开放 API

@RestController
@RequestMapping("/open-api/v1")
public class OpenApiController {
    @Autowired
    private WorkItemService workItemService;
    
    /**
     * 创建工作项
     */
    @PostMapping("/workitems")
    public ApiResponse<WorkItemVO> createWorkItem(
        @RequestHeader("X-API-Token") String token,
        @RequestBody WorkItemCreateDTO dto
    ) {
        // Token 验证在拦截器中完成
        WorkItemVO item = workItemService.create(dto);
        return ApiResponse.success(item);
    }
    
    /**
     * 查询工作项
     */
    @GetMapping("/workitems/{id}")
    public ApiResponse<WorkItemVO> getWorkItem(
        @RequestHeader("X-API-Token") String token,
        @PathVariable Long id
    ) {
        WorkItemVO item = workItemService.getById(id);
        return ApiResponse.success(item);
    }
}

@Component
public class ApiTokenInterceptor implements HandlerInterceptor {
    @Autowired
    private ApiTokenService tokenService;
    
    @Override
    public boolean preHandle(HttpServletRequest request, 
                            HttpServletResponse response, 
                            Object handler) {
        // 获取 Token
        String token = request.getHeader("X-API-Token");
        if (StringUtils.isEmpty(token)) {
            throw new BizException("缺少 API Token");
        }
        
        // 验证 Token
        ApiToken apiToken = tokenService.validate(token);
        if (apiToken == null) {
            throw new BizException("无效的 API Token");
        }
        
        // 设置工作空间上下文
        WorkspaceContext.setWorkspaceId(apiToken.getWorkspaceId());
        
        return true;
    }
}