
 # kafka可视化管理平台
 一款轻量级的kafka可视化管理平台，安装配置快捷、简单易用。  
 为了开发的省事，没有国际化支持，页面只支持中文展示。  
-用过rocketmq-console吧，对，前端展示风格跟那个有点类似。
+用过rocketmq-console(rocketmq-dashboard)吧，对，前端展示风格跟那个有点类似。

 ## 页面预览
 如果github能查看图片的话，可以点击[查看菜单页面](./document/overview/概览.md)，查看每个页面的样子
@@ -18,17 +18,18 @@ v1.0.6版本之前，如果kafka集群启用了ACL，但是控制台没看到Acl
 * 消费组管理
 * 消息管理
 * ACL
+* 客户端限流
 * 运维

 功能明细看这个脑图：
 ![功能特性](./document/img/功能特性.png)

 ## 安装包下载
-点击下载(v1.0.5版本)：[kafka-console-ui.zip](https://github.com/xxd763795151/kafka-console-ui/releases/download/v1.0.5/kafka-console-ui.zip)  
+点击下载(v1.0.9版本)：[kafka-console-ui.zip](https://github.com/xxd763795151/kafka-console-ui/releases/download/v1.0.9/kafka-console-ui-1.0.9.zip)  

-如果安装包下载的比较慢，可以查看下面的源码打包说明，把代码下载下来，快速打包，不过最新main分支代码刚升级了kafka版本到3.2.0，还没有充分测试，如果需要稳定版本，可以下载 1.0.4-release分支代码  
+如果安装包下载的比较慢，可以查看下面的源码打包说明，把代码下载下来，本地快速打包.  

-github下载慢也可以试试从gitee下载，点击下载[gitee来源kafka-console-ui.zip](https://gitee.com/xiaodong_xu/kafka-console-ui/attach_files/969018/download/kafka-console-ui.zip)
+github下载慢也可以试试从gitee下载，点击下载[gitee来源kafka-console-ui.zip](https://gitee.com/xiaodong_xu/kafka-console-ui/releases/download/v1.0.9/kafka-console-ui-1.0.9.zip)

 ## 快速使用
 ### Windows
@@ -78,14 +79,29 @@ sh bin/shutdown.sh
 如果需要本地开发，开发环境配置查看：[本地开发](./document/develop/开发配置.md)

 ## 登录认证和权限
-目前主分支不支持登录认证，感谢@dongyinuo 同学开发了一版支持登录认证，及相关的按钮权限（主要有两个角色：管理员和普通开发人员）。  
+1.0.7版本及之前，主分支不支持登录认证，感谢@dongyinuo 同学开发了一版支持登录认证，及相关的按钮权限（主要有两个角色：管理员和普通开发人员）。  
 在分支：feature/dongyinuo/20220501/devops 上。  
 如果有需要使用管理台登录认证的，可以切换到这个分支上进行打包，打包方式看 源码打包 说明。  
 默认登录账户：admin/kafka-console-ui521

+目前最新版本主分支已增加登录认证、用户、角色等权限配置，如需开启登录认证，修改配置文件config/application.yml: auth.enable=true(默认 false)，如下：
+```yaml
+# 权限认证设置，设置为true，需要先登录才能访问
+auth:
+  enable: true
+  # 登录用户token的过期时间，单位：小时
+  expire-hours: 24
+```
+默认有两个登录用户：super-admin/123456，admin/123456，登录成功后在个人设置修改密码。super-admin和admin的唯一区别是super-admin可以增加删除用户，admin不能。如果觉得不合适，请在用户菜单下删除相关用户或角色自行创建合适的角色或用户。
+注意：不开启登录认证，页面不显示用户菜单，正常现象。
+
+
 ## DockerCompose部署
 感谢@wdkang123 同学分享的部署方式，如果有需要请查看[DockerCompose部署方式](./document/deploy/docker部署.md)
+## 感谢支持
+感谢jetbrains的开源支持，如果有朋友愿意一起维护，很欢迎提pr.

+[![jetbrains](./document/img/jb_beam.svg "jetbrains")](https://jb.gg/OpenSourceSupport)
 ## 联系方式
 + 微信群

--- a/assembly.xml
+++ b/assembly.xml
@@ -2,10 +2,10 @@
    xmlns="http://maven.apache.org/plugins/maven-assembly-plugin/assembly/1.1.2"
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xsi:schemaLocation="http://maven.apache.org/plugins/maven-assembly-plugin/assembly/1.1.2 http://maven.apache.org/xsd/assembly-1.1.2.xsd">
-    <id>rocketmq-reput</id>
+    <id>${project.version}</id>
    <formats>
-<!--        <format>tar.gz</format>-->
        <format>zip</format>
+        <format>tar.gz</format>
    </formats>

    <fileSets>
--- a/bin/shutdown.sh
+++ b/bin/shutdown.sh
@@ -1,7 +1,12 @@
 #!/bin/bash

-SCRIPT_DIR=`dirname $0`
-PROJECT_DIR="$SCRIPT_DIR/.."
+PREFIX='./'
+CMD=$0
+if [[ $CMD == $PREFIX* ]]; then
+        CMD=${CMD:2}
+fi
+SCRIPT_DIR=$(dirname "`pwd`/$CMD")
+PROJECT_DIR=`dirname "$SCRIPT_DIR"`
 # 不要修改进程标记，作为进程属性关闭使用
 PROCESS_FLAG="kafka-console-ui-process-flag:${PROJECT_DIR}"
 pkill -f $PROCESS_FLAG
--- a/bin/start.bat
+++ b/bin/start.bat
@@ -1,7 +1,7 @@
 rem MAIN_CLASS=org.springframework.boot.loader.JarLauncher
 rem JAVA_HOME=jre1.8.0_66
 set JAVA_CMD=%JAVA_HOME%\bin\java
-set JAVA_OPTS=-Xmx512m -Xms512m -Xmn256m -Xss256k
+set JAVA_OPTS=-Xmx512m -Xms512m -Xmn256m -Xss256k -Dfile.encoding=utf-8
 set CONFIG_FILE=../config/application.yml
 set TARGET=../lib/kafka-console-ui.jar
 set DATA_DIR=..
--- a/bin/start.sh
+++ b/bin/start.sh
@@ -3,8 +3,13 @@
 # 设置jvm堆大小及栈大小，栈大小最少设置为256K，不要小于这个值，比如设置为128，太小了
 JAVA_MEM_OPTS="-Xmx512m -Xms512m -Xmn256m -Xss256k"

-SCRIPT_DIR=`dirname $0`
-PROJECT_DIR="$SCRIPT_DIR/.."
+PREFIX='./'
+CMD=$0
+if [[ $CMD == $PREFIX* ]]; then
+        CMD=${CMD:2}
+fi
+SCRIPT_DIR=$(dirname "`pwd`/$CMD")
+PROJECT_DIR=`dirname "$SCRIPT_DIR"`
 CONF_FILE="$PROJECT_DIR/config/application.yml"
 TARGET="$PROJECT_DIR/lib/kafka-console-ui.jar"

@@ -12,12 +17,12 @@ TARGET="$PROJECT_DIR/lib/kafka-console-ui.jar"
 DATA_DIR=$PROJECT_DIR

 # 日志目录，默认为当前工程目录下
-# 这个是错误输出，如果启动命令有误，输出到这个文件，应用日志不会输出到error.out，应用日志输出到上面的rocketmq-reput.log中
+# 这个是错误输出，如果启动命令有误，输出到这个文件，应用日志不会输出到error.out，应用日志输出到上面的kafka-console-ui.log中
 ERROR_OUT="$PROJECT_DIR/error.out"
-# 不要修改进程标记，作为进程属性关闭使用，如果要修改，请把stop.sh里的该属性的值保持一致
+# 不要修改进程标记，作为进程属性关闭使用，如果要修改，请把shutdown.sh里的该属性的值保持一致
 PROCESS_FLAG="kafka-console-ui-process-flag:${PROJECT_DIR}"

-JAVA_OPTS="$JAVA_OPTS $JAVA_MEM_OPTS"
+JAVA_OPTS="$JAVA_OPTS $JAVA_MEM_OPTS -Dfile.encoding=utf-8"

 nohup java -jar $JAVA_OPTS $TARGET --spring.config.location="$CONF_FILE" --logging.home="$PROJECT_DIR" --data.dir=$DATA_DIR $PROCESS_FLAG 1>/dev/null 2>$ERROR_OUT &

--- a/document/contact/weixin_contact.jpg
+++ b/document/contact/weixin_contact.jpg
--- a/document/deploy/docker部署.md
+++ b/document/deploy/docker部署.md
@@ -85,7 +85,7 @@ docker run -d -p 7766:7766 -v $PWD/data:/app/data -v $PWD/log:/app/log wdkang/ka

