feat: add tenant membership flow

backend/app/services/common_test.go

@@ -1,8 +1,12 @@
 package services
 
 import (
+	"bytes"
 	"database/sql"
 	"errors"
+	"mime/multipart"
+	"net/http"
+	"net/http/httptest"
 	"testing"
 
 	"quyun/v2/app/commands/testx"
@@ -40,6 +44,9 @@ func (s *CommonTestSuite) Test_AbortUpload() {
 		ctx := s.T().Context()
 		tenantID := int64(1)
 		ownerID := int64(1001)
+		tempDir := s.T().TempDir()
+		So(Common.storage, ShouldNotBeNil)
+		Common.storage.Config.LocalPath = tempDir
 
 		newUpload := func() string {
 			form := &common_dto.UploadInitForm{
@@ -84,3 +91,64 @@ func (s *CommonTestSuite) Test_AbortUpload() {
 		})
 	})
 }
+
+func (s *CommonTestSuite) Test_UploadPart() {
+	Convey("UploadPart", s.T(), func() {
+		ctx := s.T().Context()
+		tenantID := int64(1)
+		ownerID := int64(1001)
+		otherID := int64(2002)
+		tempDir := s.T().TempDir()
+		So(Common.storage, ShouldNotBeNil)
+		Common.storage.Config.LocalPath = tempDir
+
+		newUpload := func() string {
+			form := &common_dto.UploadInitForm{
+				Filename: "sample.mp4",
+				Type:     "video",
+				MimeType: "video/mp4",
+			}
+			resp, err := Common.InitUpload(ctx, tenantID, ownerID, form)
+			So(err, ShouldBeNil)
+			So(resp.UploadID, ShouldNotBeBlank)
+			return resp.UploadID
+		}
+
+		newFileHeader := func() *multipart.FileHeader {
+			body := &bytes.Buffer{}
+			writer := multipart.NewWriter(body)
+
+			part, err := writer.CreateFormFile("file", "sample.txt")
+			So(err, ShouldBeNil)
+			_, err = part.Write([]byte("hello world"))
+			So(err, ShouldBeNil)
+
+			So(writer.Close(), ShouldBeNil)
+
+			req := httptest.NewRequest(http.MethodPost, "/upload", body)
+			req.Header.Set("Content-Type", writer.FormDataContentType())
+			So(req.ParseMultipartForm(32<<20), ShouldBeNil)
+			So(req.MultipartForm, ShouldNotBeNil)
+			So(req.MultipartForm.File["file"], ShouldNotBeEmpty)
+			return req.MultipartForm.File["file"][0]
+		}
+
+		Convey("should allow owner to upload part", func() {
+			uploadID := newUpload()
+			form := &common_dto.UploadPartForm{UploadID: uploadID, PartNumber: 1}
+			err := Common.UploadPart(ctx, tenantID, ownerID, newFileHeader(), form)
+			So(err, ShouldBeNil)
+		})
+
+		Convey("should reject other user", func() {
+			uploadID := newUpload()
+			form := &common_dto.UploadPartForm{UploadID: uploadID, PartNumber: 1}
+			err := Common.UploadPart(ctx, tenantID, otherID, newFileHeader(), form)
+			So(err, ShouldNotBeNil)
+
+			var appErr *errorx.AppError
+			So(errors.As(err, &appErr), ShouldBeTrue)
+			So(appErr.Code, ShouldEqual, errorx.ErrForbidden.Code)
+		})
+	})
+}