Zhang Shun
2 weeks ago
39 changed files with 857 additions and 45 deletions
@ -0,0 +1,52 @@ |
|||||
|
package com.mydreamjob.messaging; |
||||
|
|
||||
|
import com.mydreamjob.common.api.ApiResponse; |
||||
|
import com.mydreamjob.messaging.dto.MessageResponse; |
||||
|
import jakarta.servlet.http.HttpServletRequest; |
||||
|
import jakarta.validation.Valid; |
||||
|
import lombok.RequiredArgsConstructor; |
||||
|
import org.springframework.http.*; |
||||
|
import org.springframework.web.bind.annotation.*; |
||||
|
import io.swagger.v3.oas.annotations.Operation; |
||||
|
import io.swagger.v3.oas.annotations.tags.Tag; |
||||
|
|
||||
|
@RestController @RequestMapping("/conversations") @RequiredArgsConstructor |
||||
|
@Tag(name = "消息", description = "会话创建、消息发送、已读管理") |
||||
|
public class ChatResumeController { |
||||
|
private final ChatResumeService service; |
||||
|
private final com.mydreamjob.security.CurrentUserAccessor current; |
||||
|
private final com.mydreamjob.common.logging.RequestIdAccessor requestIds; |
||||
|
|
||||
|
@Operation(summary = "发送固定版本简历卡片", description = "仅投递本人，双方为会话成员且 MATCHED；隐私规则仍生效。clientMessageId 必填，重试复用原值") |
||||
|
@PostMapping("/{id}/resume-messages") |
||||
|
public ApiResponse<MessageResponse> send(@PathVariable Long id, |
||||
|
@Valid @RequestBody ChatResumeService.SendRequest body, HttpServletRequest request) { |
||||
|
return ApiResponse.ok(service.send(id,current.requireUserId(),body),requestIds.get(request)); |
||||
|
} |
||||
|
|
||||
|
@Operation(summary = "授权下载简历快照", description = "每次校验成员、投递归属、认证、匹配、隐私、屏蔽及撤回状态，不返回公开文件地址") |
||||
|
@GetMapping("/{conversationId}/messages/{messageId}/resume") |
||||
|
public ResponseEntity<byte[]> download(@PathVariable Long conversationId,@PathVariable Long messageId) { |
||||
|
var file = service.download(conversationId,messageId,current.requireUserId()); |
||||
|
String type = file.contentType(); |
||||
|
if (!java.util.Set.of("application/pdf","application/msword", |
||||
|
"application/vnd.openxmlformats-officedocument.wordprocessingml.document").contains(type == null ? "" : type)) |
||||
|
type = MediaType.APPLICATION_OCTET_STREAM_VALUE; |
||||
|
return ResponseEntity.ok().contentType(MediaType.parseMediaType(type)) |
||||
|
.header(HttpHeaders.CONTENT_DISPOSITION,ContentDisposition.attachment() |
||||
|
.filename("resume" + extension(file.fileName()),java.nio.charset.StandardCharsets.UTF_8).build().toString()) |
||||
|
.header(HttpHeaders.CACHE_CONTROL,"no-store").header("X-Content-Type-Options","nosniff") |
||||
|
.body(file.bytes()); |
||||
|
} |
||||
|
|
||||
|
@Operation(summary = "撤销简历卡片授权", description = "仅原发送者，幂等，销毁快照字节并推送 RESUME_REVOKED；不受两分钟文本撤回窗口限制") |
||||
|
@DeleteMapping("/{conversationId}/messages/{messageId}/resume") |
||||
|
public ApiResponse<MessageResponse> revoke(@PathVariable Long conversationId,@PathVariable Long messageId, |
||||
|
HttpServletRequest request) { |
||||
|
return ApiResponse.ok(service.revoke(conversationId,messageId,current.requireUserId()),requestIds.get(request)); |
||||
|
} |
||||
|
private String extension(String name) { |
||||
|
int dot = name == null ? -1 : name.lastIndexOf('.'); |
||||
|
return dot < 0 ? "" : name.substring(dot); |
||||
|
} |
||||
|
} |
||||
@ -0,0 +1,26 @@ |
|||||
|
package com.mydreamjob.messaging; |
||||
|
|
||||
|
import lombok.RequiredArgsConstructor; |
||||
|
import org.springframework.stereotype.Service; |
||||
|
import org.springframework.transaction.annotation.*; |
||||
|
|
||||
|
/** 删除简历/账号时同事务销毁已发送快照；重新上传不能复活旧授权。 */ |
||||
|
@Service @RequiredArgsConstructor |
||||
|
public class ChatResumeLifecycle { |
||||
|
private final MessageRepository messages; |
||||
|
private final ChatResumeSnapshotRepository snapshots; |
||||
|
private final com.mydreamjob.messaging.realtime.ChatEventService events; |
||||
|
|
||||
|
@Transactional(propagation = Propagation.MANDATORY) |
||||
|
public void purgeForUser(Long userId) { |
||||
|
for (Message candidate : messages.findBySenderUserIdAndMessageType(userId, "RESUME")) { |
||||
|
Message message = messages.findCurrentByIdForRecall(candidate.getId()).orElseThrow(); |
||||
|
snapshots.purge(message.getId()); |
||||
|
if (Boolean.TRUE.equals(message.getResumeRevoked())) continue; |
||||
|