 解压后 将Dockerfile放入文件夹的根目录

-**Dockefile**
+**Dockerfile**

 ```dockerfile
 # jdk
--- a/document/img/jb_beam.svg
+++ b/document/img/jb_beam.svg
@@ -0,0 +1 @@
+<svg height="180" viewBox="0 0 180 180" width="180" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><linearGradient id="a" gradientUnits="userSpaceOnUse" x1="32.64" x2="82.77" y1="61.16" y2="85.54"><stop offset=".21" stop-color="#fe2857"/><stop offset="1" stop-color="#293896"/></linearGradient><linearGradient id="b" gradientUnits="userSpaceOnUse" x1="17.38" x2="82.95" y1="69.86" y2="21.23"><stop offset="0" stop-color="#fe2857"/><stop offset=".01" stop-color="#fe2857"/><stop offset=".86" stop-color="#ff318c"/></linearGradient><linearGradient id="c" gradientUnits="userSpaceOnUse" x1="74.17" x2="160.27" y1="21.58" y2="99.76"><stop offset=".02" stop-color="#ff318c"/><stop offset=".21" stop-color="#fe2857"/><stop offset=".86" stop-color="#fdb60d"/></linearGradient><linearGradient id="d" gradientUnits="userSpaceOnUse" x1="155.46" x2="55.07" y1="89.8" y2="158.9"><stop offset=".01" stop-color="#fdb60d"/><stop offset=".86" stop-color="#fcf84a"/></linearGradient><path d="m81.56 83.71-41.35-35a15 15 0 1 0 -14.47 25.7h.15l.39.12 52.16 15.89a3.53 3.53 0 0 0 1.18.21 3.73 3.73 0 0 0 1.93-6.91z" fill="url(#a)"/><path d="m89.85 25.93a10.89 10.89 0 0 0 -16.85-9.18l-50.5 30.66a15 15 0 1 0 17.9 24l45.27-36.89.36-.3a10.93 10.93 0 0 0 3.82-8.29z" fill="url(#b)"/><path d="m163.29 92-76.62-73.79a10.91 10.91 0 1 0 -14.81 16l.14.12 81.4 68.58a7.36 7.36 0 0 0 12.09-5.65 7.39 7.39 0 0 0 -2.2-5.26z" fill="url(#c)"/><path d="m165.5 97.29a7.35 7.35 0 0 0 -11.67-6l-92.71 45.3a15 15 0 1 0 15.48 25.59l85.73-58.84a7.35 7.35 0 0 0 3.17-6.05z" fill="url(#d)"/><path d="m60 60h60v60h-60z"/><g fill="#fff"><path d="m66.53 108.75h22.5v3.75h-22.5z"/><path d="m65.59 75.47 1.67-1.58a1.88 1.88 0 0 0 1.47.87c.64 0 1.06-.45 1.06-1.32v-5.92h2.58v5.94a3.44 3.44 0 0 1 -.92 2.63 3.52 3.52 0 0 1 -2.57 1 3.84 3.84 0 0 1 -3.29-1.62z"/><path d="m73.53 67.52h7.53v2.19h-5v1.43h4.49v2h-4.45v1.49h5v2.2h-7.6z"/><path d="m84.73 69.79h-2.8v-2.27h8.21v2.27h-2.81v7.09h-2.6z"/><path d="m66.63 80.58h4.42a3.47 3.47 0 0 1 2.55.83 2.09 2.09 0 0 1 .61 1.52 2.18 2.18 0 0 1 -1.45 2.09 2.27 2.27 0 0 1 1.86 2.29c0 1.69-1.31 2.69-3.55 2.69h-4.44zm5 2.89c0-.52-.42-.8-1.18-.8h-1.29v1.64h1.25c.78 0 1.24-.27 1.24-.81zm-.9 2.66h-1.57v1.73h1.62c.8 0 1.24-.31 1.24-.86-.02-.53-.4-.87-1.27-.87z"/><path d="m75.45 80.58h4.15a4.14 4.14 0 0 1 3.05 1 2.92 2.92 0 0 1 .83 2.18 3 3 0 0 1 -1.93 2.89l2.24 3.35h-3l-1.89-2.84h-.87v2.84h-2.6zm4 4.5c.87 0 1.4-.43 1.4-1.12 0-.75-.55-1.13-1.41-1.13h-1.39v2.27z"/><path d="m87.09 80.51h2.5l4 9.44h-2.79l-.67-1.69h-3.63l-.67 1.74h-2.71zm2.28 5.73-1.05-2.65-1.06 2.65z"/><path d="m94 80.55h2.6v9.37h-2.6z"/><path d="m97.56 80.55h2.44l3.37 5v-5h2.57v9.37h-2.27l-3.53-5.14v5.14h-2.58z"/><path d="m106.37 88.53 1.44-1.73a4.86 4.86 0 0 0 3 1.13c.71 0 1.08-.25 1.08-.65 0-.41-.3-.61-1.59-.91-2-.46-3.53-1-3.53-2.93 0-1.74 1.38-3 3.63-3a5.88 5.88 0 0 1 3.85 1.25l-1.25 1.78a4.56 4.56 0 0 0 -2.62-.92c-.63 0-.94.25-.94.6 0 .43.32.62 1.63.91 2.15.47 3.48 1.17 3.48 2.92 0 1.91-1.51 3-3.78 3a6.56 6.56 0 0 1 -4.4-1.45z"/></g><path d="m0 0h180v180h-180z" fill="none"/></svg>
--- a/document/img/功能特性.png
+++ b/document/img/功能特性.png
--- a/pom.xml
+++ b/pom.xml
@@ -10,7 +10,7 @@
    </parent>
    <groupId>com.xuxd</groupId>
    <artifactId>kafka-console-ui</artifactId>
-    <version>1.0.6</version>
+    <version>1.1.0</version>
    <name>kafka-console-ui</name>
    <description>Kafka console manage ui</description>
    <properties>
@@ -21,10 +21,11 @@
        <ui.path>${project.basedir}/ui</ui.path>
        <frontend-maven-plugin.version>1.11.0</frontend-maven-plugin.version>
        <compiler.version>1.8</compiler.version>
-        <kafka.version>3.2.0</kafka.version>
+        <kafka.version>3.5.0</kafka.version>
        <maven.assembly.plugin.version>3.0.0</maven.assembly.plugin.version>
        <mybatis-plus-boot-starter.version>3.4.2</mybatis-plus-boot-starter.version>
        <scala.version>2.13.6</scala.version>
+        <spring-framework.version>5.3.26</spring-framework.version>
    </properties>
    <dependencies>
        <dependency>
@@ -48,6 +49,11 @@
            <artifactId>spring-boot-starter-web</artifactId>
        </dependency>

+        <dependency>
+            <groupId>org.springframework.boot</groupId>
+            <artifactId>spring-boot-starter-aop</artifactId>
+        </dependency>
+
        <dependency>
            <groupId>org.springframework.boot</groupId>
            <artifactId>spring-boot-starter-test</artifactId>
@@ -84,6 +90,12 @@
            </exclusions>
        </dependency>

+<!--        <dependency>-->
+<!--            <groupId>org.apache.kafka</groupId>-->
+<!--            <artifactId>kafka-tools</artifactId>-->
+<!--            <version>${kafka.version}</version>-->
+<!--        </dependency>-->
+
        <dependency>
            <groupId>com.typesafe.scala-logging</groupId>
            <artifactId>scala-logging_2.13</artifactId>
@@ -168,26 +180,26 @@
                        </executions>
                    </plugin>

-<!--                    <plugin>-->
-<!--                        <groupId>org.codehaus.mojo</groupId>-->
-<!--                        <artifactId>build-helper-maven-plugin</artifactId>-->
-<!--                        <version>3.2.0</version>-->
-<!--                        <executions>-->
-<!--                            <execution>-->
-<!--                                <id>add-source</id>-->
-<!--                                <phase>generate-sources</phase>-->
-<!--                                <goals>-->
-<!--                                    <goal>add-source</goal>-->
-<!--                                </goals>-->
-<!--                                <configuration>-->
-<!--                                    <sources>-->
-<!--                                        <source>src/main/java</source>-->
-<!--                                        <source>src/main/scala</source>-->
-<!--                                    </sources>-->
-<!--                                </configuration>-->
-<!--                            </execution>-->
-<!--                        </executions>-->
-<!--                    </plugin>-->
+                    <!--                    <plugin>-->
+                    <!--                        <groupId>org.codehaus.mojo</groupId>-->
+                    <!--                        <artifactId>build-helper-maven-plugin</artifactId>-->
+                    <!--                        <version>3.2.0</version>-->
+                    <!--                        <executions>-->
+                    <!--                            <execution>-->
+                    <!--                                <id>add-source</id>-->
+                    <!--                                <phase>generate-sources</phase>-->
+                    <!--                                <goals>-->
+                    <!--                                    <goal>add-source</goal>-->
+                    <!--                                </goals>-->
+                    <!--                                <configuration>-->
+                    <!--                                    <sources>-->
+                    <!--                                        <source>src/main/java</source>-->
+                    <!--                                        <source>src/main/scala</source>-->
+                    <!--                                    </sources>-->
+                    <!--                                </configuration>-->
+                    <!--                            </execution>-->
+                    <!--                        </executions>-->
+                    <!--                    </plugin>-->

                    <plugin>
                        <artifactId>maven-compiler-plugin</artifactId>
@@ -195,6 +207,8 @@
                            <source>${compiler.version}</source>
                            <target>${compiler.version}</target>
                            <encoding>${project.build.sourceEncoding}</encoding>
+<!--                            <debug>false</debug>-->
+<!--                            <parameters>false</parameters>-->
                        </configuration>
                    </plugin>
                    <plugin>
@@ -219,7 +233,7 @@
                                    <goal>npm</goal>
                                </goals>
                                <configuration>
-<!--                                    <arguments>install &#45;&#45;registry=https://registry.npmjs.org/</arguments>-->
+                                    <!--                                    <arguments>install &#45;&#45;registry=https://registry.npmjs.org/</arguments>-->
                                    <arguments>install --registry=https://registry.npm.taobao.org</arguments>
                                </configuration>
                            </execution>
@@ -273,7 +287,7 @@
                            <attach>true</attach>
                            <tarLongFileMode>posix</tarLongFileMode>
                            <runOnlyAtExecutionRoot>false</runOnlyAtExecutionRoot>
-                            <appendAssemblyId>false</appendAssemblyId>
+                            <appendAssemblyId>true</appendAssemblyId>
                        </configuration>
                    </plugin>
                </plugins>
--- a/src/main/java/com/xuxd/kafka/console/KafkaConsoleUiApplication.java
+++ b/src/main/java/com/xuxd/kafka/console/KafkaConsoleUiApplication.java
@@ -6,6 +6,9 @@ import org.springframework.boot.autoconfigure.SpringBootApplication;
 import org.springframework.boot.web.servlet.ServletComponentScan;
 import org.springframework.scheduling.annotation.EnableScheduling;

+/**
+ * @author 晓东哥哥
+ */
@MapperScan("com.xuxd.kafka.console.dao")
@SpringBootApplication
@EnableScheduling
--- a/src/main/java/com/xuxd/kafka/console/aspect/ControllerLogAspect.java
+++ b/src/main/java/com/xuxd/kafka/console/aspect/ControllerLogAspect.java
@@ -0,0 +1,137 @@
+package com.xuxd.kafka.console.aspect;
+
+import com.xuxd.kafka.console.aspect.annotation.ControllerLog;
+import com.xuxd.kafka.console.beans.Credentials;
+import com.xuxd.kafka.console.config.LogConfig;
+import com.xuxd.kafka.console.filter.CredentialsContext;
+import lombok.extern.slf4j.Slf4j;
+import org.apache.commons.lang3.StringUtils;
+import org.aspectj.lang.ProceedingJoinPoint;
+import org.aspectj.lang.annotation.Around;
+import org.aspectj.lang.annotation.Aspect;
+import org.aspectj.lang.annotation.Pointcut;
+import org.springframework.core.annotation.Order;
+import org.springframework.stereotype.Component;
+
+import java.lang.reflect.Method;
+import java.util.HashMap;
+import java.util.List;
+import java.util.Map;
+import java.util.concurrent.locks.ReentrantLock;
+
+/**
+ * @author 晓东哥哥
+ */
+@Slf4j
+@Order(-1)
+@Aspect
+@Component
+public class ControllerLogAspect {
+
+    private Map<String, String> descMap = new HashMap<>();
+
+    private ReentrantLock lock = new ReentrantLock();
+
+    private final LogConfig logConfig;
+
+    public ControllerLogAspect(LogConfig logConfig) {
+        this.logConfig = logConfig;
+    }
+
+    @Pointcut("@annotation(com.xuxd.kafka.console.aspect.annotation.ControllerLog)")
+    private void pointcut() {
+
+    }
+
+    @Around("pointcut()")
+    public Object around(ProceedingJoinPoint joinPoint) throws Throwable {
+        if (!logConfig.isPrintControllerLog()) {
+            return joinPoint.proceed();
+        }
+        StringBuilder params = new StringBuilder("[");
+        try {
+            String methodName = getMethodFullName(joinPoint.getTarget().getClass().getName(), joinPoint.getSignature().getName());
+
+            if (!descMap.containsKey(methodName)) {
+                cacheDescInfo(joinPoint);
+            }
+
+            Object[] args = joinPoint.getArgs();
+            long startTime = System.currentTimeMillis();
+            Object res = joinPoint.proceed();
+            long endTime = System.currentTimeMillis();
+
+            for (int i = 0; i < args.length; i++) {
+                params.append(args[i]);
+            }
+            params.append("]");
+
+            String resStr = "[" + (res != null ? res.toString() : "") + "]";
+
+            StringBuilder sb = new StringBuilder();
+            Credentials credentials = CredentialsContext.get();
+            if (credentials != null) {
+                sb.append("[").append(credentials.getUsername()).append("] ");
+            }
+            String shortMethodName = descMap.getOrDefault(methodName, ".-");
+            shortMethodName = shortMethodName.substring(shortMethodName.lastIndexOf(".") + 1);
+            sb.append("[").append(shortMethodName)
+                    .append("调用完成: ")
+                    .append("请求参数=").append(params).append(", ")
+                    .append("响应值=").append(resStr).append(", ")
+                    .append("耗时=").append(endTime - startTime)
+                    .append(" ms");
+            log.info(sb.toString());
+            return res;
+        } catch (Throwable e) {
+            log.error("调用方法异常， 请求参数：" + params, e);
+            throw e;
+        }
+    }
+
+    private void cacheDescInfo(ProceedingJoinPoint joinPoint) {
+        lock.lock();
+        try {
+            String methodName = joinPoint.getSignature().getName();
+            Class<?> aClass = joinPoint.getTarget().getClass();
+
+            Method method = null;
+            try {
+                Object[] args = joinPoint.getArgs();
+
+                Class<?>[] clzArr = new Class[args.length];
+                for (int i = 0; i < args.length; i++) {
+                    clzArr[i] = args[i].getClass();
+                    if (List.class.isAssignableFrom(clzArr[i])) {
+                        clzArr[i] = List.class;
+                    }
+                }
+                method = aClass.getDeclaredMethod(methodName, clzArr);
+
+            } catch (Exception e) {
+                log.warn("cacheDescInfo error: {}", e.getMessage());
+            }
+
+            String fullMethodName = getMethodFullName(aClass.getName(), methodName);
+            String desc = "[" + fullMethodName + "]";
+            if (method == null) {
+                descMap.put(fullMethodName, desc);
+                return;
+            }
+
+            ControllerLog controllerLog = method.getAnnotation(ControllerLog.class);
+            String value = controllerLog.value();
+            if (StringUtils.isBlank(value)) {
+                descMap.put(fullMethodName, desc);
+            } else {
+                descMap.put(fullMethodName, value);
+            }
+        } finally {
+            lock.unlock();
+        }
+    }
+
+    private String getMethodFullName(String className, String methodName) {
+        return className + "#" + methodName;
+    }
+}
--- a/src/main/java/com/xuxd/kafka/console/aspect/PermissionAspect.java
+++ b/src/main/java/com/xuxd/kafka/console/aspect/PermissionAspect.java
@@ -0,0 +1,140 @@
+package com.xuxd.kafka.console.aspect;
+
+import com.baomidou.mybatisplus.core.conditions.query.QueryWrapper;
+import com.xuxd.kafka.console.aspect.annotation.Permission;
+import com.xuxd.kafka.console.beans.Credentials;
+import com.xuxd.kafka.console.beans.dos.SysUserDO;
+import com.xuxd.kafka.console.cache.RolePermCache;
+import com.xuxd.kafka.console.config.AuthConfig;
+import com.xuxd.kafka.console.dao.SysPermissionMapper;
+import com.xuxd.kafka.console.dao.SysRoleMapper;
+import com.xuxd.kafka.console.dao.SysUserMapper;
+import com.xuxd.kafka.console.exception.UnAuthorizedException;
+import com.xuxd.kafka.console.filter.CredentialsContext;
+import lombok.extern.slf4j.Slf4j;
+import org.apache.commons.lang3.StringUtils;
+import org.aspectj.lang.JoinPoint;
+import org.aspectj.lang.annotation.Aspect;
+import org.aspectj.lang.annotation.Before;
+import org.aspectj.lang.annotation.Pointcut;
+import org.aspectj.lang.reflect.MethodSignature;
+import org.springframework.core.annotation.Order;
+import org.springframework.stereotype.Component;
+
+import java.lang.reflect.Method;
+import java.util.*;
+import java.util.stream.Collectors;
+
+/**
+ * @author: xuxd
+ * @date: 2023/5/17 22:32
+ **/
+@Slf4j
+@Order(1)
+@Aspect
+@Component
+public class PermissionAspect {
+
+
+    private Map<String, Set<String>> permMap = new HashMap<>();
+
+    private final AuthConfig authConfig;
+
+    private final SysUserMapper userMapper;
+
+    private final SysRoleMapper roleMapper;
+
+    private final SysPermissionMapper permissionMapper;
+
+    private final RolePermCache rolePermCache;
+
+    public PermissionAspect(AuthConfig authConfig,
+                            SysUserMapper userMapper,
+                            SysRoleMapper roleMapper,
+                            SysPermissionMapper permissionMapper,
+                            RolePermCache rolePermCache) {
+        this.authConfig = authConfig;
+        this.userMapper = userMapper;
+        this.roleMapper = roleMapper;
+        this.permissionMapper = permissionMapper;
+        this.rolePermCache = rolePermCache;
+    }
+
+    @Pointcut("@annotation(com.xuxd.kafka.console.aspect.annotation.Permission)")
+    private void pointcut() {
+
+    }
+
+    @Before(value = "pointcut()")
+    public void before(JoinPoint joinPoint) {
+        if (!authConfig.isEnable()) {
+            return;
+        }
+        MethodSignature signature = (MethodSignature) joinPoint.getSignature();
+        Method method = signature.getMethod();
+        Permission permission = method.getAnnotation(Permission.class);
+        if (permission == null) {
+            return;
+        }
+        String[] value = permission.value();
+        if (value == null || value.length == 0) {
+            return;
+        }
+        String name = method.getName() + "@" + method.hashCode();
+
+        Map<String, Set<String>> pm = checkPermMap(name, value);
+
+        Set<String> allowPermSet = pm.get(name);
+        if (allowPermSet == null) {
+            log.error("解析权限出现意外啦!!!");
+            return;
+        }
+
+        Credentials credentials = CredentialsContext.get();
+        if (credentials == null || credentials.isInvalid()) {
+            throw new UnAuthorizedException("credentials is invalid");
+        }
+        QueryWrapper<SysUserDO> queryWrapper = new QueryWrapper<>();
+        queryWrapper.eq("username", credentials.getUsername());
+        SysUserDO userDO = userMapper.selectOne(queryWrapper);
+        if (userDO == null) {
+            throw new UnAuthorizedException(credentials.getUsername() + ":" + allowPermSet);
+        }
+
+        boolean unauthorized = true;
+        boolean notFoundHideProperty = true;
+        String roleIds = userDO.getRoleIds();
+        List<Long> roleIdList = Arrays.stream(roleIds.split(",")).
+                map(String::trim).filter(StringUtils::isNotEmpty).
+                map(Long::valueOf).collect(Collectors.toList());
+        for (Long roleId : roleIdList) {
+            Set<String> permSet = rolePermCache.getRolePermCache().getOrDefault(roleId, Collections.emptySet());
+            for (String p : allowPermSet) {
+                if (permSet.contains(p)) {
+                    unauthorized = false;
+                }
+            }
+            if (permSet.contains(authConfig.getHideClusterPropertyPerm())) {
+                notFoundHideProperty = false;
+            }
+        }
+        if (unauthorized) {
+            throw new UnAuthorizedException(credentials.getUsername() + ":" + allowPermSet);
+        }
+        if (authConfig.isHideClusterProperty() && notFoundHideProperty) {
+            credentials.setHideClusterProperty(true);
+        }
+        credentials.setRoleIdList(roleIdList);
+    }
+
+    private Map<String, Set<String>> checkPermMap(String methodName, String[] value) {
+        if (!permMap.containsKey(methodName)) {
+            Map<String, Set<String>> map = new HashMap<>(permMap);
+            map.put(methodName, new HashSet<>(Arrays.asList(value)));
+            permMap = map;
+            return map;
+        }
+        return permMap;
+    }
+
+}
--- a/src/main/java/com/xuxd/kafka/console/aspect/annotation/ControllerLog.java
+++ b/src/main/java/com/xuxd/kafka/console/aspect/annotation/ControllerLog.java
@@ -0,0 +1,15 @@
+package com.xuxd.kafka.console.aspect.annotation;
+
+import java.lang.annotation.*;
+
+/**
+ * 该注解用到controller层的方法上
+ * @author 晓东哥哥
+ */
+@Inherited
+@Retention(RetentionPolicy.RUNTIME)
+@Target(ElementType.METHOD)
+public @interface ControllerLog {
+
+    String value() default "";
+}
--- a/src/main/java/com/xuxd/kafka/console/aspect/annotation/Permission.java
+++ b/src/main/java/com/xuxd/kafka/console/aspect/annotation/Permission.java
@@ -0,0 +1,17 @@
+package com.xuxd.kafka.console.aspect.annotation;
+
+import java.lang.annotation.*;
+
+/**
+ * 权限注解，开启认证的时候拥有该权限的用户才能访问对应接口.
+ *
+ * @author: xuxd
+ * @date: 2023/5/17 22:30
+ **/
+@Inherited
+@Retention(RetentionPolicy.RUNTIME)
+@Target(ElementType.METHOD)
+public @interface Permission {
+
+    String[] value() default {};
+}
--- a/src/main/java/com/xuxd/kafka/console/beans/Credentials.java
+++ b/src/main/java/com/xuxd/kafka/console/beans/Credentials.java
@@ -0,0 +1,30 @@
+package com.xuxd.kafka.console.beans;
+
+import lombok.Data;
+
+import java.util.List;
+
+/**
+ * @author: xuxd
+ * @date: 2023/5/14 19:37
+ **/
+@Data
+public class Credentials {
+
+    public static final Credentials INVALID = new Credentials();
+
+    private String username;
+
+    private long expiration;
+
+    /**
+     * 是否隐藏集群属性
+     */
+    private boolean hideClusterProperty;
+
+    private List<Long> roleIdList;
+
+    public boolean isInvalid() {
+        return this == INVALID;
+    }
+}
--- a/src/main/java/com/xuxd/kafka/console/beans/LoginResult.java
+++ b/src/main/java/com/xuxd/kafka/console/beans/LoginResult.java
@@ -0,0 +1,17 @@
+package com.xuxd.kafka.console.beans;
+
+import lombok.Data;
+
+import java.util.List;
+
+/**
+ * @author: xuxd
+ * @date: 2023/5/14 20:44
+ **/
+@Data
+public class LoginResult {
+
+    private String token;
+
+    private List<String> permissions;
+}
--- a/src/main/java/com/xuxd/kafka/console/beans/QueryMessage.java
+++ b/src/main/java/com/xuxd/kafka/console/beans/QueryMessage.java
@@ -33,4 +33,6 @@ public class QueryMessage {
    private String headerKey;

    private String headerValue;
+
+    private int filterNumber;
 }
--- a/src/main/java/com/xuxd/kafka/console/beans/RolePermUpdateEvent.java
+++ b/src/main/java/com/xuxd/kafka/console/beans/RolePermUpdateEvent.java
@@ -0,0 +1,22 @@
+package com.xuxd.kafka.console.beans;
+
+import lombok.Getter;
+import lombok.Setter;
+import lombok.ToString;
+import org.springframework.context.ApplicationEvent;
+
+/**
+ * @author: xuxd
+ * @date: 2023/5/18 15:49
+ **/
+@ToString
+public class RolePermUpdateEvent extends ApplicationEvent {
+
+    @Getter
+    @Setter
+    private boolean reload = false;
+
+    public RolePermUpdateEvent(Object source) {
+        super(source);
+    }
+}
--- a/src/main/java/com/xuxd/kafka/console/beans/SendMessage.java
+++ b/src/main/java/com/xuxd/kafka/console/beans/SendMessage.java
@@ -1,5 +1,6 @@
 package com.xuxd.kafka.console.beans;

+import java.util.List;
 import lombok.Data;

 /**
@@ -22,4 +23,18 @@ public class SendMessage {
    private int num;

    private long offset;
+
+    private List<Header> headers;
+
+    /**
+     * true: sync send.
+     */
+    private boolean sync;
+
+    @Data
+    public static class Header{
+        private String headerKey;
+
+        private String headerValue;
+    }
 }
--- a/src/main/java/com/xuxd/kafka/console/beans/dos/ClusterRoleRelationDO.java
+++ b/src/main/java/com/xuxd/kafka/console/beans/dos/ClusterRoleRelationDO.java
@@ -0,0 +1,24 @@
+package com.xuxd.kafka.console.beans.dos;
+
+import com.baomidou.mybatisplus.annotation.IdType;
+import com.baomidou.mybatisplus.annotation.TableId;
+import com.baomidou.mybatisplus.annotation.TableName;
+import lombok.Data;
+
+/**
+ * @author: xuxd
+ * @since: 2023/8/23 21:35
+ **/
+@Data
+@TableName("t_cluster_role_relation")
+public class ClusterRoleRelationDO {
+
+    @TableId(type = IdType.AUTO)
+    private Long id;
+
+    private Long roleId;
+
+    private Long clusterInfoId;
+
+    private String updateTime;
+}
--- a/src/main/java/com/xuxd/kafka/console/beans/dos/SysPermissionDO.java
+++ b/src/main/java/com/xuxd/kafka/console/beans/dos/SysPermissionDO.java
@@ -0,0 +1,29 @@
+package com.xuxd.kafka.console.beans.dos;
+
+import com.baomidou.mybatisplus.annotation.IdType;
+import com.baomidou.mybatisplus.annotation.TableId;
+import com.baomidou.mybatisplus.annotation.TableName;
+import lombok.Data;
+
+/**
+ * @author: xuxd
+ * @date: 2023/4/11 21:17
+ **/
+@Data
+@TableName("t_sys_permission")
+public class SysPermissionDO {
+
+    @TableId(type = IdType.AUTO)
+    private Long id;
+
+    private String name;
+
+    /**
+     * 权限类型: 0：菜单，1：按钮
+     */
+    private Integer type;
+
+    private Long parentId;
+
+    private String permission;
+}
--- a/src/main/java/com/xuxd/kafka/console/beans/dos/SysRoleDO.java
+++ b/src/main/java/com/xuxd/kafka/console/beans/dos/SysRoleDO.java
@@ -0,0 +1,24 @@
+package com.xuxd.kafka.console.beans.dos;
+
+import com.baomidou.mybatisplus.annotation.IdType;
+import com.baomidou.mybatisplus.annotation.TableId;
+import com.baomidou.mybatisplus.annotation.TableName;
+import lombok.Data;
+
+/**
+ * @author: xuxd
+ * @date: 2023/4/11 21:17
+ **/
+@Data
+@TableName("t_sys_role")
+public class SysRoleDO {
+
+    @TableId(type = IdType.AUTO)
+    private Long id;
+
+    private String roleName;
+
+    private String description;
+
+    private String permissionIds;
+}
--- a/src/main/java/com/xuxd/kafka/console/beans/dos/SysUserDO.java
+++ b/src/main/java/com/xuxd/kafka/console/beans/dos/SysUserDO.java
@@ -0,0 +1,26 @@
