费用提交

lastleg-service/src/test/java/com/baiyue/lastleg/financefee/PlatformOverseasFeeSourceControllerSecurityTest.java

@@ -0,0 +1,47 @@
+package com.baiyue.lastleg.financefee;
+
+import com.baiyue.common.security.AuthenticatedUser;
+import com.baiyue.lastleg.financefee.controller.PlatformOverseasFeeSourceController;
+import com.baiyue.lastleg.financefee.service.OverseasFeeDeliveryService;
+import com.baiyue.lastleg.financefee.service.OverseasFeeSourceService;
+import com.baiyue.lastleg.financefee.service.OverseasManualFeeService;
+import org.junit.jupiter.api.Test;
+import org.springframework.test.web.servlet.setup.MockMvcBuilders;
+import org.springframework.web.method.support.HandlerMethodArgumentResolver;
+
+import java.util.Set;
+
+import static org.springframework.test.web.servlet.request.MockMvcRequestBuilders.get;
+import static org.springframework.test.web.servlet.result.MockMvcResultMatchers.status;
+import static org.mockito.Mockito.mock;
+
+class PlatformOverseasFeeSourceControllerSecurityTest {
+    @Test
+    void rejectsNonPlatformTenantBeforeReadingFeeData() throws Exception {
+        var controller = new PlatformOverseasFeeSourceController(
+            mock(OverseasFeeSourceService.class), mock(OverseasManualFeeService.class),
+            mock(OverseasFeeDeliveryService.class));
+        var mvc = MockMvcBuilders.standaloneSetup(controller)
+            .setCustomArgumentResolvers(identity(new AuthenticatedUser(7L, 42L, 0L, 1L,
+                "customer-user", "LASTLEG", "WEB", Set.of())))
+            .build();
+
+        mvc.perform(get("/api/platform/v1/last-leg/finance-fee-sources"))
+            .andExpect(status().isForbidden());
+    }
+
+    private static HandlerMethodArgumentResolver identity(AuthenticatedUser user) {
+        return new HandlerMethodArgumentResolver() {
+            @Override public boolean supportsParameter(org.springframework.core.MethodParameter parameter) {
+                return parameter.getParameterType() == AuthenticatedUser.class;
+            }
+
+            @Override public Object resolveArgument(org.springframework.core.MethodParameter parameter,
+                org.springframework.web.method.support.ModelAndViewContainer container,
+                org.springframework.web.context.request.NativeWebRequest request,
+                org.springframework.web.bind.support.WebDataBinderFactory binder) {
+                return user;
+            }
+        };
+    }
+}

lastleg-service/src/test/java/com/baiyue/lastleg/procurement/service/ProcurementDirectionPersistenceTest.java

@@ -0,0 +1,31 @@
+package com.baiyue.lastleg.procurement.service;
+
+import com.baomidou.mybatisplus.core.MybatisConfiguration;
+import com.baomidou.mybatisplus.extension.spring.MybatisSqlSessionFactoryBean;
+import com.baiyue.lastleg.procurement.mapper.ProcurementDirectionMapper;
+import com.baiyue.lastleg.procurement.repository.ProcurementDirectionRepository;
+import org.junit.jupiter.api.Test;
+import org.mybatis.spring.SqlSessionTemplate;
+import org.springframework.jdbc.core.JdbcTemplate;
+import org.springframework.jdbc.datasource.DriverManagerDataSource;
+import java.util.UUID;
+import static org.assertj.core.api.Assertions.assertThat;
+
+class ProcurementDirectionPersistenceTest {
+    @Test void directionGateReadsOnlyThisOrdersRecordedFacts() throws Exception {
+        var ds = new DriverManagerDataSource("jdbc:h2:mem:"+UUID.randomUUID()+";MODE=MySQL;DB_CLOSE_DELAY=-1","sa","");
+        var jdbc = new JdbcTemplate(ds);
+        jdbc.execute("CREATE TABLE ll_procurement_flow(order_id BIGINT PRIMARY KEY,purchased_at TIMESTAMP,actual_warehouse_id BIGINT,overseas_shipped_at TIMESTAMP)");
+        var config = new MybatisConfiguration(); config.addMapper(ProcurementDirectionMapper.class);
+        var factory = new MybatisSqlSessionFactoryBean(); factory.setDataSource(ds); factory.setConfiguration(config);
+        var repository = new ProcurementDirectionRepository(new SqlSessionTemplate(factory.getObject()).getMapper(ProcurementDirectionMapper.class));
+        assertThat(repository.hasStarted(1)).isFalse();
+        jdbc.update("INSERT INTO ll_procurement_flow(order_id) VALUES(1)");
+        assertThat(repository.hasStarted(1)).isFalse();
+        jdbc.update("UPDATE ll_procurement_flow SET purchased_at=CURRENT_TIMESTAMP WHERE order_id=1");
+        assertThat(repository.hasStarted(1)).isTrue();
+        assertThat(repository.hasStarted(2)).isFalse();
+        jdbc.update("UPDATE ll_procurement_flow SET purchased_at=NULL,actual_warehouse_id=91 WHERE order_id=1");
+        assertThat(repository.hasStarted(1)).isTrue();
+    }
+}