admin-web/src/views/InternalUsersView.vue

<script setup lang="ts">
import { computed, nextTick, onMounted, reactive, ref } from 'vue'
import { ElMessage, ElMessageBox, type FormInstance, type FormRules } from 'element-plus'
import { KeyRound, Pencil, Plus, ShieldCheck } from '@lucide/vue'
import {
  assignPlatformInternalUserRoles,
  changePlatformInternalUserStatus,
  createPlatformInternalUser,
  listPlatformInternalUsers,
  listPlatformRoles,
  resetPlatformInternalUserPassword,
  updatePlatformInternalUser,
  type PlatformInternalUser,
  type PlatformRoleResource,
} from '@/api/platformIam'
import { getApiErrorDetails, getApiErrorMessage, type ApiErrorDetails } from '@/api/http'
import ApiErrorMeta from '@/components/ApiErrorMeta.vue'
import StatusBadge from '@/components/StatusBadge.vue'
import DataTable, { type DataTableColumn } from '@/components/common/DataTable.vue'
import QueryToolbar, { type QueryField, type QueryModel } from '@/components/common/QueryToolbar.vue'
import { useUnsavedWorkRegistration } from '@/composables/useUnsavedWorkRegistration'
import { useAccessPreviewStore } from '@/stores/accessPreview'
import { useAuthStore } from '@/stores/auth'

const access = useAccessPreviewStore()
const auth = useAuthStore()
const users = ref<PlatformInternalUser[]>([])
const roles = ref<PlatformRoleResource[]>([])
const loading = ref(false)
const saving = ref(false)
const loadError = ref<ApiErrorDetails | null>(null)
const editorOpen = ref(false)
const formRef = ref<FormInstance>()
const editingMembershipId = ref<string | null>(null)
const roleEditorOpen = ref(false)
const assigningRoles = ref(false)
const roleAssignmentUser = ref<PlatformInternalUser | null>(null)
const assignedRoleIds = ref<string[]>([])
const rowActionId = ref('')
const page = ref(1)
const pageSize = ref(10)
type InternalUserFilters = QueryModel & { keyword: string; status: string }
const filters = ref<InternalUserFilters>({ keyword: '', status: '' })
const appliedFilters = ref<InternalUserFilters>({ ...filters.value })
const queryFields: QueryField[] = [
  { key: 'keyword', type: 'input', placeholder: '登录账号、认证用户 ID、姓名或成员编号' },
  { key: 'status', type: 'select', placeholder: '全部状态', options: [{ label: '正常', value: 'ACTIVE' }, { label: '停用', value: 'DISABLED' }] },
]
const emptyForm = () => ({ authUserId: '', userType: 'INTERNAL', displayName: '', phone: '', email: '', memberNo: '', roleIds: [] as string[] })
const form = reactive(emptyForm())
const formRules = computed<FormRules>(() => ({
  authUserId: [
    { required: !editingMembershipId.value, message: '请输入认证用户 ID', trigger: 'blur' },
    { pattern: /^[1-9]\d*$/, message: '认证用户 ID 必须为正整数', trigger: 'blur' },
  ],
  displayName: [{ required: true, whitespace: true, message: '请输入姓名', trigger: 'blur' }],
  userType: editingMembershipId.value ? [] : [{ required: true, message: '请选择用户类型', trigger: 'change' }],
  memberNo: editingMembershipId.value ? [{ required: true, whitespace: true, message: '请输入成员编号', trigger: 'blur' }] : [],
  email: [{ type: 'email', message: '请输入有效的邮箱地址', trigger: 'blur' }],
}))
const editorLabel = computed(() => editingMembershipId.value ? '编辑内部用户' : '新增内部用户')
const { captureBaseline } = useUnsavedWorkRegistration({
  key: 'internal-user-editor',
  label: editorLabel,
  isOpen: editorOpen,
  model: form,
  requiredPermission: computed(() => editingMembershipId.value ? 'platform:user:edit' : 'platform:user:create'),
})

