@quantabit/rbac-sdk 1.0.0

package/dist/index.cjs

@@ -0,0 +1,686 @@
+'use strict';
+
+var sdkConfig = require('@quantabit/sdk-config');
+var React = require('react');
+
+/**
+ * RBAC SDK - API 客户端
+ * 基于角色的访问控制系统后端接口封装
+ * 
+ * 使用 BaseApiClient 基类简化代码
+ */
+
+
+/**
+ * RBAC API 客户端
+ */
+class RbacApiClient extends sdkConfig.BaseApiClient {
+  constructor(config = {}) {
+    super('/rbac', config);
+  }
+
+  // ============ 权限检查 ============
+
+  /**
+   * 检查权限
+   * @param {string} permission - 权限标识
+   * @param {Object} context - 上下文
+   */
+  async checkPermission(permission, context = {}) {
+    return this.post('/check', {
+      permission,
+      ...context
+    });
+  }
+
+  /**
+   * 批量检查权限
+   * @param {string[]} permissions - 权限标识列表
+   * @param {Object} context - 上下文
+   */
+  async batchCheckPermissions(permissions, context = {}) {
+    return this.post('/check/batch', {
+      permissions,
+      ...context
+    });
+  }
+
+  /**
+   * 获取我的权限
+   */
+  async getMyPermissions() {
+    return this.get('/my/permissions');
+  }
+
+  /**
+   * 获取我的角色
+   */
+  async getMyRoles() {
+    return this.get('/my/roles');
+  }
+
+  // ============ 角色管理 ============
+
+  /**
+   * 获取角色列表
+   * @param {Object} params - 查询参数
+   */
+  async getRoles(params = {}) {
+    return this.get('/roles', params);
+  }
+
+  /**
+   * 获取角色详情
+   * @param {string} roleId - 角色 ID
+   */
+  async getRole(roleId) {
+    return this.get(`/roles/${roleId}`);
+  }
+
+  /**
+   * 创建角色
+   * @param {Object} role - 角色数据
+   */
+  async createRole(role) {
+    return this.post('/roles', role);
+  }
+
+  /**
+   * 更新角色
+   * @param {string} roleId - 角色 ID
+   * @param {Object} updates - 更新数据
+   */
+  async updateRole(roleId, updates) {
+    return this.put(`/roles/${roleId}`, updates);
+  }
+
+  /**
+   * 删除角色
+   * @param {string} roleId - 角色 ID
+   */
+  async deleteRole(roleId) {
+    return this.delete(`/roles/${roleId}`);
+  }
+
+  /**
+   * 获取角色权限
+   * @param {string} roleId - 角色 ID
+   */
+  async getRolePermissions(roleId) {
+    return this.get(`/roles/${roleId}/permissions`);
+  }
+
+  /**
+   * 设置角色权限
+   * @param {string} roleId - 角色 ID
+   * @param {string[]} permissions - 权限列表
+   */
+  async setRolePermissions(roleId, permissions) {
+    return this.put(`/roles/${roleId}/permissions`, {
+      permissions
+    });
+  }
+
+  // ============ 用户角色 ============
+
+  /**
+   * 获取用户角色
+   * @param {string} userId - 用户 ID
+   */
+  async getUserRoles(userId) {
+    return this.get(`/users/${userId}/roles`);
+  }
+
+  /**
+   * 分配用户角色
+   * @param {string} userId - 用户 ID
+   * @param {string[]} roleIds - 角色 ID 列表
+   */
+  async assignRoles(userId, roleIds) {
+    return this.post(`/users/${userId}/roles`, {
+      role_ids: roleIds
+    });
+  }
+
+  /**
+   * 分配单个用户角色（兼容快捷导出命名）
+   * @param {string} userId - 用户 ID
+   * @param {string} roleId - 角色 ID
+   */
+  async assignRole(userId, roleId) {
+    return this.assignRoles(userId, [roleId]);
+  }
+
+  /**
+   * 移除用户角色
+   * @param {string} userId - 用户 ID
+   * @param {string[]} roleIds - 角色 ID 列表
+   */
+  async removeRoles(userId, roleIds) {
+    return this.delete(`/users/${userId}/roles`, {
+      role_ids: roleIds
+    });
+  }
+
+  /**
+   * 获取角色用户
