[BE] Feat/#378 Admin API 구현

backend/src/docs/asciidoc/admin.adoc

@@ -0,0 +1,29 @@
+== 관리자 기능
+
+=== 전체 회원 조회
+
+operation::admin-controller-test/find-all-member-details[snippets='http-request,http-response']
+
+=== 회원 상세 조회
+
+operation::admin-controller-test/find-member[snippets='http-request,http-response']
+
+=== 회원 차단(삭제)
+
+operation::admin-controller-test/delete-member[snippets='http-request,http-response']
+
+=== 토픽 삭제
+
+operation::admin-controller-test/delete-topic[snippets='http-request,http-response']
+
+=== 토픽 이미지 삭제
+
+operation::admin-controller-test/delete-topic-image[snippets='http-request,http-response']
+
+=== 핀 삭제
+
+operation::admin-controller-test/delete-pin[snippets='http-request,http-response']
+
+=== 핀 이미지 삭제
+
+operation::admin-controller-test/delete-pin-image[snippets='http-request,http-response']

backend/src/docs/asciidoc/index.adoc

@@ -15,3 +15,4 @@ include::member.adoc[]
 include::permission.adoc[]
 include::oauth.adoc[]
 include::bookmark.adoc[]
+include::admin.adoc[]

backend/src/main/java/com/mapbefine/mapbefine/admin/application/AdminCommandService.java

@@ -0,0 +1,114 @@
+package com.mapbefine.mapbefine.admin.application;
+
+import static com.mapbefine.mapbefine.permission.exception.PermissionErrorCode.PERMISSION_FORBIDDEN_BY_NOT_ADMIN;
+import static com.mapbefine.mapbefine.topic.exception.TopicErrorCode.TOPIC_NOT_FOUND;
+
+import com.mapbefine.mapbefine.auth.domain.AuthMember;
+import com.mapbefine.mapbefine.member.domain.Member;
+import com.mapbefine.mapbefine.member.domain.MemberRepository;
+import com.mapbefine.mapbefine.member.domain.Status;
+import com.mapbefine.mapbefine.member.exception.MemberErrorCode;
+import com.mapbefine.mapbefine.member.exception.MemberException.MemberNotFoundException;
+import com.mapbefine.mapbefine.permission.exception.PermissionException.PermissionForbiddenException;
+import com.mapbefine.mapbefine.pin.domain.Pin;
+import com.mapbefine.mapbefine.pin.domain.PinImageRepository;
+import com.mapbefine.mapbefine.pin.domain.PinRepository;
+import com.mapbefine.mapbefine.topic.domain.Topic;
+import com.mapbefine.mapbefine.topic.domain.TopicRepository;
+import com.mapbefine.mapbefine.topic.exception.TopicException;
+import java.util.List;
+import org.springframework.stereotype.Service;
+
+@Service
+public class AdminCommandService {
+
+    private final MemberRepository memberRepository;
+    private final TopicRepository topicRepository;
+    private final PinRepository pinRepository;
+    private final PinImageRepository pinImageRepository;
+
+    public AdminCommandService(
+            MemberRepository memberRepository,
+            TopicRepository topicRepository,
+            PinRepository pinRepository,
+            PinImageRepository pinImageRepository
+    ) {
+        this.memberRepository = memberRepository;
+        this.topicRepository = topicRepository;
+        this.pinRepository = pinRepository;
+        this.pinImageRepository = pinImageRepository;
+    }
+
+    public void blockMember(AuthMember authMember, Long memberId) {
+        Member admin = findMemberById(authMember.getMemberId());
+
+        validateAdminPermission(admin);
+
+        Member member = findMemberById(memberId);
+        member.updateStatus(Status.BLOCKED);
+        List<Long> pinIds = extractPinIdsByMember(member);
+
+        topicRepository.deleteAllByMemberId(memberId);
+        pinRepository.deleteAllByMemberId(memberId);
+        pinImageRepository.deleteAllByPinIds(pinIds);
+    }
+
+    private Member findMemberById(Long id) {
+        return memberRepository.findById(id)
+                .orElseThrow(() -> new MemberNotFoundException(MemberErrorCode.MEMBER_NOT_FOUND, id));
+    }
+
+    private void validateAdminPermission(Member member) {
+        if (member.isAdmin()) {
+            return;
+        }
+
+        throw new PermissionForbiddenException(PERMISSION_FORBIDDEN_BY_NOT_ADMIN);
+    }
+
+    private List<Long> extractPinIdsByMember(Member member) {
+        return member.getCreatedPins()
+                .stream()
+                .map(Pin::getId)
+                .toList();
+    }
+
+    public void deleteTopic(AuthMember authMember, Long topicId) {
+        Member member = findMemberById(authMember.getMemberId());
+
+        validateAdminPermission(member);
+
+        topicRepository.deleteById(topicId);
+    }
+
+    public void deleteTopicImage(AuthMember authMember, Long topicId) {
+        Member member = findMemberById(authMember.getMemberId());
+
+        validateAdminPermission(member);
+
+        Topic topic = findTopicById(topicId);
+        topic.removeImage();
+    }
+
+    private Topic findTopicById(Long topicId) {
+        return topicRepository.findById(topicId)
+                .orElseThrow(() -> new TopicException.TopicNotFoundException(TOPIC_NOT_FOUND, List.of(topicId)));
+    }
+
+    public void deletePin(AuthMember authMember, Long pinId) {
+        Member member = findMemberById(authMember.getMemberId());
+
+        validateAdminPermission(member);
+
+        pinRepository.deleteById(pinId);
+    }
+
+    public void deletePinImage(AuthMember authMember, Long pinImageId) {
+        Member member = findMemberById(authMember.getMemberId());
+
+        validateAdminPermission(member);
+
+        pinImageRepository.deleteById(pinImageId);
+    }
+
+}

