feat(security): add distributed authorization foundation

Tiku.Api/Controllers/HealthController.cs

@@ -1,6 +1,12 @@
 using Microsoft.AspNetCore.Authorization;
 using Microsoft.AspNetCore.Mvc;
 using Tiku.Api.Contracts;
+using Tiku.Application.Security;
+using Tiku.Infrastructure.Persistence;
+using Microsoft.EntityFrameworkCore;
+using MassTransit.EntityFrameworkCoreIntegration;
+using Microsoft.Extensions.Diagnostics.HealthChecks;
+using Tiku.Infrastructure.Messaging;
 
 namespace Tiku.Api.Controllers;
 
@@ -8,7 +14,11 @@ namespace Tiku.Api.Controllers;
 [AllowAnonymous]
 [Produces("application/json")]
 [Route("api/health")]
-public sealed class HealthController : ControllerBase
+public sealed class HealthController(
+    TikuDbContext dbContext,
+    IRedisSecurityStore redisSecurityStore,
+    MessagingOptions messagingOptions,
+    HealthCheckService healthCheckService) : ControllerBase
 {
     [HttpGet]
     [EndpointSummary("健康检查")]
@@ -21,4 +31,30 @@ public sealed class HealthController : ControllerBase
             "tiku-api",
             DateTimeOffset.UtcNow));
     }
+
+    [HttpGet("ready")]
+    [EndpointSummary("依赖就绪检查")]
+    public async Task<ActionResult<object>> Ready(CancellationToken cancellationToken)
+    {
+        var database = await dbContext.Database.CanConnectAsync(cancellationToken);
+        var redis = !redisSecurityStore.IsConfigured || await redisSecurityStore.PingAsync(cancellationToken);
+        var rabbitHealth = await healthCheckService.CheckHealthAsync(
+            registration => registration.Tags.Contains("ready"),
+            cancellationToken);
+        var rabbitMq = !messagingOptions.IsConfigured || rabbitHealth.Status == HealthStatus.Healthy;
+        var outboxPending = database
+            ? await dbContext.Set<OutboxMessage>().CountAsync(cancellationToken)
+            : -1;
+        var ready = database && redis && rabbitMq;
+        var response = new
+        {
+            status = ready ? "ready" : "not_ready",
+            database,
+            redis = new { configured = redisSecurityStore.IsConfigured, ready = redis },
+            rabbitMq = new { configured = messagingOptions.IsConfigured, ready = rabbitMq },
+            outbox = new { pending = outboxPending },
+            checkedAt = DateTimeOffset.UtcNow
+        };
+        return ready ? Ok(response) : StatusCode(StatusCodes.Status503ServiceUnavailable, response);
+    }
 }