eb931bf1c6
Add Session model, SessionService, and SessionRepository to track user login sessions and enable token revocation on auth-critical events. - Introduce explicit TokenType (access/refresh) in JWT claims to prevent refresh token misuse via access token endpoints - Add SessionID field to JWT claims, enabling stateless JWT validation against revoked sessions - Replace legacy Auth middleware with RequireAuth/OptionalAuth pipeline that validates token type, account status, and session validity - Implement session revocation on password change, reset, user ban/inactive, and explicit logout - Add Principal cache with active invalidation for banned/role-changed users - Fix IDOR vulnerability: GetMessagesByCursor now validates currentUserID is conversation participant via GetParticipantStrict - Add group member visibility checks: announcements, group info, member list now require group membership - Simplify Casbin policy: remove g grouping, use r.sub == p.sub matcher with globMatch; user_roles table is single source of truth for roles - Add migration logic to clean legacy casbin g rules and migrate old p rules from path-style to admin/<domain> resource naming
367 lines
13 KiB
Go
367 lines
13 KiB
Go
package service
|
||
|
||
import (
|
||
"context"
|
||
"errors"
|
||
"time"
|
||
|
||
"with_you/internal/cache"
|
||
apperrors "with_you/internal/errors"
|
||
"with_you/internal/model"
|
||
"with_you/internal/pkg/cursor"
|
||
"with_you/internal/repository"
|
||
|
||
"go.uber.org/zap"
|
||
"gorm.io/gorm"
|
||
)
|
||
|
||
// 缓存TTL常量
|
||
const (
|
||
ConversationListTTL = 60 * time.Second // 会话列表缓存60秒
|
||
ConversationDetailTTL = 60 * time.Second // 会话详情缓存60秒
|
||
UnreadCountTTL = 30 * time.Second // 未读数缓存30秒
|
||
ConversationNullTTL = 5 * time.Second
|
||
UnreadNullTTL = 5 * time.Second
|
||
CacheJitterRatio = 0.1
|
||
)
|
||
|
||
// MessageService 消息服务接口
|
||
type MessageService interface {
|
||
SendMessage(ctx context.Context, senderID, receiverID string, segments model.MessageSegments) (*model.Message, error)
|
||
GetConversations(ctx context.Context, userID string, page, pageSize int) ([]*model.Conversation, int64, error)
|
||
GetMessages(ctx context.Context, conversationID string, page, pageSize int) ([]*model.Message, int64, error)
|
||
GetMessagesAfterSeq(ctx context.Context, conversationID string, afterSeq int64, limit int) ([]*model.Message, error)
|
||
MarkAsRead(ctx context.Context, conversationID string, userID string, lastReadSeq int64) error
|
||
GetUnreadCount(ctx context.Context, conversationID string, userID string) (int64, error)
|
||
GetOrCreateConversation(ctx context.Context, user1ID, user2ID string) (*model.Conversation, error)
|
||
GetConversationParticipants(conversationID string) ([]*model.ConversationParticipant, error)
|
||
GetParticipantsBatch(ctx context.Context, convIDs []string) (map[string][]*model.ConversationParticipant, error)
|
||
GetMyParticipantsBatch(ctx context.Context, convIDs []string, userID string) (map[string]*model.ConversationParticipant, error)
|
||
InvalidateUserConversationCache(userID string)
|
||
InvalidateUserUnreadCache(userID, conversationID string)
|
||
// GetMessagesByCursor 游标分页获取会话消息。
|
||
// currentUserID 用于参与者校验：非会话参与者拒绝（防止 IDOR）。
|
||
GetMessagesByCursor(ctx context.Context, conversationID, currentUserID string, req *cursor.PageRequest) (*cursor.CursorPageResult[*model.Message], error)
|
||
GetConversationsByCursor(ctx context.Context, userID string, req *cursor.PageRequest) (*cursor.CursorPageResult[*model.Conversation], error)
|
||
}
|
||
|
||
// messageService 消息服务实现
|
||
type messageService struct {
