第 5 阶段：纠纷、通知与后台-2

backend/internal/modules/adminauth/handler.go

@@ -0,0 +1,70 @@
+package adminauth
+
+import (
+	"errors"
+	"net/http"
+	"strings"
+
+	"hfb_sys/backend/internal/middleware"
+	"hfb_sys/backend/pkg/response"
+
+	"github.com/gin-gonic/gin"
+)
+
+type Handler struct {
+	service *Service
+}
+
+func NewHandler(service *Service) *Handler {
+	return &Handler{service: service}
+}
+
+func (h *Handler) Login(c *gin.Context) {
+	var req LoginRequest
+	if err := c.ShouldBindJSON(&req); err != nil {
+		response.BadRequest(c, "用户名和密码不能为空")
+		return
+	}
+	result, err := h.service.Login(strings.TrimSpace(req.Username), req.Password)
+	if err != nil {
+		writeAdminAuthError(c, err)
+		return
+	}
+	response.OK(c, result)
+}
+
+func (h *Handler) Me(c *gin.Context) {
+	value, ok := c.Get(middleware.ContextAdminID)
+	if !ok {
+		response.Unauthorized(c, "缺少管理员上下文")
+		return
+	}
+	adminID, ok := value.(uint64)
+	if !ok {
+		response.Unauthorized(c, "管理员上下文无效")
+		return
+	}
+	admin, err := h.service.Me(adminID)
+	if err != nil {
+		writeAdminAuthError(c, err)
+		return
+	}
+	response.OK(c, admin)
+}
+
+func (h *Handler) Logout(c *gin.Context) {
+	response.OK(c, gin.H{"logged_out": true})
+}
+
+func writeAdminAuthError(c *gin.Context, err error) {
+	switch {
+	case errors.Is(err, ErrDependencyUnavailable):
+		response.ServiceUnavailable(c, "数据库未连接")
+	case errors.Is(err, ErrInvalidCredential):
+		response.BadRequest(c, "用户名或密码错误")
+	case errors.Is(err, ErrAdminDisabled):
+		response.Error(c, http.StatusForbidden, "admin_disabled", "管理员已禁用")
+	default:
+		response.Error(c, http.StatusInternalServerError, "internal_error", "后台认证服务暂时不可用")
+	}
+}