Files
jiu/backend/internal/handler/warehouse.go
T
wangjia 51cfe5fc6d fix(backend): 修复库存 TOCTOU 竞态 + handler 白名单更新 + 对账接口
#29 ApproveStockOut:FOR UPDATE 锁定批次后再内存汇总总量,
     消除预检 SUM 与加锁之间的竞态窗口,减少一次 DB 往返

#30 partner/warehouse/user/product_attr/product_option Update 方法:
     - 绑定到独立 req struct,防止请求体覆盖记录 ID
     - 改用 db.Model.Where("shop_id=?").Updates(map) 白名单更新,
       数据库层强制 shop_id 隔离约束

#31 新增 GET /api/v1/admin/reconcile:对比 inventories 当前库存
     与 inventory_logs 流水净量,返回差异行,用于发现不平账异常

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-11 00:21:48 +08:00

77 lines
2.1 KiB
Go

package handler
import (
"net/http"
"github.com/gin-gonic/gin"
"gorm.io/gorm"
"github.com/wangjia/jiu/backend/internal/middleware"
"github.com/wangjia/jiu/backend/internal/model"
)
type WarehouseHandler struct {
db *gorm.DB
}
func NewWarehouseHandler(db *gorm.DB) *WarehouseHandler {
return &WarehouseHandler{db: db}
}
func (h *WarehouseHandler) List(c *gin.Context) {
shopID := middleware.GetShopID(c)
warehouses := make([]model.Warehouse, 0)
h.db.Where("shop_id = ? AND deleted_at IS NULL", shopID).Find(&warehouses)
c.JSON(http.StatusOK, gin.H{"data": warehouses})
}
func (h *WarehouseHandler) Create(c *gin.Context) {
shopID := middleware.GetShopID(c)
var w model.Warehouse
if err := c.ShouldBindJSON(&w); err != nil {
c.JSON(http.StatusBadRequest, gin.H{"error": err.Error()})
return
}
w.ShopID = shopID
h.db.Create(&w)
c.JSON(http.StatusCreated, gin.H{"data": w})
}
func (h *WarehouseHandler) Update(c *gin.Context) {
shopID := middleware.GetShopID(c)
var w model.Warehouse
if err := h.db.Where("id = ? AND shop_id = ? AND deleted_at IS NULL", c.Param("id"), shopID).
First(&w).Error; err != nil {
c.JSON(http.StatusNotFound, gin.H{"error": "not found"})
return
}
var req struct {
Name string `json:"name"`
Location string `json:"location"`
IsDefault bool `json:"is_default"`
}
if err := c.ShouldBindJSON(&req); err != nil {
c.JSON(http.StatusBadRequest, gin.H{"error": err.Error()})
return
}
if err := h.db.Model(&w).Where("shop_id = ?", shopID).Updates(map[string]interface{}{
"name": req.Name,
"location": req.Location,
"is_default": req.IsDefault,
}).Error; err != nil {
c.JSON(http.StatusInternalServerError, gin.H{"error": err.Error()})
return
}
h.db.Where("id = ? AND shop_id = ?", w.ID, shopID).First(&w)
c.JSON(http.StatusOK, gin.H{"data": w})
}
func (h *WarehouseHandler) Delete(c *gin.Context) {
shopID := middleware.GetShopID(c)
now := timeNow()
h.db.Model(&model.Warehouse{}).
Where("id = ? AND shop_id = ? AND deleted_at IS NULL", c.Param("id"), shopID).
Update("deleted_at", now)
c.JSON(http.StatusOK, gin.H{"message": "deleted"})
}