@csntgao/uni-base 0.1.0

package/packages/web-components/tests/uniplat-base-application-switcher-transport.test.ts

@@ -0,0 +1,598 @@
+// @vitest-environment happy-dom
+
+import { describe, expect, it, vi } from 'vitest'
+import { createUniplatBaseApplicationSwitcherTransport } from '../src'
+
+const serviceBaseUrl = 'https://api.example.com/api/general/project/uniplat_base/service'
+const listEndpoint = `${serviceBaseUrl}/application.identity/list_available_applications`
+const organizationsEndpoint = `${serviceBaseUrl}/application.identity/list_available_organizations`
+const issueTicketEndpoint = `${serviceBaseUrl}/application.identity/issue_ticket`
+const applicationTicket = 'ticket_for_application_navigation_12345'
+const sourceSystem = 'ae-employee'
+
+function applicationListResponse() {
+  return {
+    rescode: 0,
+    data: {
+      current_identity: {
+        xid: '21',
+        oid: '11',
+        eid: '145',
+        mid: '1231',
+        application_name: 'hrSaasAdmin',
+      },
+      available_applications: [
+        {
+          xid: '21',
+          oid: '11',
+          application_name: 'hrSaasAdmin',
+          application_scope: 'organization',
+          application_title: '平台运营后台',
+          entry_url: '/platform-admin/',
+          icon_url: '/assets/platform-admin.svg',
+          description: '平台运营管理',
+          open_mode: 'self',
+        },
+        {
+          xid: 22,
+          oid: 11,
+          application_name: 'HrSaas',
+          application_scope: 'organization',
+          application_title: '企业管理',
+          entry_url: 'https://apps.example.com/enterprise',
+          open_mode: 'blank',
+        },
+        {
+          xid: '900',
+          oid: 11,
+          application_name: 'UniplatPortal',
+          application_scope: 'open',
+          application_title: '平台门户',
+          entry_url: '/portal/',
+        },
+      ],
+    },
+  }
+}
+
+function organizationListResponse() {
+  return {
+    rescode: 0,
+    data: {
+      application_name: 'hrSaasAdmin',
+      application_scope: 'organization',
+      current_identity: {
+        xid: '21',
+        oid: '11',
+        eid: '145',
+        mid: '1231',
+        application_name: 'hrSaasAdmin',
+        application_scope: 'organization',
+      },
+      organizations: [
+        { oid: '11', team_name: '金色华勤团队', customer_name: '金色华勤科技' },
+        { oid: '50', team_name: '示例科技团队', customer_name: '示例科技有限公司' },
+        { oid: '34', team_name: '', customer_name: '不能作为团队名称回退' },
+      ],
+    },
+  }
+}
+
+describe('createUniplatBaseApplicationSwitcherTransport()', () => {
+  it('maps the current organization applications together with open applications', async () => {
+    const token = 'uniplat-base.list.jwt'
+    const fetchMock = vi.fn(async (input: RequestInfo | URL, init?: RequestInit) => {
+      void init
+      return new Response(
+        JSON.stringify(
+          String(input) === organizationsEndpoint
+            ? organizationListResponse()
+            : applicationListResponse(),
+        ),
+        {
+          status: 200,
+          headers: { 'content-type': 'application/json' },
+        },
+      )
+    })
+    const transport = createUniplatBaseApplicationSwitcherTransport({
+      serviceBaseUrl,
+      fetch: fetchMock as typeof fetch,
+    })
+
+    const [entries, organizations] = await Promise.all([
+      transport.listApplications(token),
+      transport.listOrganizations?.(token),
+    ])
+
+    expect(entries).toEqual([
+      {
+        id: '21',
+        name: '平台运营后台',
+        url: '/platform-admin/',
+        iconUrl: '/assets/platform-admin.svg',
+        description: '平台运营管理',
+      },
+      {
+        id: '22',
+        name: '企业管理',
+        url: 'https://apps.example.com/enterprise',
+        openMode: 'blank',
+      },
+      {
+        id: '900',
+        name: '平台门户',
+        url: '/portal/',
+      },
+    ])
+    expect(organizations).toEqual({
+      organizations: [
+        { id: '11', name: '金色华勤团队' },
+        { id: '50', name: '示例科技团队' },
+        { id: '34', name: '组织 34' },
+      ],
+      currentOrganizationId: '11',
+    })
+    expect(fetchMock).toHaveBeenCalledTimes(2)
+    const [url, init] = fetchMock.mock.calls.find(([input]) => String(input) === listEndpoint)!