backend/src/main/java/com/mapbefine/mapbefine/admin/application/AdminQueryService.java

@@ -0,0 +1,62 @@
+package com.mapbefine.mapbefine.admin.application;
+
+import com.mapbefine.mapbefine.admin.dto.AdminMemberDetailResponse;
+import com.mapbefine.mapbefine.admin.dto.AdminMemberResponse;
+import com.mapbefine.mapbefine.auth.domain.AuthMember;
+import com.mapbefine.mapbefine.member.domain.Member;
+import com.mapbefine.mapbefine.member.domain.MemberRepository;
+import com.mapbefine.mapbefine.member.domain.Role;
+import com.mapbefine.mapbefine.member.exception.MemberErrorCode;
+import com.mapbefine.mapbefine.member.exception.MemberException.MemberNotFoundException;
+import com.mapbefine.mapbefine.permission.exception.PermissionErrorCode;
+import com.mapbefine.mapbefine.permission.exception.PermissionException.PermissionForbiddenException;
+import com.mapbefine.mapbefine.pin.domain.Pin;
+import com.mapbefine.mapbefine.topic.domain.Topic;
+import java.util.List;
+import org.springframework.stereotype.Service;
+
+@Service
+public class AdminQueryService {
+
+    private final MemberRepository memberRepository;
+
+    public AdminQueryService(MemberRepository memberRepository) {
+        this.memberRepository = memberRepository;
+    }
+
+    public List<AdminMemberResponse> findAllMemberDetails(AuthMember authMember) {
+        Member admin = findMemberById(authMember.getMemberId());
+        validateAdminPermission(admin);
+
+        List<Member> members = memberRepository.findAllByMemberInfoRole(Role.USER);
+
+        return members.stream()
+                .map(AdminMemberResponse::from)
+                .toList();
+    }
+
+    private Member findMemberById(Long id) {
+        return memberRepository.findById(id)
+                .orElseThrow(() -> new MemberNotFoundException(MemberErrorCode.MEMBER_NOT_FOUND, id));
+    }
+
+    private void validateAdminPermission(Member member) {
+        if (member.isAdmin()) {
+            return;
+        }
+
+        throw new PermissionForbiddenException(PermissionErrorCode.PERMISSION_FORBIDDEN_BY_NOT_ADMIN);
+    }
+
+    public AdminMemberDetailResponse findMemberDetail(AuthMember authMember, Long memberId) {
+        Member admin = findMemberById(authMember.getMemberId());
+
+        validateAdminPermission(admin);
+
+        Member findMember = findMemberById(memberId);
+        List<Topic> topics = findMember.getCreatedTopics();
+        List<Pin> pins = findMember.getCreatedPins();
+
+        return AdminMemberDetailResponse.of(findMember, topics, pins);
+    }
+}