+package com.xuxd.kafka.console.beans.dos;
+
+import com.baomidou.mybatisplus.annotation.IdType;
+import com.baomidou.mybatisplus.annotation.TableId;
+import com.baomidou.mybatisplus.annotation.TableName;
+import lombok.Data;
+
+/**
+ * @author: xuxd
+ * @date: 2023/4/11 21:17
+ **/
+@Data
+@TableName("t_sys_user")
+public class SysUserDO {
+
+    @TableId(type = IdType.AUTO)
+    private Long id;
+
+    private String username;
+
+    private String password;
+
+    private String salt;
+
+    private String roleIds;
+}
--- a/src/main/java/com/xuxd/kafka/console/beans/dto/ClusterRoleRelationDTO.java
+++ b/src/main/java/com/xuxd/kafka/console/beans/dto/ClusterRoleRelationDTO.java
@@ -0,0 +1,28 @@
+package com.xuxd.kafka.console.beans.dto;
+
+import com.xuxd.kafka.console.beans.dos.ClusterRoleRelationDO;
+import lombok.Data;
+
+/**
+ * @author: xuxd
+ * @since: 2023/8/23 21:42
+ **/
+@Data
+public class ClusterRoleRelationDTO {
+
+    private Long id;
+
+    private Long roleId;
+
+    private Long clusterInfoId;
+
+    private String updateTime;
+
+    public ClusterRoleRelationDO toDO() {
+        ClusterRoleRelationDO aDo = new ClusterRoleRelationDO();
+        aDo.setId(id);
+        aDo.setRoleId(roleId);
+        aDo.setClusterInfoId(clusterInfoId);
+        return aDo;
+    }
+}
--- a/src/main/java/com/xuxd/kafka/console/beans/dto/LoginUserDTO.java
+++ b/src/main/java/com/xuxd/kafka/console/beans/dto/LoginUserDTO.java
@@ -0,0 +1,15 @@
+package com.xuxd.kafka.console.beans.dto;
+
+import lombok.Data;
+
+/**
+ * @author: xuxd
+ * @date: 2023/5/14 18:59
+ **/
+@Data
+public class LoginUserDTO {
+
+    private String username;
+
+    private String password;
+}
--- a/src/main/java/com/xuxd/kafka/console/beans/dto/QueryMessageDTO.java
+++ b/src/main/java/com/xuxd/kafka/console/beans/dto/QueryMessageDTO.java
@@ -37,6 +37,8 @@ public class QueryMessageDTO {

    private String headerValue;

+    private int filterNumber;
+
    public QueryMessage toQueryMessage() {
        QueryMessage queryMessage = new QueryMessage();
        queryMessage.setTopic(topic);
@@ -69,6 +71,7 @@ public class QueryMessageDTO {
        if (StringUtils.isNotBlank(headerValue)) {
            queryMessage.setHeaderValue(headerValue.trim());
        }
+        queryMessage.setFilterNumber(filterNumber);

        return queryMessage;
    }
--- a/src/main/java/com/xuxd/kafka/console/beans/dto/QuerySendStatisticsDTO.java
+++ b/src/main/java/com/xuxd/kafka/console/beans/dto/QuerySendStatisticsDTO.java
@@ -0,0 +1,23 @@
+package com.xuxd.kafka.console.beans.dto;
+
+import lombok.Data;
+
+import java.util.Date;
+import java.util.Set;
+
+/**
+ * 发送统计查询请求，指定时间段内，发送了多少消息.
+ * @author: xuxd
+ * @since: 2023/12/1 22:01
+ **/
+@Data
+public class QuerySendStatisticsDTO {
+
+    private String topic;
+
+    private Set<Integer> partition;
+
+    private Date startTime;
+
+    private Date endTime;
+}
--- a/src/main/java/com/xuxd/kafka/console/beans/dto/SysPermissionDTO.java
+++ b/src/main/java/com/xuxd/kafka/console/beans/dto/SysPermissionDTO.java
@@ -0,0 +1,32 @@
+package com.xuxd.kafka.console.beans.dto;
+
+import com.xuxd.kafka.console.beans.dos.SysPermissionDO;
+import lombok.Data;
+
+/**
+ * @author: xuxd
+ * @date: 2023/4/11 21:17
+ **/
+@Data
+public class SysPermissionDTO {
+
+    private String name;
+
+    /**
+     * 权限类型: 0：菜单，1：按钮
+     */
+    private Integer type;
+
+    private Long parentId;
+
+    private String permission;
+
+    public SysPermissionDO toSysPermissionDO() {
+        SysPermissionDO permissionDO = new SysPermissionDO();
+        permissionDO.setName(this.name);
+        permissionDO.setType(this.type);
+        permissionDO.setParentId(this.parentId);
+        permissionDO.setPermission(this.permission);
+        return permissionDO;
+    }
+}
--- a/src/main/java/com/xuxd/kafka/console/beans/dto/SysRoleDTO.java
+++ b/src/main/java/com/xuxd/kafka/console/beans/dto/SysRoleDTO.java
@@ -0,0 +1,35 @@
+package com.xuxd.kafka.console.beans.dto;
+
+import com.xuxd.kafka.console.beans.dos.SysRoleDO;
+import lombok.Data;
+import org.apache.commons.collections.CollectionUtils;
+import org.apache.commons.lang3.StringUtils;
+
+import java.util.List;
+
+/**
+ * @author: xuxd
+ * @date: 2023/4/11 21:17
+ **/
+@Data
+public class SysRoleDTO {
+
+    private Long id;
+
+    private String roleName;
+
+    private String description;
+
+    private List<String> permissionIds;
+
+    public SysRoleDO toDO() {
+        SysRoleDO roleDO = new SysRoleDO();
+        roleDO.setId(this.id);
+        roleDO.setRoleName(this.roleName);
+        roleDO.setDescription(this.description);
+        if (CollectionUtils.isNotEmpty(permissionIds)) {
+            roleDO.setPermissionIds(StringUtils.join(this.permissionIds, ","));
+        }
+        return roleDO;
+    }
+}
--- a/src/main/java/com/xuxd/kafka/console/beans/dto/SysUserDTO.java
+++ b/src/main/java/com/xuxd/kafka/console/beans/dto/SysUserDTO.java
@@ -0,0 +1,34 @@
+package com.xuxd.kafka.console.beans.dto;
+
+import com.xuxd.kafka.console.beans.dos.SysUserDO;
+import lombok.Data;
+
+/**
+ * @author: xuxd
+ * @date: 2023/4/11 21:17
+ **/
+@Data
+public class SysUserDTO {
+
+    private Long id;
+
+    private String username;
+
+    private String password;
+
+    private String salt;
+
+    private String roleIds;
+
+    private Boolean resetPassword = false;
+
+    public SysUserDO toDO() {
+        SysUserDO userDO = new SysUserDO();
+        userDO.setId(this.id);
+        userDO.setUsername(this.username);
+        userDO.setPassword(this.password);
+        userDO.setSalt(this.salt);
+        userDO.setRoleIds(this.roleIds);
+        return userDO;
+    }
+}
--- a/src/main/java/com/xuxd/kafka/console/beans/vo/ClusterRoleRelationVO.java
+++ b/src/main/java/com/xuxd/kafka/console/beans/vo/ClusterRoleRelationVO.java
@@ -0,0 +1,33 @@
+package com.xuxd.kafka.console.beans.vo;
+
+import com.xuxd.kafka.console.beans.dos.ClusterRoleRelationDO;
+import lombok.Data;
+
+/**
+ * @author: xuxd
+ * @since: 2023/8/23 21:45
+ **/
+@Data
+public class ClusterRoleRelationVO {
+
+    private Long id;
+
+    private Long roleId;
+
+    private Long clusterInfoId;
+
+    private String updateTime;
+
+    private String roleName;
+
+    private String clusterName;
+
+    public static ClusterRoleRelationVO from(ClusterRoleRelationDO relationDO) {
+        ClusterRoleRelationVO vo = new ClusterRoleRelationVO();
+        vo.setId(relationDO.getId());
+        vo.setRoleId(relationDO.getRoleId());
+        vo.setClusterInfoId(relationDO.getClusterInfoId());
+        vo.setUpdateTime(relationDO.getUpdateTime());
+        return vo;
+    }
+}
--- a/src/main/java/com/xuxd/kafka/console/beans/vo/QuerySendStatisticsVO.java
+++ b/src/main/java/com/xuxd/kafka/console/beans/vo/QuerySendStatisticsVO.java
@@ -0,0 +1,36 @@
+package com.xuxd.kafka.console.beans.vo;
+
+import lombok.Data;
+
+import java.text.DateFormat;
+import java.text.SimpleDateFormat;
+import java.util.Date;
+import java.util.Map;
+
+/**
+ * @author: xuxd
+ * @since: 2023/12/1 17:49
+ **/
+@Data
+public class QuerySendStatisticsVO {
+
+    private static final String FORMAT = "yyyy-MM-dd'T'HH:mm:ss.SSSXXX";
+
+    private static final DateFormat DATE_FORMAT = new SimpleDateFormat(FORMAT);
+
+    private String topic;
+
+    private Long total;
+
+    private Map<Integer, Long> detail;
+
+    private String startTime;
+
+    private String endTime;
+
+    private String searchTime = format(new Date());
+
+    public static String format(Date date) {
+        return DATE_FORMAT.format(date);
+    }
+}
--- a/src/main/java/com/xuxd/kafka/console/beans/vo/SysPermissionVO.java
+++ b/src/main/java/com/xuxd/kafka/console/beans/vo/SysPermissionVO.java
@@ -0,0 +1,43 @@
+package com.xuxd.kafka.console.beans.vo;
+
+import com.xuxd.kafka.console.beans.dos.SysPermissionDO;
+import lombok.Data;
+
+import java.util.List;
+
+/**
+ * @author: xuxd
+ * @date: 2023/4/17 21:18
+ **/
+@Data
+public class SysPermissionVO {
+
+    private Long id;
+
+    private String name;
+
+    /**
+     * 权限类型: 0：菜单，1：按钮
+     */
+    private Integer type;
+
+    private Long parentId;
+
+    private String permission;
+
+    private Long key;
+
+    private List<SysPermissionVO> children;
+
+    public static SysPermissionVO from(SysPermissionDO permissionDO) {
+        SysPermissionVO permissionVO = new SysPermissionVO();
+
+        permissionVO.setPermission(permissionDO.getPermission());
+        permissionVO.setType(permissionDO.getType());
+        permissionVO.setName(permissionDO.getName());
+        permissionVO.setParentId(permissionDO.getParentId());
+        permissionVO.setKey(permissionDO.getId());
+        permissionVO.setId(permissionDO.getId());
+        return permissionVO;
+    }
+}
--- a/src/main/java/com/xuxd/kafka/console/beans/vo/SysRoleVO.java
+++ b/src/main/java/com/xuxd/kafka/console/beans/vo/SysRoleVO.java
@@ -0,0 +1,38 @@
+package com.xuxd.kafka.console.beans.vo;
+
+import com.xuxd.kafka.console.beans.dos.SysRoleDO;
+import lombok.Data;
+import org.apache.commons.lang3.StringUtils;
+
+import java.util.Arrays;
+import java.util.List;
+import java.util.stream.Collectors;
+
+/**
+ * @author: xuxd
+ * @date: 2023/4/19 21:12
+ **/
+@Data
+public class SysRoleVO {
+
+    private Long id;
+
+    private String roleName;
+
+    private String description;
+
+    private List<Long> permissionIds;
+
+    public static SysRoleVO from(SysRoleDO roleDO) {
+        SysRoleVO roleVO = new SysRoleVO();
+        roleVO.setId(roleDO.getId());
+        roleVO.setRoleName(roleDO.getRoleName());
+        roleVO.setDescription(roleDO.getDescription());
+        if (StringUtils.isNotEmpty(roleDO.getPermissionIds())) {
+            List<Long> list = Arrays.stream(roleDO.getPermissionIds().split(",")).
+                    filter(StringUtils::isNotEmpty).map(e -> Long.valueOf(e.trim())).collect(Collectors.toList());
+            roleVO.setPermissionIds(list);
+        }
+        return roleVO;
+    }
+}
--- a/src/main/java/com/xuxd/kafka/console/beans/vo/SysUserVO.java
+++ b/src/main/java/com/xuxd/kafka/console/beans/vo/SysUserVO.java
@@ -0,0 +1,31 @@
+package com.xuxd.kafka.console.beans.vo;
+
+import com.xuxd.kafka.console.beans.dos.SysUserDO;
+import lombok.Data;
+
+/**
+ * @author: xuxd
+ * @date: 2023/5/6 13:06
+ **/
+@Data
+public class SysUserVO {
+
+    private Long id;
+
+    private String username;
+
+    private String password;
+
+    private String roleIds;
+
+    private String roleNames;
+
+    public static SysUserVO from(SysUserDO userDO) {
+        SysUserVO userVO = new SysUserVO();
+        userVO.setId(userDO.getId());
+        userVO.setUsername(userDO.getUsername());
+        userVO.setRoleIds(userDO.getRoleIds());
+        userVO.setPassword(userDO.getPassword());
+        return userVO;
+    }
+}
--- a/src/main/java/com/xuxd/kafka/console/cache/RolePermCache.java
+++ b/src/main/java/com/xuxd/kafka/console/cache/RolePermCache.java
@@ -0,0 +1,91 @@
+package com.xuxd.kafka.console.cache;
+
+import com.xuxd.kafka.console.beans.RolePermUpdateEvent;
+import com.xuxd.kafka.console.beans.dos.SysPermissionDO;
+import com.xuxd.kafka.console.beans.dos.SysRoleDO;
+import com.xuxd.kafka.console.dao.SysPermissionMapper;
+import com.xuxd.kafka.console.dao.SysRoleMapper;
+import lombok.extern.slf4j.Slf4j;
+import org.apache.commons.lang3.StringUtils;
+import org.springframework.beans.factory.SmartInitializingSingleton;
+import org.springframework.context.ApplicationListener;
+import org.springframework.context.annotation.DependsOn;
+import org.springframework.stereotype.Component;
+
+import java.util.*;
+import java.util.function.Function;
+import java.util.stream.Collectors;
+
+/**
+ * @author: xuxd
+ * @date: 2023/5/18 15:47
+ **/
+@DependsOn("dataInit")
+@Slf4j
+@Component
+public class RolePermCache implements ApplicationListener<RolePermUpdateEvent>, SmartInitializingSingleton {
+
+    private Map<Long, SysPermissionDO> permCache = new HashMap<>();
+
+    private Map<Long, Set<String>> rolePermCache = new HashMap<>();
+
+    private final SysPermissionMapper permissionMapper;
+
+    private final SysRoleMapper roleMapper;
+
+    public RolePermCache(SysPermissionMapper permissionMapper, SysRoleMapper roleMapper) {
+        this.permissionMapper = permissionMapper;
+        this.roleMapper = roleMapper;
+    }
+
+    @Override
+    public void onApplicationEvent(RolePermUpdateEvent event) {
+        log.info("更新角色权限信息：{}", event);
+        if (event.isReload()) {
+            this.loadPermCache();
+        }
+        refresh();
+    }
+
+    public Map<Long, SysPermissionDO> getPermCache() {
+        return permCache;
+    }
+
+    public Map<Long, Set<String>> getRolePermCache() {
+        return rolePermCache;
+    }
+
+    private void refresh() {
+        List<SysRoleDO> roleDOS = roleMapper.selectList(null);
+        Map<Long, Set<String>> tmp = new HashMap<>();
+        for (SysRoleDO roleDO : roleDOS) {
+            String permissionIds = roleDO.getPermissionIds();
+            if (StringUtils.isEmpty(permissionIds)) {
+                continue;
+            }
+            List<Long> list = Arrays.stream(permissionIds.split(",")).map(String::trim).filter(StringUtils::isNotEmpty).map(Long::valueOf).collect(Collectors.toList());
+            Set<String> permSet = tmp.getOrDefault(roleDO.getId(), new HashSet<>());
+            for (Long permId : list) {
+                SysPermissionDO permissionDO = permCache.get(permId);
+                if (permissionDO != null) {
+                    permSet.add(permissionDO.getPermission());
+                }
+            }
+            tmp.put(roleDO.getId(), permSet);
+        }
+        rolePermCache = tmp;
+    }
+
+    private void loadPermCache() {
+        List<SysPermissionDO> roleDOS = permissionMapper.selectList(null);
+        Map<Long, SysPermissionDO> map = roleDOS.stream().collect(Collectors.toMap(SysPermissionDO::getId, Function.identity(), (e1, e2) -> e1));
+        permCache = map;
+    }
+
+
+    @Override
+    public void afterSingletonsInstantiated() {
+        this.loadPermCache();
+        this.refresh();
+    }
+}
--- a/src/main/java/com/xuxd/kafka/console/config/AuthConfig.java
+++ b/src/main/java/com/xuxd/kafka/console/config/AuthConfig.java
@@ -0,0 +1,54 @@
+package com.xuxd.kafka.console.config;
+
+import lombok.Data;
+import org.springframework.boot.context.properties.ConfigurationProperties;
+import org.springframework.context.annotation.Configuration;
+
+/**
+ * @author: xuxd
+ * @date: 2023/5/9 21:08
+ **/
+@Data
+@Configuration
+@ConfigurationProperties(prefix = "auth")
+public class AuthConfig {
+
+    /**
+     * 是否启用登录权限认证.
+     */
+    private boolean enable;
+
+    /**
+     * 认证生成Jwt token用的,随便写.
+     */
+    private String secret = "kafka-console-ui-default-secret";
+
+    /**
+     * token有效期，小时.
+     */
+    private long expireHours;
+
+    /**
+     * 隐藏集群的属性信息，如果当前用户没有集群切换里的编辑权限，就不能看集群的属性信息，有开启ACL的集群需要开启这个.
+     * 不隐藏属性不行，开启ACL的时候，属性里需要配置认证信息，比如超管的用户名密码等，不等被普通角色看到.
+     */
+    private boolean hideClusterProperty;
+
+    /**
+     * 不要修改.与data-h2.sql里配置的一致即可.
+     */
+    private String hideClusterPropertyPerm = "op:cluster-switch:edit";
+
+    /**
+     * 是否启用集群的数据权限，如果启用，可以配置哪些角色看到哪些集群.
+     * 默认false是为了兼容老版本.
+     *
+     * @since 1.0.9
+     */
+    private boolean enableClusterAuthority;
+
+    /**
+     * 重新加载权限信息，版本升级替换jar包的时候，新版本里增加了新的权限菜单，这个设置为true.
+     */
+    private boolean reloadPermission;
+}
--- a/src/main/java/com/xuxd/kafka/console/config/LogConfig.java
+++ b/src/main/java/com/xuxd/kafka/console/config/LogConfig.java
@@ -0,0 +1,23 @@
+package com.xuxd.kafka.console.config;
+
+import org.springframework.boot.context.properties.ConfigurationProperties;
+import org.springframework.context.annotation.Configuration;
+
+/**
+ * @author: xuxd
+ * @since: 2023/8/20 20:00
+ **/
+@Configuration
+@ConfigurationProperties(prefix = "log")
+public class LogConfig {
+
+    private boolean printControllerLog = true;
+
+    public boolean isPrintControllerLog() {
+        return printControllerLog;
+    }
+
+    public void setPrintControllerLog(boolean printControllerLog) {
+        this.printControllerLog = printControllerLog;
+    }
+}
--- a/src/main/java/com/xuxd/kafka/console/controller/AclAuthController.java
+++ b/src/main/java/com/xuxd/kafka/console/controller/AclAuthController.java
@@ -1,5 +1,7 @@
 package com.xuxd.kafka.console.controller;

+import com.xuxd.kafka.console.aspect.annotation.ControllerLog;
+import com.xuxd.kafka.console.aspect.annotation.Permission;
 import com.xuxd.kafka.console.beans.AclEntry;
 import com.xuxd.kafka.console.beans.dto.AddAuthDTO;
 import com.xuxd.kafka.console.beans.dto.ConsumerAuthDTO;
@@ -28,6 +30,7 @@ public class AclAuthController {
    @Autowired
    private AclService aclService;

+    @Permission({"acl:authority:detail", "acl:sasl-scram:detail"})
    @PostMapping("/detail")
    public Object getAclDetailList(@RequestBody QueryAclDTO param) {
        return aclService.getAclDetailList(param.toEntry());
@@ -38,11 +41,14 @@ public class AclAuthController {
        return aclService.getOperationList();
    }

+    @Permission("acl:authority")
    @PostMapping("/list")
    public Object getAclList(@RequestBody QueryAclDTO param) {
        return aclService.getAclList(param.toEntry());
    }

+    @ControllerLog("增加Acl")
+    @Permission({"acl:authority:add-principal", "acl:authority:add", "acl:sasl-scram:add-auth"})
    @PostMapping
    public Object addAcl(@RequestBody AddAuthDTO param) {
        return aclService.addAcl(param.toAclEntry());
@@ -54,6 +60,8 @@ public class AclAuthController {
     * @param param entry.topic && entry.username must.
     * @return
     */
+    @ControllerLog("增加ProducerAcl")
+    @Permission({"acl:authority:producer", "acl:sasl-scram:producer"})
    @PostMapping("/producer")
    public Object addProducerAcl(@RequestBody ProducerAuthDTO param) {

@@ -66,6 +74,8 @@ public class AclAuthController {
     * @param param entry.topic && entry.groupId entry.username must.
     * @return
     */
+    @ControllerLog("增加ConsumerAcl")
+    @Permission({"acl:authority:consumer", "acl:sasl-scram:consumer"})
    @PostMapping("/consumer")
    public Object addConsumerAcl(@RequestBody ConsumerAuthDTO param) {

@@ -78,6 +88,8 @@ public class AclAuthController {
     * @param entry entry
     * @return
     */
+    @ControllerLog("删除Acl")
+    @Permission({"acl:authority:clean", "acl:sasl-scram:pure"})
    @DeleteMapping
    public Object deleteAclByUser(@RequestBody AclEntry entry) {
        return aclService.deleteAcl(entry);
@@ -89,17 +101,21 @@ public class AclAuthController {
     * @param param entry.username
     * @return
     */
+    @ControllerLog("删除Acl")
+    @Permission({"acl:authority:clean", "acl:sasl-scram:pure"})
    @DeleteMapping("/user")
    public Object deleteAclByUser(@RequestBody DeleteAclDTO param) {
        return aclService.deleteUserAcl(param.toUserEntry());
    }

    /**
-     * add producer acl.
+     * delete producer acl.
     *
     * @param param entry.topic && entry.username must.
     * @return
     */
+    @ControllerLog("删除ProducerAcl")
+    @Permission({"acl:authority:clean", "acl:sasl-scram:pure"})
    @DeleteMapping("/producer")
    public Object deleteProducerAcl(@RequestBody ProducerAuthDTO param) {

@@ -107,11 +123,13 @@ public class AclAuthController {
    }

    /**
-     * add consumer acl.
+     * delete consumer acl.
     *
     * @param param entry.topic && entry.groupId entry.username must.
     * @return
     */
+    @ControllerLog("删除ConsumerAcl")
+    @Permission({"acl:authority:clean", "acl:sasl-scram:pure"})
    @DeleteMapping("/consumer")
    public Object deleteConsumerAcl(@RequestBody ConsumerAuthDTO param) {

@@ -124,6 +142,8 @@ public class AclAuthController {
     * @param param acl principal.
     * @return true or false.
     */
+    @ControllerLog("清除Acl")
+    @Permission({"acl:authority:clean", "acl:sasl-scram:pure"})
    @DeleteMapping("/clear")
    public Object clearAcl(@RequestBody DeleteAclDTO param) {
        return aclService.clearAcl(param.toUserEntry());
--- a/src/main/java/com/xuxd/kafka/console/controller/AclUserController.java
+++ b/src/main/java/com/xuxd/kafka/console/controller/AclUserController.java
@@ -1,5 +1,7 @@
 package com.xuxd.kafka.console.controller;

+import com.xuxd.kafka.console.aspect.annotation.ControllerLog;
+import com.xuxd.kafka.console.aspect.annotation.Permission;
 import com.xuxd.kafka.console.beans.AclEntry;
 import com.xuxd.kafka.console.beans.AclUser;
 import com.xuxd.kafka.console.service.AclService;
@@ -26,34 +28,42 @@ public class AclUserController {
    @Autowired
    private AclService aclService;

+    @Permission("acl:sasl-scram")
    @GetMapping
    public Object getUserList() {
        return aclService.getUserList();
    }

+    @ControllerLog("增加SaslUser")
+    @Permission({"acl:sasl-scram:add-update", "acl:sasl-scram:add-auth"})
    @PostMapping
    public Object addOrUpdateUser(@RequestBody AclUser user) {
        return aclService.addOrUpdateUser(user.getUsername(), user.getPassword());
    }

+    @ControllerLog("删除SaslUser")
+    @Permission({"acl:sasl-scram:del", "acl:sasl-scram:pure"})
    @DeleteMapping
    public Object deleteUser(@RequestBody AclUser user) {
        return aclService.deleteUser(user.getUsername());
    }


+    @ControllerLog("删除SaslUser和Acl")
+    @Permission({"acl:sasl-scram:del", "acl:sasl-scram:pure"})
    @DeleteMapping("/auth")
    public Object deleteUserAndAuth(@RequestBody AclUser user) {
        return aclService.deleteUserAndAuth(user.getUsername());
    }

+    @Permission("acl:sasl-scram:detail")
    @GetMapping("/detail")
-    public Object getUserDetail(@RequestParam String username) {
+    public Object getUserDetail(@RequestParam("username") String username) {
        return aclService.getUserDetail(username);
    }

    @GetMapping("/scram")
-    public Object getSaslScramUserList(@RequestParam(required = false) String username) {
+    public Object getSaslScramUserList(@RequestParam(required = false, name = "username") String username) {
        AclEntry entry = new AclEntry();
        entry.setPrincipal(StringUtils.isNotBlank(username) ? username : null);
        return aclService.getSaslScramUserList(entry);
--- a/src/main/java/com/xuxd/kafka/console/controller/AuthController.java
+++ b/src/main/java/com/xuxd/kafka/console/controller/AuthController.java
@@ -0,0 +1,41 @@
+package com.xuxd.kafka.console.controller;
+
+import com.xuxd.kafka.console.beans.ResponseData;
+import com.xuxd.kafka.console.beans.dto.LoginUserDTO;
+import com.xuxd.kafka.console.config.AuthConfig;
+import com.xuxd.kafka.console.service.AuthService;
+import org.springframework.web.bind.annotation.*;
+
+/**
+ * @author: xuxd
+ * @date: 2023/5/11 18:54
+ **/
+@RestController
+@RequestMapping("/auth")
+public class AuthController {
+
+
+    private final AuthConfig authConfig;
+
+    private final AuthService authService;
+
+    public AuthController(AuthConfig authConfig, AuthService authService) {
+        this.authConfig = authConfig;
+        this.authService = authService;
+    }
+
+    @GetMapping("/enable")
+    public boolean enable() {
+        return authConfig.isEnable();
+    }
+
+    @PostMapping("/login")
+    public ResponseData login(@RequestBody LoginUserDTO userDTO) {
+        return authService.login(userDTO);
+    }
+
+    @GetMapping("/own/data/auth")
+    public boolean ownDataAuthority() {
+        return authService.ownDataAuthority();
+    }
+}
--- a/src/main/java/com/xuxd/kafka/console/controller/ClientQuotaController.java
+++ b/src/main/java/com/xuxd/kafka/console/controller/ClientQuotaController.java
@@ -1,5 +1,7 @@
 package com.xuxd.kafka.console.controller;

+import com.xuxd.kafka.console.aspect.annotation.ControllerLog;
+import com.xuxd.kafka.console.aspect.annotation.Permission;
 import com.xuxd.kafka.console.beans.ResponseData;
 import com.xuxd.kafka.console.beans.dto.AlterClientQuotaDTO;
 import com.xuxd.kafka.console.beans.dto.QueryClientQuotaDTO;
@@ -21,11 +23,14 @@ public class ClientQuotaController {
        this.clientQuotaService = clientQuotaService;
    }

+    @Permission({"quota:user", "quota:client", "quota:user-client"})
    @PostMapping("/list")
    public Object getClientQuotaConfigs(@RequestBody QueryClientQuotaDTO request) {
        return clientQuotaService.getClientQuotaConfigs(request.getTypes(), request.getNames());
    }

+    @ControllerLog("增加限流配额")
+    @Permission({"quota:user:add", "quota:client:add", "quota:user-client:add", "quota:edit"})
    @PostMapping
    public Object alterClientQuotaConfigs(@RequestBody AlterClientQuotaDTO request) {
        if (request.getTypes().size() != 2) {
@@ -38,6 +43,8 @@ public class ClientQuotaController {
        return clientQuotaService.alterClientQuotaConfigs(request);
    }

+    @ControllerLog("删除限流配额")
+    @Permission("quota:del")
    @DeleteMapping
    public Object deleteClientQuotaConfigs(@RequestBody AlterClientQuotaDTO request) {
        if (request.getTypes().size() != 2) {
--- a/src/main/java/com/xuxd/kafka/console/controller/ClusterController.java
+++ b/src/main/java/com/xuxd/kafka/console/controller/ClusterController.java
@@ -1,15 +1,11 @@
 package com.xuxd.kafka.console.controller;

+import com.xuxd.kafka.console.aspect.annotation.ControllerLog;
+import com.xuxd.kafka.console.aspect.annotation.Permission;
 import com.xuxd.kafka.console.beans.dto.ClusterInfoDTO;
 import com.xuxd.kafka.console.service.ClusterService;
 import org.springframework.beans.factory.annotation.Autowired;
-import org.springframework.web.bind.annotation.DeleteMapping;
-import org.springframework.web.bind.annotation.GetMapping;
-import org.springframework.web.bind.annotation.PostMapping;
-import org.springframework.web.bind.annotation.PutMapping;
-import org.springframework.web.bind.annotation.RequestBody;
-import org.springframework.web.bind.annotation.RequestMapping;
