package jnpf.dmsService;
|
|
import jnpf.base.UserInfo;
|
import jnpf.dmsEntity.download.form.DmsFileDownloadTicketRequest;
|
import jnpf.dmsEntity.download.model.DmsFileDownloadTicket;
|
import jnpf.dmsEntity.download.vo.DmsFileDownloadTicketVO;
|
import jnpf.dmsEntity.permission.entity.DmsFileVersionEntity;
|
import jnpf.dmsEntity.permission.enums.DmsPermissionAction;
|
import jnpf.dmsEntity.permission.enums.DmsResourceType;
|
import jnpf.dmsEntity.preview.model.DmsWatermarkSnapshot;
|
import jnpf.dmsEntity.storage.entity.DmsFileObjectEntity;
|
import jnpf.dmsMapper.DmsFileObjectMapper;
|
import jnpf.dmsMapper.DmsFileVersionMapper;
|
import jnpf.dmsPermission.DmsCurrentIdentity;
|
import jnpf.dmsPermission.DmsPermissionError;
|
import jnpf.dmsPermission.DmsPermissionException;
|
import jnpf.dmsPermission.DmsPermissionExecutionContext;
|
import jnpf.dmsPermission.DmsPermissionGuard;
|
import jnpf.dmsPermission.DmsPermissionOperation;
|
import jnpf.dmsService.pdf.DmsPdfGenerationTaskService;
|
import org.junit.jupiter.api.BeforeEach;
|
import org.junit.jupiter.api.Test;
|
import org.mockito.ArgumentCaptor;
|
|
import java.util.Collections;
|
import java.util.UUID;
|
|
import static org.junit.jupiter.api.Assertions.assertEquals;
|
import static org.junit.jupiter.api.Assertions.assertThrows;
|
import static org.junit.jupiter.api.Assertions.assertTrue;
|
import static org.mockito.ArgumentMatchers.any;
|
import static org.mockito.ArgumentMatchers.anyLong;
|
import static org.mockito.Mockito.doThrow;
|
import static org.mockito.Mockito.mock;
|
import static org.mockito.Mockito.never;
|
import static org.mockito.Mockito.verify;
|
import static org.mockito.Mockito.when;
|
|
class DmsFileDownloadServiceTest {
|
private final DmsCurrentIdentity currentIdentity = mock(DmsCurrentIdentity.class);
|
private final DmsPermissionGuard permissionGuard = mock(DmsPermissionGuard.class);
|
private final DmsFileVersionMapper versionMapper = mock(DmsFileVersionMapper.class);
|
private final DmsFileObjectMapper objectMapper = mock(DmsFileObjectMapper.class);
|
private final DmsFileDownloadTicketIssuer ticketIssuer = mock(DmsFileDownloadTicketIssuer.class);
|
private final DmsFileOperationLogService operationLogService = mock(DmsFileOperationLogService.class);
|
private final DmsWatermarkPreviewResolver watermarkResolver = mock(DmsWatermarkPreviewResolver.class);
|
private final DmsPdfGenerationTaskService pdfGenerationTaskService = mock(DmsPdfGenerationTaskService.class);
|
private final DmsFileDownloadService service = new DmsFileDownloadService(currentIdentity,
|
permissionGuard, versionMapper, objectMapper, ticketIssuer, operationLogService,
|
watermarkResolver, pdfGenerationTaskService);
|
private final UUID documentId = UUID.fromString("018f0000-0000-7000-8000-000000000701");
|
private final UUID versionId = UUID.fromString("018f0000-0000-7000-8000-000000000702");
|
private final UUID operationId = UUID.fromString("018f0000-0000-7000-8000-000000000703");
|
private UserInfo user;
|
|
@BeforeEach
|
void setUp() {
|
user = new UserInfo();
|
user.setTenantId("tenant-1");
|
user.setUserId("user-1");
|
when(currentIdentity.requireUser()).thenReturn(user);
|
when(currentIdentity.tenantId(user)).thenReturn("tenant-1");
|
when(permissionGuard.execute(any(), any())).thenAnswer(invocation -> {
|
DmsPermissionOperation<?> operation = invocation.getArgument(1);
|
return operation.execute();
|
});
|
when(ticketIssuer.issue(any(DmsFileDownloadTicket.class),
|
org.mockito.ArgumentMatchers.eq(DmsFileDownloadService.TICKET_TTL_SECONDS)))
|
.thenReturn("download-ticket");
|
}
|
|
@Test
|
void uncontrolledVersionStillRequiresDownloadPermissionCheck() {
|
DmsFileVersionEntity version = version();
|
version.setShifouShoukong("no");
|
DmsWatermarkSnapshot watermark = new DmsWatermarkSnapshot();
|
when(versionMapper.selectCurrentEffective("tenant-1", documentId)).thenReturn(version);
|
when(versionMapper.selectReadableByTenantAndId("tenant-1", versionId)).thenReturn(version);
|
