打印箱唛修改 尾程垮桥事件提交

auth/src/test/java/com/baiyue/auth/config/AuthTokenTtlConfigurationContractTest.java

@@ -15,7 +15,7 @@ class AuthTokenTtlConfigurationContractTest {
             Path.of("..", "config", "nacos", "cn", "auth-service.yml"), StandardCharsets.UTF_8);
 
         assertThat(configuration)
-            .contains("access-token-ttl: ${ACCESS_TOKEN_TTL:2h}")
+            .contains("access-token-ttl: ${ACCESS_TOKEN_TTL:15m}")
             .contains("refresh-token-ttl: ${REFRESH_TOKEN_TTL:7d}")
             .doesNotContain("access-token-ttl: ${ACCESS_TOKEN_TTL:7d}");
     }

auth/src/test/java/com/baiyue/auth/service/AuthServiceSmallJwtTest.java

@@ -39,13 +39,14 @@ class AuthServiceSmallJwtTest {
     static class TestConfig {
         @Bean
         AuthSecurityProperties properties() {
-            return new AuthSecurityProperties("unused", "auth-service", Duration.ofMinutes(30),
+            return new AuthSecurityProperties("unused", "auth-service", "lastleg-api", "{}", "current-2026-08",
+                    Duration.ofMinutes(30),
                     Duration.ofDays(7), 5, Duration.ofMinutes(10));
         }
     }
 
     @Test
-    void signsIdentityOnlyJwtAndStoresAuthorizationInRedis() {
+    void signsCrossRegionClaimsAndStoresSession() {
         AuthAccount account = new AuthAccount();
         account.setId(42L);
         account.setUsername("operator");
@@ -72,8 +73,16 @@ class AuthServiceSmallJwtTest {
         verify(jwtEncoder).encode(jwt.capture());
         assertThat(jwt.getValue().getClaims().getClaims())
                 .containsEntry("user_id", 42L)
+                .containsEntry("userId", 42L)
+                .containsEntry("tenantId", 0L)
+                .containsEntry("appCode", "PLATFORM")
+                .containsEntry("roles", Set.of("PLATFORM_ADMIN"))
+                .containsEntry("authorities", Set.of("platform:order:list"))
+                .containsEntry("permissionVersion", 1)
                 .containsEntry("membership_id", 84L)
-                .doesNotContainKeys("roles", "permissions", "authorities", "scope");
+                .doesNotContainKeys("permissions", "scope");
+        assertThat(jwt.getValue().getClaims().getAudience()).containsExactly("lastleg-api");
+        assertThat(jwt.getValue().getJwsHeader().getKeyId()).isEqualTo("current-2026-08");
         verify(tokenSessionStore).store(any(), org.mockito.ArgumentMatchers.eq(42L),
                 org.mockito.ArgumentMatchers.eq(Set.of("PLATFORM_ADMIN")),
                 org.mockito.ArgumentMatchers.eq(Set.of("platform:order:list")), any(),