-import org.springframework.web.bind.annotation.RestController;
+import org.springframework.web.bind.annotation.*;

 /**
 * kafka-console-ui.
@@ -29,21 +25,34 @@ public class ClusterController {
        return clusterService.getClusterInfo();
    }

+    @Permission({"op:cluster-switch", "user-manage:cluster-role:add"})
    @GetMapping("/info")
    public Object getClusterInfoList() {
        return clusterService.getClusterInfoList();
    }

+    @Permission({"user-manage:cluster-role:add"})
+    @GetMapping("/info/select")
+    public Object getClusterInfoListForSelect() {
+        return clusterService.getClusterInfoListForSelect();
+    }
+
+    @ControllerLog("增加集群信息")
+    @Permission("op:cluster-switch:add")
    @PostMapping("/info")
    public Object addClusterInfo(@RequestBody ClusterInfoDTO dto) {
        return clusterService.addClusterInfo(dto.to());
    }

+    @ControllerLog("删除集群信息")
+    @Permission("op:cluster-switch:del")
    @DeleteMapping("/info")
    public Object deleteClusterInfo(@RequestBody ClusterInfoDTO dto) {
        return clusterService.deleteClusterInfo(dto.getId());
    }

+    @ControllerLog("编辑集群信息")
+    @Permission("op:cluster-switch:edit")
    @PutMapping("/info")
    public Object updateClusterInfo(@RequestBody ClusterInfoDTO dto) {
        return clusterService.updateClusterInfo(dto.to());
--- a/src/main/java/com/xuxd/kafka/console/controller/ClusterRoleRelationController.java
+++ b/src/main/java/com/xuxd/kafka/console/controller/ClusterRoleRelationController.java
@@ -0,0 +1,42 @@
+package com.xuxd.kafka.console.controller;
+
+import com.xuxd.kafka.console.aspect.annotation.ControllerLog;
+import com.xuxd.kafka.console.aspect.annotation.Permission;
+import com.xuxd.kafka.console.beans.dto.ClusterRoleRelationDTO;
+import com.xuxd.kafka.console.service.ClusterRoleRelationService;
+import org.springframework.web.bind.annotation.*;
+
+/**
+ * @author: xuxd
+ * @since: 2023/8/23 22:01
+ **/
+@RestController
+@RequestMapping("/cluster-role/relation")
+public class ClusterRoleRelationController {
+
+    private final ClusterRoleRelationService service;
+
+    public ClusterRoleRelationController(ClusterRoleRelationService service) {
+        this.service = service;
+    }
+
+    @Permission("user-manage:cluster-role")
+    @GetMapping
+    public Object select() {
+        return service.select();
+    }
+
+    @ControllerLog("增加集群归属角色信息")
+    @Permission("user-manage:cluster-role:add")
+    @PostMapping
+    public Object add(@RequestBody ClusterRoleRelationDTO dto) {
+        return service.add(dto);
+    }
+
+    @ControllerLog("删除集群归属角色信息")
+    @Permission("user-manage:cluster-role:delete")
+    @DeleteMapping
+    public Object delete(@RequestParam("id") Long id) {
+        return service.delete(id);
+    }
+}
--- a/src/main/java/com/xuxd/kafka/console/controller/ConfigController.java
+++ b/src/main/java/com/xuxd/kafka/console/controller/ConfigController.java
@@ -1,5 +1,7 @@
 package com.xuxd.kafka.console.controller;

+import com.xuxd.kafka.console.aspect.annotation.ControllerLog;
+import com.xuxd.kafka.console.aspect.annotation.Permission;
 import com.xuxd.kafka.console.beans.ResponseData;
 import com.xuxd.kafka.console.beans.dto.AlterConfigDTO;
 import com.xuxd.kafka.console.beans.enums.AlterType;
@@ -41,46 +43,61 @@ public class ConfigController {
        return ResponseData.create().data(configMap).success();
    }

+    @Permission("topic:property-config")
    @GetMapping("/topic")
    public Object getTopicConfig(String topic) {
        return configService.getTopicConfig(topic);
    }

+    @ControllerLog("编辑topic配置")
+    @Permission("topic:property-config:edit")
    @PostMapping("/topic")
    public Object setTopicConfig(@RequestBody AlterConfigDTO dto) {
        return configService.alterTopicConfig(dto.getEntity(), dto.to(), AlterType.SET);
    }

+    @ControllerLog("删除topic配置")
+    @Permission("topic:property-config:del")
    @DeleteMapping("/topic")
    public Object deleteTopicConfig(@RequestBody AlterConfigDTO dto) {
        return configService.alterTopicConfig(dto.getEntity(), dto.to(), AlterType.DELETE);
    }

+    @Permission("cluster:property-config")
    @GetMapping("/broker")
    public Object getBrokerConfig(String brokerId) {
        return configService.getBrokerConfig(brokerId);
    }

+    @ControllerLog("设置broker配置")
+    @Permission("cluster:edit")
    @PostMapping("/broker")
    public Object setBrokerConfig(@RequestBody AlterConfigDTO dto) {
        return configService.alterBrokerConfig(dto.getEntity(), dto.to(), AlterType.SET);
    }

+    @ControllerLog("编辑broker配置")
+    @Permission("cluster:edit")
    @DeleteMapping("/broker")
    public Object deleteBrokerConfig(@RequestBody AlterConfigDTO dto) {
        return configService.alterBrokerConfig(dto.getEntity(), dto.to(), AlterType.DELETE);
    }

+    @Permission("cluster:log-config")
    @GetMapping("/broker/logger")
    public Object getBrokerLoggerConfig(String brokerId) {
        return configService.getBrokerLoggerConfig(brokerId);
    }

+    @ControllerLog("编辑broker日志配置")
+    @Permission("cluster:edit")
    @PostMapping("/broker/logger")
    public Object setBrokerLoggerConfig(@RequestBody AlterConfigDTO dto) {
        return configService.alterBrokerLoggerConfig(dto.getEntity(), dto.to(), AlterType.SET);
    }

+    @ControllerLog("删除broker日志配置")
+    @Permission("cluster:edit")
    @DeleteMapping("/broker/logger")
    public Object deleteBrokerLoggerConfig(@RequestBody AlterConfigDTO dto) {
        return configService.alterBrokerLoggerConfig(dto.getEntity(), dto.to(), AlterType.DELETE);
--- a/src/main/java/com/xuxd/kafka/console/controller/ConsumerController.java
+++ b/src/main/java/com/xuxd/kafka/console/controller/ConsumerController.java
@@ -1,28 +1,21 @@
 package com.xuxd.kafka.console.controller;

+import com.xuxd.kafka.console.aspect.annotation.ControllerLog;
+import com.xuxd.kafka.console.aspect.annotation.Permission;
 import com.xuxd.kafka.console.beans.ResponseData;
 import com.xuxd.kafka.console.beans.dto.AddSubscriptionDTO;
 import com.xuxd.kafka.console.beans.dto.QueryConsumerGroupDTO;
 import com.xuxd.kafka.console.beans.dto.ResetOffsetDTO;
 import com.xuxd.kafka.console.service.ConsumerService;
-import java.util.Collections;
-import java.util.HashSet;
-import java.util.List;
-import java.util.Objects;
-import java.util.Set;
 import org.apache.commons.collections.CollectionUtils;
 import org.apache.commons.lang3.StringUtils;
 import org.apache.kafka.clients.consumer.OffsetResetStrategy;
 import org.apache.kafka.common.ConsumerGroupState;
 import org.apache.kafka.common.TopicPartition;
 import org.springframework.beans.factory.annotation.Autowired;
-import org.springframework.web.bind.annotation.DeleteMapping;
-import org.springframework.web.bind.annotation.GetMapping;
-import org.springframework.web.bind.annotation.PostMapping;
-import org.springframework.web.bind.annotation.RequestBody;
-import org.springframework.web.bind.annotation.RequestMapping;
-import org.springframework.web.bind.annotation.RequestParam;
-import org.springframework.web.bind.annotation.RestController;
+import org.springframework.web.bind.annotation.*;
+
+import java.util.*;

 /**
 * kafka-console-ui.
@@ -51,26 +44,37 @@ public class ConsumerController {
        return consumerService.getConsumerGroupList(groupIdList, stateSet);
    }

+    @ControllerLog("删除消费组")
+    @Permission("group:del")
    @DeleteMapping("/group")
-    public Object deleteConsumerGroup(@RequestParam String groupId) {
+    public Object deleteConsumerGroup(@RequestParam("groupId") String groupId) {
        return consumerService.deleteConsumerGroup(groupId);
    }

+    @Permission("group:client")
    @GetMapping("/member")
-    public Object getConsumerMembers(@RequestParam String groupId) {
+    public Object getConsumerMembers(@RequestParam("groupId") String groupId) {
        return consumerService.getConsumerMembers(groupId);
    }

+    @Permission("group:consumer-detail")
    @GetMapping("/detail")
-    public Object getConsumerDetail(@RequestParam String groupId) {
+    public Object getConsumerDetail(@RequestParam("groupId") String groupId) {
        return consumerService.getConsumerDetail(groupId);
    }

+    @ControllerLog("新增消费组")
+    @Permission("group:add")
    @PostMapping("/subscription")
    public Object addSubscription(@RequestBody AddSubscriptionDTO subscriptionDTO) {
        return consumerService.addSubscription(subscriptionDTO.getGroupId(), subscriptionDTO.getTopic());
    }

+    @ControllerLog("重置消费位点")
+    @Permission({"group:consumer-detail:min",
+            "group:consumer-detail:last",
+            "group:consumer-detail:timestamp",
+            "group:consumer-detail:any"})
    @PostMapping("/reset/offset")
    public Object restOffset(@RequestBody ResetOffsetDTO offsetDTO) {
        ResponseData res = ResponseData.create().failed("unknown");
@@ -78,7 +82,7 @@ public class ConsumerController {
            case ResetOffsetDTO.Level.TOPIC:
                switch (offsetDTO.getType()) {
                    case ResetOffsetDTO.Type
-                        .EARLIEST:
+                            .EARLIEST:
                        res = consumerService.resetOffsetToEndpoint(offsetDTO.getGroupId(), offsetDTO.getTopic(), OffsetResetStrategy.EARLIEST);
                        break;
                    case ResetOffsetDTO.Type.LATEST:
@@ -94,7 +98,7 @@ public class ConsumerController {
            case ResetOffsetDTO.Level.PARTITION:
                switch (offsetDTO.getType()) {
                    case ResetOffsetDTO.Type
-                        .SPECIAL:
+                            .SPECIAL:
                        res = consumerService.resetPartitionToTargetOffset(offsetDTO.getGroupId(), new TopicPartition(offsetDTO.getTopic(), offsetDTO.getPartition()), offsetDTO.getOffset());
                        break;
                    default:
@@ -114,17 +118,19 @@ public class ConsumerController {
    }

    @GetMapping("/topic/list")
-    public Object getSubscribeTopicList(@RequestParam String groupId) {
+    public Object getSubscribeTopicList(@RequestParam("groupId") String groupId) {
        return consumerService.getSubscribeTopicList(groupId);
    }

+    @Permission({"topic:consumer-detail"})
    @GetMapping("/topic/subscribed")
-    public Object getTopicSubscribedByGroups(@RequestParam String topic) {
+    public Object getTopicSubscribedByGroups(@RequestParam("topic") String topic) {
        return consumerService.getTopicSubscribedByGroups(topic);
    }

+    @Permission("group:offset-partition")
    @GetMapping("/offset/partition")
-    public Object getOffsetPartition(@RequestParam String groupId) {
+    public Object getOffsetPartition(@RequestParam("groupId") String groupId) {
        return consumerService.getOffsetPartition(groupId);
    }
 }
--- a/src/main/java/com/xuxd/kafka/console/controller/MessageController.java
+++ b/src/main/java/com/xuxd/kafka/console/controller/MessageController.java
@@ -1,11 +1,15 @@
 package com.xuxd.kafka.console.controller;

+import com.xuxd.kafka.console.aspect.annotation.ControllerLog;
+import com.xuxd.kafka.console.aspect.annotation.Permission;
 import com.xuxd.kafka.console.beans.QueryMessage;
 import com.xuxd.kafka.console.beans.ResponseData;
 import com.xuxd.kafka.console.beans.SendMessage;
 import com.xuxd.kafka.console.beans.dto.QueryMessageDTO;
+import com.xuxd.kafka.console.beans.dto.QuerySendStatisticsDTO;
 import com.xuxd.kafka.console.service.MessageService;
 import org.apache.commons.collections.CollectionUtils;
+import org.apache.commons.lang3.StringUtils;
 import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.web.bind.annotation.*;

@@ -24,16 +28,19 @@ public class MessageController {
    @Autowired
    private MessageService messageService;

+    @Permission("message:search-time")
    @PostMapping("/search/time")
    public Object searchByTime(@RequestBody QueryMessageDTO dto) {
        return messageService.searchByTime(dto.toQueryMessage());
    }

+    @Permission("message:search-offset")
    @PostMapping("/search/offset")
    public Object searchByOffset(@RequestBody QueryMessageDTO dto) {
        return messageService.searchByOffset(dto.toQueryMessage());
    }

+    @Permission("message:detail")
    @PostMapping("/search/detail")
    public Object searchDetail(@RequestBody QueryMessageDTO dto) {
        return messageService.searchDetail(dto.toQueryMessage());
@@ -45,15 +52,21 @@ public class MessageController {
    }

    @PostMapping("/send")
+    @ControllerLog("在线发送消息")
+    @Permission("message:send")
    public Object send(@RequestBody SendMessage message) {
-        return messageService.send(message);
+        return messageService.sendWithHeader(message);
    }

+    @ControllerLog("重新发送消息")
+    @Permission("message:resend")
    @PostMapping("/resend")
    public Object resend(@RequestBody SendMessage message) {
        return messageService.resend(message);
    }

+    @ControllerLog("在线删除消息")
+    @Permission("message:del")
    @DeleteMapping
    public Object delete(@RequestBody List<QueryMessage> messages) {
        if (CollectionUtils.isEmpty(messages)) {
@@ -61,4 +74,13 @@ public class MessageController {
        }
        return messageService.delete(messages);
    }
+
+    @Permission("message:send-statistics")
+    @PostMapping("/send/statistics")
+    public Object sendStatistics(@RequestBody QuerySendStatisticsDTO dto) {
+        if (StringUtils.isEmpty(dto.getTopic())) {
+            return ResponseData.create().failed("Topic is null");
+        }
+        return messageService.sendStatisticsByTime(dto);
+    }
 }
--- a/src/main/java/com/xuxd/kafka/console/controller/OperationController.java
+++ b/src/main/java/com/xuxd/kafka/console/controller/OperationController.java
@@ -1,5 +1,7 @@
 package com.xuxd.kafka.console.controller;

+import com.xuxd.kafka.console.aspect.annotation.ControllerLog;
+import com.xuxd.kafka.console.aspect.annotation.Permission;
 import com.xuxd.kafka.console.beans.TopicPartition;
 import com.xuxd.kafka.console.beans.dto.BrokerThrottleDTO;
 import com.xuxd.kafka.console.beans.dto.ProposedAssignmentDTO;
@@ -8,13 +10,7 @@ import com.xuxd.kafka.console.beans.dto.SyncDataDTO;
 import com.xuxd.kafka.console.service.OperationService;
 import org.apache.kafka.clients.admin.AdminClientConfig;
 import org.springframework.beans.factory.annotation.Autowired;
-import org.springframework.web.bind.annotation.DeleteMapping;
-import org.springframework.web.bind.annotation.GetMapping;
-import org.springframework.web.bind.annotation.PostMapping;
-import org.springframework.web.bind.annotation.RequestBody;
-import org.springframework.web.bind.annotation.RequestMapping;
-import org.springframework.web.bind.annotation.RequestParam;
-import org.springframework.web.bind.annotation.RestController;
+import org.springframework.web.bind.annotation.*;

 /**
 * kafka-console-ui.
@@ -29,12 +25,14 @@ public class OperationController {
    @Autowired
    private OperationService operationService;

+    @ControllerLog("同步消费位点")
    @PostMapping("/sync/consumer/offset")
    public Object syncConsumerOffset(@RequestBody SyncDataDTO dto) {
        dto.getProperties().put(AdminClientConfig.BOOTSTRAP_SERVERS_CONFIG, dto.getAddress());
        return operationService.syncConsumerOffset(dto.getGroupId(), dto.getTopic(), dto.getProperties());
    }

+    @ControllerLog("重新位点对齐")
    @PostMapping("/sync/min/offset/alignment")
    public Object minOffsetAlignment(@RequestBody SyncDataDTO dto) {
        dto.getProperties().put(AdminClientConfig.BOOTSTRAP_SERVERS_CONFIG, dto.getAddress());
@@ -46,31 +44,41 @@ public class OperationController {
        return operationService.getAlignmentList();
    }

+    @ControllerLog("deleteAlignment")
    @DeleteMapping("/sync/alignment")
-    public Object deleteAlignment(@RequestParam Long id) {
+    public Object deleteAlignment(@RequestParam("id") Long id) {
        return operationService.deleteAlignmentById(id);
    }

+    @ControllerLog("优先副本leader")
+    @Permission({"topic:partition-detail:preferred", "op:replication-preferred"})
    @PostMapping("/replication/preferred")
    public Object electPreferredLeader(@RequestBody ReplicationDTO dto) {
        return operationService.electPreferredLeader(dto.getTopic(), dto.getPartition());
    }

+    @ControllerLog("配置同步限流")
+    @Permission("op:config-throttle")
    @PostMapping("/broker/throttle")
    public Object configThrottle(@RequestBody BrokerThrottleDTO dto) {
        return operationService.configThrottle(dto.getBrokerList(), dto.getUnit().toKb(dto.getThrottle()));
    }

+    @ControllerLog("移除限流配置")
+    @Permission("op:remove-throttle")
    @DeleteMapping("/broker/throttle")
    public Object removeThrottle(@RequestBody BrokerThrottleDTO dto) {
        return operationService.removeThrottle(dto.getBrokerList());
    }

+    @Permission("op:replication-update-detail")
    @GetMapping("/replication/reassignments")
    public Object currentReassignments() {
        return operationService.currentReassignments();
    }

+    @ControllerLog("取消副本重分配")
+    @Permission("op:replication-update-detail:cancel")
    @DeleteMapping("/replication/reassignments")
    public Object cancelReassignment(@RequestBody TopicPartition partition) {
        return operationService.cancelReassignment(new org.apache.kafka.common.TopicPartition(partition.getTopic(), partition.getPartition()));
--- a/src/main/java/com/xuxd/kafka/console/controller/TopicController.java
+++ b/src/main/java/com/xuxd/kafka/console/controller/TopicController.java
@@ -1,23 +1,20 @@
 package com.xuxd.kafka.console.controller;

+import com.xuxd.kafka.console.aspect.annotation.ControllerLog;
+import com.xuxd.kafka.console.aspect.annotation.Permission;
 import com.xuxd.kafka.console.beans.ReplicaAssignment;
 import com.xuxd.kafka.console.beans.dto.AddPartitionDTO;
 import com.xuxd.kafka.console.beans.dto.NewTopicDTO;
 import com.xuxd.kafka.console.beans.dto.TopicThrottleDTO;
 import com.xuxd.kafka.console.beans.enums.TopicType;
 import com.xuxd.kafka.console.service.TopicService;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.web.bind.annotation.*;
+
 import java.util.ArrayList;
 import java.util.Collections;
 import java.util.List;
 import java.util.Map;
-import org.springframework.beans.factory.annotation.Autowired;
-import org.springframework.web.bind.annotation.DeleteMapping;
-import org.springframework.web.bind.annotation.GetMapping;
-import org.springframework.web.bind.annotation.PostMapping;
-import org.springframework.web.bind.annotation.RequestBody;
-import org.springframework.web.bind.annotation.RequestMapping;
-import org.springframework.web.bind.annotation.RequestParam;
-import org.springframework.web.bind.annotation.RestController;

 /**
 * kafka-console-ui.
@@ -37,26 +34,34 @@ public class TopicController {
        return topicService.getTopicNameList(false);
    }

+    @Permission("topic:load")
    @GetMapping("/list")
-    public Object getTopicList(@RequestParam(required = false) String topic, @RequestParam String type) {
+    public Object getTopicList(@RequestParam(required = false, name = "topic") String topic, @RequestParam("type") String type) {
        return topicService.getTopicList(topic, TopicType.valueOf(type.toUpperCase()));
    }

+    @ControllerLog("删除topic")
+    @Permission({"topic:batch-del", "topic:del"})
    @DeleteMapping
    public Object deleteTopic(@RequestBody List<String> topics) {
        return topicService.deleteTopics(topics);
    }

+    @Permission("topic:partition-detail")
    @GetMapping("/partition")
-    public Object getTopicPartitionInfo(@RequestParam String topic) {
+    public Object getTopicPartitionInfo(@RequestParam("topic") String topic) {
        return topicService.getTopicPartitionInfo(topic.trim());
    }

+    @ControllerLog("创建topic")
+    @Permission("topic:add")
    @PostMapping("/new")
    public Object createNewTopic(@RequestBody NewTopicDTO topicDTO) {
        return topicService.createTopic(topicDTO.toNewTopic());
    }

+    @ControllerLog("增加topic分区")
+    @Permission("topic:partition-add")
    @PostMapping("/partition/new")
    public Object addPartition(@RequestBody AddPartitionDTO partitionDTO) {
        String topic = partitionDTO.getTopic().trim();
@@ -75,22 +80,27 @@ public class TopicController {
    }

    @GetMapping("/replica/assignment")
-    public Object getCurrentReplicaAssignment(@RequestParam String topic) {
+    public Object getCurrentReplicaAssignment(@RequestParam("topic") String topic) {
        return topicService.getCurrentReplicaAssignment(topic);
    }

+    @ControllerLog("更新副本")
+    @Permission({"topic:replication-modify", "op:replication-reassign"})
    @PostMapping("/replica/assignment")
    public Object updateReplicaAssignment(@RequestBody ReplicaAssignment assignment) {
        return topicService.updateReplicaAssignment(assignment);
    }

+    @ControllerLog("配置限流")
+    @Permission("topic:replication-sync-throttle")
    @PostMapping("/replica/throttle")
    public Object configThrottle(@RequestBody TopicThrottleDTO dto) {
        return topicService.configThrottle(dto.getTopic(), dto.getPartitions(), dto.getOperation());
    }

+    @Permission("topic:send-count")
    @GetMapping("/send/stats")
-    public Object sendStats(@RequestParam String topic) {
+    public Object sendStats(@RequestParam("topic") String topic) {
        return topicService.sendStats(topic);
    }
 }
--- a/src/main/java/com/xuxd/kafka/console/controller/UserManageController.java
+++ b/src/main/java/com/xuxd/kafka/console/controller/UserManageController.java
@@ -0,0 +1,97 @@
+package com.xuxd.kafka.console.controller;
+
+import com.xuxd.kafka.console.aspect.annotation.ControllerLog;
+import com.xuxd.kafka.console.aspect.annotation.Permission;
+import com.xuxd.kafka.console.beans.Credentials;
+import com.xuxd.kafka.console.beans.dto.SysPermissionDTO;
+import com.xuxd.kafka.console.beans.dto.SysRoleDTO;
+import com.xuxd.kafka.console.beans.dto.SysUserDTO;
+import com.xuxd.kafka.console.service.UserManageService;
+import org.springframework.web.bind.annotation.*;
+
+import javax.servlet.http.HttpServletRequest;
+
+/**
+ * @author: xuxd
+ * @date: 2023/4/11 21:34
+ **/
+@RestController
+@RequestMapping("/sys/user/manage")
+public class UserManageController {
+
+    private final UserManageService userManageService;
+
+    public UserManageController(UserManageService userManageService) {
+        this.userManageService = userManageService;
+    }
+
+    @Permission({"user-manage:user:add", "user-manage:user:change-role", "user-manage:user:reset-pass"})
+    @ControllerLog("新增/更新用户")
+    @PostMapping("/user")
+    public Object addOrUpdateUser(@RequestBody SysUserDTO userDTO) {
+        return userManageService.addOrUpdateUser(userDTO);
+    }
+
+    @Permission("user-manage:role:save")
+    @ControllerLog("新增/更新角色")
+    @PostMapping("/role")
+    public Object addOrUpdateRole(@RequestBody SysRoleDTO roleDTO) {
+        return userManageService.addOrUdpateRole(roleDTO);
+    }
+
+    @ControllerLog("新增权限")
+    @PostMapping("/permission")
+    public Object addPermission(@RequestBody SysPermissionDTO permissionDTO) {
+        return userManageService.addPermission(permissionDTO);
+    }
+
+    @Permission("user-manage:role:save")
+    @ControllerLog("更新角色")
+    @PutMapping("/role")
+    public Object updateRole(@RequestBody SysRoleDTO roleDTO) {
+        return userManageService.updateRole(roleDTO);
+    }
+
+    @Permission({"user-manage:role"})
+    @GetMapping("/role")
+    public Object selectRole() {
+        return userManageService.selectRole();
+    }
+
+    @Permission({"user-manage:permission"})
+    @GetMapping("/permission")
+    public Object selectPermission() {
+        return userManageService.selectPermission();
+    }
+
+    @Permission({"user-manage:user"})
+    @GetMapping("/user")
+    public Object selectUser() {
+        return userManageService.selectUser();
+    }
+
+    @Permission("user-manage:role:del")
+    @ControllerLog("删除角色")
+    @DeleteMapping("/role")
+    public Object deleteRole(@RequestParam("id") Long id) {
+        return userManageService.deleteRole(id);
+    }
+
+    @Permission("user-manage:user:del")
+    @ControllerLog("删除用户")
+    @DeleteMapping("/user")
+    public Object deleteUser(@RequestParam("id") Long id) {
+        return userManageService.deleteUser(id);
+    }
+
+    @Permission("user-manage:setting")
+    @ControllerLog("更新密码")
+    @PostMapping("/user/password")
+    public Object updatePassword(@RequestBody SysUserDTO userDTO, HttpServletRequest request) {
+        Credentials credentials = (Credentials) request.getAttribute("credentials");
+        if (credentials != null && !credentials.isInvalid()) {
+            userDTO.setUsername(credentials.getUsername());
+        }
+        return userManageService.updatePassword(userDTO);
+    }
+}
--- a/src/main/java/com/xuxd/kafka/console/dao/ClusterRoleRelationMapper.java
+++ b/src/main/java/com/xuxd/kafka/console/dao/ClusterRoleRelationMapper.java
@@ -0,0 +1,15 @@
+package com.xuxd.kafka.console.dao;
+
+import com.baomidou.mybatisplus.core.mapper.BaseMapper;
+import com.xuxd.kafka.console.beans.dos.ClusterRoleRelationDO;
+import org.apache.ibatis.annotations.Mapper;
+
+/**
+ * Cluster info and role relation.
+ *
+ * @author: xuxd
+ * @since: 2023/8/23 21:40
+ **/
+@Mapper
+public interface ClusterRoleRelationMapper extends BaseMapper<ClusterRoleRelationDO> {
+}
--- a/src/main/java/com/xuxd/kafka/console/dao/SysPermissionMapper.java
+++ b/src/main/java/com/xuxd/kafka/console/dao/SysPermissionMapper.java
@@ -0,0 +1,15 @@
+package com.xuxd.kafka.console.dao;
+
+import com.baomidou.mybatisplus.core.mapper.BaseMapper;
+import com.xuxd.kafka.console.beans.dos.SysPermissionDO;
+import org.apache.ibatis.annotations.Mapper;
+
+/**
+ * 系统权限 .
+ *
+ * @author: xuxd
+ * @date: 2023/4/11 21:21
+ **/
+@Mapper
