refactor(core): align architecture with cordis spatiotemporal composability

backend/plugins/domain/admin/handlers_auth_source.go

@@ -7,32 +7,24 @@ import (
 	"net/http"
 	"strconv"
 
-	"Wavelet/pkg/response"
-	"Wavelet/plugins/domain/auth"
-	"Wavelet/plugins/infra/database"
 	"github.com/gin-gonic/gin"
+
+	"Wavelet/core/contracts"
+	"Wavelet/pkg/response"
 )
 
 // ListAuthSources lists all configured authentication sources.
 func ListAuthSources(c *gin.Context) {
-	var sources []auth.AuthSource
-	gormDB := database.DB(c.Request.Context())
-	if err := gormDB.Order("id ASC").Find(&sources).Error; err != nil {
-		response.AbortInternal(c, "获取认证源列表失败")
+	authSvc := getAuthService(c.Request.Context())
+	if authSvc == nil {
+		response.AbortInternal(c, "认证服务未就绪")
 		return
 	}
 
-	views := make([]auth.AuthSourceView, len(sources))
-	for i := range sources {
-		views[i] = auth.AuthSourceView{
-			ID:                     sources[i].ID,
-			Name:                   sources[i].Name,
-			Type:                   sources[i].Type,
-			DisplayName:            sources[i].DisplayName,
-			IsActive:               sources[i].IsActive,
-			IconURL:                sources[i].IconURL,
-			ClientSecretConfigured: sources[i].ClientSecret != "",
-		}
+	views, err := authSvc.ListAuthSources(c.Request.Context())
+	if err != nil {
+		response.AbortInternal(c, "获取认证源列表失败")
+		return
 	}
 
 	c.JSON(http.StatusOK, response.OK(views))
@@ -40,25 +32,25 @@ func ListAuthSources(c *gin.Context) {
 
 // CreateAuthSource creates a new authentication source.
 func CreateAuthSource(c *gin.Context) {
-	var source auth.AuthSource
+	var source contracts.AuthSourceDTO
 	if err := c.ShouldBindJSON(&source); err != nil {
 		response.AbortBadRequest(c, "无效的参数")
 		return
 	}
 
-	if err := source.Validate(); err != nil {
-		response.AbortBadRequest(c, err.Error())
+	authSvc := getAuthService(c.Request.Context())
+	if authSvc == nil {
+		response.AbortInternal(c, "认证服务未就绪")
 		return
 	}
 
-	gormDB := database.DB(c.Request.Context())
-	if err := gormDB.Create(&source).Error; err != nil {
+	created, err := authSvc.CreateAuthSource(c.Request.Context(), source)
+	if err != nil {
 		response.AbortBadRequest(c, "创建认证源失败: "+err.Error())
 		return
 	}
 
-	source.Sanitize()
-	c.JSON(http.StatusOK, response.OK(source))
+	c.JSON(http.StatusOK, response.OK(created))
 }
 
 // UpdateAuthSource updates an authentication source.
@@ -70,40 +62,25 @@ func UpdateAuthSource(c *gin.Context) {
 		return
 	}
 
-	gormDB := database.DB(c.Request.Context())
-	var existing auth.AuthSource
-	if err := gormDB.First(&existing, id).Error; err != nil {
-		response.AbortNotFound(c, "认证源不存在")
-		return
-	}
-
-	var req auth.AuthSource
+	var req contracts.AuthSourceDTO
 	if err := c.ShouldBindJSON(&req); err != nil {
 		response.AbortBadRequest(c, "无效的参数")
 		return
 	}
 
-	existing.DisplayName = req.DisplayName
-	existing.ClientID = req.ClientID
-	if req.ClientSecret != "" {
-		existing.ClientSecret = req.ClientSecret
+	authSvc := getAuthService(c.Request.Context())
+	if authSvc == nil {
+		response.AbortInternal(c, "认证服务未就绪")
+		return
 	}
-	existing.OpenIDDiscoveryURL = req.OpenIDDiscoveryURL
-	existing.Scopes = req.Scopes
-	existing.IconURL = req.IconURL
 
-	if err := existing.Validate(); err != nil {
+	updated, err := authSvc.UpdateAuthSource(c.Request.Context(), id, req)
+	if err != nil {
 		response.AbortBadRequest(c, err.Error())
 		return
 	}
 
-	if err := gormDB.Save(&existing).Error; err != nil {
-		response.AbortInternal(c, "更新认证源失败")
-		return
-	}
-
-	existing.Sanitize()
-	c.JSON(http.StatusOK, response.OK(existing))
+	c.JSON(http.StatusOK, response.OK(updated))
 }
 
 // ToggleAuthSource toggles the active state of an auth source.
@@ -115,27 +92,19 @@ func ToggleAuthSource(c *gin.Context) {
 		return
 	}
 
-	gormDB := database.DB(c.Request.Context())
-	var existing auth.AuthSource
-	if err := gormDB.First(&existing, id).Error; err != nil {
-		response.AbortNotFound(c, "认证源不存在")
+	authSvc := getAuthService(c.Request.Context())
+	if authSvc == nil {
+		response.AbortInternal(c, "认证服务未就绪")
 		return
 	}
 
-	existing.IsActive = !existing.IsActive
-	if existing.IsActive {
-		if err := existing.Validate(); err != nil {
-			response.AbortBadRequest(c, err.Error())
-			return
-		}
-	}
-
-	if err := gormDB.Model(&existing).Update("is_active", existing.IsActive).Error; err != nil {
-		response.AbortInternal(c, "切换认证源状态失败")
+	toggled, err := authSvc.ToggleAuthSource(c.Request.Context(), id)
+	if err != nil {
+		response.AbortInternal(c, "切换认证源状态失败: "+err.Error())
 		return
 	}
 
-	c.JSON(http.StatusOK, response.OK(gin.H{"is_active": existing.IsActive}))
+	c.JSON(http.StatusOK, response.OK(gin.H{"is_active": toggled.IsActive}))
 }
 
 // DeleteAuthSource deletes an authentication source.
@@ -147,9 +116,14 @@ func DeleteAuthSource(c *gin.Context) {
 		return
 	}
 
-	gormDB := database.DB(c.Request.Context())
-	if err := gormDB.Delete(&auth.AuthSource{}, id).Error; err != nil {
-		response.AbortInternal(c, "删除认证源失败")
+	authSvc := getAuthService(c.Request.Context())
+	if authSvc == nil {
+		response.AbortInternal(c, "认证服务未就绪")
+		return
+	}
+
+	if err := authSvc.DeleteAuthSource(c.Request.Context(), id); err != nil {
+		response.AbortInternal(c, "删除认证源失败: "+err.Error())
 		return
 	}