azmat1127/yingqing
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(admin): Phase 1 注册邀请码逻辑 — 码必填 + kind 分流 + validate-invite + 注册页码优先重做

Browse Source 
后端:Invitation.kind(join_team/create_team)+ team 可空 + migration;RegisterSerializer 邀请码必填,
create_team 开新团队当 owner+发试用额度、join_team 幂等入伙不重复发额度,删「空码开团队」;
validate-invite 免登录验码端点;团管发码恒 join_team;InvitationSerializer 增 kind/team_name。
前端:注册页码优先(验过才展开;create_team 填团队名 / join_team 只读团队名,不暴露团队列表)、
邀请链接 ?invite= 自动验码、api.validateInvite、验码行/状态提示样式(仅 token)。
测试:accounts 22/22 单测过(RegisterInviteCodeTests + ValidateInviteTests);
无头 e2e _admin-p1.mjs 全断言过 + 0 console error;tsc+build 绿。

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This commit is contained in:
seaislee1209
2026-06-19 21:07:03 +08:00
co-authored by Claude Opus 4.8
parent 443023a1a9
commit 3f8547564c
12 changed files with 684 additions and 172 deletions
Download Patch File Download Diff File Expand all files Collapse all files
core/backend/apps/accounts/tests.py
+153 -7
View File
@@ -4,10 +4,15 @@ from django.conf import settings
from django.test import TestCase
from rest_framework.test import APIClient
from apps.accounts.models import Team, TeamMember, User
from apps.accounts.models import Invitation, Team, TeamMember, User
from apps.billing.models import CreditAccount, CreditLedger
def make_create_team_code():
"""铸一个 create_team 邀请码(平台超管发的「开团队码」)。本期注册必须有码。"""
return Invitation.objects.create(kind=Invitation.Kind.CREATE_TEAM).code
class AuthApiTests(TestCase):
def test_register_creates_user_team_member_credit_account_and_token(self):
client = APIClient()
@@ -18,6 +23,7 @@ class AuthApiTests(TestCase):
"password": "strong-password",
"email": "owner@example.com",
"team_name": "Launch Team",
"invite_code": make_create_team_code(),
},
format="json",
)
@@ -35,7 +41,12 @@ class AuthApiTests(TestCase):
client = APIClient()
client.post(
"/api/auth/register/",
{"username": "ledger-owner", "password": "strong-password", "team_name": "Ledger Team"},
{
"username": "ledger-owner",
"password": "strong-password",
"team_name": "Ledger Team",
"invite_code": make_create_team_code(),
},
format="json",
)
team = Team.objects.get(name="Ledger Team")
@@ -57,10 +68,8 @@ class InvitationFlowTests(TestCase):
)
def test_invite_join_same_team_no_duplicate_credits(self):
from apps.accounts.models import Invitation
owner_client = APIClient()
r = self._register(owner_client, "inv-owner", team_name="Owner Team")
r = self._register(owner_client, "inv-owner", team_name="Owner Team", invite_code=make_create_team_code())
self.assertEqual(r.status_code, 201)
team = Team.objects.get(name="Owner Team")
accounts_before = CreditAccount.objects.filter(team=team).count()
@@ -104,7 +113,7 @@ class InvitationFlowTests(TestCase):
def test_invite_generate_requires_manage_permission(self):
owner_client = APIClient()
ro = self._register(owner_client, "perm-owner", team_name="Perm Team")
ro = self._register(owner_client, "perm-owner", team_name="Perm Team", invite_code=make_create_team_code())
owner_client.credentials(HTTP_AUTHORIZATION=f"Token {ro.data['token']}")
gen = owner_client.post("/api/auth/team/invitations/", {"role": "member"}, format="json")
code = gen.data["code"]
@@ -193,9 +202,146 @@ class PlatformAdminTests(TestCase):
client = APIClient()
r = client.post(
"/api/auth/register/",
{"username": "regular-owner", "password": "strong-password", "team_name": "Reg Team"},
{
"username": "regular-owner",
"password": "strong-password",
"team_name": "Reg Team",
"invite_code": make_create_team_code(),
},
format="json",
)
self.assertEqual(r.status_code, 201)
self.assertFalse(r.data["user"]["is_platform_admin"])
class RegisterInviteCodeTests(TestCase):
"""Phase 1:注册必须有码,kind 分流 create_team / join_team;取消「空码开团队」。"""
def _register(self, username, **extra):
return APIClient().post(
"/api/auth/register/",
{"username": username, "password": "strong-password", **extra},
format="json",
)
def test_register_requires_invite_code(self):
r = self._register("no-code-user", team_name="No Code Team")
self.assertEqual(r.status_code, 400)
self.assertIn("invite_code", r.data)
self.assertFalse(User.objects.filter(username="no-code-user").exists())
self.assertFalse(Team.objects.filter(name="No Code Team").exists())
def test_register_blank_invite_code_rejected(self):
r = self._register("blank-code-user", team_name="Blank", invite_code="")
self.assertEqual(r.status_code, 400)
self.assertFalse(User.objects.filter(username="blank-code-user").exists())
