fix(auth): scope mobile sms users by tenant

2026-07-14 06:59:11 +08:00
parent 599f025295
commit 03d4b97f75
3 changed files with 29 additions and 1 deletions
@@ -0,0 +1,25 @@
+package org.dromara.web.service.impl;
+
+import org.junit.jupiter.api.Tag;
+import org.junit.jupiter.api.Test;
+
+import java.nio.file.Files;
+import java.nio.file.Path;
+
+import static org.junit.jupiter.api.Assertions.assertTrue;
+
+@Tag("dev")
+class SmsAuthStrategyTenantTest {
+
+    @Test
+    void mobileSmsUserLookupKeepsTenantBoundary() throws Exception {
+        Path source = Path.of("src/main/java/org/dromara/web/service/impl/SmsAuthStrategy.java");
+        if (!Files.exists(source)) {
+            source = Path.of("ruoyi-admin/src/main/java/org/dromara/web/service/impl/SmsAuthStrategy.java");
+        }
+        String code = Files.readString(source);
+
+        assertTrue(code.contains(".eq(SysUser::getTenantId, tenantId)"));
+        assertTrue(code.contains(".eq(SysUser::getPhonenumber, phonenumber)"));
+    }
+}