+    expect(url).toBe(listEndpoint)
+    expect(init?.method).toBe('POST')
+    expect(init?.body).toBe('{}')
+    expect(String(url)).not.toContain(token)
+    expect(String(init?.body)).not.toContain(token)
+    expect(new Headers(init?.headers).get('authorization')).toBe(`Bearer ${token}`)
+  })
+
+  it('keeps every entry exposed by one open application identity', async () => {
+    const payload = applicationListResponse() as {
+      rescode: number
+      data: {
+        current_identity: Record<string, unknown>
+        available_applications: Array<Record<string, unknown>>
+      }
+    }
+    payload.data.available_applications = [
+      {
+        xid: 0,
+        oid: 0,
+        application_name: 'OfficialWebsite',
+        application_scope: 'open',
+        application_title: '官方网站',
+        entry_name: 'main',
+        entry_url: 'https://website.example.com/',
+      },
+      {
+        xid: 0,
+        oid: 0,
+        application_name: 'OfficialWebsite',
+        application_scope: 'open',
+        application_title: '个人中心',
+        entry_name: 'personal',
+        entry_url: 'https://website.example.com/personal',
+      },
+      {
+        xid: 0,
+        oid: 0,
+        application_name: 'OfficialWebsite',
+        application_scope: 'open',
+        application_title: '组织管理',
+        entry_name: 'organizational',
+        entry_url: 'https://website.example.com/organizational',
+      },
+      payload.data.available_applications[1]!,
+      payload.data.available_applications[0]!,
+    ]
+    const fetchMock = vi.fn(async (input: RequestInfo | URL) => {
+      return new Response(
+        JSON.stringify(
+          String(input) === organizationsEndpoint ? organizationListResponse() : payload,
+        ),
+        {
+          status: 200,
+          headers: { 'content-type': 'application/json' },
+        },
+      )
+    })
+    const transport = createUniplatBaseApplicationSwitcherTransport({
+      serviceBaseUrl,
+      fetch: fetchMock as typeof fetch,
+    })
+
+    await expect(transport.listApplications('multiple-open-entries.jwt')).resolves.toMatchObject([
+      { id: 'OfficialWebsite:0:main', name: '官方网站' },
+      { id: 'OfficialWebsite:0:personal', name: '个人中心' },
+      { id: 'OfficialWebsite:0:organizational', name: '组织管理' },
+      { id: '22', name: '企业管理' },
+      { id: '21', name: '平台运营后台' },
+    ])
+  })
+
+  it('does not infer applications for a locally selected organization without a new JWT', async () => {
+    const token = 'uniplat-base.organization.jwt'
+    const fetchMock = vi.fn(async (input: RequestInfo | URL) => {
+      return new Response(
+        JSON.stringify(
+          String(input) === organizationsEndpoint
+            ? organizationListResponse()
+            : applicationListResponse(),
+        ),
+        {
+          status: 200,
+          headers: { 'content-type': 'application/json' },
+        },
+      )
+    })
+    const transport = createUniplatBaseApplicationSwitcherTransport({
+      serviceBaseUrl,
+      fetch: fetchMock as typeof fetch,
+    })
+
+    await transport.switchOrganization?.(token, '50')
+    const selectedEntries = await transport.listApplications(token)
+    const selectedOrganizations = await transport.listOrganizations?.(token)
+
+    expect(selectedEntries.map((entry) => entry.id)).toEqual(['900'])
+    expect(selectedOrganizations?.currentOrganizationId).toBe('50')
+    expect(fetchMock).toHaveBeenCalledTimes(4)
+
+    await transport.switchOrganization?.(token, '34')
+    expect((await transport.listApplications(token)).map((entry) => entry.id)).toEqual(['900'])
+    expect(fetchMock).toHaveBeenCalledTimes(6)
+  })
+
+  it('resets the selected organization when the Host JWT changes', async () => {
+    const fetchMock = vi.fn(async (input: RequestInfo | URL) => {
+      return new Response(
+        JSON.stringify(
+          String(input) === organizationsEndpoint
+            ? organizationListResponse()
+            : applicationListResponse(),
+        ),
+        {
+          status: 200,
+          headers: { 'content-type': 'application/json' },
+        },
+      )
+    })
+    const transport = createUniplatBaseApplicationSwitcherTransport({
+      serviceBaseUrl,
+      fetch: fetchMock as typeof fetch,
+    })
+
+    await transport.listApplications('organization-11.jwt')
+    await transport.switchOrganization?.('organization-11.jwt', '50')
+    expect(
