package com.crm.auth.controller;
import cn.hutool.core.util.StrUtil;
import com.crm.auth.domain.dto.RoleDTO;
import com.crm.auth.domain.param.RoleParam;
import com.crm.auth.service.ISysRoleService;
import com.crm.base.domain.result.PageResult;
import com.crm.base.domain.result.Result;
import io.swagger.v3.oas.annotations.Operation;
import lombok.RequiredArgsConstructor;
import org.springframework.security.access.prepost.PreAuthorize;
import org.springframework.web.bind.annotation.*;
import java.util.Arrays;
import java.util.Collections;
import java.util.List;
import java.util.stream.Collectors;
/**
* 角色管理端接口(ADR-0012)
*
遵循全局接口契约:非严格 RESTful,写操作 POST + 动作后缀,表单字段收参
* 权限控制:纯 hasAuthority,权限码由数据初始化器种子化到权限资源树
* 薄适配层,只调 {@link ISysRoleService},不含业务逻辑(ADR-0017)
*/
@RestController
@RequestMapping("/api/roles")
@RequiredArgsConstructor
public class RoleController {
private final ISysRoleService sysRoleService;
@PostMapping("/page")
@PreAuthorize("hasAuthority('crm:role:list')")
@Operation(summary = "分页查询角色", tags = {"系统管理/角色管理"})
public Result> page(RoleParam param) {
return Result.success(sysRoleService.pageRoles(param));
}
@PostMapping("/saveOrUpdate")
@PreAuthorize("hasAuthority('crm:role:save')")
@Operation(summary = "新增或编辑角色", tags = {"系统管理/角色管理"})
public Result saveOrUpdate(RoleDTO dto) {
sysRoleService.saveRole(dto.toEntity());
return Result.success();
}
@GetMapping("/detail")
@PreAuthorize("hasAuthority('crm:role:detail')")
@Operation(summary = "角色详情(含授权资源集合)", tags = {"系统管理/角色管理"})
public Result detail(@RequestParam Long roleId) {
return Result.success(sysRoleService.getRoleDetail(roleId));
}
@PostMapping("/assign-resources")
@PreAuthorize("hasAuthority('crm:role:assign')")
@Operation(summary = "分配角色权限资源(祖先补全+全量替换)", tags = {"系统管理/角色管理"})
public Result assignResources(
@RequestParam Long roleId,
@RequestParam String resourceIds) {
List menuIdList = StrUtil.isBlank(resourceIds)
? Collections.emptyList()
: Arrays.stream(resourceIds.split(","))
.filter(StrUtil::isNotBlank)
.map(idStr -> Long.valueOf(idStr.trim()))
.collect(Collectors.toList());
sysRoleService.assignResources(roleId, menuIdList);
return Result.success();
}
@PostMapping("/delete")
@PreAuthorize("hasAuthority('crm:role:delete')")
@Operation(summary = "删除角色(级联清理关联表)", tags = {"系统管理/角色管理"})
public Result delete(@RequestParam Long id) {
sysRoleService.deleteRoleCascade(id);
return Result.success();
}
}