message.setResumeRevoked(true); |
||||
|
message.setResumeFilename(null); message.setResumeContentType(null); message.setResumeSize(null); |
||||
|
messages.saveAndFlush(message); |
||||
|
events.record("RESUME_REVOKED", message.getConversationId(), userId, message.getId()); |
||||
|
} |
||||
|
} |
||||
|
} |
||||
@ -0,0 +1,152 @@ |
|||||
|
package com.mydreamjob.messaging; |
||||
|
|
||||
|
import com.mydreamjob.application.*; |
||||
|
import com.mydreamjob.auth.*; |
||||
|
import com.mydreamjob.company.*; |
||||
|
import com.mydreamjob.job.JobRepository; |
||||
|
import com.mydreamjob.profile.*; |
||||
|
import com.mydreamjob.profile.storage.ResumeStorageService; |
||||
|
import com.mydreamjob.common.exception.*; |
||||
|
import com.mydreamjob.messaging.dto.*; |
||||
|
import lombok.RequiredArgsConstructor; |
||||
|
import org.springframework.stereotype.Service; |
||||
|
import org.springframework.transaction.annotation.Transactional; |
||||
|
|
||||
|
/** 当前已上传简历的不可变快照；版本标识即 messageId，不接受任意 URL/文件路径。 */ |
||||
|
@Service @RequiredArgsConstructor |
||||
|
public class ChatResumeService { |
||||
|
private final MessagingService messaging; |
||||
|
private final MessageRepository messages; |
||||
|
private final ConversationRepository conversations; |
||||
|
private final ConversationMemberRepository members; |
||||
|
private final ChatResumeSnapshotRepository snapshots; |
||||
|
private final StudentProfileRepository profiles; |
||||
|
private final ResumeStorageService storage; |
||||
|
private final ApplicationRepository applications; |
||||
|
private final JobRepository jobs; |
||||
|
private final CompanyRepository companies; |
||||
|
private final UserRepository users; |
||||
|
private final CompanyResumeAccessPolicy resumeAccess; |
||||
|
private final com.mydreamjob.security.UserRoleGuard roles; |
||||
|
private final com.mydreamjob.safety.BlockRelationRepository blocks; |
||||
|
private final com.mydreamjob.bidirectionalmatch.ApplicationMatchRecordRepository matches; |
||||
|
private final com.mydreamjob.messaging.realtime.ChatEventService events; |
||||
|
private final MessageViewMapper mapper; |
||||
|
@org.springframework.beans.factory.annotation.Value("${app.chat.resume.max-active-bytes:52428800}") |
||||
|
private long maxActiveBytes; |
||||
|
|
||||
|
public record SendRequest(@jakarta.validation.constraints.NotNull Long applicationId, |
||||
|
@jakarta.validation.constraints.NotBlank |
||||
|
@jakarta.validation.constraints.Pattern(regexp = "[A-Za-z0-9_-]{1,64}") String clientMessageId) {} |
||||
|
public record File(String fileName, String contentType, byte[] bytes) { |
||||
|
@Override public String toString() { return "ResumeFile[redacted]"; } |
||||
|
} |
||||
|
|
||||
|
@Transactional |
||||
|
public MessageResponse send(Long conversationId, Long userId, SendRequest req) { |
||||
|
roles.requireStudent(userId); |
||||
|
// 与替换/删除上传文件串行；持久化之前读取完整内容，失败则事务回滚。
|
||||
|
var profile = profiles.lockByUserId(userId) |
||||
|
.orElseThrow(() -> new BusinessException(ErrorCode.PROFILE_NOT_FOUND)); |
||||
|
guard(conversationId, userId, req.applicationId()); |
||||
|
conversations.findLockedById(conversationId).orElseThrow(() -> new BusinessException(ErrorCode.MESSAGE_NOT_FOUND)); |
||||
|
var prior = messages.findByConversationIdAndSenderUserIdAndClientMessageId(conversationId,userId,req.clientMessageId()); |
||||
|
if (prior.isPresent()) { |
||||
|
var applicationId = snapshots.applicationId(prior.get().getId()).orElse(null); |
||||
|
if (!"RESUME".equals(prior.get().getMessageType()) |
||||
|
|| !req.applicationId().equals(applicationId)) |
||||
|
throw new BusinessException(ErrorCode.BAD_REQUEST,"clientMessageId already used"); |
||||
|
return view(prior.get(),userId); |
||||
|
} |
||||
|
if (profile.getResumeUrl() == null || profile.getResumeUrl().isBlank()) |
||||
|
throw new BusinessException(ErrorCode.PROFILE_NOT_FOUND); |
||||
|
byte[] bytes = storage.read(profile.getResumeUrl()); |
||||
|
if (bytes.length == 0 || bytes.length > 10 * 1024 * 1024) |
||||
|
throw new BusinessException(ErrorCode.BAD_REQUEST,"invalid resume size"); |
||||
|
if (maxActiveBytes <= 0 || messages.activeResumeBytes(userId) + bytes.length > maxActiveBytes) |
||||
|
