baiyue-firstleg/event-bridge-service/src/test/java/com/baiyue/eventbridge/security/InternalServiceTokenGuardTest.java

package com.baiyue.eventbridge.security;

import org.junit.jupiter.api.DisplayName;
import org.junit.jupiter.api.Test;
import org.springframework.web.server.ResponseStatusException;

import static org.assertj.core.api.Assertions.assertThatCode;
import static org.assertj.core.api.Assertions.assertThatThrownBy;

@DisplayName("内部服务令牌校验")
class InternalServiceTokenGuardTest {
    @Test
    void validTokenAllowsAccess() {
        InternalServiceTokenGuard guard = new InternalServiceTokenGuard("a-secure-internal-token");
        assertThatCode(() -> guard.verify("a-secure-internal-token")).doesNotThrowAnyException();
    }

    @Test
    void unconfiguredTokenDisablesReceiveEndpoint() {
        InternalServiceTokenGuard guard = new InternalServiceTokenGuard("");
        assertThatThrownBy(() -> guard.verify("anything"))
                .isInstanceOf(ResponseStatusException.class)
                .hasMessageContaining("接口已关闭");
    }

    @Test
    void invalidTokenIsRejected() {
        InternalServiceTokenGuard guard = new InternalServiceTokenGuard("expected");
        assertThatThrownBy(() -> guard.verify("wrong"))
                .isInstanceOf(ResponseStatusException.class)
                .hasMessageContaining("令牌无效");
    }
}