backend/src/main/java/com/mapbefine/mapbefine/admin/dto/AdminMemberDetailResponse.java

@@ -0,0 +1,48 @@
+package com.mapbefine.mapbefine.admin.dto;
+
+import com.mapbefine.mapbefine.member.domain.Member;
+import com.mapbefine.mapbefine.member.domain.MemberInfo;
+import com.mapbefine.mapbefine.pin.domain.Pin;
+import com.mapbefine.mapbefine.pin.dto.response.PinResponse;
+import com.mapbefine.mapbefine.topic.domain.Topic;
+import com.mapbefine.mapbefine.topic.dto.response.TopicResponse;
+import java.time.LocalDateTime;
+import java.util.List;
+
+public record AdminMemberDetailResponse(
+        Long id,
+        String nickName,
+        String email,
+        String imageUrl,
+        List<TopicResponse> topics,
+        List<PinResponse> pins,
+        LocalDateTime updatedAt
+) {
+
+    // TODO: 2023/09/12 topics, pins 모두 member를 통해 얻어올 수 있다. Service에서 꺼내서 넘겨줄 것인가 ? 아니면 DTO에서 꺼내올 것인가 ?
+    public static AdminMemberDetailResponse of(
+            Member member,
+            List<Topic> topics,
+            List<Pin> pins
+    ) {
+        MemberInfo memberInfo = member.getMemberInfo();
+        List<TopicResponse> topicResponses = topics.stream()
+                .map(TopicResponse::fromGuestQuery)
+                .toList();
+        List<PinResponse> pinResponses = pins.stream()
+                .map(PinResponse::from)
+                .toList();
+
+        return new AdminMemberDetailResponse(
+                member.getId(),
+                memberInfo.getNickName(),
+                memberInfo.getEmail(),
+                memberInfo.getImageUrl(),
+                topicResponses,
+                pinResponses,
+                member.getUpdatedAt()
+        );
+    }
+
+
+}

backend/src/main/java/com/mapbefine/mapbefine/admin/dto/AdminMemberResponse.java

@@ -0,0 +1,27 @@
+package com.mapbefine.mapbefine.admin.dto;
+
+import com.mapbefine.mapbefine.member.domain.Member;
+import com.mapbefine.mapbefine.member.domain.MemberInfo;
+import java.time.LocalDateTime;
+
+public record AdminMemberResponse(
+        Long id,
+        String nickName,
+        String email,
+        String imageUrl,
+        LocalDateTime updatedAt
+) {
+
+    public static AdminMemberResponse from(Member member) {
+        MemberInfo memberInfo = member.getMemberInfo();
+
+        return new AdminMemberResponse(
+                member.getId(),
+                memberInfo.getNickName(),
+                memberInfo.getEmail(),
+                memberInfo.getImageUrl(),
+                member.getUpdatedAt()
+        );
+    }
+
+}

backend/src/main/java/com/mapbefine/mapbefine/admin/presentation/AdminController.java

