zhangshun/mydreamjob-server/src/main/java/com/mydreamjob/notification/NotificationController.java

package com.mydreamjob.notification;

import com.mydreamjob.common.api.ApiResponse;
import io.swagger.v3.oas.annotations.Operation;
import io.swagger.v3.oas.annotations.tags.Tag;
import jakarta.servlet.http.HttpServletRequest;
import jakarta.validation.Valid;
import lombok.RequiredArgsConstructor;
import org.springframework.data.domain.Page;
import org.springframework.http.ResponseEntity;
import org.springframework.web.bind.annotation.*;

import java.util.HashMap;
import java.util.Map;
import java.util.stream.Collectors;

@Tag(name = "通知", description = "站内通知查询、已读管理")
@RestController
@RequestMapping("/notifications")
@RequiredArgsConstructor
public class NotificationController {

    /** R01-A3：身份只来自安全上下文，不接受请求参数传入的 userId。 */
    private final com.mydreamjob.security.CurrentUserAccessor currentUserAccessor;
    /** R01-A3：requestId 只来自过滤器规范化后的唯一产出点。 */
    private final com.mydreamjob.common.logging.RequestIdAccessor requestIdAccessor;

    private final NotificationService notificationService;

    @Operation(summary = "通知列表", description = "当前用户的通知，分页，按时间倒序")
    @io.swagger.v3.oas.annotations.responses.ApiResponse(responseCode = "200", description = "当前用户通知；关联字段允许 null，不授予关联业务访问权限",
            content = @io.swagger.v3.oas.annotations.media.Content(schema = @io.swagger.v3.oas.annotations.media.Schema(implementation = NotificationListResponseDoc.class)))
    @GetMapping
    public ResponseEntity<ApiResponse<Map<String, Object>>> list(
            @RequestParam(defaultValue = "0") int page,
            @RequestParam(defaultValue = "20") int size,
            HttpServletRequest request) {
        Long userId = currentUserAccessor.requireUserId();
        Page<Notification> result = notificationService.list(userId, page, size);
        return pageResponse(result, false, request);
    }

    private ResponseEntity<ApiResponse<Map<String, Object>>> pageResponse(Page<Notification> result, boolean trash,
                                                                         HttpServletRequest request) {
        Map<String, Object> data = new HashMap<>();
        data.put("items", result.getContent().stream()
                .map(n -> trash ? notificationService.toTrashView(n) : notificationService.toView(n)).collect(Collectors.toList()));
        data.put("total", result.getTotalElements());
        data.put("page", result.getNumber());
        data.put("size", result.getSize());
        data.put("totalPages", result.getTotalPages());
        return ResponseEntity.ok(ApiResponse.ok(data, requestIdAccessor.get(request)));
    }

    @Operation(operationId = "listNotificationTrash", summary = "通知回收站",
            description = "仅当前用户软删除通知，按deletedAt/id倒序分页；不计入未读数；无永久删除或自动清空。")
    @io.swagger.v3.oas.annotations.security.SecurityRequirement(name = "bearerAuth")
    @io.swagger.v3.oas.annotations.responses.ApiResponse(responseCode = "200", description = "回收站分页",
            content = @io.swagger.v3.oas.annotations.media.Content(schema = @io.swagger.v3.oas.annotations.media.Schema(implementation = NotificationTrashResponseDoc.class)))
    @GetMapping("/trash")
    public ResponseEntity<ApiResponse<Map<String, Object>>> trash(
            @RequestParam(defaultValue = "0") int page, @RequestParam(defaultValue = "20") int size,
            HttpServletRequest request) {
        return pageResponse(notificationService.trash(currentUserAccessor.requireUserId(), page, size), true, request);
    }