throw new BusinessException(ErrorCode.BAD_REQUEST,"resume snapshot quota exceeded; revoke old cards first"); |
||||
|
// 复用既有发送鉴权、屏蔽、幂等锁及提交后推送；事件读取提交后的卡片字段。
|
||||
|
SendMessageRequest message = new SendMessageRequest(); |
||||
|
message.setConversationId(conversationId); message.setContent("发送了一份简历"); |
||||
|
message.setClientMessageId(req.clientMessageId()); |
||||
|
var result = messaging.sendMessage(userId,message); |
||||
|
Message saved = messages.findById(((Number)result.get("id")).longValue()).orElseThrow(); |
||||
|
saved.setMessageType("RESUME"); |
||||
|
saved.setResumeFilename(com.mydreamjob.profile.storage.ResumeFilenameSanitizer.forDownload(profile.getResumeOriginalName(),"resume")); |
||||
|
saved.setResumeContentType(profile.getResumeContentType()); saved.setResumeSize((long)bytes.length); |
||||
|
messages.saveAndFlush(saved); |
||||
|
snapshots.save(ChatResumeSnapshot.builder().messageId(saved.getId()).applicationId(req.applicationId()) |
||||
|
.ownerUserId(userId).content(bytes.clone()).build()); |
||||
|
return view(saved,userId); |
||||
|
} |
||||
|
|
||||
|
@Transactional |
||||
|
public File download(Long conversationId, Long messageId, Long userId) { |
||||
|
messaging.getConversation(conversationId,userId); |
||||
|
Message message = message(conversationId,messageId); |
||||
|
if (!"SENT".equals(message.getStatus()) || Boolean.TRUE.equals(message.getResumeRevoked())) |
||||
|
throw new BusinessException(ErrorCode.RESUME_MESSAGE_UNAVAILABLE); |
||||
|
Long applicationId = snapshots.applicationId(messageId) |
||||
|
.orElseThrow(() -> new BusinessException(ErrorCode.RESUME_MESSAGE_UNAVAILABLE)); |
||||
|
guard(conversationId,userId,applicationId); |
||||
|
var snapshot = snapshots.findById(messageId).orElseThrow(); |
||||
|
User owner = users.findById(snapshot.getOwnerUserId()).orElse(null); |
||||
|
if (owner == null || !Boolean.TRUE.equals(owner.getActive()) || snapshot.getContent() == null) |
||||
|
throw new BusinessException(ErrorCode.RESUME_MESSAGE_UNAVAILABLE); |
||||
|
return new File(message.getResumeFilename(),message.getResumeContentType(),snapshot.getContent().clone()); |
||||
|
} |
||||
|
|
||||
|
@Transactional |
||||
|
public MessageResponse revoke(Long conversationId, Long messageId, Long userId) { |
||||
|
messaging.getConversation(conversationId,userId); |
||||
|
conversations.findLockedById(conversationId).orElseThrow(); |
||||
|
Message message = message(conversationId,messageId); |
||||
|
if (!userId.equals(message.getSenderUserId())) throw new BusinessException(ErrorCode.FORBIDDEN); |
||||
|
snapshots.purge(messageId); |
||||
|
if (!Boolean.TRUE.equals(message.getResumeRevoked())) { |
||||
|
message.setResumeRevoked(true); |
||||
|
message.setResumeFilename(null); message.setResumeContentType(null); message.setResumeSize(null); |
||||
|
message = messages.saveAndFlush(message); |
||||
|
events.record("RESUME_REVOKED",conversationId,userId,messageId); |
||||
|
} |
||||
|
return view(message,userId); |
||||
|
} |
||||
|
|
||||
|
private Message message(Long conversationId, Long messageId) { |
||||
|
Message message = messages.findCurrentByIdForRecall(messageId) |
||||
|
.orElseThrow(() -> new BusinessException(ErrorCode.MESSAGE_NOT_FOUND)); |
||||
|
if (!conversationId.equals(message.getConversationId()) || !"RESUME".equals(message.getMessageType())) |
||||
|
throw new BusinessException(ErrorCode.FORBIDDEN); |
||||
|
return message; |
||||
|
} |
||||
|
|
||||
|
private void guard(Long conversationId, Long actor, Long applicationId) { |
||||
|
messaging.getConversation(conversationId,actor); |
||||
|
var application = applications.findById(applicationId) |
||||
|
.orElseThrow(() -> new BusinessException(ErrorCode.APPLICATION_NOT_FOUND)); |
||||
|
var job = jobs.findById(application.getJobId()).orElseThrow(() -> new BusinessException(ErrorCode.JOB_NOT_FOUND)); |
||||
|
var company = VerifiedCompanyGuard.requireVerified(companies.findById(job.getCompanyId()).orElse(null)); |
||||
|
Long student = application.getStudentUserId(), employer = company.getOwnerUserId(); |
||||
|
if ((!actor.equals(student) && !actor.equals(employer)) |
||||
|
|| members.findByConversationId(conversationId).size() != 2 |
||||
|
|| !members.existsByConversationIdAndUserId(conversationId,student) |
||||
|