+      (await transport.listApplications('organization-11.jwt')).map((entry) => entry.id),
+    ).toEqual(['900'])
+
+    expect(
+      (await transport.listApplications('organization-11.refreshed.jwt')).map((entry) => entry.id),
+    ).toEqual(['21', '22', '900'])
+  })
+
+  it('loads only applications when the internal workbench does not request organizations', async () => {
+    const fetchMock = vi.fn(async (input: RequestInfo | URL) => {
+      void input
+      return new Response(JSON.stringify(applicationListResponse()), {
+        status: 200,
+        headers: { 'content-type': 'application/json' },
+      })
+    })
+    const transport = createUniplatBaseApplicationSwitcherTransport({
+      serviceBaseUrl,
+      fetch: fetchMock as typeof fetch,
+    })
+
+    await transport.listApplications('internal-workbench.jwt')
+
+    expect(fetchMock).toHaveBeenCalledTimes(1)
+    expect(fetchMock.mock.calls[0]?.[0]).toBe(listEndpoint)
+  })
+
+  it('keeps the temporary oid=0 fallback when application_scope is absent', async () => {
+    const payload = applicationListResponse()
+    const legacyOpenApplication = payload.data.available_applications[2] as Record<string, unknown>
+    legacyOpenApplication.oid = 0
+    delete legacyOpenApplication.application_scope
+    const fetchMock = vi.fn(
+      async (input: RequestInfo | URL) =>
+        new Response(
+          JSON.stringify(
+            String(input) === organizationsEndpoint ? organizationListResponse() : payload,
+          ),
+          {
+            status: 200,
+            headers: { 'content-type': 'application/json' },
+          },
+        ),
+    )
+    const transport = createUniplatBaseApplicationSwitcherTransport({
+      serviceBaseUrl,
+      fetch: fetchMock as typeof fetch,
+    })
+
+    await transport.switchOrganization?.('legacy-scope.test.jwt', '50')
+
+    expect(
+      (await transport.listApplications('legacy-scope.test.jwt')).map((entry) => entry.id),
+    ).toEqual(['900'])
+  })
+
+  it('keeps all xid=0 open applications without selecting an organization implicitly', async () => {
+    const payload = applicationListResponse() as { rescode: number; data: Record<string, unknown> }
+    payload.data.current_identity = {
+      xid: 0,
+      oid: 0,
+      eid: 0,
+      mid: 0,
+      application_name: 'OfficialWebsite',
+    }
+    payload.data.available_applications = [
+      {
+        xid: 0,
+        oid: 0,
+        application_name: 'OfficialWebsite',
+        application_scope: 'open',
+        application_title: '官方网站',
+        entry_url: 'https://website.example.com/',
+      },
+      {
+        xid: 0,
+        oid: 0,
+        application_name: 'PersonalSettings',
+        application_scope: 'open',
+        application_title: '个人设置',
+        entry_url: 'https://settings.example.com/',
+      },
+      {
+        xid: 21,
+        oid: 11,
+        application_name: 'HrSaas',
+        application_scope: 'organization',
+        application_title: '数字人事部',
+        entry_url: 'https://hr.example.com/',
+      },
+    ]
+    const fetchMock = vi.fn(async (input: RequestInfo | URL, init?: RequestInit) => {
+      void init
+      const response =
+        String(input) === issueTicketEndpoint
+          ? {
+              rescode: 0,
+              data: { ticket: applicationTicket, expires_in: 15, source_system: sourceSystem },
+            }
+          : String(input) === organizationsEndpoint
+            ? organizationListResponse()
+            : payload
+      return new Response(JSON.stringify(response), {
+        status: 200,
+        headers: { 'content-type': 'application/json' },
+      })
+    })
+    const transport = createUniplatBaseApplicationSwitcherTransport({
+      serviceBaseUrl,
+      fetch: fetchMock as typeof fetch,
+    })
+
+    await expect(transport.listApplications('open-application.jwt')).resolves.toEqual([
+      {
+        id: 'OfficialWebsite:0',
+        name: '官方网站',
+        url: 'https://website.example.com/',
+      },
+      {
+        id: 'PersonalSettings:0',
+        name: '个人设置',
+        url: 'https://settings.example.com/',
+      },
+    ])
+    await expect(transport.listOrganizations?.('open-application.jwt')).resolves.toMatchObject({
+      currentOrganizationId: '',
+    })
+    await transport.switchApplication?.('open-application.jwt', 'PersonalSettings:0')
+    const [, issueInit] = fetchMock.mock.calls.find(
+      ([input]) => String(input) === issueTicketEndpoint,
+    )!
