datahub/backend/app/Controller/api/v1/UserController.php

<?php

declare(strict_types=1);

namespace App\Controller\Api\V1;

use App\Controller\AbstractController;
use App\Middleware\AuthMiddleware;
use App\Model\User;
use Hyperf\HttpServer\Annotation\Controller;
use Hyperf\HttpServer\Annotation\Middleware;
use Hyperf\HttpServer\Annotation\RequestMapping;

#[Controller(prefix: "/api/v1/users")]
class UserController extends AbstractController
{
    /**
     * 用户列表
     *
     * 支持分页、按 username/email 模糊搜索、按 status 精确筛选
     */
    #[RequestMapping(path: "", methods: "GET")]
    #[Middleware(AuthMiddleware::class)]
    public function index(): array
    {
        $page = max(1, (int) $this->request->input('page', 1));
        $per_page = min(100, max(1, (int) $this->request->input('per_page', 15)));

        $query = User::query();

        // 按 username 模糊搜索
        $username = $this->request->input('username');
        if ($username !== null && $username !== '') {
            $query->where('username', 'like', '%' . $username . '%');
        }

        // 按 email 模糊搜索
        $email = $this->request->input('email');
        if ($email !== null && $email !== '') {
            $query->where('email', 'like', '%' . $email . '%');
        }

        // 按 status 精确筛选
        $status = $this->request->input('status');
        if ($status !== null && $status !== '') {
            $query->where('status', (int) $status);
        }

        // 按 created_at 降序排序
        $query->orderBy('created_at', 'desc');

        $total = $query->count();
        $items = $query->offset(($page - 1) * $per_page)
            ->limit($per_page)
            ->get();

        return [
            'code' => 0,
            'message' => '获取成功',
            'data' => [
                'items' => $items,
                'total' => $total,
                'page' => $page,
                'per_page' => $per_page,
            ],
        ];
    }

    /**
     * 创建用户
     */
    #[RequestMapping(path: "", methods: "POST")]
    #[Middleware(AuthMiddleware::class)]
    public function store(): \Psr\Http\Message\ResponseInterface|array
    {
        $username = $this->request->input('username');
        $password = $this->request->input('password');
        $email = $this->request->input('email');
        $status_input = $this->request->input('status');

        if (!is_string($username) || trim($username) === '') {
            return $this->response->json([
                'code' => 400,
                'message' => '用户名不能为空',
            ])->withStatus(400);
        }

        $username = trim($username);
        $username_length = strlen($username);
        if ($username_length < 3 || $username_length > 20) {
            return $this->response->json([
                'code' => 400,
                'message' => '用户名长度需在 3-20 个字符',
            ])->withStatus(400);
        }

        if (!is_string($password) || $password === '') {
            return $this->response->json([
                'code' => 400,
                'message' => '密码不能为空',
            ])->withStatus(400);
        }

        $password_length = strlen($password);
        if ($password_length < 6 || $password_length > 32) {
            return $this->response->json([
                'code' => 400,
                'message' => '密码长度需在 6-32 个字符',
            ])->withStatus(400);
        }

        if (!is_string($email) || trim($email) === '') {
            return $this->response->json([
                'code' => 400,
                'message' => '邮箱不能为空',
            ])->withStatus(400);
        }

        $email = trim($email);
        if (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
            return $this->response->json([
                'code' => 400,
                'message' => '邮箱格式不正确',
            ])->withStatus(400);
        }

        if (strlen($email) > 100) {
            return $this->response->json([
                'code' => 400,
                'message' => '邮箱长度不能超过 100 个字符',
            ])->withStatus(400);
        }

        if ($status_input === null || $status_input === '') {
            $status = 1;
        } elseif (!is_numeric($status_input) || !in_array((int) $status_input, [0, 1], true)) {
            return $this->response->json([
                'code' => 400,
                'message' => 'status 参数必须为 0 或 1',
            ])->withStatus(400);
        } else {
            $status = (int) $status_input;
        }

        if (User::query()->where('username', $username)->exists()) {
            return $this->response->json([
                'code' => 400,
                'message' => '用户名已存在',
            ])->withStatus(400);
        }

        if (User::query()->where('email', $email)->exists()) {
            return $this->response->json([
                'code' => 400,
                'message' => '邮箱已被注册',
            ])->withStatus(400);
        }

        $user = User::query()->create([
            'username' => $username,
            'password' => $password,
            'email' => $email,
            'status' => $status,
        ]);

        return [
            'code' => 0,
            'message' => '创建成功',
            'data' => $user,
        ];
    }

