fix: resolve #356 - PR 校验仅覆盖前端，后端无构建测试门禁

.github/workflows/backend-checks.yml

@@ -0,0 +1,41 @@
+name: Backend Checks
+
+on:
+  pull_request:
+    branches: [main]
+
+permissions:
+  contents: read
+
+jobs:
+  backend:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-go@v5
+        with:
+          go-version-file: go.mod
+          cache: true
+
+      - name: Prepare embedded frontend assets
+        run: |
+          mkdir -p web/dist
+          touch web/dist/.keep
+
+      - name: Install ineffassign
+        run: go install github.com/gordonklaus/ineffassign@v0.2.0
+
+      - name: Run ineffassign
+        run: $(go env GOPATH)/bin/ineffassign ./...
+
+      - name: Run go vet
+        run: go vet ./...
+
+      - name: Run unit tests
+        run: go test -v -count=1 -timeout 600s ./...
+
+      - name: Build backend binary
+        run: |
+          mkdir -p .tmp/ci
+          go build -o .tmp/ci/maxx ./cmd/maxx

web/src/components/auth/admin-route.tsx

@@ -11,15 +11,19 @@ export function AdminRoute({ children }: AdminRouteProps) {
   const { t } = useTranslation();
   const { authEnabled, user, isLoading } = useAuth();
 
-  if (isLoading || (authEnabled && !user)) {
+  if (isLoading) {
     return (
       <div className="flex min-h-screen items-center justify-center">
         <span className="text-muted-foreground">{t('common.loading')}</span>
       </div>
     );
   }
 
-  if (authEnabled && user.role !== 'admin') {
+  if (authEnabled && !user) {
+    return <Navigate to="/login" replace />;
+  }
+
+  if (authEnabled && user?.role !== 'admin') {
     return <Navigate to="/" replace />;
   }