+    expect(issueInit?.body).toBe(JSON.stringify({}))
+  })
+
+  it('requests a short-lived ticket for an application from the current organization', async () => {
+    const fetchMock = vi.fn(async (input: RequestInfo | URL, init?: RequestInit) => {
+      void init
+      const payload =
+        String(input) === issueTicketEndpoint
+          ? {
+              rescode: 0,
+              data: { ticket: applicationTicket, expires_in: 15, source_system: sourceSystem },
+            }
+          : String(input) === organizationsEndpoint
+            ? organizationListResponse()
+            : applicationListResponse()
+      return new Response(JSON.stringify(payload), {
+        status: 200,
+        headers: { 'content-type': 'application/json' },
+      })
+    })
+    const transport = createUniplatBaseApplicationSwitcherTransport({
+      serviceBaseUrl,
+      fetch: fetchMock as typeof fetch,
+    })
+
+    const result = await transport.switchApplication?.('current.application.jwt', '22')
+
+    expect(result).toEqual({
+      url:
+        `https://apps.example.com/enterprise#uniplat_identity_ticket=${applicationTicket}` +
+        `&source_system=${sourceSystem}`,
+    })
+    const [, issueInit] = fetchMock.mock.calls.find(
+      ([input]) => String(input) === issueTicketEndpoint,
+    )!
+    expect(issueInit?.body).toBe(JSON.stringify({}))
+    expect(String(issueInit?.body)).not.toContain(applicationTicket)
+  })
+
+  it('requests an external application ticket without local identity fields', async () => {
+    const listPayload = applicationListResponse()
+    const availableApplications = listPayload.data.available_applications as Array<
+      Record<string, unknown>
+    >
+    availableApplications.push({
+      xid: 214,
+      oid: 11,
+      application_name: 'hro',
+      application_scope: 'organization',
+      application_title: 'HRO',
+      entry_url: 'http://a.web.test.hrs100.cn/oidc-redirect',
+      open_mode: 'blank',
+      launch_target: {
+        type: 'external',
+        target_system: 'hro',
+        application_name: 'HRS100',
+      },
+    })
+    const launchUrl =
+      `http://a.web.test.hrs100.cn/oidc-redirect` +
+      `#uniplat_identity_ticket=${applicationTicket}` +
+      `&source_system=${sourceSystem}`
+    const fetchMock = vi.fn(async (input: RequestInfo | URL, init?: RequestInit) => {
+      void init
+      const payload =
+        String(input) === issueTicketEndpoint
+          ? {
+              rescode: 0,
+              data: { ticket: applicationTicket, expires_in: 15, source_system: sourceSystem },
+            }
+          : String(input) === organizationsEndpoint
+            ? organizationListResponse()
+            : listPayload
+      return new Response(JSON.stringify(payload), {
+        status: 200,
+        headers: { 'content-type': 'application/json' },
+      })
+    })
+    const transport = createUniplatBaseApplicationSwitcherTransport({
+      serviceBaseUrl,
+      fetch: fetchMock as typeof fetch,
+    })
+
+    await expect(transport.switchApplication?.('current.application.jwt', '214')).resolves.toEqual({
+      url: launchUrl,
+    })
+    const [, issueInit] = fetchMock.mock.calls.find(
+      ([input]) => String(input) === issueTicketEndpoint,
+    )!
