package com.baiyue.lastleg.controller; import com.baiyue.common.security.AuthenticatedUser; import com.baiyue.lastleg.dto.LastlegOrderRequests; import com.baiyue.lastleg.security.InternalServiceTokenGuard; import com.baiyue.lastleg.service.LastlegOrderService; import com.baiyue.lastleg.service.LoadingCompletedConsumer; import org.junit.jupiter.api.Test; import org.springframework.web.server.ResponseStatusException; import org.springframework.test.util.ReflectionTestUtils; import java.util.Set; import static org.junit.jupiter.api.Assertions.assertThrows; import static org.mockito.ArgumentMatchers.eq; import static org.mockito.Mockito.mock; import static org.mockito.Mockito.verify; class LastlegOrderControllerTest { private final LastlegOrderService service = mock(LastlegOrderService.class); private final LastlegOrderController controller = controller(); private final LastlegOrderRequests.Query query = new LastlegOrderRequests.Query( 1, 20, null, null, null, null, null, null, null, null, null, null); @Test void customerCannotOverrideItsTenantScope() { controller.list(user(100L, "MERCHANT"), "200", query); verify(service).page(eq("100"), eq(query)); } @Test void platformOperatorMustExplicitlyChooseCustomerTenant() { assertThrows(ResponseStatusException.class, () -> controller.list(user(0L, "PLATFORM"), null, query)); } @Test void platformOperatorCanQueryExplicitCustomerTenant() { controller.list(user(0L, "PLATFORM"), "200", query); verify(service).page(eq("200"), eq(query)); } private static AuthenticatedUser user(long customerId, String appCode) { return new AuthenticatedUser(1L, customerId, customerId, 1L, "tester", appCode, "WEB", Set.of()); } private LastlegOrderController controller() { LastlegOrderController controller = new LastlegOrderController(); ReflectionTestUtils.setField(controller, "consumer", mock(LoadingCompletedConsumer.class)); ReflectionTestUtils.setField(controller, "orderService", service); ReflectionTestUtils.setField(controller, "tokenGuard", mock(InternalServiceTokenGuard.class)); return controller; } }