update

liujie

2026-09-14 82a8bc62d5b9d5d607f6952329952b17eda2f0a0

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
package com.tourguide.modules.user.service;
 
import com.tourguide.common.exception.BusinessException;
import com.tourguide.modules.system.service.AdminPermissionService;
import com.tourguide.modules.user.dto.LoginRequest;
import com.tourguide.modules.user.entity.AdminUser;
import com.tourguide.modules.user.mapper.MiniUserMapper;
import com.tourguide.security.JwtTokenService;
import com.tourguide.security.TokenSessionService;
import org.junit.jupiter.api.BeforeEach;
import org.junit.jupiter.api.Test;
import org.springframework.security.crypto.password.PasswordEncoder;
 
import static org.assertj.core.api.Assertions.assertThatThrownBy;
import static org.mockito.ArgumentMatchers.any;
import static org.mockito.Mockito.mock;
import static org.mockito.Mockito.never;
import static org.mockito.Mockito.verify;
import static org.mockito.Mockito.when;
 
class AuthServiceAdminLoginTest {
    private AdminUserService adminUserService;
    private PasswordEncoder passwordEncoder;
    private JwtTokenService jwtTokenService;
    private AuthService authService;
 
    @BeforeEach
    void setUp() {
        adminUserService = mock(AdminUserService.class);
        passwordEncoder = mock(PasswordEncoder.class);
        jwtTokenService = mock(JwtTokenService.class);
        authService = new AuthService(
                adminUserService,
                mock(AdminPermissionService.class),
                mock(MiniUserService.class),
                mock(GuideUserService.class),
                mock(GuideAutoDisableService.class),
                mock(MiniUserMapper.class),
                passwordEncoder,
                jwtTokenService,
                mock(TokenSessionService.class));
    }
 
    @Test
    void disabledAdminShouldReceiveExplicitMessageAndNoToken() {
        LoginRequest request = loginRequest();
        AdminUser user = adminUser(0);
        when(adminUserService.findByUsername(request.getUsername())).thenReturn(user);
 
        assertThatThrownBy(() -> authService.loginAdmin(request))
                .isInstanceOf(BusinessException.class)
                .hasMessage("账号已被禁用，请联系管理员")
                .extracting(error -> ((BusinessException) error).getCode())
                .isEqualTo(403);
 
        verify(passwordEncoder, never()).matches(any(), any());
        verify(jwtTokenService, never()).createToken(any(), any(), any(), any());
    }
 
    @Test
    void enabledAdminWithWrongPasswordShouldKeepGenericMessage() {
        LoginRequest request = loginRequest();
        AdminUser user = adminUser(1);
        when(adminUserService.findByUsername(request.getUsername())).thenReturn(user);
        when(passwordEncoder.matches(request.getPassword(), user.getPassword())).thenReturn(false);
 
        assertThatThrownBy(() -> authService.loginAdmin(request))
                .isInstanceOf(BusinessException.class)
                .hasMessage("用户名或密码错误")
                .extracting(error -> ((BusinessException) error).getCode())
                .isEqualTo(401);
 
        verify(jwtTokenService, never()).createToken(any(), any(), any(), any());
    }
 
    private LoginRequest loginRequest() {
        LoginRequest request = new LoginRequest();
        request.setUsername("disabled-admin");
        request.setPassword("Password123!");
        return request;
    }
 
    private AdminUser adminUser(int status) {
        AdminUser user = new AdminUser();
        user.setId(8L);
        user.setUsername("disabled-admin");
        user.setPassword("encoded-password");
        user.setRoleCode("OPERATOR");
        user.setStatus(status);
        return user;
    }
}