86 lines
3.2 KiB
C#
86 lines
3.2 KiB
C#
using MediatR;
|
|
using System.Text.Json;
|
|
using TakeoutSaaS.Application.Identity.Abstractions;
|
|
using TakeoutSaaS.Application.Identity.Commands;
|
|
using TakeoutSaaS.Application.Identity.Events;
|
|
using TakeoutSaaS.Domain.Identity.Repositories;
|
|
using TakeoutSaaS.Shared.Abstractions.Constants;
|
|
using TakeoutSaaS.Shared.Abstractions.Exceptions;
|
|
using TakeoutSaaS.Shared.Abstractions.Security;
|
|
using TakeoutSaaS.Shared.Abstractions.Tenancy;
|
|
|
|
namespace TakeoutSaaS.Application.Identity.Handlers;
|
|
|
|
/// <summary>
|
|
/// 恢复用户处理器。
|
|
/// </summary>
|
|
public sealed class RestoreIdentityUserCommandHandler(
|
|
IIdentityUserRepository identityUserRepository,
|
|
ITenantProvider tenantProvider,
|
|
ICurrentUserAccessor currentUserAccessor,
|
|
IAdminAuthService adminAuthService,
|
|
IIdentityOperationLogPublisher operationLogPublisher)
|
|
: IRequestHandler<RestoreIdentityUserCommand, bool>
|
|
{
|
|
/// <inheritdoc />
|
|
public async Task<bool> Handle(RestoreIdentityUserCommand request, CancellationToken cancellationToken)
|
|
{
|
|
// 1. 获取操作者档案并判断权限
|
|
var currentTenantId = tenantProvider.GetCurrentTenantId();
|
|
var operatorProfile = await adminAuthService.GetProfileAsync(currentUserAccessor.UserId, cancellationToken);
|
|
var isSuperAdmin = IdentityUserAccess.IsSuperAdmin(operatorProfile);
|
|
|
|
// 2. 校验跨租户访问权限
|
|
if (!isSuperAdmin && request.TenantId.HasValue && request.TenantId.Value != currentTenantId)
|
|
{
|
|
throw new BusinessException(ErrorCodes.Forbidden, "禁止跨租户恢复用户");
|
|
}
|
|
|
|
// 3. 查询用户实体（包含已删除）
|
|
var user = await identityUserRepository.GetForUpdateIncludingDeletedAsync(currentTenantId, request.UserId, isSuperAdmin, cancellationToken);
|
|
if (user == null)
|
|
{
|
|
return false;
|
|
}
|
|
|
|
if (!isSuperAdmin && user.TenantId != currentTenantId)
|
|
{
|
|
return false;
|
|
}
|
|
|
|
if (!user.DeletedAt.HasValue)
|
|
{
|
|
return false;
|
|
}
|
|
|
|
// 4. 构建操作日志消息
|
|
var operatorName = string.IsNullOrWhiteSpace(operatorProfile.DisplayName)
|
|
? operatorProfile.Account
|
|
: operatorProfile.DisplayName;
|
|
if (string.IsNullOrWhiteSpace(operatorName))
|
|
{
|
|
operatorName = $"user:{currentUserAccessor.UserId}";
|
|
}
|
|
|
|
var logMessage = new IdentityUserOperationLogMessage
|
|
{
|
|
OperationType = "identity-user:restore",
|
|
TargetType = "identity_user",
|
|
TargetIds = JsonSerializer.Serialize(new[] { user.Id }),
|
|
OperatorId = currentUserAccessor.UserId.ToString(),
|
|
OperatorName = operatorName,
|
|
Parameters = JsonSerializer.Serialize(new { userId = user.Id, tenantId = user.TenantId }),
|
|
Result = JsonSerializer.Serialize(new { userId = user.Id }),
|
|
Success = true
|
|
};
|
|
|
|
// 5. 恢复软删除状态并写入 Outbox
|
|
user.DeletedAt = null;
|
|
user.DeletedBy = null;
|
|
await operationLogPublisher.PublishAsync(logMessage, cancellationToken);
|
|
await identityUserRepository.SaveChangesAsync(cancellationToken);
|
|
|
|
return true;
|
|
}
|
|
}
|