perf: access token cache

internal/apps/admin/push/custom_events/admin_login_test.go

@@ -13,6 +13,7 @@ import (
 	"github.com/Rain-kl/Wavelet/internal/apps/admin/push"
 	"github.com/Rain-kl/Wavelet/internal/listener"
 	"github.com/Rain-kl/Wavelet/internal/model"
+	"github.com/Rain-kl/Wavelet/internal/repository"
 	"github.com/Rain-kl/Wavelet/internal/task"
 	"github.com/Rain-kl/Wavelet/internal/testhelper"
 	"github.com/hibiken/asynq"
@@ -88,7 +89,7 @@ func enableAdminLoginEvent(t *testing.T, dbConn *gorm.DB, channelName string, ta
 	event.Enabled = true
 	event.Channels = []string{channelName}
 	event.Targets = targets
-	require.NoError(t, dbConn.Save(&event).Error)
+	require.NoError(t, repository.SavePushEvent(context.Background(), &event))
 }
 
 func waitForAsyncTrigger(t *testing.T) {
@@ -165,11 +166,11 @@ func TestAdminLoginPushIntegration(t *testing.T) {
 		var event model.PushEvent
 		require.NoError(t, dbConn.Where("event_key = ?", AdminLogin.Key).First(&event).Error)
 		event.Enabled = false
-		require.NoError(t, dbConn.Save(&event).Error)
+		require.NoError(t, repository.SavePushEvent(context.Background(), &event))
 
 		listener.EmitAdminLoggedIn(context.Background(), adminUser, "10.0.0.1")
 		waitForAsyncTrigger(t)
 
 		assert.Equal(t, int64(0), countPushTasks(t, dbConn))
 	})
-}
+}

internal/apps/admin/push/push_test.go

@@ -3,7 +3,8 @@
 
 package push
 
-import ("bytes"
+import (
+	"bytes"
 	"context"
 	"encoding/json"
 	"net/http"
@@ -13,7 +14,10 @@ import ("bytes"
 	"testing"
 	"time"
 
+	"github.com/Rain-kl/Wavelet/internal/apps/oauth"
+	"github.com/Rain-kl/Wavelet/internal/common/response"
 	"github.com/Rain-kl/Wavelet/internal/model"
+	"github.com/Rain-kl/Wavelet/internal/repository"
 	"github.com/Rain-kl/Wavelet/internal/task"
 	"github.com/Rain-kl/Wavelet/internal/testhelper"
 	pkgpush "github.com/Rain-kl/Wavelet/pkg/push"
@@ -23,8 +27,7 @@ import ("bytes"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
 	"gorm.io/gorm"
-
-	"github.com/Rain-kl/Wavelet/internal/common/response")
+)
 
 var adminLoginEvent = EventMetadata{
 	Key:  "admin_login",
@@ -187,7 +190,7 @@ func TestEventTrigger(t *testing.T) {
 		event.Enabled = true
 		event.Channels = []string{"mock_channel"}
 		event.Targets = []string{"admin_user"}
-		err = dbConn.Save(&event).Error
+		err = repository.SavePushEvent(context.Background(), &event)
 		require.NoError(t, err)
 
 		// Trigger
@@ -244,8 +247,8 @@ func TestEventTrigger(t *testing.T) {
 
 		event.Enabled = true
 		event.Channels = []string{"mock_channel"}
-		event.Targets = []string{"user.username"} // 动态目标
-		err = dbConn.Save(&event).Error
+		event.Targets = []string{"user.username"}
+		err = repository.SavePushEvent(context.Background(), &event)
 		require.NoError(t, err)
 
 		// Trigger with empty body (simulates cron scheduler triggering)
@@ -369,7 +372,7 @@ func TestPushRouters(t *testing.T) {
 
