feat(security): add distributed authorization foundation

Tiku.Infrastructure/Messaging/SecurityStateChangedConsumer.cs

@@ -0,0 +1,26 @@
+using MassTransit;
+using Tiku.Application.Security;
+using Tiku.Contracts;
+
+namespace Tiku.Infrastructure.Messaging;
+
+internal sealed class SecurityStateChangedConsumer(IRedisSecurityStore redisSecurityStore) :
+    IConsumer<AuthorizationStateChangedV1>,
+    IConsumer<TenantCapabilityChangedV1>,
+    IConsumer<MembershipLifecycleChangedV1>
+{
+    public Task Consume(ConsumeContext<AuthorizationStateChangedV1> context) =>
+        redisSecurityStore.SetInvalidationVersionAsync(
+            "authorization", context.Message.TenantId, context.Message.UserId,
+            context.Message.Version, context.CancellationToken);
+
+    public Task Consume(ConsumeContext<TenantCapabilityChangedV1> context) =>
+        redisSecurityStore.SetInvalidationVersionAsync(
+            $"capability-{context.Message.ModuleCode}", context.Message.TenantId, null,
+            context.Message.Version, context.CancellationToken);
+
+    public Task Consume(ConsumeContext<MembershipLifecycleChangedV1> context) =>
+        redisSecurityStore.SetInvalidationVersionAsync(
+            "membership", context.Message.TenantId, context.Message.UserId,
+            context.Message.OccurredAt.ToUnixTimeMilliseconds(), context.CancellationToken);
+}