feat: tkuser 통합 관리 서비스 + 전체 시스템 SSO 쿠키 인증 통합

- tkuser 서비스 신규 추가 (API + Web)
  - 사용자/권한/프로젝트/부서/작업자/작업장/설비/작업/휴가 통합 관리
  - 작업장 탭: 공장→작업장 드릴다운 네비게이션 + 구역지도 클릭 연동
  - 작업 탭: 공정(work_types)→작업(tasks) 계층 관리
  - 휴가 탭: 유형 관리 + 연차 배정(근로기준법 자동계산)
- 전 시스템 SSO 쿠키 인증으로 통합 (.technicalkorea.net 공유)
- System 2: 작업 이슈 리포트 기능 강화
- System 3: tkuser API 연동, 페이지 권한 체계 적용
- docker-compose에 tkuser-api, tkuser-web 서비스 추가
- ARCHITECTURE.md, DEPLOYMENT.md 문서 작성

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

user-management/api/routes/departmentRoutes.js

@@ -0,0 +1,16 @@
+/**
+ * Department Routes
+ */
+
+const express = require('express');
+const router = express.Router();
+const departmentController = require('../controllers/departmentController');
+const { requireAuth, requireAdmin } = require('../middleware/auth');
+
+router.get('/', requireAuth, departmentController.getAll);
+router.get('/:id', requireAuth, departmentController.getById);
+router.post('/', requireAdmin, departmentController.create);
+router.put('/:id', requireAdmin, departmentController.update);
+router.delete('/:id', requireAdmin, departmentController.remove);
+
+module.exports = router;

user-management/api/routes/equipmentRoutes.js

@@ -0,0 +1,32 @@
+/**
+ * Equipment Routes
+ */
+
+const express = require('express');
+const router = express.Router();
+const equipmentController = require('../controllers/equipmentController');
+const { requireAuth, requireAdmin } = require('../middleware/auth');
+const upload = require('../middleware/upload');
+
+// 고정 경로를 /:id 보다 먼저 등록
+router.get('/types', requireAuth, equipmentController.getTypes);
+router.get('/next-code', requireAuth, equipmentController.getNextCode);
+router.get('/workplace/:workplaceId', requireAuth, equipmentController.getByWorkplace);
+// 사진 삭제 (photo_id만으로)
+router.delete('/photos/:photoId', requireAdmin, equipmentController.deletePhoto);
+
+// 기본 CRUD
+router.get('/', requireAuth, equipmentController.getAll);
+router.get('/:id', requireAuth, equipmentController.getById);
+router.post('/', requireAdmin, equipmentController.create);
+router.put('/:id', requireAdmin, equipmentController.update);
+router.delete('/:id', requireAdmin, equipmentController.remove);
+
+// 지도 위치
+router.patch('/:id/map-position', requireAdmin, equipmentController.updateMapPosition);
+
+// 사진
+router.post('/:id/photos', requireAdmin, upload.single('photo'), equipmentController.addPhoto);
+router.get('/:id/photos', requireAuth, equipmentController.getPhotos);
+
+module.exports = router;

user-management/api/routes/permissionRoutes.js

@@ -0,0 +1,23 @@
+/**
+ * Permission Routes
+ */
+
+const express = require('express');
+const router = express.Router();
+const permissionController = require('../controllers/permissionController');
+const { requireAuth, requireAdmin } = require('../middleware/auth');
+
+// 권한 부여 (admin)
+router.post('/grant', requireAdmin, permissionController.grantPermission);
+router.post('/bulk-grant', requireAdmin, permissionController.bulkGrant);
+
+// 접근 권한 확인 (auth)
+router.get('/check/:uid/:page', requireAuth, permissionController.checkAccess);
+
+// 설정 가능 페이지 목록 (auth)
+router.get('/available-pages', requireAuth, permissionController.getAvailablePages);
+
+// 권한 삭제 (admin)
+router.delete('/:id', requireAdmin, permissionController.deletePermission);
+
+module.exports = router;

user-management/api/routes/projectRoutes.js

@@ -0,0 +1,17 @@
+/**
+ * Project Routes
+ */
+
+const express = require('express');
+const router = express.Router();
+const projectController = require('../controllers/projectController');
+const { requireAuth, requireAdmin } = require('../middleware/auth');
+
+router.get('/', requireAuth, projectController.getAll);
+router.get('/active', requireAuth, projectController.getActive);
+router.get('/:id', requireAuth, projectController.getById);
+router.post('/', requireAdmin, projectController.create);
+router.put('/:id', requireAdmin, projectController.update);
+router.delete('/:id', requireAdmin, projectController.remove);
+
+module.exports = router;

