7326e273e1
Protect upload cleanup and atomic completion paths, add durable media worker leases and brand asset validation, and introduce verified migration/bootstrap/deployment gates.
57 lines
1.5 KiB
TypeScript
57 lines
1.5 KiB
TypeScript
/** @jest-environment node */
|
|
|
|
import { POST } from '@/app/api/restore-data/route'
|
|
import { getServerSession } from 'next-auth'
|
|
import { hasSystemAdminPermission } from '@/lib/department-permission'
|
|
|
|
jest.mock('next-auth', () => ({
|
|
getServerSession: jest.fn(),
|
|
}))
|
|
|
|
jest.mock('@/lib/auth', () => ({
|
|
authOptions: {},
|
|
}))
|
|
|
|
jest.mock('@/lib/department-permission', () => ({
|
|
hasSystemAdminPermission: jest.fn(),
|
|
}))
|
|
|
|
describe('/api/restore-data', () => {
|
|
beforeEach(() => {
|
|
jest.clearAllMocks()
|
|
})
|
|
|
|
test('匿名访问仍被拒绝', async () => {
|
|
;(getServerSession as jest.Mock).mockResolvedValue(null)
|
|
|
|
const response = await POST()
|
|
|
|
expect(response.status).toBe(401)
|
|
})
|
|
|
|
test('普通管理员不能进入历史恢复流程', async () => {
|
|
;(getServerSession as jest.Mock).mockResolvedValue({
|
|
user: { role: 'ADMIN', isSuperAdmin: false },
|
|
})
|
|
;(hasSystemAdminPermission as jest.Mock).mockReturnValue(false)
|
|
|
|
const response = await POST()
|
|
|
|
expect(response.status).toBe(403)
|
|
})
|
|
|
|
test('系统管理员也只能收到永久停用说明，不再触发任何写入', async () => {
|
|
;(getServerSession as jest.Mock).mockResolvedValue({
|
|
user: { role: 'SYSTEM_ADMIN', isSuperAdmin: false },
|
|
})
|
|
;(hasSystemAdminPermission as jest.Mock).mockReturnValue(true)
|
|
|
|
const response = await POST()
|
|
const body = await response.json()
|
|
|
|
expect(response.status).toBe(410)
|
|
expect(body.error).toBe('在线历史恢复接口已停用')
|
|
expect(body.action).toContain('dry-run')
|
|
})
|
|
})
|