feat: initial commit - kratos admin service

internal/biz/admin.go

@@ -0,0 +1,136 @@
+package biz
+
+import (
+	"context"
+	"time"
+
+	"github.com/go-kratos/kratos/v3/errors"
+	"github.com/go-kratos/kratos/v3/log"
+	"golang.org/x/crypto/bcrypt"
+)
+
+// Admin is a Admin model.
+type Admin struct {
+	ID         int64
+	Name       string
+	Email      string
+	Password   string
+	Access     string
+	Avatar     string
+	CreateTime time.Time
+	UpdateTime time.Time
+}
+
+// AdminRepo is a Greater repo.
+type AdminRepo interface {
+	FindByID(context.Context, int64) (*Admin, error)
+	FindByName(context.Context, string) (*Admin, error)
+	FindByEmail(context.Context, string) (*Admin, error)
+	ListAdmins(context.Context, ...ListOption) ([]*Admin, error)
+	CreateAdmin(context.Context, *Admin) (*Admin, error)
+	UpdateAdmin(context.Context, *Admin) (*Admin, error)
+	DeleteAdmin(context.Context, int64) error
+}
+
+// AdminUsecase is a Admin usecase.
+type AdminUsecase struct {
+	admin AdminRepo
+}
+
+// NewAdminUsecase new a Admin usecase.
+func NewAdminUsecase(repo AdminRepo) *AdminUsecase {
+	return &AdminUsecase{admin: repo}
+}
+
+// LoginByUsername logs in a user by username and password.
+func (uc *AdminUsecase) LoginByUsername(ctx context.Context, username, password string) (*Admin, error) {
+	user, err := uc.admin.FindByName(ctx, username)
+	if err != nil {
+		if errors.Is(err, ErrAdminNotFound) {
+			return nil, ErrInvalidCredentials
+		}
+		return nil, err
+	}
+	if err := bcrypt.CompareHashAndPassword([]byte(user.Password), []byte(password)); err != nil {
+		return nil, ErrInvalidCredentials
+	}
+	return user, nil
+}
+
+// LoginByEmail logs in a user by email and password.
+func (uc *AdminUsecase) LoginByEmail(ctx context.Context, email, password string) (*Admin, error) {
+	user, err := uc.admin.FindByEmail(ctx, email)
+	if err != nil {
+		if errors.Is(err, ErrAdminNotFound) {
+			return nil, ErrInvalidCredentials
+		}
+		return nil, err
+	}
+	if err := bcrypt.CompareHashAndPassword([]byte(user.Password), []byte(password)); err != nil {
+		return nil, ErrInvalidCredentials
+	}
+	return user, nil
+}
+
+// Logout logs out the current user.
+func (uc *AdminUsecase) Logout(ctx context.Context, adminID int64) error {
+	admin, err := uc.admin.FindByID(ctx, adminID)
+	if err != nil {
+		return err
+	}
+	log.InfoContext(ctx, "admin logged out", "name", admin.Name)
+	return nil
+}
+
+// Current returns the current logged in user.
+func (uc *AdminUsecase) GetAdmin(ctx context.Context, id int64) (*Admin, error) {
+	return uc.admin.FindByID(ctx, id)
+}
+
+// ListAdmins lists admin users with pagination.
+func (uc *AdminUsecase) ListAdmins(ctx context.Context, opts ...ListOption) ([]*Admin, error) {
+	admins, err := uc.admin.ListAdmins(ctx, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return admins, nil
+}
+
+// CreateAdmin creates a new admin user.
+func (uc *AdminUsecase) CreateAdmin(ctx context.Context, admin *Admin) (*Admin, error) {
+	if admin.Password != "" {
+		hashed, err := hashPassword(admin.Password)
+		if err != nil {
+			return nil, err
+		}
+		admin.Password = hashed
+	}
+	return uc.admin.CreateAdmin(ctx, admin)
+}
+
+// UpdateAdmin updates an existing admin user.
+func (uc *AdminUsecase) UpdateAdmin(ctx context.Context, admin *Admin) (*Admin, error) {
+	// Empty password means "leave unchanged"; only hash when a new one is set.
+	if admin.Password != "" {
+		hashed, err := hashPassword(admin.Password)
+		if err != nil {
+			return nil, err
+		}
+		admin.Password = hashed
+	}
+	return uc.admin.UpdateAdmin(ctx, admin)
+}
+
+// hashPassword hashes a plaintext password using bcrypt.
+func hashPassword(password string) (string, error) {
+	hashed, err := bcrypt.GenerateFromPassword([]byte(password), bcrypt.DefaultCost)
+	if err != nil {
+		return "", err
+	}
+	return string(hashed), nil
+}
+
+// DeleteAdmin deletes an admin user by ID.
+func (uc *AdminUsecase) DeleteAdmin(ctx context.Context, id int64) error {
+	return uc.admin.DeleteAdmin(ctx, id)
+}