暂存提交

2026-07-31 16:53:07 +08:00
parent 45358ef40f
commit 704cb15ccf
98 changed files with 1944 additions and 134 deletions
@@ -20,8 +20,8 @@ paths:
  /api/platform/v1/iam/tenants:
    get:
      tags: [Platform Tenant / 平台租户]
-      summary: List enterprise tenants / 查询企业客户列表
-      description: Returns paged merchant tenants. Requires `platform:customer:list`. / 分页查询商户企业客户，需要 `platform:customer:list` 权限。
+      summary: 查询企业客户列表
+      description: 分页查询商户企业客户，需要 `platform:customer:list` 权限。
      parameters:
        - {name: page, in: query, required: false, schema: {type: integer, minimum: 1, default: 1}}
        - {name: size, in: query, required: false, schema: {type: integer, minimum: 1, maximum: 200, default: 20}}
@@ -54,8 +54,8 @@ paths:
  /api/platform/v1/iam/authorization/permissions:
    get:
      tags: [IAM Resources / IAM 资源]
-      summary: Get current effective permissions / 查询当前用户有效权限
-      description: Returns the current active platform membership's permission codes. It only requires a valid PLATFORM JWT and does not require `platform:role:list`. / 返回当前有效平台成员权限编码；只要求有效 PLATFORM JWT，不依赖 `platform:role:list`。
+      summary: 查询当前用户有效权限
+      description: 返回当前有效平台成员权限编码；只要求有效 PLATFORM JWT，不依赖 `platform:role:list`。
      responses:
        '200':
          description: 当前平台成员权限查询成功
@@ -64,11 +64,51 @@ paths:
              schema: {$ref: '#/components/schemas/PermissionCodesApiResponse'}
        '401': {$ref: '#/components/responses/Unauthorized'}
        '403': {$ref: '#/components/responses/Forbidden'}
+  /api/platform/v1/iam/tenants/{tenantId}:
+    parameters:
+      - {$ref: '#/components/parameters/TenantId'}
+    get:
+      tags: [Platform Tenant / 平台租户]
+      summary: 查询企业客户档案
+      responses:
+        '200': {$ref: '#/components/responses/Success'}
+        '403': {$ref: '#/components/responses/Forbidden'}
+        '404': {$ref: '#/components/responses/NotFound'}
+    put:
+      tags: [Platform Tenant / 平台租户]
+      summary: 编辑企业客户档案
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema: {$ref: '#/components/schemas/UpdateTenantRequest'}
+      responses:
+        '200': {$ref: '#/components/responses/Success'}
+        '400': {$ref: '#/components/responses/BadRequest'}
+        '403': {$ref: '#/components/responses/Forbidden'}
+        '404': {$ref: '#/components/responses/NotFound'}
+  /api/platform/v1/iam/tenants/{tenantId}/status:
+    parameters:
+      - {$ref: '#/components/parameters/TenantId'}
+    put:
+      tags: [Platform Tenant / 平台租户]
+      summary: 启停企业客户
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema: {$ref: '#/components/schemas/ChangeTenantStatusRequest'}
+      responses:
+        '200': {$ref: '#/components/responses/Success'}
+        '400': {$ref: '#/components/responses/BadRequest'}
+        '403': {$ref: '#/components/responses/Forbidden'}
+        '404': {$ref: '#/components/responses/NotFound'}
+        '409': {$ref: '#/components/responses/Conflict'}
  /api/merchant/v1/iam/authorization/permissions:
    get:
      tags: [IAM Resources / IAM 资源]
-      summary: Get current effective permissions / 查询当前用户有效权限
-      description: Returns the current active merchant membership's permission codes. / 返回当前有效商户成员权限编码。
+      summary: 查询当前用户有效权限
+      description: 返回当前有效商户成员权限编码。
      responses:
        '200':
          description: 当前商户成员权限查询成功
@@ -193,6 +233,27 @@ paths:
        '400': {$ref: '#/components/responses/BadRequest'}
        '403': {$ref: '#/components/responses/Forbidden'}
        '404': {$ref: '#/components/responses/NotFound'}
+  /api/platform/v1/iam/internal-users/{membershipId}/roles:
+    parameters:
+      - {$ref: '#/components/parameters/MembershipId'}
+    put:
+      tags: [IAM 资源]
+      summary: 全量分配平台内部用户角色
+      description: 仅允许分配平台租户下已启用的平台端角色；空集合表示清空角色。
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema: {$ref: '#/components/schemas/AssignInternalUserRolesRequest'}
+      responses:
+        '200':
+          description: 角色分配成功并返回最新内部用户模型
+          content:
+            application/json:
+              schema: {$ref: '#/components/schemas/InternalUserApiResponse'}
+        '400': {$ref: '#/components/responses/BadRequest'}
+        '403': {$ref: '#/components/responses/Forbidden'}
+        '404': {$ref: '#/components/responses/NotFound'}
  /api/merchant/v1/iam/tenant/profile:
    get:
      tags: [Merchant Tenant / 商户企业]
@@ -341,6 +402,49 @@ paths:
        '200': {$ref: '#/components/responses/Success'}
        '400': {$ref: '#/components/responses/BadRequest'}
        '403': {$ref: '#/components/responses/Forbidden'}
+  /api/{app}/v1/iam/permissions/{permissionId}:
