Files
geo/server/internal/tenant/transport/kol_admin_handler.go
T

117 lines
2.6 KiB
Go

package transport
import (
"time"
"github.com/gin-gonic/gin"
"github.com/geo-platform/tenant-api/internal/bootstrap"
"github.com/geo-platform/tenant-api/internal/shared/auth"
"github.com/geo-platform/tenant-api/internal/shared/response"
"github.com/geo-platform/tenant-api/internal/tenant/app"
)
var errTenantAdminRequired = response.ErrForbidden(40371, "tenant_admin_required", "tenant admin role is required")
type KolAdminHandler struct {
svc *app.KolSubscriptionAdminService
}
type approveKolSubscriptionRequest struct {
EndAt *time.Time `json:"end_at"`
}
func NewKolAdminHandler(a *bootstrap.App) *KolAdminHandler {
return &KolAdminHandler{
svc: app.NewKolSubscriptionAdminService(
a.DB,
a.AuditLogs,
a.KolMarketplace,
a.KolSubscriptions,
a.KolPrompts,
),
}
}
func (h *KolAdminHandler) ApproveSubscription(c *gin.Context) {
id, ok := parseInt64Param(c, "id", "subscription id")
if !ok {
return
}
actor, ok := requireTenantAdmin(c)
if !ok {
return
}
var req approveKolSubscriptionRequest
if c.Request.ContentLength > 0 {
if err := c.ShouldBindJSON(&req); err != nil {
response.Error(c, response.ErrBadRequest(40001, "invalid_params", err.Error()))
return
}
}
data, err := h.svc.Approve(c.Request.Context(), id, req.EndAt, actor.UserID)
if err != nil {
response.Error(c, err)
return
}
response.Success(c, data)
}
func (h *KolAdminHandler) ManualBind(c *gin.Context) {
actor, ok := requireTenantAdmin(c)
if !ok {
return
}
var req app.ManualBindKolSubscriptionInput
if err := c.ShouldBindJSON(&req); err != nil {
response.Error(c, response.ErrBadRequest(40001, "invalid_params", err.Error()))
return
}
data, err := h.svc.ManualBind(c.Request.Context(), req, actor.UserID)
if err != nil {
response.Error(c, err)
return
}
response.Success(c, data)
}
func (h *KolAdminHandler) RevokeSubscription(c *gin.Context) {
id, ok := parseInt64Param(c, "id", "subscription id")
if !ok {
return
}
actor, ok := requireTenantAdmin(c)
if !ok {
return
}
if err := h.svc.Revoke(c.Request.Context(), id, actor.UserID); err != nil {
response.Error(c, err)
return
}
response.Success(c, gin.H{"ok": true})
}
// V1 compromise: these admin endpoints live on tenant-api until a dedicated
// platform-api/module exists. The temporary gate is tenant_role=tenant_admin.
func requireTenantAdmin(c *gin.Context) (auth.Actor, bool) {
actor, ok := actorFromRequest(c)
if !ok {
return auth.Actor{}, false
}
if actor.Role != "tenant_admin" {
response.Error(c, errTenantAdminRequired)
return auth.Actor{}, false
}
return actor, true
}