feat: 增加测试覆盖率并优化代码质量

test: 添加单元测试和端到端测试
refactor: 重构登录页面和上传模块
ci: 更新测试覆盖率阈值至42%
build: 添加测试相关依赖
docs: 更新测试文档
style: 修复代码格式问题

src/app/api/admin/config/route.test.ts

@@ -0,0 +1,169 @@
+import { GET, POST, PUT } from './route';
+import { NextRequest } from 'next/server';
+
+jest.mock('@/lib/auth', () => ({
+  auth: jest.fn(),
+}));
+
+jest.mock('@/lib/auth/permissions', () => ({
+  hasPermission: jest.fn(),
+}));
+
+jest.mock('@/db', () => ({
+  db: {
+    select: jest.fn().mockReturnValue({
+      from: jest.fn().mockReturnValue({
+        where: jest.fn().mockReturnValue({
+          limit: jest.fn().mockResolvedValue([]),
+          orderBy: jest.fn().mockResolvedValue([]),
+        }),
+      }),
+    }),
+    insert: jest.fn().mockReturnValue({
+      values: jest.fn().mockReturnValue({
+        returning: jest.fn().mockResolvedValue([{
+          id: 'test-id',
+          key: 'test_key',
+          value: 'test_value',
+          category: 'general',
+        }]),
+      }),
+    }),
+  },
+}));
+
+describe('/api/admin/config', () => {
+  beforeEach(() => {
+    jest.clearAllMocks();
+  });
+
+  describe('GET', () => {
+    it('should return 401 if not authenticated', async () => {
+      const request = new NextRequest('http://localhost/api/admin/config');
+      const response = await GET(request);
+      const data = await response.json();
+      
+      expect(response.status).toBe(401);
+      expect(data.error).toBe('未授权');
+    });
+
+    it('should return 403 if no permission', async () => {
+      const { auth } = require('@/lib/auth');
+      const { hasPermission } = require('@/lib/auth/permissions');
+      
+      auth.mockResolvedValue({ user: { role: 'viewer' } });
+      hasPermission.mockReturnValue(false);
+      
+      const request = new NextRequest('http://localhost/api/admin/config');
+      const response = await GET(request);
+      const data = await response.json();
+      
+      expect(response.status).toBe(403);
+      expect(data.error).toBe('无权限');
+    });
+
+    it('should return configs if authenticated and has permission', async () => {
+      const { auth } = require('@/lib/auth');
+      const { hasPermission } = require('@/lib/auth/permissions');
+      
+      auth.mockResolvedValue({ user: { role: 'admin' } });
+      hasPermission.mockReturnValue(true);
+      
+      const request = new NextRequest('http://localhost/api/admin/config');
+      const response = await GET(request);
+      const data = await response.json();
+      
+      expect(response.status).toBe(200);
+      expect(data.configs).toBeDefined();
+      expect(data.flat).toBeDefined();
+    });
+  });
+
+  describe('POST', () => {
+    it('should return 401 if not authenticated', async () => {
+      const { auth } = require('@/lib/auth');
+      auth.mockResolvedValue(null);
+      
+      const request = new NextRequest('http://localhost/api/admin/config', {
+        method: 'POST',
+        body: JSON.stringify({ key: 'test', value: {} }),
+      });
+      const response = await POST(request);
+      const data = await response.json();
+      
+      expect(response.status).toBe(401);
+      expect(data.error).toBe('未授权');
+    });
+
+    it('should return 400 if missing required fields', async () => {
+      const { auth } = require('@/lib/auth');
+      const { hasPermission } = require('@/lib/auth/permissions');
+      
+      auth.mockResolvedValue({ user: { role: 'admin' } });
+      hasPermission.mockReturnValue(true);
+      
+      const request = new NextRequest('http://localhost/api/admin/config', {
+        method: 'POST',
+        body: JSON.stringify({ key: 'test' }),
+      });
+      const response = await POST(request);
+      const data = await response.json();
+      
+      expect(response.status).toBe(400);
+      expect(data.error).toBe('缺少必要字段');
+    });
+  });
+
+  describe('PUT', () => {
+    it('should return 401 if not authenticated', async () => {
+      const { auth } = require('@/lib/auth');
+      auth.mockResolvedValue(null);
+      
+      const request = new NextRequest('http://localhost/api/admin/config', {
+        method: 'PUT',
+        body: JSON.stringify({ configs: [] }),
+      });
+      const response = await PUT(request);
+      const data = await response.json();
+      
+      expect(response.status).toBe(401);
+      expect(data.error).toBe('未授权');
+    });
+
+    it('should return 403 if no permission', async () => {
+      const { auth } = require('@/lib/auth');
+      const { hasPermission } = require('@/lib/auth/permissions');
+      
+      auth.mockResolvedValue({ user: { role: 'viewer' } });
+      hasPermission.mockReturnValue(false);
+      
+      const request = new NextRequest('http://localhost/api/admin/config', {
+        method: 'PUT',
+        body: JSON.stringify({ configs: [] }),
+      });
+      const response = await PUT(request);
+      const data = await response.json();
+      
+      expect(response.status).toBe(403);
+      expect(data.error).toBe('无权限');
+    });
+
+    it('should return 400 if configs is not an array', async () => {
+      const { auth } = require('@/lib/auth');
+      const { hasPermission } = require('@/lib/auth/permissions');
+      
+      auth.mockResolvedValue({ user: { role: 'admin' } });
+      hasPermission.mockReturnValue(true);
+      
+      const request = new NextRequest('http://localhost/api/admin/config', {
+        method: 'PUT',
+        body: JSON.stringify({ configs: 'not-array' }),
+      });
+      const response = await PUT(request);
+      const data = await response.json();
+      
+      expect(response.status).toBe(400);
+      expect(data.error).toBe('无效的数据格式');
+    });
+  });
+});