已完成管理后台第一批只读功能的 ASP.NET Core 10 迁移：

原生接口：context、dashboard、schools、school-organization、admins、exams 保持超级、校级、班级管理员的数据范围及权限隔离其余管理写入、审批流和考务编排仍由 Node 转发新增 ADMIN_NATIVE_READS_ENABLED=true 开关，并强制要求原生认证和共享 Redis
2026-07-22 20:34:13 +08:00
parent 4b0dae6d71
commit 712bd1a3a2
12 changed files with 894 additions and 5 deletions
@@ -0,0 +1,84 @@
+using Eis.Infrastructure.Administration;
+
+namespace Eis.Infrastructure.Tests.Administration;
+
+public sealed class AdminMigrationOptionsTests
+{
+    [Fact]
+    public void DisabledByDefault()
+    {
+        WithEnvironment(null, null, () =>
+        {
+            var options = AdminMigrationOptions.FromEnvironment(
+                configuredNativeReadsEnabled: false,
+                authenticationNativeEnabled: false,
+                sharesLegacySessions: false);
+
+            Assert.False(options.NativeReadsEnabled);
+        });
+    }
+
+    [Fact]
+    public void RequiresNativeAuthentication()
+    {
+        WithEnvironment("true", "true", () =>
+        {
+            var exception = Assert.Throws<InvalidOperationException>(() =>
+                AdminMigrationOptions.FromEnvironment(
+                    configuredNativeReadsEnabled: false,
+                    authenticationNativeEnabled: false,
+                    sharesLegacySessions: false));
+
+            Assert.Contains("AUTH_NATIVE_ENABLED=true", exception.Message);
+        });
+    }
+
+    [Fact]
+    public void RequiresSharedSessionsOutsideIsolatedTests()
+    {
+        WithEnvironment("true", null, () =>
+        {
+            var exception = Assert.Throws<InvalidOperationException>(() =>
+                AdminMigrationOptions.FromEnvironment(
+                    configuredNativeReadsEnabled: false,
+                    authenticationNativeEnabled: true,
+                    sharesLegacySessions: false));
+
+            Assert.Contains("Redis", exception.Message);
+        });
+    }
+
+    [Fact]
+    public void AllowsSharedRedisSessions()
+    {
+        WithEnvironment("true", null, () =>
+        {
+            var options = AdminMigrationOptions.FromEnvironment(
+                configuredNativeReadsEnabled: false,
+                authenticationNativeEnabled: true,
+                sharesLegacySessions: true);
+
+            Assert.True(options.NativeReadsEnabled);
+        });
+    }
+
+    private static void WithEnvironment(
+        string? nativeReadsEnabled,
+        string? allowMemory,
+        Action test)
+    {
+        var previousNativeReadsEnabled = Environment.GetEnvironmentVariable("ADMIN_NATIVE_READS_ENABLED");
+        var previousAllowMemory = Environment.GetEnvironmentVariable("ADMIN_NATIVE_ALLOW_MEMORY");
+        try
+        {
+            Environment.SetEnvironmentVariable("ADMIN_NATIVE_READS_ENABLED", nativeReadsEnabled);
+            Environment.SetEnvironmentVariable("ADMIN_NATIVE_ALLOW_MEMORY", allowMemory);
+            test();
+        }
+        finally
+        {
+            Environment.SetEnvironmentVariable("ADMIN_NATIVE_READS_ENABLED", previousNativeReadsEnabled);
+            Environment.SetEnvironmentVariable("ADMIN_NATIVE_ALLOW_MEMORY", previousAllowMemory);
+        }
+    }
+}