用户管理与数据操作

server/utils/user-status.test.ts

@@ -0,0 +1,44 @@
+import { describe, expect, it } from 'vitest'
+import {
+  createSessionRow,
+  findUserByApiToken,
+  findUserById,
+  getDb,
+  insertUser,
+  setUserApiToken,
+  setUserDisabled
+} from './db'
+
+describe('user disabled status', () => {
+  it('blocks API tokens and revokes sessions until re-enabled', () => {
+    const now = new Date().toISOString()
+    const userId = insertUser({
+      username: 'disabled-user',
+      passwordHash: 'hash',
+      role: 'user',
+      createdAt: now
+    })
+    const token = 'disabled-user-token'
+    const sessionId = 'disabled-user-session'
+    setUserApiToken(userId, token)
+    createSessionRow({
+      id: sessionId,
+      userId,
+      tokenHash: 'hash',
+      expiresAt: new Date(Date.now() + 60_000).toISOString(),
+      createdAt: now
+    })
+
+    setUserDisabled(userId, true)
+
+    expect(findUserById(userId)?.disabled_at).not.toBeNull()
+    expect(findUserByApiToken(token)).toBeNull()
+    expect(getDb().prepare('SELECT 1 FROM sessions WHERE id = ?').get(sessionId))
+      .toBeUndefined()
+
+    setUserDisabled(userId, false)
+
+    expect(findUserById(userId)?.disabled_at).toBeNull()
+    expect(findUserByApiToken(token)?.id).toBe(userId)
+  })
+})