when(objectMapper.selectByTenantAndFileVersionId("tenant-1", versionId)).thenReturn(fileObject());
|
when(watermarkResolver.resolveDownload(org.mockito.ArgumentMatchers.eq(user),
|
org.mockito.ArgumentMatchers.eq("tenant-1"), org.mockito.ArgumentMatchers.eq(version), any()))
|
.thenReturn(Collections.singletonList(watermark));
|
|
DmsFileDownloadTicketVO result = service.createTicket(
|
request(DmsResourceType.DOCUMENT, documentId));
|
|
assertEquals(versionId, result.getFileVersionId());
|
assertEquals("download-ticket", result.getAccessTicket());
|
assertTrue(result.getExpiresAt().getTime() > System.currentTimeMillis());
|
|
ArgumentCaptor<DmsPermissionExecutionContext> contextCaptor =
|
ArgumentCaptor.forClass(DmsPermissionExecutionContext.class);
|
verify(permissionGuard).execute(contextCaptor.capture(), any());
|
assertEquals(DmsPermissionAction.DOWNLOAD, contextCaptor.getValue().getActionCode());
|
assertEquals(DmsResourceType.FILE_VERSION, contextCaptor.getValue().getResourceType());
|
assertEquals(versionId, contextCaptor.getValue().getResourceId());
|
assertEquals(operationId, contextCaptor.getValue().getOperationId());
|
|
ArgumentCaptor<DmsFileDownloadTicket> payloadCaptor =
|
ArgumentCaptor.forClass(DmsFileDownloadTicket.class);
|
verify(ticketIssuer).issue(payloadCaptor.capture(),
|
org.mockito.ArgumentMatchers.eq(DmsFileDownloadService.TICKET_TTL_SECONDS));
|
DmsFileDownloadTicket payload = payloadCaptor.getValue();
|
assertEquals(DmsFileDownloadTicket.SCOPE, payload.getScope());
|
assertEquals(Collections.singletonList(watermark), payload.getWatermarks());
|
verify(operationLogService).recordDownload(user, "tenant-1", documentId, versionId,
|
"quality-manual.docx", operationId);
|
verify(pdfGenerationTaskService).enqueueMissingEligible("tenant-1", versionId,
|
"quality-manual.docx", "a".repeat(64));
|
}
|
|
@Test
|
void uncontrolledVersionWithoutDownloadPermissionIsRejected() {
|
DmsFileVersionEntity version = version();
|
version.setShifouShoukong("no");
|
when(versionMapper.selectReadableByTenantAndId("tenant-1", versionId)).thenReturn(version);
|
doThrow(DmsPermissionException.of(DmsPermissionError.PERMISSION_DENIED,
|
"no download permission")).when(permissionGuard).execute(any(), any());
|
|
DmsPermissionException error = assertThrows(DmsPermissionException.class,
|
() -> service.createTicket(request(DmsResourceType.FILE_VERSION, versionId)));
|
|
assertEquals(DmsPermissionError.PERMISSION_DENIED, error.getError());
|
verify(ticketIssuer, never()).issue(any(), anyLong());
|
}
|
|
@Test
|
void rejectsUnreadableHistoricalVersionBeforePermissionCheck() {
|
DmsPermissionException error = assertThrows(DmsPermissionException.class,
|
() -> service.createTicket(request(DmsResourceType.FILE_VERSION, versionId)));
|
|
assertEquals(DmsPermissionError.RESOURCE_NOT_FOUND, error.getError());
|
verify(permissionGuard, never()).execute(any(), any());
|
verify(ticketIssuer, never()).issue(any(), anyLong());
|
}
|
|
private DmsFileDownloadTicketRequest request(DmsResourceType type, UUID id) {
|
DmsFileDownloadTicketRequest request = new DmsFileDownloadTicketRequest();
|
request.setResourceType(type);
|
request.setResourceId(id);
|
request.setOperationId(operationId);
|
return request;
|
}
|
|
private DmsFileVersionEntity version() {
|
DmsFileVersionEntity version = new DmsFileVersionEntity();
|
version.setId(versionId);
|
version.setDocumentId(documentId);
|
version.setFileName("quality-manual.docx");
|
version.setMimeType("application/vnd.openxmlformats-officedocument.wordprocessingml.document");
|
version.setSizeBytes(2048L);
|
version.setChecksumSha256("a".repeat(64));
|
return version;
|
}
|
|
private DmsFileObjectEntity fileObject() {
|
DmsFileObjectEntity object = new DmsFileObjectEntity();
|
object.setFileVersionId(versionId);
|
object.setStoragePlatform("seaweedfs-1");
|
object.setBucketName("jnpf-dms");
|
object.setBasePath("dms/");
|
object.setObjectPath("2026/08/24/document/");
|
object.setObjectName("quality-manual-v1.docx");
|
return object;
|
}
|
}
|