|| !members.existsByConversationIdAndUserId(conversationId,employer)) |
||||
|
throw new BusinessException(ErrorCode.FORBIDDEN); |
||||
|
if (actor.equals(student)) roles.requireStudent(actor); else roles.requireCompany(actor); |
||||
|
if ("REJECTED".equals(application.getStatus()) || "WITHDRAWN".equals(application.getStatus())) |
||||
|
throw new BusinessException(ErrorCode.RESUME_MESSAGE_UNAVAILABLE); |
||||
|
if (blocks.existsByBlockerUserIdAndBlockedUserId(student,employer) |
||||
|
|| blocks.existsByBlockerUserIdAndBlockedUserId(employer,student)) |
||||
|
throw new BusinessException(ErrorCode.FORBIDDEN); |
||||
|
var match = matches.findByApplicationId(applicationId).orElse(null); |
||||
|
if (match == null || !"MATCHED".equals(match.getStatus())) |
||||
|
throw new BusinessException(ErrorCode.MATCH_REQUIRED_FOR_CONVERSATION); |
||||
|
// 主动发送不会偷偷覆盖学生的 PRIVATE 设置；双方均必须满足当前下载策略。
|
||||
|
resumeAccess.authorizeForDownload(employer,applicationId); |
||||
|
} |
||||
|
|
||||
|
private MessageResponse view(Message message, Long userId) { |
||||
|
return mapper.toResponse(message,userId,conversations.findById(message.getConversationId()) |
||||
|
.map(c -> "TALENT_INVITATION".equals(c.getType())).orElse(false)); |
||||
|
} |
||||
|
} |
||||
@ -0,0 +1,14 @@ |
|||||
|
package com.mydreamjob.messaging; |
||||
|
|
||||
|
import jakarta.persistence.*; |
||||
|
import lombok.*; |
||||
|
|
||||
|
/** 文件只存在受控数据库快照中；不参与消息列表查询、日志或实体 toString。 */ |
||||
|
@Entity @Table(name = "chat_resume_snapshots") |
||||
|
@Getter @Setter @Builder @NoArgsConstructor @AllArgsConstructor |
||||
|
public class ChatResumeSnapshot { |
||||
|
@Id @Column(name = "message_id") private Long messageId; |
||||
|
@Column(name = "application_id", nullable = false) private Long applicationId; |
||||
|
@Column(name = "owner_user_id", nullable = false) private Long ownerUserId; |
||||
|
@Lob @Column(columnDefinition = "LONGBLOB") private byte[] content; |
||||
|
} |
||||
@ -0,0 +1,12 @@ |
|||||
|
package com.mydreamjob.messaging; |
||||
|
|
||||
|
import org.springframework.data.jpa.repository.*; |
||||
|
import org.springframework.data.repository.query.Param; |
||||
|
|
||||
|
public interface ChatResumeSnapshotRepository extends JpaRepository<ChatResumeSnapshot, Long> { |
||||
|
@Query("select r.applicationId from ChatResumeSnapshot r where r.messageId = :id") |
||||
|
java.util.Optional<Long> applicationId(@Param("id") Long messageId); |
||||
|
@Modifying(clearAutomatically = true, flushAutomatically = true) |
||||
|
@Query("update ChatResumeSnapshot r set r.content = null where r.messageId = :id") |
||||
|
int purge(@Param("id") Long messageId); |
||||
|
} |
||||
@ -0,0 +1,60 @@ |
|||||
|
package com.mydreamjob.messaging; |
||||
|
|
||||
|
import jakarta.persistence.*; |
||||
|
import java.util.*; |
||||
|
import lombok.RequiredArgsConstructor; |
||||
|
import org.springframework.stereotype.Service; |
||||
|
|
||||
|
/** 对已完成成员鉴权的会话批量补展示摘要；不查询手机号、实名、简历或虚构在线状态。 */ |
||||
|
@Service @RequiredArgsConstructor |
||||
|
public class ConversationSummaryService { |
||||
|
@PersistenceContext private EntityManager em; |
||||
|
|
||||
|
public void enrich(List<Map<String,Object>> views, Long userId) { |
||||
|
if (views.isEmpty()) return; |
||||
|
List<Long> ids = views.stream().map(v -> (Long)v.get("id")).toList(); |
||||
|
Map<Long,List<Object[]>> contacts = new HashMap<>(); |
||||
|
em.createQuery(""" |
||||
|
select m.conversationId, u.nickname, u.avatarUrl, c.name, c.logoUrl |
||||
|
from ConversationMember m join User u on u.id = m.userId |
||||
|
left join Company c on c.ownerUserId = u.id |
||||
|
where m.conversationId in :ids and m.userId <> :userId |
||||
|
order by m.conversationId, m.id |
||||
|
""",Object[].class).setParameter("ids",ids).setParameter("userId",userId) |
||||
|
.getResultList().forEach(r -> contacts.computeIfAbsent((Long)r[0],key -> new ArrayList<>()).add(r)); |
||||
|
Map<Long,Object[]> last = new HashMap<>(); |
||||
|
em.createQuery(""" |
||||
|
select m.conversationId, m.content, m.createdAt, m.senderUserId, m.status, m.messageType, m.resumeRevoked |
||||
|
from Message m where m.conversationId in :ids and not exists |
||||
|
(select n.id from Message n where n.conversationId = m.conversationId and |
||||
|
