feat: publish password reset via kafka

server/internal/logic/sys/im_user.go

@@ -8,6 +8,7 @@ package sys
 import (
 	"context"
 	"crypto/sha256"
+	"encoding/base64"
 	"encoding/hex"
 	"encoding/json"
 	"fmt"
@@ -15,6 +16,7 @@ import (
 	"hotgo/internal/library/contexts"
 	"hotgo/internal/library/imkafka"
 	"hotgo/internal/library/imtenant"
+	"hotgo/internal/model/entity"
 	"hotgo/internal/model/input/sysin"
 	"hotgo/internal/service"
 	"net/url"
@@ -209,29 +211,25 @@ func (s *sSysImUser) viewFields() []interface{} {
 	}
 }
 
-func (s *sSysImUser) ResetPassword(ctx context.Context, in *sysin.ImUserPasswordResetInp) (err error) {
+func (s *sSysImUser) ResetPassword(ctx context.Context, in *sysin.ImUserPasswordResetInp) (res *sysin.ImUserCommandModel, err error) {
 	if err = in.Filter(ctx); err != nil {
-		return
+		return nil, err
 	}
-	scope, err := resolveImAdminScope(ctx, in.TenantId)
+	tenant, err := resolveImAdminTenant(ctx, in.TenantId)
 	if err != nil {
-		return err
+		return nil, err
 	}
 	userId, err := sysin.ParseOptionalInt64(in.UserId)
 	if err != nil {
-		return err
+		return nil, err
 	}
-	db, _, err := imtenant.DB(ctx, scope.TenantId)
-	if err != nil {
-		return err
-	}
-	err = resetIMUserPassword(ctx, db, scope, userId, in.NewPassword)
+	command, err := s.publishPasswordResetCommand(ctx, tenant, userId, in.NewPassword)
 	result := "success"
 	if err != nil {
 		result = "failed"
 	}
-	_ = writeImAdminAudit(ctx, scope.TenantId, "user_password_reset", "user", userId, result, nil)
-	return err
+	_ = writeImAdminAudit(ctx, tenant.Id, "user_password_reset", "user", userId, result, nil)
+	return command, err
 }
 
 func (s *sSysImUser) RevokeSessions(ctx context.Context, in *sysin.ImUserRevokeSessionsInp) (err error) {
@@ -391,6 +389,50 @@ func (s *sSysImUser) publishGovernanceCommand(ctx context.Context, in *sysin.ImU
 	}, nil
 }
 
+func (s *sSysImUser) publishPasswordResetCommand(ctx context.Context, tenant *entity.ImTenant, userId int64, newPassword string) (*sysin.ImUserCommandModel, error) {
+	passwordHash, err := bcrypt.GenerateFromPassword([]byte(newPassword), bcrypt.DefaultCost)
+	if err != nil {
+		return nil, gerror.Wrap(err, "生成密码摘要失败")
+	}
+	user := contexts.GetUser(ctx)
+	actorName := ""
+	if user != nil {
+		actorName = user.RealName
+	}
+	payload := map[string]any{
+		"operator_id":    strconv.FormatInt(contexts.GetUserId(ctx), 10),
+		"user_id":        strconv.FormatInt(userId, 10),
+		"target_user_id": strconv.FormatInt(userId, 10),
+		"password_hash":  base64.StdEncoding.EncodeToString(passwordHash),
+	}
+	command, err := imkafka.PublishAdminCommand(ctx, imkafka.AdminCommandInput{
+		TenantID:   tenant.Id,
+		TenantCode: tenant.Code,
+		EventType:  consts.ImAdminCommandUserPasswordReset,
+		BizType:    "user",
+		BizID:      strconv.FormatInt(userId, 10),
+		Actor: &imkafka.Actor{
+			Type:        "admin",
+			ID:          strconv.FormatInt(contexts.GetUserId(ctx), 10),
+			DisplayName: actorName,
+		},
+		Payload:   payload,
+		CreatedBy: contexts.GetUserId(ctx),
+	})
+	if err != nil {
+		return nil, err
+	}
+	return &sysin.ImUserCommandModel{
+		CommandID:      command.CommandID,
+		EventID:        command.EventID,
+		Status:         command.Status,
+		TenantID:       command.TenantID,
+		TenantCode:     command.TenantCode,
+		EventType:      command.EventType,
+		IdempotencyKey: command.IdempotencyKey,
+	}, nil
+}
+
 func updateIMUserStatus(ctx context.Context, db gdb.DB, scope imAdminScope, userId int64, state int) error {
 	securityId, err := imtenant.NextSnowflakeID(ctx)
 	if err != nil {