tiku-backend.net/Tiku.Api/Controllers/TenantContentController.cs

using Microsoft.AspNetCore.Authorization;
using Microsoft.AspNetCore.Mvc;
using Tiku.Api.Contracts;
using Tiku.Application.Assets;
using Tiku.Application.Catalog;
using Tiku.Application.Content;
using Tiku.Application.Security;

namespace Tiku.Api.Controllers;

[ApiController]
[Tags("租户端-内容管理")]
[Authorize(Policy = BackendPermissions.TenantContentManage)]
[Produces("application/json")]
[Route("api/tenant/content")]
public sealed class TenantContentController(
    TenantContentCapabilitySet capabilities,
    ICurrentUser currentUser,
    ITenantContext currentTenant) : ControllerBase
{
    [HttpGet("assets")]
    [EndpointSummary("查询租户内容资产")]
    [ProducesResponseType<CatalogList<ContentAssetManagementItem>>(StatusCodes.Status200OK)]
    public async Task<ActionResult<CatalogList<ContentAssetManagementItem>>> GetAssets(
        [FromQuery] AssetManagementQueryDto query,
        CancellationToken cancellationToken)
    {
        return Ok(await capabilities.AssetCatalog.GetAssetsAsync(
            ResolveActor(),
            query.ToFilter(),
            cancellationToken));
    }

    [HttpGet("assets/access-events")]
    [EndpointSummary("查询资产访问审计事件")]
    [ProducesResponseType<CatalogList<ContentAssetAccessEventItem>>(StatusCodes.Status200OK)]
    public async Task<ActionResult<CatalogList<ContentAssetAccessEventItem>>> GetAssetAccessEvents(
        [FromQuery] AssetEventQueryDto query,
        CancellationToken cancellationToken)
    {
        return Ok(await capabilities.AssetAudit.GetAccessEventsAsync(
            ResolveActor(),
            query.ToFilter(),
            cancellationToken));
    }

    [HttpGet("assets/security-scan-events")]
    [EndpointSummary("查询资产安全扫描事件")]
    [ProducesResponseType<CatalogList<ContentAssetSecurityScanEventItem>>(StatusCodes.Status200OK)]
    public async Task<ActionResult<CatalogList<ContentAssetSecurityScanEventItem>>> GetAssetSecurityScanEvents(
        [FromQuery] AssetEventQueryDto query,
        CancellationToken cancellationToken)
    {
        return Ok(await capabilities.AssetAudit.GetSecurityScanEventsAsync(
            ResolveActor(),
            query.ToFilter(),
            cancellationToken));
    }

    [HttpPut("assets")]
    [EndpointSummary("新增或更新内容资产")]
    [ProducesResponseType<ContentManagementResult<ContentAssetManagementItem>>(StatusCodes.Status200OK)]
    public async Task<ActionResult<ContentManagementResult<ContentAssetManagementItem>>> UpsertAsset(
        UpsertAssetDto request,
        CancellationToken cancellationToken)
    {
        return Ok(await capabilities.AssetCatalog.UpsertAssetAsync(
            ResolveActor(),
            request.ToCommand(),
            cancellationToken));
    }

    [HttpPost("assets/uploads/sign")]
    [EndpointSummary("创建资产上传签名")]
    [ProducesResponseType<AssetUploadSignResult>(StatusCodes.Status200OK)]
    [ProducesResponseType<ProblemDetails>(StatusCodes.Status401Unauthorized)]
    [ProducesResponseType<ProblemDetails>(StatusCodes.Status403Forbidden)]
    public async Task<ActionResult<AssetUploadSignResult>> SignAssetUpload(
        AssetUploadSignDto request,
        CancellationToken cancellationToken)
    {
        return Ok(await capabilities.AssetUploads.SignUploadAsync(
            ResolveActor(),
            request.ToCommand(),
            cancellationToken));
    }