@@ -0,0 +1,78 @@
+package com.mapbefine.mapbefine.admin.presentation;
+
+import com.mapbefine.mapbefine.admin.application.AdminCommandService;
+import com.mapbefine.mapbefine.admin.application.AdminQueryService;
+import com.mapbefine.mapbefine.admin.dto.AdminMemberDetailResponse;
+import com.mapbefine.mapbefine.admin.dto.AdminMemberResponse;
+import com.mapbefine.mapbefine.auth.domain.AuthMember;
+import java.util.List;
+import org.springframework.http.ResponseEntity;
+import org.springframework.web.bind.annotation.DeleteMapping;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.PathVariable;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RestController;
+
+@RestController
+@RequestMapping("/admin")
+public class AdminController {
+
+    private final AdminQueryService adminQueryService;
+    private final AdminCommandService adminCommandService;
+
+
+    public AdminController(AdminQueryService adminQueryService, AdminCommandService adminCommandService) {
+        this.adminQueryService = adminQueryService;
+        this.adminCommandService = adminCommandService;
+    }
+
+    @GetMapping("/members")
+    public ResponseEntity<List<AdminMemberResponse>> findAllMembers(AuthMember authMember) {
+        List<AdminMemberResponse> responses = adminQueryService.findAllMemberDetails(authMember);
+
+        return ResponseEntity.ok(responses);
+    }
+
+    @DeleteMapping("/members/{memberId}")
+    public ResponseEntity<Void> deleteMember(AuthMember authMember, @PathVariable Long memberId) {
+        adminCommandService.blockMember(authMember, memberId);
+
+        return ResponseEntity.noContent().build();
+    }
+
+    @GetMapping("/members/{memberId}")
+    public ResponseEntity<AdminMemberDetailResponse> findMember(AuthMember authMember, @PathVariable Long memberId) {
+        AdminMemberDetailResponse response = adminQueryService.findMemberDetail(authMember, memberId);
+
+        return ResponseEntity.ok(response);
+    }
+
+    @DeleteMapping("/topics/{topicId}")
+    public ResponseEntity<Void> deleteTopic(AuthMember authMember, @PathVariable Long topicId) {
+        adminCommandService.deleteTopic(authMember, topicId);
+
+        return ResponseEntity.noContent().build();
+    }
+
+    @DeleteMapping("/topics/{topicId}/images")
+    public ResponseEntity<Void> deleteTopicImage(AuthMember authMember, @PathVariable Long topicId) {
+        adminCommandService.deleteTopicImage(authMember, topicId);
+
+        return ResponseEntity.noContent().build();
+    }
+
+    @DeleteMapping("/pins/{pinId}")
+    public ResponseEntity<Void> deletePin(AuthMember authMember, @PathVariable Long pinId) {
+        adminCommandService.deletePin(authMember, pinId);
+
+        return ResponseEntity.noContent().build();
+    }
+
+    @DeleteMapping("/pins/images/{imageId}")
+    public ResponseEntity<Void> deletePinImage(AuthMember authMember, @PathVariable Long imageId) {
+        adminCommandService.deletePinImage(authMember, imageId);
+
+        return ResponseEntity.noContent().build();
+    }
+
+}

backend/src/main/java/com/mapbefine/mapbefine/auth/application/AuthService.java

@@ -5,6 +5,8 @@
 import com.mapbefine.mapbefine.auth.domain.member.User;
 import com.mapbefine.mapbefine.member.domain.Member;
 import com.mapbefine.mapbefine.member.domain.MemberRepository;
+import com.mapbefine.mapbefine.member.exception.MemberErrorCode;
+import com.mapbefine.mapbefine.member.exception.MemberException.MemberNotFoundException;
 import com.mapbefine.mapbefine.topic.domain.Topic;
 import java.util.List;
 import java.util.Objects;
@@ -60,4 +62,18 @@ private List<Long> getCreatedTopics(Member member) {
                 .toList();
     }
 
+    public boolean isAdmin(Long memberId) {
+        if (Objects.isNull(memberId)) {
+            return false;
+        }
+
+        Member member = findMember(memberId);
+
+        return member.isAdmin();
+    }
+
+    private Member findMember(Long memberId) {
+        return memberRepository.findById(memberId)
+                .orElseThrow(() -> new MemberNotFoundException(MemberErrorCode.MEMBER_NOT_FOUND, memberId));
+    }
 }