feat: add account subscription authorization

apps/api/tests.py

@@ -64,7 +64,11 @@ from apps.moderation.models import SensitiveWord
 from apps.moderation.providers.keyword import reset_keyword_matcher_cache
 from apps.portal.models import DownloadRelease
 from apps.licensing.models import ClientDevice, SoftwareOrder, SoftwarePlan
-from apps.licensing.services import create_software_order, register_device
+from apps.licensing.services import (
+    create_software_order,
+    grant_software_entitlement,
+    register_device,
+)
 from apps.users.models import ApiKey
 from apps.users.models import UserWallet
 
@@ -1417,6 +1421,111 @@ class GenerateApiTests(TestCase):
         with patch("apps.api.generation.get_provider", return_value=provider or self.provider):
             return self.client.post(path, payload, format="json", **self.auth_header(), **extra)
 
+    def create_cmshopee_entitlement(self, *, starts_at=None):
+        plan = SoftwarePlan.objects.create(
+            product_code=ClientDevice.ProductCode.CMSHOPEE,
+            name="虾皮圈月度订阅",
+            duration_days=30,
+            price=Decimal("19.90"),
+            device_limit=1,
+            grace_days=3,
+        )
+        return grant_software_entitlement(
+            user=self.user,
+            plan=plan,
+            reason="API 订阅授权测试",
+            starts_at=starts_at,
+        )
+
+    def test_cmshopee_subscription_status_is_required_without_entitlement(self):
+        response = self.client.get(
+            "/api/v1/cmshopee/subscription/status",
+            **self.auth_header(),
+        )
+
+        self.assertEqual(response.status_code, 200)
+        self.assertEqual(
+            response.json(),
+            {
+                "product_code": "cmshopee",
+                "status": "required",
+                "allowed": False,
+                "code": "subscription_required",
+                "plan": None,
+            },
+        )
+
+    def test_cmshopee_subscription_status_is_active_without_device_session(self):
+        entitlement = self.create_cmshopee_entitlement()
+
+        response = self.client.get(
+            "/api/v1/cmshopee/subscription/status",
+            **self.auth_header(),
+        )
+
+        self.assertEqual(response.status_code, 200)
+        data = response.json()
+        self.assertEqual(data["status"], "active")
+        self.assertTrue(data["allowed"])
+        self.assertIsNone(data["code"])
+        self.assertEqual(data["plan"]["name"], entitlement.plan_name)
+
+    def test_cmshopee_subscription_status_is_expired_after_grace_period(self):
+        self.create_cmshopee_entitlement(
+            starts_at=timezone.now() - timedelta(days=40),
+        )
+
+        response = self.client.get(
+            "/api/v1/cmshopee/subscription/status",
+            **self.auth_header(),
+        )
+
+        self.assertEqual(response.status_code, 200)
+        data = response.json()
+        self.assertEqual(data["status"], "expired")
+        self.assertFalse(data["allowed"])
+        self.assertEqual(data["code"], "subscription_expired")
+
+    @override_settings(CMSHOPEE_SUBSCRIPTION_ENFORCEMENT=True)
+    def test_cmshopee_enforcement_rejects_without_subscription(self):
+        response = self.post_with_provider(
+            "/api/v1/cmshopee/generate/title",
+            {"prompt": "生成一个商品标题", "model": self.title_alias},
+        )
+
+        self.assertEqual(response.status_code, 403)
+        self.assertEqual(response.json()["error"]["code"], "subscription_required")
+        self.assertEqual(self.provider.text_calls, [])
+        self.assert_generation_not_charged()
+
+    @override_settings(CMSHOPEE_SUBSCRIPTION_ENFORCEMENT=True)
+    def test_cmshopee_account_subscription_allows_multiple_device_contexts(self):
+        self.create_cmshopee_entitlement()
+
+        first_response = self.post_with_provider(
+            "/api/v1/cmshopee/generate/title",
+            {"prompt": "生成一个商品标题", "model": self.title_alias},
+        )
+        second_response = self.post_with_provider(
+            "/api/v1/cmshopee/generate/title",
+            {"prompt": "再生成一个商品标题", "model": self.title_alias},
+            HTTP_X_DEVICE_SESSION="stale-device-session",
+        )
+
+        self.assertEqual(first_response.status_code, 200)
+        self.assertEqual(second_response.status_code, 200)
+        self.assertEqual(len(self.provider.text_calls), 2)
+
+    @override_settings(CMSHOPEE_SUBSCRIPTION_ENFORCEMENT=True)
+    def test_generic_generation_remains_available_without_subscription(self):
+        response = self.post_with_provider(
+            "/api/v1/generate/title",
+            {"prompt": "通用接口标题", "model": self.title_alias},
+        )
+
+        self.assertEqual(response.status_code, 200)
+        self.assertEqual(len(self.provider.text_calls), 1)
+
     def telemetry_event_from_logs(self, captured):
         events = [
             getattr(record, "generation_route_usage", None)