@nocobase/client-v2 2.3.0-alpha.1 → 3.0.0-alpha.2

package/src/__tests__/settings-application.test.ts

@@ -0,0 +1,164 @@
+/**
+ * This file is part of the NocoBase (R) project.
+ * Copyright (c) 2020-2024 NocoBase Co., Ltd.
+ * Authors: NocoBase Team.
+ *
+ * This project is dual-licensed under AGPL-3.0 and NocoBase Commercial License.
+ * For more information, please refer to: https://www.nocobase.com/agreement.
+ */
+
+import MockAdapter from 'axios-mock-adapter';
+import { describe, expect, it } from 'vitest';
+import { Application } from '../index';
+import { SettingsApplication } from '../settings-app/SettingsApplication';
+import { SettingsBuildInPlugin } from '../settings-app/SettingsBuildInPlugin';
+
+describe('SettingsApplication', () => {
+  it('uses the standalone settings route namespace', () => {
+    const adminApp = new Application({ router: { type: 'memory' }, ws: false });
+    const settingsApp = new SettingsApplication({ router: { type: 'memory' }, ws: false });
+
+    expect(adminApp.pluginSettingsManager.getRouteName('demo.index')).toBe('admin.settings.demo.index');
+    expect(adminApp.pluginSettingsManager.getRoutePath('demo.index')).toBe('/admin/settings/demo');
+
+    expect(settingsApp.pluginSettingsManager.getRouteName('demo.index')).toBe('settings.demo.index');
+    expect(settingsApp.pluginSettingsManager.getRoutePath('demo.index')).toBe('/settings/demo');
+    expect(settingsApp.pluginSettingsManager.getRoutePath('')).toBe('/settings/');
+  });
+
+  it.each(['apps', '_app'])('uses basename-relative paths for the %s sub-application Settings runtime', (scope) => {
+    const app = new SettingsApplication({
+      publicPath: '/nocobase/',
+      router: { type: 'memory', basename: `/nocobase/settings/${scope}/demo/` },
+      ws: false,
+    });
+
+    expect(app.pluginSettingsManager.getRouteName('demo.index')).toBe('settings.demo.index');
+    expect(app.pluginSettingsManager.getRoutePath('')).toBe('/');
+    expect(app.pluginSettingsManager.getRoutePath('demo.index')).toBe('/demo');
+
+    app.router.add('settings', { path: '/settings' });
+    app.router.add('settingsDetails.workflow.canvas', { path: '/settings/workflow/workflows/:id' });
+    app.router.add('settingsDetails.preview', { path: '/settings-preview/:id' });
+    app.router.add('auth.signin', { path: '/signin' });
+
+    expect(app.router.get('settings')).toMatchObject({ path: '/' });
+    expect(app.router.get('settingsDetails.workflow.canvas')).toMatchObject({
+      path: '/workflow/workflows/:id',
+      authCheck: true,
+    });
+    expect(
+      app.router
+        .matchRoutes(`/nocobase/settings/${scope}/demo/workflow/workflows/1`)
+        ?.some((match) => match.route.id === 'settingsDetails.workflow.canvas'),
+    ).toBe(true);
+    expect(
+      app.router
+        .matchRoutes(`/nocobase/settings/${scope}/demo/settings/workflow/workflows/1`)
+        ?.some((match) => match.route.id === 'settingsDetails.workflow.canvas'),
+    ).toBe(false);
+    expect(app.router.get('settingsDetails.preview')).toMatchObject({ path: '/settings-preview/:id' });
+    expect(app.router.get('auth.signin')).toMatchObject({ path: '/signin' });
+  });
+
+  it('does not treat an apps segment inside the main application public path as a sub-application scope', () => {
+    const app = new SettingsApplication({
+      router: { type: 'memory', basename: '/tenant/apps/root/' },
+      ws: false,
+    });
+
+    expect(app.pluginSettingsManager.getRoutePath('')).toBe('/settings/');
+    expect(app.pluginSettingsManager.getRoutePath('demo.index')).toBe('/settings/demo');
+
+    app.router.add('settingsDetails.workflow.canvas', { path: '/settings/workflow/workflows/:id' });
+    expect(app.router.get('settingsDetails.workflow.canvas')).toMatchObject({
+      path: '/settings/workflow/workflows/:id',
+    });
+  });
+
+  it.each(['apps', '_app'])(