const canCreate = computed(() => access.can('platform:user:create'))
const canEdit = computed(() => access.can('platform:user:edit'))
const canChangeStatus = computed(() => access.can('platform:user:status'))
const canResetPassword = computed(() => access.can('platform:user:reset-password'))
const canGrantRoles = computed(() => access.can('platform:user:grant-role'))
const roleNames = computed(() => new Map(roles.value.map((role) => [String(role.id), role.roleName])))
const roleOptions = computed(() => roles.value.filter((role) => role.status === 'ACTIVE' || form.roleIds.includes(String(role.id)) || assignedRoleIds.value.includes(String(role.id))))
const filteredRows = computed(() => users.value.filter((item) => {
  const keyword = appliedFilters.value.keyword.trim().toLowerCase()
  const matchesKeyword = !keyword || [item.displayName, item.username, item.memberNo ?? '', String(item.authUserId)]
    .some((value) => value.toLowerCase().includes(keyword))
  return matchesKeyword && (!appliedFilters.value.status || item.status === appliedFilters.value.status)
}))
const pagedRows = computed(() => filteredRows.value.slice((page.value - 1) * pageSize.value, page.value * pageSize.value))
const userColumns: DataTableColumn[] = [
  { key: 'actions', label: '操作', width: 355, fixed: 'left', slotName: 'actions' },
  { prop: 'displayName', label: '姓名', minWidth: 150 },
  { prop: 'username', label: '登录账号', minWidth: 150 },
  { prop: 'authUserId', label: '认证用户 ID', minWidth: 145 },
  { prop: 'memberNo', label: '成员编号', minWidth: 170 },
  { prop: 'memberType', label: '成员类型', minWidth: 130 },
  { key: 'roles', label: '角色', minWidth: 190, slotName: 'roles' },
  { key: 'status', label: '状态', width: 100, slotName: 'status' },
]

async function loadUsers() {
  loading.value = true
  loadError.value = null
  users.value = []
  try {
    const [userRecords, roleRecords] = await Promise.all([listPlatformInternalUsers(), listPlatformRoles()])
    users.value = userRecords
    roles.value = roleRecords
  } catch (error) {
    loadError.value = getApiErrorDetails(error, '内部用户列表加载失败，请稍后重试')
  } finally {
    loading.value = false
  }
}

function applyFilters() {
  appliedFilters.value = { ...filters.value }
  page.value = 1
  void loadUsers()
}
function roleLabel(roleId: number | string) { return roleNames.value.get(String(roleId)) ?? `角色 #${roleId}` }
function openCreate() {
  Object.assign(form, emptyForm())
  editingMembershipId.value = null
  captureBaseline()
  editorOpen.value = true
  nextTick(() => formRef.value?.clearValidate())
}
function openEdit(row: PlatformInternalUser) {
  if (!canEdit.value) return
  editingMembershipId.value = String(row.membershipId)
  Object.assign(form, {
    authUserId: String(row.authUserId),
    userType: row.memberType,
    displayName: row.displayName,
    phone: row.phone ?? '',
    email: row.email ?? '',
    memberNo: row.memberNo ?? '',
    roleIds: row.roleIds.map(String),
  })
  captureBaseline()
  editorOpen.value = true
  nextTick(() => formRef.value?.clearValidate())
}

function openRoleAssignment(row: PlatformInternalUser) {
  if (!canGrantRoles.value) return
  roleAssignmentUser.value = row
  assignedRoleIds.value = row.roleIds.map(String)
  roleEditorOpen.value = true
}

function isCurrentUser(row: PlatformInternalUser) {
  return String(row.userId) === auth.user?.id || String(row.authUserId) === auth.user?.id
}

async function saveUser() {
  const valid = await formRef.value?.validate().catch(() => false)
  if (!valid) return
  saving.value = true
  try {
    if (editingMembershipId.value) {
      await updatePlatformInternalUser(editingMembershipId.value, {
        displayName: form.displayName.trim(),
        phone: form.phone.trim(),
        email: form.email.trim(),
        memberNo: form.memberNo.trim(),
        roleIds: form.roleIds,
      })
    } else {
      await createPlatformInternalUser({
        authUserId: form.authUserId.trim(),
        userType: form.userType,
        displayName: form.displayName.trim(),
        phone: form.phone.trim(),
        email: form.email.trim(),
        memberNo: form.memberNo.trim() || undefined,
        roleIds: canGrantRoles.value ? form.roleIds : undefined,
      })
    }
    editorOpen.value = false
    ElMessage.success(editingMembershipId.value ? '内部用户已更新' : '内部用户已创建')
    await loadUsers()
  } catch (error) {
    ElMessage.error(getApiErrorMessage(error, editingMembershipId.value ? '内部用户更新失败，请稍后重试' : '内部用户创建失败，请稍后重试'))
  } finally {
    saving.value = false
  }
}