    @Operation(operationId = "deleteNotification", summary = "通知移入回收站",
            description = "仅本人通知软删除，幂等；不删除面试/投递/Offer，不改变已读状态；不存在400/9105、他人通知403/2002。")
    @io.swagger.v3.oas.annotations.security.SecurityRequirement(name = "bearerAuth")
    @DeleteMapping("/{id}")
    public ResponseEntity<ApiResponse<NotificationChangeResult>> delete(@PathVariable Long id, HttpServletRequest request) {
        return ResponseEntity.ok(ApiResponse.ok(new NotificationChangeResult(
                notificationService.delete(currentUserAccessor.requireUserId(), id)), requestIdAccessor.get(request)));
    }

    @Operation(operationId = "restoreNotification", summary = "恢复通知",
            description = "仅本人通知，幂等；保留删除前read/readAt，原未读恢复后重新计数；不存在400/9105、他人通知403/2002。")
    @io.swagger.v3.oas.annotations.security.SecurityRequirement(name = "bearerAuth")
    @PostMapping("/{id}/restore")
    public ResponseEntity<ApiResponse<NotificationChangeResult>> restore(@PathVariable Long id, HttpServletRequest request) {
        return ResponseEntity.ok(ApiResponse.ok(new NotificationChangeResult(
                notificationService.restore(currentUserAccessor.requireUserId(), id)), requestIdAccessor.get(request)));
    }

    @Operation(operationId = "batchDeleteNotifications", summary = "批量通知移入回收站",
            description = "最多100个正整数ID，重复项去重；整批原子操作，任意不存在400/9105或越权403/2002均无部分成功；仅当前用户软删除，无永久删除。")
    @io.swagger.v3.oas.annotations.security.SecurityRequirement(name = "bearerAuth")
    @PostMapping("/batch-delete")
    public ResponseEntity<ApiResponse<NotificationBatchResult>> batchDelete(@Valid @RequestBody NotificationBatchRequest body,
                                                                           HttpServletRequest request) {
        return ResponseEntity.ok(ApiResponse.ok(notificationService.batchDelete(currentUserAccessor.requireUserId(), body.ids()),
                requestIdAccessor.get(request)));
    }

    @Operation(operationId = "batchRestoreNotifications", summary = "批量恢复通知",
            description = "最多100个正整数ID，重复项去重；整批原子操作，任意不存在400/9105或越权403/2002均无部分成功；保留原已读状态。")
    @io.swagger.v3.oas.annotations.security.SecurityRequirement(name = "bearerAuth")
    @PostMapping("/batch-restore")
    public ResponseEntity<ApiResponse<NotificationBatchResult>> batchRestore(@Valid @RequestBody NotificationBatchRequest body,
                                                                            HttpServletRequest request) {
        return ResponseEntity.ok(ApiResponse.ok(notificationService.batchRestore(currentUserAccessor.requireUserId(), body.ids()),
                requestIdAccessor.get(request)));
    }

    @Operation(summary = "标记已读", description = "标记单条通知已读（幂等）")
    @PostMapping("/{id}/read")
    public ResponseEntity<ApiResponse<Map<String, Object>>> markRead(
            @PathVariable Long id,
            HttpServletRequest request) {
        Long userId = currentUserAccessor.requireUserId();
        notificationService.markRead(userId, id);
        return ResponseEntity.ok(ApiResponse.ok(Map.of("message", "marked as read"), requestIdAccessor.get(request)));
    }

    @Operation(summary = "全部已读", description = "标记当前用户全部通知已读（幂等）")
    @PostMapping("/read-all")
    public ResponseEntity<ApiResponse<Map<String, Object>>> markAllRead(HttpServletRequest request) {
        Long userId = currentUserAccessor.requireUserId();
        int marked = notificationService.markAllRead(userId);
        return ResponseEntity.ok(ApiResponse.ok(Map.of("marked", marked), requestIdAccessor.get(request)));
    }

    @Operation(summary = "未读数", description = "当前用户未读通知数")
    @GetMapping("/unread-count")
    public ResponseEntity<ApiResponse<Map<String, Object>>> unreadCount(HttpServletRequest request) {
        Long userId = currentUserAccessor.requireUserId();
        long count = notificationService.unreadCount(userId);
        return ResponseEntity.ok(ApiResponse.ok(Map.of("unreadCount", count), requestIdAccessor.get(request)));
    }

}