+    'does not treat a scoped-looking %s suffix inside the main public path as a sub-application scope',
+    (scope) => {
+      const publicPath = `/tenant/settings/${scope}/root/`;
+      const app = new SettingsApplication({
+        publicPath,
+        router: { type: 'memory', basename: publicPath },
+        ws: false,
+      });
+
+      expect(app.pluginSettingsManager.getRoutePath('')).toBe('/settings/');
+      expect(app.pluginSettingsManager.getRoutePath('demo.index')).toBe('/settings/demo');
+
+      app.router.add('settingsDetails.workflow.canvas', { path: '/settings/workflow/workflows/:id' });
+      app.router.add('auth.signin', { path: '/signin' });
+
+      expect(app.router.get('settingsDetails.workflow.canvas')).toMatchObject({
+        path: '/settings/workflow/workflows/:id',
+      });
+      expect(app.router.get('auth.signin')).toMatchObject({ path: '/settings/signin' });
+    },
+  );
+
+  it('keeps only routes owned by the settings runtime', () => {
+    const app = new SettingsApplication({ router: { type: 'memory' }, ws: false });
+
+    app.router.add('settings', { path: '/settings' });
+    app.router.add('settings.demo', { path: 'demo' });
+    app.router.add('settingsDetails.workflow.canvas', { path: '/settings/workflow/workflows/:id' });
+    app.router.add('admin.demo', { path: '/admin/demo' });
+    app.router.add('public-forms', { path: '/public-forms/:key' });
+    app.router.add('mobile', { path: '/mobile' });
+
+    expect(app.router.has('settings')).toBe(true);
+    expect(app.router.has('settings.demo')).toBe(true);
+    expect(app.router.get('settingsDetails.workflow.canvas')).toMatchObject({
+      path: '/settings/workflow/workflows/:id',
+      authCheck: true,
+    });
+    expect(app.router.has('admin.demo')).toBe(false);
+    expect(app.router.has('public-forms')).toBe(false);
+    expect(app.router.has('mobile')).toBe(false);
+    expect(app.router.has('not-found')).toBe(true);
+  });
+
+  it('keeps hidden plugin detail pages in the normal Settings route tree', () => {
+    const app = new SettingsApplication({ router: { type: 'memory' }, ws: false });
+
+    app.pluginSettingsManager.addMenuItem({ key: 'public-forms', title: 'Public forms' });
+    app.pluginSettingsManager.addPageTabItem({
+      menuKey: 'public-forms',
+      key: ':name',
+      title: false,
+      hidden: true,
+      Component: () => null,
+    });
+
+    expect(app.pluginSettingsManager.get('public-forms.:name')).toMatchObject({
+      hidden: true,
+      path: '/settings/public-forms/:name',
+    });
+    expect(app.router.get('settings.public-forms.:name')).toMatchObject({ path: ':name' });
+  });
+
+  it('registers the authenticated settings shell without the admin layout', async () => {
+    const app = new SettingsApplication({ router: { type: 'memory' }, ws: false });
+    const apiMock = new MockAdapter(app.apiClient.axios);
+    apiMock.onGet('app:getLang').reply(200, { data: { lang: 'en-US', resources: { client: {} }, cron: {} } });
+    const plugin = new SettingsBuildInPlugin({ name: 'settings-buildin' }, app);
+
+    await plugin.afterAdd();
+    await plugin.load();
+    app.router.add('settingsDetails.workflow.canvas', { path: '/settings/workflow/workflows/:id' });
+
+    expect(app.router.get('settings')).toMatchObject({ path: '/settings', authCheck: true });
+    expect(app.router.get('settingsDetails')).toMatchObject({ path: '/settings', authCheck: true });
+    expect(
+      app.router.matchRoutes('/settings/workflow/workflows/1')?.some((match) => match.route.authCheck === true),
+    ).toBe(true);
+    expect(app.router.has('admin')).toBe(false);
+    expect(app.layoutManager.hasLayout('admin')).toBe(false);
+    expect(app.pluginSettingsManager.has('plugin-manager')).toBe(true);
+    expect(app.pluginSettingsManager.has('system-settings')).toBe(true);
+    expect(app.pluginSettingsManager.has('security')).toBe(true);
+  });
+});