|
||
// 基础仓储
|
||
messageRepo repository.MessageRepository
|
||
|
||
// 缓存相关字段
|
||
conversationCache *cache.ConversationCache
|
||
|
||
// 基础缓存（用于简单缓存操作）
|
||
baseCache cache.Cache
|
||
|
||
uploadService UploadService
|
||
}
|
||
|
||
// NewMessageService 创建消息服务
|
||
func NewMessageService(messageRepo repository.MessageRepository, cacheBackend cache.Cache, uploadService UploadService) MessageService {
|
||
// 创建适配器
|
||
convRepoAdapter := cache.NewConversationRepositoryAdapter(messageRepo)
|
||
msgRepoAdapter := cache.NewMessageRepositoryAdapter(messageRepo)
|
||
|
||
// 创建会话缓存
|
||
conversationCache := cache.NewConversationCache(
|
||
cacheBackend,
|
||
convRepoAdapter,
|
||
msgRepoAdapter,
|
||
cache.DefaultConversationCacheSettings(),
|
||
nil,
|
||
)
|
||
|
||
return &messageService{
|
||
messageRepo: messageRepo,
|
||
conversationCache: conversationCache,
|
||
baseCache: cacheBackend,
|
||
uploadService: uploadService,
|
||
}
|
||
}
|
||
|
||
// ConversationListResult 会话列表缓存结果
|
||
type ConversationListResult struct {
|
||
Conversations []*model.Conversation
|
||
Total int64
|
||
}
|
||
|
||
// SendMessage 发送消息（使用 segments）
|
||
// senderID 和 receiverID 参数为 string 类型（UUID格式），与JWT中user_id保持一致
|
||
func (s *messageService) SendMessage(ctx context.Context, senderID, receiverID string, segments model.MessageSegments) (*model.Message, error) {
|
||
// 获取或创建会话
|
||
conv, err := s.messageRepo.GetOrCreatePrivateConversation(senderID, receiverID)
|
||
if err != nil {
|
||
return nil, err
|
||
}
|
||
|
||
if s.uploadService != nil {
|
||
if err := s.uploadService.ValidateChatMessageImageSegments(segments); err != nil {
|
||
return nil, err
|
||
}
|
||
}
|
||
|
||
msg := &model.Message{
|
||
ConversationID: conv.ID,
|
||
SenderID: senderID,
|
||
Segments: segments,
|
||
Status: model.MessageStatusNormal,
|
||
}
|
||
|
||
// 事务内原子分配 seq + 创建消息（DB 是 seq 唯一来源）
|
||
err = s.messageRepo.CreateMessageWithSeq(msg)
|
||
if err != nil {
|
||
return nil, err
|
||
}
|
||
|
||
// 写透 seq 到 Redis，保持缓存与 DB 一致
|
||
if s.conversationCache != nil {
|
||
s.conversationCache.SyncConvSeq(context.Background(), conv.ID, msg.Seq)
|
||
}
|
||
|
||
// 新消息会改变分页结果，先失效分页缓存，避免读到旧列表
|
||
if s.conversationCache != nil {
|
||
s.conversationCache.InvalidateMessagePages(conv.ID)
|
||
}
|
||
|
||
// 异步写入缓存
|
||
go func() {
|
||
if err := s.cacheMessage(context.Background(), conv.ID, msg); err != nil {
|
||
zap.L().Warn("async cache message failed",
|
||
zap.String("component", "MessageService"),
|
||
zap.String("convID", conv.ID),
|
||
zap.String("msgID", msg.ID),
|
||
zap.Error(err),
|
||
)
|
||
}
|
||
}()
|
||
|
||
// 失效会话列表缓存（发送者和接收者）
|
||
s.conversationCache.InvalidateConversationList(senderID)
|
||
s.conversationCache.InvalidateConversationList(receiverID)
|
||
|
||
// 失效未读数缓存
|
||
cache.InvalidateUnreadConversation(s.baseCache, receiverID)
|
||
s.conversationCache.InvalidateUnreadCount(receiverID, conv.ID)
|
||
|
||
return msg, nil
|
||
}
|
||
|
||
// cacheMessage 缓存消息（内部方法）
|
||
func (s *messageService) cacheMessage(ctx context.Context, convID string, msg *model.Message) error {
|
||
if s.conversationCache == nil {
|
||
return nil
|
||
}
|
||
|
||
asyncCtx, cancel := context.WithTimeout(ctx, 5*time.Second)
|
||
defer cancel()
|
||
|
||
return s.conversationCache.CacheMessage(asyncCtx, convID, msg)
|
||
}
|
||
|
||
// GetConversations 获取会话列表（带缓存）
|
||
// userID 参数为 string 类型（UUID格式），与JWT中user_id保持一致
|
||
func (s *messageService) GetConversations(ctx context.Context, userID string, page, pageSize int) ([]*model.Conversation, int64, error) {
|
||
// 优先使用 ConversationCache
