Codex
114 lines
2.9 KiB
JavaScript
114 lines
2.9 KiB
JavaScript
import assert from 'node:assert/strict';
|
|
import { buildApp } from '../dist/app.js';
|
|
import { signAccessToken } from '../dist/auth/jwt.js';
|
|
|
|
const secret = 'test-only-order-query-jwt-secret-32';
|
|
const token = signAccessToken({
|
|
sub: '21',
|
|
sid: '5c4d3af8-c63c-4edb-bf95-b84127bb3f6e',
|
|
tid: '7',
|
|
aid: '9',
|
|
rv: 1
|
|
}, secret, 900);
|
|
const authRepository = {
|
|
async validateSession() {
|
|
return {
|
|
id: '5c4d3af8-c63c-4edb-bf95-b84127bb3f6e',
|
|
tenantId: '7',
|
|
platformAppId: '9',
|
|
expiresAt: new Date(Date.now() + 60000),
|
|
user: {
|
|
id: '21',
|
|
tenantId: '7',
|
|
userType: 'CUSTOMER',
|
|
status: 'ACTIVE',
|
|
roleVersion: 1,
|
|
nickname: '',
|
|
avatarUrl: '',
|
|
phone: ''
|
|
}
|
|
};
|
|
}
|
|
};
|
|
let listInput;
|
|
let detailInput;
|
|
const app = await buildApp({
|
|
orderQuery: {
|
|
jwtSecret: secret,
|
|
authRepository,
|
|
accessControl: {
|
|
async getAccessProfile() {
|
|
return { roles: ['CUSTOMER'], capabilities: [], storeIds: [] };
|
|
}
|
|
},
|
|
repository: {
|
|
async listMine(input) {
|
|
listInput = input;
|
|
return {
|
|
items: [{
|
|
id: '31',
|
|
orderNo: 'QP202606240001',
|
|
storeName: '近店',
|
|
roomName: '青竹房',
|
|
status: 'PENDING_PAYMENT',
|
|
totalAmountCents: 3600,
|
|
latestPayment: null
|
|
}],
|
|
total: 1,
|
|
page: input.page,
|
|
pageSize: input.pageSize
|
|
};
|
|
},
|
|
async getMine(input) {
|
|
detailInput = input;
|
|
return {
|
|
id: input.orderId,
|
|
orderNo: 'QP202606240001',
|
|
storeName: '近店',
|
|
roomName: '青竹房',
|
|
status: 'PENDING_PAYMENT',
|
|
totalAmountCents: 3600,
|
|
latestPayment: null
|
|
};
|
|
}
|
|
}
|
|
}
|
|
});
|
|
|
|
const listed = await app.inject({
|
|
method: 'GET',
|
|
url: '/app-api/orders?page=2&pageSize=5&status=PENDING_PAYMENT',
|
|
headers: { authorization: `Bearer ${token}` }
|
|
});
|
|
assert.equal(listed.statusCode, 200);
|
|
assert.equal(listed.json().data.items[0].id, '31');
|
|
assert.equal(listInput.tenantId, '7');
|
|
assert.equal(listInput.userId, '21');
|
|
assert.equal(listInput.page, 2);
|
|
assert.equal(listInput.pageSize, 5);
|
|
assert.equal(listInput.status, 'PENDING_PAYMENT');
|
|
|
|
const detail = await app.inject({
|
|
method: 'GET',
|
|
url: '/app-api/orders/31',
|
|
headers: { authorization: `Bearer ${token}` }
|
|
});
|
|
assert.equal(detail.statusCode, 200);
|
|
assert.equal(detailInput.orderId, '31');
|
|
|
|
const unauthenticated = await app.inject({
|
|
method: 'GET',
|
|
url: '/app-api/orders'
|
|
});
|
|
assert.equal(unauthenticated.statusCode, 401);
|
|
|
|
const invalid = await app.inject({
|
|
method: 'GET',
|
|
url: '/app-api/orders?pageSize=999',
|
|
headers: { authorization: `Bearer ${token}` }
|
|
});
|
|
assert.equal(invalid.statusCode, 400);
|
|
|
|
await app.close();
|
|
console.log('PASS: M08-A customer order query routes expose scoped list and detail.');
|