def test_create_team_code_opens_new_team_with_trial(self):
code = make_create_team_code()
r = self._register("ct-owner", team_name="Created Team", invite_code=code)
self.assertEqual(r.status_code, 201)
user = User.objects.get(username="ct-owner")
team = Team.objects.get(name="Created Team")
self.assertEqual(team.owner, user)
self.assertTrue(TeamMember.objects.filter(team=team, user=user, role=TeamMember.Role.OWNER).exists())
# 试用额度发放
trial = Decimal(str(settings.DEFAULT_TRIAL_CREDITS))
self.assertEqual(CreditAccount.objects.get(team=team).balance, trial)
# 邀请标 used + 回填团队
inv = Invitation.objects.get(code=code)
self.assertEqual(inv.status, Invitation.Status.USED)
self.assertEqual(inv.used_by, user)
self.assertEqual(inv.team, team)
def test_join_team_code_joins_existing_no_new_team(self):
# 先用 create_team 码开团队 + 团管发 join 码
owner_client = APIClient()
ro = owner_client.post(
"/api/auth/register/",
{"username": "jt-owner", "password": "strong-password", "team_name": "Host Team", "invite_code": make_create_team_code()},
format="json",
)
owner_client.credentials(HTTP_AUTHORIZATION=f"Token {ro.data['token']}")
gen = owner_client.post("/api/auth/team/invitations/", {"role": "member"}, format="json")
self.assertEqual(gen.status_code, 201)
self.assertEqual(gen.data["kind"], Invitation.Kind.JOIN_TEAM)
code = gen.data["code"]
host_team = Team.objects.get(name="Host Team")
teams_before = Team.objects.count()
r = self._register("jt-joiner", invite_code=code)
self.assertEqual(r.status_code, 201)
joiner = User.objects.get(username="jt-joiner")
self.assertTrue(TeamMember.objects.filter(team=host_team, user=joiner).exists())
self.assertFalse(Team.objects.filter(owner=joiner).exists()) # 没开新团队
self.assertEqual(Team.objects.count(), teams_before)
def test_register_with_used_code_rejected(self):
code = make_create_team_code()
self._register("first-use", team_name="T1", invite_code=code)
r2 = self._register("second-use", team_name="T2", invite_code=code)
self.assertEqual(r2.status_code, 400)
self.assertFalse(User.objects.filter(username="second-use").exists())
def test_register_with_expired_code_rejected(self):
from datetime import timedelta
from django.utils import timezone
inv = Invitation.objects.create(kind=Invitation.Kind.CREATE_TEAM)
inv.expires_at = timezone.now() - timedelta(days=1)
inv.save(update_fields=["expires_at"])
r = self._register("expired-user", team_name="Exp", invite_code=inv.code)
self.assertEqual(r.status_code, 400)
self.assertFalse(User.objects.filter(username="expired-user").exists())
class ValidateInviteTests(TestCase):
"""Phase 1:免登录验码端点 —— 注册页「填码 → 验过才展开」。"""
def test_validate_create_team_code(self):
code = make_create_team_code()
r = APIClient().post("/api/auth/validate-invite/", {"code": code}, format="json")
self.assertEqual(r.status_code, 200)
self.assertTrue(r.data["valid"])
self.assertEqual(r.data["kind"], Invitation.Kind.CREATE_TEAM)
self.assertIsNone(r.data["team_name"])
def test_validate_join_team_code_returns_team_name(self):
owner_client = APIClient()
ro = owner_client.post(
"/api/auth/register/",
{"username": "vi-owner", "password": "strong-password", "team_name": "Visible Team", "invite_code": make_create_team_code()},
format="json",
)
owner_client.credentials(HTTP_AUTHORIZATION=f"Token {ro.data['token']}")
gen = owner_client.post("/api/auth/team/invitations/", {"role": "member"}, format="json")
code = gen.data["code"]
r = APIClient().post("/api/auth/validate-invite/", {"code": code}, format="json")
self.assertEqual(r.status_code, 200)
self.assertTrue(r.data["valid"])
self.assertEqual(r.data["kind"], Invitation.Kind.JOIN_TEAM)
self.assertEqual(r.data["team_name"], "Visible Team")
def test_validate_unknown_code_invalid(self):
r = APIClient().post("/api/auth/validate-invite/", {"code": "TEAM-ZZZZ-ZZZZ"}, format="json")
self.assertEqual(r.status_code, 200)
self.assertFalse(r.data["valid"])
def test_validate_blank_code_invalid(self):
r = APIClient().post("/api/auth/validate-invite/", {"code": ""}, format="json")
self.assertEqual(r.status_code, 200)
self.assertFalse(r.data["valid"])
def test_validate_used_code_invalid(self):
code = make_create_team_code()
APIClient().post(
"/api/auth/register/",
{"username": "vi-consumer", "password": "strong-password", "team_name": "Consumed", "invite_code": code},
format="json",
)
r = APIClient().post("/api/auth/validate-invite/", {"code": code}, format="json")
self.assertEqual(r.status_code, 200)
self.assertFalse(r.data["valid"])