|
||
if s.conversationCache != nil {
|
||
return s.conversationCache.GetConversationList(ctx, userID, page, pageSize)
|
||
}
|
||
|
||
// 降级到基础缓存
|
||
cacheSettings := cache.GetSettings()
|
||
conversationTTL := cacheSettings.ConversationTTL
|
||
if conversationTTL <= 0 {
|
||
conversationTTL = ConversationListTTL
|
||
}
|
||
nullTTL := cacheSettings.NullTTL
|
||
if nullTTL <= 0 {
|
||
nullTTL = ConversationNullTTL
|
||
}
|
||
jitter := cacheSettings.JitterRatio
|
||
if jitter <= 0 {
|
||
jitter = CacheJitterRatio
|
||
}
|
||
|
||
// 生成缓存键
|
||
cacheKey := cache.ConversationListKey(userID, page, pageSize)
|
||
result, err := cache.GetOrLoadTyped(
|
||
s.baseCache,
|
||
cacheKey,
|
||
conversationTTL,
|
||
jitter,
|
||
nullTTL,
|
||
func() (*ConversationListResult, error) {
|
||
conversations, total, err := s.messageRepo.GetConversations(userID, page, pageSize)
|
||
if err != nil {
|
||
return nil, err
|
||
}
|
||
return &ConversationListResult{
|
||
Conversations: conversations,
|
||
Total: total,
|
||
}, nil
|
||
},
|
||
)
|
||
if err != nil {
|
||
return nil, 0, err
|
||
}
|
||
if result == nil {
|
||
return []*model.Conversation{}, 0, nil
|
||
}
|
||
return result.Conversations, result.Total, nil
|
||
}
|
||
|
||
// GetMessages 获取消息列表（带缓存）
|
||
func (s *messageService) GetMessages(ctx context.Context, conversationID string, page, pageSize int) ([]*model.Message, int64, error) {
|
||
// 优先使用 ConversationCache
|
||
if s.conversationCache != nil {
|
||
return s.conversationCache.GetMessages(ctx, conversationID, page, pageSize)
|
||
}
|
||
|
||
// 降级到直接访问数据库
|
||
return s.messageRepo.GetMessages(conversationID, page, pageSize)
|
||
}
|
||
|
||
// GetMessagesAfterSeq 获取指定seq之后的消息（增量同步）
|
||
func (s *messageService) GetMessagesAfterSeq(ctx context.Context, conversationID string, afterSeq int64, limit int) ([]*model.Message, error) {
|
||
return s.messageRepo.GetMessagesAfterSeq(conversationID, afterSeq, limit)
|
||
}
|
||
|
||
// MarkAsRead 标记为已读（使用 Cache-Aside 模式）
|
||
// userID 参数为 string 类型（UUID格式），与JWT中user_id保持一致
|
||
func (s *messageService) MarkAsRead(ctx context.Context, conversationID string, userID string, lastReadSeq int64) error {
|
||
// 1. 先写入DB（保证数据一致性，DB是唯一数据源）
|
||
err := s.messageRepo.UpdateLastReadSeq(conversationID, userID, lastReadSeq)
|
||
if err != nil {
|
||
return err
|
||
}
|
||
|
||
// 2. DB 写入成功后，失效缓存（Cache-Aside 模式）
|
||
if s.conversationCache != nil {
|
||
// 失效参与者缓存，下次读取时会从 DB 加载最新数据
|
||
s.conversationCache.InvalidateParticipant(conversationID, userID)
|
||
// 失效未读数缓存
|
||
s.conversationCache.InvalidateUnreadCount(userID, conversationID)
|
||
// 失效会话列表缓存
|
||
s.conversationCache.InvalidateConversationList(userID)
|
||
}
|
||
cache.InvalidateUnreadConversation(s.baseCache, userID)
|
||
|
||
return nil
|
||
}
|
||
|
||
// GetUnreadCount 获取未读消息数（带缓存）
|
||
// userID 参数为 string 类型（UUID格式），与JWT中user_id保持一致
|
||
func (s *messageService) GetUnreadCount(ctx context.Context, conversationID string, userID string) (int64, error) {
|
||
// 优先使用 ConversationCache
|
||
if s.conversationCache != nil {
|
||
return s.conversationCache.GetUnreadCount(ctx, userID, conversationID)
|
||
}
|
||
|
||
// 降级到基础缓存
|
||
cacheSettings := cache.GetSettings()
|
||
unreadTTL := cacheSettings.UnreadCountTTL
|
||
if unreadTTL <= 0 {
|
||
unreadTTL = UnreadCountTTL
|
||
}
|
||
nullTTL := cacheSettings.NullTTL
|
||
if nullTTL <= 0 {
|
||
nullTTL = UnreadNullTTL
|
||
}
|
||
jitter := cacheSettings.JitterRatio
|
||
if jitter <= 0 {
|
||
jitter = CacheJitterRatio
|
||
}
|
||
|
||
// 生成缓存键
|
||
cacheKey := cache.UnreadDetailKey(userID, conversationID)
