125f7ec54c
Some checks failed
CI / build-deploy (push) Has been cancelled
- RBAC: 新增30个权限点、DataScope行级权限、requirePermission守卫，所有57+ Server Action接入权限校验 - UI拆分: exam-form(1623行→11文件)、textbook-reader(744行→7文件)，均降至300行以内 - 测试: 新增5个单元测试文件(19用例)，修复4个集成测试文件(38用例全部通过) - 架构文档: 新增架构影响地图(004/005)、标准功能清单(006)、差距审计报告(007) - 项目规则: 架构图优先规则，改码必同步图 - 安全: rehype-sanitize净化、AES加密API Key、权限路由守卫 - 无障碍: skip-link、aria-label、prefers-reduced-motion - 性能: next/font优化、next/image、代码分割
62 lines
2.1 KiB
TypeScript
62 lines
2.1 KiB
TypeScript
import { describe, expect, it, vi } from "vitest"
|
|
|
|
const { getTokenMock } = vi.hoisted(() => ({
|
|
getTokenMock: vi.fn(),
|
|
}))
|
|
|
|
vi.mock("next-auth/jwt", () => ({
|
|
getToken: getTokenMock,
|
|
}))
|
|
|
|
import { middleware } from "@/proxy"
|
|
|
|
const createRequest = (pathname: string) => ({
|
|
nextUrl: {
|
|
pathname,
|
|
clone: () => new URL(`http://localhost${pathname}`),
|
|
},
|
|
url: `http://localhost${pathname}`,
|
|
})
|
|
|
|
describe("proxy route guard", () => {
|
|
it("redirects unauthenticated requests to login with callback", async () => {
|
|
getTokenMock.mockResolvedValue(null)
|
|
const response = await middleware(createRequest("/teacher/dashboard") as never)
|
|
expect(response.status).toBe(307)
|
|
const location = response.headers.get("location") ?? ""
|
|
expect(location).toContain("/login")
|
|
expect(location).toContain("callbackUrl=")
|
|
expect(decodeURIComponent(location)).toContain("/teacher/dashboard")
|
|
})
|
|
|
|
it("redirects user without school:manage permission away from admin routes", async () => {
|
|
getTokenMock.mockResolvedValue({
|
|
permissions: ["homework:submit"],
|
|
roles: ["student"],
|
|
})
|
|
const response = await middleware(createRequest("/admin/dashboard") as never)
|
|
expect(response.status).toBe(307)
|
|
expect(response.headers.get("location")).toContain("/student/dashboard")
|
|
})
|
|
|
|
it("redirects user without grade:manage permission away from management routes", async () => {
|
|
getTokenMock.mockResolvedValue({
|
|
permissions: ["exam:read"],
|
|
roles: ["parent"],
|
|
})
|
|
const response = await middleware(createRequest("/management/grade/insights") as never)
|
|
expect(response.status).toBe(307)
|
|
expect(response.headers.get("location")).toContain("/parent/dashboard")
|
|
})
|
|
|
|
it("allows user with grade:manage permission to access management routes", async () => {
|
|
getTokenMock.mockResolvedValue({
|
|
permissions: ["exam:read", "grade:manage"],
|
|
roles: ["teacher"],
|
|
})
|
|
const response = await middleware(createRequest("/management/grade/insights") as never)
|
|
expect(response.status).toBe(200)
|
|
expect(response.headers.get("location")).toBeNull()
|
|
})
|
|
})
|