Skip to main content
Version: 0.3.x(Latest)

Introduction​

LinaPro's component design centers on one principle: stable foundation, extend on demand. Platform-level capabilities are built into the core framework; business capabilities are delivered as self-contained components; components collaborate through explicit contracts with no hidden coupling.

This approach yields several key characteristics:

Clear boundaries, independently replaceable. The frontend workspace, backend core framework, and plugin system each have a well-defined scope of responsibility. The workspace depends only on the core framework's public API; plugins depend only on the stable extension interfaces the core framework publishes. Any layer can be upgraded or replaced without breaking the others.

Self-contained capabilities, opt-in delivery. Each business component (plugin) encapsulates its own API routes, database resources, frontend pages, menu permissions, language packs, and scheduled tasks — installed and uninstalled through the plugin lifecycle without touching core framework code. Official capabilities ship as independent plugins, so unused features never enter the deployment artifact.

Platform capabilities out of the box. Authentication, RBAC, multi-tenancy, scheduling, i18n, cluster coordination, and API documentation are all built into the core framework. Business plugins consume these directly without reimplementing them.

Dual-mode plugins balance flexibility and performance. Long-lived business modules use source plugins compiled into the core framework for native Go performance. When hot-loading or commercial binary distribution is required, WASM dynamic plugins fill that role — both modes share a single governance surface.

đŸ“„ī¸Permission

permission management strategy of the LinaPro core framework service, including the issuance, parsing, and revocation of dual JWTs (Access Token and Refresh Token), lifecycle management of both token types, online session management via hot-state storage, the design of the RBAC role-permission model (three-tier relationship: role → menu → permission), token-scoped access context caching with revision-based invalidation, declarative API permission management via g.Meta struct tags and the Permission middleware enforcement flow, and menu permission management (menu types, role-menu associations, permission trees, and data scope control) — giving developers a complete understanding of the authentication and authorization system.