优化

file/src/main/java/com/baiyue/file/controller/MerchantOrderBatchImportFileController.java

@@ -0,0 +1,59 @@
+package com.baiyue.file.controller;
+
+import com.baiyue.common.core.api.ResultCode;
+import com.baiyue.common.core.exception.BizException;
+import com.baiyue.common.security.AuthenticatedUser;
+import com.baiyue.file.service.InternalBusinessFileService;
+import jakarta.annotation.Resource;
+import org.springframework.http.CacheControl;
+import org.springframework.http.ContentDisposition;
+import org.springframework.http.HttpHeaders;
+import org.springframework.http.MediaType;
+import org.springframework.http.ResponseEntity;
+import org.springframework.security.access.prepost.PreAuthorize;
+import org.springframework.security.core.annotation.AuthenticationPrincipal;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.PathVariable;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RestController;
+
+import java.nio.charset.StandardCharsets;
+
+@RestController
+@RequestMapping("/api/merchant/v1/files/order-batch-imports")
+public class MerchantOrderBatchImportFileController {
+    private static final String ERROR_REPORT = "ORDER_BATCH_IMPORT_ERROR_REPORT";
+
+    @Resource private InternalBusinessFileService files;
+
+    @GetMapping("/{batchNo}/error-reports/{fileId}")
+    @PreAuthorize("hasAuthority('merchant:order:create')")
+    public ResponseEntity<byte[]> downloadErrorReport(
+        @AuthenticationPrincipal AuthenticatedUser user,
+        @PathVariable String batchNo,
+        @PathVariable long fileId) {
+        var value = files.download(merchantTenant(user), ERROR_REPORT, batchNo, fileId);
+        MediaType contentType;
+        try {
+            contentType = MediaType.parseMediaType(value.contentType());
+        } catch (IllegalArgumentException exception) {
+            contentType = MediaType.APPLICATION_OCTET_STREAM;
+        }
+        return ResponseEntity.ok()
+            .cacheControl(CacheControl.noStore())
+            .contentType(contentType)
+            .header(HttpHeaders.CONTENT_DISPOSITION,
+                ContentDisposition.attachment().filename(value.fileName(), StandardCharsets.UTF_8).build().toString())
+            .contentLength(value.content().length)
+            .body(value.content());
+    }
+
+    private static long merchantTenant(AuthenticatedUser user) {
+        if (user == null || !"MERCHANT".equalsIgnoreCase(user.appCode())
+                || user.tenantId() == null || user.tenantId() <= 0
+                || user.userId() == null || user.userId() <= 0) {
+            throw new BizException(ResultCode.FORBIDDEN, "Merchant identity is required");
+        }
+        return user.tenantId();
+    }
+}

file/src/main/resources/openapi/order-batch-import-file-v1.yaml

@@ -8,6 +8,23 @@ info:
   x-lifecycle-owner: ORDER
   x-file-object-semantics: IMMUTABLE_CREATE_ONLY
 paths:
+  /api/merchant/v1/files/order-batch-imports/{batchNo}/error-reports/{fileId}:
+    get:
+      summary: 客户下载本客户批量导入错误报告
+      description: 需要merchant:order:create；客户作用域只取登录态，文件类别固定ORDER_BATCH_IMPORT_ERROR_REPORT。
+      security: [{bearerAuth: []}]
+      parameters:
+        - {$ref: '#/components/parameters/BatchNo'}
+        - {$ref: '#/components/parameters/FileId'}
+      responses:
+        '200':
+          description: 精确归属的XLSX错误报告
+          headers:
+            Cache-Control: {schema: {type: string, enum: [no-store]}}
+            Content-Disposition: {schema: {type: string}}
+          content:
+            application/vnd.openxmlformats-officedocument.spreadsheetml.sheet:
+              schema: {type: string, format: binary}
   /internal/file/v1/business-files/{tenantId}/{businessType}/{batchNo}:
     post:
       summary: Order上传批量导入源文件或错误报告
@@ -62,6 +79,7 @@ paths:
               schema: {type: string, format: binary}
 components:
   securitySchemes:
+    bearerAuth: {type: http, scheme: bearer, bearerFormat: JWT}
     internalServiceToken: {type: apiKey, in: header, name: X-Internal-Service-Token}
   parameters:
     OperatorId: