xiaoxia-saas/apps/web/e2e/profile.spec.ts

/**
 * 个人设置页面 E2E 测试
 *
 * 覆盖：设置页面加载、个人信息展示、修改昵称/头像、修改密码、
 * 账号安全区域、退出登录按钮、未登录重定向
 *
 * 每个测试独立，先注册登录获取 auth token。
 */
import { expect, test, type APIRequestContext, type Page } from "@playwright/test"

const PASSWORD = "Test123456!"
const apiBase = process.env.E2E_API_BASE || "/api/v1"
const apiOrigin = apiBase.endsWith("/api/v1") ? apiBase.slice(0, -"/api/v1".length) : ""

const routeBrowserApiToTestApi = async (page: Page) => {
  if (!apiOrigin) return
  await page.route("**/api/v1/**", async (route) => {
    const sourceUrl = new URL(route.request().url())
    const response = await route.fetch({
      url: `${apiOrigin}${sourceUrl.pathname}${sourceUrl.search}`,
    })
    await route.fulfill({ response })
  })
}

function uniqueEmail(prefix: string): string {
  return `${prefix}_${Date.now()}_${Math.random().toString(36).slice(2, 8)}@example.com`
}

function uniqueUsername(prefix: string): string {
  return `${prefix}_${Date.now().toString(36)}${Math.random().toString(36).slice(2, 6)}`
}

/** 登录操作，遇到 429 限流自动等待重试 */
async function loginWithRetry(
  request: APIRequestContext,
  email: string,
  password: string,
  maxRetries = 2,
) {
  for (let i = 0; i <= maxRetries; i++) {
    const response = await request.post(`${apiBase}/auth/login`, {
      data: { email, password },
    })
    if (response.status() !== 429) return response
    console.log(`[login] 触发限流，等待 65s 后重试 (${i + 1}/${maxRetries})`)
    await new Promise((r) => setTimeout(r, 65000))
  }
  return request.post(`${apiBase}/auth/login`, {
    data: { email, password },
  })
}

/** 注册并登录，返回 { headers, email, username, userId, accessToken } */
async function createAuthedUser(request: APIRequestContext, label: string) {
  const email = uniqueEmail(label)
  const username = uniqueUsername(label)

  const reg = await request.post(`${apiBase}/auth/register`, {
    data: { email, password: PASSWORD, username, display_name: `E2E ${label}` },
  })
  expect(reg.ok(), `注册应成功: ${await reg.text()}`).toBeTruthy()
  const regData = await reg.json()

  const login = await loginWithRetry(request, email, PASSWORD)
  expect(login.ok(), `登录应成功: ${await login.text()}`).toBeTruthy()
  const loginData = await login.json()

  return {
    headers: { Authorization: `Bearer ${loginData.access_token}` },
    email,
    username,
    userId: regData.user_id,
    accessToken: loginData.access_token,
  }
}

/** 设置页面认证状态（localStorage） */
async function setupAuth(
  page: Page,
  token: string,
  user: { id: string; email: string; username: string; display_name: string },
) {
  await page.addInitScript(
    ({ token, user }) => {
      localStorage.setItem("access_token", token)
      localStorage.setItem(
        "auth-storage",
        JSON.stringify({
          state: { user, isAuthenticated: true },
          version: 0,
        }),
      )
    },
    {
      token,
      user: {
        id: user.id,
        user_id: user.id,
        email: user.email,
        username: user.username,
        display_name: user.display_name,
        is_email_verified: true,
        email_verified: true,
      },
    },
  )
}

test.describe("个人设置页面 - 未登录重定向", () => {
  test("未登录访问重定向到登录页", async ({ page }) => {
    await page.goto("/app/profile")
    await expect(page).toHaveURL(/\/login/)
  })
})

test.describe("个人设置页面 - 页面加载", () => {
  test.describe.configure({ timeout: 120_000 })

  test("设置页面加载成功", async ({ page, request }) => {
    await routeBrowserApiToTestApi(page)
    const { accessToken, userId, email, username } = await createAuthedUser(request, "profile-load")
    await setupAuth(page, accessToken, {
      id: userId,
      email,
      username,
      display_name: "E2E profile-load",
    })

    await page.goto("/app/profile")
    await expect(page.locator(".xx-settings-page")).toBeVisible({
      timeout: 20_000,
    })
  })

  test("页面标题存在", async ({ page, request }) => {
    await routeBrowserApiToTestApi(page)
    const { accessToken, userId, email, username } = await createAuthedUser(
      request,
      "profile-title",
    )
    await setupAuth(page, accessToken, {
      id: userId,
      email,
      username,
      display_name: "E2E profile-title",
    })

    await page.goto("/app/profile")
    await expect(page.locator(".xx-settings-page")).toBeVisible({
      timeout: 20_000,
    })