|
||
|
||
return cache.GetOrLoadTyped(
|
||
s.baseCache,
|
||
cacheKey,
|
||
unreadTTL,
|
||
jitter,
|
||
nullTTL,
|
||
func() (int64, error) {
|
||
return s.messageRepo.GetUnreadCount(conversationID, userID)
|
||
},
|
||
)
|
||
}
|
||
|
||
// GetOrCreateConversation 获取或创建私聊会话
|
||
// user1ID 和 user2ID 参数为 string 类型（UUID格式），与JWT中user_id保持一致
|
||
func (s *messageService) GetOrCreateConversation(ctx context.Context, user1ID, user2ID string) (*model.Conversation, error) {
|
||
conv, err := s.messageRepo.GetOrCreatePrivateConversation(user1ID, user2ID)
|
||
if err != nil {
|
||
return nil, err
|
||
}
|
||
|
||
// 失效会话列表缓存
|
||
s.conversationCache.InvalidateConversationList(user1ID)
|
||
s.conversationCache.InvalidateConversationList(user2ID)
|
||
|
||
return conv, nil
|
||
}
|
||
|
||
// GetConversationParticipants 获取会话参与者列表
|
||
func (s *messageService) GetConversationParticipants(conversationID string) ([]*model.ConversationParticipant, error) {
|
||
// 优先使用缓存
|
||
if s.conversationCache != nil {
|
||
return s.conversationCache.GetParticipants(context.Background(), conversationID)
|
||
}
|
||
return s.messageRepo.GetConversationParticipants(conversationID)
|
||
}
|
||
|
||
// GetParticipantsBatch 批量获取多个会话的参与者列表
|
||
func (s *messageService) GetParticipantsBatch(ctx context.Context, convIDs []string) (map[string][]*model.ConversationParticipant, error) {
|
||
return s.messageRepo.GetParticipantsBatch(ctx, convIDs)
|
||
}
|
||
|
||
// GetMyParticipantsBatch 批量获取用户在多个会话中的参与者信息
|
||
func (s *messageService) GetMyParticipantsBatch(ctx context.Context, convIDs []string, userID string) (map[string]*model.ConversationParticipant, error) {
|
||
return s.messageRepo.GetMyParticipantsBatch(ctx, convIDs, userID)
|
||
}
|
||
|
||
// ParseConversationID 辅助函数：直接返回字符串ID（已经是string类型）
|
||
func ParseConversationID(idStr string) (string, error) {
|
||
return idStr, nil
|
||
}
|
||
|
||
// InvalidateUserConversationCache 失效用户会话相关缓存（供外部调用）
|
||
func (s *messageService) InvalidateUserConversationCache(userID string) {
|
||
s.conversationCache.InvalidateConversationList(userID)
|
||
cache.InvalidateUnreadConversation(s.baseCache, userID)
|
||
}
|
||
|
||
// InvalidateUserUnreadCache 失效用户未读数缓存（供外部调用）
|
||
func (s *messageService) InvalidateUserUnreadCache(userID, conversationID string) {
|
||
cache.InvalidateUnreadConversation(s.baseCache, userID)
|
||
s.conversationCache.InvalidateUnreadCount(userID, conversationID)
|
||
}
|
||
|
||
// GetMessagesByCursor 游标分页获取会话消息
|
||
//
|
||
// 鉴权：currentUserID 必须是会话参与者，否则返回 ErrNotConversationMember。
|
||
// 防止 IDOR：任意登录用户无法仅凭 conversationID 读取他人会话消息。
|
||
func (s *messageService) GetMessagesByCursor(ctx context.Context, conversationID, currentUserID string, req *cursor.PageRequest) (*cursor.CursorPageResult[*model.Message], error) {
|
||
if currentUserID == "" {
|
||
return nil, apperrors.ErrUnauthorized
|
||
}
|
||
// 通过 messageRepo.GetParticipantStrict 校验参与者身份（纯查询，不创建记录）。
|
||
// 与 chatService 中 GetMessages 等方法保持一致的鉴权边界。
|
||
_, err := s.messageRepo.GetParticipantStrict(conversationID, currentUserID)
|
||
if err != nil {
|
||
if errors.Is(err, gorm.ErrRecordNotFound) {
|
||
return nil, apperrors.ErrNotConversationMember
|
||
}
|
||
return nil, err
|
||
}
|
||
return s.messageRepo.GetMessagesByCursor(ctx, conversationID, req)
|
||
}
|
||
|
||
// GetConversationsByCursor 游标分页获取用户会话列表
|
||
func (s *messageService) GetConversationsByCursor(ctx context.Context, userID string, req *cursor.PageRequest) (*cursor.CursorPageResult[*model.Conversation], error) {
|
||
return s.messageRepo.GetConversationsByCursor(ctx, userID, req)
|
||
}
|