+   * @param {string} roleId - 角色 ID
+   * @param {Object} params - 查询参数
+   */
+  async getRoleUsers(roleId, params = {}) {
+    return this.get(`/roles/${roleId}/users`, params);
+  }
+
+  // ============ 权限管理 ============
+
+  /**
+   * 获取权限列表
+   * @param {Object} params - 查询参数
+   */
+  async getPermissions(params = {}) {
+    return this.get('/permissions', params);
+  }
+
+  /**
+   * 获取权限详情
+   * @param {string} permissionId - 权限 ID
+   */
+  async getPermission(permissionId) {
+    return this.get(`/permissions/${permissionId}`);
+  }
+
+  /**
+   * 创建权限
+   * @param {Object} permission - 权限数据
+   */
+  async createPermission(permission) {
+    return this.post('/permissions', permission);
+  }
+
+  /**
+   * 更新权限
+   * @param {string} permissionId - 权限 ID
+   * @param {Object} updates - 更新数据
+   */
+  async updatePermission(permissionId, updates) {
+    return this.put(`/permissions/${permissionId}`, updates);
+  }
+
+  /**
+   * 删除权限
+   * @param {string} permissionId - 权限 ID
+   */
+  async deletePermission(permissionId) {
+    return this.delete(`/permissions/${permissionId}`);
+  }
+
+  // ============ 资源控制 ============
+
+  /**
+   * 获取资源列表
+   */
+  async getResources() {
+    return this.get('/resources');
+  }
+
+  /**
+   * 获取资源权限
+   * @param {string} resourceType - 资源类型
+   * @param {string} resourceId - 资源 ID
+   */
+  async getResourcePermissions(resourceType, resourceId) {
+    return this.get(`/resources/${resourceType}/${resourceId}/permissions`);
+  }
+
+  /**
+   * 设置资源权限
+   * @param {string} resourceType - 资源类型
+   * @param {string} resourceId - 资源 ID
+   * @param {Object} permissions - 权限配置
+   */
+  async setResourcePermissions(resourceType, resourceId, permissions) {
+    return this.put(`/resources/${resourceType}/${resourceId}/permissions`, permissions);
+  }
+}
+
+// 创建默认实例
+const rbacApi = new RbacApiClient();
+
+/**
+ * RBAC SDK - 类型定义
+ */
+
+
+// 资源类型
+const ResourceType = {
+  API: 'api',
+  PAGE: 'page',
+  MENU: 'menu',
+  BUTTON: 'button',
+  DATA: 'data',
+  FILE: 'file'
+};
+const PermissionEffect = {};
+const ActionType = {};
+
+/**
+ * RBAC SDK - 多语言支持
+ */
+
+const messages = {
+  en: {
+    rbac: 'Access Control',
+    roles: 'Roles',
+    role: 'Role',
+    permissions: 'Permissions',
+    permission: 'Permission',
+    users: 'Users',
+    createRole: 'Create Role',
+    editRole: 'Edit Role',
+    deleteRole: 'Delete Role',
+    roleName: 'Role Name',
+    roleDescription: 'Description',
+    assignRole: 'Assign Role',
+    revokeRole: 'Revoke',
+    resource: 'Resource',
+    action: 'Action',
+    effect: 'Effect',
+    allow: 'Allow',
+    deny: 'Deny',
+    read: 'Read',
+    write: 'Write',
+    delete: 'Delete',
+    admin: 'Admin',
+    create: 'Create',
+    update: 'Update',
+    assignedUsers: 'Assigned Users',
+    permissionCount: 'Permissions',
+    loading: 'Loading...',
+    noData: 'No data',
+    save: 'Save',
+    cancel: 'Cancel'
+  },
+  zh: {
+    rbac: '访问控制',
+    roles: '角色',
+    role: '角色',
+    permissions: '权限',
+    permission: '权限',
+    users: '用户',
+    createRole: '创建角色',
+    editRole: '编辑角色',
+    deleteRole: '删除角色',
+    roleName: '角色名称',
+    roleDescription: '描述',
+    assignRole: '分配角色',
+    revokeRole: '撤销',
+    resource: '资源',
