多区域外卖分站系统选型：导出下载的授权撤销与范围校验

const assert = require('node:assert/strict');

// Constructed authorization model. Revalidate at export creation and download.
const grants = new Map([
  ['alice', { version: 1, stations: ['A'] }],
  ['hq', { version: 1, stations: ['A', 'B'] }],
]);
const orders = [
  { id: 'o1', stationId: 'A', amount: 100 },
  { id: 'o2', stationId: 'B', amount: 200 },
];
const jobs = new Map();

function createExport(actor, jobId, requestedStations) {
  const grant = grants.get(actor);
  if (!grant || !requestedStations.length ||
      requestedStations.some(station => !grant.stations.includes(station))) {
    throw new Error('FORBIDDEN');
  }
  const scope = [...new Set(requestedStations)].sort();
  const existing = jobs.get(jobId);
  if (existing) {
    if (existing.actor !== actor || existing.grantVersion !== grant.version ||
        JSON.stringify(existing.stations) !== JSON.stringify(scope)) {
      throw new Error('REQUEST_CONFLICT');
    }
    return structuredClone(existing);
  }
  const job = { actor, grantVersion: grant.version, stations: scope,
    rows: orders.filter(order => scope.includes(order.stationId)) };
  jobs.set(jobId, job);
  return structuredClone(job);
}

function download(actor, jobId) {
  const job = jobs.get(jobId);
  const grant = grants.get(actor);
  if (!job || job.actor !== actor || !grant ||
      grant.version !== job.grantVersion ||
      job.stations.some(station => !grant.stations.includes(station))) {
    throw new Error('FORBIDDEN');
  }
  return structuredClone(job.rows);
}

assert.deepEqual(createExport('alice', 'j1', ['A']).rows.map(x => x.id), ['o1']);
assert.deepEqual(download('alice', 'j1').map(x => x.id), ['o1']);
assert.throws(() => createExport('alice', 'j2', ['B']), /FORBIDDEN/);
assert.equal(jobs.has('j2'), false);
assert.throws(() => download('hq', 'j1'), /FORBIDDEN/);
assert.deepEqual(createExport('alice', 'j1', ['A']), jobs.get('j1'));
assert.throws(() => createExport('alice', 'j1', ['A', 'B']), /FORBIDDEN/);
grants.set('alice', { version: 2, stations: [] });
assert.throws(() => download('alice', 'j1'), /FORBIDDEN/);
assert.deepEqual(createExport('hq', 'j3', ['B', 'A']).rows.map(x => x.id), ['o1', 'o2']);
assert.throws(() => createExport('hq', 'j3', ['A']), /REQUEST_CONFLICT/);
console.log('10 assertions passed; alice A export=o1, revoked download=FORBIDDEN');