feat(M02-C): 建立RBAC与门店数据范围

2026-06-18 10:50:43 +08:00
parent a8c2a3b3e1
commit caacc78545
16 changed files with 334 additions and 16 deletions
@@ -90,7 +90,16 @@ const auth = {
  },
  jwtSecret: secret,
  accessTokenTtlSeconds: 900,
-  sessionTtlSeconds: 604800
+  sessionTtlSeconds: 604800,
+  accessControl: {
+    async getAccessProfile() {
+      return {
+        roles: ['CUSTOMER'],
+        capabilities: ['order.self.read', 'profile.read'],
+        storeIds: []
+      };
+    }
+  }
 };

 const app = await buildApp({ auth });
@@ -114,6 +123,7 @@ const me = await app.inject({
 });
 assert.equal(me.statusCode, 200);
 assert.equal(me.json().data.user.id, '21');
+assert.deepEqual(me.json().data.access.roles, ['CUSTOMER']);

 const logout = await app.inject({
  method: 'POST',