feat(M08-A): 接入顾客端个人中心

2026-06-25 11:43:25 +08:00
parent c7c869c18b
commit 7446852cca
14 changed files with 476 additions and 4 deletions
@@ -0,0 +1,88 @@
+import assert from 'node:assert/strict';
+import { buildApp } from '../dist/app.js';
+import { signAccessToken } from '../dist/auth/jwt.js';
+
+const secret = 'test-only-member-profile-route-secret';
+const token = signAccessToken({
+  sub: '21', sid: '5c4d3af8-c63c-4edb-bf95-b84127bb3f6e',
+  tid: '7', aid: '9', rv: 1
+}, secret, 900);
+const forbiddenToken = signAccessToken({
+  sub: '22', sid: '6c4d3af8-c63c-4edb-bf95-b84127bb3f6e',
+  tid: '7', aid: '9', rv: 1
+}, secret, 900);
+
+let profileInput;
+const app = await buildApp({
+  members: {
+    jwtSecret: secret,
+    authRepository: {
+      async validateSession(sessionId) {
+        return {
+          id: sessionId,
+          tenantId: '7',
+          platformAppId: '9',
+          expiresAt: new Date(Date.now() + 60000),
+          user: {
+            id: sessionId === '6c4d3af8-c63c-4edb-bf95-b84127bb3f6e' ? '22' : '21',
+            tenantId: '7',
+            userType: 'CUSTOMER',
+            status: 'ACTIVE',
+            roleVersion: 1,
+            nickname: '',
+            avatarUrl: '',
+            phone: ''
+          }
+        };
+      }
+    },
+    accessControl: {
+      async getAccessProfile(tenantId, userId) {
+        return userId === '21'
+          ? { roles: ['CUSTOMER'], capabilities: ['profile.read', 'order.self.read'], storeIds: [] }
+          : { roles: ['CUSTOMER'], capabilities: ['order.self.read'], storeIds: [] };
+      }
+    },
+    service: {
+      async listMembers() { throw new Error('not called'); },
+      async getMember() { throw new Error('not called'); },
+      async getMyProfile(input) {
+        profileInput = input;
+        return {
+          memberId: input.userId,
+          nickname: 'Alice',
+          maskedPhone: '138****8000',
+          wallet: { cashBalanceCents: 1000, giftBalanceCents: 200, totalBalanceCents: 1200 },
+          benefits: { availableCoupons: 2, activePackages: 1, packageMinutes: 90 },
+          recentLedger: []
+        };
+      }
+    }
+  }
+});
+
+const profile = await app.inject({
+  method: 'GET',
+  url: '/app-api/profile',
+  headers: { authorization: `Bearer ${token}` }
+});
+assert.equal(profile.statusCode, 200);
+assert.equal(profileInput.tenantId, '7');
+assert.equal(profileInput.userId, '21');
+assert.equal(profile.json().data.wallet.totalBalanceCents, 1200);
+
+const unauthorized = await app.inject({
+  method: 'GET',
+  url: '/app-api/profile'
+});
+assert.equal(unauthorized.statusCode, 401);
+
+const forbidden = await app.inject({
+  method: 'GET',
+  url: '/app-api/profile',
+  headers: { authorization: `Bearer ${forbiddenToken}` }
+});
+assert.equal(forbidden.statusCode, 403);
+
+await app.close();
+console.log('PASS: M08-A customer profile route exposes only the current member.');