Files
huangzd1997 6d46506726 fix: 全维度审查修复(安全/正确性/性能/稳定性/客户端/前端)
安全
- /api/ziniao/** 五个匿名接口加管理员鉴权(此前可匿名换取任意员工店铺登录令牌)
- 删除 Flask 遗留后门:默认密码建超管 + 每次启动写生产 users 表(服务端与客户端各一份)
- 进度/详情接口归属过滤:新增 TaskProgressOwnershipSupport,11 模块 progress/light 与
  /tasks/batch 接入,DTO 补 userId,前端 13 个查询封装补传(未传时后端不过滤,兼容旧端)
- 代理提取链接(含账密)不再明文入日志(新增 common/util/SecretMasking)
- 全局异常兜底不再回传原始异常信息;内部令牌比较改常量时间
- 登录加失败计数与锁定(10 次锁 15 分钟);品牌源文件下载加 SSRF 防护
- AdminApiGuardFilter 覆盖前缀从 2 扩到 15(开关默认 false,行为不变,为收紧做准备)
- 生产关闭 springdoc/knife4j(/doc.html 匿名可读全部接口定义)

正确性
- 40901/40902 拆分:锁竞争不再被伪装成 success=true(此前客户端停止重试、分片静默丢失)
- 假成功收敛:集采明细批量写失败改为抛出、去重 worker 异常标失败、4 个 worker 改判
  success 字段、publish 空 ASIN 行参与批次 flush、巡店删除全失败带 error 上报
- 客户端心跳 discard 移入 finally(7 模块,失败路径不再留僵尸 RUNNING 任务)
- 状态机条件更新:跟价停止循环、集采 activate/fail、imagevideo 归档回填、店铺匹配提交

性能
- 前端入口包 JS 1.05MB→204KB、CSS 355KB→10.7KB(Element Plus 改按需 + el-config-provider)
- 载荷引用计数按指针里的 taskId 收敛(原 JSON 列 IN 全表扫且逐行调用)
- 店铺明细多值批量 INSERT;快照 upsert 预载缓存;结果文件列改单条 UPDATE
- 新增迁移 V120(补 3 个缺失索引)/V121(删 4 个被覆盖的冗余索引)/V122(URL 前缀索引)

稳定性
- 新增 common/util/ThreadPools 有界线程池替换 5 处无界队列(防堆积 OOM)
- Redis 锁释放改 Lua 原子校验(原裸 delete 会误删他人已过期的锁)
- imagevideo 加死节点接管;锁续期失败重试;调度池 4→16;openStream 全部加超时
- 事务内远程对象删除移到提交后;启动恢复锁按实例命名

客户端
- 不再 taskkill /f /im chrome.exe(改为按调试端口精准回收,不杀用户自己的浏览器)
- 密码检测不再无条件杀紫鸟进程;品牌检测加全局互斥(代理池不再互相覆盖)
- base_dir 统一到 exe 目录(原被 os.getcwd() 覆盖,日志/缓存会分裂两个目录)
- 缓存加定时清理;图片下载加超时;mkstemp 句柄托管

测试
- 同步更新受影响的契约测试(构造器签名/条件更新/方法改名/新增接口方法等)
- 修复 FaultInjectionTest 等 3 处 mock 未 stub 流式 read 导致的读循环 OOM
- mvn test 2795 个测试全绿
2026-09-14 04:15:36 +08:00

