gongxue-base/apps/server/src/rbac/rbac.controller.ts

import {
  Controller,
  Get,
  Post,
  Put,
  Delete,
  Body,
  Param,
  Query,
  UseGuards,
  Request,
  BadRequestException,
} from '@nestjs/common';
import { RbacService } from './rbac.service';
import {
  CreateRoleDto,
  UpdateRoleDto,
  CreateUserDto,
  UpdateUserDto,
  ResetPasswordDto,
  UpdateProfileDto,
} from './dto/rbac.dto';
import { JwtAuthGuard } from '../auth/guards/jwt-auth.guard';
import { RequirePermission } from '../auth/decorators/permission.decorator';
import { OperationLogsService } from '../operation-logs/operation-logs.service';
import { logAudit } from '../common/with-audit-log';

@UseGuards(JwtAuthGuard)
@Controller('rbac')
export class RbacController {
  constructor(
    private rbacService: RbacService,
    private logService: OperationLogsService,
  ) {}

  @Get('roles')
  @RequirePermission('role:view')
  findAllRoles() {
    return this.rbacService.findAllRoles();
  }

  @Get('roles/:id')
  @RequirePermission('role:view')
  findRoleById(@Param('id') id: string) {
    return this.rbacService.findRoleById(+id);
  }

  @Post('roles')
  @RequirePermission('role:create')
  async createRole(@Body() dto: CreateRoleDto, @Request() req: any) {
    const result = await this.rbacService.createRole(dto);
    await logAudit(this.logService, req, {
      module: 'RBAC', action: '创建角色', detail: `角色: ${dto.name}`,
    });
    return result;
  }

  @Put('roles/:id')
  @RequirePermission('role:edit')
  async updateRole(@Param('id') id: string, @Body() dto: UpdateRoleDto, @Request() req: any) {
    try {
      const result = await this.rbacService.updateRole(+id, dto);
      await logAudit(this.logService, req, {
        module: 'RBAC', action: '编辑角色', targetId: +id, targetType: 'role', detail: JSON.stringify(dto),
      });
      return result;
    } catch (e: any) {
      throw new BadRequestException(e.message);
    }
  }

  @Delete('roles/:id')
  @RequirePermission('role:delete')
  async deleteRole(@Param('id') id: string, @Request() req: any) {
    try {
      const result = await this.rbacService.deleteRole(+id);
      await logAudit(this.logService, req, {
        module: 'RBAC', action: '停用角色', targetId: +id, targetType: 'role',
      });
      return result;
    } catch (e: any) {
      throw new BadRequestException(e.message);
    }
  }

  @Get('permissions')
  @RequirePermission('role:view')
  findAllPermissions() {
    return this.rbacService.findAllPermissions();
  }

  @Get('permissions/tree')
  @RequirePermission('role:view')
  getPermissionTree() {
    return this.rbacService.getPermissionTree();
  }

  @Get('users')
  @RequirePermission('user:view', 'teacher:view')
  getUsers(@Query('isArchived') isArchived?: string) {
    const archived = isArchived === 'true';
    return this.rbacService.findAllUsers(archived);
  }

  @Post('users')
  @RequirePermission('user:create')
  async createUser(@Body() dto: CreateUserDto, @Request() req: any) {
    try {
      const result = await this.rbacService.createUser(dto);
      await logAudit(this.logService, req, {
        module: '账号', action: '创建账号', detail: `用户名: ${dto.username}`,
      });
      return result;
    } catch (e: any) {
      throw new BadRequestException(e.message);
    }
  }

  @Put('users/:id')
  @RequirePermission('user:edit')
  async updateUser(@Param('id') id: string, @Body() dto: UpdateUserDto, @Request() req: any) {
    try {
      const result = await this.rbacService.updateUser(+id, dto);
      await logAudit(this.logService, req, {
        module: '账号', action: '更新账号', targetId: +id, targetType: 'user', detail: JSON.stringify(dto),
      });
      return result;
    } catch (e: any) {
      throw new BadRequestException(e.message);
    }
  }

