二期内容提交

2026-08-04 10:07:45 +08:00
parent b2b4ff429d
commit 57b54a5236
184 changed files with 13195 additions and 5 deletions
@@ -0,0 +1,59 @@
+package com.baiyue.file.controller;
+
+import com.baiyue.common.core.exception.BizException;
+import com.baiyue.common.security.AuthenticatedUser;
+import com.baiyue.file.service.MeasurementImageService;
+import org.junit.jupiter.api.Test;
+import org.springframework.http.MediaType;
+import org.springframework.mock.web.MockMultipartFile;
+import org.springframework.security.access.prepost.PreAuthorize;
+import org.springframework.web.bind.annotation.PostMapping;
+import org.springframework.web.bind.annotation.RequestMapping;
+
+import java.lang.reflect.Method;
+import java.util.Set;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.assertj.core.api.Assertions.assertThatThrownBy;
+import static org.mockito.Mockito.mock;
+import static org.mockito.Mockito.verify;
+
+class PlatformMeasurementImageControllerContractTest {
+    private final MeasurementImageService images = mock(MeasurementImageService.class);
+    private final PlatformMeasurementImageController controller =
+        new PlatformMeasurementImageController(images);
+
+    @Test
+    void 暴露平台测量图片multipart入口并校验重量维护权限() throws Exception {
+        RequestMapping base = PlatformMeasurementImageController.class.getAnnotation(RequestMapping.class);
+        assertThat(base.value()).containsExactly("/api/platform/v1/files/measurements");
+        Method method = PlatformMeasurementImageController.class.getDeclaredMethod("upload",
+            AuthenticatedUser.class, long.class, long.class, org.springframework.web.multipart.MultipartFile.class);
+        assertThat(method.getAnnotation(PostMapping.class).consumes())
+            .containsExactly(MediaType.MULTIPART_FORM_DATA_VALUE);
+        assertThat(method.getAnnotation(PreAuthorize.class).value())
+            .isEqualTo("hasAuthority('platform:firstleg:inbound:weight:edit')");
+    }
+
+    @Test
+    void 商户身份不能调用平台上传接口() {
+        var file = new MockMultipartFile("file", "weight.png", MediaType.IMAGE_PNG_VALUE, new byte[]{1});
+        var merchant = new AuthenticatedUser(2L, 10001L, 10001L, 2L,
+            "merchant", "MERCHANT", "WEB", Set.of());
+
+        assertThatThrownBy(() -> controller.upload(merchant, 10001L, 88L, file))
+            .isInstanceOf(BizException.class);
+    }
+
+    @Test
+    void 下载始终同时使用租户入库单和文件ID隔离() {
+        var platform = new AuthenticatedUser(1L, 0L, 0L, 1L,
+            "admin", "PLATFORM", "WEB", Set.of());
+        org.mockito.Mockito.when(images.download(10001L, 88L, 99L)).thenReturn(
+            new MeasurementImageService.Download("weight.png", MediaType.IMAGE_PNG_VALUE, new byte[]{1, 2}));
+
+        controller.download(platform, 10001L, 88L, 99L);
+
+        verify(images).download(10001L, 88L, 99L);
+    }
+}