+    action: '操作',
+    effect: '效果',
+    allow: '允许',
+    deny: '拒绝',
+    read: '读取',
+    write: '写入',
+    delete: '删除',
+    admin: '管理',
+    create: '创建',
+    update: '更新',
+    assignedUsers: '已分配用户',
+    permissionCount: '权限数',
+    loading: '加载中...',
+    noData: '暂无数据',
+    save: '保存',
+    cancel: '取消'
+  },
+  ja: {
+    rbac: 'アクセス制御',
+    roles: 'ロール',
+    role: 'ロール',
+    permissions: '権限',
+    permission: '権限',
+    users: 'ユーザー',
+    createRole: 'ロールの作成',
+    editRole: 'ロールの編集',
+    deleteRole: 'ロールの削除',
+    roleName: 'ロール名',
+    roleDescription: '説明',
+    assignRole: 'ロールの割り当て',
+    revokeRole: '取り消し',
+    resource: 'リソース',
+    action: 'アクション',
+    effect: '効果',
+    allow: '許可',
+    deny: '拒否',
+    read: '読み取り',
+    write: '書き込み',
+    delete: '削除',
+    admin: '管理',
+    create: '作成',
+    update: '更新',
+    assignedUsers: '割り当て済みユーザー',
+    permissionCount: '権限数',
+    loading: '読み込み中...',
+    noData: 'データなし',
+    save: '保存',
+    cancel: 'キャンセル'
+  },
+  ko: {
+    rbac: '접근 제어',
+    roles: '역할',
+    role: '역할',
+    permissions: '권한',
+    permission: '권한',
+    users: '사용자',
+    createRole: '역할 생성',
+    editRole: '역할 편집',
+    deleteRole: '역할 삭제',
+    roleName: '역할 이름',
+    roleDescription: '설명',
+    assignRole: '역할 할당',
+    revokeRole: '철회',
+    resource: '리소스',
+    action: '작업',
+    effect: '효과',
+    allow: '허용',
+    deny: '거부',
+    read: '읽기',
+    write: '쓰기',
+    delete: '삭제',
+    admin: '관리',
+    create: '생성',
+    update: '업데이트',
+    assignedUsers: '할당된 사용자',
+    permissionCount: '권한 수',
+    loading: '로딩 중...',
+    noData: '데이터 없음',
+    save: '저장',
+    cancel: '취소'
+  }
+};
+const SUPPORTED_LANGUAGES = ['en', 'zh', 'ja', 'ko'];
+let currentLanguage = 'zh';
+function setLanguage(lang) {
+  if (SUPPORTED_LANGUAGES.includes(lang)) currentLanguage = lang;
+}
+function getLanguage() {
+  return currentLanguage;
+}
+function t(key) {
+  return (messages[currentLanguage] || messages.en)[key] || key;
+}
+
+/**
+ * RBAC SDK - React Hooks
+ */
+
+function useRoles(options = {}) {
+  const [roles, setRoles] = React.useState([]);
+  const [loading, setLoading] = React.useState(true);
+  const [error, setError] = React.useState(null);
+  const fetch = React.useCallback(async () => {
+    setLoading(true);
+    try {
+      const result = await rbacApi.getRoles(options);
+      setRoles(result.items || result);
+      setError(null);
+    } catch (err) {
+      setError(err);
+    } finally {
+      setLoading(false);
+    }
+  }, [JSON.stringify(options)]);
+  React.useEffect(() => {
+    fetch();
+  }, [fetch]);
+  return {
+    roles,
+    loading,
+    error,
+    refresh: fetch
+  };
+}
+function usePermissions(options = {}) {
+  const [permissions, setPermissions] = React.useState([]);
+  const [loading, setLoading] = React.useState(true);
+  const [error, setError] = React.useState(null);
+  const fetch = React.useCallback(async () => {
+    setLoading(true);
+    try {
+      const result = await rbacApi.getPermissions(options);
+      setPermissions(result.items || result);
+      setError(null);
+    } catch (err) {
+      setError(err);
+    } finally {
+      setLoading(false);
+    }
+  }, [JSON.stringify(options)]);
