暂存提交

2026-07-30 18:01:36 +08:00
commit 2f4e159356
368 changed files with 20370 additions and 0 deletions
@@ -0,0 +1,62 @@
+package com.baiyue.auth.controller;
+
+import com.baiyue.auth.dto.AccountManagementDtos.*;
+import com.baiyue.auth.service.AccountManagementService;
+import com.baiyue.common.core.api.ApiResponse;
+import com.baiyue.common.core.api.ResultCode;
+import com.baiyue.common.core.exception.BizException;
+import jakarta.annotation.PostConstruct;
+import jakarta.validation.Valid;
+import org.springframework.beans.factory.annotation.Value;
+import org.springframework.web.bind.annotation.*;
+
+import java.nio.charset.StandardCharsets;
+import java.security.MessageDigest;
+
+/** 仅供可信内部服务调用的账号管理接口。 */
+@RestController
+@RequestMapping("/internal/auth/accounts")
+public class InternalAccountController {
+    private final AccountManagementService service;
+    private final String configuredToken;
+    private byte[] tokenBytes;
+
+    public InternalAccountController(AccountManagementService service,
+            @Value("${baiyue.security.internal-service-token}") String configuredToken) {
+        this.service = service;
+        this.configuredToken = configuredToken;
+    }
+
+    @PostConstruct void init() { tokenBytes = configuredToken.getBytes(StandardCharsets.UTF_8); }
+
+    @PostMapping
+    public ApiResponse<AccountSummary> create(@RequestHeader(value="X-Internal-Service-Token", required=false) String token,
+                                               @Valid @RequestBody CreateAccountRequest request) {
+        verify(token); return ApiResponse.success(service.create(request));
+    }
+    @GetMapping("/{id}")
+    public ApiResponse<AccountSummary> summary(@RequestHeader(value="X-Internal-Service-Token", required=false) String token,
+                                                @PathVariable Long id) {
+        verify(token); return ApiResponse.success(service.summary(id));
+    }
+    @PutMapping("/{id}/status")
+    public ApiResponse<Void> status(@RequestHeader(value="X-Internal-Service-Token", required=false) String token,
+                                    @PathVariable Long id, @Valid @RequestBody UpdateAccountStatusRequest request) {
+        verify(token); service.updateStatus(id, request); return ApiResponse.success(null);
+    }
+    @PutMapping("/{id}/password")
+    public ApiResponse<Void> reset(@RequestHeader(value="X-Internal-Service-Token", required=false) String token,
+                                   @PathVariable Long id, @Valid @RequestBody ResetPasswordRequest request) {
+        verify(token); service.resetPassword(id, request); return ApiResponse.success(null);
+    }
+    @DeleteMapping("/{id}/compensation")
+    public ApiResponse<Void> compensate(@RequestHeader(value="X-Internal-Service-Token", required=false) String token,
+                                        @PathVariable Long id) {
+        verify(token); service.compensateDelete(id); return ApiResponse.success(null);
+    }
+
+    private void verify(String supplied) {
+        byte[] value = supplied == null ? new byte[0] : supplied.getBytes(StandardCharsets.UTF_8);
+        if (!MessageDigest.isEqual(tokenBytes, value)) throw new BizException(ResultCode.FORBIDDEN, "内部服务令牌无效");
+    }
+}