    /**
     * 用户详情
     *
     * @param int $id 用户 ID
     */
    #[RequestMapping(path: "{id}", methods: "GET")]
    #[Middleware(AuthMiddleware::class)]
    public function show(int $id): \Psr\Http\Message\ResponseInterface|array
    {
        $user = User::query()->find($id);

        if (!$user) {
            return $this->response->json([
                'code' => 404,
                'message' => '用户不存在',
            ])->withStatus(404);
        }

        return [
            'code' => 0,
            'message' => '获取成功',
            'data' => $user,
        ];
    }

    /**
     * 更新用户信息
     *
     * @param int $id 用户 ID
     */
    #[RequestMapping(path: "{id}", methods: "PUT")]
    #[Middleware(AuthMiddleware::class)]
    public function update(int $id): \Psr\Http\Message\ResponseInterface|array
    {
        $user = User::query()->find($id);

        if (!$user) {
            return $this->response->json([
                'code' => 404,
                'message' => '用户不存在',
            ])->withStatus(404);
        }

        if ($this->request->input('password') !== null) {
            return $this->response->json([
                'code' => 400,
                'message' => '更新接口不支持修改密码',
            ])->withStatus(400);
        }

        $username = $this->request->input('username');
        $email = $this->request->input('email');
        $ext = $this->request->input('ext');
        $updates = [];

        if ($username !== null) {
            if (!is_string($username) || trim($username) === '') {
                return $this->response->json([
                    'code' => 400,
                    'message' => '用户名不能为空',
                ])->withStatus(400);
            }

            $username = trim($username);
            $username_length = strlen($username);
            if ($username_length < 3 || $username_length > 20) {
                return $this->response->json([
                    'code' => 400,
                    'message' => '用户名长度需在 3-20 个字符',
                ])->withStatus(400);
            }

            if (User::query()->where('username', $username)->where('id', '!=', $user->id)->exists()) {
                return $this->response->json([
                    'code' => 400,
                    'message' => '用户名已存在',
                ])->withStatus(400);
            }

            $updates['username'] = $username;
        }

        if ($email !== null) {
            if (!is_string($email) || trim($email) === '') {
                return $this->response->json([
                    'code' => 400,
                    'message' => '邮箱不能为空',
                ])->withStatus(400);
            }

            $email = trim($email);
            if (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
                return $this->response->json([
                    'code' => 400,
                    'message' => '邮箱格式不正确',
                ])->withStatus(400);
            }

            if (strlen($email) > 100) {
                return $this->response->json([
                    'code' => 400,
                    'message' => '邮箱长度不能超过 100 个字符',
                ])->withStatus(400);
            }

            if (User::query()->where('email', $email)->where('id', '!=', $user->id)->exists()) {
                return $this->response->json([
                    'code' => 400,
                    'message' => '邮箱已被注册',
                ])->withStatus(400);
            }

            $updates['email'] = $email;
        }

        if ($ext !== null) {
            if (!is_array($ext)) {
                return $this->response->json([
                    'code' => 400,
                    'message' => 'ext 必须为对象',
                ])->withStatus(400);
            }

            $updates['ext'] = $ext;
        }

        if ($updates === []) {
            return $this->response->json([
                'code' => 400,
                'message' => '缺少可更新字段',
            ])->withStatus(400);
        }

        $user->fill($updates);
        $user->save();
        $user->refresh();

        return [
            'code' => 0,
            'message' => '更新成功',
            'data' => $user,
        ];
    }

    /**
     * 更新用户状态
     *
     * @param int $id 用户 ID
     */
    #[RequestMapping(path: "{id}/status", methods: "PATCH")]
    #[Middleware(AuthMiddleware::class)]
    public function updateStatus(int $id): \Psr\Http\Message\ResponseInterface|array
    {
        $user = User::query()->find($id);

        if (!$user) {
            return $this->response->json([
                'code' => 404,
                'message' => '用户不存在',
            ])->withStatus(404);
        }

        $status_input = $this->request->input('status');
        if ($status_input === null || $status_input === '') {
            return $this->response->json([
                'code' => 400,
                'message' => '缺少 status 参数',
            ])->withStatus(400);
        }

        if (!is_numeric($status_input) || !in_array((int) $status_input, [0, 1], true)) {
            return $this->response->json([
                'code' => 400,
                'message' => 'status 参数必须为 0 或 1',
            ])->withStatus(400);
        }

        $user->status = (int) $status_input;
        $user->save();
        $user->refresh();

        return [
            'code' => 0,
            'message' => '状态更新成功',
            'data' => $user,
        ];
    }
}