package/src/__tests__/settings-auth-routes.test.ts

@@ -0,0 +1,71 @@
+/**
+ * This file is part of the NocoBase (R) project.
+ * Copyright (c) 2020-2024 NocoBase Co., Ltd.
+ * Authors: NocoBase Team.
+ *
+ * This project is dual-licensed under AGPL-3.0 and NocoBase Commercial License.
+ * For more information, please refer to: https://www.nocobase.com/agreement.
+ */
+
+import { Application } from '../index';
+import { SettingsApplication } from '../settings-app/SettingsApplication';
+
+describe('standalone settings authentication routes', () => {
+  it('keeps and rebases the auth and 2fa route families', () => {
+    const app = new SettingsApplication({ router: { type: 'memory' }, ws: false });
+
+    app.router.add('auth', { Component: () => null });
+    app.router.add('auth.signin', { path: '/signin', skipAuthCheck: true, Component: () => null });
+    app.router.add('auth.signup', { path: '/signup', skipAuthCheck: true, Component: () => null });
+    app.router.add('auth.forgotPassword', {
+      path: '/forgot-password',
+      skipAuthCheck: true,
+      Component: () => null,
+    });
+    app.router.add('auth.resetPassword', {
+      path: '/reset-password',
+      skipAuthCheck: true,
+      Component: () => null,
+    });
+    app.router.add('2fa', { Component: () => null });
+    app.router.add('2fa.verify', { path: '/2fa', skipAuthCheck: true, Component: () => null });
+
+    expect(app.router.get('auth.signin')).toMatchObject({ path: '/settings/signin', skipAuthCheck: true });
+    expect(app.router.get('auth.signup')).toMatchObject({ path: '/settings/signup', skipAuthCheck: true });
+    expect(app.router.get('auth.forgotPassword')).toMatchObject({
+      path: '/settings/forgot-password',
+      skipAuthCheck: true,
+    });
+    expect(app.router.get('auth.resetPassword')).toMatchObject({
+      path: '/settings/reset-password',
+      skipAuthCheck: true,
+    });
+    expect(app.router.get('2fa.verify')).toMatchObject({ path: '/settings/2fa', skipAuthCheck: true });
+    expect(app.router.matchRoutes('/settings/signin')?.map((match) => match.route.id)).toContain('auth.signin');
+    expect(app.router.isSkippedAuthCheckRoute('/settings/reset-password')).toBe(true);
+  });
+
+  it('does not change the default Client V2 authentication routes', () => {
+    const app = new Application({ router: { type: 'memory' }, ws: false });
+
+    app.router.add('auth', { Component: () => null });
+    app.router.add('auth.signin', { path: '/signin', skipAuthCheck: true, Component: () => null });
+    app.router.add('2fa', { Component: () => null });
+    app.router.add('2fa.verify', { path: '/2fa', skipAuthCheck: true, Component: () => null });
+
+    expect(app.router.get('auth.signin')).toMatchObject({ path: '/signin', skipAuthCheck: true });
+    expect(app.router.get('2fa.verify')).toMatchObject({ path: '/2fa', skipAuthCheck: true });
+  });
+
+  it('continues to reject unrelated routes from the shared plugin lane', () => {
+    const app = new SettingsApplication({ router: { type: 'memory' }, ws: false });
+
+    app.router.add('admin.demo', { path: '/admin/demo' });
+    app.router.add('public.demo', { path: '/public/demo' });
+    app.router.add('mobile.demo', { path: '/mobile/demo' });
+
+    expect(app.router.has('admin.demo')).toBe(false);
+    expect(app.router.has('public.demo')).toBe(false);
+    expect(app.router.has('mobile.demo')).toBe(false);
+  });
+});

package/src/__tests__/settings-center.test.tsx

@@ -7,14 +7,15 @@
  * For more information, please refer to: https://www.nocobase.com/agreement.
  */
 