 		// 2. 为该事件关联渠道后，再切换开启，应当成功
 		event.Channels = []string{"email"}
-		dbConn.Save(&event)
+		_ = repository.SavePushEvent(context.Background(), &event)
 
 		req2, _ := http.NewRequest("POST", "/api/v1/admin/push/events/"+strconv.FormatUint(event.ID, 10)+"/toggle", nil)
 		w2 := httptest.NewRecorder()

internal/apps/admin/user/logics.go

@@ -9,6 +9,8 @@ import (
 	"strings"
 	"time"
 
+	"github.com/Rain-kl/Wavelet/internal/apps/oauth"
+	"github.com/Rain-kl/Wavelet/internal/db"
 	"github.com/Rain-kl/Wavelet/internal/db/idgen"
 	"github.com/Rain-kl/Wavelet/internal/model"
 	"github.com/Rain-kl/Wavelet/internal/repository"
@@ -35,7 +37,22 @@ func updateUserStatus(ctx context.Context, id uint64, active bool) error {
 	if !active && flags.IsAdmin {
 		return errors.New(cannotDisable)
 	}
-	return repository.UpdateUserActive(ctx, id, active)
+
+	var tokens []model.AccessToken
+	if !active {
+		_ = db.DB(ctx).Where("user_id = ?", id).Find(&tokens).Error
+	}
+
+	err = repository.UpdateUserActive(ctx, id, active)
+	if err == nil {
+		oauth.InvalidateCachedUser(ctx, id)
+		if !active {
+			for _, token := range tokens {
+				oauth.InvalidateCachedToken(ctx, token.TokenHash)
+			}
+		}
+	}
+	return err
 }
 
 func deleteUser(ctx context.Context, currentUserID, targetID uint64) error {
@@ -49,7 +66,18 @@ func deleteUser(ctx context.Context, currentUserID, targetID uint64) error {
 	if flags.IsAdmin {
 		return errors.New(cannotDelete)
 	}
-	return repository.DeleteUserWithRelations(ctx, targetID)
+
+	var tokens []model.AccessToken
+	_ = db.DB(ctx).Where("user_id = ?", targetID).Find(&tokens).Error
+
+	err = repository.DeleteUserWithRelations(ctx, targetID)
+	if err == nil {
+		oauth.InvalidateCachedUser(ctx, targetID)
+		for _, token := range tokens {
+			oauth.InvalidateCachedToken(ctx, token.TokenHash)
+		}
+	}
+	return err
 }
 
 func createUser(ctx context.Context, req createUserRequest) (model.User, error) {
@@ -103,4 +131,4 @@ func createUser(ctx context.Context, req createUserRequest) (model.User, error)
 		return model.User{}, err
 	}
 	return newUser, nil
-}
+}

internal/apps/admin/user/routers.go

@@ -12,6 +12,7 @@ import (
 
 	"github.com/Rain-kl/Wavelet/internal/apps/oauth"
 	"github.com/Rain-kl/Wavelet/internal/model"
+	"github.com/Rain-kl/Wavelet/pkg/logger"
 	"github.com/gin-gonic/gin"
 	"gorm.io/gorm"
 
@@ -103,7 +104,8 @@ func abortUserLogicError(c *gin.Context, err error, notFoundMsg string, forbidde
 			return true
 		}
 	}
-	response.AbortInternal(c, msg)
+	logger.ErrorF(c.Request.Context(), "Admin user error: %v", err)
+	response.AbortInternal(c, "内部服务器错误")
 	return true
 }
 
@@ -129,7 +131,8 @@ func ListUsers(c *gin.Context) {
 
 	total, modelUsers, err := listUsers(c.Request.Context(), req)
 	if err != nil {
-		response.AbortInternal(c, err.Error())
+		logger.ErrorF(c.Request.Context(), "List admin users failed: %v", err)
+		response.AbortInternal(c, "获取用户列表失败")
 		return
 	}
 
@@ -285,4 +288,4 @@ func CreateUser(c *gin.Context) {
 	}
 
 	c.JSON(http.StatusOK, response.OK(toUser(newUser)))
-}
+}