  @Put('users/:id/password')
  @RequirePermission('user:reset-password')
  async resetPassword(@Param('id') id: string, @Body() dto: ResetPasswordDto, @Request() req: any) {
    try {
      const result = await this.rbacService.resetPassword(+id, dto.password);
      await logAudit(this.logService, req, {
        module: '账号', action: '重置密码', targetId: +id, targetType: 'user',
      });
      return result;
    } catch (e: any) {
      throw new BadRequestException(e.message);
    }
  }

  @Put('users/:id/archive')
  @RequirePermission('user:edit')
  async archiveUser(@Param('id') id: string) {
    try {
      return await this.rbacService.archiveUser(+id);
    } catch (e: unknown) {
      const err = e as { message?: string };
      throw new BadRequestException(err?.message);
    }
  }

  @Put('users/:id/restore')
  @RequirePermission('user:edit')
  async restoreUser(@Param('id') id: string) {
    try {
      return await this.rbacService.restoreUser(+id);
    } catch (e: unknown) {
      const err = e as { message?: string };
      throw new BadRequestException(err?.message);
    }
  }

  @Delete('users/:id/permanent')
  @RequirePermission('user:purge')
  async purgeUser(@Param('id') id: string, @Request() req: any) {
    try {
      const result = await this.rbacService.purgeUser(+id, req.user?.id);
      await logAudit(this.logService, req, {
        module: '账号', action: '永久删除用户', targetId: +id, targetType: 'user', detail: '物理删除，不可恢复',
      });
      return result;
    } catch (e: unknown) {
      const err = e as { message?: string };
      throw new BadRequestException(err?.message);
    }
  }

  @Put('users/:id/mark-staff')
  @RequirePermission('user:edit')
  async markAsStaff(@Param('id') id: string) {
    try {
      return await this.rbacService.markAsStaff(+id);
    } catch (e: unknown) {
      const err = e as { message?: string };
      throw new BadRequestException(err?.message);
    }
  }

  @Put('users/:id/mark-student')
  @RequirePermission('user:edit')
  async markAsStudent(@Param('id') id: string) {
    try {
      return await this.rbacService.markAsStudent(+id);
    } catch (e: unknown) {
      const err = e as { message?: string };
      throw new BadRequestException(err?.message);
    }
  }

  @Get('users/:id/profile')
  @RequirePermission('user:view')
  getUserProfile(@Param('id') id: string) {
    return this.rbacService.getUserProfile(+id);
  }

  @Put('users/:id/profile')
  @RequirePermission('user:edit')
  async updateUserProfile(
    @Param('id') id: string,
    @Body() dto: UpdateProfileDto,
    @Request() req: any,
  ) {
    try {
      const result = await this.rbacService.updateUserProfile(+id, dto);
      await logAudit(this.logService, req, {
        module: '账号', action: '更新资料', targetId: +id, targetType: 'user',
      });
      return result;
    } catch (e: any) {
      throw new BadRequestException(e.message);
    }
  }

  @Get('teacher-workspace')
  @RequirePermission('teacher-workspace:view')
  async getTeacherWorkspace(@Request() req: any) {
    return this.rbacService.getTeacherWorkspace(req.user?.id);
  }

  @Get('teachers')
  @RequirePermission('teacher:view')
  async getTeachers(
    @Query('search') search?: string,
    @Query('page') page?: string,
    @Query('pageSize') pageSize?: string,
  ) {
    return this.rbacService.getTeachers({
      search,
      page: page ? +page : undefined,
      pageSize: pageSize ? +pageSize : undefined,
    });
  }

  @Put('teachers/:id/profile')
  @RequirePermission('teacher:edit')
  async updateTeacherProfile(
    @Param('id') id: string,
    @Body() profile: UpdateProfileDto,
    @Request() req: { user?: { id: number; username: string } },
  ) {
    const result = await this.rbacService.updateTeacherProfile(+id, profile);
    await logAudit(this.logService, req, {
      module: '教师管理', action: '编辑档案', targetId: +id, targetType: 'user', detail: '更新教师档案',
    });
    return result;
  }
}