feat: 重构 RBAC1 角色权限模型

src/Application/TakeoutSaaS.Application/Identity/Handlers/GetUserPermissionsQueryHandler.cs

@@ -1,3 +1,5 @@
+using System;
+using System.Linq;
 using MediatR;
 using TakeoutSaaS.Application.Identity.Contracts;
 using TakeoutSaaS.Application.Identity.Queries;
@@ -11,10 +13,18 @@ namespace TakeoutSaaS.Application.Identity.Handlers;
 /// </summary>
 public sealed class GetUserPermissionsQueryHandler(
     IIdentityUserRepository identityUserRepository,
+    IUserRoleRepository userRoleRepository,
+    IRoleRepository roleRepository,
+    IPermissionRepository permissionRepository,
+    IRolePermissionRepository rolePermissionRepository,
     ITenantProvider tenantProvider)
     : IRequestHandler<GetUserPermissionsQuery, UserPermissionDto?>
 {
     private readonly IIdentityUserRepository _identityUserRepository = identityUserRepository;
+    private readonly IUserRoleRepository _userRoleRepository = userRoleRepository;
+    private readonly IRoleRepository _roleRepository = roleRepository;
+    private readonly IPermissionRepository _permissionRepository = permissionRepository;
+    private readonly IRolePermissionRepository _rolePermissionRepository = rolePermissionRepository;
     private readonly ITenantProvider _tenantProvider = tenantProvider;
 
     /// <inheritdoc />
@@ -27,6 +37,9 @@ public sealed class GetUserPermissionsQueryHandler(
             return null;
         }
 
+        var roleCodes = await ResolveUserRolesAsync(tenantId, user.Id, cancellationToken);
+        var permissionCodes = await ResolveUserPermissionsAsync(tenantId, user.Id, cancellationToken);
+
         return new UserPermissionDto
         {
             UserId = user.Id,
@@ -34,9 +47,42 @@ public sealed class GetUserPermissionsQueryHandler(
             MerchantId = user.MerchantId,
             Account = user.Account,
             DisplayName = user.DisplayName,
-            Roles = user.Roles,
-            Permissions = user.Permissions,
+            Roles = roleCodes,
+            Permissions = permissionCodes,
             CreatedAt = user.CreatedAt
         };
     }
+
+    private async Task<string[]> ResolveUserRolesAsync(long tenantId, long userId, CancellationToken cancellationToken)
+    {
+        var relations = await _userRoleRepository.GetByUserIdAsync(tenantId, userId, cancellationToken);
+        var roleIds = relations.Select(x => x.RoleId).Distinct().ToArray();
+        if (roleIds.Length == 0)
+        {
+            return Array.Empty<string>();
+        }
+
+        var roles = await _roleRepository.GetByIdsAsync(tenantId, roleIds, cancellationToken);
+        return roles.Select(x => x.Code).Distinct(StringComparer.OrdinalIgnoreCase).ToArray();
+    }
+
+    private async Task<string[]> ResolveUserPermissionsAsync(long tenantId, long userId, CancellationToken cancellationToken)
+    {
+        var relations = await _userRoleRepository.GetByUserIdAsync(tenantId, userId, cancellationToken);
+        var roleIds = relations.Select(x => x.RoleId).Distinct().ToArray();
+        if (roleIds.Length == 0)
+        {
+            return Array.Empty<string>();
+        }
+
+        var rolePermissions = await _rolePermissionRepository.GetByRoleIdsAsync(tenantId, roleIds, cancellationToken);
+        var permissionIds = rolePermissions.Select(x => x.PermissionId).Distinct().ToArray();
+        if (permissionIds.Length == 0)
+        {
+            return Array.Empty<string>();
+        }
+
+        var permissions = await _permissionRepository.GetByIdsAsync(tenantId, permissionIds, cancellationToken);
+        return permissions.Select(x => x.Code).Distinct(StringComparer.OrdinalIgnoreCase).ToArray();
+    }
 }