using Microsoft.AspNetCore.Authorization;
using Microsoft.AspNetCore.Mvc;
using Tiku.Application.Auth;
using Tiku.Application.Security;
using Tiku.Domain.Tenancy;

namespace Tiku.Api.Controllers;

[ApiController]
[Tags("租户端-当前租户")]
[Authorize(Policy = TikuPolicies.CurrentTenantMember)]
[Route("api/tenant/context")]
public sealed class TenantsController(
    ICurrentUser currentUser,
    ITenantContext currentTenant,
    ICurrentIdentityQueryService identityQueries) : ControllerBase
{
    [HttpGet("current")]
    [EndpointSummary("查询当前租户")]
    [EndpointDescription("返回当前请求租户及当前用户在该租户内的成员角色。")]
    public async Task<ActionResult<CurrentTenantResponse>> GetCurrent(CancellationToken cancellationToken)
    {
        if (currentUser.UserId is null || currentTenant.TenantId is null) throw new TenantAccessDeniedException();

        var membership = await identityQueries.GetTenantMembershipAsync(
            currentUser.UserId.Value,
            currentTenant.TenantId.Value,
            cancellationToken);

        if (membership is null) throw new TenantAccessDeniedException();

        return Ok(new CurrentTenantResponse(
            membership.TenantId,
            membership.TenantName,
            membership.TenantSlug,
            membership.Status,
            membership.Role));
    }
}

/// <summary>
///     当前请求租户和当前用户在该租户内的权限摘要。
/// </summary>
/// <param name="TenantId">租户 ID。</param>
/// <param name="TenantName">租户名称。</param>
/// <param name="TenantSlug">租户编码。</param>
/// <param name="Status">租户状态。</param>
/// <param name="Role">当前用户在租户内的角色。</param>
public sealed record CurrentTenantResponse(
    Guid TenantId,
    string TenantName,
    string TenantSlug,
    TenantStatus Status,
    TenantRole Role);