+  React.useEffect(() => {
+    fetch();
+  }, [fetch]);
+  return {
+    permissions,
+    loading,
+    error,
+    refresh: fetch
+  };
+}
+function useUserRoles(userId) {
+  const [roles, setRoles] = React.useState([]);
+  const [loading, setLoading] = React.useState(true);
+  const fetch = React.useCallback(async () => {
+    if (!userId) return;
+    setLoading(true);
+    try {
+      const result = await rbacApi.getUserRoles(userId);
+      setRoles(result.items || result);
+    } catch (err) {
+      console.error(err);
+    } finally {
+      setLoading(false);
+    }
+  }, [userId]);
+  React.useEffect(() => {
+    fetch();
+  }, [fetch]);
+  return {
+    roles,
+    loading,
+    refresh: fetch
+  };
+}
+function useRbacActions() {
+  const [loading, setLoading] = React.useState(false);
+  const assignRole = React.useCallback(async (userId, roleId) => {
+    setLoading(true);
+    try {
+      return await rbacApi.assignRole(userId, roleId);
+    } finally {
+      setLoading(false);
+    }
+  }, []);
+  const revokeRole = React.useCallback(async (userId, roleId) => {
+    setLoading(true);
+    try {
+      await rbacApi.revokeRole(userId, roleId);
+    } finally {
+      setLoading(false);
+    }
+  }, []);
+  const checkPermission = React.useCallback(async (userId, resource, action) => {
+    try {
+      return await rbacApi.checkPermission(userId, resource, action);
+    } catch {
+      return {
+        allowed: false
+      };
+    }
+  }, []);
+  return {
+    assignRole,
+    revokeRole,
+    checkPermission,
+    loading
+  };
+}
+
+/**
+ * RBAC SDK - 权限组件
+ */
+
+const roleIcons = {
+  admin: '👑',
+  moderator: '🛡️',
+  user: '👤',
+  guest: '🚪'
+};
+function PermissionTag({
+  permission,
+  effect = 'allow'
+}) {
+  return /*#__PURE__*/React.createElement("span", {
+    className: `rbac-permission-tag ${effect}`
+  }, effect === 'allow' ? '✓' : '✗', " ", permission);
+}
+function RoleCard({
+  role,
+  onClick,
+  onEdit,
+  onDelete
+}) {
+  const icon = roleIcons[role.name?.toLowerCase()] || '🔐';
+  return /*#__PURE__*/React.createElement("div", {
+    className: "rbac-role-card",
+    onClick: () => onClick?.(role),
+    style: {
+      cursor: onClick ? 'pointer' : 'default'
+    }
+  }, /*#__PURE__*/React.createElement("div", {
+    className: "rbac-role-name"
+  }, icon, " ", role.name), /*#__PURE__*/React.createElement("div", {
+    className: "rbac-role-desc"
+  }, role.description || '-'), /*#__PURE__*/React.createElement("div", {
+    className: "rbac-role-meta"
+  }, /*#__PURE__*/React.createElement("span", null, role.permission_count || role.permissions?.length || 0, " ", t('permissionCount')), /*#__PURE__*/React.createElement("span", null, role.user_count || 0, " ", t('users'))), (onEdit || onDelete) && /*#__PURE__*/React.createElement("div", {
+    style: {
+      display: 'flex',
+      gap: '8px',
+      marginTop: '12px'
+    }
+  }, onEdit && /*#__PURE__*/React.createElement("button", {
+    className: "rbac-btn rbac-btn-outline",
+    style: {
+      padding: '4px 10px',
+      fontSize: '12px'
+    },
+    onClick: e => {
+      e.stopPropagation();
+      onEdit(role);
+    }
+  }, t('editRole')), onDelete && /*#__PURE__*/React.createElement("button", {
