gamegroup2/backend/pb_hooks/main.go

package main

import (
	"log"

	"github.com/pocketbase/pocketbase"
	"github.com/pocketbase/pocketbase/apis"
	"github.com/pocketbase/pocketbase/core"
)

func main() {
	app := pocketbase.New()

	// ── Groups ──

	app.OnRecordBeforeCreateRequest("groups").Add(func(e *core.RecordCreateEvent) error {
		authRecord, _ := e.HttpContext.AuthRecord()
		if authRecord == nil {
			return apis.NewForbiddenError("需要登录", nil)
		}
		e.Record.Set("owner", authRecord.Id)
		e.Record.Set("members", []string{authRecord.Id})
		return nil
	})

	app.OnRecordBeforeUpdateRequest("groups").Add(func(e *core.RecordUpdateEvent) error {
		authRecord, _ := e.HttpContext.AuthRecord()
		if authRecord == nil {
			return apis.NewForbiddenError("需要登录", nil)
		}
		original, err := app.Dao().FindRecordById("groups", e.Record.Id)
		if err != nil {
			return apis.NewNotFoundError("群组不存在", nil)
		}
		if original.GetString("owner") != authRecord.Id {
			return apis.NewForbiddenError("只有群组所有者可以更新群组", nil)
		}
		// 保护 owner 字段不被篡改
		e.Record.Set("owner", original.GetString("owner"))
		// 验证 members 数量
		members := e.Record.GetStringSlice("members")
		maxMembers := e.Record.GetInt("maxMembers")
		if maxMembers > 0 && len(members) > maxMembers {
			return apis.NewBadRequestError("成员数量超过上限", nil)
		}
		return nil
	})

	app.OnRecordBeforeDeleteRequest("groups").Add(func(e *core.RecordDeleteEvent) error {
		authRecord, _ := e.HttpContext.AuthRecord()
		if authRecord == nil {
			return apis.NewForbiddenError("需要登录", nil)
		}
		isOwner, err := isGroupOwner(app, e.Record.Id, authRecord.Id)
		if err != nil || !isOwner {
			return apis.NewForbiddenError("只有群组所有者可以删除群组", nil)
		}
		return nil
	})

	// ── Team Sessions ──

	app.OnRecordBeforeCreateRequest("team_sessions").Add(func(e *core.RecordCreateEvent) error {
		authRecord, _ := e.HttpContext.AuthRecord()
		if authRecord == nil {
			return apis.NewForbiddenError("需要登录", nil)
		}
		groupId := e.Record.GetString("sourceGroup")
		isMember, err := isGroupMember(app, groupId, authRecord.Id)
		if err != nil || !isMember {
			return apis.NewForbiddenError("只有群组成员可以创建团队会话", nil)
		}
		return nil
	})

	// ── Invitations ──

	app.OnRecordBeforeCreateRequest("invitations").Add(func(e *core.RecordCreateEvent) error {
		authRecord, _ := e.HttpContext.AuthRecord()
		if authRecord == nil {
			return apis.NewForbiddenError("需要登录", nil)
		}
		// 强制设置 from 为当前用户
		e.Record.Set("from", authRecord.Id)
		e.Record.Set("status", "pending")
		return nil
	})

	// 接受邀请：自动加入 team session + 更新用户状态
	app.OnRecordBeforeUpdateRequest("invitations").Add(func(e *core.RecordUpdateEvent) error {
		authRecord, _ := e.HttpContext.AuthRecord()
		if authRecord == nil {
			return apis.NewForbiddenError("需要登录", nil)
		}
		// 只有 recipient 可以更新邀请
		if e.Record.GetString("to") != authRecord.Id {
			return apis.NewForbiddenError("无权操作此邀请", nil)
		}

		newStatus := e.Record.GetString("status")
		if newStatus == "accepted" {
			teamSessionId := e.Record.GetString("teamSession")
			teamSession, err := app.Dao().FindRecordById("team_sessions", teamSessionId)
			if err != nil {
				return apis.NewNotFoundError("临时小组不存在", nil)
			}
			// 将用户加入 team session members
			members := teamSession.GetStringSlice("members")
			alreadyIn := false
			for _, m := range members {
				if m == authRecord.Id {
					alreadyIn = true
					break
				}
			}
			if !alreadyIn {
				members = append(members, authRecord.Id)
				teamSession.Set("members", members)
				if err := app.Dao().SaveRecord(teamSession); err != nil {
					return apis.NewBadRequestError("加入临时小组失败", nil)
				}
			}

			// 更新用户状态为 in_team
			user, err := app.Dao().FindRecordById("users", authRecord.Id)
			if err == nil {
				user.Set("status", "in_team")
				app.Dao().SaveRecord(user)
			}
		}
		return nil
	})

	if err := app.Start(); err != nil {
		log.Fatal(err)
	}
}

func isGroupMember(app *pocketbase.PocketBase, groupId string, userId string) (bool, error) {
	group, err := app.Dao().FindRecordById("groups", groupId)
	if err != nil {
		return false, err
	}
	members := group.GetStringSlice("members")
	for _, member := range members {
		if member == userId {
			return true, nil
		}
	}
	return false, nil
}

func isGroupOwner(app *pocketbase.PocketBase, groupId string, userId string) (bool, error) {
	group, err := app.Dao().FindRecordById("groups", groupId)
	if err != nil {
		return false, err
	}
	return group.GetString("owner") == userId, nil
}