shishengliang/lingniu-vehicle-ingest
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(auth): dedupe concurrent session expiry

Browse Source
This commit is contained in:
lingniu
2026-07-16 06:19:02 +08:00
parent ee96b8803c
commit 41e2b1ab97
4 changed files with 63 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

19
vehicle-data-platform/apps/web/src/v2/auth/session.test.ts
View File

@@ -1,5 +1,5 @@
import { afterEach, expect, test } from 'vitest';
import { canAdminister, canOperate, clearAccessToken, getAccessToken, setAccessToken } from './session';
import { afterEach, expect, test, vi } from 'vitest';
import { canAdminister, canOperate, clearAccessToken, getAccessToken, notifyUnauthorizedSession, PLATFORM_UNAUTHORIZED_EVENT, setAccessToken } from './session';
afterEach(() => {
window.sessionStorage.clear();
@@ -20,3 +20,18 @@ test('role helpers follow the server permission hierarchy', () => {
expect(canAdminister({ name: 'o', role: 'operator', authMode: 'enforce' })).toBe(false);
expect(canAdminister({ name: 'a', role: 'admin', authMode: 'enforce' })).toBe(true);
});
test('invalidates only the currently active rejected token', () => {
const unauthorized = vi.fn();
window.addEventListener(PLATFORM_UNAUTHORIZED_EVENT, unauthorized);
setAccessToken('new-token');
expect(notifyUnauthorizedSession('old-token')).toBe(false);
expect(getAccessToken()).toBe('new-token');
expect(notifyUnauthorizedSession('new-token')).toBe(true);
expect(getAccessToken()).toBe('');
expect(notifyUnauthorizedSession('new-token')).toBe(false);
expect(unauthorized).toHaveBeenCalledTimes(1);
window.removeEventListener(PLATFORM_UNAUTHORIZED_EVENT, unauthorized);
});