refactor: separate backend domains and storage adapters

internal/service/api_token.go

@@ -0,0 +1,79 @@
+package service
+
+import (
+	"context"
+	"errors"
+	"time"
+
+	"kra/internal/biz"
+	"kra/pkg/adminauth"
+)
+
+func tokenDTO(v *biz.APIToken) map[string]any {
+	var user any = nil
+	if v.User != nil {
+		user = convertUser(v.User)
+	}
+	return map[string]any{"ID": v.ID, "CreatedAt": v.CreatedAt, "UpdatedAt": v.UpdatedAt, "DeletedAt": nil, "userId": v.UserID, "authorityId": v.AuthorityID, "token": v.Token, "status": v.Status, "expiresAt": v.ExpiresAt, "remark": v.Remark, "user": user}
+}
+
+func (s *SettingsService) CreateAPIToken(ctx context.Context, userID, authorityID uint, days int, remark string) (string, error) {
+	user, allowed, err := s.Repo().UserHasAuthority(ctx, userID, authorityID)
+	if err != nil {
+		return "", err
+	}
+	if !allowed {
+		return "", errors.New("用户不具备该角色权限")
+	}
+	duration := time.Duration(days) * 24 * time.Hour
+	if days == -1 {
+		duration = 100 * 365 * 24 * time.Hour
+	}
+	if duration <= 0 {
+		return "", errors.New("有效天数必须大于0或为-1")
+	}
+	secret, issuer := "", "kra"
+	buffer := 24 * time.Hour
+	if s.config != nil && s.config.Jwt != nil {
+		secret = s.config.Jwt.SigningKey
+		if s.config.Jwt.Issuer != "" {
+			issuer = s.config.Jwt.Issuer
+		}
+		if s.config.Jwt.BufferTime != nil {
+			buffer = s.config.Jwt.BufferTime.AsDuration()
+		}
+	}
+	token, _, err := adminauth.Generate(secret, issuer, duration, buffer, user.ID, authorityID, user.UUID, user.Username, user.NickName, false)
+	if err != nil {
+		return "", err
+	}
+	record := &biz.APIToken{UserID: userID, AuthorityID: authorityID, Token: token, Status: true, ExpiresAt: time.Now().Add(duration), Remark: remark}
+	if err = s.Repo().CreateAPIToken(ctx, record); err != nil {
+		return "", err
+	}
+	return token, nil
+}
+func (s *SettingsService) APITokens(ctx context.Context, page, size int, userID uint, status *bool) ([]map[string]any, int64, error) {
+	items, total, err := s.Repo().ListAPITokens(ctx, page, size, userID, status)
+	if err != nil {
+		return nil, 0, err
+	}
+	out := make([]map[string]any, 0, len(items))
+	for _, v := range items {
+		out = append(out, tokenDTO(v))
+	}
+	return out, total, nil
+}
+func (s *SettingsService) DisableAPIToken(ctx context.Context, id uint) error {
+	token, err := s.Repo().DisableAPIToken(ctx, id)
+	if err != nil {
+		return err
+	}
+	return s.Repo().BlacklistToken(ctx, token)
+}
+func (s *SettingsService) BlacklistToken(ctx context.Context, token string) error {
+	return s.Repo().BlacklistToken(ctx, token)
+}
+func (s *SettingsService) IsTokenDisabled(ctx context.Context, token string) (bool, error) {
+	return s.Repo().IsTokenDisabled(ctx, token)
+}