(n.createdAt > m.createdAt or (n.createdAt = m.createdAt and n.id > m.id))) |
||||
|
""",Object[].class).setParameter("ids",ids).getResultList() |
||||
|
.forEach(r -> last.put((Long)r[0],r)); |
||||
|
for (Map<String,Object> view : views) { |
||||
|
boolean invitation = "TALENT_INVITATION".equals(view.get("type")); |
||||
|
var peers = contacts.getOrDefault(view.get("id"),List.of()); |
||||
|
String name = "会话成员"; |
||||
|
if (peers.size() == 1) { |
||||
|
Object[] peer = peers.get(0); |
||||
|
// 邀约候选人隐藏昵称/头像；公司公开展示名可见，绝不倒查求职者身份。
|
||||
|
name = peer[3] != null ? peer[3].toString() : invitation ? "求职者" : text(peer[1],"求职者"); |
||||
|
if (peer[3] != null) view.put("companyName",peer[3]); |
||||
|
Object avatar = peer[3] != null ? peer[4] : invitation ? null : peer[2]; |
||||
|
if (avatar != null) view.put("avatarUrl",avatar); |
||||
|
} |
||||
|
view.put("contactName",name); |
||||
|
Object[] message = last.get(view.get("id")); |
||||
|
view.put("lastMessage",message == null ? "" : "RECALLED".equals(message[4]) ? MessageViewMapper.RECALLED_PLACEHOLDER |
||||
|
: "RESUME".equals(message[5]) ? Boolean.TRUE.equals(message[6]) ? "[简历已失效]" : "[简历]" : message[1]); |
||||
|
if (message != null) { |
||||
|
view.put("lastMessageAt",message[2]); |
||||
|
view.put("lastMessageSenderScope",Objects.equals(message[3],userId) ? "CURRENT_USER" : "OTHER_PARTICIPANT"); |
||||
|
} |
||||
|
// 单个 DIRECT 会话可能承载多个岗位，不能捏造唯一岗位名。
|
||||
|
view.put("jobContextAvailable",false); |
||||
|
} |
||||
|
} |
||||
|
private String text(Object value,String fallback) { |
||||
|
return value == null || value.toString().isBlank() ? fallback : value.toString(); |
||||
|
} |
||||
|
} |
||||
@ -0,0 +1,16 @@ |
|||||
|
ALTER TABLE messages ADD COLUMN message_type VARCHAR(20) NOT NULL DEFAULT 'TEXT'; |
||||
|
ALTER TABLE messages ADD COLUMN resume_filename VARCHAR(255) NULL; |
||||
|
ALTER TABLE messages ADD COLUMN resume_content_type VARCHAR(120) NULL; |
||||
|
ALTER TABLE messages ADD COLUMN resume_size BIGINT NULL; |
||||
|
ALTER TABLE messages ADD COLUMN resume_revoked BOOLEAN NOT NULL DEFAULT FALSE; |
||||
|
CREATE INDEX idx_messages_sender_type ON messages(sender_user_id, message_type); |
||||
|
CREATE TABLE chat_resume_snapshots ( |
||||
|
message_id BIGINT PRIMARY KEY, |
||||
|
application_id BIGINT NOT NULL, |
||||
|
owner_user_id BIGINT NOT NULL, |
||||
|
content LONGBLOB NULL, |
||||
|
CONSTRAINT fk_chat_resume_message FOREIGN KEY (message_id) REFERENCES messages(id) ON DELETE CASCADE, |
||||
|
CONSTRAINT fk_chat_resume_application FOREIGN KEY (application_id) REFERENCES applications(id) ON DELETE CASCADE, |
||||
|
CONSTRAINT fk_chat_resume_owner FOREIGN KEY (owner_user_id) REFERENCES users(id) ON DELETE CASCADE, |
||||
|
INDEX idx_chat_resume_owner (owner_user_id) |
||||
|
) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci; |
||||
@ -0,0 +1,207 @@ |
|||||
|
package com.mydreamjob.messaging; |
||||
|
|
||||
|
import com.mydreamjob.auth.User; |
||||
|
import com.mydreamjob.company.Company; |
||||
|
import com.mydreamjob.job.Job; |
||||
|
import com.mydreamjob.application.*; |
||||
|
import com.mydreamjob.application.dto.ApplicationStatusRequest; |
||||
|
import com.mydreamjob.bidirectionalmatch.ApplicationMatchRecord; |
||||
|
import com.mydreamjob.privacy.*; |
||||
|
import com.mydreamjob.profile.*; |
||||
|
import com.mydreamjob.profile.storage.ResumeStorageService; |
||||
|
import com.mydreamjob.common.exception.BusinessException; |
||||
|
import jakarta.persistence.*; |
||||
|
import org.junit.jupiter.api.*; |
||||
|
import org.springframework.beans.factory.annotation.Autowired; |
||||
|
import org.springframework.boot.test.autoconfigure.web.servlet.AutoConfigureMockMvc; |
||||
|
import org.springframework.boot.test.context.SpringBootTest; |
||||
|
import org.springframework.boot.test.mock.mockito.MockBean; |
||||
|
import org.springframework.data.redis.core.RedisTemplate; |
||||
|
import org.springframework.test.context.ActiveProfiles; |
||||
|
import org.springframework.transaction.annotation.Transactional; |
||||
|
import org.springframework.test.web.servlet.MockMvc; |
||||
|
import java.util.*; |
||||
|
import static org.junit.jupiter.api.Assertions.*; |
||||
|
import static org.mockito.ArgumentMatchers.anyString; |
