273 lines
9.2 KiB
Dart
273 lines
9.2 KiB
Dart
import 'dart:convert';
|
|
|
|
import 'package:flutter_test/flutter_test.dart';
|
|
import 'package:shared_preferences_platform_interface/in_memory_shared_preferences_async.dart';
|
|
import 'package:shared_preferences_platform_interface/shared_preferences_async_platform_interface.dart';
|
|
|
|
import 'package:fruitshorts/core/data/remote/api_client.dart';
|
|
import 'package:fruitshorts/core/data/remote/auth_api.dart';
|
|
import 'package:fruitshorts/core/data/services/auth_controller.dart';
|
|
import 'package:fruitshorts/core/data/services/auth_session_store.dart';
|
|
|
|
import '../support/fake_http_adapter.dart';
|
|
|
|
/// 用假的 dio adapter 覆盖四条关键路径：注册成功、401 → 刷新 → 重试、刷新失败 → 清会话、登出。
|
|
///
|
|
/// 网络层从 http 换成 dio 后，这里的**断言口径一条没变**，只是注入方式从
|
|
/// `http.testing.MockClient` 换成 `FakeHttpAdapter`。
|
|
void main() {
|
|
setUp(() {
|
|
SharedPreferencesAsyncPlatform.instance =
|
|
InMemorySharedPreferencesAsync.empty();
|
|
});
|
|
|
|
String tokenBody({
|
|
required String accessToken,
|
|
required String refreshToken,
|
|
String uid = 'U1',
|
|
}) {
|
|
return jsonEncode({
|
|
'code': 0,
|
|
'message': 'ok',
|
|
'data': {
|
|
'accessToken': accessToken,
|
|
'refreshToken': refreshToken,
|
|
'expiresIn': 7200,
|
|
'user': {'uid': uid, 'nickname': 'Tester', 'avatarUrl': ''},
|
|
},
|
|
});
|
|
}
|
|
|
|
ApiClient clientWith(
|
|
AuthController Function() auth, {
|
|
required FakeHttpAdapter adapter,
|
|
}) {
|
|
final store = AuthSessionStore();
|
|
return ApiClient(
|
|
baseUrl: 'http://127.0.0.1:8081',
|
|
adapter: adapter,
|
|
accessTokenReader: () => auth().accessToken,
|
|
tokenRefresher: () => auth().refresh(),
|
|
onUnauthorized: () => auth().clear(),
|
|
deviceIdReader: store.deviceId,
|
|
);
|
|
}
|
|
|
|
test(
|
|
'should_store_session_and_expose_signed_in_state_when_register_succeeds',
|
|
() async {
|
|
late AuthController auth;
|
|
final adapter = FakeHttpAdapter((options) async {
|
|
expect(options.uri.path, '/app/auth/register');
|
|
expect(options.headers['X-Device-Id'], isNotEmpty);
|
|
expect(options.headers.containsKey('Authorization'), isFalse);
|
|
return FakeHttpResponse(
|
|
tokenBody(accessToken: 'a1', refreshToken: 'r1'),
|
|
);
|
|
});
|
|
final store = AuthSessionStore();
|
|
auth = AuthController(
|
|
AuthApi(clientWith(() => auth, adapter: adapter)),
|
|
store,
|
|
);
|
|
|
|
expect(auth.isSignedIn, isFalse);
|
|
await auth.register(email: 'a@b.com', password: 'abcd1234');
|
|
expect(auth.isSignedIn, isTrue);
|
|
expect(auth.accessToken, 'a1');
|
|
expect(auth.user?.nickname, 'Tester');
|
|
// 落盘：新建一个 store 也能读回来
|
|
expect((await AuthSessionStore().read())?.refreshToken, 'r1');
|
|
},
|
|
);
|
|
|
|
test(
|
|
'should_refresh_once_and_retry_with_new_token_when_response_code_is_401',
|
|
() async {
|
|
var calls = 0;
|
|
late AuthController auth;
|
|
final adapter = FakeHttpAdapter((options) async {
