王明 / Food-Labeling-Management-Platform

  using Volo.Abp.Users;

  using Yi.Framework.Rbac.Domain.Shared.Consts;

  
  namespace FoodLabeling.Application.Helpers;
  
  /// <summary>

  /// Reports 模块角色判断（与 JWT 中角色声明一致）

  /// </summary>
  public static class ReportsRoleHelper
  {
      /// <summary>

      /// 是否为「可查看全部用户打印数据」的管理员：
      /// <list type="bullet">
      /// <item>标准 <see cref="ICurrentUser.Roles"/> 中含角色码 <c>admin</c>（普通账号绑定 RoleCode=admin 时走此路径）；</item>
      /// <item>内置超管：用户名 <c>admin</c> 时 JWT 使用自定义 claim <c>Roles</c>，不写多条 <c>role</c>，需单独识别；</item>
      /// <item>超管权限 claim <c>Permission</c> 为 <c>*:*:*</c> 时视为管理员。</item>
      /// </list>

      /// </summary>
      public static bool IsAdminRole(ICurrentUser currentUser)
      {

          if (currentUser.Id is null)

          {
              return false;
          }
  

          var userName = currentUser.UserName?.Trim();
          if (!string.IsNullOrWhiteSpace(userName) &&
              string.Equals(userName, UserConst.Admin, StringComparison.OrdinalIgnoreCase))

          {

              return true;
          }
  
          foreach (var c in currentUser.FindClaims(TokenTypeConst.Permission))
          {
              if (!string.IsNullOrWhiteSpace(c.Value) &&
                  string.Equals(c.Value.Trim(), UserConst.AdminPermissionCode, StringComparison.Ordinal))

              {
                  return true;
              }
          }
  

          var rolesClaim = currentUser.FindClaims(TokenTypeConst.Roles).Select(x => x.Value).FirstOrDefault();
          if (!string.IsNullOrWhiteSpace(rolesClaim))
          {
              foreach (var part in rolesClaim.Split(',', StringSplitOptions.RemoveEmptyEntries | StringSplitOptions.TrimEntries))
              {
                  if (string.Equals(part, UserConst.AdminRolesCode, StringComparison.OrdinalIgnoreCase))
                  {
                      return true;
                  }
              }
          }
  
          if (currentUser.Roles is not null)
          {
              foreach (var r in currentUser.Roles)
              {
                  if (!string.IsNullOrWhiteSpace(r) &&
                      string.Equals(r.Trim(), UserConst.AdminRolesCode, StringComparison.OrdinalIgnoreCase))
                  {
                      return true;
                  }
              }
          }
  

          return false;
      }
  }