user-management/api/routes/taskRoutes.js

@@ -0,0 +1,26 @@
+/**
+ * Task Routes
+ *
+ * 공정(work-types) + 작업(tasks) 라우팅
+ */
+
+const express = require('express');
+const router = express.Router();
+const taskController = require('../controllers/taskController');
+const { requireAuth, requireAdmin } = require('../middleware/auth');
+
+// Work Types (공정)
+router.get('/work-types', requireAuth, taskController.getWorkTypes);
+router.post('/work-types', requireAdmin, taskController.createWorkType);
+router.put('/work-types/:id', requireAdmin, taskController.updateWorkType);
+router.delete('/work-types/:id', requireAdmin, taskController.deleteWorkType);
+
+// Tasks (작업)
+router.get('/', requireAuth, taskController.getTasks);
+router.get('/active', requireAuth, taskController.getActiveTasks);
+router.get('/:id', requireAuth, taskController.getTaskById);
+router.post('/', requireAdmin, taskController.createTask);
+router.put('/:id', requireAdmin, taskController.updateTask);
+router.delete('/:id', requireAdmin, taskController.deleteTask);
+
+module.exports = router;

user-management/api/routes/userRoutes.js

@@ -0,0 +1,24 @@
+/**
+ * User Routes
+ */
+
+const express = require('express');
+const router = express.Router();
+const userController = require('../controllers/userController');
+const permissionController = require('../controllers/permissionController');
+const { requireAuth, requireAdmin } = require('../middleware/auth');
+
+// 사용자 CRUD (admin)
+router.get('/', requireAdmin, userController.getUsers);
+router.post('/', requireAdmin, userController.createUser);
+router.put('/:id', requireAdmin, userController.updateUser);
+router.delete('/:id', requireAdmin, userController.deleteUser);
+
+// 비밀번호 관리
+router.post('/:id/reset-password', requireAdmin, userController.resetPassword);
+router.post('/change-password', requireAuth, userController.changePassword);
+
+// 사용자별 페이지 권한 조회 (auth - /api/users/:id/page-permissions)
+router.get('/:id/page-permissions', requireAuth, permissionController.getUserPermissions);
+
+module.exports = router;

user-management/api/routes/vacationRoutes.js

@@ -0,0 +1,28 @@
+/**
+ * Vacation Routes
+ *
+ * 휴가 유형 + 연차 배정 라우팅
+ */
+
+const express = require('express');
+const router = express.Router();
+const vc = require('../controllers/vacationController');
+const { requireAuth, requireAdmin } = require('../middleware/auth');
+
+// Vacation Types (휴가 유형)
+router.get('/types', requireAuth, vc.getVacationTypes);
+router.post('/types', requireAdmin, vc.createVacationType);
+router.put('/types/priorities', requireAdmin, vc.updatePriorities);
+router.put('/types/:id', requireAdmin, vc.updateVacationType);
+router.delete('/types/:id', requireAdmin, vc.deleteVacationType);
+
+// Vacation Balances (연차 배정)
+router.get('/balances/year/:year', requireAdmin, vc.getBalancesByYear);
+router.get('/balances/worker/:workerId/year/:year', requireAuth, vc.getBalancesByWorkerYear);
+router.post('/balances', requireAdmin, vc.createBalance);
+router.post('/balances/bulk-upsert', requireAdmin, vc.bulkUpsertBalances);
+router.post('/balances/auto-calculate', requireAdmin, vc.autoCalculate);
+router.put('/balances/:id', requireAdmin, vc.updateBalance);
+router.delete('/balances/:id', requireAdmin, vc.deleteBalance);
+
+module.exports = router;

user-management/api/routes/workerRoutes.js

@@ -0,0 +1,16 @@
+/**
+ * Worker Routes
+ */
+
+const express = require('express');
+const router = express.Router();
+const workerController = require('../controllers/workerController');
+const { requireAuth, requireAdmin } = require('../middleware/auth');
+
+router.get('/', requireAuth, workerController.getAll);
+router.get('/:id', requireAuth, workerController.getById);
+router.post('/', requireAdmin, workerController.create);
+router.put('/:id', requireAdmin, workerController.update);
+router.delete('/:id', requireAdmin, workerController.remove);
+
+module.exports = router;

user-management/api/routes/workplaceRoutes.js

@@ -0,0 +1,28 @@
+/**
+ * Workplace Routes
+ */
+
+const express = require('express');
+const router = express.Router();
+const workplaceController = require('../controllers/workplaceController');
+const { requireAuth, requireAdmin } = require('../middleware/auth');
+const upload = require('../middleware/upload');
+
+router.get('/categories', requireAuth, workplaceController.getCategories);
+
+// 구역지도 (/:id 보다 먼저 등록)
+router.post('/categories/:id/layout-image', requireAdmin, upload.single('image'), workplaceController.uploadCategoryLayoutImage);
+router.get('/categories/:categoryId/map-regions', requireAuth, workplaceController.getMapRegionsByCategory);
+router.post('/map-regions', requireAdmin, workplaceController.createMapRegion);
+router.put('/map-regions/:id', requireAdmin, workplaceController.updateMapRegion);
+router.delete('/map-regions/:id', requireAdmin, workplaceController.deleteMapRegion);
+
+router.post('/:id/layout-image', requireAdmin, upload.single('image'), workplaceController.uploadWorkplaceLayoutImage);
+
+router.get('/', requireAuth, workplaceController.getAll);
+router.get('/:id', requireAuth, workplaceController.getById);
+router.post('/', requireAdmin, workplaceController.create);
+router.put('/:id', requireAdmin, workplaceController.update);
+router.delete('/:id', requireAdmin, workplaceController.remove);
+
+module.exports = router;