+    parameters:
+      - {$ref: '#/components/parameters/App'}
+      - {$ref: '#/components/parameters/PermissionId'}
+    put:
+      tags: [RBAC]
+      summary: 编辑自定义权限资源
+      description: 权限编码和类型不可变更，系统预置资源不可修改。
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema: {$ref: '#/components/schemas/UpdatePermissionRequest'}
+      responses:
+        '200': {$ref: '#/components/responses/Success'}
+        '400': {$ref: '#/components/responses/BadRequest'}
+        '403': {$ref: '#/components/responses/Forbidden'}
+        '409': {$ref: '#/components/responses/Conflict'}
+    delete:
+      tags: [RBAC]
+      summary: 删除未绑定的自定义权限资源
+      description: 系统预置资源、存在子资源或已绑定角色的资源不可删除。
+      responses:
+        '200': {$ref: '#/components/responses/Success'}
+        '403': {$ref: '#/components/responses/Forbidden'}
+        '409': {$ref: '#/components/responses/Conflict'}
+  /api/{app}/v1/iam/permissions/{permissionId}/status:
+    parameters:
+      - {$ref: '#/components/parameters/App'}
+      - {$ref: '#/components/parameters/PermissionId'}
+    put:
+      tags: [RBAC]
+      summary: 启停自定义权限资源
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema: {$ref: '#/components/schemas/ChangePermissionStatusRequest'}
+      responses:
+        '200': {$ref: '#/components/responses/Success'}
+        '400': {$ref: '#/components/responses/BadRequest'}
+        '403': {$ref: '#/components/responses/Forbidden'}
+        '409': {$ref: '#/components/responses/Conflict'}
 components:
  securitySchemes:
    bearerAuth:
@@ -366,7 +470,19 @@ components:
      name: membershipId
      in: path
      required: true
-      description: Platform membership ID / 平台成员关系 ID
+      description: 平台成员关系 ID
+      schema: {type: integer, format: int64}
+    TenantId:
+      name: tenantId
+      in: path
+      required: true
+      description: 企业客户租户 ID
+      schema: {type: integer, format: int64, minimum: 1}
+    PermissionId:
+      name: permissionId
+      in: path
+      required: true
+      description: 权限资源 ID
      schema: {type: integer, format: int64}
  responses:
    Success: {description: Operation succeeded / 操作成功, content: {application/json: {schema: {$ref: '#/components/schemas/ApiResponse'}}}}
@@ -416,6 +532,12 @@ components:
        - type: object
          properties:
            data: {type: array, items: {$ref: '#/components/schemas/InternalUserResponse'}}
+    InternalUserApiResponse:
+      allOf:
+        - {$ref: '#/components/schemas/ApiResponse'}
+        - type: object
+          properties:
+            data: {$ref: '#/components/schemas/InternalUserResponse'}
    TenantResponse:
      type: object
      required: [id, tenantCode, tenantName, status]
@@ -448,6 +570,20 @@ components:
        contactName: {type: string}
        contactPhone: {type: string}
        contactEmail: {type: string, format: email}
+    UpdateTenantRequest:
+      type: object
+      required: [tenantName, legalName, contactName, contactPhone]
+      properties:
+        tenantName: {type: string}
+        legalName: {type: string}
+        contactName: {type: string}
+        contactPhone: {type: string}
+        contactEmail: {type: string, format: email}
+    ChangeTenantStatusRequest:
+      type: object
+      required: [status]
+      properties:
+        status: {type: string, enum: [ACTIVE, DISABLED]}
    ReviewRequest:
      type: object
      properties:
@@ -484,6 +620,11 @@ components:
      required: [newPassword]
      properties:
        newPassword: {type: string, format: password, minLength: 8, maxLength: 64, writeOnly: true}
+    AssignInternalUserRolesRequest:
+      type: object
+      required: [roleIds]
+      properties:
+        roleIds: {type: array, items: {type: integer, format: int64}}
    InternalUserResponse:
      type: object
      required: [membershipId, userId, authUserId, username, displayName, memberType, status, roleIds]
@@ -541,6 +682,20 @@ components:
        routePath: {type: string}
        httpMethod: {type: string, enum: [GET, POST, PUT, PATCH, DELETE]}
        sortNo: {type: integer, example: 10}
+    UpdatePermissionRequest:
+      type: object
+      required: [name]
+      properties:
+        name: {type: string}
+        parentId: {type: integer, format: int64}
+        routePath: {type: string}
+        httpMethod: {type: string, enum: [GET, POST, PUT, PATCH, DELETE]}
+        sortNo: {type: integer}
+    ChangePermissionStatusRequest:
+      type: object
+      required: [status]
+      properties:
+        status: {type: string, enum: [ACTIVE, DISABLED]}
    AssignRolesRequest:
      type: object
      required: [membershipId, roleIds]