xiaoshu-app/docs/qa/launch-audit-2026-10-13/reproduce-auth.cjs

const {chromium}=require(process.env.PLAYWRIGHT_MODULE || 'playwright');const fs=require('fs');const vm=require('vm');
(async()=>{
 const source=fs.readFileSync('scripts/deploy-admin-functions.mjs','utf8');const fn=source.split('\n').find(l=>l.startsWith('async function migrateLegacyLogin('));
 let resetCalls=0,saves=0,newPassword='new-password-fixture';const values={username:'fixture',passwordResetRequired:true,isDisabled:false,isDeleted:false};
 const target={get:k=>values[k],set:(k,v)=>values[k]=v,setPassword:p=>{newPassword=p;resetCalls++},save:async()=>{saves++}};
 const context={verifyLegacyPassword:async()=>({retcode:1}),migratedLoginTarget:async()=>target,fieldsOf:async()=>({passwordResetRequired:true}),Parse:{User:{logIn:async()=>({getSessionToken:()=> 'r:local-fixture'})}},fail:(s,m)=>{throw Error(m)}};
 vm.createContext(context);vm.runInContext(fn+';globalThis.run=migrateLegacyLogin',context);await context.run('fixture','legacy-password-fixture');
 const results={legacyPasswordFallback:{resetCalls,saves,newPasswordOverwritten:newPassword==='legacy-password-fixture',resetRequiredCleared:values.passwordResetRequired===false,mode:'local function with isolated in-memory adapters; no real account touched'}};
 const browser=await chromium.launch({headless:true,channel:'chrome'});const page=await browser.newPage({viewport:{width:390,height:844}});let calls=0,held;
 await page.route('**/cloud-functions/**',async route=>{calls++;if(route.request().postDataJSON()?.params?.action==='user_get'){held=route;return;}await route.fulfill({json:{retcode:0,result:{}}});});
 await page.goto('http://127.0.0.1:4200/pages/member/wxauth');await page.locator('app-login-page').waitFor();
 await page.evaluate(()=>{const c=ng.getComponent(document.querySelector('app-login-page'));c.account='local-fixture';c.password='a'.repeat(20);c.privacyChecked=true;c.submit()});
 results.longPassword={requestCount:calls,message:await page.locator('body').innerText()};
 await page.evaluate(()=>{const c=ng.getComponent(document.querySelector('app-login-page'));c.session.setLogin({userId:20,groupId:1,sessionToken:'r:old-fixture'});c.api.get('user_get').subscribe({error:()=>{}})});
 await page.waitForTimeout(100);if(!held)throw Error('No delayed request');
 await page.evaluate(()=>{const c=ng.getComponent(document.querySelector('app-login-page'));c.session.setLogin({userId:21,groupId:1,sessionToken:'r:new-fixture'})});
 await held.fulfill({status:401,json:{retcode:-1,retmsg:'旧会话已过期'}});await page.waitForTimeout(150);
 results.staleSession={stored:await page.evaluate(()=>JSON.parse(localStorage.getItem('xiaoshu.angular.session'))),url:page.url()};
 await page.evaluate(()=>localStorage.setItem('xiaoshu.angular.session',JSON.stringify({token:'r:local-fixture',user:{userId:20,groupId:1}})));
 await page.goto('http://127.0.0.1:4200/pages/member/acc_destory');await page.getByText('此功能暂未开放，请联系管理员处理。').waitFor();results.accountDeletion={body:await page.locator('body').innerText()};
 await browser.close();fs.writeFileSync('docs/qa/launch-audit-2026-10-13/auth-reproduction.json',JSON.stringify(results,null,2));console.log(JSON.stringify(results,null,2));
})().catch(e=>{console.error(e);process.exit(1)});