|
|
calls++;
|
|
if (options.uri.path == '/app/auth/refresh') {
|
|
return FakeHttpResponse(
|
|
tokenBody(accessToken: 'a2', refreshToken: 'r2'),
|
|
);
|
|
}
|
|
if (options.uri.path != '/app/me') {
|
|
// 注册等其它请求：直接发第一版令牌
|
|
return FakeHttpResponse(
|
|
tokenBody(accessToken: 'a1', refreshToken: 'r1'),
|
|
);
|
|
}
|
|
final token = options.headers['Authorization'];
|
|
if (token == 'Bearer a1') {
|
|
return FakeHttpResponse(
|
|
jsonEncode({'code': 401, 'message': '未登录或登录已过期', 'data': null}),
|
|
);
|
|
}
|
|
expect(token, 'Bearer a2');
|
|
return FakeHttpResponse(
|
|
jsonEncode({
|
|
'code': 0,
|
|
'message': 'ok',
|
|
'data': {'hit': true},
|
|
}),
|
|
);
|
|
});
|
|
final store = AuthSessionStore();
|
|
auth = AuthController(
|
|
AuthApi(clientWith(() => auth, adapter: adapter)),
|
|
store,
|
|
);
|
|
await auth.register(email: 'a@b.com', password: 'abcd1234');
|
|
calls = 0;
|
|
|
|
final api = clientWith(() => auth, adapter: adapter);
|
|
final data = await api.get('/app/me');
|
|
expect((data as Map)['hit'], isTrue);
|
|
expect(calls, 3); // 原请求(401) + 刷新 + 重试
|
|
expect(auth.accessToken, 'a2');
|
|
},
|
|
);
|
|
|
|
test('should_clear_session_when_refresh_itself_fails', () async {
|
|
late AuthController auth;
|
|
final adapter = FakeHttpAdapter((options) async {
|
|
if (options.uri.path == '/app/auth/refresh') {
|
|
return FakeHttpResponse(
|
|
jsonEncode({'code': 401, 'message': '登录已过期', 'data': null}),
|
|
);
|
|
}
|
|
if (options.uri.path == '/app/auth/register') {
|
|
return FakeHttpResponse(
|
|
tokenBody(accessToken: 'a1', refreshToken: 'r1'),
|
|
);
|
|
}
|
|
return FakeHttpResponse(
|
|
jsonEncode({'code': 401, 'message': '未登录或登录已过期', 'data': null}),
|
|
);
|
|
});
|
|
final store = AuthSessionStore();
|
|
auth = AuthController(
|
|
AuthApi(clientWith(() => auth, adapter: adapter)),
|
|
store,
|
|
);
|
|
await auth.register(email: 'a@b.com', password: 'abcd1234');
|
|
|
|
final api = clientWith(() => auth, adapter: adapter);
|
|
await expectLater(api.get('/app/me'), throwsA(isA<ApiException>()));
|
|
expect(auth.isSignedIn, isFalse);
|
|
expect(await AuthSessionStore().read(), isNull);
|
|
});
|
|
|
|
test(
|
|
'should_keep_session_when_refresh_fails_because_server_is_down',
|
|
() async {
|
|
late AuthController auth;
|
|
final adapter = FakeHttpAdapter((options) async {
|
|
if (options.uri.path == '/app/auth/refresh') {
|
|
return FakeHttpResponse(
|
|
jsonEncode({'code': 500, 'message': '服务重启中', 'data': null}),
|
|
);
|
|
}
|
|
if (options.uri.path == '/app/auth/register') {
|
|
return FakeHttpResponse(
|
|
tokenBody(accessToken: 'a1', refreshToken: 'r1'),
|
|
);
|
|
}
|
|
return FakeHttpResponse(
|
|
jsonEncode({'code': 401, 'message': '未登录或登录已过期', 'data': null}),
|
|
);
|
|
});
|
|
final store = AuthSessionStore();
|
|
auth = AuthController(
|
|
AuthApi(clientWith(() => auth, adapter: adapter)),
|
|
store,
|
|
);
|
|
await auth.register(email: 'a@b.com', password: 'abcd1234');