-import { ACLRolesCheckProvider, createMockClient, Plugin } from '@nocobase/client-v2';
+import { ACLRolesCheckProvider, Plugin } from '@nocobase/client-v2';
 import { render, screen, waitFor, fireEvent } from '@testing-library/react';
 import React from 'react';
 import { message } from 'antd';
 import { AdminSettingsLayoutModel as ClientV2AdminSettingsLayoutModel } from '../settings-center';
 import { AdminSettingsLayoutModel as ClientV1AdminSettingsLayoutModel } from '../../../client/src/pm/AdminSettingsLayoutModel';
-import { NocoBaseBuildInPlugin } from '../nocobase-buildin-plugin';
+import { SettingsBuildInPlugin } from '../settings-app/SettingsBuildInPlugin';
 import { matchSettingsRoute, sortTopLevelSettings } from '../settings-center/utils';
+import { createMockSettingsClient } from './mockSettingsApplication';
 
 class TestAclPlugin extends Plugin {
   async load() {
@@ -22,7 +23,7 @@ class TestAclPlugin extends Plugin {
   }
 }
 
-type MockClientApplication = ReturnType<typeof createMockClient>;
+type MockClientApplication = ReturnType<typeof createMockSettingsClient>;
 
 const renderApp = async (app: MockClientApplication) => {
   const Root = app.getRootComponent();
@@ -174,10 +175,10 @@ describe('settings center', () => {
     expect(sortTopLevelSettings(settings).map((item) => item.name)).toEqual(['api-keys', 'backups', 'system-settings']);
   });
 
-  it('should redirect /admin/settings to system-settings by default', async () => {
-    const app = createMockClient({
-      plugins: [NocoBaseBuildInPlugin, TestAclPlugin],
-      router: { type: 'memory', initialEntries: ['/admin/settings'] },
+  it('should redirect /settings to system-settings by default', async () => {
+    const app = createMockSettingsClient({
+      plugins: [SettingsBuildInPlugin, TestAclPlugin],
+      router: { type: 'memory', initialEntries: ['/settings'] },
     });
     mockAdminRuntime(app);
 
@@ -188,9 +189,9 @@ describe('settings center', () => {
   });
 
   it('should expose current language variable as enabled-language selector', async () => {
-    const app = createMockClient({
-      plugins: [NocoBaseBuildInPlugin, TestAclPlugin],
-      router: { type: 'memory', initialEntries: ['/admin/settings/system-settings'] },
+    const app = createMockSettingsClient({
+      plugins: [SettingsBuildInPlugin, TestAclPlugin],
+      router: { type: 'memory', initialEntries: ['/settings/system-settings'] },
     });
     mockAdminRuntime(app, {
       systemSettings: {
@@ -218,9 +219,9 @@ describe('settings center', () => {
   });
 
   it('should fallback to plugin-manager when system-settings is not allowed', async () => {
-    const app = createMockClient({
-      plugins: [NocoBaseBuildInPlugin, TestAclPlugin],
-      router: { type: 'memory', initialEntries: ['/admin/settings'] },
+    const app = createMockSettingsClient({
+      plugins: [SettingsBuildInPlugin, TestAclPlugin],
+      router: { type: 'memory', initialEntries: ['/settings'] },
     });
     mockAdminRuntime(app, {
       snippets: ['pm', '!pm.system-settings.system-settings'],
@@ -244,9 +245,9 @@ describe('settings center', () => {
   });
 
   it('should hide plugin-manager menu item when pm snippet is missing', async () => {
-    const app = createMockClient({
-      plugins: [NocoBaseBuildInPlugin, TestAclPlugin],
-      router: { type: 'memory', initialEntries: ['/admin/settings/system-settings'] },
+    const app = createMockSettingsClient({
+      plugins: [SettingsBuildInPlugin, TestAclPlugin],
+      router: { type: 'memory', initialEntries: ['/settings/system-settings'] },
     });
     mockAdminRuntime(app, {
       snippets: ['pm.system-settings.system-settings'],
@@ -260,9 +261,9 @@ describe('settings center', () => {
   });
 
