Files
AIclinicalresearch/backend/scripts/test-prompt-api.ts
HaHafeng 66255368b7 feat(admin): Add user management and upgrade to module permission system
Features - User Management (Phase 4.1):
- Database: Add user_modules table for fine-grained module permissions
- Database: Add 4 user permissions (view/create/edit/delete) to role_permissions
- Backend: UserService (780 lines) - CRUD with tenant isolation
- Backend: UserController + UserRoutes (648 lines) - 13 API endpoints
- Backend: Batch import users from Excel
- Frontend: UserListPage (412 lines) - list/filter/search/pagination
- Frontend: UserFormPage (341 lines) - create/edit with module config
- Frontend: UserDetailPage (393 lines) - details/tenant/module management
- Frontend: 3 modal components (592 lines) - import/assign/configure
- API: GET/POST/PUT/DELETE /api/admin/users/* endpoints

Architecture Upgrade - Module Permission System:
- Backend: Add getUserModules() method in auth.service
- Backend: Login API returns modules array in user object
- Frontend: AuthContext adds hasModule() method
- Frontend: Navigation filters modules based on user.modules
- Frontend: RouteGuard checks requiredModule instead of requiredVersion
- Frontend: Remove deprecated version-based permission system
- UX: Only show accessible modules in navigation (clean UI)
- UX: Smart redirect after login (avoid 403 for regular users)

Fixes:
- Fix UTF-8 encoding corruption in ~100 docs files
- Fix pageSize type conversion in userService (String to Number)
- Fix authUser undefined error in TopNavigation
- Fix login redirect logic with role-based access check
- Update Git commit guidelines v1.2 with UTF-8 safety rules

Database Changes:
- CREATE TABLE user_modules (user_id, tenant_id, module_code, is_enabled)
- ADD UNIQUE CONSTRAINT (user_id, tenant_id, module_code)
- INSERT 4 permissions + role assignments
- UPDATE PUBLIC tenant with 8 module subscriptions

Technical:
- Backend: 5 new files (~2400 lines)
- Frontend: 10 new files (~2500 lines)
- Docs: 1 development record + 2 status updates + 1 guideline update
- Total: ~4900 lines of code

Status: User management 100% complete, module permission system operational
2026-01-16 13:42:10 +08:00

88 lines
3.5 KiB
TypeScript
Raw Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
/**
* 测试 Prompt 管理 API
*
* 启动后端后运行: npx tsx scripts/test-prompt-api.ts
*/
const BASE_URL = 'http://localhost:3001/api/admin/prompts';
async function testAPI() {
console.log('🧪 测试 Prompt 管理 API...\n');
// 1. 获取列表
console.log('═══════════════════════════════════════════════════════');
console.log('📋 Test 1: GET /api/admin/prompts\n');
const listRes = await fetch(BASE_URL);
const listData = await listRes.json();
console.log(` 状态: ${listRes.status}`);
console.log(` 总数: ${listData.total}`);
console.log(` Prompts:`);
for (const p of listData.data || []) {
console.log(` - ${p.code} (${p.name}) v${p.latestVersion?.version || 0}`);
}
// 2. 获取详情
console.log('\n═══════════════════════════════════════════════════════');
console.log('📋 Test 2: GET /api/admin/prompts/RVW_EDITORIAL\n');
const detailRes = await fetch(`${BASE_URL}/RVW_EDITORIAL`);
const detailData = await detailRes.json();
console.log(` 状态: ${detailRes.status}`);
console.log(` Code: ${detailData.data?.code}`);
console.log(` Name: ${detailData.data?.name}`);
console.log(` 版本数: ${detailData.data?.versions?.length || 0}`);
// 3. 测试渲染
console.log('\n═══════════════════════════════════════════════════════');
console.log('📋 Test 3: POST /api/admin/prompts/test-render\n');
const renderRes = await fetch(`${BASE_URL}/test-render`, {
method: 'POST',
headers: { 'Content-Type': 'application/json' },
body: JSON.stringify({
content: '你好,{{name}}!请评估标题:{{title}}',
variables: { name: '张三', title: '测试标题' },
}),
});
const renderData = await renderRes.json();
console.log(` 状态: ${renderRes.status}`);
console.log(` 渲染结果: ${renderData.data?.rendered}`);
console.log(` 提取变量: [${renderData.data?.extractedVariables?.join(', ')}]`);
console.log(` 校验结果: ${renderData.data?.validation?.isValid ? '✅ 通过' : '❌ 缺少变量'}`);
// 4. 按模块筛选
console.log('\n═══════════════════════════════════════════════════════');
console.log('📋 Test 4: GET /api/admin/prompts?module=RVW\n');
const rvwRes = await fetch(`${BASE_URL}?module=RVW`);
const rvwData = await rvwRes.json();
console.log(` 状态: ${rvwRes.status}`);
console.log(` RVW模块Prompt数: ${rvwData.total}`);
for (const p of rvwData.data || []) {
console.log(` - ${p.code}`);
}
// 5. 获取调试状态无认证预期返回401
console.log('\n═══════════════════════════════════════════════════════');
console.log('📋 Test 5: GET /api/admin/prompts/debug (无认证)\n');
const debugRes = await fetch(`${BASE_URL}/debug`);
const debugData = await debugRes.json();
console.log(` 状态: ${debugRes.status}`);
console.log(` 响应: ${JSON.stringify(debugData)}`);
console.log('\n✅ API 测试完成!');
}
testAPI().catch(console.error);