+public interface SysPermissionMapper extends BaseMapper<SysPermissionDO> {
+}
--- a/src/main/java/com/xuxd/kafka/console/dao/SysRoleMapper.java
+++ b/src/main/java/com/xuxd/kafka/console/dao/SysRoleMapper.java
@@ -0,0 +1,13 @@
+package com.xuxd.kafka.console.dao;
+
+import com.baomidou.mybatisplus.core.mapper.BaseMapper;
+import com.xuxd.kafka.console.beans.dos.SysRoleDO;
+import org.apache.ibatis.annotations.Mapper;
+
+/**
+ * @author: xuxd
+ * @date: 2023/4/11 21:22
+ **/
+@Mapper
+public interface SysRoleMapper extends BaseMapper<SysRoleDO> {
+}
--- a/src/main/java/com/xuxd/kafka/console/dao/SysUserMapper.java
+++ b/src/main/java/com/xuxd/kafka/console/dao/SysUserMapper.java
@@ -0,0 +1,13 @@
+package com.xuxd.kafka.console.dao;
+
+import com.baomidou.mybatisplus.core.mapper.BaseMapper;
+import com.xuxd.kafka.console.beans.dos.SysUserDO;
+import org.apache.ibatis.annotations.Mapper;
+
+/**
+ * @author: xuxd
+ * @date: 2023/4/11 21:22
+ **/
+@Mapper
+public interface SysUserMapper extends BaseMapper<SysUserDO> {
+}
--- a/src/main/java/com/xuxd/kafka/console/dao/init/DataInit.java
+++ b/src/main/java/com/xuxd/kafka/console/dao/init/DataInit.java
@@ -0,0 +1,96 @@
+package com.xuxd.kafka.console.dao.init;
+
+import com.xuxd.kafka.console.beans.RolePermUpdateEvent;
+import com.xuxd.kafka.console.config.AuthConfig;
+import com.xuxd.kafka.console.dao.SysPermissionMapper;
+import com.xuxd.kafka.console.dao.SysRoleMapper;
+import com.xuxd.kafka.console.dao.SysUserMapper;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.beans.factory.SmartInitializingSingleton;
+import org.springframework.context.ApplicationEventPublisher;
+import org.springframework.stereotype.Component;
+
+import javax.sql.DataSource;
+import java.sql.Connection;
+import java.sql.PreparedStatement;
+import java.sql.SQLException;
+
+/**
+ * @author: xuxd
+ * @date: 2023/5/17 13:10
+ **/
+@Slf4j
+@Component
+public class DataInit implements SmartInitializingSingleton {
+
+    private final AuthConfig authConfig;
+
+    private final SysUserMapper userMapper;
+
+    private final SysRoleMapper roleMapper;
+
+    private final SysPermissionMapper permissionMapper;
+
+    private final DataSource dataSource;
+
+    private final SqlParse sqlParse;
+
+    private final ApplicationEventPublisher publisher;
+
+
+    public DataInit(AuthConfig authConfig,
+                    SysUserMapper userMapper,
+                    SysRoleMapper roleMapper,
+                    SysPermissionMapper permissionMapper,
+                    DataSource dataSource,
+                    ApplicationEventPublisher publisher) {
+        this.authConfig = authConfig;
+        this.userMapper = userMapper;
+        this.roleMapper = roleMapper;
+        this.permissionMapper = permissionMapper;
+        this.dataSource = dataSource;
+        this.publisher = publisher;
+        this.sqlParse = new SqlParse();
+    }
+
+    @Override
+    public void afterSingletonsInstantiated() {
+        if (!authConfig.isEnable()) {
+            log.info("Disable login authentication, no longer try to initialize the data");
+            return;
+        }
+        try {
+            Connection connection = dataSource.getConnection();
+            Integer userCount = userMapper.selectCount(null);
+            if (userCount == null || userCount == 0) {
+                initData(connection, SqlParse.USER_TABLE);
+            }
+
+            Integer roleCount = roleMapper.selectCount(null);
+            if (roleCount == null || roleCount == 0) {
+                initData(connection, SqlParse.ROLE_TABLE);
+            }
+
+            if (authConfig.isReloadPermission()) {
+                permissionMapper.delete(null);
+            }
+            Integer permCount = permissionMapper.selectCount(null);
+            if (permCount == null || permCount == 0) {
+                initData(connection, SqlParse.PERM_TABLE);
+            }
+            RolePermUpdateEvent event = new RolePermUpdateEvent(this);
+            event.setReload(true);
+            publisher.publishEvent(event);
+        } catch (SQLException e) {
+            throw new RuntimeException(e);
+        }
+
+    }
+
+    private void initData(Connection connection, String table) throws SQLException {
+        log.info("Init default data for {}", table);
+        String sql = sqlParse.getMergeSql(table);
+        PreparedStatement statement = connection.prepareStatement(sql);
+        statement.execute();
+    }
+}
--- a/src/main/java/com/xuxd/kafka/console/dao/init/SqlParse.java
+++ b/src/main/java/com/xuxd/kafka/console/dao/init/SqlParse.java
@@ -0,0 +1,96 @@
+package com.xuxd.kafka.console.dao.init;
+
+import lombok.extern.slf4j.Slf4j;
+import org.apache.commons.lang3.StringUtils;
+import scala.collection.mutable.StringBuilder;
+
+import java.io.BufferedReader;
+import java.io.InputStream;
+import java.io.InputStreamReader;
+import java.util.ArrayList;
+import java.util.HashMap;
+import java.util.List;
+import java.util.Map;
+
+/**
+ * @author: xuxd
+ * @date: 2023/5/17 21:22
+ **/
+@Slf4j
+public class SqlParse {
+
+    private final String FILE = "db/data-h2.sql";
+
+    private final Map<String, List<String>> sqlMap = new HashMap<>();
+
+    public static final String ROLE_TABLE = "t_sys_role";
+    public static final String USER_TABLE = "t_sys_user";
+    public static final String PERM_TABLE = "t_sys_permission";
+
+    public SqlParse() {
+        sqlMap.put(ROLE_TABLE, new ArrayList<>());
+        sqlMap.put(USER_TABLE, new ArrayList<>());
+        sqlMap.put(PERM_TABLE, new ArrayList<>());
+
+        String table = null;
+        try {
+            List<String> lines = getSqlLines();
+            for (String str : lines) {
+                if (StringUtils.isNotEmpty(str)) {
+                    if (str.indexOf("start--") > 0) {
+                        if (str.indexOf(ROLE_TABLE) > 0) {
+                            table = ROLE_TABLE;
+                        }
+                        if (str.indexOf(USER_TABLE) > 0) {
+                            table = USER_TABLE;
+                        }
+                        if (str.indexOf(PERM_TABLE) > 0) {
+                            table = PERM_TABLE;
+                        }
+                    }
+                    if (isSql(str)) {
+                        if (table == null) {
+                            log.error("Table is null, can not load sql: {}", str);
+                            continue;
+                        }
+                        sqlMap.get(table).add(str);
+                    }
+                }
+            }
+        } catch (Exception e) {
+            throw new RuntimeException(e);
+        }
+    }
+
+    public List<String> getSqlList(String table) {
+        return sqlMap.get(table);
+    }
+
+    public String getMergeSql(String table) {
+        List<String> list = getSqlList(table);
+        StringBuilder sb = new StringBuilder();
+        list.forEach(sql -> sb.append(sql));
+        return sb.toString();
+    }
+
+    private boolean isSql(String str) {
+        return StringUtils.isNotEmpty(str) && str.startsWith("insert");
+    }
+
+    private List<String> getSqlLines() throws Exception {
+//        File file = ResourceUtils.getFile(FILE);
+//        List<String> lines = Files.readLines(file, Charset.forName("UTF-8"));
+        List<String> lines = new ArrayList<>();
+        try (InputStream inputStream = Thread.currentThread().getContextClassLoader().getResourceAsStream(FILE)) {
+            try (InputStreamReader inputStreamReader = new InputStreamReader(inputStream, "UTF-8")) {
+                try (BufferedReader reader = new BufferedReader(inputStreamReader)) {
+                    String line;
+                    while ((line = reader.readLine()) != null) {
+                        lines.add(line);
+                    }
+                }
+            }
+        }
+        return lines;
+    }
+}
--- a/src/main/java/com/xuxd/kafka/console/interceptor/GlobalExceptionHandler.java
+++ b/src/main/java/com/xuxd/kafka/console/interceptor/GlobalExceptionHandler.java
@@ -1,11 +1,14 @@
-package com.xuxd.kafka.console.interceptor;
+package com.xuxd.kafka.console.exception;

 import com.xuxd.kafka.console.beans.ResponseData;
-import javax.servlet.http.HttpServletRequest;
 import lombok.extern.slf4j.Slf4j;
+import org.springframework.http.HttpStatus;
 import org.springframework.web.bind.annotation.ControllerAdvice;
 import org.springframework.web.bind.annotation.ExceptionHandler;
 import org.springframework.web.bind.annotation.ResponseBody;
+import org.springframework.web.bind.annotation.ResponseStatus;
+
+import javax.servlet.http.HttpServletRequest;

 /**
 * kafka-console-ui.
@@ -17,6 +20,14 @@ import org.springframework.web.bind.annotation.ResponseBody;
@ControllerAdvice(basePackages = "com.xuxd.kafka.console.controller")
 public class GlobalExceptionHandler {

+    @ResponseStatus(code = HttpStatus.FORBIDDEN)
+    @ExceptionHandler(value = UnAuthorizedException.class)
+    @ResponseBody
+    public Object unAuthorizedExceptionHandler(HttpServletRequest req, Exception ex) throws Exception {
+        log.error("unAuthorized: {}", ex.getMessage());
+        return ResponseData.create().failed("UnAuthorized: " + ex.getMessage());
+    }
+
    @ExceptionHandler(value = Exception.class)
    @ResponseBody
    public Object exceptionHandler(HttpServletRequest req, Exception ex) throws Exception {
--- a/src/main/java/com/xuxd/kafka/console/exception/UnAuthorizedException.java
+++ b/src/main/java/com/xuxd/kafka/console/exception/UnAuthorizedException.java
@@ -0,0 +1,12 @@
+package com.xuxd.kafka.console.exception;
+
+/**
+ * @author: xuxd
+ * @date: 2023/5/17 23:08
+ **/
+public class UnAuthorizedException extends RuntimeException{
+
+    public UnAuthorizedException(String message) {
+        super(message);
+    }
+}
--- a/src/main/java/com/xuxd/kafka/console/filter/AuthFilter.java
+++ b/src/main/java/com/xuxd/kafka/console/filter/AuthFilter.java
@@ -0,0 +1,78 @@
+package com.xuxd.kafka.console.filter;
+
+import com.xuxd.kafka.console.beans.Credentials;
+import com.xuxd.kafka.console.config.AuthConfig;
+import com.xuxd.kafka.console.utils.AuthUtil;
+import lombok.extern.slf4j.Slf4j;
+import org.apache.commons.lang3.StringUtils;
+import org.springframework.core.annotation.Order;
+import org.springframework.http.HttpStatus;
+
+import javax.servlet.*;
+import javax.servlet.annotation.WebFilter;
+import javax.servlet.http.HttpServletRequest;
+import javax.servlet.http.HttpServletResponse;
+import java.io.IOException;
+
+/**
+ * @author: xuxd
+ * @date: 2023/5/9 21:20
+ **/
+@Order(1)
+@WebFilter(filterName = "auth-filter", urlPatterns = {"/*"})
+@Slf4j
+public class AuthFilter implements Filter {
+
+    private final AuthConfig authConfig;
+
+    private final String TOKEN_HEADER = "X-Auth-Token";
+
+    private final String AUTH_URI_PREFIX = "/auth";
+
+    public AuthFilter(AuthConfig authConfig) {
+        this.authConfig = authConfig;
+    }
+
+    @Override
+    public void doFilter(ServletRequest servletRequest, ServletResponse servletResponse, FilterChain filterChain) throws IOException, ServletException {
+        if (!authConfig.isEnable()) {
+            filterChain.doFilter(servletRequest, servletResponse);
+            return;
+        }
+        HttpServletRequest request = (HttpServletRequest) servletRequest;
+        HttpServletResponse response = (HttpServletResponse) servletResponse;
+        String accessToken = request.getHeader(TOKEN_HEADER);
+
+        String requestURI = request.getRequestURI();
+        if (isResourceRequest(requestURI)) {
+            filterChain.doFilter(servletRequest, servletResponse);
+            return;
+        }
+        if (requestURI.startsWith(AUTH_URI_PREFIX)) {
+            filterChain.doFilter(servletRequest, servletResponse);
+            return;
+        }
+        if (StringUtils.isEmpty(accessToken)) {
+            response.setStatus(HttpStatus.UNAUTHORIZED.value());
+            return;
+        }
+
+        Credentials credentials = AuthUtil.parseToken(authConfig.getSecret(), accessToken);
+        if (credentials.isInvalid()) {
+            response.setStatus(HttpStatus.UNAUTHORIZED.value());
+            return;
+        }
+        request.setAttribute("credentials", credentials);
+
+        try {
+            CredentialsContext.set(credentials);
+            filterChain.doFilter(servletRequest, servletResponse);
+        } finally {
+            CredentialsContext.remove();
+        }
+    }
+
+    private boolean isResourceRequest(String requestURI) {
+        return requestURI.contains(".") || requestURI.equals("/");
+    }
+}
--- a/src/main/java/com/xuxd/kafka/console/interceptor/ContextSetFilter.java
+++ b/src/main/java/com/xuxd/kafka/console/interceptor/ContextSetFilter.java
@@ -1,4 +1,4 @@
-package com.xuxd.kafka.console.interceptor;
+package com.xuxd.kafka.console.filter;

 import com.xuxd.kafka.console.beans.ResponseData;
 import com.xuxd.kafka.console.beans.dos.ClusterInfoDO;
@@ -9,6 +9,7 @@ import com.xuxd.kafka.console.utils.ConvertUtil;
 import lombok.extern.slf4j.Slf4j;
 import org.apache.commons.lang3.StringUtils;
 import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.core.annotation.Order;
 import org.springframework.http.MediaType;

 import javax.servlet.*;
@@ -24,6 +25,7 @@ import java.util.Set;
 * @author xuxd
 * @date 2022-01-05 19:56:25
 **/
+@Order(100)
@WebFilter(filterName = "context-set-filter", urlPatterns = {"/acl/*", "/user/*", "/cluster/*", "/config/*", "/consumer/*", "/message/*", "/topic/*", "/op/*", "/client/*"})
@Slf4j
 public class ContextSetFilter implements Filter {
--- a/src/main/java/com/xuxd/kafka/console/filter/CredentialsContext.java
+++ b/src/main/java/com/xuxd/kafka/console/filter/CredentialsContext.java
@@ -0,0 +1,23 @@
+package com.xuxd.kafka.console.filter;
+
+import com.xuxd.kafka.console.beans.Credentials;
+
+/**
+ * @author: xuxd
+ * @date: 2023/5/17 23:02
+ **/
+public class CredentialsContext {
+    private static final ThreadLocal<Credentials> CREDENTIALS = new ThreadLocal<>();
+
+    public static void set(Credentials credentials) {
+        CREDENTIALS.set(credentials);
+    }
+
+    public static Credentials get() {
+        return CREDENTIALS.get();
+    }
+
+    public static void remove() {
+        CREDENTIALS.remove();
+    }
+}
--- a/src/main/java/com/xuxd/kafka/console/service/AuthService.java
+++ b/src/main/java/com/xuxd/kafka/console/service/AuthService.java
@@ -0,0 +1,15 @@
+package com.xuxd.kafka.console.service;
+
+import com.xuxd.kafka.console.beans.ResponseData;
+import com.xuxd.kafka.console.beans.dto.LoginUserDTO;
+
+/**
+ * @author: xuxd
+ * @date: 2023/5/14 19:00
+ **/
+public interface AuthService {
+
+    ResponseData login(LoginUserDTO userDTO);
+
+    boolean ownDataAuthority();
+}
--- a/src/main/java/com/xuxd/kafka/console/service/ClusterRoleRelationService.java
+++ b/src/main/java/com/xuxd/kafka/console/service/ClusterRoleRelationService.java
@@ -0,0 +1,19 @@
+package com.xuxd.kafka.console.service;
+
+import com.xuxd.kafka.console.beans.ResponseData;
+import com.xuxd.kafka.console.beans.dto.ClusterRoleRelationDTO;
+
+/**
+ * Cluster info and role relation.
+ *
+ * @author: xuxd
+ * @since: 2023/8/23 21:42
+ **/
+public interface ClusterRoleRelationService {
+
+    ResponseData select();
+
+    ResponseData add(ClusterRoleRelationDTO dto);
+
+    ResponseData delete(Long id);
+}
--- a/src/main/java/com/xuxd/kafka/console/service/ClusterService.java
+++ b/src/main/java/com/xuxd/kafka/console/service/ClusterService.java
@@ -12,6 +12,8 @@ import com.xuxd.kafka.console.beans.dos.ClusterInfoDO;
 public interface ClusterService {
    ResponseData getClusterInfo();

+    ResponseData getClusterInfoListForSelect();
+
    ResponseData getClusterInfoList();

    ResponseData addClusterInfo(ClusterInfoDO infoDO);
--- a/src/main/java/com/xuxd/kafka/console/service/MessageService.java
+++ b/src/main/java/com/xuxd/kafka/console/service/MessageService.java
@@ -1,6 +1,7 @@
 package com.xuxd.kafka.console.service;

 import com.xuxd.kafka.console.beans.QueryMessage;
+import com.xuxd.kafka.console.beans.dto.QuerySendStatisticsDTO;
 import com.xuxd.kafka.console.beans.ResponseData;
 import com.xuxd.kafka.console.beans.SendMessage;

@@ -24,7 +25,11 @@ public interface MessageService {

    ResponseData send(SendMessage message);

+    ResponseData sendWithHeader(SendMessage message);
+
    ResponseData resend(SendMessage message);

    ResponseData delete(List<QueryMessage> messages);
+
+    ResponseData sendStatisticsByTime(QuerySendStatisticsDTO request);
 }
--- a/src/main/java/com/xuxd/kafka/console/service/UserManageService.java
+++ b/src/main/java/com/xuxd/kafka/console/service/UserManageService.java
@@ -0,0 +1,40 @@
+package com.xuxd.kafka.console.service;
+
+import com.xuxd.kafka.console.beans.ResponseData;
+import com.xuxd.kafka.console.beans.dto.SysPermissionDTO;
+import com.xuxd.kafka.console.beans.dto.SysRoleDTO;
+import com.xuxd.kafka.console.beans.dto.SysUserDTO;
+
+/**
+ * 登录用户权限管理.
+ *
+ * @author: xuxd
+ * @date: 2023/4/11 21:24
+ **/
+public interface UserManageService {
+
+    /**
+     * 增加权限
+     */
+    ResponseData addPermission(SysPermissionDTO permissionDTO);
+
+    ResponseData addOrUdpateRole(SysRoleDTO roleDTO);
+
+    ResponseData addOrUpdateUser(SysUserDTO userDTO);
+
+    ResponseData selectRole();
+
+    ResponseData selectPermission();
+
+    ResponseData selectUser();
+
+    ResponseData updateUser(SysUserDTO userDTO);
+
+    ResponseData updateRole(SysRoleDTO roleDTO);
+
+    ResponseData deleteRole(Long id);
+
+    ResponseData deleteUser(Long id);
+
+    ResponseData updatePassword(SysUserDTO userDTO);
+}
--- a/src/main/java/com/xuxd/kafka/console/service/impl/AuthServiceImpl.java
+++ b/src/main/java/com/xuxd/kafka/console/service/impl/AuthServiceImpl.java
@@ -0,0 +1,108 @@
+package com.xuxd.kafka.console.service.impl;
+
+import com.baomidou.mybatisplus.core.conditions.query.QueryWrapper;
+import com.xuxd.kafka.console.beans.Credentials;
+import com.xuxd.kafka.console.beans.LoginResult;
+import com.xuxd.kafka.console.beans.ResponseData;
+import com.xuxd.kafka.console.beans.dos.SysRoleDO;
+import com.xuxd.kafka.console.beans.dos.SysUserDO;
+import com.xuxd.kafka.console.beans.dto.LoginUserDTO;
+import com.xuxd.kafka.console.cache.RolePermCache;
+import com.xuxd.kafka.console.config.AuthConfig;
+import com.xuxd.kafka.console.dao.SysRoleMapper;
+import com.xuxd.kafka.console.dao.SysUserMapper;
+import com.xuxd.kafka.console.service.AuthService;
+import com.xuxd.kafka.console.utils.AuthUtil;
+import com.xuxd.kafka.console.utils.UUIDStrUtil;
+import lombok.extern.slf4j.Slf4j;
+import org.apache.commons.lang3.StringUtils;
+import org.springframework.stereotype.Service;
+
+import java.util.ArrayList;
+import java.util.Arrays;
+import java.util.List;
+import java.util.stream.Collectors;
+
+/**
+ * @author: xuxd
+ * @date: 2023/5/14 19:01
+ **/
+@Slf4j
+@Service
+public class AuthServiceImpl implements AuthService {
+
+    private final SysUserMapper userMapper;
+
+    private final SysRoleMapper roleMapper;
+
+    private final AuthConfig authConfig;
+
+    private final RolePermCache rolePermCache;
+
+    public AuthServiceImpl(SysUserMapper userMapper,
+                           SysRoleMapper roleMapper,
+                           AuthConfig authConfig,
+                           RolePermCache rolePermCache) {
+        this.userMapper = userMapper;
+        this.roleMapper = roleMapper;
+        this.authConfig = authConfig;
+        this.rolePermCache = rolePermCache;
+    }
+
+    @Override
+    public ResponseData login(LoginUserDTO userDTO) {
+        QueryWrapper<SysUserDO> queryWrapper = new QueryWrapper<>();
+        queryWrapper.eq("username", userDTO.getUsername());
+        SysUserDO userDO = userMapper.selectOne(queryWrapper);
+        if (userDO == null) {
+            return ResponseData.create().failed("用户名/密码不正确");
+        }
+        String encrypt = UUIDStrUtil.generate(userDTO.getPassword(), userDO.getSalt());
+        if (!userDO.getPassword().equals(encrypt)) {
+            return ResponseData.create().failed("用户名/密码不正确");
+        }
+        Credentials credentials = new Credentials();
+        credentials.setUsername(userDO.getUsername());
+        credentials.setExpiration(System.currentTimeMillis() + authConfig.getExpireHours() * 3600 * 1000);
+        String token = AuthUtil.generateToken(authConfig.getSecret(), credentials);
+        LoginResult loginResult = new LoginResult();
+        List<String> permissions = new ArrayList<>();
+        String roleIds = userDO.getRoleIds();
+        if (StringUtils.isNotEmpty(roleIds)) {
+            List<String> roleIdList = Arrays.stream(roleIds.split(",")).map(String::trim).filter(StringUtils::isNotEmpty).collect(Collectors.toList());
+            roleIdList.forEach(roleId -> {
+                Long rId = Long.valueOf(roleId);
+                SysRoleDO roleDO = roleMapper.selectById(rId);
+                String permissionIds = roleDO.getPermissionIds();
+                if (StringUtils.isNotEmpty(permissionIds)) {
+                    List<Long> permIds = Arrays.stream(permissionIds.split(",")).map(String::trim).
+                            filter(StringUtils::isNotEmpty).map(Long::valueOf).collect(Collectors.toList());
+                    permIds.forEach(id -> {
+                        String permission = rolePermCache.getPermCache().get(id).getPermission();
+                        if (StringUtils.isNotEmpty(permission)) {
+                            permissions.add(permission);
+                        } else {
+                            log.error("角色：{}，权限id: {}，不存在", roleId, id);
+                        }
+                    });
+                }
+            });
+        }
+        loginResult.setToken(token);
+        loginResult.setPermissions(permissions);
+        return ResponseData.create().data(loginResult).success();
+    }
+
+    @Override
+    public boolean ownDataAuthority() {
+        if (!authConfig.isEnable()) {
+            return true;
+        }
+        if (!authConfig.isEnableClusterAuthority()) {
+            return true;
+        }
+
+        return false;
+    }
+
+}
--- a/src/main/java/com/xuxd/kafka/console/service/impl/ClusterRoleRelationServiceImpl.java
+++ b/src/main/java/com/xuxd/kafka/console/service/impl/ClusterRoleRelationServiceImpl.java
@@ -0,0 +1,115 @@
+package com.xuxd.kafka.console.service.impl;
+
+import com.baomidou.mybatisplus.core.conditions.query.QueryWrapper;
+import com.xuxd.kafka.console.beans.ResponseData;
+import com.xuxd.kafka.console.beans.dos.ClusterInfoDO;
+import com.xuxd.kafka.console.beans.dos.ClusterRoleRelationDO;
+import com.xuxd.kafka.console.beans.dos.SysRoleDO;
+import com.xuxd.kafka.console.beans.dto.ClusterRoleRelationDTO;
+import com.xuxd.kafka.console.beans.vo.ClusterRoleRelationVO;
+import com.xuxd.kafka.console.config.AuthConfig;
+import com.xuxd.kafka.console.dao.ClusterInfoMapper;
+import com.xuxd.kafka.console.dao.ClusterRoleRelationMapper;
+import com.xuxd.kafka.console.dao.SysRoleMapper;
+import com.xuxd.kafka.console.service.ClusterRoleRelationService;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.stereotype.Service;
+
+import java.util.Collections;
+import java.util.List;
+import java.util.Map;
+import java.util.function.Function;
+import java.util.stream.Collectors;
+
+/**
+ * @author: xuxd
+ * @since: 2023/8/23 21:50
+ **/
+@Slf4j
+@Service
+public class ClusterRoleRelationServiceImpl implements ClusterRoleRelationService {
+
+    private final ClusterRoleRelationMapper mapper;
+
+    private final SysRoleMapper roleMapper;
+
+    private final ClusterInfoMapper clusterInfoMapper;
+
+    private final AuthConfig authConfig;
+
+    public ClusterRoleRelationServiceImpl(final ClusterRoleRelationMapper mapper,
+                                          final SysRoleMapper roleMapper,
+                                          final ClusterInfoMapper clusterInfoMapper,
+                                          final AuthConfig authConfig) {
+        this.mapper = mapper;
+        this.roleMapper = roleMapper;
+        this.clusterInfoMapper = clusterInfoMapper;
+        this.authConfig = authConfig;
+    }
+
+    @Override
+    public ResponseData select() {
+        if (!authConfig.isEnableClusterAuthority()) {
+            return ResponseData.create().data(Collections.emptyList()).success();
+        }
+        List<ClusterRoleRelationDO> dos = mapper.selectList(null);
+
+        Map<Long, SysRoleDO> roleMap = roleMapper.selectList(null).stream().
+                collect(Collectors.toMap(SysRoleDO::getId, Function.identity(), (e1, e2) -> e2));
+        Map<Long, ClusterInfoDO> clusterMap = clusterInfoMapper.selectList(null).stream().
+                collect(Collectors.toMap(ClusterInfoDO::getId, Function.identity(), (e1, e2) -> e2));
+        List<ClusterRoleRelationVO> vos = dos.stream().
+                map(aDo -> {
+                    ClusterRoleRelationVO vo = ClusterRoleRelationVO.from(aDo);
+                    if (roleMap.containsKey(vo.getRoleId())) {
+                        vo.setRoleName(roleMap.get(vo.getRoleId()).getRoleName());
+                    }
+                    if (clusterMap.containsKey(vo.getClusterInfoId())) {
+                        vo.setClusterName(clusterMap.get(vo.getClusterInfoId()).getClusterName());
+                    }
+                    return vo;
+                }).collect(Collectors.toList());
+        return ResponseData.create().data(vos).success();
+    }
+
+    @Override
+    public ResponseData add(ClusterRoleRelationDTO dto) {
+        if (!authConfig.isEnableClusterAuthority()) {
+            return ResponseData.create().failed("未启用集群的数据权限管理");
+        }
+        ClusterRoleRelationDO relationDO = dto.toDO();
+        if (relationDO.getClusterInfoId() == -1L) {
+            // all insert
+            for (ClusterInfoDO clusterInfoDO : clusterInfoMapper.selectList(null)) {
