修改提交

lastleg-service/src/test/java/com/baiyue/lastleg/relabel/controller/MerchantRelabelApplicationControllerTest.java

@@ -0,0 +1,46 @@
+package com.baiyue.lastleg.relabel.controller;
+
+import com.baiyue.common.security.AuthenticatedUser;
+import com.baiyue.lastleg.relabel.dto.RelabelRequests;
+import com.baiyue.lastleg.relabel.service.RelabelApplicationService;
+import org.junit.jupiter.api.Test;
+import org.springframework.test.util.ReflectionTestUtils;
+import org.springframework.web.server.ResponseStatusException;
+
+import java.util.Set;
+
+import static org.junit.jupiter.api.Assertions.assertThrows;
+import static org.mockito.Mockito.mock;
+import static org.mockito.Mockito.verify;
+
+class MerchantRelabelApplicationControllerTest {
+    private final RelabelApplicationService service = mock(RelabelApplicationService.class);
+    private final MerchantRelabelApplicationController controller = controller();
+    private final RelabelRequests.Query query = new RelabelRequests.Query(
+        1, 20, null, null, null, null, null, null, null);
+
+    @Test
+    void merchantPageAndDetailUseOnlyAuthenticatedTenant() {
+        AuthenticatedUser user = user(100L, "MERCHANT");
+        controller.page(user, query);
+        controller.detail(user, "RL001");
+        verify(service).page("100", query);
+        verify(service).detail("100", "RL001");
+    }
+
+    @Test
+    void merchantEndpointRejectsPlatformIdentity() {
+        assertThrows(ResponseStatusException.class,
+            () -> controller.page(user(0L, "PLATFORM"), query));
+    }
+
+    private static AuthenticatedUser user(long tenantId, String appCode) {
+        return new AuthenticatedUser(1L, tenantId, tenantId, 9L, "merchant", appCode, "WEB", Set.of());
+    }
+
+    private MerchantRelabelApplicationController controller() {
+        MerchantRelabelApplicationController controller = new MerchantRelabelApplicationController();
+        ReflectionTestUtils.setField(controller, "service", service);
+        return controller;
+    }
+}