67 lines
2.1 KiB
C#
67 lines
2.1 KiB
C#
using Microsoft.AspNetCore.Authorization;
|
|
using Microsoft.AspNetCore.Mvc;
|
|
using Microsoft.EntityFrameworkCore;
|
|
using Tiku.Application.Auth;
|
|
using Tiku.Application.Security;
|
|
using Tiku.Domain.Tenancy;
|
|
using Tiku.Infrastructure.Persistence;
|
|
|
|
namespace Tiku.Api.Controllers;
|
|
|
|
[ApiController]
|
|
[Authorize(Policy = TikuPolicies.CurrentTenantMember)]
|
|
[Route("api/tenants")]
|
|
public sealed class TenantsController(
|
|
ICurrentUser currentUser,
|
|
ITenantContext currentTenant,
|
|
TikuDbContext dbContext) : ControllerBase
|
|
{
|
|
[HttpGet("current")]
|
|
public async Task<ActionResult<CurrentTenantResponse>> GetCurrent(CancellationToken cancellationToken)
|
|
{
|
|
if (currentUser.UserId is null || currentTenant.TenantId is null)
|
|
{
|
|
throw new TenantAccessDeniedException();
|
|
}
|
|
|
|
var result = await dbContext.TenantMemberships
|
|
.Where(membership =>
|
|
membership.UserId == currentUser.UserId.Value &&
|
|
membership.TenantId == currentTenant.TenantId.Value &&
|
|
membership.Status == MembershipStatus.Active)
|
|
.Join(
|
|
dbContext.Tenants,
|
|
membership => membership.TenantId,
|
|
tenant => tenant.Id,
|
|
(membership, tenant) => new CurrentTenantResponse(
|
|
tenant.Id,
|
|
tenant.Name,
|
|
tenant.Slug,
|
|
tenant.Status,
|
|
membership.Role))
|
|
.SingleOrDefaultAsync(cancellationToken);
|
|
|
|
if (result is null)
|
|
{
|
|
throw new TenantAccessDeniedException();
|
|
}
|
|
|
|
return Ok(result);
|
|
}
|
|
}
|
|
|
|
/// <summary>
|
|
/// 当前请求租户和当前用户在该租户内的权限摘要。
|
|
/// </summary>
|
|
/// <param name="TenantId">租户 ID。</param>
|
|
/// <param name="TenantName">租户名称。</param>
|
|
/// <param name="TenantSlug">租户编码。</param>
|
|
/// <param name="Status">租户状态。</param>
|
|
/// <param name="Role">当前用户在租户内的角色。</param>
|
|
public sealed record CurrentTenantResponse(
|
|
Guid TenantId,
|
|
string TenantName,
|
|
string TenantSlug,
|
|
TenantStatus Status,
|
|
TenantRole Role);
|