async function toggleStatus(row: PlatformInternalUser) {
  const target = row.status === 'ACTIVE' ? '停用' : '启用'
  try {
    await ElMessageBox.confirm(`确认${target}内部用户“${row.displayName}”吗？`, '用户状态', { confirmButtonText: '确认', cancelButtonText: '取消' })
    rowActionId.value = String(row.membershipId)
    const updated = await changePlatformInternalUserStatus(row.membershipId, target === '启用' ? 'ACTIVE' : 'DISABLED')
    Object.assign(row, updated)
    ElMessage.success(`用户已${target}`)
  } catch (error) {
    if (error === 'cancel' || error === 'close') return
    ElMessage.error(getApiErrorMessage(error, '用户状态更新失败，请稍后重试'))
  } finally {
    rowActionId.value = ''
  }
}

async function resetPassword(row: PlatformInternalUser) {
  try {
    const { value } = await ElMessageBox.prompt(`为“${row.displayName}”设置新密码`, '重置密码', {
      confirmButtonText: '确认重置',
      cancelButtonText: '取消',
      inputType: 'password',
      inputPlaceholder: '8-64 位，必须包含字母和数字',
      inputValidator: (password) => /^(?=.*[A-Za-z])(?=.*\d).{8,64}$/.test(password) || '密码需为 8-64 位，且同时包含字母和数字',
    })
    rowActionId.value = String(row.membershipId)
    await resetPlatformInternalUserPassword(row.membershipId, value)
    ElMessage.success('密码已重置')
  } catch (error) {
    if (error === 'cancel' || error === 'close') return
    ElMessage.error(getApiErrorMessage(error, '密码重置失败，请稍后重试'))
  } finally {
    rowActionId.value = ''
  }
}

async function saveRoleAssignment() {
  if (!roleAssignmentUser.value) return
  assigningRoles.value = true
  try {
    const updated = await assignPlatformInternalUserRoles(roleAssignmentUser.value.membershipId, assignedRoleIds.value)
    const index = users.value.findIndex((item) => String(item.membershipId) === String(updated.membershipId))
    if (index >= 0) users.value[index] = updated
    roleEditorOpen.value = false
    ElMessage.success('用户角色已更新')
  } catch (error) {
    ElMessage.error(getApiErrorMessage(error, '用户角色更新失败，请稍后重试'))
  } finally {
    assigningRoles.value = false
  }
}