+                ClusterRoleRelationDO aDo = new ClusterRoleRelationDO();
+                aDo.setRoleId(relationDO.getRoleId());
+                aDo.setClusterInfoId(clusterInfoDO.getId());
+                insertIfNotExist(aDo);
+            }
+        } else {
+            insertIfNotExist(relationDO);
+        }
+        return ResponseData.create().success();
+    }
+
+    @Override
+    public ResponseData delete(Long id) {
+        if (!authConfig.isEnableClusterAuthority()) {
+            return ResponseData.create().failed("未启用集群的数据权限管理");
+        }
+        mapper.deleteById(id);
+        return ResponseData.create().success();
+    }
+
+    private void insertIfNotExist(ClusterRoleRelationDO relationDO) {
+        QueryWrapper<ClusterRoleRelationDO> queryWrapper = new QueryWrapper<>();
+        queryWrapper.eq("role_id", relationDO.getRoleId()).
+                eq("cluster_info_id", relationDO.getClusterInfoId());
+        Integer count = mapper.selectCount(queryWrapper);
+        if (count > 0) {
+            log.info("已存在，不再增加：{}", relationDO);
+            return;
+        }
+        mapper.insert(relationDO);
+    }
+}
--- a/src/main/java/com/xuxd/kafka/console/service/impl/ClusterServiceImpl.java
+++ b/src/main/java/com/xuxd/kafka/console/service/impl/ClusterServiceImpl.java
@@ -3,15 +3,17 @@ package com.xuxd.kafka.console.service.impl;
 import com.baomidou.mybatisplus.core.conditions.query.QueryWrapper;
 import com.xuxd.kafka.console.beans.BrokerNode;
 import com.xuxd.kafka.console.beans.ClusterInfo;
+import com.xuxd.kafka.console.beans.Credentials;
 import com.xuxd.kafka.console.beans.ResponseData;
 import com.xuxd.kafka.console.beans.dos.ClusterInfoDO;
+import com.xuxd.kafka.console.beans.dos.ClusterRoleRelationDO;
 import com.xuxd.kafka.console.beans.vo.BrokerApiVersionVO;
 import com.xuxd.kafka.console.beans.vo.ClusterInfoVO;
+import com.xuxd.kafka.console.config.AuthConfig;
 import com.xuxd.kafka.console.dao.ClusterInfoMapper;
+import com.xuxd.kafka.console.dao.ClusterRoleRelationMapper;
+import com.xuxd.kafka.console.filter.CredentialsContext;
 import com.xuxd.kafka.console.service.ClusterService;
-
-import java.util.*;
-import java.util.stream.Collectors;
 import kafka.console.ClusterConsole;
 import lombok.extern.slf4j.Slf4j;
 import org.apache.commons.collections.CollectionUtils;
@@ -21,6 +23,9 @@ import org.apache.kafka.common.Node;
 import org.springframework.beans.factory.ObjectProvider;
 import org.springframework.stereotype.Service;

+import java.util.*;
+import java.util.stream.Collectors;
+
 /**
 * kafka-console-ui.
 *
@@ -35,13 +40,22 @@ public class ClusterServiceImpl implements ClusterService {

    private final ClusterInfoMapper clusterInfoMapper;

-    public ClusterServiceImpl(ObjectProvider<ClusterConsole> clusterConsole,
-        ObjectProvider<ClusterInfoMapper> clusterInfoMapper) {
+    private final AuthConfig authConfig;
+
+    private final ClusterRoleRelationMapper clusterRoleRelationMapper;
+
+    public ClusterServiceImpl(final ObjectProvider<ClusterConsole> clusterConsole,
+                              final ObjectProvider<ClusterInfoMapper> clusterInfoMapper,
+                              final AuthConfig authConfig,
+                              final ClusterRoleRelationMapper clusterRoleRelationMapper) {
        this.clusterConsole = clusterConsole.getIfAvailable();
        this.clusterInfoMapper = clusterInfoMapper.getIfAvailable();
+        this.authConfig = authConfig;
+        this.clusterRoleRelationMapper = clusterRoleRelationMapper;
    }

-    @Override public ResponseData getClusterInfo() {
+    @Override
+    public ResponseData getClusterInfo() {
        ClusterInfo clusterInfo = clusterConsole.clusterInfo();
        Set<BrokerNode> nodes = clusterInfo.getNodes();
        if (nodes == null) {
@@ -52,27 +66,90 @@ public class ClusterServiceImpl implements ClusterService {
        return ResponseData.create().data(clusterInfo).success();
    }

-    @Override public ResponseData getClusterInfoList() {
-        return ResponseData.create().data(clusterInfoMapper.selectList(null)
-            .stream().map(ClusterInfoVO::from).collect(Collectors.toList())).success();
+    @Override
+    public ResponseData getClusterInfoListForSelect() {
+        return ResponseData.create().
+                data(clusterInfoMapper.selectList(null).stream().
+                        map(e -> {
+                            ClusterInfoVO vo = ClusterInfoVO.from(e);
+                            vo.setProperties(Collections.emptyList());
+                            vo.setAddress("");
+                            return vo;
+                        }).collect(Collectors.toList())).success();
    }

-    @Override public ResponseData addClusterInfo(ClusterInfoDO infoDO) {
+    @Override
+    public ResponseData getClusterInfoList() {
+        // 如果开启权限管理，当前用户没有集群切换->集群信息的编辑权限，隐藏集群的属性信息，避免ACL属性暴露出来
+        Credentials credentials = CredentialsContext.get();
+        boolean enableClusterAuthority = credentials != null && authConfig.isEnableClusterAuthority();
+        final Set<Long> clusterInfoIdSet = new HashSet<>();
+        if (enableClusterAuthority) {
+            List<Long> roleIdList = credentials.getRoleIdList();
+            QueryWrapper<ClusterRoleRelationDO> queryWrapper = new QueryWrapper<>();
+            queryWrapper.in("role_id", roleIdList);
+            clusterInfoIdSet.addAll(clusterRoleRelationMapper.selectList(queryWrapper).
+                    stream().map(ClusterRoleRelationDO::getClusterInfoId).
+                    collect(Collectors.toSet()));
+        }
+        return ResponseData.create().
+                data(clusterInfoMapper.selectList(null).stream().
+                        filter(e -> !enableClusterAuthority || clusterInfoIdSet.contains(e.getId())).
+                        map(e -> {
+                            ClusterInfoVO vo = ClusterInfoVO.from(e);
+                            if (credentials != null && credentials.isHideClusterProperty()) {
+                                vo.setProperties(Collections.emptyList());
+                            }
+                            return vo;
+                        }).collect(Collectors.toList())).success();
+    }
+
+    @Override
+    public ResponseData addClusterInfo(ClusterInfoDO infoDO) {
        QueryWrapper<ClusterInfoDO> queryWrapper = new QueryWrapper<>();
        queryWrapper.eq("cluster_name", infoDO.getClusterName());
        if (clusterInfoMapper.selectCount(queryWrapper) > 0) {
            return ResponseData.create().failed("cluster name exist.");
        }
        clusterInfoMapper.insert(infoDO);
+        Credentials credentials = CredentialsContext.get();
+        boolean enableClusterAuthority = credentials != null && authConfig.isEnableClusterAuthority();
+        if (enableClusterAuthority) {
+            for (Long roleId : credentials.getRoleIdList()) {
+                // 开启集群的数据权限控制，新增集群的时候必须要录入一条信息
+                QueryWrapper<ClusterRoleRelationDO> relationQueryWrapper = new QueryWrapper<>();
+                relationQueryWrapper.eq("role_id", roleId).
+                        eq("cluster_info_id", infoDO.getId());
+                Integer count = clusterRoleRelationMapper.selectCount(relationQueryWrapper);
+                if (count <= 0) {
+                    ClusterRoleRelationDO relationDO = new ClusterRoleRelationDO();
+                    relationDO.setRoleId(roleId);
+                    relationDO.setClusterInfoId(infoDO.getId());
+                    clusterRoleRelationMapper.insert(relationDO);
+                }
+            }
+        }
        return ResponseData.create().success();
    }

-    @Override public ResponseData deleteClusterInfo(Long id) {
+    @Override
+    public ResponseData deleteClusterInfo(Long id) {
        clusterInfoMapper.deleteById(id);
+        Credentials credentials = CredentialsContext.get();
+        boolean enableClusterAuthority = credentials != null && authConfig.isEnableClusterAuthority();
+        if (enableClusterAuthority) {
+            for (Long roleId : credentials.getRoleIdList()) {
+                // 开启集群的数据权限控制，删除集群的时候必须要删除对应的数据权限
+                QueryWrapper<ClusterRoleRelationDO> relationQueryWrapper = new QueryWrapper<>();
+                relationQueryWrapper.eq("role_id", roleId).eq("cluster_info_id", id);
+                clusterRoleRelationMapper.delete(relationQueryWrapper);
+            }
+        }
        return ResponseData.create().success();
    }

-    @Override public ResponseData updateClusterInfo(ClusterInfoDO infoDO) {
+    @Override
+    public ResponseData updateClusterInfo(ClusterInfoDO infoDO) {
        if (infoDO.getProperties() == null) {
            // null 的话不更新，这个是bug，设置为空字符串解决
            infoDO.setProperties("");
@@ -81,7 +158,8 @@ public class ClusterServiceImpl implements ClusterService {
        return ResponseData.create().success();
    }

-    @Override public ResponseData peekClusterInfo() {
+    @Override
+    public ResponseData peekClusterInfo() {
        List<ClusterInfoDO> dos = clusterInfoMapper.selectList(null);
        if (CollectionUtils.isEmpty(dos)) {
            return ResponseData.create().failed("No Cluster Info.");
@@ -89,7 +167,8 @@ public class ClusterServiceImpl implements ClusterService {
        return ResponseData.create().data(dos.stream().findFirst().map(ClusterInfoVO::from)).success();
    }

-    @Override public ResponseData getBrokerApiVersionInfo() {
+    @Override
+    public ResponseData getBrokerApiVersionInfo() {
        HashMap<Node, NodeApiVersions> map = clusterConsole.listBrokerVersionInfo();
        List<BrokerApiVersionVO> list = new ArrayList<>(map.size());
        map.forEach(((node, versions) -> {
--- a/src/main/java/com/xuxd/kafka/console/service/impl/MessageServiceImpl.java
+++ b/src/main/java/com/xuxd/kafka/console/service/impl/MessageServiceImpl.java
@@ -4,20 +4,13 @@ import com.xuxd.kafka.console.beans.MessageFilter;
 import com.xuxd.kafka.console.beans.QueryMessage;
 import com.xuxd.kafka.console.beans.ResponseData;
 import com.xuxd.kafka.console.beans.SendMessage;
+import com.xuxd.kafka.console.beans.dto.QuerySendStatisticsDTO;
 import com.xuxd.kafka.console.beans.enums.FilterType;
 import com.xuxd.kafka.console.beans.vo.ConsumerRecordVO;
 import com.xuxd.kafka.console.beans.vo.MessageDetailVO;
+import com.xuxd.kafka.console.beans.vo.QuerySendStatisticsVO;
 import com.xuxd.kafka.console.service.ConsumerService;
 import com.xuxd.kafka.console.service.MessageService;
-import java.util.Collection;
-import java.util.Collections;
-import java.util.HashMap;
-import java.util.HashSet;
-import java.util.LinkedList;
-import java.util.List;
-import java.util.Map;
-import java.util.Set;
-import java.util.stream.Collectors;
 import kafka.console.ConsumerConsole;
 import kafka.console.MessageConsole;
 import kafka.console.TopicConsole;
@@ -29,14 +22,7 @@ import org.apache.kafka.clients.admin.TopicDescription;
 import org.apache.kafka.clients.consumer.ConsumerRecord;
 import org.apache.kafka.clients.producer.ProducerRecord;
 import org.apache.kafka.common.TopicPartition;
-import org.apache.kafka.common.serialization.ByteArrayDeserializer;
-import org.apache.kafka.common.serialization.BytesDeserializer;
-import org.apache.kafka.common.serialization.Deserializer;
-import org.apache.kafka.common.serialization.DoubleDeserializer;
-import org.apache.kafka.common.serialization.FloatDeserializer;
-import org.apache.kafka.common.serialization.IntegerDeserializer;
-import org.apache.kafka.common.serialization.LongDeserializer;
-import org.apache.kafka.common.serialization.StringDeserializer;
+import org.apache.kafka.common.serialization.*;
 import org.springframework.beans.BeansException;
 import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.context.ApplicationContext;
@@ -44,6 +30,9 @@ import org.springframework.context.ApplicationContextAware;
 import org.springframework.stereotype.Service;
 import scala.Tuple2;

+import java.util.*;
+import java.util.stream.Collectors;
+
 /**
 * kafka-console-ui.
 *
@@ -79,8 +68,9 @@ public class MessageServiceImpl implements MessageService, ApplicationContextAwa

    public static String defaultDeserializer = "String";

-    @Override public ResponseData searchByTime(QueryMessage queryMessage) {
-        int maxNums = 5000;
+    @Override
+    public ResponseData searchByTime(QueryMessage queryMessage) {
+        int maxNums = queryMessage.getFilterNumber() <= 0 ? 5000 : queryMessage.getFilterNumber();

        Object searchContent = null;
        String headerKey = null;
@@ -144,7 +134,7 @@ public class MessageServiceImpl implements MessageService, ApplicationContextAwa
        List<ConsumerRecord<byte[], byte[]>> records = tuple2._1();
        log.info("search message by time, cost time: {}", (System.currentTimeMillis() - startTime));
        List<ConsumerRecordVO> vos = records.stream().filter(record -> record.timestamp() <= queryMessage.getEndTime())
-            .map(ConsumerRecordVO::fromConsumerRecord).collect(Collectors.toList());
+                .map(ConsumerRecordVO::fromConsumerRecord).collect(Collectors.toList());
        Map<String, Object> res = new HashMap<>();
        vos = vos.subList(0, Math.min(maxNums, vos.size()));
        res.put("maxNum", maxNums);
@@ -154,13 +144,15 @@ public class MessageServiceImpl implements MessageService, ApplicationContextAwa
        return ResponseData.create().data(res).success();
    }

-    @Override public ResponseData searchByOffset(QueryMessage queryMessage) {
+    @Override
+    public ResponseData searchByOffset(QueryMessage queryMessage) {
        Map<TopicPartition, ConsumerRecord<byte[], byte[]>> recordMap = searchRecordByOffset(queryMessage);

        return ResponseData.create().data(recordMap.values().stream().map(ConsumerRecordVO::fromConsumerRecord).collect(Collectors.toList())).success();
    }

-    @Override public ResponseData searchDetail(QueryMessage queryMessage) {
+    @Override
+    public ResponseData searchDetail(QueryMessage queryMessage) {
        if (queryMessage.getPartition() == -1) {
            throw new IllegalArgumentException();
        }
@@ -219,16 +211,35 @@ public class MessageServiceImpl implements MessageService, ApplicationContextAwa
        return ResponseData.create().failed("Not found message detail.");
    }

-    @Override public ResponseData deserializerList() {
+    @Override
+    public ResponseData deserializerList() {
        return ResponseData.create().data(deserializerDict.keySet()).success();
    }

-    @Override public ResponseData send(SendMessage message) {
+    @Override
+    public ResponseData send(SendMessage message) {
        messageConsole.send(message.getTopic(), message.getPartition(), message.getKey(), message.getBody(), message.getNum());
        return ResponseData.create().success();
    }

-    @Override public ResponseData resend(SendMessage message) {
+    @Override
+    public ResponseData sendWithHeader(SendMessage message) {
+        String[] headerKeys = message.getHeaders().stream().map(SendMessage.Header::getHeaderKey).toArray(String[]::new);
+        String[] headerValues = message.getHeaders().stream().map(SendMessage.Header::getHeaderValue).toArray(String[]::new);
+//        log.info("send with header:keys{},values{}",headerKeys, headerValues);
+        Tuple2<Object, String> tuple2 = messageConsole.send(message.getTopic(),
+                message.getPartition(),
+                message.getKey(),
+                message.getBody(),
+                message.getNum(),
+                headerKeys,
+                headerValues,
+                message.isSync());
+        return (boolean) tuple2._1 ? ResponseData.create().success() : ResponseData.create().failed(tuple2._2);
+    }
+
+    @Override
+    public ResponseData resend(SendMessage message) {
        TopicPartition partition = new TopicPartition(message.getTopic(), message.getPartition());
        Map<TopicPartition, Object> offsetTable = new HashMap<>(1, 1.0f);
        offsetTable.put(partition, message.getOffset());
@@ -255,6 +266,44 @@ public class MessageServiceImpl implements MessageService, ApplicationContextAwa
        return success ? ResponseData.create().success() : ResponseData.create().failed(tuple2._2());
    }

+    @Override
+    public ResponseData sendStatisticsByTime(QuerySendStatisticsDTO request) {
+
+        if (request.getPartition() != null && request.getPartition().contains(-1)) {
+            request.setPartition(Collections.emptySet());
+        }
+
+        Map<Integer, Long> startOffsetMap = topicConsole.getOffsetForTimestamp(request.getTopic(), request.getStartTime().getTime()).
+                entrySet().stream().collect(Collectors.toMap(e -> e.getKey().partition(), Map.Entry::getValue, (e1, e2) -> e2));
+        Map<Integer, Long> endOffsetMap = topicConsole.getOffsetForTimestamp(request.getTopic(), request.getEndTime().getTime()).
+                entrySet().stream().collect(Collectors.toMap(e -> e.getKey().partition(), Map.Entry::getValue, (e1, e2) -> e2));
+
+        Map<Integer, Long> diffOffsetMap = endOffsetMap.entrySet().stream().
+                collect(Collectors.toMap(e -> e.getKey(),
+                        e -> Arrays.asList(e.getValue(), startOffsetMap.getOrDefault(e.getKey(), 0L)).
+                                stream().reduce((a, b) -> a - b).get()));
+
+        if (CollectionUtils.isNotEmpty(request.getPartition())) {
+            Iterator<Map.Entry<Integer, Long>> iterator = diffOffsetMap.entrySet().iterator();
+            while (iterator.hasNext()) {
+                Integer partition = iterator.next().getKey();
+                if (!request.getPartition().contains(partition)) {
+                    iterator.remove();
+                }
+            }
+        }
+
+        Long total = diffOffsetMap.values().stream().reduce(0L, (a, b) -> a + b);
+        QuerySendStatisticsVO vo = new QuerySendStatisticsVO();
+        vo.setTopic(request.getTopic());
+        vo.setTotal(total);
+        vo.setDetail(diffOffsetMap);
+        vo.setStartTime(QuerySendStatisticsVO.format(request.getStartTime()));
+        vo.setEndTime(QuerySendStatisticsVO.format(request.getEndTime()));
+
+        return ResponseData.create().data(vo).success();
+    }
+
    private Map<TopicPartition, ConsumerRecord<byte[], byte[]>> searchRecordByOffset(QueryMessage queryMessage) {
        Set<TopicPartition> partitions = getPartitions(queryMessage);

@@ -276,13 +325,14 @@ public class MessageServiceImpl implements MessageService, ApplicationContextAwa
                throw new IllegalArgumentException("Can not find topic info.");
            }
            Set<TopicPartition> set = list.get(0).partitions().stream()
-                .map(tp -> new TopicPartition(queryMessage.getTopic(), tp.partition())).collect(Collectors.toSet());
+                    .map(tp -> new TopicPartition(queryMessage.getTopic(), tp.partition())).collect(Collectors.toSet());
            partitions.addAll(set);
        }
        return partitions;
    }

-    @Override public void setApplicationContext(ApplicationContext context) throws BeansException {
+    @Override
+    public void setApplicationContext(ApplicationContext context) throws BeansException {
        this.applicationContext = context;
    }
 }
--- a/src/main/java/com/xuxd/kafka/console/service/impl/UserManageServiceImpl.java
+++ b/src/main/java/com/xuxd/kafka/console/service/impl/UserManageServiceImpl.java
@@ -0,0 +1,230 @@
+package com.xuxd.kafka.console.service.impl;
+
+import com.baomidou.mybatisplus.core.conditions.query.QueryWrapper;
+import com.xuxd.kafka.console.beans.ResponseData;
+import com.xuxd.kafka.console.beans.RolePermUpdateEvent;
+import com.xuxd.kafka.console.beans.dos.SysPermissionDO;
+import com.xuxd.kafka.console.beans.dos.SysRoleDO;
+import com.xuxd.kafka.console.beans.dos.SysUserDO;
+import com.xuxd.kafka.console.beans.dto.SysPermissionDTO;
+import com.xuxd.kafka.console.beans.dto.SysRoleDTO;
+import com.xuxd.kafka.console.beans.dto.SysUserDTO;
+import com.xuxd.kafka.console.beans.vo.SysPermissionVO;
+import com.xuxd.kafka.console.beans.vo.SysRoleVO;
+import com.xuxd.kafka.console.beans.vo.SysUserVO;
+import com.xuxd.kafka.console.dao.SysPermissionMapper;
+import com.xuxd.kafka.console.dao.SysRoleMapper;
+import com.xuxd.kafka.console.dao.SysUserMapper;
+import com.xuxd.kafka.console.service.UserManageService;
+import com.xuxd.kafka.console.utils.RandomStringUtil;
+import com.xuxd.kafka.console.utils.UUIDStrUtil;
+import lombok.extern.slf4j.Slf4j;
+import org.apache.commons.lang3.StringUtils;
+import org.springframework.beans.factory.ObjectProvider;
+import org.springframework.context.ApplicationEventPublisher;
+import org.springframework.stereotype.Service;
+
+import java.util.*;
+import java.util.function.Function;
+import java.util.stream.Collectors;
+
+/**
+ * @author: xuxd
+ * @date: 2023/4/11 21:24
+ **/
+@Slf4j
+@Service
+public class UserManageServiceImpl implements UserManageService {
+
+    private final SysUserMapper userMapper;
+
+    private final SysRoleMapper roleMapper;
+
+    private final SysPermissionMapper permissionMapper;
+
+    private final ApplicationEventPublisher publisher;
+
+    public UserManageServiceImpl(ObjectProvider<SysUserMapper> userMapper,
+                                 ObjectProvider<SysRoleMapper> roleMapper,
+                                 ObjectProvider<SysPermissionMapper> permissionMapper,
+                                 ApplicationEventPublisher publisher) {
+        this.userMapper = userMapper.getIfAvailable();
+        this.roleMapper = roleMapper.getIfAvailable();
+        this.permissionMapper = permissionMapper.getIfAvailable();
+        this.publisher = publisher;
+    }
+
+    @Override
+    public ResponseData addPermission(SysPermissionDTO permissionDTO) {
+        permissionMapper.insert(permissionDTO.toSysPermissionDO());
+        return ResponseData.create().success();
+    }
+
+    @Override
+    public ResponseData addOrUdpateRole(SysRoleDTO roleDTO) {
+        SysRoleDO roleDO = roleDTO.toDO();
+        if (roleDO.getId() == null) {
+            roleMapper.insert(roleDO);
+        } else {
+            roleMapper.updateById(roleDO);
+        }
+        publisher.publishEvent(new RolePermUpdateEvent(this));
+        return ResponseData.create().success();
+    }
+
+    @Override
+    public ResponseData addOrUpdateUser(SysUserDTO userDTO) {
+
+        if (userDTO.getId() == null) {
+            if (StringUtils.isEmpty(userDTO.getPassword())) {
+                userDTO.setPassword(RandomStringUtil.random6Str());
+            }
+            SysUserDO userDO = userDTO.toDO();
+            QueryWrapper<SysUserDO> queryWrapper = new QueryWrapper<>();
+            queryWrapper.eq(true, "username", userDO.getUsername());
+            SysUserDO exist = userMapper.selectOne(queryWrapper);
+            if (exist != null) {
+                return ResponseData.create().failed("用户已存在：" + userDO.getUsername());
+            }
+            userDO.setSalt(UUIDStrUtil.random());
+            userDO.setPassword(UUIDStrUtil.generate(userDTO.getPassword(), userDO.getSalt()));
+            userMapper.insert(userDO);
+        } else {
+            SysUserDO userDO = userMapper.selectById(userDTO.getId());
+            if (userDO == null) {
+                log.error("查不到用户: {}", userDTO.getId());
+                return ResponseData.create().failed("Unknown User.");
+            }
+            // 判断是否更新密码
+            if (userDTO.getResetPassword()) {
+                userDTO.setPassword(RandomStringUtil.random6Str());
+                userDO.setSalt(UUIDStrUtil.random());
+                userDO.setPassword(UUIDStrUtil.generate(userDTO.getPassword(), userDO.getSalt()));
+            }
+            userDO.setRoleIds(userDTO.getRoleIds());
+            userDO.setUsername(userDTO.getUsername());
+            userMapper.updateById(userDO);
+        }
+        return ResponseData.create().data(userDTO.getPassword()).success();
+    }
+
+    @Override
+    public ResponseData selectRole() {
+        List<SysRoleDO> dos = roleMapper.selectList(new QueryWrapper<>());
+        return ResponseData.create().data(dos.stream().map(SysRoleVO::from).collect(Collectors.toList())).success();
+    }
+
+    @Override
+    public ResponseData selectPermission() {
+        QueryWrapper<SysPermissionDO> queryWrapper = new QueryWrapper<>();
+
+        List<SysPermissionDO> permissionDOS = permissionMapper.selectList(queryWrapper);
+        List<SysPermissionVO> vos = new ArrayList<>();
+        Map<Long, Integer> posMap = new HashMap<>();
+        Map<Long, SysPermissionVO> voMap = new HashMap<>();
+
+        Iterator<SysPermissionDO> iterator = permissionDOS.iterator();
+        while (iterator.hasNext()) {
+            SysPermissionDO permissionDO = iterator.next();
+            if (permissionDO.getParentId() == null) {
+                // 菜单
+                SysPermissionVO vo = SysPermissionVO.from(permissionDO);
+                vos.add(vo);
+                int index = vos.size() - 1;
+                // 记录位置
+                posMap.put(permissionDO.getId(), index);
+                iterator.remove();
+            }
+        }
+        // 上面把菜单都处理过了
+        while (!permissionDOS.isEmpty()) {
+            iterator = permissionDOS.iterator();
+            while (iterator.hasNext()) {
+                SysPermissionDO permissionDO = iterator.next();
+                Long parentId = permissionDO.getParentId();
+                if (posMap.containsKey(parentId)) {
+                    // 菜单下的按扭
+                    SysPermissionVO vo = SysPermissionVO.from(permissionDO);
+                    Integer index = posMap.get(parentId);
+                    SysPermissionVO menuVO = vos.get(index);
+                    if (menuVO.getChildren() == null) {
+                        menuVO.setChildren(new ArrayList<>());
