优化

iam/src/test/java/com/baiyue/iam/controller/InternalCustomerExportContractTest.java

@@ -40,4 +40,17 @@ class InternalCustomerExportContractTest {
         assertEquals(ResultCode.SUCCESS.code(), response.code());
         verify(service).exportMerchants(null, 100, "柏悦", "ACTIVE");
     }
+
+    @Test
+    void exposesFinanceCustomerMasterDataOnlyWithInternalToken() {
+        BizException denied = assertThrows(BizException.class,
+                () -> controller.financeCustomers(null, 1, 20, "Alice", "ACTIVE"));
+        assertEquals(ResultCode.FORBIDDEN, denied.getResultCode());
+
+        when(service.pageFinanceCustomers(1, 20, "Alice", "ACTIVE", null))
+                .thenReturn(new com.baiyue.common.core.api.PageResult<>(List.of(), 1, 20, 0, 0));
+        var response = controller.financeCustomers("test-internal-service-token-at-least-32-bytes", 1, 20, "Alice", "ACTIVE");
+        assertEquals(ResultCode.SUCCESS.code(), response.code());
+        verify(service).pageFinanceCustomers(1, 20, "Alice", "ACTIVE", null);
+    }
 }

iam/src/test/java/com/baiyue/iam/repository/CustomerListExportProviderRepositoryTest.java

@@ -40,8 +40,8 @@ class CustomerListExportProviderRepositoryTest {
         assertThat(query.getSqlSegment())
                 .contains("tenant_type")
                 .contains("status")
-                .contains("tenant_code")
                 .contains("tenant_name")
+                .doesNotContain("tenant_code")
                 .contains("id >")
                 .contains("id <=")
                 .contains("ORDER BY id ASC")

iam/src/test/java/com/baiyue/iam/service/TenantServiceTest.java

@@ -93,6 +93,24 @@ class TenantServiceTest {
         verify(repository).pageMerchants(1, 10, "Example", "ACTIVE");
     }
 
+    @Test
+    void pageFinanceCustomersKeepsFullContactSummaryForInternalFinance() {
+        IamTenant tenant = merchant(10001L, "ACTIVE");
+        tenant.setTenantCode("TEN10001");
+        tenant.setTenantName("Example Merchant");
+        tenant.setContactName("Alice");
+        tenant.setContactPhone("13800138000");
+        when(repository.pageFinanceCustomers(1, 10, "Alice", "ACTIVE", null))
+                .thenReturn(new PageResult<>(List.of(tenant), 1, 10, 1, 1));
+
+        var result = service.pageFinanceCustomers(1, 10, "Alice", "ACTIVE", null);
+
+        assertEquals("TEN10001", result.records().get(0).tenantCode());
+        assertEquals("Alice", result.records().get(0).contactName());
+        assertEquals("13800138000", result.records().get(0).contactPhone());
+        verify(repository).pageFinanceCustomers(1, 10, "Alice", "ACTIVE", null);
+    }
+
     @Test
     void platformCanMaintainAndDisableOnlyMerchantTenant() {
         IamTenant tenant = merchant(10001L, "ACTIVE");