Project

General

Profile

Download (1.6 KB)

QA验收 #29 » session-supplement-findings.json

Redmine Admin, 11/01/2026 04:02 PM

 
{
"task": "MP-LIST-REFRESH-01",
"case": "MPQA-REAL-SESSION-SWITCH",
"status": "Blocked",
"checkedPaths": {
"src/auth/auth.controller.ts": "20-36 public login awaits exchangeCode then users.login then JWT sign; 39-43 logout only",
"src/auth/wechat.service.ts": "15-19 external api.weixin.qq.com fetch; 51-57 jscode2session required",
"test/http.spec.ts": "213-228 test helper directly creates user/binding and signs JwtService token under test app; not an ordinary local public login route",
"src/auth/auth.guard.ts": "normal JWT validation/session_version retained"
},
"sourceHashes": {
"src/auth/auth.controller.ts": "52e45dd9de5ae90bd484176d23d2f58abd6199f926a2639ca25794729d95096a",
"src/auth/wechat.service.ts": "7bb48fbc4413490b548342d0d20685722b450a89a0999f63176e454ceeb3820b",
"src/auth/auth.guard.ts": "43e06d02318bced2c72556f3030bc0db8540962df8f0265967374436e3b8bfca",
"test/http.spec.ts": "5ef8e404e2740ee6527474fd735af18bf50f7d1763aa2b55fa66959c64a01413"
},
"ordinaryLocalSessionEndpointFound": false,
"minimumPrerequisite": "two distinct approved nonproduction WeChat identity code exchanges through normal login, or previously application-authenticated local A/B sessions with verified limited fixture ownership; no supplier call authorized in this package",
"stoppedPerCurrentInstruction": true,
"supplierCalls": 0,
"BWAccess": 0,
"JWTSecretReads": 0,
"JWTsGenerated": 0,
"usersBindingsSessionsCreated": 0,
"authBypassOrConfigChanges": false,
"existingControlledPromiseEvidenceOnly": "journal361 developer session watch/generation tests; not promoted"
}
(36-36/46)