修改提交

2026-08-21 17:21:26 +08:00
parent af97217184
commit bbd303cd65
36 changed files with 1045 additions and 100 deletions
@@ -0,0 +1,49 @@
+package com.baiyue.lastleg.transfer.controller;
+
+import com.baiyue.common.security.AuthenticatedUser;
+import com.baiyue.lastleg.transfer.dto.WarehouseTransferRequests;
+import com.baiyue.lastleg.transfer.service.WarehouseTransferService;
+import org.junit.jupiter.api.Test;
+import org.springframework.test.util.ReflectionTestUtils;
+import org.springframework.web.server.ResponseStatusException;
+
+import java.util.Set;
+
+import static org.junit.jupiter.api.Assertions.assertThrows;
+import static org.mockito.Mockito.mock;
+import static org.mockito.Mockito.verify;
+
+class MerchantWarehouseTransferControllerTest {
+    private final WarehouseTransferService service = mock(WarehouseTransferService.class);
+    private final MerchantWarehouseTransferController controller = controller();
+    private final WarehouseTransferRequests.Query query = new WarehouseTransferRequests.Query(
+        1, 20, null, null, null, null, null, null, null, null);
+
+    @Test
+    void merchantPageUsesOnlyAuthenticatedTenant() {
+        controller.page(user(100L, "MERCHANT"), query);
+        verify(service).page("100", query);
+    }
+
+    @Test
+    void merchantDetailUsesOnlyAuthenticatedTenant() {
+        controller.detail(user(100L, "MERCHANT"), "TR001");
+        verify(service).detail("100", "TR001");
+    }
+
+    @Test
+    void merchantEndpointRejectsPlatformIdentity() {
+        assertThrows(ResponseStatusException.class,
+            () -> controller.page(user(0L, "PLATFORM"), query));
+    }
+
+    private static AuthenticatedUser user(long tenantId, String appCode) {
+        return new AuthenticatedUser(1L, tenantId, tenantId, 9L, "merchant", appCode, "WEB", Set.of());
+    }
+
+    private MerchantWarehouseTransferController controller() {
+        MerchantWarehouseTransferController controller = new MerchantWarehouseTransferController();
+        ReflectionTestUtils.setField(controller, "service", service);
+        return controller;
+    }
+}