ReBAC 고도화 및 애플리케이션 관리 시스템 통합 구현

backend/internal/handler/user_handler.go

@@ -55,12 +55,13 @@ type userListResponse struct {
 }
 
 func (h *UserHandler) ListUsers(c *fiber.Ctx) error {
-	if h.KratosAdmin == nil {
-		return c.Status(fiber.StatusServiceUnavailable).JSON(fiber.Map{"error": "identity provider not available"})
-	}
-
 	// [New] Get requester profile from middleware
-	requester, _ := c.Locals("user_profile").(*domain.UserProfileResponse)
+	var requesterRole string
+	var requesterCompany string
+	if profile, ok := c.Locals("user_profile").(*domain.UserProfileResponse); ok {
+		requesterRole = profile.Role
+		requesterCompany = profile.CompanyCode
+	}
 
 	limit := c.QueryInt("limit", 50)
 	offset := c.QueryInt("offset", 0)
@@ -73,52 +74,82 @@ func (h *UserHandler) ListUsers(c *fiber.Ctx) error {
 		offset = 0
 	}
 
+	// 1. Try Kratos First
 	identities, err := h.KratosAdmin.ListIdentities(c.Context())
+	if err == nil {
+		filtered := make([]service.KratosIdentity, 0, len(identities))
+		searchLower := strings.ToLower(search)
+
+		for _, identity := range identities {
+			email := strings.ToLower(extractTraitString(identity.Traits, "email"))
+			name := strings.ToLower(extractTraitString(identity.Traits, "name"))
+			compCode := extractTraitString(identity.Traits, "companyCode")
+
+			// Tenant Admin filtering
+			if requesterRole == domain.RoleTenantAdmin {
+				if requesterCompany == "" || compCode != requesterCompany {
+					continue
+				}
+			}
+
+			// Search filtering
+			if search != "" {
+				if !strings.Contains(email, searchLower) && !strings.Contains(name, searchLower) {
+					continue
+				}
+			}
+			filtered = append(filtered, identity)
+		}
+
+		total := int64(len(filtered))
+		if offset > len(filtered) {
+			offset = len(filtered)
+		}
+		end := offset + limit
+		if end > len(filtered) {
+			end = len(filtered)
+		}
+
+		items := make([]userSummary, 0, end-offset)
+		for _, identity := range filtered[offset:end] {
+			summary := h.mapIdentitySummary(c.Context(), identity)
+			items = append(items, summary)
+		}
+
+		return c.JSON(userListResponse{Items: items, Limit: limit, Offset: offset, Total: total})
+	}
+
+	// 2. Fallback to Local DB if Kratos is down (Development only recommended)
+	slog.Warn("Kratos unavailable, falling back to local DB for user list", "error", err)
+
+	// Fetch from UserRepo
+	users, total, err := h.UserRepo.List(c.Context(), offset, limit, search)
 	if err != nil {
-		return c.Status(fiber.StatusInternalServerError).JSON(fiber.Map{"error": err.Error()})
+		return c.Status(fiber.StatusInternalServerError).JSON(fiber.Map{"error": "failed to fetch users from both kratos and local db"})
 	}
 
-	filtered := make([]service.KratosIdentity, 0, len(identities))
-	searchLower := strings.ToLower(search)
-
-	for _, identity := range identities {
-		email := strings.ToLower(extractTraitString(identity.Traits, "email"))
-		name := strings.ToLower(extractTraitString(identity.Traits, "name"))
-		compCode := extractTraitString(identity.Traits, "companyCode")
-
-		// 1. Tenant Admin filtering
-		if requester != nil && requester.Role == domain.RoleTenantAdmin {
-			if requester.CompanyCode == "" || compCode != requester.CompanyCode {
-				continue // Skip users from other tenants
-			}
-		}
-
-		// 2. Search filtering
-		if search != "" {
-			if !strings.Contains(email, searchLower) && !strings.Contains(name, searchLower) {
-				continue
-			}
-		}
-
-		filtered = append(filtered, identity)
+	items := make([]userSummary, 0, len(users))
+	for _, u := range users {
+		items = append(items, userSummary{
+			ID:          u.ID,
+			Email:       u.Email,
+			Name:        u.Name,
+			Phone:       u.Phone,
+			Role:        u.Role,
+			Status:      u.Status,
+			CompanyCode: u.CompanyCode,
+			Department:  u.Department,
+			CreatedAt:   u.CreatedAt.Format(time.RFC3339),
+			UpdatedAt:   u.UpdatedAt.Format(time.RFC3339),
+		})
 	}
 
-	total := int64(len(filtered))
-	if offset > len(filtered) {
-		offset = len(filtered)
-	}
-	end := offset + limit
-	if end > len(filtered) {
-		end = len(filtered)
-	}
-
-	items := make([]userSummary, 0, end-offset)
-	for _, identity := range filtered[offset:end] {
-		summary := h.mapIdentitySummary(c.Context(), identity)
-		items = append(items, summary)
-	}
-
-	return c.JSON(userListResponse{Items: items, Limit: limit, Offset: offset, Total: total})
+	return c.JSON(userListResponse{
+		Items:  items,
+		Total:  total,
+		Limit:  limit,
+		Offset: offset,
+	})
 }
 
 func (h *UserHandler) GetUser(c *fiber.Ctx) error {