feat: enforce tenant isolation and shared question bank

2026-07-27 16:59:12 +08:00
parent 28e9a9fa41
commit db4c7b4496
137 changed files with 6402 additions and 112274 deletions
--- a/Tiku.Application/Auth/ISessionService.cs
+++ b/Tiku.Application/Auth/ISessionService.cs
@@ -4,7 +4,8 @@ namespace Tiku.Application.Auth;

 public interface ISessionService
 {
-    string GenerateRefreshToken();
+    string GenerateRefreshToken(Guid tenantId, Guid sessionId);
+    bool TryParseRefreshToken(string refreshToken, out RefreshTokenLocator locator);
    string HashRefreshToken(string refreshToken);

    Task<AuthTokenPair> IssueAsync(
@@ -17,3 +18,5 @@ public interface ISessionService
        string? userAgent,
        CancellationToken cancellationToken = default);
 }
+
+public readonly record struct RefreshTokenLocator(Guid TenantId, Guid SessionId);