feat(shared-web): add shared swagger and tracing utilities

src/Api/TakeoutSaaS.AdminApi/Controllers/HealthController.cs

@@ -0,0 +1,28 @@
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Mvc;
+using TakeoutSaaS.Shared.Abstractions.Results;
+using TakeoutSaaS.Shared.Web.Api;
+
+namespace TakeoutSaaS.AdminApi.Controllers;
+
+/// <summary>
+/// 管理后台 - 健康检查。
+/// </summary>
+[ApiVersion("1.0")]
+[Route("api/admin/v{version:apiVersion}/[controller]")]
+public class HealthController : BaseApiController
+{
+    /// <summary>
+    /// 获取服务健康状态。
+    /// </summary>
+    /// <returns>健康状态</returns>
+    [HttpGet]
+    [AllowAnonymous]
+    [ProducesResponseType(typeof(ApiResponse<object>), StatusCodes.Status200OK)]
+    public IActionResult Get()
+    {
+        var payload = new { status = "OK", service = "AdminApi", time = DateTime.UtcNow };
+        return Ok(ApiResponse<object>.Ok(payload));
+    }
+}

src/Api/TakeoutSaaS.AdminApi/Program.cs

@@ -0,0 +1,76 @@
+using System;
+using System.Linq;
+using Microsoft.AspNetCore.Builder;
+using Microsoft.AspNetCore.Cors.Infrastructure;
+using Microsoft.Extensions.Configuration;
+using Microsoft.Extensions.DependencyInjection;
+using Microsoft.Extensions.Hosting;
+using Serilog;
+using TakeoutSaaS.Module.Tenancy;
+using TakeoutSaaS.Shared.Abstractions.Tenancy;
+using TakeoutSaaS.Shared.Web.Extensions;
+using TakeoutSaaS.Shared.Web.Swagger;
+
+var builder = WebApplication.CreateBuilder(args);
+
+builder.Host.UseSerilog((context, _, configuration) =>
+{
+    configuration
+        .Enrich.FromLogContext()
+        .Enrich.WithProperty("Service", "AdminApi")
+        .WriteTo.Console();
+});
+
+builder.Services.AddSharedWebCore();
+builder.Services.AddSharedSwagger(options =>
+{
+    options.Title = "外卖SaaS - 管理后台";
+    options.Description = "管理后台 API 文档";
+    options.EnableAuthorization = true;
+});
+
+var adminOrigins = ResolveCorsOrigins(builder.Configuration, "Cors:Admin");
+builder.Services.AddCors(options =>
+{
+    options.AddPolicy("AdminApiCors", policy =>
+    {
+        ConfigureCorsPolicy(policy, adminOrigins);
+    });
+});
+
+builder.Services.AddScoped<ITenantProvider, TenantProvider>();
+
+var app = builder.Build();
+
+app.UseCors("AdminApiCors");
+app.UseSharedWebCore();
+app.UseSharedSwagger();
+
+app.MapControllers();
+app.Run();
+
+static string[] ResolveCorsOrigins(IConfiguration configuration, string sectionKey)
+{
+    var origins = configuration.GetSection(sectionKey).Get<string[]>();
+    return origins?
+        .Where(origin => !string.IsNullOrWhiteSpace(origin))
+        .Distinct(StringComparer.OrdinalIgnoreCase)
+        .ToArray() ?? Array.Empty<string>();
+}
+
+static void ConfigureCorsPolicy(CorsPolicyBuilder policy, string[] origins)
+{
+    if (origins.Length == 0)
+    {
+        policy.AllowAnyOrigin();
+    }
+    else
+    {
+        policy.WithOrigins(origins)
+            .AllowCredentials();
+    }
+
+    policy
+        .AllowAnyHeader()
+        .AllowAnyMethod();
+}