||||
|
import static org.mockito.Mockito.when; |
||||
|
import static org.springframework.test.web.servlet.request.MockMvcRequestBuilders.get; |
||||
|
import static org.springframework.test.web.servlet.result.MockMvcResultMatchers.*; |
||||
|
|
||||
|
@SpringBootTest(properties = "app.chat.resume.max-active-bytes=5") @AutoConfigureMockMvc @ActiveProfiles("integration-test") @Transactional |
||||
|
class ChatWorkflowIntegrationTest { |
||||
|
@Autowired EntityManager em; |
||||
|
@Autowired ChatResumeService resumes; |
||||
|
@Autowired MessagingService messaging; |
||||
|
@Autowired ProfileService profiles; |
||||
|
@Autowired ApplicationService applications; |
||||
|
@Autowired ChatResumeSnapshotRepository snapshots; |
||||
|
@Autowired MessageRepository messages; |
||||
|
@Autowired com.mydreamjob.bidirectionalmatch.ApplicationMatchRecordRepository matches; |
||||
|
@Autowired com.mydreamjob.interview.InterviewService interviews; |
||||
|
@Autowired com.mydreamjob.offer.OfferService offers; |
||||
|
@Autowired MockMvc mvc; |
||||
|
@Autowired com.mydreamjob.auth.AuthSessionService sessions; |
||||
|
@Autowired java.time.Clock clock; |
||||
|
@MockBean RedisTemplate<String,Object> redis; |
||||
|
@MockBean ResumeStorageService storage; |
||||
|
User student, employer, stranger; |
||||
|
Company company; |
||||
|
Application application; |
||||
|
Conversation conversation; |
||||
|
StudentProfile profile; |
||||
|
StudentPrivacySettings privacy; |
||||
|
|
||||
|
@BeforeEach void fixture() { |
||||
|
student=user("候选人昵称",User.Role.STUDENT); |
||||
|
employer=user("招聘人员",User.Role.COMPANY); |
||||
|
stranger=user("第三人",User.Role.STUDENT); |
||||
|
company=Company.builder().ownerUserId(employer.getId()).name("测试企业").verified(true).build(); |
||||
|
em.persist(company); |
||||
|
Job job=Job.builder().companyId(company.getId()).title("研发岗").description("fixture") |
||||
|
.city("上海").employmentType("FULL_TIME").status("PUBLISHED").build(); em.persist(job); |
||||
|
application=Application.builder().jobId(job.getId()).studentUserId(student.getId()).status("SUBMITTED").build(); |
||||
|
em.persist(application); |
||||
|
em.persist(ApplicationMatchRecord.builder().applicationId(application.getId()).jobId(job.getId()) |
||||
|
.companyId(company.getId()).candidateId(student.getId()).companyRequiredCandidateScore(60) |
||||
|
.studentRequiredHrScore(60).candidateInterestScore(90).hrSuitabilityScore(90).status("MATCHED").build()); |
||||
|
conversation=Conversation.builder().type("DIRECT").createdBy(student.getId()).title("测试").build(); em.persist(conversation); |
||||
|
for(User u:List.of(student,employer)) em.persist(ConversationMember.builder() |
||||
|
.conversationId(conversation.getId()).userId(u.getId()).build()); |
||||
|
profile=StudentProfile.builder().userId(student.getId()).resumeUrl("/controlled/original") |
||||
|
.resumeOriginalName("含实名的简历.pdf").resumeContentType("application/pdf").resumeSize(8L).build();em.persist(profile); |
||||
|
privacy=StudentPrivacySettings.builder().studentUserId(student.getId()) |
||||
|
.resumeVisibility(ResumeVisibility.APPLIED_COMPANIES).build();em.persist(privacy); |
||||
|
em.flush(); |
||||
|
when(storage.read(anyString())).thenAnswer(call -> call.getArgument(0).equals("/controlled/original") |
||||
|
? new byte[]{1,2,3} : new byte[]{8,9}); |
||||
|
} |
||||
|
private User user(String name,User.Role role) { |
||||
|
User u=User.builder().phone("139"+Math.abs(System.nanoTime()%1_000_000_000L)) |
||||
|
.nickname(name).role(role).roles(Set.of(role)).verified(true).active(true).build();em.persist(u);return u; |
||||
|
} |
||||
|
private com.mydreamjob.messaging.dto.MessageResponse send(String key) { |
||||
|
return resumes.send(conversation.getId(),student.getId(),new ChatResumeService.SendRequest(application.getId(),key)); |
||||
|
} |
||||
|
private void denied(Runnable action,int code) {assertEquals(code,assertThrows(BusinessException.class,action::run).getErrorCodeInt());} |
||||
|
|
||||
|
@Test void immutableSnapshotRetryAndReplayKeepOriginalBytes() { |
||||
|
var first=send("snapshot-1"); |
||||
|
assertEquals("RESUME",first.getMessageType());assertEquals("resume.pdf",first.getResume().fileName()); |
||||
|
