创作数据流程收束

src/services/authService.test.ts

@@ -7,9 +7,7 @@ const { requestJsonMock } = vi.hoisted(() => ({
 import {
   ApiClientError,
   clearStoredAccessToken,
-  clearStoredAutoAuthCredentials,
   getStoredAccessToken,
-  getStoredAutoAuthCredentials,
   setStoredAccessToken,
 } from './apiClient';
 import {
@@ -67,7 +65,6 @@ describe('authService auto auth', () => {
     });
     requestJsonMock.mockReset();
     clearStoredAccessToken();
-    clearStoredAutoAuthCredentials();
   });
 
   it('creates credentials that match current username/password constraints', () => {
@@ -78,7 +75,7 @@ describe('authService auto auth', () => {
     expect(credentials.password.length).toBeGreaterThanOrEqual(6);
   });
 
-  it('stores jwt and auto credentials after auth entry', async () => {
+  it('stores jwt after auth entry without persisting guest credentials locally', async () => {
     requestJsonMock.mockResolvedValue({
       token: 'jwt-token-value',
       user: {
@@ -99,10 +96,6 @@ describe('authService auto auth', () => {
 
     expect(user.username).toBe('guest_abc123abc123');
     expect(getStoredAccessToken()).toBe('jwt-token-value');
-    expect(getStoredAutoAuthCredentials()).toEqual({
-      username: 'guest_abc123abc123',
-      password: 'auto_secret_password',
-    });
     expect(requestJsonMock).toHaveBeenCalledWith(
       '/api/auth/entry',
       expect.objectContaining({
@@ -115,9 +108,7 @@ describe('authService auto auth', () => {
     );
   });
 
-  it('reuses stored auto credentials before generating a new account', async () => {
-    window.localStorage.setItem('genarrative.auth.auto-username.v1', 'guest_saveduser01');
-    window.localStorage.setItem('genarrative.auth.auto-password.v1', 'auto_saved_password');
+  it('creates a fresh guest credential pair for auto auth when a session is missing', async () => {
     requestJsonMock.mockResolvedValue({
       token: 'jwt-restored',
       user: {
@@ -132,16 +123,24 @@ describe('authService auto auth', () => {
     });
 
     const result = await ensureAutoAuthUser();
+    const authEntryBody = JSON.parse(
+      requestJsonMock.mock.calls[0]?.[1]?.body as string,
+    ) as {
+      username: string;
+      password: string;
+    };
 
     expect(result.user.username).toBe('guest_saveduser01');
-    expect(result.credentials).toEqual({
-      username: 'guest_saveduser01',
-      password: 'auto_saved_password',
-    });
+    expect(result.credentials.username).toMatch(/^guest_[a-z0-9]{12}$/u);
+    expect(result.credentials.password).toMatch(
+      /^auto_[a-z0-9]{24}_[a-z0-9]{8}$/u,
+    );
+    expect(authEntryBody).toEqual(result.credentials);
     expect(requestJsonMock).toHaveBeenCalledWith(
       '/api/auth/entry',
       expect.objectContaining({
         method: 'POST',
+        body: expect.any(String),
       }),
       '登录失败',
     );
@@ -168,7 +167,13 @@ describe('authService auto auth', () => {
 
     expect(requestJsonMock).toHaveBeenCalledTimes(1);
     expect(firstResult).toEqual(secondResult);
-    expect(getStoredAutoAuthCredentials()).toEqual(firstResult.credentials);
+    const authEntryBody = JSON.parse(
+      requestJsonMock.mock.calls[0]?.[1]?.body as string,
+    ) as {
+      username: string;
+      password: string;
+    };
+    expect(authEntryBody).toEqual(firstResult.credentials);
   });
 
   it('sends phone login code through the new auth endpoint', async () => {