独立对话页

package nexus.io.mosskb.service.kb;

import com.jfinal.kit.Kv;

import nexus.io.db.activerecord.Db;
import nexus.io.db.activerecord.Row;
import nexus.io.jfinal.aop.Aop;
import nexus.io.mosskb.model.MossKbApplicationPublicAccessClient;
import nexus.io.mosskb.service.MossKbAuthService;
import nexus.io.model.result.ResultVo;
import nexus.io.tio.boot.admin.utils.TioAdminEnvUtils;
import nexus.io.tio.utils.jwt.JwtUtils;
import nexus.io.tio.utils.snowflake.SnowflakeIdUtils;
import nexus.io.tio.utils.token.TokenManager;

/** 公开链接的认证入口：短令牌换长期令牌，首次访问时登记访客。 */
public ResultVo authentication(Long shortToken, String longToken) {
  Row token = Db.findFirst(FIND_BY_TOKEN, shortToken);
  if (token == null) {
    return ResultVo.fail("not found applicaiton id:" + shortToken);
  }
  Long applicationId = token.getLong("application_id");
  Long clientId = Aop.get(MossKbAuthService.class).getIdByToken(longToken);
  if (clientId != null && Db.queryLong("select count(*) from moss_kb_application_public_access_client where application_id=? and client_id=?",
      applicationId, clientId) > 0) {
    return ResultVo.ok(longToken);
  }
  return ResultVo.ok(bindClient(applicationId, token.getStr("language")));
}

package nexus.io.mosskb.inteceptor;

import java.util.regex.Pattern;

/** 没有本地账号的令牌仍可访问的路径，用于分享对话。 */
private static final String[] PUBLIC_PATHS = {"/api/application/profile"};

/** 没有本地账号的令牌仍可访问的路径，用于分享对话。 */
private static final Pattern[] PUBLIC_PATH_PATTERNS = {
    Pattern.compile("/api/application/\\d+/chat/open"),
    Pattern.compile("/api/application/chat_message/\\d+"),
    Pattern.compile("/api/application/\\d+/chat/\\d+/context(/compact)?"),
    Pattern.compile("/api/application/\\d+/chat/client/\\d+(/\\d+)?"),
    Pattern.compile("/api/application/\\d+/chat/\\d+/chat_record/\\d+/\\d+"),
    Pattern.compile("/api/application/\\d+/chat/\\d+/chat_record/\\d+(/vote)?")};

package nexus.io.mosskb.controller;

import com.alibaba.fastjson2.JSONObject;

import nexus.io.annotation.Get;
import nexus.io.annotation.Put;
import nexus.io.annotation.RequestPath;
import nexus.io.jfinal.aop.Aop;
import nexus.io.mosskb.service.kb.MossKbApplicationAccessTokenService;
import nexus.io.model.result.ResultVo;
import nexus.io.tio.boot.http.TioRequestContext;
import nexus.io.tio.http.common.HttpRequest;
import nexus.io.tio.utils.hutool.StrUtil;
import nexus.io.tio.utils.json.FastJson2Utils;

@RequestPath("/api/application")
public class ApiApplicationController {

  @Get("/{applicationId}/access_token")
  public ResultVo getAccessToken(Long applicationId) {
    if (!nexus.io.mosskb.service.kb.ApplicationAccess.owns(TioRequestContext.getUserIdLong(), applicationId)) {
      return ResultVo.fail("无权访问应用");
    }
    return Aop.get(MossKbApplicationAccessTokenService.class).getById(applicationId);
  }

  /** 公开访问链接配置：启停、重置短令牌、访问次数、白名单与对话语言。 */
  @Put("/{applicationId}/access_token")
  public ResultVo updateAccessToken(Long applicationId, HttpRequest request) {
    return Aop.get(MossKbApplicationAccessTokenService.class).update(TioRequestContext.getUserIdLong(), applicationId,
        body(request));
  }

  private JSONObject body(HttpRequest request) {
    String bodyString = request.getBodyString();
    return StrUtil.isBlank(bodyString) ? new JSONObject() : FastJson2Utils.parseObject(bodyString);
  }
}

package nexus.io.mosskb.service.kb;

import java.util.ArrayList;
import java.util.List;

import com.alibaba.fastjson2.JSONArray;
import com.alibaba.fastjson2.JSONObject;

import nexus.io.db.activerecord.Db;
import nexus.io.model.result.ResultVo;
import nexus.io.tio.utils.hutool.StrUtil;
import nexus.io.tio.utils.mcid.McIdUtils;

  /** 公开链接的写入：只改请求里出现的字段，未出现的保持原值。 */
  public ResultVo update(Long userId, Long applicationId, JSONObject input) {
    if (!ApplicationAccess.owns(userId, applicationId)) {
      return ResultVo.fail("应用不存在或无权访问");
    }
    if (Db.queryLong("select count(*) from moss_kb_application_access_token where application_id=? and deleted=0",
        applicationId) == 0) {
      return ResultVo.fail("公开访问链接不存在");
    }
    List<String> assignments = new ArrayList<>();
    List<Object> args = new ArrayList<>();
    if (input.containsKey("is_active")) {
      assignments.add("is_active = ?");
      args.add(Boolean.TRUE.equals(input.getBoolean("is_active")));
    }
    if (Boolean.TRUE.equals(input.getBoolean("access_token_reset"))) {
      assignments.add("access_token = ?");
      args.add(McIdUtils.id());
    }
    if (input.containsKey("show_source")) {
      assignments.add("show_source = ?");
      args.add(Boolean.TRUE.equals(input.getBoolean("show_source")));
    }
    if (input.containsKey("language")) {
      String language = input.getString("language");
      if (StrUtil.isNotBlank(language) && !SUPPORTED_LANGUAGES.contains(language)) {
        return ResultVo.fail("不支持的语言：" + language);
      }
      assignments.add("language = ?");
      args.add(StrUtil.isBlank(language) ? null : language);
    }
    if (assignments.isEmpty()) {
      return getById(applicationId);
    }
    assignments.add("update_time = now()");
    args.add(applicationId);
    Db.update("update moss_kb_application_access_token set " + String.join(", ", assignments)
        + " where application_id = ? and deleted = 0", args.toArray());
    return getById(applicationId);
  }

  /** 界面支持的语言，与前端语言包目录同名；留空表示跟随访客浏览器语言。 */
  private static final List<String> SUPPORTED_LANGUAGES = List.of("en-US", "zh-CN", "zh-Hant");

package nexus.io.mosskb.service.kb;

import nexus.io.db.activerecord.Db;
import nexus.io.db.activerecord.Row;

public final class ApplicationAccess {

  public static boolean canChat(Long clientId, Long applicationId) {
    if (owns(clientId, applicationId)) {
      return true;
    }
    return clientId != null && Db.queryLong("select count(*) from moss_kb_application_public_access_client c join moss_kb_application_access_token t on t.application_id=c.application_id where c.client_id=? and c.application_id=? and t.is_active=true and t.deleted=0", clientId, applicationId) > 0;
  }

  public static boolean canReadChat(Long clientId, Long applicationId, Long chatId) {
    Row chat = Db.findById("moss_kb_application_chat", chatId);
    return chat != null && !Boolean.TRUE.equals(chat.getBoolean("is_deleted")) && applicationId.equals(chat.getLong("application_id"))
        && (owns(clientId, applicationId) || (canChat(clientId, applicationId) && clientId.equals(chat.getLong("client_id"))));
  }
}