package jnpf.base.controller;

import cn.dev33.satoken.same.SaSameUtil;
import jnpf.base.ActionResult;
import jnpf.base.service.WorkflowFileAccessService;
import jnpf.file.WorkflowFileAccessApi;
import jnpf.model.fileaccess.WorkflowFileGrant;
import jnpf.model.fileaccess.WorkflowFileRequest;
import lombok.RequiredArgsConstructor;
import org.springframework.web.bind.annotation.*;

@RestController
@RequestMapping("/Internal/visualdev/file-access")
@RequiredArgsConstructor
public class WorkflowFileAccessController implements WorkflowFileAccessApi {
    private final WorkflowFileAccessService service;

    @Override @PostMapping("/authorize")
    public ActionResult<WorkflowFileGrant> authorize(@RequestBody WorkflowFileRequest request) {
        SaSameUtil.checkCurrentRequestToken();
        // 复用本次用户请求的身份；service 校验属主/租户一致，不切换为客户端指定人员。
        return ActionResult.success(service.authorize(request));
    }
}