175 lines
6.2 KiB
TypeScript

import { test } from 'node:test'
import assert from 'node:assert/strict'
import { http } from '../src/shared/api/http.ts'
import {
parsePublish,
activatePublishTask,
activatePublishFile,
getPublishItemsPage,
getPublishItemsPageUrl,
getPublishTaskProgressBatch,
submitPublishTaskResult,
getPublishDashboard,
getPublishHistory,
deletePublishTask,
type PublishParseRequest,
type PublishTaskResultRequest,
type PublishTaskBatchVo,
} from '../src/shared/api/types/modules/publish.ts'
function setupWindow() {
;(globalThis as Record<string, unknown>).window = {
localStorage: { getItem: () => '42' },
location: { origin: 'http://localhost' },
}
}
function mockRequest(
t: Parameters<typeof test>[1] extends (t: infer T) => unknown ? T : never,
impl: (config: { url?: string; method?: string; params?: Record<string, unknown>; data?: unknown; timeout?: number }) => Promise<unknown>,
) {
t.mock.method(http, 'request', impl as never)
}
const okResponse = (data: unknown) => Promise.resolve({ data: { success: true, message: 'ok', data } })
const parseRequest: Omit<PublishParseRequest, 'user_id'> = {
files: [{ fileKey: 'k1', originalFilename: 'a.xlsx' }],
publish_country: 'US',
sync_countries: ['CA'],
}
test('test_publish_parse_url_payload', async (t) => {
setupWindow()
let captured: { url?: string; method?: string; data?: unknown; timeout?: number } = {}
mockRequest(t, (config) => {
captured = config
return okResponse({ taskId: 1, files: [] })
})
await parsePublish(parseRequest)
assert.equal(captured.url, '/newApi/api/publish/parse')
assert.equal(captured.method, 'POST')
assert.deepEqual(captured.data, { ...parseRequest, user_id: 42 })
assert.equal(captured.timeout, 180000)
})
test('test_publish_activate_task', async (t) => {
setupWindow()
let captured: { url?: string; method?: string } = {}
mockRequest(t, (config) => {
captured = config
return okResponse(null)
})
await activatePublishTask(7)
assert.equal(captured.url, '/newApi/api/publish/tasks/7/activate')
assert.equal(captured.method, 'POST')
})
test('test_publish_activate_file', async (t) => {
setupWindow()
let captured: { url?: string; method?: string } = {}
mockRequest(t, (config) => {
captured = config
return okResponse(null)
})
await activatePublishFile(7, 9)
assert.equal(captured.url, '/newApi/api/publish/tasks/7/files/9/activate')
assert.equal(captured.method, 'POST')
})
test('test_publish_items_page_params', async (t) => {
setupWindow()
let captured: { url?: string; params?: Record<string, unknown> } = {}
mockRequest(t, (config) => {
captured = config
return okResponse({ taskId: 7, fileId: 9, page: 2, pageSize: 50, total: 0, totalPages: 0, items: [] })
})
await getPublishItemsPage(7, 9, 2, 50)
assert.equal(captured.url, '/newApi/api/publish/tasks/7/items')
assert.deepEqual(captured.params, { file_id: 9, page: 2, page_size: 50 })
})
test('test_publish_items_page_url', async (t) => {
setupWindow()
const url = getPublishItemsPageUrl(7, 9, 100, 1)
assert.equal(url, 'http://localhost/newApi/api/publish/tasks/7/items?file_id=9&page=1&page_size=100')
})
test('test_publish_progress_batch_timeout', async (t) => {
setupWindow()
let captured: { url?: string; method?: string; data?: unknown; timeout?: number } = {}
mockRequest(t, (config) => {
captured = config
return okResponse({ items: [], missingTaskIds: [] })
})
const result = await getPublishTaskProgressBatch([5, 3, 5])
assert.equal(captured.url, '/newApi/api/publish/tasks/progress/batch')
assert.equal(captured.method, 'POST')
assert.deepEqual(captured.data, { task_ids: [3, 5], user_id: 42 })
assert.equal(captured.timeout, 10000)
assert.deepEqual(result, { items: [], missingTaskIds: [] })
const empty = await getPublishTaskProgressBatch([])
assert.deepEqual(empty as PublishTaskBatchVo, { items: [], missingTaskIds: [] })
})
test('test_publish_submit_result_body', async (t) => {
setupWindow()
let captured: { url?: string; method?: string; data?: unknown } = {}
mockRequest(t, (config) => {
captured = config
return okResponse(null)
})
const body: PublishTaskResultRequest = { files: [{ fileId: 9, rows: [{ a: 1 }] }] }
await submitPublishTaskResult(7, body)
assert.equal(captured.url, '/newApi/api/publish/tasks/7/result')
assert.equal(captured.method, 'POST')
assert.deepEqual(captured.data, body)
})
test('test_publish_dashboard_history', async (t) => {
setupWindow()
const calls: { url?: string; params?: Record<string, unknown> }[] = []
mockRequest(t, (config) => {
calls.push(config)
return okResponse({ pendingCount: 0, runningCount: 0, successCount: 1, failedCount: 0 })
})
await getPublishDashboard()
await getPublishHistory()
assert.equal(calls[0].url, '/newApi/api/publish/dashboard')
assert.deepEqual(calls[0].params, { user_id: 42 })
assert.equal(calls[1].url, '/newApi/api/publish/history')
assert.deepEqual(calls[1].params, { user_id: 42 })
})
test('test_publish_delete_task', async (t) => {
setupWindow()
let captured: { url?: string; method?: string; params?: Record<string, unknown> } = {}
mockRequest(t, (config) => {
captured = config
return okResponse(null)
})
await deletePublishTask(7)
assert.equal(captured.url, '/newApi/api/publish/tasks/7')
assert.equal(captured.method, 'DELETE')
assert.deepEqual(captured.params, { user_id: 42 })
})
test('test_publish_export_compat', async (t) => {
setupWindow()
const fromJavaModules = await import('../src/shared/api/java-modules.ts')
const fromPublish = await import('../src/shared/api/types/modules/publish.ts')
const names = [
'parsePublish', 'activatePublishTask', 'activatePublishFile', 'getPublishItemsPage',
'getPublishItemsPageUrl', 'getPublishTaskProgressBatch', 'submitPublishTaskResult',
'getPublishDashboard', 'getPublishHistory', 'deletePublishTask',
]
for (const name of names) {
assert.equal(fromJavaModules[name], fromPublish[name], `${name} 应为同一引用`)
}
const summary = { id: 1, taskNo: 'T1', status: 'RUNNING' }
assert.equal(summary.status, 'RUNNING')
const itemsPage = { taskId: 1, fileId: 2, page: 1, pageSize: 100, total: 0, totalPages: 0, items: [] }
assert.equal(itemsPage.totalPages, 0)
})