assertFalse(first.getResume().downloadPath().contains("controlled")); |
||||
|
profile.setResumeUrl("/controlled/replacement");em.flush(); |
||||
|
assertArrayEquals(new byte[]{1,2,3},resumes.download(conversation.getId(),first.getId(),employer.getId()).bytes()); |
||||
|
assertEquals(first.getId(),send("snapshot-1").getId()); |
||||
|
var second=send("snapshot-2"); |
||||
|
assertArrayEquals(new byte[]{8,9},resumes.download(conversation.getId(),second.getId(),employer.getId()).bytes()); |
||||
|
assertEquals(2,snapshots.count()); |
||||
|
var replay=messaging.replayEvents(conversation.getId(),employer.getId(),0,100); |
||||
|
assertFalse(((List<?>)replay.get("items")).isEmpty()); |
||||
|
assertEquals("RESUME",messaging.listMessages(conversation.getId(),employer.getId(),0,20).getItems().get(0).getMessageType()); |
||||
|
} |
||||
|
@Test void revokedSnapshotIsPurgedAndCannotBeResurrectedByRetry() { |
||||
|
var sent=send("revoke-1");resumes.revoke(conversation.getId(),sent.getId(),student.getId()); |
||||
|
assertNull(snapshots.findById(sent.getId()).orElseThrow().getContent()); |
||||
|
denied(()->resumes.download(conversation.getId(),sent.getId(),employer.getId()),8309); |
||||
|
assertFalse(send("revoke-1").getResume().available()); |
||||
|
assertFalse(resumes.revoke(conversation.getId(),sent.getId(),student.getId()).getResume().available()); |
||||
|
} |
||||
|
@Test void recallPurgesBytesAndHidesCardDownload() { |
||||
|
var sent=send("recall-1"); |
||||
|
messaging.recallMessage(student.getId(),conversation.getId(),sent.getId(),null); |
||||
|
assertNull(snapshots.findById(sent.getId()).orElseThrow().getContent()); |
||||
|
denied(()->resumes.download(conversation.getId(),sent.getId(),employer.getId()),8309); |
||||
|
} |
||||
|
@Test void deletingSourcePermanentlyRevokesPreviouslySentSnapshot() { |
||||
|
var sent=send("delete-1");profiles.deleteResume(student.getId()); |
||||
|
profile.setResumeUrl("/controlled/new");em.flush(); |
||||
|
denied(()->resumes.download(conversation.getId(),sent.getId(),employer.getId()),8309); |
||||
|
assertNull(snapshots.findById(sent.getId()).orElseThrow().getContent()); |
||||
|
} |
||||
|
@Test void otherUserCannotDownloadOrRevoke() { |
||||
|
var sent=send("access-1"); |
||||
|
denied(()->resumes.download(conversation.getId(),sent.getId(),stranger.getId()),2002); |
||||
|
denied(()->resumes.revoke(conversation.getId(),sent.getId(),employer.getId()),2002); |
||||
|
} |
||||
|
@Test void currentPrivacyAndCertificationStillApply() { |
||||
|
var sent=send("privacy-1");privacy.setResumeVisibility(ResumeVisibility.PRIVATE);em.flush(); |
||||
|
denied(()->resumes.download(conversation.getId(),sent.getId(),employer.getId()),2002); |
||||
|
} |
||||
|
@Test void noPrivateResumeCanBeSentAndEmployerCannotSendStudentResume() { |
||||
|
privacy.setResumeVisibility(ResumeVisibility.PRIVATE);em.flush(); |
||||
|
denied(()->send("private-1"),2002); |
||||
|
denied(()->resumes.send(conversation.getId(),employer.getId(),new ChatResumeService.SendRequest(application.getId(),"hr-send")),2002); |
||||
|
} |
||||
|
@Test void unverifiedEmployerLosesDownloadAccess() { |
||||
|
var sent=send("cert-1");company.setVerified(false);em.flush(); |
||||
|
assertThrows(BusinessException.class,()->resumes.download(conversation.getId(),sent.getId(),employer.getId())); |
||||
|
} |
||||
|
@Test void earlyRejectionIsTerminalAndBlocksSnapshot() { |
||||
|
var sent=send("reject-1"); |
||||
|
ApplicationStatusRequest request=new ApplicationStatusRequest();request.setStatus("REJECTED"); |
||||
|
assertEquals("REJECTED",applications.updateStatus(company.getId(),application.getId(),request).getStatus()); |
||||
|
assertFalse(matches.existsMatchedApplication(company.getId(),student.getId())); |
||||
|
denied(()->resumes.download(conversation.getId(),sent.getId(),employer.getId()),8309); |
||||
|
request.setStatus("INTERVIEW"); |
||||
|
assertThrows(BusinessException.class,()->applications.updateStatus(company.getId(),application.getId(),request)); |
||||
|
} |
||||
|
@Test void textKeyCannotBeReusedForResumeAndViceVersa() { |
||||
|
var sent=send("shared-key"); |
||||
|
com.mydreamjob.messaging.dto.SendMessageRequest text=new com.mydreamjob.messaging.dto.SendMessageRequest(); |
||||
|
