提交管理员操作一切

Tests/Store.Users.Tests/DevelopmentTokenTests.cs

@@ -0,0 +1,44 @@
+using MAX.Framework.DependencyInjection;
+using MAX.Framework.Security;
+using Microsoft.AspNetCore.Builder;
+using Microsoft.AspNetCore.Hosting;
+using Microsoft.AspNetCore.TestHost;
+using Microsoft.Extensions.Configuration;
+using Microsoft.Extensions.DependencyInjection;
+using Microsoft.Extensions.Logging;
+
+namespace Store.Users.Tests;
+
+public sealed class DevelopmentTokenTests
+{
+    [Theory]
+    [InlineData("Development", true, "test-fixed-token", "admin")]
+    [InlineData("Development", true, "incorrect-token", "")]
+    [InlineData("Development", false, "test-fixed-token", "")]
+    [InlineData("Production", true, "test-fixed-token", "")]
+    public async Task FixedToken_OnlyAuthenticatesWhenEnabledInDevelopment(
+        string environment, bool enabled, string token, string expectedUser)
+    {
+        var builder = WebApplication.CreateBuilder(new WebApplicationOptions { EnvironmentName = environment });
+        builder.WebHost.UseTestServer();
+        builder.Logging.ClearProviders();
+        builder.Configuration.AddInMemoryCollection(new Dictionary<string, string?>
+        {
+            ["Jwt:DevelopmentToken:Enabled"] = enabled.ToString(),
+            ["Jwt:DevelopmentToken:Token"] = "test-fixed-token",
+            ["Jwt:DevelopmentToken:UserName"] = "admin"
+        });
+        builder.Services.AddStoreHubJwt(builder.Configuration);
+        await using var app = builder.Build();
+        app.UseAuthentication();
+        app.MapGet("/identity", (ICurrentUser user) =>
+            user.IsAuthenticated ? user.UserName : "");
+        await app.StartAsync();
+        using var client = app.GetTestClient();
+        client.DefaultRequestHeaders.Authorization = new("Bearer", token);
+
+        Assert.Equal(expectedUser, await client.GetStringAsync("/identity"));
+        // 同一凭据不依赖首次请求创建的会话。
+        Assert.Equal(expectedUser, await client.GetStringAsync("/identity"));
+    }
+}