完善readme

Author: yluiop123

README.md

@@ -1,6 +1,9 @@
 # ORANGE
 
-ORANGE is a Shadcn Admin UI built with `Shadcn` , `Vite` , `React`,`Zustand`,`React-Router`
+<img height="80" src="./readme/images/orange.png">
+
+ORANGE is a full-stack project with a React frontend located in the vite-shadcn directory, a Java Spring Boot backend in the springboot directory, and a PostgreSQL database in the database directory. Future expansions will include additional frontend frameworks (Vue, Angular, etc.), backend languages (Go, Python, Node.js, Rust, C#, C++, etc.), and databases (MySQL, MariaDB, etc.).
+
 
 Project URL: https://yluiop123.github.io/orange
 

README.zh-CN.md

@@ -1,6 +1,7 @@
 # ORANGE
+<img height="80" src="./readme/images/orange.png">
 
-ORANGE 是一个基于 `Shadcn` , `Vite` , `React`,`Zustand`,`React-Router` 等构建的SHADCN ADMIN UI 。
+ORANGE 是一个前后端分离项目，前端在vite-shadcn目录下（react版本），后端在springboot目录下（java版本），数据库在database目录下（已实现postgres版本）。后期前端会扩展vue、angular等，后端会扩展（go、python、node、rust、c#、c++等），数据库会扩展mysql、mariadb等。
 
 项目访问地址： https://yluiop123.github.io/orange
 

nestjs/AUTH_README.md

@@ -0,0 +1,126 @@
+# NestJS 登录鉴权和权限守卫
+
+## 功能概述
+
+本项目实现了基于JWT的登录认证和权限控制系统。
+
+## API 端点
+
+### 认证相关
+
+#### 登录
+```
+POST /auth/login
+Content-Type: application/json
+
+{
+  "username": "admin",
+  "password": "password"
+}
+```
+
+#### 注册
+```
+POST /auth/register
+Content-Type: application/json
+
+{
+  "username": "newuser",
+  "password": "password",
+  "name": "新用户",
+  "email": "user@example.com"
+}
+```
+
+### 用户管理 (需要认证)
+
+所有用户管理API都需要在请求头中包含JWT token：
+```
+Authorization: Bearer <your-jwt-token>
+```
+
+#### 查询用户
+```
+POST /api/system/users
+```
+
+#### 添加用户
+```
+POST /api/system/users/add
+Content-Type: application/json
+
+{
+  "name": "张三",
+  "username": "zhangsan",
+  "password": "123456",
+  "email": "zhangsan@example.com"
+}
+```
+
+#### 编辑用户
+```
+POST /api/system/users/edit
+```
+
+#### 删除用户
+```
+DELETE /api/system/users
+```
+
+#### 获取用户详情
+```
+GET /api/system/users/detail/:userId
+```
+
+## 权限控制
+
+### 权限装饰器
+
+使用 `@RequirePermissions` 装饰器为路由设置权限要求：
+
+```typescript
+@Post()
+@RequirePermissions('user:add')
+async addUser(@Body() dto: AddUserDto) {
+  // 只有拥有 'user:add' 权限的用户才能访问
+}
+```
+
+### 守卫顺序
+
+控制器使用以下守卫：
+1. `JwtAuthGuard` - 验证JWT token
+2. `PermissionGuard` - 检查用户权限
+
+## 环境变量
+
+设置以下环境变量：
+
+```bash
+JWT_SECRET=your-secret-key
+POSTGRES_HOST=localhost
+POSTGRES_PORT=5432
+POSTGRES_USER=postgres
+POSTGRES_PASSWORD=postgres
+POSTGRES_DB=orange
+```
+
+## 启动应用
+
+```bash
+pnpm install
+pnpm run build
+pnpm run start:prod
+```
+
+## 测试认证流程
+
+1. 注册新用户或使用现有用户登录
+2. 使用返回的 `access_token` 在后续请求中设置 `Authorization` 头
+3. 访问受保护的API端点
+
+## 注意事项
+
+- 当前权限检查是简化的，所有已认证用户都可以访问所有API
+- 后续可以扩展为从数据库查询用户的实际权限
+- JWT token 默认24小时过期

nestjs/package.json

@@ -22,9 +22,21 @@
   "dependencies": {
     "@nestjs/common": "^11.0.1",
     "@nestjs/core": "^11.0.1",
+    "@nestjs/jwt": "^11.0.2",
+    "@nestjs/passport": "^11.0.5",
     "@nestjs/platform-express": "^11.0.1",
+    "@nestjs/typeorm": "^11.0.0",
+    "@types/bcryptjs": "^3.0.0",
+    "@types/passport-jwt": "^4.0.1",
+    "bcryptjs": "^3.0.3",
+    "class-transformer": "^0.5.1",
+    "class-validator": "^0.15.1",
+    "passport": "^0.7.0",
+    "passport-jwt": "^4.0.1",
+    "pg": "^8.20.0",
     "reflect-metadata": "^0.2.2",
-    "rxjs": "^7.8.1"
+    "rxjs": "^7.8.1",
+    "typeorm": "^0.3.28"
   },
   "devDependencies": {
     "@eslint/eslintrc": "^3.2.0",