feat: 重构顺运宝规格主链路 (#88)

2026-08-10 12:24:23 +08:00
parent 5bb1258462
commit d1165b9e17
28 changed files with 985 additions and 531 deletions
@@ -58,7 +58,7 @@ func TestMainPagesReturnOK(t *testing.T) {
 	if err := service.SetupInitialAdmin(db, "admin", "test-password", "test-password", time.Now()); err != nil {
 		t.Fatalf("准备测试管理员失败: %v", err)
 	}
-	token, _, _, err := service.Login(db, "admin", "test-password", time.Now())
+	token, adminUser, _, err := service.Login(db, "admin", "test-password", time.Now())
 	if err != nil {
 		t.Fatalf("准备测试登录 Session 失败: %v", err)
 	}
@@ -84,6 +84,30 @@ func TestMainPagesReturnOK(t *testing.T) {
 		})
 	}

+	if err := service.CreatePurchaser(db, adminUser, "buyer", "buyer-password", "buyer-password", time.Now()); err != nil {
+		t.Fatalf("准备测试采购员失败: %v", err)
+	}
+	buyerToken, _, _, err := service.Login(db, "buyer", "buyer-password", time.Now())
+	if err != nil {
+		t.Fatalf("准备采购员 Session 失败: %v", err)
+	}
+	for _, path := range []string{"/shopee", "/pdd", "/syb", "/tasks", "/clients"} {
+		request := httptest.NewRequest(http.MethodGet, path, nil)
+		request.AddCookie(&http.Cookie{Name: "cmautobuy_session", Value: buyerToken})
+		response := httptest.NewRecorder()
+		router.ServeHTTP(response, request)
+		if response.Code != http.StatusOK {
+			t.Fatalf("采购员 GET %s = %d，期望 200", path, response.Code)
+		}
+	}
+	usersRequest := httptest.NewRequest(http.MethodGet, "/users", nil)
+	usersRequest.AddCookie(&http.Cookie{Name: "cmautobuy_session", Value: buyerToken})
+	usersResponse := httptest.NewRecorder()
+	router.ServeHTTP(usersResponse, usersRequest)
+	if usersResponse.Code != http.StatusForbidden {
+		t.Fatalf("采购员 GET /users = %d，期望 403", usersResponse.Code)
+	}
+
 	sybRequest := httptest.NewRequest(http.MethodGet, "/syb", nil)
 	addAuth(sybRequest)
 	sybResponse := httptest.NewRecorder()