优化

file/src/test/java/com/baiyue/file/controller/InternalLoadingEvidenceControllerTest.java

@@ -0,0 +1,52 @@
+package com.baiyue.file.controller;
+
+import com.baiyue.common.core.exception.BizException;
+import com.baiyue.file.service.LoadingEvidenceService;
+import jakarta.annotation.Resource;
+import org.junit.jupiter.api.Test;
+import org.springframework.boot.test.mock.mockito.MockBean;
+import org.springframework.test.context.TestPropertySource;
+import org.springframework.test.context.junit.jupiter.SpringJUnitConfig;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.assertj.core.api.Assertions.assertThatThrownBy;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.verifyNoInteractions;
+import static org.mockito.Mockito.when;
+
+@SpringJUnitConfig(InternalLoadingEvidenceController.class)
+@TestPropertySource(properties = "baiyue.security.internal-service-token=internal-token")
+class InternalLoadingEvidenceControllerTest {
+    @MockBean LoadingEvidenceService service;
+    @Resource InternalLoadingEvidenceController controller;
+
+    @Test void downloadsOwnedEvidenceBehindInternalToken() {
+        when(service.download(81L, 91L, 101L)).thenReturn(
+            new LoadingEvidenceService.Download("door.jpg", "image/jpeg", new byte[]{1, 2, 3}));
+
+        var response = controller.download("internal-token", 81L, 91L, 101L);
+
+        assertThat(response.getBody()).containsExactly(1, 2, 3);
+        assertThat(response.getHeaders().getContentType().toString()).isEqualTo("image/jpeg");
+        assertThat(response.getHeaders().getCacheControl()).contains("no-store");
+        verify(service).download(81L, 91L, 101L);
+    }
+
+    @Test void rejectsInvalidTokenBeforeReadingEvidence() {
+        assertThatThrownBy(() -> controller.download("wrong", 81L, 91L, 101L))
+            .isInstanceOf(BizException.class).hasMessageContaining("凭证无效");
+        verifyNoInteractions(service);
+    }
+
+    @Test void fallsBackForInvalidOrNonImageContentTypes() {
+        when(service.download(81L, 91L, 101L)).thenReturn(
+            new LoadingEvidenceService.Download("door.jpg", "not a/media/type", new byte[]{1}));
+        when(service.download(81L, 91L, 102L)).thenReturn(
+            new LoadingEvidenceService.Download("door.txt", "text/plain", new byte[]{2}));
+
+        assertThat(controller.download("internal-token", 81L, 91L, 101L).getHeaders().getContentType())
+            .isEqualTo(org.springframework.http.MediaType.APPLICATION_OCTET_STREAM);
+        assertThat(controller.download("internal-token", 81L, 91L, 102L).getHeaders().getContentType())
+            .isEqualTo(org.springframework.http.MediaType.APPLICATION_OCTET_STREAM);
+    }
+}