XuqmGroup-Server/license-service/src/main/java/com/xuqm/license/controller/LicensePublicController.java

package com.xuqm.license.controller;

import com.fasterxml.jackson.annotation.JsonAlias;
import com.fasterxml.jackson.annotation.JsonProperty;
import com.fasterxml.jackson.databind.JsonNode;
import com.xuqm.common.exception.BusinessException;
import com.xuqm.common.model.ApiResponse;
import com.xuqm.common.security.LicenseFileCrypto;
import com.xuqm.license.service.DeviceService;
import jakarta.validation.Valid;
import jakarta.validation.constraints.NotBlank;
import org.springframework.http.ResponseEntity;
import org.springframework.web.bind.annotation.PostMapping;
import org.springframework.web.bind.annotation.RequestBody;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RestController;

import java.util.Map;

@RestController
@RequestMapping("/api/license")
public class LicensePublicController {

    private final DeviceService deviceService;

    public LicensePublicController(DeviceService deviceService) {
        this.deviceService = deviceService;
    }

    @PostMapping("/register")
    public ResponseEntity<ApiResponse<Map<String, Object>>> register(@Valid @RequestBody RegisterRequest req) {
        String resolvedAppKey = resolveAppKey(req.appKey(), req.packageName(), req.licenseFile());
        DeviceService.RegisterResult result = deviceService.register(
                resolvedAppKey,
                req.packageName(),
                req.deviceId(),
                req.deviceName(),
                req.deviceModel(),
                req.deviceVendor(),
                req.osVersion(),
                req.userInfo());
        Map<String, Object> data = new java.util.LinkedHashMap<>();
        data.put("success", result.success());
        data.put("token", result.token());
        if (result.message() != null) {
            data.put("message", result.message());
        }
        return ResponseEntity.ok(ApiResponse.success(data));
    }

    @PostMapping("/verify")
    public ResponseEntity<ApiResponse<Map<String, Object>>> verify(@Valid @RequestBody VerifyRequest req) {
        String resolvedAppKey = resolveAppKey(req.appKey(), req.packageName(), req.licenseFile());
        DeviceService.VerifyResult result = deviceService.verify(resolvedAppKey, req.packageName(), req.deviceId(), req.token(), req.userInfo());
        Map<String, Object> data = new java.util.LinkedHashMap<>();
        data.put("valid", result.valid());
        if (result.error() != null) {
            data.put("error", result.error());
        }
        return ResponseEntity.ok(ApiResponse.success(data));
    }

    private static String resolveAppKey(String appKey, String packageName, String licenseFile) {
        if (licenseFile != null && !licenseFile.isBlank()) {
            LicenseFileCrypto.LicensePayload payload = LicenseFileCrypto.decrypt(licenseFile);
            if (!payload.matchesPackageName(packageName)) {
                throw new BusinessException(403, "包名与应用配置不匹配");
            }
            return payload.appKey();
        }
        if (appKey == null || appKey.isBlank()) {
            throw new BusinessException(400, "appKey 或 licenseFile 必须提供其中一个");
        }
        return appKey;
    }

    public record RegisterRequest(
            String appKey,
            @NotBlank @JsonProperty("packageName") @JsonAlias("package_name") String packageName,
            @JsonProperty("licenseFile") @JsonAlias("license_file") String licenseFile,
            @NotBlank @JsonProperty("deviceId") @JsonAlias("device_id") String deviceId,
            @JsonProperty("deviceName") @JsonAlias("device_name") String deviceName,
            @JsonProperty("deviceModel") @JsonAlias("device_model") String deviceModel,
            @JsonProperty("deviceVendor") @JsonAlias("device_vendor") String deviceVendor,
            @JsonProperty("osVersion") @JsonAlias("os_version") String osVersion,
            @JsonProperty("userInfo") @JsonAlias("user_info") JsonNode userInfo
    ) {}

    public record VerifyRequest(
            String appKey,
            @NotBlank @JsonProperty("packageName") @JsonAlias("package_name") String packageName,
            @JsonProperty("licenseFile") @JsonAlias("license_file") String licenseFile,
            @NotBlank @JsonProperty("deviceId") @JsonAlias("device_id") String deviceId,
            @NotBlank String token,
            @JsonProperty("userInfo") @JsonAlias("user_info") JsonNode userInfo
    ) {}
}