   it('should show route empty state for unknown settings routes', async () => {
-    const app = createMockClient({
-      plugins: [NocoBaseBuildInPlugin, TestAclPlugin],
-      router: { type: 'memory', initialEntries: ['/admin/settings/unknown'] },
+    const app = createMockSettingsClient({
+      plugins: [SettingsBuildInPlugin, TestAclPlugin],
+      router: { type: 'memory', initialEntries: ['/settings/unknown'] },
     });
     mockAdminRuntime(app);
 
@@ -286,9 +287,9 @@ describe('settings center', () => {
       }
     }
 
-    const app = createMockClient({
-      plugins: [NocoBaseBuildInPlugin, TestAclPlugin, HiddenSettingsPlugin],
-      router: { type: 'memory', initialEntries: ['/admin/settings/hidden-demo'] },
+    const app = createMockSettingsClient({
+      plugins: [SettingsBuildInPlugin, TestAclPlugin, HiddenSettingsPlugin],
+      router: { type: 'memory', initialEntries: ['/settings/hidden-demo'] },
     });
     mockAdminRuntime(app);
 
@@ -313,9 +314,9 @@ describe('settings center', () => {
       }
     }
 
-    const app = createMockClient({
-      plugins: [NocoBaseBuildInPlugin, TestAclPlugin, ProtectedSettingsPlugin],
-      router: { type: 'memory', initialEntries: ['/admin/settings/secure-demo'] },
+    const app = createMockSettingsClient({
+      plugins: [SettingsBuildInPlugin, TestAclPlugin, ProtectedSettingsPlugin],
+      router: { type: 'memory', initialEntries: ['/settings/secure-demo'] },
     });
     mockAdminRuntime(app, {
       snippets: ['pm', 'pm.system-settings.system-settings', '!pm.secure-demo.index'],
@@ -345,9 +346,9 @@ describe('settings center', () => {
       }
     }
 
-    const app = createMockClient({
-      plugins: [NocoBaseBuildInPlugin, TestAclPlugin, MenuAclPlugin],
-      router: { type: 'memory', initialEntries: ['/admin/settings/menu-acl-demo'] },
+    const app = createMockSettingsClient({
+      plugins: [SettingsBuildInPlugin, TestAclPlugin, MenuAclPlugin],
+      router: { type: 'memory', initialEntries: ['/settings/menu-acl-demo'] },
     });
     mockAdminRuntime(app, {
       snippets: ['pm', 'pm.system-settings.system-settings', '!pm.menu-acl-demo.menu'],
@@ -378,9 +379,9 @@ describe('settings center', () => {
       }
     }
 
-    const app = createMockClient({
-      plugins: [NocoBaseBuildInPlugin, TestAclPlugin, ManySettingsPlugin],
-      router: { type: 'memory', initialEntries: ['/admin/settings/scroll-demo-29'] },
+    const app = createMockSettingsClient({
+      plugins: [SettingsBuildInPlugin, TestAclPlugin, ManySettingsPlugin],
+      router: { type: 'memory', initialEntries: ['/settings/scroll-demo-29'] },
     });
     mockAdminRuntime(app);
 
@@ -394,9 +395,9 @@ describe('settings center', () => {
   });
 
   it('should save system settings through systemSettings:put', async () => {
-    const app = createMockClient({
-      plugins: [NocoBaseBuildInPlugin, TestAclPlugin],
-      router: { type: 'memory', initialEntries: ['/admin/settings/system-settings'] },
+    const app = createMockSettingsClient({
+      plugins: [SettingsBuildInPlugin, TestAclPlugin],
+      router: { type: 'memory', initialEntries: ['/settings/system-settings'] },
     });
     mockAdminRuntime(app);
 