    [HttpPost("assets/uploads/confirm")]
    [EndpointSummary("确认资产上传完成")]
    [ProducesResponseType<AssetUploadConfirmResult>(StatusCodes.Status200OK)]
    [ProducesResponseType<ProblemDetails>(StatusCodes.Status404NotFound)]
    [ProducesResponseType<ProblemDetails>(StatusCodes.Status409Conflict)]
    public async Task<ActionResult<AssetUploadConfirmResult>> ConfirmAssetUpload(
        AssetUploadConfirmDto request,
        CancellationToken cancellationToken)
    {
        return Ok(await capabilities.AssetUploads.ConfirmUploadAsync(
            ResolveActor(),
            request.ToCommand(),
            cancellationToken));
    }

    [HttpDelete("assets/{assetId:guid}")]
    [EndpointSummary("归档内容资产")]
    [ProducesResponseType<ContentManagementResult<ContentAssetManagementItem>>(StatusCodes.Status200OK)]
    [ProducesResponseType<ProblemDetails>(StatusCodes.Status404NotFound)]
    public async Task<ActionResult<ContentManagementResult<ContentAssetManagementItem>>> ArchiveAsset(
        Guid assetId,
        CancellationToken cancellationToken)
    {
        return Ok(await capabilities.AssetLifecycle.ArchiveAssetAsync(
            ResolveActor(),
            assetId,
            cancellationToken));
    }

    [HttpPost("assets/sign-download")]
    [EndpointSummary("签发管理侧资产下载地址")]
    [ProducesResponseType<AssetManagementSignedAccessResult>(StatusCodes.Status200OK)]
    public async Task<ActionResult<AssetManagementSignedAccessResult>> SignAssetDownload(
        AssetAccessSignDto request,
        CancellationToken cancellationToken)
    {
        return Ok(await capabilities.AssetLifecycle.SignDownloadAsync(
            ResolveActor(),
            request.ToCommand(),
            cancellationToken));
    }

    [HttpPost("assets/sign-preview")]
    [EndpointSummary("签发管理侧资产预览地址")]
    [ProducesResponseType<AssetManagementSignedAccessResult>(StatusCodes.Status200OK)]
    public async Task<ActionResult<AssetManagementSignedAccessResult>> SignAssetPreview(
        AssetAccessSignDto request,
        CancellationToken cancellationToken)
    {
        return Ok(await capabilities.AssetLifecycle.SignPreviewAsync(
            ResolveActor(),
            request.ToCommand(),
            cancellationToken));
    }

    [HttpGet("import-jobs")]
    [EndpointSummary("查询内容导入任务")]
    [ProducesResponseType<CatalogList<ContentImportJobItem>>(StatusCodes.Status200OK)]
    public async Task<ActionResult<CatalogList<ContentImportJobItem>>> GetImportJobs(
        [FromQuery] ImportJobQueryDto query,
        CancellationToken cancellationToken)
    {
        return Ok(await capabilities.AssetImports.GetImportJobsAsync(
            ResolveActor(),
            query.ToFilter(),
            cancellationToken));
    }

    [HttpGet("import-jobs/{jobId:guid}")]
    [EndpointSummary("查询内容导入任务详情")]
    [ProducesResponseType<ContentImportJobDetail>(StatusCodes.Status200OK)]
    [ProducesResponseType<ProblemDetails>(StatusCodes.Status404NotFound)]
    public async Task<ActionResult<ContentImportJobDetail>> GetImportJob(
        Guid jobId,
        CancellationToken cancellationToken)
    {
        return Ok(await capabilities.AssetImports.GetImportJobAsync(
            ResolveActor(),
            jobId,
            cancellationToken));
    }

    private AssetManagementActor ResolveActor()
    {
        if (currentTenant.TenantId is null || currentUser.UserId is null)
            throw new AssetManagementException("Tenant content actor was not resolved.",
                "tenant_content_access_denied");

        return new AssetManagementActor(currentTenant.TenantId.Value, currentUser.UserId.Value);
    }

}