second commit

2026-06-04 15:44:48 +08:00
parent 4db6efb3a7
commit 8ac150bc7b
1275 changed files with 286124 additions and 0 deletions
@@ -0,0 +1,154 @@
+package v1
+
+import (
+	"net/http"
+
+	"github.com/gin-gonic/gin"
+
+	"github.com/gochat/gochat/internal/model"
+	"github.com/gochat/gochat/internal/repository"
+	"github.com/gochat/gochat/pkg/response"
+)
+
+// PlatformAccountUserHandler handles Platform API account_user endpoints (AccessToken auth).
+// Reference: Chatwoot Platform::Api::V1::AccountUsersController — AccessToken authenticated
+//
+// Manages the association between users and accounts from the Platform API context.
+// Both the account and the user must be within the PlatformApp's permissible scope.
+type PlatformAccountUserHandler struct {
+	accountRepo     *repository.AccountRepo
+	userRepo        *repository.UserRepo
+	permissibleRepo *repository.PermissibleRepo
+}
+
+// NewPlatformAccountUserHandler creates a new PlatformAccountUser handler.
+func NewPlatformAccountUserHandler(
+	accountRepo *repository.AccountRepo,
+	userRepo *repository.UserRepo,
+	permissibleRepo *repository.PermissibleRepo,
+) *PlatformAccountUserHandler {
+	return &PlatformAccountUserHandler{
+		accountRepo:     accountRepo,
+		userRepo:        userRepo,
+		permissibleRepo: permissibleRepo,
+	}
+}
+
+// Index lists account_users for a specific account.
+// GET /platform/api/v1/accounts/:account_id/account_users
+// Reference: Chatwoot Platform::Api::V1::AccountUsersController#index
+// Requires: Account must be within PlatformApp's permissible scope.
+func (h *PlatformAccountUserHandler) Index(c *gin.Context) {
+	accountID, err := parseUintParam(c, "id")
+	if err != nil {
+		response.AbortWithStatusError(c, http.StatusBadRequest, response.ErrBadRequest, "invalid account ID")
+		return
+	}
+
+	platformAppID := getPlatformAppID(c)
+
+	// Verify PlatformApp has permissible access to this account
+	perm, err := h.permissibleRepo.FindByPlatformAppAndResource(c.Request.Context(), platformAppID, model.PermissibleTypeAccount, accountID)
+	if err != nil || perm == nil {
+		response.AbortWithStatusError(c, http.StatusForbidden, response.ErrForbidden, "non permissible resource")
+		return
+	}
+
+	accountUsers, _, err := h.accountRepo.FindAgentsByAccount(c.Request.Context(), accountID, 0, 100)
+	if err != nil {
+		response.AbortWithStatusError(c, http.StatusInternalServerError, response.ErrInternal, err.Error())
+		return
+	}
+
+	response.OK(c, accountUsers)
+}
+
+// Create adds a user to an account.
+// POST /platform/api/v1/accounts/:account_id/account_users
+// Reference: Chatwoot Platform::Api::V1::AccountUsersController#create
+// Requires: Both account and user must be within PlatformApp's permissible scope.
+func (h *PlatformAccountUserHandler) Create(c *gin.Context) {
+	accountID, err := parseUintParam(c, "id")
+	if err != nil {
+		response.AbortWithStatusError(c, http.StatusBadRequest, response.ErrBadRequest, "invalid account ID")
+		return
+	}
+
+	platformAppID := getPlatformAppID(c)
+
+	// Verify PlatformApp has permissible access to this account
+	perm, err := h.permissibleRepo.FindByPlatformAppAndResource(c.Request.Context(), platformAppID, model.PermissibleTypeAccount, accountID)
+	if err != nil || perm == nil {
+		response.AbortWithStatusError(c, http.StatusForbidden, response.ErrForbidden, "non permissible resource")
+		return
+	}
+
+	var req struct {
+		UserID uint   `json:"user_id" binding:"required"`
+		Role   string `json:"role,omitempty"`
+	}
+	if err := c.ShouldBindJSON(&req); err != nil {
+		response.AbortWithStatusError(c, http.StatusBadRequest, response.ErrBadRequest, err.Error())
+		return
+	}
+
+	// Verify PlatformApp has permissible access to this user
+	userPerm, err := h.permissibleRepo.FindByPlatformAppAndResource(c.Request.Context(), platformAppID, model.PermissibleTypeUser, req.UserID)
+	if err != nil || userPerm == nil {
+		response.AbortWithStatusError(c, http.StatusForbidden, response.ErrForbidden, "non permissible resource for user")
+		return
+	}
+
+	role := req.Role
+	if role == "" {
+		role = "agent"
+	}
+
+	if err := h.accountRepo.AddUserToAccount(c.Request.Context(), accountID, req.UserID, role); err != nil {
+		response.AbortWithStatusError(c, http.StatusInternalServerError, response.ErrInternal, err.Error())
+		return
+	}
+
+	// Return the created AccountUser
+	acctUser, err := h.accountRepo.FindAccountUserByUserAndAccount(c.Request.Context(), accountID, req.UserID)
+	if err != nil {
+		response.OK(c, gin.H{"account_id": accountID, "user_id": req.UserID, "role": role})
+		return
+	}
+
+	response.Created(c, acctUser)
+}
+
+// Destroy removes a user from an account.
+// DELETE /platform/api/v1/accounts/:account_id/account_users/:id
+// Reference: Chatwoot Platform::Api::V1::AccountUsersController#destroy
+// Requires: Account must be within PlatformApp's permissible scope.
+func (h *PlatformAccountUserHandler) Destroy(c *gin.Context) {
+	accountID, err := parseUintParam(c, "id")
+	if err != nil {
+		response.AbortWithStatusError(c, http.StatusBadRequest, response.ErrBadRequest, "invalid account ID")
+		return
+	}
+
+	userID, err := parseUintParam(c, "id")
+	if err != nil {
+		response.AbortWithStatusError(c, http.StatusBadRequest, response.ErrBadRequest, "invalid user ID")
+		return
+	}
+
+	platformAppID := getPlatformAppID(c)
+
+	// Verify PlatformApp has permissible access to this account
+	perm, err := h.permissibleRepo.FindByPlatformAppAndResource(c.Request.Context(), platformAppID, model.PermissibleTypeAccount, accountID)
+	if err != nil || perm == nil {
+		response.AbortWithStatusError(c, http.StatusForbidden, response.ErrForbidden, "non permissible resource")
+		return
+	}
+
+	if err := h.accountRepo.RemoveUserFromAccount(c.Request.Context(), accountID, userID); err != nil {
+		response.AbortWithStatusError(c, http.StatusInternalServerError, response.ErrInternal, err.Error())
+		return
+	}
+
+	response.NoContent(c)
+}