feat(gateway): recover orphaned Kakao account links

2026-08-08 10:01:23 +00:00
parent 4374c490ac
commit 5c0aac5561
13 changed files with 634 additions and 27 deletions
@@ -0,0 +1,79 @@
+import { afterAll, beforeAll, describe, expect, it } from 'vitest';
+
+import { createGatewayPostgresConnector, type GatewayPrismaClient } from '@sammo-ts/infra';
+
+import { createPostgresUserRepository } from '../src/auth/postgresUserRepository.js';
+
+const databaseUrl = process.env.GATEWAY_RUNTIME_ACTION_DATABASE_URL;
+const integration = describe.skipIf(!databaseUrl);
+const userId = '3dd08c49-279e-41ad-a12b-51b914cc51c8';
+
+const assertDedicatedSchema = (): void => {
+    const expected = process.env.GATEWAY_RUNTIME_INTEGRATION_SCHEMA;
+    const actual = databaseUrl ? new URL(databaseUrl).searchParams.get('schema') : null;
+    if (!expected || !expected.endsWith('_gateway_runtime_integration') || actual !== expected) {
+        throw new Error('Refusing to mutate a Gateway database outside the runner-owned integration schema.');
+    }
+};
+
+integration('Kakao account relink PostgreSQL boundary', () => {
+    let db: GatewayPrismaClient;
+    let closeDb: (() => Promise<void>) | undefined;
+    let initialized = false;
+
+    beforeAll(async () => {
+        assertDedicatedSchema();
+        const connector = createGatewayPostgresConnector({ url: databaseUrl! });
+        await connector.connect();
+        db = connector.prisma;
+        initialized = true;
+        closeDb = () => connector.disconnect();
+        await db.appUser.deleteMany({ where: { id: userId } });
+        await db.appUser.create({
+            data: {
+                id: userId,
+                loginId: 'kakao-relink-integration',
+                displayName: '카카오 재연결 통합',
+                passwordHash: 'not-used',
+                passwordSalt: 'not-used',
+                roles: ['user'],
+                sanctions: {},
+                oauthType: 'KAKAO',
+                oauthId: 'former-kakao-id',
+                email: 'retained@example.test',
+                kakaoVerifiedAt: new Date('2026-08-01T00:00:00.000Z'),
+                kakaoTalkVerifiedUntil: new Date('2026-08-20T00:00:00.000Z'),
+            },
+        });
+    });
+
+    afterAll(async () => {
+        if (initialized) {
+            await db.appUser.deleteMany({ where: { id: userId } });
+        }
+        await closeDb?.();
+    });
+
+    it('relinks the new provider identity while preserving email ownership and resetting the old talk proof', async () => {
+        const users = createPostgresUserRepository(db);
+        const linked = await users.relinkKakaoByEmail(userId, {
+            oauthId: 'replacement-kakao-id',
+            email: 'retained@example.test',
+            oauthInfo: {
+                accessToken: 'replacement-access-token',
+                accessTokenValidUntil: '2026-08-08T12:00:00.000Z',
+            },
+            verifiedAt: new Date('2026-08-08T10:00:00.000Z'),
+        });
+
+        expect(linked).toMatchObject({
+            id: userId,
+            oauthType: 'KAKAO',
+            oauthId: 'replacement-kakao-id',
+            email: 'retained@example.test',
+            kakaoTalkVerifiedUntil: undefined,
+        });
+        await expect(users.findByOauthId('KAKAO', 'former-kakao-id')).resolves.toBeNull();
+        await expect(users.findByOauthId('KAKAO', 'replacement-kakao-id')).resolves.toMatchObject({ id: userId });
+    });
+});