7340658305
收口 Phase 0 三处「声明未生效」： - 三级鉴权落地：权限集存 Redis（key 前缀隔离多项目），@RequirePermissions 挂到全部受控接口，super_admin 角色绕过权限码与 data_scope - 审计/登录日志自动落库：@AuditLog 装饰器 + 拦截器异步写入（写操作+登录登出），登录成功/失败均记 login_log（脱敏） - seed 脚本：一键初始化租户 touyun/用户 touyun/超管 super_admin/全量资源树（48 资源全量授权） Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
44 lines
1.3 KiB
TypeScript
44 lines
1.3 KiB
TypeScript
import { Body, Controller, Delete, Get, Param, Patch, Post } from '@nestjs/common';
|
|
import { Permissions } from '../common/permissions.js';
|
|
import { AuditLog, RequirePermissions } from '../auth/decorators.js';
|
|
import { CreateResourceDto, UpdateResourceDto } from './dto.js';
|
|
import { ResourcesService } from './resources.service.js';
|
|
|
|
@Controller('resources')
|
|
export class ResourcesController {
|
|
constructor(private readonly service: ResourcesService) {}
|
|
|
|
@Get()
|
|
@RequirePermissions(Permissions.resource.list)
|
|
list() {
|
|
return this.service.list({}, { sort: 'asc' });
|
|
}
|
|
|
|
@Get(':id')
|
|
@RequirePermissions(Permissions.resource.list)
|
|
get(@Param('id') id: string) {
|
|
return this.service.findById(id);
|
|
}
|
|
|
|
@Post()
|
|
@RequirePermissions(Permissions.resource.create)
|
|
@AuditLog('resource', 'create')
|
|
create(@Body() dto: CreateResourceDto) {
|
|
return this.service.createResource(dto);
|
|
}
|
|
|
|
@Patch(':id')
|
|
@RequirePermissions(Permissions.resource.update)
|
|
@AuditLog('resource', 'update')
|
|
update(@Param('id') id: string, @Body() dto: UpdateResourceDto) {
|
|
return this.service.updateResource(id, dto);
|
|
}
|
|
|
|
@Delete(':id')
|
|
@RequirePermissions(Permissions.resource.delete)
|
|
@AuditLog('resource', 'delete')
|
|
remove(@Param('id') id: string) {
|
|
return this.service.softRemove(id);
|
|
}
|
|
}
|