text.setConversationId(conversation.getId());text.setContent("发送了一份简历");text.setClientMessageId("shared-key"); |
||||
|
denied(()->messaging.sendMessage(student.getId(),text),1001); |
||||
|
assertNotNull(sent.getId()); |
||||
|
} |
||||
|
@Test void summaryHasRealPeerAndRedactedInvitationView() { |
||||
|
send("summary-1"); |
||||
|
var forStudent=messaging.getConversation(conversation.getId(),student.getId()); |
||||
|
assertEquals("测试企业",forStudent.get("contactName"));assertEquals("[简历]",forStudent.get("lastMessage")); |
||||
|
var forHr=messaging.getConversation(conversation.getId(),employer.getId()); |
||||
|
assertEquals("候选人昵称",forHr.get("contactName"));assertFalse(forHr.containsKey("online")); |
||||
|
conversation.setType("TALENT_INVITATION");em.flush(); |
||||
|
var anonymous=messaging.getConversation(conversation.getId(),employer.getId()); |
||||
|
assertEquals("求职者",anonymous.get("contactName"));assertFalse(anonymous.containsKey("createdBy")); |
||||
|
var message=messaging.listMessages(conversation.getId(),employer.getId(),0,20).getItems().get(0); |
||||
|
assertNull(message.getSenderUserId());assertEquals("OTHER_PARTICIPANT",message.getSenderScope()); |
||||
|
assertEquals("resume.pdf",message.getResume().fileName()); |
||||
|
} |
||||
|
@Test void downloadIsBinaryAndNeverPublicOrCached() throws Exception { |
||||
|
var sent=send("http-1"); |
||||
|
var token=sessions.createSession(employer,clock.instant(),com.mydreamjob.audit.AuditContext.builder().build()).accessToken(); |
||||
|
String url="/conversations/"+conversation.getId()+"/messages/"+sent.getId()+"/resume"; |
||||
|
mvc.perform(get(url).header("Authorization","Bearer "+token)).andExpect(status().isOk()) |
||||
|
.andExpect(header().string("Cache-Control","no-store")) |
||||
|
.andExpect(content().contentType("application/pdf")).andExpect(content().bytes(new byte[]{1,2,3})); |
||||
|
mvc.perform(get(url)).andExpect(status().isUnauthorized()); |
||||
|
} |
||||
|
|
||||
|
@Test void storageQuotaIsBoundedAndRevocationReleasesIt() { |
||||
|
var first=send("quota-1"); |
||||
|
denied(()->send("quota-2"),1001); |
||||
|
resumes.revoke(conversation.getId(),first.getId(),student.getId()); |
||||
|
assertNotNull(send("quota-3").getId()); |
||||
|
} |
||||
|
|
||||
|
@Test void rejectedApplicationCannotCreateInterviewOrSendExistingOfferDraft() { |
||||
|
var offer=new com.mydreamjob.offer.dto.OfferCreateRequest(); |
||||
|
offer.setApplicationId(application.getId());offer.setTitle("测试录用");offer.setWorkCity("上海"); |
||||
|
offer.setDescription("fixture");offer.setExpireAt(java.time.LocalDateTime.now().plusDays(10)); |
||||
|
var draft=offers.createOffer(employer.getId(),offer,null); |
||||
|
var interview=new com.mydreamjob.interview.dto.InterviewCreateRequest(); |
||||
|
interview.setTitle("测试面试");interview.setInterviewType("ONLINE");interview.setMeetingUrl("https://example.com/meeting"); |
||||
|
interview.setStartAt(java.time.LocalDateTime.now().plusDays(1));interview.setEndAt(java.time.LocalDateTime.now().plusDays(1).plusHours(1)); |
||||
|
var scheduled=interviews.createInterview(employer.getId(),application.getId(),interview,null); |
||||
|
ApplicationStatusRequest reject=new ApplicationStatusRequest();reject.setStatus("REJECTED"); |
||||
|
application.setStatus("VIEWED");em.flush(); |
||||
|
applications.updateStatus(company.getId(),application.getId(),reject); |
||||
|
denied(()->interviews.createInterview(employer.getId(),application.getId(),interview,null),8003); |
||||
|
var confirm=new com.mydreamjob.interview.dto.InterviewRespondRequest();confirm.setAction("CONFIRM"); |
||||
|
denied(()->interviews.respondToInterview(student.getId(),scheduled.getId(),confirm,null),8003); |
||||
|
var send=new com.mydreamjob.offer.dto.OfferStatusRequest();send.setStatus("SENT"); |
||||
|
denied(()->offers.transitionStatus(employer.getId(),draft.getId(),send,null),8106); |
||||
|
} |
||||
|
|
||||
|
@Test void exportRuntimeContractForIndependentComparison() throws Exception { |
||||
|
String json=mvc.perform(get("/v3/api-docs")).andExpect(status().isOk()).andReturn().getResponse().getContentAsString(); |
||||
|
java.nio.file.Files.writeString(java.nio.file.Path.of("target/workflow-openapi.json"),json); |
||||
|
} |
||||
|
} |
||||
Loading…
Reference in new issue