blog-server/internal/service/admin/role.go

package admin

import (
	"context"
	"errors"
	"server/internal/db"
	"server/internal/db/sqlc"
	"server/internal/model/common"
	"server/internal/model/enum"
	"server/internal/model/request"
	"server/internal/pkg/cache"
	"server/internal/pkg/cache/cachekey"
	"server/internal/pkg/dberr"
	"server/internal/pkg/errs"
)

type RoleService struct {
	store *db.Store
	cache *cache.Caches
}

func NewRoleService(store *db.Store, cache *cache.Caches) *RoleService {
	return &RoleService{
		store: store,
		cache: cache,
	}
}

// clearCache 清理所有api权限和用户信息 禁用角色/删除角色需要清理
func (s *RoleService) clearCache(ctx context.Context) error {
	if err := s.cache.DelByPrefix(ctx, cachekey.UserApiPermissionsPattern); err != nil {
		return err
	}

	if err := s.cache.DelByPrefix(ctx, cachekey.UserInfoPattern); err != nil {
		return err
	}

	return nil
}

func (s *RoleService) List(ctx context.Context, p *common.Pagination) (*common.PageResult[sqlc.SysRole], error) {
	params := sqlc.ListRolesParams{
		Limit:  p.PageSize,
		Offset: (p.Page - 1) * p.PageSize,
	}

	total, err := s.store.CountRoles(ctx)

	if err != nil {
		return nil, err
	}

	list, err := s.store.ListRoles(ctx, params)
	if err != nil {
		return nil, err
	}

	return &common.PageResult[sqlc.SysRole]{
		List:  list,
		Total: total,
	}, nil
}

func (s *RoleService) ListAll(ctx context.Context) ([]sqlc.SysRole, error) {
	return s.store.ListAllRoles(ctx)
}

func (s *RoleService) ListRoleMenus(ctx context.Context, id int32) ([]sqlc.ListRoleMenusRow, error) {
	_, err := s.store.GetRoleByID(ctx, id)
	if err != nil {
		return nil, dberr.MapNoRows(err, errs.ErrRoleNotFound)
	}

	return s.store.ListRoleMenus(ctx, id)
}

func (s *RoleService) ListRoleApis(ctx context.Context, id int32) ([]sqlc.ListRoleApisRow, error) {
	_, err := s.store.GetRoleByID(ctx, id)
	if err != nil {
		return nil, dberr.MapNoRows(err, errs.ErrRoleNotFound)
	}

	return s.store.ListRoleApis(ctx, id)
}

func (s *RoleService) Create(ctx context.Context, req request.CreateRoleRequest) error {
	params := sqlc.CreateRoleParams{
		Name:   req.Name,
		Code:   req.Code,
		Status: *req.Status,
	}

	err := s.store.CreateRole(ctx, params)
	if err != nil {
		return dberr.MapUniqueViolation(err, dberr.SysRoleCodeKey, errs.ErrCodeAlreadyExists)
	}
	return nil
}

func (s *RoleService) Update(ctx context.Context, id int32, req request.UpdateRoleRequest) error {
	params := sqlc.UpdateRoleParams{
		ID:     id,
		Name:   req.Name,
		Status: req.Status,
	}

	rows, err := s.store.UpdateRole(ctx, params)
	err = dberr.MapRowsAffected(rows, err, errs.ErrRoleNotFound)
	if err != nil {
		if errors.Is(err, errs.ErrRoleNotFound) {
		}
		return err
	}

	// 清理缓存 无论启用禁用 启用时也需要清理缓存以刷新权限
	_ = s.clearCache(ctx)

	return nil
}

func (s *RoleService) SetRoleMenus(ctx context.Context, roleID int32, req request.SetRoleMenusRequest) error {
	// 先检查角色是否存在
	_, err := s.store.GetRoleByID(ctx, roleID)
	if err != nil {
		return dberr.MapNoRows(err, errs.ErrRoleNotFound)
	}

	err = s.store.WithTx(ctx, func(q *sqlc.Queries) error {
		// 1. 先删除所有关联表数据
		if err = q.DeleteRolePermissionsByType(ctx, sqlc.DeleteRolePermissionsByTypeParams{
			RoleID: roleID,
			Type:   int16(enum.PermissionTypeMenu),
		}); err != nil {
			return err
		}

		// 2. 查出所有权限id并组装数据
		permissionIds, err := q.ListPermissionIDsByMenuIDs(ctx, req.MenuIDs)
		if err != nil {
			return err
		}

		params := make([]sqlc.CreateRolePermissionParams, 0, len(permissionIds))
		for _, id := range permissionIds {
			params = append(params, sqlc.CreateRolePermissionParams{
				RoleID:       roleID,
				PermissionID: id,
			})
		}

		// 批量插入
		_, err = q.CreateRolePermission(ctx, params)
		if err != nil {
			return err
		}

		return nil
	})

	if err != nil {
		return err
	}

	// 清理缓存 这里只用清理用户信息
	_ = s.cache.DelByPrefix(ctx, cachekey.UserInfoPattern)

	return nil
}

func (s *RoleService) SetRoleApis(ctx context.Context, roleID int32, req request.SetRoleApisRequest) error {
	_, err := s.store.GetRoleByID(ctx, roleID)
	if err != nil {
		return dberr.MapNoRows(err, errs.ErrRoleNotFound)
	}

	err = s.store.WithTx(ctx, func(q *sqlc.Queries) error {
		// 先删除所有旧权限数据
		if err = q.DeleteRolePermissionsByType(ctx, sqlc.DeleteRolePermissionsByTypeParams{
			RoleID: roleID,
			Type:   int16(enum.PermissionTypeApi),
		}); err != nil {
			return err
		}

		// 查出数据并组装
		permissionIds, err := q.ListPermissionIDsByApiIDs(ctx, req.ApiIDs)
		if err != nil {
			return err
		}

		params := make([]sqlc.CreateRolePermissionParams, 0, len(permissionIds))
		for _, id := range permissionIds {
			params = append(params, sqlc.CreateRolePermissionParams{
				RoleID:       roleID,
				PermissionID: id,
			})
		}

		// 批量插入
		_, err = q.CreateRolePermission(ctx, params)
		if err != nil {
			return err
		}

		return nil
	})

	if err != nil {
		return err
	}

	// 清理缓存 这里只用清理接口权限
	_ = s.cache.DelByPrefix(ctx, cachekey.UserApiPermissionsPattern)

	return nil
}

func (s *RoleService) Delete(ctx context.Context, id int32) error {
	err := s.store.WithTx(ctx, func(q *sqlc.Queries) error {
		// 1.删除角色关联权限
		err := q.DeleteRolePermissionsByRoleID(ctx, id)
		if err != nil {
			return err
		}

		// 2. 根据角色id删除用户关联的角色
		err = q.DeleteUserRoleByRoleID(ctx, id)
		if err != nil {
			return err
		}

		// 3. 删除角色信息
		rows, err := q.DeleteRole(ctx, id)
		err = dberr.MapRowsAffected(rows, err, errs.ErrRoleNotFound)
		if err != nil {
			// 如果是数据库不存在这条数据 此时也执行清理
			if errors.Is(err, errs.ErrRoleNotFound) {
			}
			return err
		}

		return nil
	})

	if err != nil {
		return err
	}

	// 清理缓存
	_ = s.clearCache(ctx)

	return nil
}