feat: add platform access foundation

apps/admin-api/src/routes/access.rs

@@ -0,0 +1,129 @@
+use axum::{
+    Json,
+    extract::{Path, State},
+    http::StatusCode,
+};
+use serde::Deserialize;
+use serde_json::{Value, json};
+
+use crate::{
+    error::ApiError,
+    service::{InvitationPayload, PlatformApiKeyPayload},
+    state::AppState,
+};
+
+#[derive(Deserialize)]
+pub struct WorkspacePath {
+    pub workspace_id: String,
+}
+
+#[derive(Deserialize)]
+pub struct WorkspaceInvitationPath {
+    pub workspace_id: String,
+    pub invitation_id: String,
+}
+
+#[derive(Deserialize)]
+pub struct WorkspacePlatformApiKeyPath {
+    pub workspace_id: String,
+    pub key_id: String,
+}
+
+pub async fn list_memberships(
+    Path(path): Path<WorkspacePath>,
+    State(state): State<AppState>,
+) -> Result<Json<Value>, ApiError> {
+    let items = state
+        .service
+        .list_memberships(&path.workspace_id.as_str().into())
+        .await?;
+    Ok(Json(json!({ "items": items })))
+}
+
+pub async fn list_invitations(
+    Path(path): Path<WorkspacePath>,
+    State(state): State<AppState>,
+) -> Result<Json<Value>, ApiError> {
+    let items = state
+        .service
+        .list_invitations(&path.workspace_id.as_str().into())
+        .await?;
+    Ok(Json(json!({ "items": items })))
+}
+
+pub async fn create_invitation(
+    Path(path): Path<WorkspacePath>,
+    State(state): State<AppState>,
+    Json(payload): Json<InvitationPayload>,
+) -> Result<Json<Value>, ApiError> {
+    let created = state
+        .service
+        .create_invitation(&path.workspace_id.as_str().into(), payload)
+        .await?;
+    Ok(Json(json!(created)))
+}
+
+pub async fn delete_invitation(
+    Path(path): Path<WorkspaceInvitationPath>,
+    State(state): State<AppState>,
+) -> Result<StatusCode, ApiError> {
+    state
+        .service
+        .delete_invitation(
+            &path.workspace_id.as_str().into(),
+            &path.invitation_id.as_str().into(),
+        )
+        .await?;
+    Ok(StatusCode::NO_CONTENT)
+}
+
+pub async fn list_platform_api_keys(
+    Path(path): Path<WorkspacePath>,
+    State(state): State<AppState>,
+) -> Result<Json<Value>, ApiError> {
+    let items = state
+        .service
+        .list_platform_api_keys(&path.workspace_id.as_str().into())
+        .await?;
+    Ok(Json(json!({ "items": items })))
+}
+
+pub async fn create_platform_api_key(
+    Path(path): Path<WorkspacePath>,
+    State(state): State<AppState>,
+    Json(payload): Json<PlatformApiKeyPayload>,
+) -> Result<Json<Value>, ApiError> {
+    let created = state
+        .service
+        .create_platform_api_key(&path.workspace_id.as_str().into(), payload)
+        .await?;
+    Ok(Json(json!(created)))
+}
+
+pub async fn revoke_platform_api_key(
+    Path(path): Path<WorkspacePlatformApiKeyPath>,
+    State(state): State<AppState>,
+) -> Result<StatusCode, ApiError> {
+    state
+        .service
+        .revoke_platform_api_key(
+            &path.workspace_id.as_str().into(),
+            &path.key_id.as_str().into(),
+        )
+        .await?;
+    Ok(StatusCode::NO_CONTENT)
+}
+
+pub async fn delete_platform_api_key(
+    Path(path): Path<WorkspacePlatformApiKeyPath>,
+    State(state): State<AppState>,
+) -> Result<StatusCode, ApiError> {
+    state
+        .service
+        .delete_platform_api_key(
+            &path.workspace_id.as_str().into(),
+            &path.key_id.as_str().into(),
+        )
+        .await?;
+    Ok(StatusCode::NO_CONTENT)
+}