tiku-backend.net/Tiku.Api/Controllers/TenantsController.cs

using Microsoft.AspNetCore.Authorization;
using Microsoft.AspNetCore.Mvc;
using Microsoft.EntityFrameworkCore;
using Tiku.Application.Auth;
using Tiku.Application.Security;
using Tiku.Domain.Tenancy;
using Tiku.Infrastructure.Persistence;

namespace Tiku.Api.Controllers;

[ApiController]
[Tags("租户端-当前租户")]
[Authorize(Policy = TikuPolicies.CurrentTenantMember)]
[Route("api/tenants")]
public sealed class TenantsController(
    ICurrentUser currentUser,
    ITenantContext currentTenant,
    TikuDbContext dbContext) : ControllerBase
{
    [HttpGet("current")]
    [EndpointSummary("查询当前租户")]
    [EndpointDescription("返回当前请求租户及当前用户在该租户内的成员角色。")]
    public async Task<ActionResult<CurrentTenantResponse>> GetCurrent(CancellationToken cancellationToken)
    {
        if (currentUser.UserId is null || currentTenant.TenantId is null)
        {
            throw new TenantAccessDeniedException();
        }

        var result = await dbContext.TenantMemberships
            .Where(membership =>
                membership.UserId == currentUser.UserId.Value &&
                membership.TenantId == currentTenant.TenantId.Value &&
                membership.Status == MembershipStatus.Active)
            .Join(
                dbContext.Tenants,
                membership => membership.TenantId,
                tenant => tenant.Id,
                (membership, tenant) => new CurrentTenantResponse(
                    tenant.Id,
                    tenant.Name,
                    tenant.Slug,
                    tenant.Status,
                    membership.Role))
            .SingleOrDefaultAsync(cancellationToken);

        if (result is null)
        {
            throw new TenantAccessDeniedException();
        }

        return Ok(result);
    }
}

/// <summary>
/// 当前请求租户和当前用户在该租户内的权限摘要。
/// </summary>
/// <param name="TenantId">租户 ID。</param>
/// <param name="TenantName">租户名称。</param>
/// <param name="TenantSlug">租户编码。</param>
/// <param name="Status">租户状态。</param>
/// <param name="Role">当前用户在租户内的角色。</param>
public sealed record CurrentTenantResponse(
    Guid TenantId,
    string TenantName,
    string TenantSlug,
    TenantStatus Status,
    TenantRole Role);