vpd-permission-poc/vpd-backoffice/src/main/java/com/cloudhandson/vpdbackoffice/web/ProtectedObjectController.java

package com.cloudhandson.vpdbackoffice.web;

import com.cloudhandson.vpdbackoffice.domain.protectedobject.ProtectedObjectCreateCommand;
import com.cloudhandson.vpdbackoffice.service.AppException;
import com.cloudhandson.vpdbackoffice.service.OrdsMetadataService;
import com.cloudhandson.vpdbackoffice.service.ProtectedObjectService;
import java.util.stream.Collectors;
import org.springframework.dao.DataAccessException;
import org.springframework.stereotype.Controller;
import org.springframework.ui.Model;
import org.springframework.web.bind.annotation.GetMapping;
import org.springframework.web.bind.annotation.PostMapping;
import org.springframework.web.bind.annotation.RequestParam;
import org.springframework.web.servlet.mvc.support.RedirectAttributes;

@Controller
public class ProtectedObjectController {

  private final ProtectedObjectService protectedObjectService;
  private final OrdsMetadataService ordsMetadataService;

  public ProtectedObjectController(
      ProtectedObjectService protectedObjectService,
      OrdsMetadataService ordsMetadataService
  ) {
    this.protectedObjectService = protectedObjectService;
    this.ordsMetadataService = ordsMetadataService;
  }

  @GetMapping("/objects")
  public String objects(Model model) {
    var objects = protectedObjectService.findEnabled();
    model.addAttribute("objects", objects);
    model.addAttribute("dbObjects", protectedObjectService.findDatabaseObjects());
    model.addAttribute("columnsByObject", objects.stream()
        .collect(Collectors.toMap(
            object -> object.objectId(),
            object -> protectedObjectService.findColumns(object.objectId())
        )));
    return "objects";
  }

  @PostMapping("/objects")
  public String create(
      @RequestParam String owner,
      @RequestParam String objectName,
      @RequestParam(required = false) String ordsPath,
      @RequestParam(required = false) String description,
      RedirectAttributes redirectAttributes
  ) {
    try {
      protectedObjectService.createObject(
          new ProtectedObjectCreateCommand(owner, objectName, ordsPath, null, null, description));
      redirectAttributes.addFlashAttribute("message", "ORDS 조회 Handler 대상을 추가했습니다.");
    } catch (AppException exception) {
      redirectAttributes.addFlashAttribute("errorMessage", exception.getMessage());
    }
    return "redirect:/objects";
  }

  @PostMapping("/objects/description")
  public String updateDescription(
      @RequestParam long objectId,
      @RequestParam(required = false) String description,
      RedirectAttributes redirectAttributes
  ) {
    try {
      protectedObjectService.updateDescription(objectId, description);
      redirectAttributes.addFlashAttribute("message", "조회 대상 설명을 저장했습니다.");
    } catch (AppException exception) {
      redirectAttributes.addFlashAttribute("errorMessage", exception.getMessage());
    }
    return "redirect:/objects";
  }

  @PostMapping("/objects/ords-path")
  public String updateOrdsPath(
      @RequestParam long objectId,
      @RequestParam String ordsPath,
      RedirectAttributes redirectAttributes
  ) {
    try {
      protectedObjectService.updateOrdsPath(objectId, ordsPath);
      redirectAttributes.addFlashAttribute("message", "ORDS Path를 수정했습니다.");
    } catch (AppException exception) {
      redirectAttributes.addFlashAttribute("errorMessage", exception.getMessage());
    }
    return "redirect:/objects";
  }

  @PostMapping("/objects/column-policy")
  public String updateColumnPolicy(
      @RequestParam long columnId,
      @RequestParam String sensitivityLevel,
      @RequestParam String redactionMethod,
      RedirectAttributes redirectAttributes
  ) {
    try {
      protectedObjectService.updateColumnPolicy(columnId, sensitivityLevel, redactionMethod);
      redirectAttributes.addFlashAttribute("message", "컬럼 표시 보호 정책을 수정했습니다. 행 접근 권한은 변경되지 않습니다.");
    } catch (AppException exception) {
      redirectAttributes.addFlashAttribute("errorMessage", exception.getMessage());
    }
    return "redirect:/objects";
  }

  @PostMapping("/objects/ords-handler")
  public String createOrdsHandler(@RequestParam long objectId, RedirectAttributes redirectAttributes) {
    try {
      var result = ordsMetadataService.createObjectQueryHandler(objectId);
      redirectAttributes.addFlashAttribute("message", "ORDS 조회 Handler를 생성했습니다: " + result.ordsPath());
    } catch (AppException exception) {
      redirectAttributes.addFlashAttribute("errorMessage", exception.getMessage());
    } catch (DataAccessException exception) {
      RuntimeErrorMessage error = RuntimeErrorMessages.dataAccess(exception);
      redirectAttributes.addFlashAttribute("errorMessage", error.message());
    }
    return "redirect:/objects";
  }

  @GetMapping("/objects/ords-handler-source")
  public String ordsHandlerSource(@RequestParam long objectId, Model model) {
    try {
      model.addAttribute("object", protectedObjectService.assertEnabled(objectId));
      model.addAttribute("source", ordsMetadataService.objectQueryHandlerSource(objectId));
    } catch (AppException exception) {
      model.addAttribute("errorMessage", exception.getMessage());
    }
    return "fragments/ords-handler-source :: source";
  }

  @PostMapping("/objects/disable")
  public String disable(@RequestParam long objectId, RedirectAttributes redirectAttributes) {
    protectedObjectService.disableObject(objectId);
    redirectAttributes.addFlashAttribute("message", "ORDS 조회 Handler 대상을 비활성화했습니다.");
    return "redirect:/objects";
  }
}