feat: 重构 RBAC1 角色权限模型

src/Infrastructure/TakeoutSaaS.Infrastructure/Identity/Persistence/EfUserRoleRepository.cs

@@ -0,0 +1,44 @@
+using Microsoft.EntityFrameworkCore;
+using TakeoutSaaS.Domain.Identity.Entities;
+using TakeoutSaaS.Domain.Identity.Repositories;
+
+namespace TakeoutSaaS.Infrastructure.Identity.Persistence;
+
+/// <summary>
+/// EF 用户-角色仓储。
+/// </summary>
+public sealed class EfUserRoleRepository(IdentityDbContext dbContext) : IUserRoleRepository
+{
+    public Task<IReadOnlyList<UserRole>> GetByUserIdsAsync(long tenantId, IEnumerable<long> userIds, CancellationToken cancellationToken = default)
+        => dbContext.UserRoles.AsNoTracking()
+            .Where(x => x.TenantId == tenantId && userIds.Contains(x.UserId))
+            .ToListAsync(cancellationToken)
+            .ContinueWith(t => (IReadOnlyList<UserRole>)t.Result, cancellationToken);
+
+    public Task<IReadOnlyList<UserRole>> GetByUserIdAsync(long tenantId, long userId, CancellationToken cancellationToken = default)
+        => dbContext.UserRoles.AsNoTracking()
+            .Where(x => x.TenantId == tenantId && x.UserId == userId)
+            .ToListAsync(cancellationToken)
+            .ContinueWith(t => (IReadOnlyList<UserRole>)t.Result, cancellationToken);
+
+    public async Task ReplaceUserRolesAsync(long tenantId, long userId, IEnumerable<long> roleIds, CancellationToken cancellationToken = default)
+    {
+        var existing = await dbContext.UserRoles
+            .Where(x => x.TenantId == tenantId && x.UserId == userId)
+            .ToListAsync(cancellationToken);
+
+        dbContext.UserRoles.RemoveRange(existing);
+
+        var toAdd = roleIds.Distinct().Select(roleId => new UserRole
+        {
+            TenantId = tenantId,
+            UserId = userId,
+            RoleId = roleId
+        });
+
+        await dbContext.UserRoles.AddRangeAsync(toAdd, cancellationToken);
+    }
+
+    public Task SaveChangesAsync(CancellationToken cancellationToken = default)
+        => dbContext.SaveChangesAsync(cancellationToken);
+}