AiDOPWarehouse/server/Plugins/Admin.NET.Plugin.AiDOP.Tests/DataPlatform/MdpConfigApiTenantIsolationTests.cs

using Xunit;

namespace Admin.NET.Plugin.AiDOP.Tests.DataPlatform;

/// <summary>
/// 对接配置接口的租户收口契约。匿名写入与跨租户改登记必须在源码层被拿掉，
/// 不靠运行时铺两套租户数据。
/// </summary>
public class MdpConfigApiTenantIsolationTests
{
    [Fact]
    public void ConfigWriteServices_AreNotAnonymous()
    {
        foreach (var file in new[]
        {
            "MdpSourceConfigService.cs",
            "MdpTenantStdSourceService.cs",
            "MdpSourceMappingService.cs",
            "MdpSyncEntityConfigService.cs",
            "MdpSyncTaskConfigService.cs"
        })
        {
            var source = ReadPluginFile("DataPlatform", file);
            Assert.DoesNotContain("[AllowAnonymous]", source, StringComparison.Ordinal);
        }
    }

    [Fact]
    public void TenantStdSource_RejectsCrossTenantWrite()
    {
        var source = ReadPluginFile("DataPlatform", "MdpTenantStdSourceService.cs");
        Assert.Contains("不能修改其他租户的来源登记", source, StringComparison.Ordinal);
        Assert.Contains("不能查看其他租户的来源登记", source, StringComparison.Ordinal);
    }

    [Fact]
    public void SourceList_IsTenantScoped_AndDoesNotReturnPassword()
    {
        var source = ReadPluginFile("DataPlatform", "MdpSourceConfigService.cs");
        Assert.Contains("x.TenantId == _user.TenantId", source, StringComparison.Ordinal);
        Assert.DoesNotContain("dbPassword", source, StringComparison.Ordinal);
        Assert.DoesNotContain("DbPasswordEnc =", source.Split("public async Task<object> GetList")[1].Split("public async Task<object> Save")[0], StringComparison.Ordinal);
    }

    [Fact]
    public void FuncAndMenu_RegisterMappingPagesWithoutFuncInTitle()
    {
        var func = ReadRepoFile("Web", "src", "constants", "aidopFuncCodes.ts");
        Assert.Contains("FUNC-S9-019", func, StringComparison.Ordinal);
        Assert.Contains("/aidop/data-platform/tenant-std-sources", func, StringComparison.Ordinal);
        Assert.Contains("FUNC-S9-020", func, StringComparison.Ordinal);
        Assert.Contains("/aidop/data-platform/source-mappings", func, StringComparison.Ordinal);

        var menu = ReadPluginFile("SeedData", "SysMenuSeedData.cs");
        Assert.Contains("业务对象来源", menu, StringComparison.Ordinal);
        Assert.Contains("来源映射维护", menu, StringComparison.Ordinal);
        Assert.DoesNotContain("FUNC-S9-019", menu, StringComparison.Ordinal);
        Assert.DoesNotContain("FUNC-S9-020", menu, StringComparison.Ordinal);
    }

    /// <summary>
    /// 手动拉取端点是配置层自定义实体唯一的运行时入口，也是唯一能把 entityCode
    /// 递到 dispatcher 的口子，因此它的收口条件必须在源码层被钉住。
    /// </summary>
    [Fact]
    public void ManualEntityPull_IsTaskScoped_AndTenantGuarded()
    {
        var source = ReadPluginFile("DataPlatform", "MdpSyncEntityConfigService.cs");
        Assert.Contains("sync-tasks/{taskCode}/entities/{entityCode}/pull", source, StringComparison.Ordinal);

        var method = source
            .Split("[DisplayName(\"按实体立即拉取一次\")]")[1]
            .Split("[DisplayName(\"更新同步实体\")]")[0];

        // 无租户上下文必须硬失败：否则贴源写入的租户解析回落到 null，整行被静默跳过，
        // 对外表现为「拉取成功但 0 行」。
        Assert.Contains("tenantId <= 0", method, StringComparison.Ordinal);
        Assert.Contains("无法解析当前租户", method, StringComparison.Ordinal);

        // entityCode 不得直接透传：必须先按「归属本任务 + 当前租户可见 + 已启用」收口
        Assert.Contains("u.JobId == jobCode", method, StringComparison.Ordinal);
        Assert.Contains("(u.TenantId == tenantId || u.TenantId == 0)", method, StringComparison.Ordinal);
        Assert.Contains("u.Status == 1", method, StringComparison.Ordinal);
    }

    private static string ReadPluginFile(string folder, string file) =>
        ReadRepoFile("server", "Plugins", "Admin.NET.Plugin.AiDOP", folder, file);

    private static string ReadRepoFile(params string[] parts)
    {
        var dir = new DirectoryInfo(AppContext.BaseDirectory);
        while (dir != null)
        {
            var candidate = Path.Combine(new[] { dir.FullName }.Concat(parts).ToArray());
            if (File.Exists(candidate)) return File.ReadAllText(candidate);
            dir = dir.Parent;
        }
        throw new FileNotFoundException(parts[^1]);
    }
}