    // 验证页面包含"个人设置"标题
    const heading = page.getByRole("heading", { name: /个人设置/ })
    await expect(heading.first()).toBeVisible({ timeout: 10_000 })
  })
})

test.describe("个人设置 - 个人信息展示", () => {
  test.describe.configure({ timeout: 120_000 })

  test("个人信息卡片展示", async ({ page, request }) => {
    await routeBrowserApiToTestApi(page)
    const { accessToken, userId, email, username } = await createAuthedUser(request, "profile-info")
    await setupAuth(page, accessToken, {
      id: userId,
      email,
      username,
      display_name: "E2E profile-info",
    })

    await page.goto("/app/profile")
    await expect(page.locator(".xx-settings-page")).toBeVisible({
      timeout: 20_000,
    })

    // 验证设置卡片存在
    await expect(page.locator(".xx-settings-card")).toBeVisible()
  })

  test("用户名、邮箱字段展示", async ({ page, request }) => {
    await routeBrowserApiToTestApi(page)
    const { accessToken, userId, email, username } = await createAuthedUser(
      request,
      "profile-fields",
    )
    await setupAuth(page, accessToken, {
      id: userId,
      email,
      username,
      display_name: "E2E profile-fields",
    })

    await page.goto("/app/profile")
    await expect(page.locator(".xx-settings-page")).toBeVisible({
      timeout: 20_000,
    })

    // 验证表单字段存在
    const fields = page.locator(".xx-settings-field")
    await expect(fields.first()).toBeVisible()
    const fieldCount = await fields.count()
    expect(fieldCount).toBeGreaterThanOrEqual(2)
  })

  test("用户名标签和输入框存在", async ({ page, request }) => {
    await routeBrowserApiToTestApi(page)
    const { accessToken, userId, email, username } = await createAuthedUser(
      request,
      "profile-username",
    )
    await setupAuth(page, accessToken, {
      id: userId,
      email,
      username,
      display_name: "E2E profile-username",
    })

    await page.goto("/app/profile")
    await expect(page.locator(".xx-settings-page")).toBeVisible({
      timeout: 20_000,
    })

    // 验证用户名标签
    const usernameLabel = page.locator(".xx-settings-label").filter({
      hasText: "用户名",
    })
    await expect(usernameLabel).toBeVisible()

    // 验证邮箱标签
    const emailLabel = page.locator(".xx-settings-label").filter({
      hasText: "邮箱",
    })
    await expect(emailLabel).toBeVisible()
  })

  test("显示名称字段可编辑", async ({ page, request }) => {
    await routeBrowserApiToTestApi(page)
    const { accessToken, userId, email, username } = await createAuthedUser(
      request,
      "profile-dispname",
    )
    await setupAuth(page, accessToken, {
      id: userId,
      email,
      username,
      display_name: "E2E profile-dispname",
    })

    await page.goto("/app/profile")
    await expect(page.locator(".xx-settings-page")).toBeVisible({
      timeout: 20_000,
    })

    // 查找显示名称输入框
    const displayNameField = page.locator(".xx-settings-field").filter({
      has: page.locator(".xx-settings-label", { hasText: "显示名称" }),
    })
    if (await displayNameField.isVisible()) {
      const input = displayNameField.locator("input")
      if (await input.isVisible()) {
        // 验证输入框存在且可输入
        await expect(input).toBeVisible()
        const initialValue = await input.inputValue()
        await input.fill("新的显示名称")
        await expect(input).toHaveValue("新的显示名称")
        // 恢复原值
        await input.fill(initialValue)
      }
    }
  })
})

test.describe("个人设置 - 修改密码", () => {
  test.describe.configure({ timeout: 120_000 })

  test("修改密码 API - 正向", async ({ request }) => {
    const { headers, email } = await createAuthedUser(request, "profile-chpwd")

    const newPassword = "NewPass123456!"
    const response = await request.post(`${apiBase}/auth/change-password`, {
      headers,
      data: {
        old_password: PASSWORD,
        new_password: newPassword,
      },
    })

    // 修改密码可能成功或接口不存在
    expect(
      response.status() < 500,
      `修改密码应返回 2xx 或 4xx，实际: ${response.status()}`,
    ).toBeTruthy()

