full/module/base/cloud/internal/logic/share/create_share.go

package share

import (
	"context"
	"strings"
	"time"

	"bsm/full/module/base/cloud/internal/impl"
	"bsm/full/module/base/cloud/internal/models"
	pb "bsm/full/module/base/cloud/pb"
	"git.apinb.com/bsm-sdk/core/errcode"
	"git.apinb.com/bsm-sdk/core/printer"
	"git.apinb.com/bsm-sdk/core/service"
	"git.apinb.com/bsm-sdk/core/types"
	"git.apinb.com/bsm-sdk/core/utils"
)

// 创建分享
func CreateShare(ctx context.Context, in *pb.CreateShareRequest) (reply *pb.StatusReply, err error) {
	// parse authorization meta.
	auth, err := service.ParseMetaCtx(ctx, nil)
	if err != nil {
		return nil, err
	}

	// valid code
	if strings.TrimSpace(in.ShareType) == "" {
		return nil, errcode.ErrInvalidArgument
	}
	if in.ResourceId == 0 {
		return nil, errcode.ErrInvalidArgument
	}
	if strings.TrimSpace(in.CloudIdentity) == "" {
		return nil, errcode.ErrInvalidArgument
	}

	// logic code
	// 校验目标资源确实属于当前用户，禁止对他人资源创建分享
	owned, err := checkResourceOwner(auth.ID, in.ShareType, uint(in.ResourceId))
	if err != nil {
		printer.Error("Check share resource owner error: %v", err)
		return nil, errcode.ErrDB
	}
	if !owned {
		return nil, errcode.ErrPermissionDenied
	}

	// 生成分享令牌（如果未提供）
	shareToken := in.ShareToken
	if shareToken == "" {
		shareToken = utils.UUID()
	}

	// 解析过期时间
	var expiresAt time.Time
	if in.ExpiresAt != "" {
		if t, err := time.Parse(time.RFC3339, in.ExpiresAt); err == nil {
			expiresAt = t
		} else {
			expiresAt = time.Now().Add(7 * 24 * time.Hour) // 默认7天过期
		}
	} else {
		expiresAt = time.Now().Add(7 * 24 * time.Hour) // 默认7天过期
	}

	record := models.CloudShare{
		Std_IICUDS: types.Std_IICUDS{
			Identity: utils.UUID(),
		},
		Std_Passport: types.Std_Passport{
			PassportID:       auth.ID,
			PassportIdentity: auth.Identity,
		},
		CloudBase: models.CloudBase{
			CloudID:       uint(in.CloudId),
			CloudIdentity: in.CloudIdentity,
		},
		ShareType:     in.ShareType,
		ResourceID:    uint(in.ResourceId),
		ShareToken:    shareToken,
		Password:      in.Password,
		ExpiresAt:     expiresAt,
		ViewCount:     0,
		DownloadCount: 0,
		IsPublic:      in.IsPublic,
	}

	if err := impl.DBService.Create(&record).Error; err != nil {
		printer.Error("Create share error: %v", err)
		return nil, errcode.ErrDB
	}

	return &pb.StatusReply{
		Details: record.Identity,
		Timeseq: time.Now().UnixMilli(),
	}, nil
}

// checkResourceOwner 校验分享目标资源属于当前用户
func checkResourceOwner(passportID uint, shareType string, resourceID uint) (bool, error) {
	var (
		count int64
		err   error
	)

	switch strings.ToLower(strings.TrimSpace(shareType)) {
	case "file":
		err = impl.DBService.Model(&models.CloudDiskFile{}).
			Joins("JOIN cloud_disk_dirs ON cloud_disk_files.directory_id = cloud_disk_dirs.id").
			Where("cloud_disk_files.id = ? AND cloud_disk_dirs.passport_id = ?", resourceID, passportID).
			Count(&count).Error
	case "photo":
		err = impl.DBService.Model(&models.CloudPhoto{}).
			Joins("JOIN cloud_albums ON cloud_photos.album_id = cloud_albums.id").
			Where("cloud_photos.id = ? AND cloud_albums.passport_id = ?", resourceID, passportID).
			Count(&count).Error
	case "album":
		err = impl.DBService.Model(&models.CloudAlbum{}).
			Where("id = ? AND passport_id = ?", resourceID, passportID).
			Count(&count).Error
	case "note":
		err = impl.DBService.Model(&models.CloudNote{}).
			Where("id = ? AND passport_id = ?", resourceID, passportID).
			Count(&count).Error
	case "bookmark":
		err = impl.DBService.Model(&models.CloudBookmark{}).
			Where("id = ? AND passport_id = ?", resourceID, passportID).
			Count(&count).Error
	case "private":
		err = impl.DBService.Model(&models.CloudPrivate{}).
			Where("id = ? AND passport_id = ?", resourceID, passportID).
			Count(&count).Error
	default:
		// 未知的分享类型无法确认资源归属，直接拒绝
		return false, nil
	}

	if err != nil {
		return false, err
	}

	return count > 0, nil
}