116 lines
3.8 KiB
Dart
116 lines
3.8 KiB
Dart
|
|
// 功能描述:验证工作人员会话失效的幂等清理、旧请求隔离和存储异常降级。
|
|||
|
|
// 版本:1.0.0
|
|||
|
|
import 'package:flutter_test/flutter_test.dart';
|
|||
|
|
import 'package:service_app/app/dependencies.dart';
|
|||
|
|
import 'package:service_app/data/services/secure_session_store.dart';
|
|||
|
|
|
|||
|
|
/// 提供可观测的内存会话存储,避免测试依赖真实平台插件。
|
|||
|
|
class _MemorySessionStore implements SessionStore {
|
|||
|
|
_MemorySessionStore({Map<String, String>? values, this.deleteError}) : values = {...?values};
|
|||
|
|
|
|||
|
|
final Map<String, String> values;
|
|||
|
|
final Object? deleteError;
|
|||
|
|
final Map<String, int> deleteCounts = {};
|
|||
|
|
|
|||
|
|
@override
|
|||
|
|
Future<void> delete(String key) async {
|
|||
|
|
deleteCounts[key] = (deleteCounts[key] ?? 0) + 1;
|
|||
|
|
if (deleteError != null) throw deleteError!;
|
|||
|
|
values.remove(key);
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
@override
|
|||
|
|
Future<String?> read(String key) async => values[key];
|
|||
|
|
|
|||
|
|
@override
|
|||
|
|
Future<void> write(String key, String value) async {
|
|||
|
|
values[key] = value;
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
/// 覆盖并发 401、迟到旧请求、设备标识保留和安全存储删除失败。
|
|||
|
|
void main() {
|
|||
|
|
const tokenKey = 'service_app_access_token';
|
|||
|
|
const identityKey = 'service_app_identity';
|
|||
|
|
const roleKey = 'service_app_role';
|
|||
|
|
const deviceKey = 'service_app_device';
|
|||
|
|
|
|||
|
|
test('同一失效令牌只清理并通知一次且保留设备标识', () async {
|
|||
|
|
final store = _MemorySessionStore(
|
|||
|
|
values: const {
|
|||
|
|
tokenKey: 'JWT expired-token',
|
|||
|
|
identityKey: 'staff-1',
|
|||
|
|
roleKey: 'delivery',
|
|||
|
|
deviceKey: 'device-1',
|
|||
|
|
},
|
|||
|
|
);
|
|||
|
|
final session = StaffSession(store);
|
|||
|
|
await session.restore();
|
|||
|
|
var notificationCount = 0;
|
|||
|
|
session.addListener(() => notificationCount++);
|
|||
|
|
|
|||
|
|
session.invalidate('JWT expired-token');
|
|||
|
|
session.invalidate('JWT expired-token');
|
|||
|
|
await Future<void>.delayed(Duration.zero);
|
|||
|
|
|
|||
|
|
expect(session.token, isEmpty);
|
|||
|
|
expect(session.identity, isEmpty);
|
|||
|
|
expect(session.roleCode, isEmpty);
|
|||
|
|
expect(session.deviceIdentity, 'device-1');
|
|||
|
|
expect(session.hasExpired, isTrue);
|
|||
|
|
expect(store.deleteCounts[tokenKey], 1);
|
|||
|
|
expect(store.deleteCounts[identityKey], 1);
|
|||
|
|
expect(store.deleteCounts[roleKey], 1);
|
|||
|
|
expect(store.deleteCounts[deviceKey], isNull);
|
|||
|
|
expect(store.values[deviceKey], 'device-1');
|
|||
|
|
expect(notificationCount, 1);
|
|||
|
|
});
|
|||
|
|
|
|||
|
|
test('迟到的旧请求不得使当前会话失效', () async {
|
|||
|
|
final store = _MemorySessionStore(
|
|||
|
|
values: const {
|
|||
|
|
tokenKey: 'JWT current-token',
|
|||
|
|
identityKey: 'staff-1',
|
|||
|
|
roleKey: 'installer',
|
|||
|
|
deviceKey: 'device-1',
|
|||
|
|
},
|
|||
|
|
);
|
|||
|
|
final session = StaffSession(store);
|
|||
|
|
await session.restore();
|
|||
|
|
|
|||
|
|
session.invalidate('JWT old-token');
|
|||
|
|
await Future<void>.delayed(Duration.zero);
|
|||
|
|
|
|||
|
|
expect(session.token, 'JWT current-token');
|
|||
|
|
expect(session.identity, 'staff-1');
|
|||
|
|
expect(session.roleCode, 'installer');
|
|||
|
|
expect(session.hasExpired, isFalse);
|
|||
|
|
expect(store.deleteCounts, isEmpty);
|
|||
|
|
});
|
|||
|
|
|
|||
|
|
test('持久化删除失败也立即清空内存会话并保留设备标识', () async {
|
|||
|
|
final store = _MemorySessionStore(
|
|||
|
|
values: const {
|
|||
|
|
tokenKey: 'JWT expired-token',
|
|||
|
|
identityKey: 'staff-1',
|
|||
|
|
roleKey: 'operations',
|
|||
|
|
deviceKey: 'device-1',
|
|||
|
|
},
|
|||
|
|
deleteError: StateError('storage unavailable'),
|
|||
|
|
);
|
|||
|
|
final session = StaffSession(store);
|
|||
|
|
await session.restore();
|
|||
|
|
|
|||
|
|
session.invalidate('JWT expired-token');
|
|||
|
|
await Future<void>.delayed(Duration.zero);
|
|||
|
|
|
|||
|
|
expect(session.token, isEmpty);
|
|||
|
|
expect(session.identity, isEmpty);
|
|||
|
|
expect(session.roleCode, isEmpty);
|
|||
|
|
expect(session.deviceIdentity, 'device-1');
|
|||
|
|
expect(session.hasExpired, isTrue);
|
|||
|
|
expect(store.deleteCounts.keys, containsAll([tokenKey, identityKey, roleKey]));
|
|||
|
|
expect(store.deleteCounts[deviceKey], isNull);
|
|||
|
|
});
|
|||
|
|
}
|