fix: align backend APIs and upload flow

GroupService.WebApi/Application/GroupMember/GroupMemberService.cs

@@ -24,13 +24,17 @@ namespace GroupService.WebApi.Application.GroupMember
             this.mapper = mapper;
         }
 
-        public async Task<Result<List<GroupMemberResponse>>> GetByGroupIdAsync(Guid groupId)
+        public async Task<Result<List<GroupMemberResponse>>> GetByGroupIdAsync(Guid groupId, Guid userId)
         {
             var group = await groupReposity.FindByIdAsync(groupId);
             if (group is null)
             {
                 return Result<List<GroupMemberResponse>>.Fail(ResultCode.GROUP_NOT_FOUND);
             }
+            if (!await reposity.CheckMemberExistAsync(groupId, userId))
+            {
+                return Result<List<GroupMemberResponse>>.Fail(ResultCode.PERMISSION_DENIED);
+            }
             var members = await reposity.FindByGroupIdAsync(groupId);
 
             return Result<List<GroupMemberResponse>>.Success(mapper.Map<List<GroupMemberResponse>>(members.ToList()));
@@ -78,14 +82,32 @@ namespace GroupService.WebApi.Application.GroupMember
             }
 
             var operatorMember = await reposity.FindOneByGroupIdAndUserIdAsync(member.GroupId, operatorId);
-            if (operatorMember is null || operatorMember.Role == Domain.Enums.GroupMemberRole.Normal)
+            if (operatorMember is null || operatorMember.Id == member.Id ||
+                member.Role == Domain.Enums.GroupMemberRole.Master ||
+                operatorMember.Role <= member.Role)
             {
                 return Result.Fail(ResultCode.PERMISSION_DENIED);
             }
 
-            member.SoftDelete();
+            member.Leave();
 
             return Result.Success();
         }
+
+        public async Task<Result<object>> LeaveAsync(Guid groupId, Guid userId)
+        {
+            var member = await reposity.FindOneByGroupIdAndUserIdAsync(groupId, userId);
+            if (member is null)
+            {
+                return Result.Fail(ResultCode.GROUP_MEMBER_NOT_FOUNT);
+            }
+            if (member.Role == Domain.Enums.GroupMemberRole.Master)
+            {
+                return Result.Fail<object>(ResultCode.PERMISSION_DENIED, "群主不能直接退群，请使用解散群接口");
+            }
+
+            member.Leave();
+            return Result.Success();
+        }
     }
 }