修改提交

lastleg-service/src/test/java/com/baiyue/lastleg/discard/controller/MerchantCargoDiscardControllerTest.java

@@ -0,0 +1,48 @@
+package com.baiyue.lastleg.discard.controller;
+
+import com.baiyue.common.security.AuthenticatedUser;
+import com.baiyue.lastleg.discard.dto.CargoDiscardRequests;
+import com.baiyue.lastleg.discard.service.CargoDiscardService;
+import org.junit.jupiter.api.Test;
+import org.springframework.test.util.ReflectionTestUtils;
+import org.springframework.web.server.ResponseStatusException;
+
+import java.util.Set;
+
+import static org.junit.jupiter.api.Assertions.assertThrows;
+import static org.mockito.Mockito.mock;
+import static org.mockito.Mockito.verify;
+
+class MerchantCargoDiscardControllerTest {
+    private final CargoDiscardService service = mock(CargoDiscardService.class);
+    private final MerchantCargoDiscardController controller = controller();
+    private final CargoDiscardRequests.Query query = new CargoDiscardRequests.Query(
+        1, 20, null, null, null, null, null, null);
+
+    @Test
+    void merchantQueriesUseOnlyAuthenticatedTenant() {
+        AuthenticatedUser user = user(100L, "MERCHANT");
+        controller.page(user, query);
+        controller.candidates(user, "IN001");
+        controller.detail(user, "DS001");
+        verify(service).page("100", query);
+        verify(service).candidates("100", "IN001");
+        verify(service).detail("100", "DS001");
+    }
+
+    @Test
+    void merchantEndpointRejectsPlatformIdentity() {
+        assertThrows(ResponseStatusException.class,
+            () -> controller.page(user(0L, "PLATFORM"), query));
+    }
+
+    private static AuthenticatedUser user(long tenantId, String appCode) {
+        return new AuthenticatedUser(1L, tenantId, tenantId, 9L, "merchant", appCode, "WEB", Set.of());
+    }
+
+    private MerchantCargoDiscardController controller() {
+        MerchantCargoDiscardController controller = new MerchantCargoDiscardController();
+        ReflectionTestUtils.setField(controller, "service", service);
+        return controller;
+    }
+}