dukang/server/dukang-api/src/modules/ops/admin-api-access.controller.ts

import { Body, Controller, Delete, Get, Param, Post, Put, Query, UseGuards } from '@nestjs/common';
import type { ApiAccessGlobalItem, ApiAccessNotifyItem, ApiAccessOverrideCreate } from '@dukang/shared-types';
import { HqAuthGuard } from '../../common/guards/hq-auth.guard';
import { HqPermissionGuard, RequireHqPermissions } from '../../common/guards/hq-permission.guard';
import { HqOperation } from '../../common/hq-operation/hq-operation.decorator';
import { HqOperationAction } from '../../common/hq-operation/hq-operation.constants';
import { parseBigIntParam } from '../../common/parse-bigint';
import { ApiAccessService } from '../../common/api-access/api-access.service';

@Controller('admin/api-access')
@UseGuards(HqAuthGuard, HqPermissionGuard)
@RequireHqPermissions('api_access')
export class AdminApiAccessController {
  constructor(private readonly apiAccess: ApiAccessService) {}

  @Get()
  getForm() {
    return this.apiAccess.getForm();
  }

  @Get('actors')
  searchActors(@Query('scope') scope?: string, @Query('q') q?: string) {
    return this.apiAccess.searchActors(scope || '', q || '');
  }

  @Put('globals')
  @HqOperation({
    action: HqOperationAction.API_ACCESS_UPDATE,
    refType: 'API_ACCESS',
    batch: true,
    includeBody: true,
  })
  updateGlobals(@Body() body: { items?: ApiAccessGlobalItem[] }) {
    return this.apiAccess.updateGlobals(body?.items ?? []);
  }

  @Put('notifies')
  @HqOperation({
    action: HqOperationAction.API_ACCESS_UPDATE,
    refType: 'API_ACCESS',
    batch: true,
    includeBody: true,
  })
  updateNotifies(@Body() body: { items?: ApiAccessNotifyItem[] }) {
    return this.apiAccess.updateNotifies(body?.items ?? []);
  }

  @Post('overrides')
  @HqOperation({
    action: HqOperationAction.API_ACCESS_UPDATE,
    refType: 'API_ACCESS',
    includeBody: true,
  })
  createOverride(@Body() body: ApiAccessOverrideCreate) {
    return this.apiAccess.createOverride(body);
  }

  @Delete('overrides/:id')
  @HqOperation({
    action: HqOperationAction.API_ACCESS_UPDATE,
    refType: 'API_ACCESS',
    refIdField: 'id',
  })
  deleteOverride(@Param('id') id: string) {
    return this.apiAccess.deleteOverride(parseBigIntParam(id, '规则'));
  }
}