chore(test): подтвердить права очереди на настоящих JWT

2026-10-08 14:22:03 +07:00
1 parent 22a4e2f36e
commit ca8eafa1ff
@@ -0,0 +1,171 @@
+{
+  "date": "2026-10-08",
+  "backendSource": "8782054",
+  "database": "mmapp_acceptance_20261007",
+  "authRequired": true,
+  "signedJwtVerification": true,
+  "productionRoutes": true,
+  "cases": [
+    {
+      "method": "GET",
+      "role": "anonymous",
+      "status": 401
+    },
+    {
+      "method": "GET",
+      "role": "none",
+      "status": 403
+    },
+    {
+      "method": "GET",
+      "role": "settings",
+      "status": 403
+    },
+    {
+      "method": "GET",
+      "role": "noApp",
+      "status": 403
+    },
+    {
+      "method": "GET",
+      "role": "issuer",
+      "status": 401
+    },
+    {
+      "method": "GET",
+      "role": "signature",
+      "status": 401
+    },
+    {
+      "method": "GET",
+      "role": "expired",
+      "status": 401
+    },
+    {
+      "method": "GET",
+      "role": "malformed-jwt",
+      "status": 401
+    },
+    {
+      "method": "GET",
+      "role": "read",
+      "status": 200
+    },
+    {
+      "method": "GET",
+      "role": "write",
+      "status": 200
+    },
+    {
+      "method": "GET",
+      "role": "admin",
+      "status": 200
+    },
+    {
+      "method": "POST",
+      "role": "anonymous",
+      "status": 401,
+      "unchanged": true,
+      "mutationBoundaryCalls": 0
+    },
+    {
+      "method": "POST",
+      "role": "read",
+      "status": 403,
+      "unchanged": true,
+      "mutationBoundaryCalls": 0
+    },
+    {
+      "method": "POST",
+      "role": "none",
+      "status": 403,
+      "unchanged": true,
+      "mutationBoundaryCalls": 0
+    },
+    {
+      "method": "POST",
+      "role": "settings",
+      "status": 403,
+      "unchanged": true,
+      "mutationBoundaryCalls": 0
+    },
+    {
+      "method": "POST",
+      "role": "noApp",
+      "status": 403,
+      "unchanged": true,
+      "mutationBoundaryCalls": 0
+    },
+    {
+      "method": "POST",
+      "role": "issuer",
+      "status": 401,
+      "unchanged": true,
+      "mutationBoundaryCalls": 0
+    },
+    {
+      "method": "POST",
+      "role": "signature",
+      "status": 401,
+      "unchanged": true,
+      "mutationBoundaryCalls": 0
+    },
+    {
+      "method": "POST",
+      "role": "expired",
+      "status": 401,
+      "unchanged": true,
+      "mutationBoundaryCalls": 0
+    },
+    {
+      "method": "POST",
+      "role": "malformed-jwt",
+      "status": 401,
+      "unchanged": true,
+      "mutationBoundaryCalls": 0
+    },
+    {
+      "case": "missing-risk-acknowledgement",
+      "status": 400,
+      "unchanged": true
+    },
+    {
+      "case": "stale-version-before-write",
+      "status": 409,
+      "unchanged": true
+    },
+    {
+      "case": "write-and-admin-allowed",
+      "statuses": [
+        200,
+        200
+      ],
+      "saved": [
+        {
+          "id": "acceptance-outbox-rbac-1791444037821-admin",
+          "status": "pending",
+          "retry_count": 0,
+          "resolution_version": 1
+        },
+        {
+          "id": "acceptance-outbox-rbac-1791444037821-write",
+          "status": "pending",
+          "retry_count": 0,
+          "resolution_version": 1
+        }
+      ]
+    },
+    {
+      "case": "duplicate-version-conflict",
+      "status": 409,
+      "unchanged": true
+    }
+  ],
+  "mutationBoundaryCalls": 4,
+  "realExternalMessages": 0,
+  "limits": [
+    "Fastify inject uses real production handlers/auth and PostgreSQL, not a remote socket or browser",
+    "JWT signed with server key in memory; real Portal issuer/login not contacted",
+    "Only queue placement receipts verified; dispatcher never started, no delivery claim"
+  ]
+}