@@ -413,9 +414,9 @@ describe('settings center', () => {
   });
 
   it('should block invalid logo uploads by storage rules', async () => {
-    const app = createMockClient({
-      plugins: [NocoBaseBuildInPlugin, TestAclPlugin],
-      router: { type: 'memory', initialEntries: ['/admin/settings/system-settings'] },
+    const app = createMockSettingsClient({
+      plugins: [SettingsBuildInPlugin, TestAclPlugin],
+      router: { type: 'memory', initialEntries: ['/settings/system-settings'] },
     });
     const messageErrorSpy = vi.spyOn(message, 'error').mockImplementation(() => {
       return undefined as any;

package/src/__tests__/settings-layout-root.test.tsx

@@ -0,0 +1,260 @@
+/**
+ * This file is part of the NocoBase (R) project.
+ * Copyright (c) 2020-2024 NocoBase Co., Ltd.
+ * Authors: NocoBase Team.
+ *
+ * This project is dual-licensed under AGPL-3.0 and NocoBase Commercial License.
+ * For more information, please refer to: https://www.nocobase.com/agreement.
+ */
+
+import { render, screen, waitFor } from '@testing-library/react';
+import MockAdapter from 'axios-mock-adapter';
+import React from 'react';
+import { afterEach, describe, expect, it, vi } from 'vitest';
+import { ACLRolesCheckProvider } from '../acl';
+import { Plugin } from '../Plugin';
+import { SettingsApplication } from '../settings-app/SettingsApplication';
+import { SettingsBuildInPlugin } from '../settings-app/SettingsBuildInPlugin';
+
+class TestAclPlugin extends Plugin {
+  async load() {
+    this.app.use(ACLRolesCheckProvider);
+  }
+}
+
+class StandaloneSettingsPlugin extends Plugin {
+  async load() {
+    this.pluginSettingsManager.addMenuItem({ key: 'standalone', title: 'Standalone' });
+    this.pluginSettingsManager.addPageTabItem({
+      menuKey: 'standalone',
+      key: 'index',
+      title: 'Standalone',
+      Component: () => <div>Standalone settings page</div>,
+      sort: -1000,
+    });
+  }
+}
+
+class MultiPortalSettingsPlugin extends Plugin {
+  async load() {
+    this.pluginSettingsManager.addMenuItem({
+      key: 'multi-portal',
+      title: 'Portal manager',
+      aclSnippet: 'pm.multi-portal',
+      sort: -300,
+    });
+    this.pluginSettingsManager.addPageTabItem({
+      menuKey: 'multi-portal',
+      key: 'index',
+      title: 'Portal manager',
+      aclSnippet: 'pm.multi-portal',
+      Component: () => <div>Portal manager page</div>,
+    });
+  }
+}
+
+class PrimarySettingsPlugin extends Plugin {
+  async load() {
+    this.pluginSettingsManager.addMenuItem({
+      key: 'portal-manager',
+      title: 'Portal manager',
+      sort: -300,
+    });
+    this.pluginSettingsManager.addPageTabItem({
+      menuKey: 'portal-manager',
+      key: 'index',
+      title: 'Portal manager',
+      Component: () => <div>Portal manager page</div>,
+    });
+  }
+}
+
+describe('standalone settings layout root', () => {
+  const originalLocation = window.location;
+  const originalModernClientPrefix = window.__nocobase_modern_client_prefix__;
+
+  afterEach(() => {
+    Object.defineProperty(window, 'location', { configurable: true, value: originalLocation });
+    if (originalModernClientPrefix === undefined) {
+      delete window.__nocobase_modern_client_prefix__;
+    } else {
+      window.__nocobase_modern_client_prefix__ = originalModernClientPrefix;
+    }
+  });
+
+  it.each(['/settings', '/settings/', '/settings/index'])(
+    'redirects %s to multi-portal when it is accessible',
+    async (initialEntry) => {
+      const app = new SettingsApplication({
+        plugins: [SettingsBuildInPlugin, MultiPortalSettingsPlugin],
