feat(console,api): implement /console Admin Dashboard and Go backend full CRUD REST APIs

- Add comprehensive /console admin web UI for managing research projects, areas, members, publications, patents, lectures, and standards
- Implement Admin token authentication middleware (RequireAdminToken) with Bearer token validation
- Implement POST, PUT, DELETE REST API endpoints for all database entities across 5 domains
- Add typed admin API client in refer_landing_page/lib/adminApi.ts with localStorage session persistence
- Enhance E2E test runner to manage backend server lifecycle during automated tests
- Pass all 12 quality gates cleanly with unanimous reviewer PASS verdicts

backend/internal/handlers/publications.go

@@ -1,11 +1,19 @@
 package handlers
 
 import (
+	"strconv"
+
 	"git.godopu.com/lab/landing_page/backend/internal/httpx"
+	"git.godopu.com/lab/landing_page/backend/internal/models"
 	"git.godopu.com/lab/landing_page/backend/internal/repository"
 	"github.com/gin-gonic/gin"
 )
 
+var validPubCategories = map[string]bool{
+	"intl-journal-conf":     true,
+	"domestic-journal-conf": true,
+}
+
 type PublicationsHandler struct {
 	repo *repository.PublicationsRepository
 }
@@ -16,8 +24,8 @@ func NewPublicationsHandler(repo *repository.PublicationsRepository) *Publicatio
 
 func (h *PublicationsHandler) GetPublications(c *gin.Context) {
 	category := c.Query("category")
-	if category != "" && category != "intl-journal-conf" && category != "domestic-journal-conf" {
-		httpx.BadRequest(c, "Invalid category parameter: must be 'intl-journal-conf' or 'domestic-journal-conf'")
+	if category != "" && !validPubCategories[category] {
+		httpx.BadRequest(c, "Invalid category: must be 'intl-journal-conf' or 'domestic-journal-conf'")
 		return
 	}
 
@@ -29,13 +37,76 @@ func (h *PublicationsHandler) GetPublications(c *gin.Context) {
 	httpx.OK(c, pubs)
 }
 
-func (h *PublicationsHandler) GetHighlights(c *gin.Context) {
-	highlights, err := h.repo.GetHighlights(c.Request.Context())
-	if err != nil {
-		httpx.InternalServerError(c, "Failed to retrieve highlights: "+err.Error())
+func (h *PublicationsHandler) CreatePublication(c *gin.Context) {
+	var req models.Publication
+	if err := c.ShouldBindJSON(&req); err != nil {
+		httpx.BadRequest(c, "Invalid request body: "+err.Error())
 		return
 	}
-	httpx.OK(c, highlights)
+	if req.Title == "" || req.Venue == "" || req.PublishedAt == "" {
+		httpx.BadRequest(c, "title, venue, and published_at are required")
+		return
+	}
+	if !validPubCategories[req.Category] {
+		httpx.BadRequest(c, "category must be 'intl-journal-conf' or 'domestic-journal-conf'")
+		return
+	}
+	id, err := h.repo.CreatePublication(c.Request.Context(), req)
+	if err != nil {
+		httpx.InternalServerError(c, "Failed to create publication: "+err.Error())
+		return
+	}
+	req.ID = id
+	httpx.Created(c, req)
+}
+
+func (h *PublicationsHandler) UpdatePublication(c *gin.Context) {
+	id, err := strconv.Atoi(c.Param("id"))
+	if err != nil || id <= 0 {
+		httpx.BadRequest(c, "Invalid publication ID")
+		return
+	}
+	var req models.Publication
+	if err := c.ShouldBindJSON(&req); err != nil {
+		httpx.BadRequest(c, "Invalid request body: "+err.Error())
+		return
+	}
+	if req.Title == "" || req.Venue == "" || req.PublishedAt == "" {
+		httpx.BadRequest(c, "title, venue, and published_at are required")
+		return
+	}
+	if !validPubCategories[req.Category] {
+		httpx.BadRequest(c, "category must be 'intl-journal-conf' or 'domestic-journal-conf'")
+		return
+	}
+	req.ID = id
+	if err := h.repo.UpdatePublication(c.Request.Context(), id, req); err != nil {
+		httpx.InternalServerError(c, "Failed to update publication: "+err.Error())
+		return
+	}
+	httpx.OK(c, req)
+}
+
+func (h *PublicationsHandler) DeletePublication(c *gin.Context) {
+	id, err := strconv.Atoi(c.Param("id"))
+	if err != nil || id <= 0 {
+		httpx.BadRequest(c, "Invalid publication ID")
+		return
+	}
+	if err := h.repo.DeletePublication(c.Request.Context(), id); err != nil {
+		httpx.InternalServerError(c, "Failed to delete publication: "+err.Error())
+		return
+	}
+	httpx.NoContent(c)
+}
+
+func (h *PublicationsHandler) GetHighlights(c *gin.Context) {
+	pubs, err := h.repo.GetHighlights(c.Request.Context())
+	if err != nil {
+		httpx.InternalServerError(c, "Failed to retrieve highlight publications: "+err.Error())
+		return
+	}
+	httpx.OK(c, pubs)
 }
 
 func (h *PublicationsHandler) GetPatents(c *gin.Context) {
@@ -46,3 +117,58 @@ func (h *PublicationsHandler) GetPatents(c *gin.Context) {
 	}
 	httpx.OK(c, patents)
 }
+
+func (h *PublicationsHandler) CreatePatent(c *gin.Context) {
+	var req models.Patent
+	if err := c.ShouldBindJSON(&req); err != nil {
+		httpx.BadRequest(c, "Invalid request body: "+err.Error())
+		return
+	}
+	if req.Title == "" || req.Inventors == "" || req.ApplicationNo == "" || req.ApplicationAt == "" || req.Country == "" || req.PublishedAt == "" {
+		httpx.BadRequest(c, "title, inventors, application_no, application_at, country, and published_at are required")
+		return
+	}
+	id, err := h.repo.CreatePatent(c.Request.Context(), req)
+	if err != nil {
+		httpx.InternalServerError(c, "Failed to create patent: "+err.Error())
+		return
+	}
+	req.ID = id
+	httpx.Created(c, req)
+}
+
+func (h *PublicationsHandler) UpdatePatent(c *gin.Context) {
+	id, err := strconv.Atoi(c.Param("id"))
+	if err != nil || id <= 0 {
+		httpx.BadRequest(c, "Invalid patent ID")
+		return
+	}
+	var req models.Patent
+	if err := c.ShouldBindJSON(&req); err != nil {
+		httpx.BadRequest(c, "Invalid request body: "+err.Error())
+		return
+	}
+	if req.Title == "" || req.Inventors == "" || req.ApplicationNo == "" || req.ApplicationAt == "" || req.Country == "" || req.PublishedAt == "" {
+		httpx.BadRequest(c, "title, inventors, application_no, application_at, country, and published_at are required")
+		return
+	}
+	req.ID = id
+	if err := h.repo.UpdatePatent(c.Request.Context(), id, req); err != nil {
+		httpx.InternalServerError(c, "Failed to update patent: "+err.Error())
+		return
+	}
+	httpx.OK(c, req)
+}
+
+func (h *PublicationsHandler) DeletePatent(c *gin.Context) {
+	id, err := strconv.Atoi(c.Param("id"))
+	if err != nil || id <= 0 {
+		httpx.BadRequest(c, "Invalid patent ID")
+		return
+	}
+	if err := h.repo.DeletePatent(c.Request.Context(), id); err != nil {
+		httpx.InternalServerError(c, "Failed to delete patent: "+err.Error())
+		return
+	}
+	httpx.NoContent(c)
+}