package com.mydreamjob.notification; import com.mydreamjob.common.api.ApiResponse; import io.swagger.v3.oas.annotations.Operation; import io.swagger.v3.oas.annotations.tags.Tag; import jakarta.servlet.http.HttpServletRequest; import jakarta.validation.Valid; import lombok.RequiredArgsConstructor; import org.springframework.data.domain.Page; import org.springframework.http.ResponseEntity; import org.springframework.web.bind.annotation.*; import java.util.HashMap; import java.util.Map; import java.util.stream.Collectors; @Tag(name = "通知", description = "站内通知查询、已读管理") @RestController @RequestMapping("/notifications") @RequiredArgsConstructor public class NotificationController { /** R01-A3:身份只来自安全上下文,不接受请求参数传入的 userId。 */ private final com.mydreamjob.security.CurrentUserAccessor currentUserAccessor; /** R01-A3:requestId 只来自过滤器规范化后的唯一产出点。 */ private final com.mydreamjob.common.logging.RequestIdAccessor requestIdAccessor; private final NotificationService notificationService; @Operation(summary = "通知列表", description = "当前用户的通知,分页,按时间倒序") @io.swagger.v3.oas.annotations.responses.ApiResponse(responseCode = "200", description = "当前用户通知;关联字段允许 null,不授予关联业务访问权限", content = @io.swagger.v3.oas.annotations.media.Content(schema = @io.swagger.v3.oas.annotations.media.Schema(implementation = NotificationListResponseDoc.class))) @GetMapping public ResponseEntity>> list( @RequestParam(defaultValue = "0") int page, @RequestParam(defaultValue = "20") int size, HttpServletRequest request) { Long userId = currentUserAccessor.requireUserId(); Page result = notificationService.list(userId, page, size); return pageResponse(result, false, request); } private ResponseEntity>> pageResponse(Page result, boolean trash, HttpServletRequest request) { Map data = new HashMap<>(); data.put("items", result.getContent().stream() .map(n -> trash ? notificationService.toTrashView(n) : notificationService.toView(n)).collect(Collectors.toList())); data.put("total", result.getTotalElements()); data.put("page", result.getNumber()); data.put("size", result.getSize()); data.put("totalPages", result.getTotalPages()); return ResponseEntity.ok(ApiResponse.ok(data, requestIdAccessor.get(request))); } @Operation(operationId = "listNotificationTrash", summary = "通知回收站", description = "仅当前用户软删除通知,按deletedAt/id倒序分页;不计入未读数;无永久删除或自动清空。") @io.swagger.v3.oas.annotations.security.SecurityRequirement(name = "bearerAuth") @io.swagger.v3.oas.annotations.responses.ApiResponse(responseCode = "200", description = "回收站分页", content = @io.swagger.v3.oas.annotations.media.Content(schema = @io.swagger.v3.oas.annotations.media.Schema(implementation = NotificationTrashResponseDoc.class))) @GetMapping("/trash") public ResponseEntity>> trash( @RequestParam(defaultValue = "0") int page, @RequestParam(defaultValue = "20") int size, HttpServletRequest request) { return pageResponse(notificationService.trash(currentUserAccessor.requireUserId(), page, size), true, request); } @Operation(operationId = "deleteNotification", summary = "通知移入回收站", description = "仅本人通知软删除,幂等;不删除面试/投递/Offer,不改变已读状态;不存在400/9105、他人通知403/2002。") @io.swagger.v3.oas.annotations.security.SecurityRequirement(name = "bearerAuth") @DeleteMapping("/{id}") public ResponseEntity> delete(@PathVariable Long id, HttpServletRequest request) { return ResponseEntity.ok(ApiResponse.ok(new NotificationChangeResult( notificationService.delete(currentUserAccessor.requireUserId(), id)), requestIdAccessor.get(request))); } @Operation(operationId = "restoreNotification", summary = "恢复通知", description = "仅本人通知,幂等;保留删除前read/readAt,原未读恢复后重新计数;不存在400/9105、他人通知403/2002。") @io.swagger.v3.oas.annotations.security.SecurityRequirement(name = "bearerAuth") @PostMapping("/{id}/restore") public ResponseEntity> restore(@PathVariable Long id, HttpServletRequest request) { return ResponseEntity.ok(ApiResponse.ok(new NotificationChangeResult( notificationService.restore(currentUserAccessor.requireUserId(), id)), requestIdAccessor.get(request))); } @Operation(operationId = "batchDeleteNotifications", summary = "批量通知移入回收站", description = "最多100个正整数ID,重复项去重;整批原子操作,任意不存在400/9105或越权403/2002均无部分成功;仅当前用户软删除,无永久删除。") @io.swagger.v3.oas.annotations.security.SecurityRequirement(name = "bearerAuth") @PostMapping("/batch-delete") public ResponseEntity> batchDelete(@Valid @RequestBody NotificationBatchRequest body, HttpServletRequest request) { return ResponseEntity.ok(ApiResponse.ok(notificationService.batchDelete(currentUserAccessor.requireUserId(), body.ids()), requestIdAccessor.get(request))); } @Operation(operationId = "batchRestoreNotifications", summary = "批量恢复通知", description = "最多100个正整数ID,重复项去重;整批原子操作,任意不存在400/9105或越权403/2002均无部分成功;保留原已读状态。") @io.swagger.v3.oas.annotations.security.SecurityRequirement(name = "bearerAuth") @PostMapping("/batch-restore") public ResponseEntity> batchRestore(@Valid @RequestBody NotificationBatchRequest body, HttpServletRequest request) { return ResponseEntity.ok(ApiResponse.ok(notificationService.batchRestore(currentUserAccessor.requireUserId(), body.ids()), requestIdAccessor.get(request))); } @Operation(summary = "标记已读", description = "标记单条通知已读(幂等)") @PostMapping("/{id}/read") public ResponseEntity>> markRead( @PathVariable Long id, HttpServletRequest request) { Long userId = currentUserAccessor.requireUserId(); notificationService.markRead(userId, id); return ResponseEntity.ok(ApiResponse.ok(Map.of("message", "marked as read"), requestIdAccessor.get(request))); } @Operation(summary = "全部已读", description = "标记当前用户全部通知已读(幂等)") @PostMapping("/read-all") public ResponseEntity>> markAllRead(HttpServletRequest request) { Long userId = currentUserAccessor.requireUserId(); int marked = notificationService.markAllRead(userId); return ResponseEntity.ok(ApiResponse.ok(Map.of("marked", marked), requestIdAccessor.get(request))); } @Operation(summary = "未读数", description = "当前用户未读通知数") @GetMapping("/unread-count") public ResponseEntity>> unreadCount(HttpServletRequest request) { Long userId = currentUserAccessor.requireUserId(); long count = notificationService.unreadCount(userId); return ResponseEntity.ok(ApiResponse.ok(Map.of("unreadCount", count), requestIdAccessor.get(request))); } }