+        router: { type: 'memory', initialEntries: [initialEntry] },
+        ws: false,
+      });
+      const apiMock = new MockAdapter(app.apiClient.axios);
+      app.dataSourceManager.ensureLoaded = async () => {};
+      apiMock.onGet('app:getLang').reply(200, {
+        data: { lang: 'en-US', resources: { client: {} }, cron: {} },
+      });
+      apiMock.onGet('/auth:check').reply(200, { data: { id: 1, nickname: 'Admin' } });
+      apiMock.onGet('app:getInfo').reply(200, { data: { id: 'mock-app', version: 'test' } });
+      apiMock.onGet('systemSettings:get').reply(200, {
+        data: { id: 1, title: 'NocoBase', raw_title: 'NocoBase', logo: null },
+      });
+
+      const Root = app.getRootComponent();
+      render(<Root />);
+
+      await waitFor(() => {
+        expect(app.router.state.location.pathname).toBe('/settings/multi-portal');
+      });
+    },
+  );
+
+  it('falls back to system-settings when multi-portal is not registered', async () => {
+    const app = new SettingsApplication({
+      plugins: [SettingsBuildInPlugin, StandaloneSettingsPlugin],
+      router: { type: 'memory', initialEntries: ['/settings'] },
+      ws: false,
+    });
+    const apiMock = new MockAdapter(app.apiClient.axios);
+    app.dataSourceManager.ensureLoaded = async () => {};
+    apiMock.onGet('app:getLang').reply(200, {
+      data: { lang: 'en-US', resources: { client: {} }, cron: {} },
+    });
+    apiMock.onGet('/auth:check').reply(200, { data: { id: 1, nickname: 'Admin' } });
+    apiMock.onGet('app:getInfo').reply(200, { data: { id: 'mock-app', version: 'test' } });
+    apiMock.onGet('systemSettings:get').reply(200, {
+      data: { id: 1, title: 'NocoBase', raw_title: 'NocoBase', logo: null },
+    });
+
+    const Root = app.getRootComponent();
+    render(<Root />);
+
+    await waitFor(() => {
+      expect(app.router.state.location.pathname).toBe('/settings/system-settings');
+    });
+  });
+
+  it('falls back to system-settings when multi-portal is not accessible', async () => {
+    const app = new SettingsApplication({
+      plugins: [SettingsBuildInPlugin, TestAclPlugin, MultiPortalSettingsPlugin],
+      router: { type: 'memory', initialEntries: ['/settings'] },
+      ws: false,
+    });
+    const apiMock = new MockAdapter(app.apiClient.axios);
+    app.dataSourceManager.ensureLoaded = async () => {};
+    apiMock.onGet('app:getLang').reply(200, {
+      data: { lang: 'en-US', resources: { client: {} }, cron: {} },
+    });
+    apiMock.onGet('/auth:check').reply(200, { data: { id: 1, nickname: 'Admin' } });
+    apiMock.onGet('app:getInfo').reply(200, { data: { id: 'mock-app', version: 'test' } });
+    apiMock.onGet('roles:check').reply(200, {
+      data: { role: 'member', snippets: ['!pm.multi-portal'] },
+    });
+    apiMock.onGet('systemSettings:get').reply(200, {
+      data: { id: 1, title: 'NocoBase', raw_title: 'NocoBase', logo: null },
+    });
+
+    const Root = app.getRootComponent();
+    render(<Root />);
+
+    await waitFor(() => {
+      expect(app.router.state.location.pathname).toBe('/settings/system-settings');
+    });
+  });
+
+  it('keeps ordinary negative-sort settings in the active Settings group sidebar', async () => {
+    const app = new SettingsApplication({
+      plugins: [SettingsBuildInPlugin, TestAclPlugin, PrimarySettingsPlugin],
+      router: { type: 'memory', initialEntries: ['/settings/portal-manager'] },
+      ws: false,
+    });
+    const apiMock = new MockAdapter(app.apiClient.axios);
+    app.dataSourceManager.ensureLoaded = async () => {};
+    apiMock.onGet('app:getLang').reply(200, {
+      data: { lang: 'en-US', resources: { client: {} }, cron: {} },
