// 已读取AGENTS.md
import * as fs from 'fs';
import * as path from 'path';

/**
 * 第四十五批回归闸门：上传接口生产环境需登录
 */
describe('第四十五批上传鉴权闸门', () => {
  const rootDir = path.resolve(__dirname, '../../');
  const indexCode = fs.readFileSync(path.join(rootDir, 'server/src/index.ts'), 'utf-8');

  it('上传必须要求登录（安全闸门不依赖 NODE_ENV）', () => {
    const start = indexCode.indexOf('const ensureUploadAuthorized =');
    expect(start).toBeGreaterThan(-1);
    const block = indexCode.slice(start, start + 700);
    expect(block).toContain('SECURE_MODE');
    expect(block).toContain('resolveSecureUserId(req, 0, scene)');
    expect(block).toContain('请先登录后再上传');
  });

  it('图片与视频上传都必须走同一登录闸门', () => {
    expect(indexCode).toContain("ensureUploadAuthorized(req, res, '上传文件')");
    expect(indexCode).toContain("ensureUploadAuthorized(req, res, '上传视频')");
  });
});