+                    }
+                    menuVO.getChildren().add(vo);
+                    voMap.put(permissionDO.getId(), vo);
+                    iterator.remove();
+                } else if (voMap.containsKey(parentId)) {
+                    // 按钮下的按扭
+                    SysPermissionVO vo = SysPermissionVO.from(permissionDO);
+                    SysPermissionVO buttonVO = voMap.get(parentId);
+                    if (buttonVO.getChildren() == null) {
+                        buttonVO.setChildren(new ArrayList<>());
+                    }
+                    buttonVO.getChildren().add(vo);
+                    voMap.put(permissionDO.getId(), vo);
+                    iterator.remove();
+                }
+            }
+        }
+        return ResponseData.create().data(vos).success();
+    }
+
+    @Override
+    public ResponseData selectUser() {
+        QueryWrapper<SysUserDO> queryWrapper = new QueryWrapper<>();
+        List<SysUserDO> userDOS = userMapper.selectList(queryWrapper);
+        List<SysRoleDO> roleDOS = roleMapper.selectList(null);
+        Map<Long, SysRoleDO> roleDOMap = roleDOS.stream().collect(Collectors.toMap(SysRoleDO::getId, Function.identity(), (e1, e2) -> e1));
+        List<SysUserVO> voList = userDOS.stream().map(SysUserVO::from).collect(Collectors.toList());
+        voList.forEach(vo -> {
+            if (vo.getRoleIds() != null) {
+                Long roleId = Long.valueOf(vo.getRoleIds());
+                vo.setRoleNames(roleDOMap.containsKey(roleId) ? roleDOMap.get(roleId).getRoleName() : null);
+            }
+        });
+        return ResponseData.create().data(voList).success();
+    }
+
+    @Override
+    public ResponseData updateUser(SysUserDTO userDTO) {
+        userMapper.updateById(userDTO.toDO());
+        return ResponseData.create().success();
+    }
+
+    @Override
+    public ResponseData updateRole(SysRoleDTO roleDTO) {
+        roleMapper.updateById(roleDTO.toDO());
+        publisher.publishEvent(new RolePermUpdateEvent(this));
+        return ResponseData.create().success();
+    }
+
+    @Override
+    public ResponseData deleteRole(Long id) {
+        QueryWrapper<SysUserDO> queryWrapper = new QueryWrapper<>();
+        queryWrapper.eq(true, "role_ids", id);
+        Integer count = userMapper.selectCount(queryWrapper);
+        if (count > 0) {
+            return ResponseData.create().failed("存在用户被分配为当前角色，不允许删除");
+        }
+        roleMapper.deleteById(id);
+        publisher.publishEvent(new RolePermUpdateEvent(this));
+        return ResponseData.create().success();
+    }
+
+    @Override
+    public ResponseData deleteUser(Long id) {
+        userMapper.deleteById(id);
+        return ResponseData.create().success();
+    }
+
+    @Override
+    public ResponseData updatePassword(SysUserDTO userDTO) {
+        SysUserDO userDO = userDTO.toDO();
+        userDO.setSalt(UUIDStrUtil.random());
+        userDO.setPassword(UUIDStrUtil.generate(userDTO.getPassword(), userDO.getSalt()));
+        QueryWrapper<SysUserDO> wrapper = new QueryWrapper<>();
+        wrapper.eq("username", userDTO.getUsername());
+        userMapper.update(userDO, wrapper);
+        return ResponseData.create().success();
+    }
+}
--- a/src/main/java/com/xuxd/kafka/console/utils/AuthUtil.java
+++ b/src/main/java/com/xuxd/kafka/console/utils/AuthUtil.java
@@ -0,0 +1,54 @@
+package com.xuxd.kafka.console.utils;
+
+import com.google.gson.Gson;
+import com.xuxd.kafka.console.beans.Credentials;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.util.Base64Utils;
+
+import java.nio.charset.StandardCharsets;
+
+/**
+ * @author: xuxd
+ * @date: 2023/5/14 19:34
+ **/
+@Slf4j
+public class AuthUtil {
+
+    private static Gson gson = GsonUtil.INSTANCE.get();
+
+    public static String generateToken(String secret, Credentials info) {
+        String json = gson.toJson(info);
+        String str = json + secret;
+        String signature = MD5Util.md5(str);
+        return Base64Utils.encodeToString(json.getBytes(StandardCharsets.UTF_8)) + "." +
+                Base64Utils.encodeToString(signature.getBytes(StandardCharsets.UTF_8));
+    }
+
+    public static boolean isToken(String token) {
+        return token.split("\\.").length == 2;
+    }
+
+    public static Credentials parseToken(String secret, String token) {
+        if (!isToken(token)) {
+            return Credentials.INVALID;
+        }
+        String[] arr = token.split("\\.");
+        String infoStr = new String(Base64Utils.decodeFromString(arr[0]), StandardCharsets.UTF_8);
+        String signature = new String(Base64Utils.decodeFromString(arr[1]), StandardCharsets.UTF_8);
+
+        String encrypt = MD5Util.md5(infoStr + secret);
+        if (!encrypt.equals(signature)) {
+            return Credentials.INVALID;
+        }
+        try {
+            Credentials credentials = gson.fromJson(infoStr, Credentials.class);
+            if (credentials.getExpiration() < System.currentTimeMillis()) {
+                return Credentials.INVALID;
+            }
+            return credentials;
+        } catch (Exception e) {
+            log.error("解析token失败: {}", token, e);
+            return Credentials.INVALID;
+        }
+    }
+}
--- a/src/main/java/com/xuxd/kafka/console/utils/MD5Util.java
+++ b/src/main/java/com/xuxd/kafka/console/utils/MD5Util.java
@@ -0,0 +1,32 @@
+package com.xuxd.kafka.console.utils;
+
+import lombok.extern.slf4j.Slf4j;
+
+import java.nio.charset.StandardCharsets;
+import java.security.MessageDigest;
+import java.security.NoSuchAlgorithmException;
+
+/**
+ * @author: xuxd
+ * @date: 2023/5/14 20:25
+ **/
+@Slf4j
+public class MD5Util {
+
+    public static MessageDigest getInstance() {
+        try {
+            MessageDigest md5 = MessageDigest.getInstance("MD5");
+            return md5;
+        } catch (NoSuchAlgorithmException e) {
+            return null;
+        }
+    }
+
+    public static String md5(String str) {
+        MessageDigest digest = getInstance();
+        if (digest == null) {
+            return null;
+        }
+        return new String(digest.digest(str.getBytes(StandardCharsets.UTF_8)), StandardCharsets.UTF_8);
+    }
+}
--- a/src/main/java/com/xuxd/kafka/console/utils/RandomStringUtil.java
+++ b/src/main/java/com/xuxd/kafka/console/utils/RandomStringUtil.java
@@ -0,0 +1,26 @@
+package com.xuxd.kafka.console.utils;
+
+import java.util.Random;
+
+/**
+ * @author: xuxd
+ * @date: 2023/5/8 9:19
+ **/
+public class RandomStringUtil {
+
+    private final static String ALLOWED_CHARS = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789";
+
+    public static String random6Str() {
+        return generateRandomString(6);
+    }
+
+    public static String generateRandomString(int length) {
+        Random random = new Random();
+        StringBuilder sb = new StringBuilder(length);
+        for (int i = 0; i < length; i++) {
+            int index = random.nextInt(ALLOWED_CHARS.length());
+            sb.append(ALLOWED_CHARS.charAt(index));
+        }
+        return sb.toString();
+    }
+}
--- a/src/main/java/com/xuxd/kafka/console/utils/UUIDStrUtil.java
+++ b/src/main/java/com/xuxd/kafka/console/utils/UUIDStrUtil.java
@@ -0,0 +1,22 @@
+package com.xuxd.kafka.console.utils;
+
+import java.util.UUID;
+
+/**
+ * @author: xuxd
+ * @date: 2023/5/6 13:30
+ **/
+public class UUIDStrUtil {
+
+    public static String random() {
+        return UUID.randomUUID().toString();
+    }
+
+    public static String generate(String ... strs) {
+        StringBuilder sb = new StringBuilder();
+        for (String str : strs) {
+            sb.append(str);
+        }
+        return UUID.nameUUIDFromBytes(sb.toString().getBytes()).toString();
+    }
+}
--- a/src/main/resources/application.yml
+++ b/src/main/resources/application.yml
@@ -47,3 +47,18 @@ logging:
 cron:
 #  clear-dirty-user: 0 * * * * ?
  clear-dirty-user: 0 0 1 * * ?
+
+# 权限认证设置，设置为true，需要先登录才能访问
+auth:
+  enable: false
+  # 登录用户token的过期时间，单位：小时
+  expire-hours: 24
+  # 隐藏集群的属性信息，如果当前用户没有集群切换里的编辑权限，就不能看集群的属性信息，有开启ACL的集群需要开启这个
+  hide-cluster-property: true
+  # 是否启用集群的数据权限，如果启用，可以配置哪些角色看到哪些集群. 不启用，即使配置了也不生效，每个角色的用户都可以看到所有集群信息.
+  enable-cluster-authority: false
+  # 重新加载权限信息，版本升级替换jar包的时候，新版本里增加了新的权限菜单，这个设置为true.然后在角色列表里分配新增加的菜单权限.
+  reload-permission: true
+log:
+  # 是否打印操作日志（增加、删除、编辑）
+  print-controller-log: true
--- a/src/main/resources/db/data-h2.sql
+++ b/src/main/resources/db/data-h2.sql
@@ -1,5 +1,113 @@
-- DELETE FROM t_kafka_user;
--
-- INSERT INTO t_kafka_user (id, username, password) VALUES
-- (1, 'Jone', 'p1'),
-- (2, 'Jack', 'p2');
+-- 不要随便修改下面的注释，要根据这个注释初始化加载数据
+-- t_sys_permission start--
+insert into t_sys_permission(id, name,type,parent_id,permission) values(0,'主页',0,null,'home');
+
+insert into t_sys_permission(id, name,type,parent_id,permission) values(11,'集群',0,null,'cluster');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(12,'属性配置',1,11,'cluster:property-config');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(13,'日志配置',1,11,'cluster:log-config');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(14,'编辑配置',1,11,'cluster:edit');
+
+insert into t_sys_permission(id, name,type,parent_id,permission) values(21,'Topic',0,null,'topic');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(22,'刷新',1,21,'topic:load');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(23,'新增',1,21,'topic:add');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(24,'批量删除',1,21,'topic:batch-del');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(25,'删除',1,21,'topic:del');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(26,'分区详情',1,21,'topic:partition-detail');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(27,'首选副本作leader',1,26,'topic:partition-detail:preferred');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(28,'增加分区',1,21,'topic:partition-add');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(29,'消费详情',1,21,'topic:consumer-detail');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(30,'属性配置',1,21,'topic:property-config');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(31,'变更副本',1,21,'topic:replication-modify');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(32,'发送统计',1,21,'topic:send-count');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(33,'限流',1,21,'topic:replication-sync-throttle');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(34,'编辑属性配置',1,30,'topic:property-config:edit');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(35,'删除属性配置',1,30,'topic:property-config:del');
+
+insert into t_sys_permission(id, name,type,parent_id,permission) values(41,'消费组',0,null,'group');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(42,'新增订阅',1,41,'group:add');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(43,'删除',1,41,'group:del');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(44,'消费端',1,41,'group:client');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(45,'消费详情',1,41,'group:consumer-detail');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(46,'最小位点',1,45,'group:consumer-detail:min');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(47,'最新位点',1,45,'group:consumer-detail:last');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(48,'时间戳',1,45,'group:consumer-detail:timestamp');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(49,'重置位点',1,45,'group:consumer-detail:any');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(50,'位移分区',1,41,'group:offset-partition');
+
+
+insert into t_sys_permission(id, name,type,parent_id,permission) values(61,'消息',0,null,'message');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(62,'根据时间查询',1,61,'message:search-time');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(63,'根据偏移查询',1,61,'message:search-offset');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(64,'在线发送',1,61,'message:send');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(65,'在线删除',1,61,'message:del');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(66,'消息详情',1,61,'message:detail');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(67,'重新发送',1,61,'message:resend');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(68,'发送统计',1,61,'message:send-statistics');
+
+insert into t_sys_permission(id, name,type,parent_id,permission) values(80,'限流',0,null,'quota');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(81,'用户',1,80,'quota:user');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(82,'新增配置',1,81,'quota:user:add');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(83,'客户端ID',1,80,'quota:client');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(84,'新增配置',1,83,'quota:client:add');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(85,'用户和客户端ID',1,80,'quota:user-client');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(86,'新增配置',1,85,'quota:user-client:add');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(87,'删除',1,80,'quota:del');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(88,'修改',1,80,'quota:edit');
+
+
+insert into t_sys_permission(id, name,type,parent_id,permission) values(100,'Acl',0,null,'acl');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(101,'资源授权',1,100,'acl:authority');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(102,'新增主体权限',1,101,'acl:authority:add-principal');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(103,'权限详情',1,101,'acl:authority:detail');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(104,'管理生产权限',1,101,'acl:authority:producer');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(105,'管理消费权限',1,101,'acl:authority:consumer');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(106,'增加权限',1,101,'acl:authority:add');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(107,'清除权限',1,101,'acl:authority:clean');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(108,'SaslScram用户管理',1,100,'acl:sasl-scram');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(109,'新增/更新用户',1,108,'acl:sasl-scram:add-update');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(110,'详情',1,108,'acl:sasl-scram:detail');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(111,'删除',1,108,'acl:sasl-scram:del');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(112,'管理生产权限',1,108,'acl:sasl-scram:producer');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(113,'管理消费权限',1,108,'acl:sasl-scram:consumer');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(114,'增加权限',1,108,'acl:sasl-scram:add-auth');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(115,'彻底删除',1,108,'acl:sasl-scram:pure');
+
+insert into t_sys_permission(id, name,type,parent_id,permission) values(140,'用户',0,null,'user-manage');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(141,'用户列表',1,140,'user-manage:user');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(142,'新增',1,141,'user-manage:user:add');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(143,'删除',1,141,'user-manage:user:del');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(144,'重置密码',1,141,'user-manage:user:reset-pass');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(145,'分配角色',1,141,'user-manage:user:change-role');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(146,'角色列表',1,140,'user-manage:role');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(147,'保存',1,146,'user-manage:role:save');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(148,'删除',1,146,'user-manage:role:del');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(149,'权限列表',1,140,'user-manage:permission');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(150,'个人设置',1,140,'user-manage:setting');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(151,'集群权限',1,140,'user-manage:cluster-role');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(152,'新增',1,151,'user-manage:cluster-role:add');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(153,'删除',1,151,'user-manage:cluster-role:delete');
+
+insert into t_sys_permission(id, name,type,parent_id,permission) values(160,'运维',0,null,'op');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(161,'集群切换',1,160,'op:cluster-switch');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(162,'新增集群',1,161,'op:cluster-switch:add');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(163,'切换',1,161,'op:cluster-switch:switch');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(164,'编辑',1,161,'op:cluster-switch:edit');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(165,'删除',1,161,'op:cluster-switch:del');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(166,'配置限流',1,160,'op:config-throttle');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(167,'解除限流',1,160,'op:remove-throttle');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(168,'首选副本作leader',1,160,'op:replication-preferred');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(169,'副本变更详情',1,160,'op:replication-update-detail');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(170,'副本重分配',1,160,'op:replication-reassign');
+insert into t_sys_permission(id, name,type,parent_id,permission) values(171,'取消副本重分配',1,169,'op:replication-update-detail:cancel');
+-- t_sys_permission end--
+
+-- t_sys_role start--
+insert into t_sys_role(id, role_name, description, permission_ids) VALUES (1,'超级管理员','超级管理员','12,13,14,22,23,24,25,26,27,28,29,30,34,35,31,32,33,42,43,44,45,46,47,48,49,50,62,63,64,65,66,67,68,81,82,83,84,85,86,87,88,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,141,142,143,144,145,146,147,148,149,150,151,152,153,161,162,163,164,165,166,167,168,169,171,170');
+insert into t_sys_role(id, role_name, description, permission_ids) VALUES (2,'普通管理员','普通管理员，不能更改用户信息','12,13,14,22,23,24,25,26,27,28,29,30,34,35,31,32,33,42,43,44,45,46,47,48,49,50,62,63,64,65,66,67,68,81,82,83,84,85,86,87,88,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,141,146,149,150,161,162,163,164,165,166,167,168,169,171,170');
+-- insert into t_sys_role(id, role_name, description, permission_ids) VALUES (2,'访客','访客','12,13,22,26,29,32,44,45,50,62,63,81,83,85,141,146,149,150,161,163');
+-- t_sys_role end--
+
+-- t_sys_user start--
+insert into t_sys_user(id, username, password, salt, role_ids) VALUES (1,'super-admin','3a3e4d32-5247-321b-9efb-9cbf60b2bf6c','e6973cfc-7583-4baa-8802-65ded1268ab6','1' );
+insert into t_sys_user(id, username, password, salt, role_ids) VALUES (2,'admin','3a3e4d32-5247-321b-9efb-9cbf60b2bf6c','e6973cfc-7583-4baa-8802-65ded1268ab6','2' );
+-- t_sys_user end--
--- a/src/main/resources/db/schema-h2.sql
+++ b/src/main/resources/db/schema-h2.sql
@@ -4,8 +4,8 @@
 CREATE TABLE IF NOT EXISTS T_KAFKA_USER
 (
    ID              IDENTITY    NOT NULL COMMENT '主键ID',
-    USERNAME        VARCHAR(50) NOT NULL DEFAULT '' COMMENT '用户名',
-    PASSWORD        VARCHAR(50) NOT NULL DEFAULT '' COMMENT '密码',
+    USERNAME        VARCHAR(128) NOT NULL DEFAULT '' COMMENT '用户名',
+    PASSWORD        VARCHAR(128) NOT NULL DEFAULT '' COMMENT '密码',
    UPDATE_TIME     TIMESTAMP   NOT NULL DEFAULT NOW() COMMENT '更新时间',
    CLUSTER_INFO_ID BIGINT      NOT NULL COMMENT '集群信息里的集群ID',
    PRIMARY KEY (ID),
@@ -29,9 +29,51 @@ CREATE TABLE IF NOT EXISTS T_CLUSTER_INFO
 (
    ID           IDENTITY     NOT NULL COMMENT '主键ID',
    CLUSTER_NAME VARCHAR(128) NOT NULL DEFAULT '' COMMENT '集群名',
-    ADDRESS      VARCHAR(256) NOT NULL DEFAULT '' COMMENT '集群地址',
-    PROPERTIES   VARCHAR(512) NOT NULL DEFAULT '' COMMENT '集群的其它属性配置',
+    ADDRESS      VARCHAR(1024) NOT NULL DEFAULT '' COMMENT '集群地址',
+    PROPERTIES   VARCHAR(1024) NOT NULL DEFAULT '' COMMENT '集群的其它属性配置',
    UPDATE_TIME  TIMESTAMP    NOT NULL DEFAULT NOW() COMMENT '更新时间',
    PRIMARY KEY (ID),
    UNIQUE (CLUSTER_NAME)
+);
+
+-- 登录用户的角色权限配置
+CREATE TABLE IF NOT EXISTS t_sys_permission
+(
+    ID         IDENTITY   NOT NULL COMMENT '主键ID',
+    name       varchar(100)        DEFAULT NULL COMMENT '权限名称',
+    type       tinyint(1) NOT NULL DEFAULT 0 COMMENT '权限类型: 0：菜单，1：按钮',
+    parent_id  bigint(20)          DEFAULT NULL COMMENT '所属父权限ID',
+    permission varchar(100)        DEFAULT NULL COMMENT '权限字符串',
+    PRIMARY KEY (id)
+);
+
+CREATE TABLE IF NOT EXISTS t_sys_role
+(
+    ID             IDENTITY     NOT NULL COMMENT '主键ID',
+    role_name      varchar(100) NOT NULL COMMENT '角色名称',
+    description    varchar(100) DEFAULT NULL COMMENT '角色描述',
+    permission_ids varchar(500) DEFAULT NULL COMMENT '分配的权限ID',
+    PRIMARY KEY (id)
+);
+
+CREATE TABLE IF NOT EXISTS t_sys_user
+(
+    ID       IDENTITY NOT NULL COMMENT '主键ID',
+    username varchar(100) DEFAULT NULL COMMENT '用户名',
+    password varchar(100) DEFAULT NULL COMMENT '用户密码',
+    salt     varchar(100) DEFAULT NULL COMMENT '加密的盐值',
+    role_ids varchar(100) DEFAULT NULL COMMENT '分配角色的ID',
+    PRIMARY KEY (id),
+    UNIQUE (username)
+);
+
+-- 集群数据权限与角色绑定
+CREATE TABLE IF NOT EXISTS t_cluster_role_relation
+(
+    ID              IDENTITY   NOT NULL COMMENT '主键ID',
+    ROLE_ID         bigint(20) NOT NULL COMMENT '角色ID',
+    CLUSTER_INFO_ID bigint(20) NOT NULL COMMENT '集群信息的ID',
+    UPDATE_TIME     TIMESTAMP  NOT NULL DEFAULT NOW() COMMENT '更新时间',
+    PRIMARY KEY (id),
+    UNIQUE (ROLE_ID, CLUSTER_INFO_ID)
 );
--- a/src/main/resources/logback-spring.xml
+++ b/src/main/resources/logback-spring.xml
@@ -3,9 +3,9 @@
    <springProperty scope="context" name="LOGGING_HOME" source="logging.home"/>

    <!-- 日志目录   -->
-    <property name="LOG_HOME" value="${LOGGING_HOME}/logs"/>
+    <property name="LOG_HOME" value="${LOGGING_HOME:-${user.dir}}/logs"/>
    <!--    日志文件名-->
-    <property name="APP_NAME" value="${APPLICATION_NAME:-.}"/>
+    <property name="APP_NAME" value="${APPLICATION_NAME:-kafka-console-ui}"/>

    <!--    使用默认的输出格式-->
    <include resource="org/springframework/boot/logging/logback/defaults.xml"/>
@@ -45,7 +45,12 @@
        <appender-ref ref="AsyncFileAppender"/>
    </logger>

-    <logger name="org.apache.kafka.clients.consumer" level="warn" additivity="false">
+    <logger name="org.apache.kafka.common" level="warn" additivity="false">
+        <appender-ref ref="CONSOLE"/>
+        <appender-ref ref="AsyncFileAppender"/>
+    </logger>
+
+    <logger name="org.apache.kafka.clients.Metadata" level="warn" additivity="false">
        <appender-ref ref="CONSOLE"/>
        <appender-ref ref="AsyncFileAppender"/>
    </logger>
@@ -59,4 +64,6 @@
        <appender-ref ref="CONSOLE"/>
        <appender-ref ref="AsyncFileAppender"/>
    </logger>
+
+    <logger name="org.apache.kafka" level="warn"/>
 </configuration>
--- a/src/main/scala/kafka/console/BrokerApiVersion.scala
+++ b/src/main/scala/kafka/console/BrokerApiVersion.scala
@@ -21,7 +21,7 @@ import org.apache.kafka.common.utils.{KafkaThread, LogContext, Time}
 import org.slf4j.{Logger, LoggerFactory}

 import java.io.IOException
-import java.util.Properties
+import java.util.{Collections, Properties}
 import java.util.concurrent.atomic.AtomicInteger
 import java.util.concurrent.{ConcurrentLinkedQueue, TimeUnit}
 import scala.jdk.CollectionConverters.{ListHasAsScala, MapHasAsJava, PropertiesHasAsScala, SetHasAsScala}
@@ -162,7 +162,7 @@ object BrokerApiVersion{

        def listAllBrokerVersionInfo(): Map[Node, Try[NodeApiVersions]] =
            findAllBrokers().map { broker =>
-                broker -> Try[NodeApiVersions](new NodeApiVersions(getApiVersions(broker)))
+                broker -> Try[NodeApiVersions](new NodeApiVersions(getApiVersions(broker), Collections.emptyList(), false))
            }.toMap

        def close(): Unit = {
--- a/src/main/scala/kafka/console/ConsumerConsole.scala
+++ b/src/main/scala/kafka/console/ConsumerConsole.scala
@@ -94,7 +94,7 @@ class ConsumerConsole(config: KafkaConfig) extends KafkaConsole(config: KafkaCon
                        t.lag = t.logEndOffset - t.consumerOffset
                    }
                }
-                t.lag = t.logEndOffset - t.consumerOffset
+//                t.lag = t.logEndOffset - t.consumerOffset
                (topicPartition, t)
            }).toMap

--- a/src/main/scala/kafka/console/KafkaConsole.scala
+++ b/src/main/scala/kafka/console/KafkaConsole.scala
@@ -189,10 +189,10 @@ object KafkaConsole {
            case (topicPartition, listOffsetsResultInfo) => topicPartition -> new OffsetAndMetadata(listOffsetsResultInfo.offset)
        }.toMap

-        unsuccessfulOffsetsForTimes.foreach { entry =>
-            log.warn(s"\nWarn: Partition " + entry._1.partition() + " from topic " + entry._1.topic() +
-                " is empty. Falling back to latest known offset.")
-        }
+//        unsuccessfulOffsetsForTimes.foreach { entry =>
+//            log.warn(s"\nWarn: Partition " + entry._1.partition() + " from topic " + entry._1.topic() +
+//                " is empty. Falling back to latest known offset.")
+//        }

        successfulLogTimestampOffsets ++ getLogEndOffsets(admin, unsuccessfulOffsetsForTimes.keySet.toSeq, timeoutMs)
    }
--- a/src/main/scala/kafka/console/MessageConsole.scala
+++ b/src/main/scala/kafka/console/MessageConsole.scala
@@ -6,13 +6,17 @@ import com.xuxd.kafka.console.config.{ContextConfigHolder, KafkaConfig}
 import org.apache.commons.lang3.StringUtils
 import org.apache.kafka.clients.admin.{DeleteRecordsOptions, RecordsToDelete}
 import org.apache.kafka.clients.consumer.{ConsumerConfig, ConsumerRecord}
-import org.apache.kafka.clients.producer.ProducerRecord
+import org.apache.kafka.clients.producer.{ProducerRecord, RecordMetadata}
 import org.apache.kafka.common.TopicPartition
+import org.apache.kafka.common.header.Header
+import org.apache.kafka.common.header.internals.RecordHeader

 import java.time.Duration
 import java.util
-import java.util.{Properties}
+import java.util.Properties
+import java.util.concurrent.Future
 import scala.collection.immutable
+import scala.collection.mutable.ArrayBuffer
 import scala.jdk.CollectionConverters.{CollectionHasAsScala, MapHasAsScala, SeqHasAsJava}

 /**
@@ -218,7 +222,7 @@ class MessageConsole(config: KafkaConfig) extends KafkaConsole(config: KafkaConf