+    });
+    apiMock.onGet('/auth:check').reply(200, { data: { id: 1, nickname: 'Admin' } });
+    apiMock.onGet('app:getInfo').reply(200, { data: { id: 'mock-app', version: 'test' } });
+    apiMock.onGet('roles:check').reply(200, {
+      data: { role: 'root', snippets: ['pm'] },
+    });
+    apiMock.onGet('systemSettings:get').reply(200, {
+      data: { id: 1, title: 'NocoBase', raw_title: 'NocoBase', logo: null },
+    });
+
+    const Root = app.getRootComponent();
+    render(<Root />);
+
+    expect(await screen.findByText('Portal manager page')).toBeInTheDocument();
+
+    const portalManagerItem = screen.getByRole('menuitem', { name: 'Portal manager' });
+    expect(portalManagerItem.closest('aside')).toBeInTheDocument();
+    expect(screen.queryByRole('menuitem', { name: /Plugin manager$/ })).not.toBeInTheDocument();
+  });
+
+  it('uses document navigation to the standalone Settings signin page when unauthenticated', async () => {
+    const replace = vi.fn();
+    Object.defineProperty(window, 'location', {
+      configurable: true,
+      value: { ...originalLocation, replace },
+    });
+    window.__nocobase_modern_client_prefix__ = 'v';
+    const app = new SettingsApplication({
+      plugins: [SettingsBuildInPlugin],
+      router: { type: 'memory', initialEntries: ['/settings/workflow?tab=list#recent'] },
+      ws: false,
+    });
+    const apiMock = new MockAdapter(app.apiClient.axios);
+    apiMock.onGet('app:getLang').reply(200, {
+      data: { lang: 'en-US', resources: { client: {} }, cron: {} },
+    });
+    apiMock.onGet('app:getInfo').reply(200, { data: { id: 'mock-app', version: 'test' } });
+    apiMock.onGet('systemSettings:get').reply(200, {
+      data: { id: 1, title: 'NocoBase', raw_title: 'NocoBase', logo: null },
+    });
+    apiMock.onGet('/auth:check').reply(200, { data: {} });
+
+    const Root = app.getRootComponent();
+    render(<Root />);
+
+    await waitFor(() => {
+      expect(replace).toHaveBeenCalledWith('/settings/signin?redirect=%2Fsettings%2Fworkflow%3Ftab%3Dlist%23recent');
+    });
+  });
+
+  it('does not render the Settings header before the initial auth check completes', async () => {
+    let resolveAuthCheck: (response: [number, { data: { id: number } }]) => void = () => {
+      throw new Error('Auth check resolver is not initialized');
+    };
+    const authCheckResponse = new Promise<[number, { data: { id: number } }]>((resolve) => {
+      resolveAuthCheck = resolve;
+    });
+    const app = new SettingsApplication({
+      plugins: [SettingsBuildInPlugin],
+      router: { type: 'memory', initialEntries: ['/settings'] },
+      ws: false,
+    });
+    const apiMock = new MockAdapter(app.apiClient.axios);
+    app.dataSourceManager.ensureLoaded = async () => {};
+    apiMock.onGet('app:getLang').reply(200, {
+      data: { lang: 'en-US', resources: { client: {} }, cron: {} },
+    });
+    apiMock.onGet('/auth:check').reply(() => authCheckResponse);
+    apiMock.onGet('app:getInfo').reply(200, { data: { id: 'mock-app', version: 'test' } });
+    apiMock.onGet('systemSettings:get').reply(200, {
+      data: { id: 1, title: 'NocoBase', raw_title: 'NocoBase', logo: null },
+    });
+
+    const Root = app.getRootComponent();
+    render(<Root />);
+
+    await waitFor(() => {
+      expect(apiMock.history.get.some((request) => request.url === '/auth:check')).toBe(true);
+    });
+    expect(screen.queryByRole('banner')).not.toBeInTheDocument();
+
+    resolveAuthCheck([200, { data: { id: 1 } }]);
+    expect(await screen.findByRole('banner')).toBeInTheDocument();
+  });
+});