feat(kol): marketplace + admin subscription HTTP endpoints

2026-04-17 14:23:39 +08:00
parent 99fc6c1af4
commit 2a2489ce5c
4 changed files with 266 additions and 1 deletions
@@ -0,0 +1,116 @@
+package transport
+
+import (
+	"time"
+
+	"github.com/gin-gonic/gin"
+
+	"github.com/geo-platform/tenant-api/internal/bootstrap"
+	"github.com/geo-platform/tenant-api/internal/shared/auth"
+	"github.com/geo-platform/tenant-api/internal/shared/response"
+	"github.com/geo-platform/tenant-api/internal/tenant/app"
+)
+
+var errTenantAdminRequired = response.ErrForbidden(40371, "tenant_admin_required", "tenant admin role is required")
+
+type KolAdminHandler struct {
+	svc *app.KolSubscriptionAdminService
+}
+
+type approveKolSubscriptionRequest struct {
+	EndAt *time.Time `json:"end_at"`
+}
+
+func NewKolAdminHandler(a *bootstrap.App) *KolAdminHandler {
+	return &KolAdminHandler{
+		svc: app.NewKolSubscriptionAdminService(
+			a.DB,
+			a.AuditLogs,
+			a.KolMarketplace,
+			a.KolSubscriptions,
+			a.KolPrompts,
+		),
+	}
+}
+
+func (h *KolAdminHandler) ApproveSubscription(c *gin.Context) {
+	id, ok := parseInt64Param(c, "id", "subscription id")
+	if !ok {
+		return
+	}
+
+	actor, ok := requireTenantAdmin(c)
+	if !ok {
+		return
+	}
+
+	var req approveKolSubscriptionRequest
+	if c.Request.ContentLength > 0 {
+		if err := c.ShouldBindJSON(&req); err != nil {
+			response.Error(c, response.ErrBadRequest(40001, "invalid_params", err.Error()))
+			return
+		}
+	}
+
+	data, err := h.svc.Approve(c.Request.Context(), id, req.EndAt, actor.UserID)
+	if err != nil {
+		response.Error(c, err)
+		return
+	}
+
+	response.Success(c, data)
+}
+
+func (h *KolAdminHandler) ManualBind(c *gin.Context) {
+	actor, ok := requireTenantAdmin(c)
+	if !ok {
+		return
+	}
+
+	var req app.ManualBindKolSubscriptionInput
+	if err := c.ShouldBindJSON(&req); err != nil {
+		response.Error(c, response.ErrBadRequest(40001, "invalid_params", err.Error()))
+		return
+	}
+
+	data, err := h.svc.ManualBind(c.Request.Context(), req, actor.UserID)
+	if err != nil {
+		response.Error(c, err)
+		return
+	}
+
+	response.Success(c, data)
+}
+
+func (h *KolAdminHandler) RevokeSubscription(c *gin.Context) {
+	id, ok := parseInt64Param(c, "id", "subscription id")
+	if !ok {
+		return
+	}
+
+	actor, ok := requireTenantAdmin(c)
+	if !ok {
+		return
+	}
+
+	if err := h.svc.Revoke(c.Request.Context(), id, actor.UserID); err != nil {
+		response.Error(c, err)
+		return
+	}
+
+	response.Success(c, gin.H{"ok": true})
+}
+
+// V1 compromise: these admin endpoints live on tenant-api until a dedicated
+// platform-api/module exists. The temporary gate is tenant_role=tenant_admin.
+func requireTenantAdmin(c *gin.Context) (auth.Actor, bool) {
+	actor, ok := actorFromRequest(c)
+	if !ok {
+		return auth.Actor{}, false
+	}
+	if actor.Role != "tenant_admin" {
+		response.Error(c, errTenantAdminRequired)
+		return auth.Actor{}, false
+	}
+	return actor, true
+}