暂存提交

2026-08-19 16:24:02 +08:00
parent f5c4bf130a
commit 6acb6178da
354 changed files with 25000 additions and 198 deletions
@@ -0,0 +1,56 @@
+package com.baiyue.lastleg.procurement.controller;
+
+import com.baiyue.common.core.api.ApiResponse;
+import com.baiyue.common.core.api.PageResult;
+import com.baiyue.common.security.AuthenticatedUser;
+import com.baiyue.lastleg.procurement.dto.OverseasProcurementRequests;
+import com.baiyue.lastleg.procurement.dto.OverseasProcurementResponses;
+import com.baiyue.lastleg.procurement.service.OverseasProcurementService;
+import jakarta.annotation.Resource;
+import jakarta.validation.Valid;
+import org.springframework.http.HttpStatus;
+import org.springframework.security.core.annotation.AuthenticationPrincipal;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.PathVariable;
+import org.springframework.web.bind.annotation.PostMapping;
+import org.springframework.web.bind.annotation.RequestBody;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RestController;
+import org.springframework.web.server.ResponseStatusException;
+
+@RestController
+@RequestMapping("/api/merchant/v1/last-leg/overseas-procurements")
+public class MerchantOverseasProcurementController {
+    @Resource private OverseasProcurementService service;
+
+    @PostMapping
+    public ApiResponse<OverseasProcurementResponses.Detail> create(
+        @AuthenticationPrincipal AuthenticatedUser user,
+        @Valid @RequestBody OverseasProcurementRequests.Create request) {
+        return ApiResponse.success(service.create(customer(user), operator(user), request));
+    }
+
+    @GetMapping
+    public ApiResponse<PageResult<OverseasProcurementResponses.Summary>> page(
+        @AuthenticationPrincipal AuthenticatedUser user, @Valid OverseasProcurementRequests.Query query) {
+        return ApiResponse.success(service.page(customer(user), query));
+    }
+
+    @GetMapping("/{orderNo}")
+    public ApiResponse<OverseasProcurementResponses.Detail> detail(
+        @AuthenticationPrincipal AuthenticatedUser user, @PathVariable String orderNo) {
+        return ApiResponse.success(service.detail(customer(user), orderNo));
+    }
+
+    private String customer(AuthenticatedUser user) {
+        if (user == null || user.tenantId() == null) throw new ResponseStatusException(HttpStatus.UNAUTHORIZED);
+        if ("PLATFORM".equals(user.appCode()) || user.tenantId() == 0L) {
+            throw new ResponseStatusException(HttpStatus.FORBIDDEN, "Merchant identity is required");
+        }
+        return String.valueOf(user.tenantId());
+    }
+
+    private String operator(AuthenticatedUser user) {
+        return user.userId() == null ? user.username() : String.valueOf(user.userId());
+    }
+}
@@ -0,0 +1,96 @@
+package com.baiyue.lastleg.procurement.controller;
+
+import com.baiyue.common.core.api.ApiResponse;
+import com.baiyue.common.core.api.PageResult;
+import com.baiyue.common.security.AuthenticatedUser;
+import com.baiyue.lastleg.procurement.dto.OverseasProcurementRequests;
+import com.baiyue.lastleg.procurement.dto.OverseasProcurementResponses;
+import com.baiyue.lastleg.procurement.service.OverseasProcurementService;
+import jakarta.annotation.Resource;
+import jakarta.validation.Valid;
+import org.springframework.http.HttpStatus;
+import org.springframework.security.core.annotation.AuthenticationPrincipal;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.PatchMapping;
+import org.springframework.web.bind.annotation.PathVariable;
+import org.springframework.web.bind.annotation.PostMapping;
+import org.springframework.web.bind.annotation.RequestBody;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RequestParam;
+import org.springframework.web.bind.annotation.RestController;
+import org.springframework.web.server.ResponseStatusException;
+
+@RestController
+@RequestMapping("/api/platform/v1/last-leg/overseas-procurements")
+public class PlatformOverseasProcurementController {
+    @Resource private OverseasProcurementService service;
+
+    @GetMapping
+    public ApiResponse<PageResult<OverseasProcurementResponses.Summary>> page(
+        @AuthenticationPrincipal AuthenticatedUser user,
+        @RequestParam(required = false) String customerId,
+        @Valid OverseasProcurementRequests.Query query) {
+        requirePlatform(user);
+        return ApiResponse.success(service.page(trim(customerId), query));
+    }
+
+    @GetMapping("/{orderNo}")
+    public ApiResponse<OverseasProcurementResponses.Detail> detail(
+        @AuthenticationPrincipal AuthenticatedUser user, @RequestParam String customerId,
+        @PathVariable String orderNo) {
+        requirePlatform(user);
+        return ApiResponse.success(service.detail(requiredCustomer(customerId), orderNo));
+    }
+
+    @PostMapping("/{orderNo}/review")
+    public ApiResponse<OverseasProcurementResponses.Detail> review(
+        @AuthenticationPrincipal AuthenticatedUser user, @RequestParam String customerId,
+        @PathVariable String orderNo, @Valid @RequestBody OverseasProcurementRequests.Review request) {
+        requirePermission(user, OverseasProcurementService.REVIEW_PERMISSION);
+        return ApiResponse.success(service.review(requiredCustomer(customerId), orderNo, operator(user), request));
+    }
+
+    @PatchMapping("/{orderNo}")
+    public ApiResponse<OverseasProcurementResponses.Detail> update(
+        @AuthenticationPrincipal AuthenticatedUser user, @RequestParam String customerId,
+        @PathVariable String orderNo, @Valid @RequestBody OverseasProcurementRequests.Update request) {
+        requirePermission(user, OverseasProcurementService.MANAGE_PERMISSION);
+        return ApiResponse.success(service.update(requiredCustomer(customerId), orderNo, request));
+    }
+
+    @PostMapping("/{orderNo}/outbounds")
+    public ApiResponse<OverseasProcurementResponses.Detail> addOutbound(
+        @AuthenticationPrincipal AuthenticatedUser user, @RequestParam String customerId,
+        @PathVariable String orderNo, @Valid @RequestBody OverseasProcurementRequests.AddOutbound request) {
+        requirePermission(user, OverseasProcurementService.MANAGE_PERMISSION);
+        return ApiResponse.success(service.addOutbound(requiredCustomer(customerId), orderNo, operator(user), request));
+    }
+
+    private void requirePlatform(AuthenticatedUser user) {
+        if (user == null || user.tenantId() == null) throw new ResponseStatusException(HttpStatus.UNAUTHORIZED);
+        if (!"PLATFORM".equals(user.appCode()) || user.tenantId() != 0L) {
+            throw new ResponseStatusException(HttpStatus.FORBIDDEN, "Platform identity is required");
+        }
+    }
+
+    private void requirePermission(AuthenticatedUser user, String permission) {
+        requirePlatform(user);
+        if (user.permissions() == null || !user.permissions().contains(permission)) {
+            throw new ResponseStatusException(HttpStatus.FORBIDDEN, permission + " permission is required");
+        }
+    }
+
+    private String requiredCustomer(String customerId) {
+        String value = trim(customerId);
+        if (value == null || "0".equals(value)) {
+            throw new ResponseStatusException(HttpStatus.BAD_REQUEST, "Target customerId is required");
+        }
+        return value;
+    }
+
+    private String operator(AuthenticatedUser user) {
+        return user.userId() == null ? user.username() : String.valueOf(user.userId());
+    }
+
+    private String trim(String value) { return value == null || value.isBlank() ? null : value.trim(); }
+}