优化

2026-08-08 11:33:18 +08:00
parent 2ee78aafc2
commit 92b3b9b1fb
37 changed files with 17226 additions and 39 deletions
@@ -725,13 +725,12 @@ async function rbacAndMemberModule() {
    assertEqual(json.data?.status, 'DISABLED', 'role status')
  }, ({ json }) => ({ roleId: json.data.id, status: json.data.status }))
  if (disabledRole) {
-  await softApiStep('menu-permissions', 'disabled role is reflected by live permission query', {
+  await softApiStep('menu-permissions', 'disabled role revokes stale token permission query', {
    method: 'GET', path: '/api/merchant/v1/iam/authorization/permissions', token: memberToken,
  }, ({ json, status }) => {
-    assertEqual(status, 200, 'HTTP status')
-    requireSuccess(json)
-    assertEqual(arrayData(json.data).length, 0, 'effective backend permission count')
-  }, ({ json }) => ({ backendPermissions: json?.data, visibleClientMenus: visibleClientMenus(arrayData(json?.data)) }))
+    assertEqual(status, 401, 'HTTP status')
+    assertEqual(String(json?.code), 'A0401', 'business code')
+  }, ({ json }) => ({ rejectionCode: json?.code, message: json?.message }))
  await softApiStep('menu-permissions', 'disabled role blocks stale token order access', {
    method: 'GET', path: '/api/merchant/v1/orders/first-leg?page=1&size=20', token: memberToken,
  }, ({ json, status }) => {