feat(ops): 总部可按百分比限制接口放行并开关企微通知

线上需要按账户、用户和功能控制登录与加载成功率，同时单独停发订单、核销和账单通知。 Co-authored-by: Cursor <cursoragent@cursor.com>
2026-09-26 12:04:16 +08:00
parent 674b6ac31b
commit cb63d382ad
29 changed files with 1888 additions and 18 deletions
@@ -0,0 +1,67 @@
+import { Body, Controller, Delete, Get, Param, Post, Put, Query, UseGuards } from '@nestjs/common';
+import type { ApiAccessGlobalItem, ApiAccessNotifyItem, ApiAccessOverrideCreate } from '@dukang/shared-types';
+import { HqAuthGuard } from '../../common/guards/hq-auth.guard';
+import { HqPermissionGuard, RequireHqPermissions } from '../../common/guards/hq-permission.guard';
+import { HqOperation } from '../../common/hq-operation/hq-operation.decorator';
+import { HqOperationAction } from '../../common/hq-operation/hq-operation.constants';
+import { parseBigIntParam } from '../../common/parse-bigint';
+import { ApiAccessService } from '../../common/api-access/api-access.service';
+
+@Controller('admin/api-access')
+@UseGuards(HqAuthGuard, HqPermissionGuard)
+@RequireHqPermissions('api_access')
+export class AdminApiAccessController {
+  constructor(private readonly apiAccess: ApiAccessService) {}
+
+  @Get()
+  getForm() {
+    return this.apiAccess.getForm();
+  }
+
+  @Get('actors')
+  searchActors(@Query('scope') scope?: string, @Query('q') q?: string) {
+    return this.apiAccess.searchActors(scope || '', q || '');
+  }
+
+  @Put('globals')
+  @HqOperation({
+    action: HqOperationAction.API_ACCESS_UPDATE,
+    refType: 'API_ACCESS',
+    batch: true,
+    includeBody: true,
+  })
+  updateGlobals(@Body() body: { items?: ApiAccessGlobalItem[] }) {
+    return this.apiAccess.updateGlobals(body?.items ?? []);
+  }
+
+  @Put('notifies')
+  @HqOperation({
+    action: HqOperationAction.API_ACCESS_UPDATE,
+    refType: 'API_ACCESS',
+    batch: true,
+    includeBody: true,
+  })
+  updateNotifies(@Body() body: { items?: ApiAccessNotifyItem[] }) {
+    return this.apiAccess.updateNotifies(body?.items ?? []);
+  }
+
+  @Post('overrides')
+  @HqOperation({
+    action: HqOperationAction.API_ACCESS_UPDATE,
+    refType: 'API_ACCESS',
+    includeBody: true,
+  })
+  createOverride(@Body() body: ApiAccessOverrideCreate) {
+    return this.apiAccess.createOverride(body);
+  }
+
+  @Delete('overrides/:id')
+  @HqOperation({
+    action: HqOperationAction.API_ACCESS_UPDATE,
+    refType: 'API_ACCESS',
+    refIdField: 'id',
+  })
+  deleteOverride(@Param('id') id: string) {
+    return this.apiAccess.deleteOverride(parseBigIntParam(id, '规则'));
+  }
+}