更新

server/tests/AdminDesktopAuthContractTest.php

@@ -15,6 +15,11 @@ function adminDesktopExpect(bool $condition, string $message): void
 }
 
 adminDesktopExpect(AdminTerminalEnum::WECOM_RPA === 7, 'desktop admin terminal remains 7');
+adminDesktopExpect(AdminTerminalEnum::WECOM_RPA_MOBILE === 8, 'mobile console terminal is 8');
+adminDesktopExpect(
+    AdminTerminalEnum::wecomRpaTerminals() === [7, 8],
+    'only the desktop and mobile console terminals may read the desktop session'
+);
 
 $validator = file_get_contents(dirname(__DIR__) . '/app/adminapi/validate/LoginValidate.php');
 $controller = file_get_contents(dirname(__DIR__) . '/app/adminapi/controller/DesktopController.php');
@@ -23,6 +28,10 @@ adminDesktopExpect(
     str_contains($validator, 'AdminTerminalEnum::WECOM_RPA'),
     'admin login accepts the dedicated desktop terminal'
 );
+adminDesktopExpect(
+    str_contains($validator, 'AdminTerminalEnum::WECOM_RPA_MOBILE'),
+    'admin login accepts the dedicated mobile console terminal'
+);
 adminDesktopExpect(
     str_contains($controller, "public array \$notNeedLogin = ['session'];")
         && str_contains($controller, "'user_id' => 'admin:'")

server/tests/AdminDesktopSessionBehaviorTest.php

@@ -90,8 +90,15 @@ namespace {
     desktopCheck($invoke($valid)['data']['root'] === true, 'root comes from current account');
     Admin::$row['root'] = 0;
 
+    desktopCheck($result['data']['terminal'] === 7, 'desktop token reports the desktop terminal');
+    $mobile = $invoke(array_replace($valid, ['terminal' => 8]));
+    desktopCheck($mobile['code'] === 1, 'mobile console token (terminal 8) is accepted');
+    desktopCheck($mobile['data']['terminal'] === 8, 'mobile console token reports terminal 8');
+    desktopCheck($mobile['data']['user_id'] === 'admin:9', 'mobile console maps to the same tenant identity');
+
     desktopCheck($invoke([])['code'] === 0, 'missing or expired cached identity rejected');
     desktopCheck($invoke(array_replace($valid, ['terminal' => 1]))['code'] === 0, 'web token rejected');
+    desktopCheck($invoke(array_replace($valid, ['terminal' => 2]))['code'] === 0, 'admin mobile web token rejected');
     Admin::$row['disable'] = 1;
     desktopCheck($invoke($valid)['code'] === 0, 'disabled account rejected');
     Admin::$row = [];