feat: add current user and tenant endpoints

This commit is contained in:
xiong
2026-07-26 12:55:31 +08:00
parent 2b02bbef7b
commit 09720237ef
11 changed files with 544 additions and 7 deletions

View File

@@ -2,7 +2,6 @@ using System.IdentityModel.Tokens.Jwt;
using System.Net;
using System.Security.Claims;
using System.Text;
using Microsoft.AspNetCore.Mvc.Testing;
using Microsoft.IdentityModel.Tokens;
using Tiku.Application.Security;
using Tiku.Domain.Tenancy;
@@ -33,11 +32,14 @@ public sealed class SecurityFoundationTests
public async Task Tenant_admin_policy_returns_forbidden_for_non_admin_member()
{
await using var factory = CreateFactory();
var userId = Guid.NewGuid();
var sessionId = await factory.SeedActiveSessionAsync(userId);
using var client = factory.CreateClient();
client.DefaultRequestHeaders.Authorization = new(
"Bearer",
CreateToken([
new Claim(TikuClaimTypes.UserId, Guid.NewGuid().ToString()),
new Claim(TikuClaimTypes.UserId, userId.ToString()),
new Claim(TikuClaimTypes.SessionId, sessionId.ToString()),
new Claim(TikuClaimTypes.TenantId, Guid.NewGuid().ToString()),
new Claim(TikuClaimTypes.TenantRole, TenantRole.Student.ToString())
]));
@@ -52,11 +54,13 @@ public sealed class SecurityFoundationTests
{
var userId = Guid.NewGuid();
await using var factory = CreateFactory();
var sessionId = await factory.SeedActiveSessionAsync(userId);
using var client = factory.CreateClient();
client.DefaultRequestHeaders.Authorization = new(
"Bearer",
CreateToken([
new Claim(TikuClaimTypes.UserId, userId.ToString())
new Claim(TikuClaimTypes.UserId, userId.ToString()),
new Claim(TikuClaimTypes.SessionId, sessionId.ToString())
]));
var response = await client.GetAsync("/api/_security/authenticated");
@@ -67,9 +71,9 @@ public sealed class SecurityFoundationTests
Assert.Contains("true", body, StringComparison.OrdinalIgnoreCase);
}
private static WebApplicationFactory<Program> CreateFactory()
private static ApiTestFactory CreateFactory()
{
return new WebApplicationFactory<Program>();
return new ApiTestFactory();
}
private static string CreateToken(IEnumerable<Claim> claims)