WAPI 固化企微 API 能力目录与读取口径

server/tests/unit/wecomHrMaster.service.test.js

@@ -111,66 +111,84 @@ describe("wecom HR master sync helpers", () => {
     expect(changes.externalUserId.after).toBe(maskExternalUserId("oa_smoke002"));
   });
 
-  it("falls back to the authorized app secret when the contact secret is forbidden for read APIs", async () => {
+  it("uses fixed contact and agent secrets with list_id for full contact inventory", async () => {
     const calls = [];
     const fetchImpl = async (url, init = {}) => {
       const parsed = new URL(String(url));
-      calls.push({ path: parsed.pathname, token: parsed.searchParams.get("access_token") });
+      calls.push({
+        path: parsed.pathname,
+        token: parsed.searchParams.get("access_token"),
+        method: init.method ?? "GET",
+        body: init.body ? JSON.parse(init.body) : null,
+        secret: parsed.searchParams.get("corpsecret"),
+      });
       if (parsed.pathname === "/cgi-bin/gettoken") {
         const secret = parsed.searchParams.get("corpsecret");
-        if (secret === "contact-secret-whms-fallback") {
+        if (secret === "contact-secret-wapi") {
           return jsonResponse({ errcode: 0, access_token: "contact-token", expires_in: 7200 });
         }
-        if (secret === "agent-secret-whms-fallback") {
+        if (secret === "agent-secret-wapi") {
           return jsonResponse({ errcode: 0, access_token: "agent-token", expires_in: 7200 });
         }
-        if (secret === "hr-secret-whms-fallback") {
-          return jsonResponse({ errcode: 0, access_token: "hr-token", expires_in: 7200 });
-        }
       }
       if (parsed.pathname === "/cgi-bin/department/list" && parsed.searchParams.get("access_token") === "contact-token") {
-        return jsonResponse({ errcode: 48009, errmsg: "api forbidden for contact assistant" });
+        return jsonResponse({ errcode: 48009, errmsg: "department list not visible to contact app" });
       }
-      if (parsed.pathname === "/cgi-bin/department/list" && parsed.searchParams.get("access_token") === "agent-token") {
-        return jsonResponse({ errcode: 0, department: [{ id: 1, name: "管理部", parentid: 0 }] });
-      }
-      if (parsed.pathname === "/cgi-bin/user/get" && parsed.searchParams.get("access_token") === "agent-token") {
+      if (parsed.pathname === "/cgi-bin/user/list_id" && parsed.searchParams.get("access_token") === "contact-token") {
+        expect(init.method).toBe("POST");
+        expect(JSON.parse(init.body)).toEqual({ cursor: "", limit: 2 });
         return jsonResponse({
           errcode: 0,
-          userid: "oa_smoke002",
-          name: "测试员工",
-          mobile: "19912345678",
-          email: "[email protected]",
-          department: [1],
-          enable: 1,
+          dept_user: [
+            { userid: "oa_smoke002", department: 1 },
+            { userid: "oa_smoke002", department: 2 },
+          ],
+          next_cursor: "",
         });
       }
-      if (parsed.pathname === "/cgi-bin/hr/get_staff_info" && parsed.searchParams.get("access_token") === "hr-token") {
+      if (parsed.pathname === "/cgi-bin/user/get" && parsed.searchParams.get("access_token") === "contact-token") {
+        return jsonResponse({ errcode: 48009, errmsg: "api forbidden for contact assistant" });
+      }
+      if (parsed.pathname === "/cgi-bin/hr/get_staff_info" && parsed.searchParams.get("access_token") === "agent-token") {
         expect(init.method).toBe("POST");
-        return jsonResponse({ errcode: 0, staff_info: [{ fieldid: "在职状态", value: "在职" }] });
+        return jsonResponse({
+          errcode: 0,
+          staff_info: [
+            { fieldid: "name", value: "测试员工" },
+            { fieldid: "mobile", value: "19912345678" },
+            { fieldid: "email", value: "[email protected]" },
+            { fieldid: "department", value: "研发部" },
+            { fieldid: "在职状态", value: "在职" },
+          ],
+        });
       }
       return jsonResponse({ errcode: 40001, errmsg: "unexpected mock request" });
     };
 
     const result = await fetchWecomHrProfiles({
       config: {
-        wecomCorpId: "corp-whms-fallback",
+        wecomCorpId: "corp-wapi",
         wecomAgentId: "1000002",
-        wecomContactSecret: "contact-secret-whms-fallback",
-        wecomAgentSecret: "agent-secret-whms-fallback",
-        wecomHrAssistantSecret: "hr-secret-whms-fallback",
+        wecomContactSecret: "contact-secret-wapi",
+        wecomAgentSecret: "agent-secret-wapi",
+        wecomHrAssistantSecret: "deprecated-hr-secret-should-not-be-used",
         wecomContactDefaultDepartmentId: "1",
       },
-      userids: ["oa_smoke002"],
-      limit: 1,
+      userids: [],
+      limit: 2,
       fetchImpl,
     });
 
-    expect(result.tokenSource.contact).toBe("WECOM_AGENT_SECRET_FALLBACK");
-    expect(result.tokenSource.hr).toBe("WECOM_HR_ASSISTANT_SECRET");
+    expect(result.tokenSource.contact).toBe("WECOM_CONTACT_SECRET");
+    expect(result.tokenSource.hr).toBe("WECOM_AGENT_SECRET");
     expect(result.profiles).toHaveLength(1);
     expect(result.profiles[0].externalUserId).toBe("oa_smoke002");
+    expect(result.profiles[0].name).toBe("测试员工");
+    expect(result.profiles[0].missingRequiredFields).toEqual([]);
     expect(calls.some((call) => call.path === "/cgi-bin/department/list" && call.token === "contact-token")).toBe(true);
-    expect(calls.some((call) => call.path === "/cgi-bin/department/list" && call.token === "agent-token")).toBe(true);
+    expect(calls.some((call) => call.path === "/cgi-bin/user/list_id" && call.token === "contact-token")).toBe(true);
+    expect(calls.some((call) => call.path === "/cgi-bin/user/get" && call.token === "contact-token")).toBe(true);
+    expect(calls.some((call) => call.path === "/cgi-bin/hr/get_staff_info" && call.token === "agent-token")).toBe(true);
+    expect(calls.some((call) => call.secret === "deprecated-hr-secret-should-not-be-used")).toBe(false);
   });
 });