xiongyuxing/tiku-backend.net
1
0
Fork 1
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

feat(platform): harden governance and approval workflows
Some checks failed
ci / release-gate (push) Has been cancelled
Details

Browse Source
This commit is contained in:
xiong
2026-08-03 11:43:07 +08:00
parent fe594c9ef5
commit 290a0c7bd7
65 changed files with 48479 additions and 229 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
Tiku.Api/Controllers/PlatformBackofficeController.cs
View File

@@ -3,6 +3,9 @@ using Microsoft.AspNetCore.Mvc;
using Tiku.Api.Contracts;
using Tiku.Application.Backoffice;
using Tiku.Application.Security;
using System.ComponentModel.DataAnnotations;
using Tiku.Api.OpenApi;
using Tiku.Application.PlatformAdmin;
namespace Tiku.Api.Controllers;
@@ -11,6 +14,7 @@ namespace Tiku.Api.Controllers;
[Route("api/backoffice/platform")]
public sealed class PlatformBackofficeController(
IBackofficeService backofficeService,
IPlatformApprovalService approvalService,
ICurrentAccessContext currentAccessContext) : ControllerBase
{
[HttpGet("ui-bootstrap")]
@@ -48,13 +52,17 @@ public sealed class PlatformBackofficeController(
[HttpPut("roles/{roleId:guid}/bindings")]
[Authorize(Policy = BackendPermissions.PlatformRoleManage)]
[EndpointSummary("替换平台后台角色权限绑定")]
[ProducesResponseType<BackofficeRoleItem>(StatusCodes.Status200OK)]
public async Task<ActionResult<BackofficeRoleItem>> ReplaceRoleBindings(
[PlatformOperationRisk("critical", PlatformApprovalPolicyCodes.SuperAdminGrant)]
[ProducesResponseType<PlatformCommandSubmission>(StatusCodes.Status200OK)]
[ProducesResponseType<PlatformCommandSubmission>(StatusCodes.Status202Accepted)]
public async Task<ActionResult<PlatformCommandSubmission>> ReplaceRoleBindings(
Guid roleId,
ReplaceRoleBindingsDto request,
[FromHeader(Name = "Idempotency-Key"), Required] string idempotencyKey,
CancellationToken cancellationToken)
{
return Ok(await backofficeService.ReplacePlatformRoleBindingsAsync(await ResolveActorAsync(cancellationToken), request.ToCommand(roleId), cancellationToken));
var result = await approvalService.ReplaceRoleBindingsAsync(await ResolveActorAsync(cancellationToken), request.ToCommand(roleId), idempotencyKey, cancellationToken);
return result.ExecutionStatus == "pending_approval" ? Accepted(result) : Ok(result);
}
[HttpPut("users/{userId:guid}/roles")]