feat: 完善用户治理与登录白名单

server/auth_audit_test.go

@@ -94,6 +94,28 @@ func TestGroupMessageQuerySupportsOperationalFilters(t *testing.T) {
 	}
 }
 
+func TestUserQuerySupportsKeywordAndUserIDs(t *testing.T) {
+	req := httptest.NewRequest("GET", "/?keyword=alice&user_ids=101,202", nil)
+	query, countQuery, args, _, _, err := buildInternalAdminListQuery(req, usersInternalQuerySpec(), "")
+	if err != nil {
+		t.Fatal(err)
+	}
+	for _, clause := range []string{"CONCAT_WS(' ',u.username,p.nickname,u.phone) LIKE ?", "u.id IN (?,?)"} {
+		if !strings.Contains(query, clause) || !strings.Contains(countQuery, clause) {
+			t.Fatalf("user query missing %q: %s", clause, query)
+		}
+	}
+	want := []any{int64(101), int64(202), "%alice%"}
+	if !reflect.DeepEqual(args, want) {
+		t.Fatalf("unexpected filter arguments: got %#v, want %#v", args, want)
+	}
+	for _, field := range []string{"AS avatar", "AS register_type", "im_registration_invite_uses", "im_fileuploads AS avatar"} {
+		if !strings.Contains(usersInternalQuerySpec().Select+usersInternalQuerySpec().From, field) {
+			t.Fatalf("user query missing list field %q", field)
+		}
+	}
+}
+
 func TestRedactClientMessageForLog(t *testing.T) {
 	raw := []byte(`{"login":{"id":"1","scheme":"basic","secret":"YWxpY2U6YWxpY2UxMjM="},"acc":{"secret":"account-secret","tmpsecret":"temp-secret"}}`)
 	redacted := string(redactClientMessageForLog(raw))