|
|
|
|
final api = clientWith(() => auth, adapter: adapter);
|
|
await expectLater(api.get('/app/me'), throwsA(isA<ApiException>()));
|
|
expect(auth.isSignedIn, isTrue);
|
|
expect(auth.accessToken, 'a1');
|
|
expect((await AuthSessionStore().read())?.refreshToken, 'r1');
|
|
},
|
|
);
|
|
|
|
test('should_clear_local_session_when_sign_out_hits_server_error', () async {
|
|
late AuthController auth;
|
|
final adapter = FakeHttpAdapter((options) async {
|
|
if (options.uri.path == '/app/auth/logout') {
|
|
return FakeHttpResponse('{}', 500);
|
|
}
|
|
return FakeHttpResponse(tokenBody(accessToken: 'a1', refreshToken: 'r1'));
|
|
});
|
|
final store = AuthSessionStore();
|
|
auth = AuthController(
|
|
AuthApi(clientWith(() => auth, adapter: adapter)),
|
|
store,
|
|
);
|
|
await auth.register(email: 'a@b.com', password: 'abcd1234');
|
|
|
|
await auth.signOut();
|
|
expect(auth.isSignedIn, isFalse);
|
|
expect(await AuthSessionStore().read(), isNull);
|
|
});
|
|
|
|
test('should_store_session_when_phone_code_login_succeeds', () async {
|
|
late AuthController auth;
|
|
final adapter = FakeHttpAdapter((options) async {
|
|
if (options.uri.path == '/app/auth/otp') {
|
|
final body = (options.data as Map).cast<String, dynamic>();
|
|
expect(body['targetType'], 'PHONE');
|
|
expect(body['target'], '08123456789');
|
|
expect(body['scene'], 'LOGIN');
|
|
expect(body['deviceId'], isNotEmpty);
|
|
return FakeHttpResponse(
|
|
jsonEncode({'code': 0, 'message': 'ok', 'data': null}),
|
|
);
|
|
}
|
|
expect(options.uri.path, '/app/auth/login');
|
|
final body = (options.data as Map).cast<String, dynamic>();
|
|
expect(body['targetType'], 'PHONE');
|
|
expect(body['code'], '123456');
|
|
return FakeHttpResponse(
|
|
tokenBody(accessToken: 'p1', refreshToken: 'pr1'),
|
|
);
|
|
});
|
|
final store = AuthSessionStore();
|
|
auth = AuthController(
|
|
AuthApi(clientWith(() => auth, adapter: adapter)),
|
|
store,
|
|
);
|
|
|
|
await auth.sendOtp(target: '08123456789', scene: 'LOGIN');
|
|
await auth.signInWithPhone(target: '08123456789', code: '123456');
|
|
|
|
expect(auth.isSignedIn, isTrue);
|
|
expect(auth.accessToken, 'p1');
|
|
});
|
|
|
|
test('should_store_session_when_phone_registration_succeeds', () async {
|
|
late AuthController auth;
|
|
final adapter = FakeHttpAdapter((options) async {
|
|
expect(options.uri.path, '/app/auth/register');
|
|
final body = (options.data as Map).cast<String, dynamic>();
|
|
expect(body['targetType'], 'PHONE');
|
|
expect(body['code'], '654321');
|
|
return FakeHttpResponse(
|
|
tokenBody(accessToken: 'p2', refreshToken: 'pr2'),
|
|
);
|
|
});
|
|
auth = AuthController(
|
|
AuthApi(clientWith(() => auth, adapter: adapter)),
|
|
AuthSessionStore(),
|
|
);
|
|
|
|
await auth.registerWithPhone(target: '08123456789', code: '654321');
|
|
|
|
expect(auth.isSignedIn, isTrue);
|
|
expect(auth.user?.uid, 'U1');
|
|
});
|
|
}
|