+    expect(issueInit?.body).toBe(JSON.stringify({}))
+    expect(String(issueInit?.body)).not.toContain('target_system')
+    expect(String(issueInit?.body)).not.toContain('application_name')
+  })
+
+  it('rejects an incomplete external application target instead of falling back to local', async () => {
+    const payload = applicationListResponse()
+    const application = payload.data.available_applications[1] as Record<string, unknown>
+    application.launch_target = {
+      type: 'external',
+      target_system: 'hro',
+    }
+    const fetchMock = vi.fn(
+      async () =>
+        new Response(JSON.stringify(payload), {
+          status: 200,
+          headers: { 'content-type': 'application/json' },
+        }),
+    )
+    const transport = createUniplatBaseApplicationSwitcherTransport({
+      serviceBaseUrl,
+      fetch: fetchMock as typeof fetch,
+    })
+
+    await expect(transport.listApplications('current.application.jwt')).rejects.toThrow(
+      'UniplatBase external application target is invalid',
+    )
+  })
+
+  it('binds an open application ticket to the selected organization', async () => {
+    const fetchMock = vi.fn(async (input: RequestInfo | URL, init?: RequestInit) => {
+      void init
+      const payload =
+        String(input) === issueTicketEndpoint
+          ? {
+              rescode: 0,
+              data: { ticket: applicationTicket, expires_in: 15, source_system: sourceSystem },
+            }
+          : String(input) === organizationsEndpoint
+            ? organizationListResponse()
+            : applicationListResponse()
+      return new Response(JSON.stringify(payload), {
+        status: 200,
+        headers: { 'content-type': 'application/json' },
+      })
+    })
+    const transport = createUniplatBaseApplicationSwitcherTransport({
+      serviceBaseUrl,
+      fetch: fetchMock as typeof fetch,
+    })
+
+    await expect(transport.switchApplication?.('current.application.jwt', '120')).rejects.toThrow(
+      'Application is unavailable',
+    )
+    const result = await transport.switchApplication?.('current.application.jwt', '900')
+
+    expect(result).toEqual({
+      url:
+        `${new URL('/portal/', document.baseURI).href}#uniplat_identity_ticket=${applicationTicket}` +
+        `&source_system=${sourceSystem}`,
+    })
+    const [, issueInit] = fetchMock.mock.calls.find(
+      ([input]) => String(input) === issueTicketEndpoint,
+    )!
+    expect(issueInit?.body).toBe(JSON.stringify({}))
+  })
+
+  it('rejects the legacy direct-JWT response in ticket mode without changing Host JWT', async () => {
+    const setAccessToken = vi.fn()
+    const fetchMock = vi.fn(async (input: RequestInfo | URL) => {
+      const payload =
+        String(input) === issueTicketEndpoint
+          ? { rescode: 0, data: { token: 'legacy.target.jwt' } }
+          : String(input) === organizationsEndpoint
+            ? organizationListResponse()
+            : applicationListResponse()
+      return new Response(JSON.stringify(payload), {
+        status: 200,
+        headers: { 'content-type': 'application/json' },
+      })
+    })
+    const transport = createUniplatBaseApplicationSwitcherTransport({
+      serviceBaseUrl,
+      setAccessToken,
+      fetch: fetchMock as typeof fetch,
+    })
+
+    await expect(transport.switchApplication?.('current.application.jwt', '900')).rejects.toThrow(
+      'Identity ticket response is invalid',
+    )
+    expect(setAccessToken).not.toHaveBeenCalled()
+  })
+
+  it('rejects backend failures without exposing the backend message', async () => {
+    const fetchMock = vi.fn(
+      async () =>
+        new Response(
+          JSON.stringify({ rescode: 403, msg: 'stack with jwt=backend-secret', data: {} }),
+          { status: 200, headers: { 'content-type': 'application/json' } },
+        ),
+    )
+    const transport = createUniplatBaseApplicationSwitcherTransport({
+      serviceBaseUrl,
+      fetch: fetchMock as typeof fetch,
+    })
+
+    const error = await transport
+      .listApplications('safe.fake.jwt')
+      .catch((reason: unknown) => reason)
+    expect(error).toBeInstanceOf(Error)
+    expect(String(error)).not.toContain('backend-secret')
+    expect(String(error)).not.toContain('stack with')
+  })
+})