test(security): cover gateway token authentication

2026-09-08 21:22:24 +08:00
parent 23ac00eb61
commit d0c4d5f997
2 changed files with 34 additions and 0 deletions
@@ -41,4 +41,34 @@ class JwtAuthenticationFilterTest {
        assertThat(invoked).isTrue();
        assertThat(SecurityContextHolder.getContext().getAuthentication()).isNull();
    }
+
+    @Test
+    void authenticatesMinimalOverseasTokenWithGatewaySnapshot() throws Exception {
+        Jwt jwt = Jwt.withTokenValue("overseas").header("alg", "RS256").subject("42")
+                .issuedAt(Instant.now()).expiresAt(Instant.now().plusSeconds(60))
+                .claim("tenant_id", 0L).claim("app_code", "PLATFORM")
+                .claim("permission_version", 7L).claim("token_version", 1).build();
+        JwtAuthenticationFilter filter = new JwtAuthenticationFilter(token -> jwt, new JwtClaimsMapper(),
+                new JsonAuthenticationEntryPoint(new ObjectMapper()),
+                new GatewayAccessTokenSessionValidator("gateway-secret"));
+        MockHttpServletRequest request = new MockHttpServletRequest();
+        request.setRequestURI("/api/platform/v1/last-leg/orders");
+        request.addHeader(HttpHeaders.AUTHORIZATION, "Bearer overseas");
+        request.addHeader(GatewayAccessTokenSessionValidator.TOKEN_HEADER, "gateway-secret");
+        request.addHeader(GatewayAccessTokenSessionValidator.ROLES_HEADER, "PLATFORM_ADMIN");
+        request.addHeader(GatewayAccessTokenSessionValidator.AUTHORITIES_HEADER, "platform:lastleg:view");
+        MockHttpServletResponse response = new MockHttpServletResponse();
+        AtomicBoolean invoked = new AtomicBoolean();
+
+        filter.doFilter(request, response, (request1, response1) -> {
+            var authentication = SecurityContextHolder.getContext().getAuthentication();
+            assertThat(authentication).isNotNull();
+            assertThat(authentication.getAuthorities()).extracting("authority")
+                    .contains("APP_PLATFORM", "ROLE_PLATFORM_ADMIN", "platform:lastleg:view");
+            invoked.set(true);
+        });
+
+        assertThat(invoked).isTrue();
+        assertThat(response.getStatus()).isEqualTo(200);
+    }
 }