feat: enforce tenant isolation and shared question bank

2026-07-27 16:59:12 +08:00
parent 28e9a9fa41
commit db4c7b4496
137 changed files with 6402 additions and 112274 deletions
--- a/Tiku.Application/Security/ITenantContext.cs
+++ b/Tiku.Application/Security/ITenantContext.cs
@@ -0,0 +1,87 @@
+namespace Tiku.Application.Security;
+
+public enum TenantResolutionSource
+{
+    None,
+    Host,
+    TenantCode,
+    Jwt,
+    RefreshToken,
+    System
+}
+
+public interface ITenantContext
+{
+    Guid? TenantId { get; }
+    string? TenantCode { get; }
+    TenantResolutionSource ResolutionSource { get; }
+    bool IsResolved { get; }
+    bool IsSystem { get; }
+}
+
+public interface ITenantContextInitializer
+{
+    void Initialize(Guid tenantId, string? tenantCode, TenantResolutionSource source);
+    void InitializeSystem(Guid? targetTenantId, string reason);
+}
+
+public sealed class TenantContext : ITenantContext, ITenantContextInitializer
+{
+    public Guid? TenantId { get; private set; }
+    public string? TenantCode { get; private set; }
+    public TenantResolutionSource ResolutionSource { get; private set; }
+    public bool IsResolved => TenantId.HasValue;
+    public bool IsSystem { get; private set; }
+    internal string? SystemReason { get; private set; }
+
+    public void Initialize(Guid tenantId, string? tenantCode, TenantResolutionSource source)
+    {
+        if (tenantId == Guid.Empty)
+        {
+            throw new ArgumentException("Tenant ID cannot be empty.", nameof(tenantId));
+        }
+
+        if (IsSystem)
+        {
+            throw new InvalidOperationException("A system tenant context cannot be replaced.");
+        }
+
+        if (TenantId.HasValue && TenantId.Value != tenantId)
+        {
+            throw new TenantContextConflictException(TenantId.Value, tenantId);
+        }
+
+        var wasResolved = TenantId.HasValue;
+        TenantId = tenantId;
+        TenantCode = string.IsNullOrWhiteSpace(tenantCode) ? TenantCode : tenantCode.Trim();
+        if (!wasResolved)
+        {
+            ResolutionSource = source;
+        }
+    }
+
+    public void InitializeSystem(Guid? targetTenantId, string reason)
+    {
+        if (IsResolved || IsSystem)
+        {
+            throw new InvalidOperationException("Tenant context has already been initialized.");
+        }
+
+        if (string.IsNullOrWhiteSpace(reason))
+        {
+            throw new ArgumentException("A system scope requires an audit reason.", nameof(reason));
+        }
+
+        TenantId = targetTenantId;
+        ResolutionSource = TenantResolutionSource.System;
+        IsSystem = true;
+        SystemReason = reason.Trim();
+    }
+}
+
+public sealed class TenantContextConflictException(Guid expectedTenantId, Guid actualTenantId)
+    : Exception($"Resolved tenant '{expectedTenantId}' conflicts with authenticated tenant '{actualTenantId}'.")
+{
+    public Guid ExpectedTenantId { get; } = expectedTenantId;
+    public Guid ActualTenantId { get; } = actualTenantId;
+}