    def send(topic: String, partition: Int, key: String, value: String, num: Int): Unit = {
        withProducerAndCatchError(producer => {
-            val nullKey = if (key != null && key.trim().length() == 0) null else key
+            val nullKey = if (key != null && key.trim().isEmpty) null else key
            for (a <- 1 to num) {
                val record = if (partition != -1) new ProducerRecord[String, String](topic, partition, nullKey, value)
                else new ProducerRecord[String, String](topic, nullKey, value)
@@ -228,6 +232,39 @@ class MessageConsole(config: KafkaConfig) extends KafkaConsole(config: KafkaConf

    }

+    def send(topic: String,
+             partition: Int,
+             key: String,
+             value: String,
+             num: Int,
+             headerKeys: Array[String],
+             headerValues: Array[String],
+             sync: Boolean): (Boolean, String) = {
+        withProducerAndCatchError(producer => {
+            val nullKey = if (key != null && key.trim().isEmpty) null else key
+            val results = ArrayBuffer.empty[Future[RecordMetadata]]
+            for (a <- 1 to num) {
+                val record = if (partition != -1) new ProducerRecord[String, String](topic, partition, nullKey, value)
+                else new ProducerRecord[String, String](topic, nullKey, value)
+                if (!headerKeys.isEmpty && headerKeys.length == headerValues.length) {
+                    val headers: Array[Header] = headerKeys.zip(headerValues).map { case (key, value) =>
+                        new RecordHeader(key, value.getBytes())
+                    }
+                    headers.foreach(record.headers().add)
+                }
+                results += producer.send(record)
+            }
+            if (sync) {
+                results.foreach(_.get())
+            }
+            (true, "")
+        }, e => {
+            log.error("send error.", e)
+            (false, e.getMessage)
+        })
+
+    }.asInstanceOf[(Boolean, String)]
+
    def sendSync(record: ProducerRecord[Array[Byte], Array[Byte]]): (Boolean, String) = {
        withByteProducerAndCatchError(producer => {
            val metadata = producer.send(record).get()
--- a/ui/src/App.vue
+++ b/ui/src/App.vue
@@ -15,20 +15,46 @@
      ><router-link to="/client-quota-page" class="pad-l-r">限流</router-link>
      <span>|</span
      ><router-link to="/acl-page" class="pad-l-r">Acl</router-link>
+      <span v-show="showUserMenu">|</span
+      ><router-link to="/user-page" class="pad-l-r" v-show="showUserMenu"
+        >用户</router-link
+      >
      <span>|</span
      ><router-link to="/op-page" class="pad-l-r">运维</router-link>
-      <span class="right">集群：{{ clusterName }}</span>
+      <div class="right">
+        <span>集群：{{ clusterName }} </span>
+        <a-dropdown v-show="showUsername">
+          <span>
+            <span> | </span><a-icon type="smile"></a-icon>
+            <span>{{ username }}</span>
+          </span>
+          <a-menu slot="overlay">
+            <a-menu-item key="1">
+              <a href="javascript:;" @click="logout">
+                <!--              <a-icon type="logout"/>-->
+                <span>退出</span>
+              </a>
+            </a-menu-item>
+          </a-menu>
+        </a-dropdown>
+      </div>
    </div>
    <router-view class="content" />
  </div>
 </template>
 <script>
-import { KafkaClusterApi } from "@/utils/api";
+import { KafkaClusterApi, AuthApi } from "@/utils/api";
 import request from "@/utils/request";
 import { mapMutations, mapState } from "vuex";
-import { getClusterInfo } from "@/utils/local-cache";
+import {
+  deleteToken,
+  deleteUsername,
+  getClusterInfo,
+  getPermissions,
+  getUsername,
+} from "@/utils/local-cache";
 import notification from "ant-design-vue/lib/notification";
-import { CLUSTER } from "@/store/mutation-types";
+import { AUTH, CLUSTER } from "@/store/mutation-types";

 export default {
  data() {
@@ -37,35 +63,69 @@ export default {
    };
  },
  created() {
-    const clusterInfo = getClusterInfo();
-    if (!clusterInfo) {
-      request({
-        url: KafkaClusterApi.peekClusterInfo.url,
-        method: KafkaClusterApi.peekClusterInfo.method,
-      }).then((res) => {
-        if (res.code == 0) {
-          this.switchCluster(res.data);
-        } else {
-          notification.error({
-            message: "error",
-            description: res.msg,
-          });
-        }
-      });
-    } else {
-      this.switchCluster(clusterInfo);
-    }
+    this.intAuthState();
+    this.initClusterInfo();
  },
  computed: {
    ...mapState({
      clusterName: (state) => state.clusterInfo.clusterName,
      enableSasl: (state) => state.clusterInfo.enableSasl,
+      showUsername: (state) => state.auth.enable && state.auth.username,
+      username: (state) => state.auth.username,
+      showUserMenu: (state) => state.auth.enable,
    }),
  },
  methods: {
    ...mapMutations({
      switchCluster: CLUSTER.SWITCH,
+      enableAuth: AUTH.ENABLE,
+      setUsername: AUTH.SET_USERNAME,
+      setPermissions: AUTH.SET_PERMISSIONS,
    }),
+    beforeLoadFn() {
+      this.setUsername(getUsername());
+      this.setPermissions(getPermissions());
+    },
+    intAuthState() {
+      request({
+        url: AuthApi.enable.url,
+        method: AuthApi.enable.method,
+      }).then((res) => {
+        const enable = res;
+        this.enableAuth(enable);
+        // if (!enable){
+        //   this.initClusterInfo();
+        // }
+      });
+    },
+    initClusterInfo() {
+      const clusterInfo = getClusterInfo();
+      if (!clusterInfo) {
+        request({
+          url: KafkaClusterApi.peekClusterInfo.url,
+          method: KafkaClusterApi.peekClusterInfo.method,
+        }).then((res) => {
+          if (res.code == 0) {
+            this.switchCluster(res.data);
+          } else {
+            notification.error({
+              message: "error",
+              description: res.msg,
+            });
+          }
+        });
+      } else {
+        this.switchCluster(clusterInfo);
+      }
+    },
+    logout() {
+      deleteToken();
+      deleteUsername();
+      this.$router.push("/login-page");
+    },
+  },
+  mounted() {
+    this.beforeLoadFn();
  },
 };
 </script>
--- a/ui/src/components/HelloWorld.vue
+++ b/ui/src/components/HelloWorld.vue
@@ -1,32 +0,0 @@
-<template>
-  <div class="hello">
-    <h1>{{ msg }}</h1>
-  </div>
-</template>
-
-<script>
-export default {
-  name: "HelloWorld",
-  props: {
-    msg: String,
-  },
-};
-</script>
-
-<!-- Add "scoped" attribute to limit CSS to this component only -->
-<style scoped>
-h3 {
-  margin: 40px 0 0;
-}
-ul {
-  list-style-type: none;
-  padding: 0;
-}
-li {
-  display: inline-block;
-  margin: 0 10px;
-}
-a {
-  color: #42b983;
-}
-</style>
--- a/ui/src/components/MessageBox.vue
+++ b/ui/src/components/MessageBox.vue
@@ -0,0 +1,40 @@
+<template>
+  <a-modal
+    title="消息提示"
+    :visible="visible"
+    :width="400"
+    :mask="false"
+    :destroyOnClose="true"
+    :footer="null"
+    :maskClosable="false"
+    @cancel="handleCancel"
+  >
+    <div>
+      {{ message }}
+    </div>
+  </a-modal>
+</template>
+
+<script>
+export default {
+  name: "MessageBox",
+  props: {
+    message: {
+      type: String,
+      default: "",
+    },
+    visible: {
+      type: Boolean,
+      default: false,
+    },
+  },
+  methods: {
+    handleCancel() {
+      this.visible = false;
+      this.$emit("closeMessageBox", {});
+    },
+  },
+};
+</script>
+
+<style scoped></style>
--- a/ui/src/directives/action.js
+++ b/ui/src/directives/action.js
@@ -0,0 +1,16 @@
+import Vue from "vue";
+import Store from "@/store";
+
+const action = Vue.directive("action", {
+  inserted: function (el, binding) {
+    const actionName = binding.arg;
+    const enableAuth = Store.state.auth.enable;
+    const permissions = Store.state.auth.permissions;
+    if (enableAuth && (!permissions || permissions.indexOf(actionName) < 0)) {
+      (el.parentNode && el.parentNode.removeChild(el)) ||
+        (el.style.display = "none");
+    }
+  },
+});
+
+export default action;
--- a/ui/src/main.js
+++ b/ui/src/main.js
@@ -6,6 +6,7 @@ import store from "./store";
 import Antd from "ant-design-vue";
 import "ant-design-vue/dist/antd.css";
 import { VueAxios } from "./utils/request";
+import "@/directives/action";

 Vue.config.productionTip = false;
 Vue.use(Antd);
--- a/ui/src/router/index.js
+++ b/ui/src/router/index.js
@@ -1,6 +1,7 @@
 import Vue from "vue";
 import VueRouter from "vue-router";
 import Home from "../views/Home.vue";
+import Store from "@/store";

 Vue.use(VueRouter);

@@ -53,7 +54,21 @@ const routes = [
    path: "/client-quota-page",
    name: "ClientQuota",
    component: () =>
-        import(/* webpackChunkName: "cluster" */ "../views/quota/ClientQuota.vue"),
+      import(
+        /* webpackChunkName: "cluster" */ "../views/quota/ClientQuota.vue"
+      ),
+  },
+  {
+    path: "/user-page",
+    name: "UserManage",
+    component: () =>
+      import(/* webpackChunkName: "cluster" */ "../views/user/UserManage.vue"),
+  },
+  {
+    path: "/login-page",
+    name: "Login",
+    component: () =>
+      import(/* webpackChunkName: "cluster" */ "../views/login/Login.vue"),
  },
 ];

@@ -64,4 +79,49 @@ const router = new VueRouter({
  routes,
 });

+router.beforeEach((to, from, next) => {
+  const enableAuth = Store.state.auth.enable;
+  if (!enableAuth) {
+    next();
+  } else {
+    if (to.path === "/login-page") {
+      next();
+    } else {
+      let token = localStorage.getItem("access_token");
+      if (token === null || token === "") {
+        next("/login-page");
+      } else {
+        next();
+      }
+    }
+  }
+});
+
+let originPush = VueRouter.prototype.push;
+let originReplace = VueRouter.prototype.replace;
+VueRouter.prototype.push = function (location, resolve, reject) {
+  if (resolve && reject) {
+    originPush.call(this, location, resolve, reject);
+  } else {
+    originPush.call(
+      this,
+      location,
+      () => {},
+      () => {}
+    );
+  }
+};
+VueRouter.prototype.replace = function (location, resolve, reject) {
+  if (resolve && reject) {
+    originReplace.call(this, location, resolve, reject);
+  } else {
+    originReplace.call(
+      this,
+      location,
+      () => {},
+      () => {}
+    );
+  }
+};
+
 export default router;
--- a/ui/src/store/index.js
+++ b/ui/src/store/index.js
@@ -1,7 +1,13 @@
 import Vue from "vue";
 import Vuex from "vuex";
-import { CLUSTER } from "@/store/mutation-types";
-import { setClusterInfo } from "@/utils/local-cache";
+import { CLUSTER, AUTH } from "@/store/mutation-types";
+import {
+  setClusterInfo,
+  setPermissions,
+  setToken,
+  setUsername,
+  deleteClusterInfo,
+} from "@/utils/local-cache";

 Vue.use(Vuex);

@@ -12,6 +18,11 @@ export default new Vuex.Store({
      clusterName: undefined,
      enableSasl: false,
    },
+    auth: {
+      enable: false,
+      username: "",
+      permissions: [],
+    },
  },
  mutations: {
    [CLUSTER.SWITCH](state, clusterInfo) {
@@ -28,6 +39,23 @@ export default new Vuex.Store({
      state.clusterInfo.enableSasl = enableSasl;
      setClusterInfo(clusterInfo);
    },
+    [CLUSTER.DELETE]() {
+      deleteClusterInfo();
+    },
+    [AUTH.ENABLE](state, enable) {
+      state.auth.enable = enable;
+    },
+    [AUTH.SET_TOKEN](state, info) {
+      setToken(info);
+    },
+    [AUTH.SET_USERNAME](state, username) {
+      setUsername(username);
+      state.auth.username = username;
+    },
+    [AUTH.SET_PERMISSIONS](state, permissions) {
+      setPermissions(permissions);
+      state.auth.permissions = permissions;
+    },
  },
  actions: {},
  modules: {},
--- a/ui/src/store/mutation-types.js
+++ b/ui/src/store/mutation-types.js
@@ -1,3 +1,11 @@
 export const CLUSTER = {
  SWITCH: "switchCluster",
+  DELETE: "deleteClusterInfo",
+};
+
+export const AUTH = {
+  ENABLE: "enable",
+  SET_TOKEN: "setToken",
+  SET_USERNAME: "setUsername",
+  SET_PERMISSIONS: "setPermissions",
 };
--- a/ui/src/utils/api.js
+++ b/ui/src/utils/api.js
@@ -199,6 +199,10 @@ export const KafkaClusterApi = {
    url: "/cluster/info",
    method: "get",
  },
+  getClusterInfoListForSelect: {
+    url: "/cluster/info/select",
+    method: "get",
+  },
  addClusterInfo: {
    url: "/cluster/info",
    method: "post",
@@ -292,6 +296,10 @@ export const KafkaMessageApi = {
    url: "/message",
    method: "delete",
  },
+  sendStatistics: {
+    url: "/message/send/statistics",
+    method: "post",
+  },
 };

 export const KafkaClientQuotaApi = {
@@ -307,4 +315,73 @@ export const KafkaClientQuotaApi = {
    url: "/client/quota",
    method: "delete",
  },
-};
+};
+
+export const UserManageApi = {
+  getPermissions: {
+    url: "/sys/user/manage/permission",
+    method: "get",
+  },
+  addPermission: {
+    url: "/sys/user/manage/permission",
+    method: "post",
+  },
+  getRole: {
+    url: "/sys/user/manage/role",
+    method: "get",
+  },
+  addOrUpdateRole: {
+    url: "/sys/user/manage/role",
+    method: "post",
+  },
+  deleteRole: {
+    url: "/sys/user/manage/role",
+    method: "delete",
+  },
+  getUsers: {
+    url: "/sys/user/manage/user",
+    method: "get",
+  },
+  addOrUpdateUser: {
+    url: "/sys/user/manage/user",
+    method: "post",
+  },
+  deleteUser: {
+    url: "/sys/user/manage/user",
+    method: "delete",
+  },
+  updatePassword: {
+    url: "/sys/user/manage/user/password",
+    method: "post",
+  },
+};
+
+export const AuthApi = {
+  enable: {
+    url: "/auth/enable",
+    method: "get",
+  },
+  login: {
+    url: "/auth/login",
+    method: "post",
+  },
+  ownDataAuthority: {
+    url: "/auth/own/data/auth",
+    method: "get",
+  },
+};
+
+export const ClusterRoleRelationApi = {
+  select: {
+    url: "/cluster-role/relation",
+    method: "get",
+  },
+  add: {
+    url: "/cluster-role/relation",
+    method: "post",
+  },
+  delete: {
+    url: "/cluster-role/relation",
+    method: "delete",
+  },
+};
--- a/ui/src/utils/auth.js
+++ b/ui/src/utils/auth.js
@@ -0,0 +1,16 @@
+import Store from "@/store";
+
+export function isUnauthorized(permission) {
+  const enableAuth = Store.state.auth.enable;
+  const permissions = Store.state.auth.permissions;
+  return enableAuth && (!permissions || permissions.indexOf(permission) < 0);
+}
+
+export function isAuthorized(permission) {
+  const enableAuth = Store.state.auth.enable;
+  if (!enableAuth) {
+    return true;
+  }
+  const permissions = Store.state.auth.permissions;
+  return permissions && permissions.indexOf(permission) >= 0;
+}
--- a/ui/src/utils/constants.js
+++ b/ui/src/utils/constants.js
@@ -4,4 +4,9 @@ export const ConstantEvent = {

 export const Cache = {
  clusterInfo: "clusterInfo",
+  auth: "auth",
+  token: "access_token",
+  username: "login_user",
+  enableAuth: "enable_auth",
+  permissions: "permissions",
 };
--- a/ui/src/utils/local-cache.js
+++ b/ui/src/utils/local-cache.js
@@ -4,7 +4,51 @@ export function setClusterInfo(clusterInfo) {
  localStorage.setItem(Cache.clusterInfo, JSON.stringify(clusterInfo));
 }

+export function deleteClusterInfo() {
+  localStorage.removeItem(Cache.clusterInfo);
+}
+
 export function getClusterInfo() {
  const str = localStorage.getItem(Cache.clusterInfo);
  return str ? JSON.parse(str) : undefined;
 }
+
+// export function setAuth(auth) {
+//   localStorage.setItem(Cache.auth, JSON.stringify(auth));
+// }
+
+export function setToken(token) {
+  localStorage.setItem(Cache.token, token);
+}
+
+export function getToken() {
+  return localStorage.getItem(Cache.token);
+}
+
+export function deleteToken() {
+  localStorage.removeItem(Cache.token);
+}
+
+export function deleteUsername() {
+  localStorage.removeItem(Cache.username);
+}
+
+export function setUsername(username) {
+  localStorage.setItem(Cache.username, username);
+}
+
+export function getUsername() {
+  return localStorage.getItem(Cache.username);
+}
+
+export function setPermissions(permissions) {
+  localStorage.setItem(Cache.permissions, permissions);
+}
+
+export function getPermissions() {
+  return localStorage.getItem(Cache.permissions);
+}
+
+// export function setEnableAuth(enable) {
+//   localStorage.setItem()
+// }
--- a/ui/src/utils/request.js
+++ b/ui/src/utils/request.js
@@ -2,7 +2,7 @@ import axios from "axios";
 import notification from "ant-design-vue/es/notification";
 import { VueAxios } from "./axios";
 import { getClusterInfo } from "@/utils/local-cache";
-
+import Router from "@/router";
 // 创建 axios 实例
 const request = axios.create({
  // API 请求的默认前缀
@@ -10,14 +10,30 @@ const request = axios.create({
  timeout: 120000, // 请求超时时间
 });

+// axios.defaults.headers.common['X-Auth-Token'] = localStorage.getItem('access_token');
+
 // 异常拦截处理器
 const errorHandler = (error) => {
  if (error.response) {
-    const data = error.response.data;
-    notification.error({
-      message: error.response.status,
-      description: JSON.stringify(data),
-    });
+    if (error.response.status == 401) {
+      notification.error({
+        message: error.response.status,
+        description: "请登录",
+      });
+      Router.push({ path: "/login-page" });
+    } else if (error.response.status == 403) {
+      const data = error.response.data;
+      notification.error({
+        message: error.response.status,
+        description: data.msg,
+      });
+    } else {
+      const data = error.response.data;
+      notification.error({
+        message: error.response.status,
+        description: JSON.stringify(data),
+      });
+    }
  }
  return Promise.reject(error);
 };
@@ -29,6 +45,10 @@ request.interceptors.request.use((config) => {
    config.headers["X-Cluster-Info-Id"] = clusterInfo.id;
    // config.headers["X-Cluster-Info-Name"] = encodeURIComponent(clusterInfo.clusterName);
  }
+  const token = localStorage.getItem("access_token");
+  if (token) {
+    config.headers["X-Auth-Token"] = token;
+  }
  return config;
 }, errorHandler);

--- a/ui/src/views/acl/Acl.vue
+++ b/ui/src/views/acl/Acl.vue
@@ -1,10 +1,14 @@
 <template>
  <div class="content">
    <a-tabs default-active-key="1" size="large" tabPosition="top">
-      <a-tab-pane key="1" tab="资源授权">
+      <a-tab-pane key="1" tab="资源授权" v-if="isAuthorized('acl:authority')">
        <acl-list></acl-list>
      </a-tab-pane>
-      <a-tab-pane key="2" tab="SaslScram用户管理">
+      <a-tab-pane
+        key="2"
+        tab="SaslScram用户管理"
+        v-if="isAuthorized('acl:sasl-scram')"
+      >
        <sasl-scram></sasl-scram>
      </a-tab-pane>
    </a-tabs>
@@ -14,9 +18,11 @@
 <script>
 import AclList from "@/views/acl/AclList";
 import SaslScram from "@/views/acl/SaslScram";
+import { isAuthorized } from "@/utils/auth";

 export default {
  name: "Acl",
+  methods: { isAuthorized },
  components: {
    AclList,
    SaslScram,
--- a/ui/src/views/acl/AclDetail.vue
+++ b/ui/src/views/acl/AclDetail.vue
@@ -27,6 +27,7 @@
              ok-text="确认"
              cancel-text="取消"
              @confirm="onDelete(record)"
+              v-action:acl:authority:clean
            >
              <a-button>删除</a-button>
            </a-popconfirm>
--- a/ui/src/views/acl/AclList.vue
+++ b/ui/src/views/acl/AclList.vue
@@ -47,7 +47,10 @@
          </a-form>
        </div>
        <div class="operation-row-button">
-          <a-button type="primary" @click="onAddPrincipalAuth"
+          <a-button
+            type="primary"
+            @click="onAddPrincipalAuth"
+            v-action:acl:authority:add-principal
            >新增主体权限</a-button
          >
          <span v-show="hint != ''" class="hint"
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
许晓东	ecbd9dda6a	开启集群数据权限，同一浏览器不同账号登录看到其它账号集群信息bug fixed.	2024-06-16 20:36:00 +08:00
许晓东	30707e84a7	brokerId不是从0开始，topic管理->变更副本失败fixed.	2024-06-11 20:00:23 +08:00
许晓东	f98cca8727	升级kafka到3.5.0版本.	2024-05-23 21:37:38 +08:00
许晓东	ea95697e88	长级kafka到3.5.0版本.	2024-05-23 21:35:34 +08:00
许晓东	e90268a56e	issue #36 , searchByTime maxNums 改为配置.	2024-03-03 21:46:45 +08:00
许晓东	fcc315782c	更新wechat.	2024-02-25 21:47:06 +08:00
许晓东	b79529f607	调整acl user用户名/密码长度.	2024-01-15 20:38:30 +08:00
许晓东	f49e2f7d0c	更新功能脑图	2024-01-06 20:48:50 +08:00
许晓东	4929953acd	登录按钮支持回车登录.	2023-12-23 21:14:38 +08:00
许晓东	8c946a96ba	发布1.0.9版本.	2023-12-06 20:41:37 +08:00
许晓东	364a716388	增加消息菜单里发送统计的访问权限.	2023-12-03 22:04:29 +08:00
许晓东	2ef8573a5b	增加消息根据时间范围发送统计的查询.	2023-12-03 19:25:39 +08:00
许晓东	e368ba9527	增加消息根据时间范围发送统计的查询.	2023-12-03 19:24:16 +08:00
许晓东	dc84144443	在线发送消息支持选择同步、异步发送.	2023-11-28 21:21:37 +08:00
许晓东	471e1e4962	增加支持logo.	2023-11-09 21:45:34 +08:00
许晓东	b2773b596c	logback-test.xml rename to logback-spring.xml.	2023-10-25 16:10:40 +08:00
许晓东	ecd55b7517	打包配置打tar.gz和zip包.	2023-10-25 15:23:03 +08:00
许晓东	fed61394bc	消费端详情，订阅分区信息去掉左内边距.	2023-10-24 21:16:33 +08:00
许晓东	1a80c37d83	消费详情fixed，在线发送页面调整.	2023-09-24 21:33:06 +08:00
许晓东	34cdc33617	Merge branch 'main' of https://github.com/xxd763795151/kafka-console-ui	2023-09-21 16:52:46 +08:00
Xiaodong Xu	0041bafb83	Merge pull request #32 from zph95/feature/send_with_header send message with header	2023-09-20 15:32:27 +08:00
zph	b27db32ee2	send message with header	2023-09-19 02:54:28 +08:00
许晓东	5c5d4fd3a1	升级1.0.9，打压缩包增加版本号.	2023-09-11 13:23:29 +08:00
许晓东	93c1d3cd9d	支持不同的角色查看不同集群.	2023-08-27 22:06:05 +08:00
许晓东	5a28adfa6b	集群绑定角色页面.	2023-08-27 12:17:09 +08:00
许晓东	dac9295fab	增加集群绑定角色接口.	2023-08-23 22:13:22 +08:00
许晓东	f5b27d9b40	没有编辑权限，隐藏集群属性;打印全部操作日志.	2023-08-20 20:04:47 +08:00
许晓东	b529dc313e	topic和消费组下的查询类弹框支持鼠标点击蒙层关闭.	2023-07-23 14:03:39 +08:00
许晓东	848c8913f2	update wechat info.	2023-07-21 22:27:10 +08:00
许晓东	3ef9f1e012	shell 脚本启停路径修复.	2023-05-22 23:17:41 +08:00
许晓东	60fb02d6d4	指定utf-8编码.	2023-05-19 15:35:44 +08:00
许晓东	6f093fbb27	fixed 打包后访问权限问题，升级1.0.8.	2023-05-19 15:20:15 +08:00
许晓东	e186fff939	contact update.	2023-05-18 23:00:32 +08:00
Xiaodong Xu	c4676fb51a	Merge pull request #24 from xxd763795151/user-auth-dev User auth dev	2023-05-18 22:57:26 +08:00
许晓东	571efe6ddc	接口权限过滤.	2023-05-18 22:56:00 +08:00
许晓东	7e98a58f60	eslint fixed and 页面权限配置 and 默认权限数据加载.	2023-05-17 22:29:04 +08:00
许晓东	b08be2aa65	权限配置、默认用户、角色配置.	2023-05-16 21:23:45 +08:00
许晓东	238507de19	权限配置.	2023-05-15 21:58:55 +08:00
许晓东	435a5ca2bc	支持登录	2023-05-14 21:25:13 +08:00
许晓东	be8e567684	个人设置更新密码.	2023-05-09 20:44:54 +08:00
许晓东	da1ddeb1e7	用户删除、重置密码，分配角色.	2023-05-09 07:16:55 +08:00
许晓东	38ca2cfc52	用户新增，删除.	2023-05-07 22:55:01 +08:00
许晓东	cc8f671fdb	角色列表页面权限分配.	2023-05-04 16:24:34 +08:00
许晓东	e3b0dd5d2a	角色列表页面权限分配雏形.	2023-04-24 22:08:05 +08:00
许晓东	a37664f6d5	角色列表页面雏形.	2023-04-19 22:10:08 +08:00
许晓东	af52e6bc61	用户权限展示.	2023-04-17 22:24:51 +08:00
许晓东	fce1154c36	新增用户管理：用户、角色、权限新增接口	2023-04-11 22:01:16 +08:00
许晓东	0bf5c6f46c	更新下载地址.	2023-04-11 13:30:53 +08:00
许晓东	fe759aaf74	集群字段长度增加到1024，修复漏洞(CVE-2023-20860)：spring升级到5.3.26	2023-04-11 12:25:24 +08:00
许晓东	1e6a7bb269	polish 文档.	2023-02-10 20:41:15 +08:00
许晓东	fb440ae153	polish 文档.	2023-02-10 20:28:23 +08:00
				`@@ -0,0 +1 @@`
				<svg height="180" viewBox="0 0 180 180" width="180" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><linearGradient id="a" gradientUnits="userSpaceOnUse" x1="32.64" x2="82.77" y1="61.16" y2="85.54"><stop offset=".21" stop-color="#fe2857"/><stop offset="1" stop-color="#293896"/></linearGradient><linearGradient id="b" gradientUnits="userSpaceOnUse" x1="17.38" x2="82.95" y1="69.86" y2="21.23"><stop offset="0" stop-color="#fe2857"/><stop offset=".01" stop-color="#fe2857"/><stop offset=".86" stop-color="#ff318c"/></linearGradient><linearGradient id="c" gradientUnits="userSpaceOnUse" x1="74.17" x2="160.27" y1="21.58" y2="99.76"><stop offset=".02" stop-color="#ff318c"/><stop offset=".21" stop-color="#fe2857"/><stop offset=".86" stop-color="#fdb60d"/></linearGradient><linearGradient id="d" gradientUnits="userSpaceOnUse" x1="155.46" x2="55.07" y1="89.8" y2="158.9"><stop offset=".01" stop-color="#fdb60d"/><stop offset=".86" stop-color="#fcf84a"/></linearGradient><path d="m81.56 83.71-41.35-35a15 15 0 1 0 -14.47 25.7h.15l.39.12 52.16 15.89a3.53 3.53 0 0 0 1.18.21 3.73 3.73 0 0 0 1.93-6.91z" fill="url(#a)"/><path d="m89.85 25.93a10.89 10.89 0 0 0 -16.85-9.18l-50.5 30.66a15 15 0 1 0 17.9 24l45.27-36.89.36-.3a10.93 10.93 0 0 0 3.82-8.29z" fill="url(#b)"/><path d="m163.29 92-76.62-73.79a10.91 10.91 0 1 0 -14.81 16l.14.12 81.4 68.58a7.36 7.36 0 0 0 12.09-5.65 7.39 7.39 0 0 0 -2.2-5.26z" fill="url(#c)"/><path d="m165.5 97.29a7.35 7.35 0 0 0 -11.67-6l-92.71 45.3a15 15 0 1 0 15.48 25.59l85.73-58.84a7.35 7.35 0 0 0 3.17-6.05z" fill="url(#d)"/><path d="m60 60h60v60h-60z"/><g fill="#fff"><path d="m66.53 108.75h22.5v3.75h-22.5z"/><path d="m65.59 75.47 1.67-1.58a1.88 1.88 0 0 0 1.47.87c.64 0 1.06-.45 1.06-1.32v-5.92h2.58v5.94a3.44 3.44 0 0 1 -.92 2.63 3.52 3.52 0 0 1 -2.57 1 3.84 3.84 0 0 1 -3.29-1.62z"/><path d="m73.53 67.52h7.53v2.19h-5v1.43h4.49v2h-4.45v1.49h5v2.2h-7.6z"/><path d="m84.73 69.79h-2.8v-2.27h8.21v2.27h-2.81v7.09h-2.6z"/><path d="m66.63 80.58h4.42a3.47 3.47 0 0 1 2.55.83 2.09 2.09 0 0 1 .61 1.52 2.18 2.18 0 0 1 -1.45 2.09 2.27 2.27 0 0 1 1.86 2.29c0 1.69-1.31 2.69-3.55 2.69h-4.44zm5 2.89c0-.52-.42-.8-1.18-.8h-1.29v1.64h1.25c.78 0 1.24-.27 1.24-.81zm-.9 2.66h-1.57v1.73h1.62c.8 0 1.24-.31 1.24-.86-.02-.53-.4-.87-1.27-.87z"/><path d="m75.45 80.58h4.15a4.14 4.14 0 0 1 3.05 1 2.92 2.92 0 0 1 .83 2.18 3 3 0 0 1 -1.93 2.89l2.24 3.35h-3l-1.89-2.84h-.87v2.84h-2.6zm4 4.5c.87 0 1.4-.43 1.4-1.12 0-.75-.55-1.13-1.41-1.13h-1.39v2.27z"/><path d="m87.09 80.51h2.5l4 9.44h-2.79l-.67-1.69h-3.63l-.67 1.74h-2.71zm2.28 5.73-1.05-2.65-1.06 2.65z"/><path d="m94 80.55h2.6v9.37h-2.6z"/><path d="m97.56 80.55h2.44l3.37 5v-5h2.57v9.37h-2.27l-3.53-5.14v5.14h-2.58z"/><path d="m106.37 88.53 1.44-1.73a4.86 4.86 0 0 0 3 1.13c.71 0 1.08-.25 1.08-.65 0-.41-.3-.61-1.59-.91-2-.46-3.53-1-3.53-2.93 0-1.74 1.38-3 3.63-3a5.88 5.88 0 0 1 3.85 1.25l-1.25 1.78a4.56 4.56 0 0 0 -2.62-.92c-.63 0-.94.25-.94.6 0 .43.32.62 1.63.91 2.15.47 3.48 1.17 3.48 2.92 0 1.91-1.51 3-3.78 3a6.56 6.56 0 0 1 -4.4-1.45z"/></g><path d="m0 0h180v180h-180z" fill="none"/></svg>