+    className: "rbac-btn rbac-btn-outline",
+    style: {
+      padding: '4px 10px',
+      fontSize: '12px',
+      color: '#ef4444'
+    },
+    onClick: e => {
+      e.stopPropagation();
+      onDelete(role.id);
+    }
+  }, t('deleteRole'))));
+}
+function RoleGrid({
+  roles = [],
+  loading = false,
+  onClick,
+  onEdit,
+  onDelete,
+  onCreate,
+  className = ''
+}) {
+  if (loading) return /*#__PURE__*/React.createElement("div", {
+    className: `rbac-card ${className}`
+  }, /*#__PURE__*/React.createElement("div", {
+    className: "rbac-loading"
+  }, /*#__PURE__*/React.createElement("div", {
+    className: "rbac-spinner"
+  })));
+  if (roles.length === 0) return /*#__PURE__*/React.createElement("div", {
+    className: `rbac-card ${className}`
+  }, /*#__PURE__*/React.createElement("div", {
+    className: "rbac-empty"
+  }, /*#__PURE__*/React.createElement("div", {
+    style: {
+      fontSize: '48px',
+      marginBottom: '16px'
+    }
+  }, "\uD83D\uDD10"), /*#__PURE__*/React.createElement("div", null, t('noData')), onCreate && /*#__PURE__*/React.createElement("button", {
+    className: "rbac-btn rbac-btn-primary",
+    onClick: onCreate,
+    style: {
+      marginTop: '16px'
+    }
+  }, t('createRole'))));
+  return /*#__PURE__*/React.createElement("div", {
+    className: `rbac-card ${className}`,
+    style: {
+      padding: 0
+    }
+  }, /*#__PURE__*/React.createElement("div", {
+    className: "rbac-role-grid"
+  }, roles.map(role => /*#__PURE__*/React.createElement(RoleCard, {
+    key: role.id,
+    role: role,
+    onClick: onClick,
+    onEdit: onEdit,
+    onDelete: onDelete
+  }))));
+}
+function PermissionList({
+  permissions = [],
+  className = ''
+}) {
+  if (permissions.length === 0) return null;
+  return /*#__PURE__*/React.createElement("div", {
+    className: `rbac-permission-list ${className}`
+  }, permissions.map((p, i) => /*#__PURE__*/React.createElement(PermissionTag, {
+    key: i,
+    permission: `${p.resource}:${p.action}`,
+    effect: p.effect
+  })));
+}
+
+/**
+ * @quantabit/rbac-sdk
+ * RBAC SDK - Full Version
+ */
+
+const getRoles = (...args) => rbacApi.getRoles(...args);
+const getPermissions = (...args) => rbacApi.getPermissions(...args);
+const assignRole = (userId, roleId) => rbacApi.assignRoles(userId, Array.isArray(roleId) ? roleId : [roleId]);
+const checkPermission = (...args) => rbacApi.checkPermission(...args);
+
+exports.ActionType = ActionType;
+exports.PermissionEffect = PermissionEffect;
+exports.PermissionList = PermissionList;
+exports.PermissionTag = PermissionTag;
+exports.RbacApiClient = RbacApiClient;
+exports.ResourceType = ResourceType;
+exports.RoleCard = RoleCard;
+exports.RoleGrid = RoleGrid;
+exports.SUPPORTED_LANGUAGES = SUPPORTED_LANGUAGES;
+exports.assignRole = assignRole;
+exports.checkPermission = checkPermission;
+exports.getLanguage = getLanguage;
+exports.getPermissions = getPermissions;
+exports.getRoles = getRoles;
+exports.messages = messages;
+exports.rbacApi = rbacApi;
+exports.setLanguage = setLanguage;
+exports.t = t;
+exports.usePermissions = usePermissions;
+exports.useRbacActions = useRbacActions;
+exports.useRoles = useRoles;
+exports.useUserRoles = useUserRoles;
+//# sourceMappingURL=index.cjs.map