test(auth): verify replay uses rotated access token

src/shared/api/http.test.ts

@@ -109,6 +109,7 @@ describe('API error diagnostics', () => {
     const refresh = vi.fn(async () => 'access-rotated')
     const expired = vi.fn()
     let orderRequests = 0
+    let replayAuthorization: unknown
     registerAuthRefreshHandler(refresh)
     registerAuthSessionExpiredHandler(expired)
     http.defaults.adapter = async (config) => {
@@ -121,6 +122,7 @@ describe('API error diagnostics', () => {
           data: { code: 'A0401', message: '登录状态已过期' },
         })
       }
+      replayAuthorization = config.headers.Authorization
       return {
         status: 200,
         statusText: 'OK',
@@ -135,7 +137,7 @@ describe('API error diagnostics', () => {
     expect(refresh).toHaveBeenCalledTimes(1)
     expect(expired).not.toHaveBeenCalled()
     expect(orderRequests).toBe(2)
-    expect(response.config.headers.Authorization).toBe('Bearer access-rotated')
+    expect(replayAuthorization).toBe('Bearer access-rotated')
-    expect(response.data).toEqual([{ id: 'order-1' }])
+    expect(response).toEqual({ code: '200', message: 'success', data: [{ id: 'order-1' }] })
   })
 })