    // 如果成功，用新密码登录验证
    if (response.ok()) {
      const loginResp = await loginWithRetry(request, email, newPassword)
      expect(loginResp.ok(), "新密码应能登录").toBeTruthy()
    }
  })

  test("修改密码 - 旧密码错误反向", async ({ request }) => {
    const { headers } = await createAuthedUser(request, "profile-badpwd")

    const response = await request.post(`${apiBase}/auth/change-password`, {
      headers,
      data: {
        old_password: "WrongOldPass123!",
        new_password: "NewPass123456!",
      },
    })

    // 如果接口存在，应该返回 400/401
    if (response.status() < 500 && response.status() >= 400) {
      expect([400, 401]).toContain(response.status())
    }
    // 接口不存在（404）也正常
  })

  test("修改密码 - 新密码太弱反向", async ({ request }) => {
    const { headers } = await createAuthedUser(request, "profile-weakpwd")

    const response = await request.post(`${apiBase}/auth/change-password`, {
      headers,
      data: {
        old_password: PASSWORD,
        new_password: "123",
      },
    })

    if (response.status() < 500 && response.status() >= 400) {
      expect([400, 422]).toContain(response.status())
    }
  })

  test("未登录修改密码 - 反向", async ({ request }) => {
    const response = await request.post(`${apiBase}/auth/change-password`, {
      data: {
        old_password: "old",
        new_password: "new",
      },
    })
    expect([401, 403, 404]).toContain(response.status())
  })
})

test.describe("个人设置 - 账号安全", () => {
  test.describe.configure({ timeout: 120_000 })

  test("获取当前用户信息 - 正向", async ({ request }) => {
    const { headers, email, username } = await createAuthedUser(request, "profile-me")

    const response = await request.get(`${apiBase}/auth/me`, { headers })
    expect(response.ok(), `获取用户信息应返回 2xx，实际: ${response.status()}`).toBeTruthy()

    const data = await response.json()
    expect(data.email).toBe(email)
    expect(data.username).toBe(username)
  })

  test("账号安全区域提示信息存在", async ({ page, request }) => {
    await routeBrowserApiToTestApi(page)
    const { accessToken, userId, email, username } = await createAuthedUser(
      request,
      "profile-security",
    )
    await setupAuth(page, accessToken, {
      id: userId,
      email,
      username,
      display_name: "E2E profile-security",
    })

    await page.goto("/app/profile")
    await expect(page.locator(".xx-settings-page")).toBeVisible({
      timeout: 20_000,
    })

    // 验证通知区域存在
    const notice = page.locator(".xx-settings-notice")
    await expect(notice).toBeVisible()
  })
})

test.describe("个人设置 - 退出登录", () => {
  test.describe.configure({ timeout: 120_000 })

  test("登出 API - 正向", async ({ request }) => {
    const { headers } = await createAuthedUser(request, "profile-logout")

    const response = await request.post(`${apiBase}/auth/logout`, {
      headers,
    })
    expect(response.ok(), `登出应返回 2xx，实际: ${response.status()}`).toBeTruthy()

    // 登出后 token 应失效
    const meResp = await request.get(`${apiBase}/auth/me`, { headers })
    expect([401, 403]).toContain(meResp.status())
  })

  test("登出后页面跳转登录页", async ({ page, request }) => {
    await routeBrowserApiToTestApi(page)
    const { accessToken, userId, email, username } = await createAuthedUser(
      request,
      "profile-logout-ui",
    )
    await setupAuth(page, accessToken, {
      id: userId,
      email,
      username,
      display_name: "E2E profile-logout-ui",
    })

    await page.goto("/app/profile")
    await expect(page.locator(".xx-settings-page")).toBeVisible({
      timeout: 20_000,
    })

    // 清除 localStorage 模拟登出
    await page.evaluate(() => {
      localStorage.removeItem("access_token")
      localStorage.removeItem("auth-storage")
    })

    // 刷新页面应该重定向到登录页
    await page.reload()
    await expect(page).toHaveURL(/\/login/, { timeout: 10_000 })
  })
})

test.describe("个人设置 - 保存按钮", () => {
  test.describe.configure({ timeout: 120_000 })

  test("保存按钮存在", async ({ page, request }) => {
    await routeBrowserApiToTestApi(page)
    const { accessToken, userId, email, username } = await createAuthedUser(request, "profile-save")
    await setupAuth(page, accessToken, {
      id: userId,
      email,
      username,
      display_name: "E2E profile-save",
    })

    await page.goto("/app/profile")
    await expect(page.locator(".xx-settings-page")).toBeVisible({
      timeout: 20_000,
    })

    // 验证按钮存在
    const button = page.getByRole("button", { name: /保存|暂未开放/ })
    await expect(button.first()).toBeVisible({ timeout: 5_000 })
  })
})