{
  "module": {
    "module": "OpenAPI 接口",
    "moduleKey": "openapi"
  },
  "api": {
    "title": "无状态会员+用户资源合并（场景A）",
    "method": "POST",
    "path": "/openapi/stateless-members/resources/combined-valid-check",
    "description": "返回用户 RBAC 绑定资源与无状态会员授权资源的并集，响应结构与 /openapi/permissions/check 一致。先校验无状态会员有效性，再合并用户角色资源；会员约束不满足时仍返回用户自身资源。",
    "requestParams": {
      "headers": [
        {
          "name": "Authorization",
          "type": "string",
          "required": true,
          "description": "账号登录令牌，格式 Bearer TOKEN"
        },
        {
          "name": "X-Member-Key",
          "type": "string",
          "required": true,
          "description": "会员密钥令牌"
        },
        {
          "name": "X-Site",
          "type": "string",
          "required": true,
          "description": "站点标识"
        }
      ]
    },
    "responseExample": {
      "success": {
        "code": "0000",
        "message": "校验通过",
        "data": {
          "user": {
            "id": "u001",
            "code": "CU000001",
            "username": "张三",
            "type": "clientUser"
          },
          "resources": [],
          "resourcesByType": {},
          "resourceUrls": []
        }
      }
    },
    "notes": [
      "与 /openapi/stateless-members/resources/valid-check 的区别：本接口始终包含用户 RBAC 资源，并叠加会员模块资源",
      "会员约束失败时不抛错，仍返回用户 RBAC 资源",
      "相同资源按 _id/id 去重"
    ]
  }
}