public interface User {
    String getId();
    String getName();
    UserType getType();
    boolean isEnabled();
    Date getCreateTime();
    // 其他通用方法
}

具体用户实现

各种用户类型实现基础接口，并添加特定属性：

public class PersonUser implements User {
    private String employeeId;
    private String department;
    private String position;
    // 个人用户特有属性
}

public class DeviceUser implements User {
    private String serialNumber;
    private String deviceType;
    private String location;
    // 设备用户特有属性
}

public abstract class AbstractUser implements User {
    protected String id;
    protected String name;
    protected UserType type;
    protected boolean enabled;
    protected Date createTime;
    protected Map<String, Object> attributes;
    
    // 通用属性的getter和setter方法
    @Override
    public String getId() {
        return id;
    }
    
    @Override
    public String getName() {
        return name;
    }
    
    @Override
    public UserType getType() {
        return type;
    }
    
    @Override
    public boolean isEnabled() {
        return enabled;
    }
    
    @Override
    public Date getCreateTime() {
        return createTime;
    }
    
    // 动态属性支持
    public void setAttribute(String key, Object value) {
        if (attributes == null) {
            attributes = new HashMap<>();
        }
        attributes.put(key, value);
    }
    
    public Object getAttribute(String key) {
        return attributes != null ? attributes.get(key) : null;
    }
}

个人用户实现

public class PersonUser extends AbstractUser {
    private String employeeId;
    private String department;
    private String position;
    private String email;
    private String phoneNumber;
    private Date hireDate;
    private List<String> roles;
    
    public PersonUser() {
        this.type = UserType.PERSON;
    }
    
    // 个人用户特有属性的getter和setter方法
    public String getEmployeeId() {
        return employeeId;
    }
    
    public void setEmployeeId(String employeeId) {
        this.employeeId = employeeId;
    }
    
    public String getDepartment() {
        return department;
    }
    
    public void setDepartment(String department) {
        this.department = department;
    }
    
    // 其他属性的getter和setter方法...
}

设备用户实现

public class DeviceUser extends AbstractUser {
    private String serialNumber;
    private String deviceType;
    private String location;
    private String ipAddress;
    private Date lastHeartbeat;
    private List<String> supportedProtocols;
    
    public DeviceUser() {
        this.type = UserType.DEVICE;
    }
    
    // 设备用户特有属性的getter和setter方法
    public String getSerialNumber() {
        return serialNumber;
    }
    
    public void setSerialNumber(String serialNumber) {
        this.serialNumber = serialNumber;
    }
    
    public String getDeviceType() {
        return deviceType;
    }
    
    public void setDeviceType(String deviceType) {
        this.deviceType = deviceType;
    }
    
    // 其他属性的getter和setter方法...
}

应用用户实现

public class ApplicationUser extends AbstractUser {
    private String clientId;
    private String clientSecret;
    private String redirectUri;
    private List<String> scopes;
    private Date lastAccessTime;
    private boolean trusted;
    
    public ApplicationUser() {
        this.type = UserType.APPLICATION;
    }
    
    // 应用用户特有属性的getter和setter方法
    public String getClientId() {
        return clientId;
    }
    
    public void setClientId(String clientId) {
        this.clientId = clientId;
    }
    
    public String getClientSecret() {
        return clientSecret;
    }
    
    public void setClientSecret(String clientSecret) {
        this.clientSecret = clientSecret;
    }
    
    // 其他属性的getter和setter方法...
}

API账号用户实现

public class ApiAccountUser extends AbstractUser {
    private String apiKey;
    private String apiSecret;
    private List<String> allowedIpRanges;
    private int rateLimit;
    private Date expiryDate;
    private boolean revoked;
    
    public ApiAccountUser() {
        this.type = UserType.API_ACCOUNT;
    }
    
    // API账号用户特有属性的getter和setter方法
    public String getApiKey() {
        return apiKey;
    }
    
    public void setApiKey(String apiKey) {
        this.apiKey = apiKey;
    }
    
    public String getApiSecret() {
        return apiSecret;
    }
    
    public void setApiSecret(String apiSecret) {
        this.apiSecret = apiSecret;
    }
    
    // 其他属性的getter和setter方法...
}

用户模型管理服务

用户管理接口

public interface UserService {
    User createUser(UserCreationRequest request);
    User getUserById(String userId);
    List<User> getUsersByType(UserType type);
    List<User> searchUsers(UserSearchCriteria criteria);
    void updateUser(String userId, UserUpdateRequest request);
    void deleteUser(String userId);
    boolean authenticateUser(String userId, AuthenticationCredentials credentials);
}

用户类型管理

public class UserTypeManager {
    private Map<UserType, UserFactory> userFactories;
    
    public UserTypeManager() {
        initializeUserFactories();
    }
    
    private void initializeUserFactories() {
        userFactories = new HashMap<>();
        userFactories.put(UserType.PERSON, new PersonUserFactory());
        userFactories.put(UserType.DEVICE, new DeviceUserFactory());
        userFactories.put(UserType.APPLICATION, new ApplicationUserFactory());
        userFactories.put(UserType.API_ACCOUNT, new ApiAccountUserFactory());
    }
    
    public User createUser(UserType type, Map<String, Object> properties) {
        UserFactory factory = userFactories.get(type);
        if (factory == null) {
            throw new UnsupportedUserTypeException("Unsupported user type: " + type);
        }
        return factory.createUser(properties);
    }
}

用户工厂实现

public interface UserFactory {
    User createUser(Map<String, Object> properties);
}

public class PersonUserFactory implements UserFactory {
    @Override
    public User createUser(Map<String, Object> properties) {
        PersonUser user = new PersonUser();
        user.setId((String) properties.get("id"));
        user.setName((String) properties.get("name"));
        user.setEmployeeId((String) properties.get("employeeId"));
        user.setDepartment((String) properties.get("department"));
        // 设置其他属性...
        return user;
    }
}

// 其他用户类型的工厂实现...

结论

用户模型抽象是统一身份治理平台设计的基础工作。通过对个人用户、设备、应用和API账号的深入分析和抽象建模，我们可以构建一个灵活、可扩展、安全的统一用户中心。

在实际设计中，需要根据企业的具体需求和业务场景，对用户模型进行定制化调整。同时，要充分考虑系统的可扩展性和安全性，确保用户模型能够适应未来的发展需求。

在下一篇文章中，我们将深入探讨组织架构设计，包括如何支持多维级联、动态团队、虚拟组等复杂组织结构，帮助您构建更加灵活和强大的统一用户中心。