onMounted(loadUsers)
</script>

<template>
  <div class="business-page">
    <el-alert v-if="loadError" type="error" :closable="false" show-icon role="alert">
      <template #title><div class="api-error-alert-title"><span>{{ loadError.message }}</span><ApiErrorMeta :details="loadError" /></div><el-button link type="danger" @click="loadUsers">重新加载</el-button></template>
    </el-alert>
    <QueryToolbar v-model="filters" class="surface-panel" ariaLabel="内部用户筛选" :fields="queryFields" @search="applyFilters" />
    <section class="surface-panel table-panel">
      <header class="panel-heading"><div><h2>内部用户 <span class="secondary-text">共 {{ filteredRows.length }} 条</span></h2><p>数据和维护操作均由平台 IAM 提供，角色关系按成员维度保存。</p></div><el-button v-if="canCreate" type="primary" @click="openCreate"><Plus :size="16" />新增用户</el-button></header>
      <DataTable v-model:page="page" v-model:page-size="pageSize" :data="pagedRows" :columns="userColumns" :loading="loading" :total="filteredRows.length" row-key="membershipId" empty-text="没有符合条件的内部用户">
        <template #actions="{ row }"><div v-if="canEdit || canChangeStatus || canResetPassword || canGrantRoles" class="table-actions"><el-button v-if="canEdit" link type="primary" :disabled="rowActionId === String((row as PlatformInternalUser).membershipId)" @click="openEdit(row as PlatformInternalUser)"><Pencil :size="15" />编辑</el-button><el-button v-if="canGrantRoles" link type="primary" :disabled="rowActionId === String((row as PlatformInternalUser).membershipId)" @click="openRoleAssignment(row as PlatformInternalUser)"><ShieldCheck :size="15" />分配角色</el-button><el-button v-if="canChangeStatus" link :type="(row as PlatformInternalUser).status === 'ACTIVE' ? 'danger' : 'success'" :loading="rowActionId === String((row as PlatformInternalUser).membershipId)" :disabled="isCurrentUser(row as PlatformInternalUser)" :title="isCurrentUser(row as PlatformInternalUser) ? '不能停用当前登录用户' : undefined" @click="toggleStatus(row as PlatformInternalUser)">{{ (row as PlatformInternalUser).status === 'ACTIVE' ? '停用' : '启用' }}</el-button><el-button v-if="canResetPassword" link type="warning" :loading="rowActionId === String((row as PlatformInternalUser).membershipId)" @click="resetPassword(row as PlatformInternalUser)"><KeyRound :size="15" />重置密码</el-button></div><span v-else class="secondary-text">仅查看</span></template>
        <template #roles="{ row }"><div class="tag-list"><el-tag v-for="roleId in (row as PlatformInternalUser).roleIds" :key="roleId" effect="plain" size="small">{{ roleLabel(roleId) }}</el-tag><span v-if="(row as PlatformInternalUser).roleIds.length === 0" class="secondary-text">未分配</span></div></template>
        <template #status="{ row }"><StatusBadge :status="(row as PlatformInternalUser).status === 'ACTIVE' ? '正常' : '停用'" /></template>
      </DataTable>
    </section>
    <el-drawer v-model="editorOpen" :title="editorLabel" size="560px" class="business-drawer editor-drawer" :modal="false" :close-on-click-modal="false">
      <el-form ref="formRef" :model="form" :rules="formRules" label-position="top" class="drawer-form">
        <div class="form-section"><h3>用户信息</h3><div class="form-grid two-cols">
          <el-form-item label="认证用户 ID" prop="authUserId" :required="!editingMembershipId"><el-input v-model="form.authUserId" :disabled="Boolean(editingMembershipId)" inputmode="numeric" placeholder="输入已有认证账号的数字 ID" /></el-form-item>
          <el-form-item label="姓名" prop="displayName" required><el-input v-model="form.displayName" placeholder="如：张三" maxlength="64" /></el-form-item>
          <el-form-item label="用户类型" prop="userType" :required="!editingMembershipId"><el-select v-model="form.userType" :disabled="Boolean(editingMembershipId)"><el-option label="平台内部用户" value="INTERNAL" /><el-option label="平台管理员" value="PLATFORM" /></el-select></el-form-item>
          <el-form-item label="手机号"><el-input v-model="form.phone" placeholder="如：13800138000" inputmode="tel" /></el-form-item>
          <el-form-item label="邮箱" prop="email"><el-input v-model="form.email" placeholder="如：name@example.com" inputmode="email" /></el-form-item>
          <el-form-item v-if="editingMembershipId" label="成员编号" prop="memberNo" required><el-input v-model="form.memberNo" placeholder="如：PLATFORM-0001" maxlength="64" /></el-form-item>
          <el-form-item v-if="canGrantRoles" label="角色"><el-select v-model="form.roleIds" multiple collapse-tags collapse-tags-tooltip placeholder="选择用户角色"><el-option v-for="role in roleOptions" :key="role.id" :label="role.roleName" :value="String(role.id)" :disabled="role.status !== 'ACTIVE'" /></el-select></el-form-item>
        </div></div>
      </el-form>
      <template #footer><div class="drawer-footer"><el-button :disabled="saving" @click="editorOpen = false">取消</el-button><el-button v-if="editingMembershipId ? canEdit : canCreate" type="primary" :loading="saving" @click="saveUser">{{ editingMembershipId ? '保存修改' : '创建用户' }}</el-button></div></template>
    </el-drawer>
    <el-drawer v-model="roleEditorOpen" :title="roleAssignmentUser ? `分配角色：${roleAssignmentUser.displayName}` : '分配角色'" size="520px" class="business-drawer editor-drawer" :modal="false" :close-on-click-modal="false">
      <el-form label-position="top" class="drawer-form"><div class="form-section"><h3>平台角色</h3><p class="secondary-text">保存后按后端契约全量替换当前用户的角色；不选择角色表示清空。</p><el-form-item label="角色"><el-select v-model="assignedRoleIds" multiple collapse-tags collapse-tags-tooltip placeholder="选择用户角色"><el-option v-for="role in roleOptions" :key="role.id" :label="role.roleName" :value="String(role.id)" :disabled="role.status !== 'ACTIVE'" /></el-select></el-form-item></div></el-form>
      <template #footer><div class="drawer-footer"><el-button :disabled="assigningRoles" @click="roleEditorOpen = false">取消</el-button><el-button type="primary" :loading="assigningRoles" @click="saveRoleAssignment">保存角色</el-button></div></template>
    </el-drawer>
  </div>
</template>