chengma/cmroubao
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(t235): validate ERP user session by id

Browse Source
This commit is contained in:
QiuSW
2026-07-29 11:42:41 +08:00
parent dcc9ce34e1
commit 81f75cc372
9 changed files with 197 additions and 43 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend-api/internal/platform/shunyunbao/source_test.go
+10 -4
View File
@@ -31,12 +31,15 @@ func TestSessionManagerQueryOrderUsesVerifiedSessionAndAllowlist(t *testing.T) {
t.Fatalf("login captcha cookie = %v / %v", cookie, err)
}
http.SetCookie(writer, &http.Cookie{Name: "authenticated", Value: "yes", Path: "/"})
_, _ = writer.Write([]byte(`{"status":true,"data":{"user":{"id":1}}}`))
_, _ = writer.Write([]byte(`{"status":true,"data":{"user":{"id":1,"username":"test-user"}}}`))
case UserPath:
if request.URL.Query().Get("id") != "1" {
t.Fatalf("user query = %q", request.URL.RawQuery)
}
if cookie, err := request.Cookie("authenticated"); err != nil || cookie.Value != "yes" {
t.Fatalf("user cookie = %v / %v", cookie, err)
}
_, _ = writer.Write([]byte(`{"status":true,"data":{"id":1}}`))
_, _ = writer.Write([]byte(`{"status":true,"data":{"id":1,"username":"test-user"}}`))
case StockListTotalPath:
assertStockPayload(t, request, "SOURCE-12", 0, 1, 20)
_, _ = writer.Write([]byte(`{"status":true,"data":1}`))
@@ -100,9 +103,12 @@ func TestSessionManagerQueryCreatedRangePaginatesAndDeduplicates(t *testing.T) {
_, _ = writer.Write([]byte("captcha"))
case LoginPath:
http.SetCookie(writer, &http.Cookie{Name: "authenticated", Value: "yes", Path: "/"})
_, _ = writer.Write([]byte(`{"status":true,"data":{"user":{"id":1}}}`))
_, _ = writer.Write([]byte(`{"status":true,"data":{"user":{"id":1,"username":"test-user"}}}`))
case UserPath:
_, _ = writer.Write([]byte(`{"status":true,"data":{"id":1}}`))
if request.URL.Query().Get("id") != "1" {
t.Fatalf("user query = %q", request.URL.RawQuery)
}
_, _ = writer.Write([]byte(`{"status":true,"data":{"id":1,"username":"test-user"}}`))
case StockListTotalPath:
assertStockPayload(t, request, "2026-07-22,2026-07-28", 0, 1, 20)
_, _ = writer.Write([]byte(`{"status":true,"data":21}`))