update user api

backend/test/Cases/Integration/User/UserControllerTest.php

@@ -65,6 +65,25 @@ class UserControllerTest extends TestCase
         return $user;
     }
 
+    protected function makeUserPayload(array $overrides = []): array
+    {
+        $suffix = bin2hex(random_bytes(4));
+
+        return array_merge([
+            'username' => 'user_' . $suffix,
+            'password' => 'Pass_' . $suffix,
+            'email' => 'user_' . $suffix . '@example.com',
+            'status' => 1,
+        ], $overrides);
+    }
+
+    protected function createUser(array $overrides = []): User
+    {
+        $payload = $this->makeUserPayload($overrides);
+
+        return User::query()->create($payload);
+    }
+
     // ========== 列表接口测试 ==========
 
     public function test_list_users_returns_paginated_data(): void
@@ -206,6 +225,148 @@ class UserControllerTest extends TestCase
         $response->assertJsonPath('code', 404);
     }
 
+    // ========== 创建接口测试 ==========
+
+    public function test_create_user_success(): void
+    {
+        $payload = $this->makeUserPayload();
+
+        $response = $this->post('/api/v1/users', $payload, $this->authHeaders());
+
+        $response->assertStatus(200);
+        $response->assertJsonPath('code', 0);
+        $response->assertJsonPath('data.username', $payload['username']);
+        $response->assertJsonPath('data.email', $payload['email']);
+        $response->assertJsonPath('data.status', 1);
+    }
+
+    public function test_create_user_validation_error_returns_400(): void
+    {
+        $payload = $this->makeUserPayload([
+            'username' => 'ab',
+        ]);
+
+        $response = $this->post('/api/v1/users', $payload, $this->authHeaders());
+
+        $response->assertStatus(400);
+        $response->assertJsonPath('code', 400);
+    }
+
+    public function test_create_user_duplicate_username_returns_400(): void
+    {
+        $user = $this->createUser();
+
+        $payload = $this->makeUserPayload([
+            'username' => $user->username,
+        ]);
+
+        $response = $this->post('/api/v1/users', $payload, $this->authHeaders());
+
+        $response->assertStatus(400);
+        $response->assertJsonPath('code', 400);
+    }
+
+    public function test_create_user_duplicate_email_returns_400(): void
+    {
+        $user = $this->createUser();
+
+        $payload = $this->makeUserPayload([
+            'email' => $user->email,
+        ]);
+
+        $response = $this->post('/api/v1/users', $payload, $this->authHeaders());
+
+        $response->assertStatus(400);
+        $response->assertJsonPath('code', 400);
+    }
+
+    // ========== 更新接口测试 ==========
+
+    public function test_update_user_partial_fields(): void
+    {
+        $user = $this->createUser();
+        $suffix = bin2hex(random_bytes(4));
+        $updated_email = 'updated_' . $suffix . '@example.com';
+        $ext = ['nickname' => 'Tester'];
+
+        $response = $this->put('/api/v1/users/' . $user->id, [
+            'email' => $updated_email,
+            'ext' => $ext,
+        ], $this->authHeaders());
+
+        $response->assertStatus(200);
+        $response->assertJsonPath('code', 0);
+        $response->assertJsonPath('data.email', $updated_email);
+        $response->assertJsonPath('data.ext.nickname', 'Tester');
+
+        $user->refresh();
+        $this->assertSame($updated_email, $user->email);
+        $this->assertSame($ext, $user->ext);
+    }
+
+    public function test_update_user_unique_conflict_returns_400(): void
+    {
+        $existing = $this->createUser();
+        $target = $this->createUser();
+
+        $response = $this->put('/api/v1/users/' . $target->id, [
+            'username' => $existing->username,
+        ], $this->authHeaders());
+
+        $response->assertStatus(400);
+        $response->assertJsonPath('code', 400);
+    }
+
+    public function test_update_user_not_found_returns_404(): void
+    {
+        $response = $this->put('/api/v1/users/999999', [
+            'email' => 'missing@example.com',
+        ], $this->authHeaders());
+
+        $response->assertStatus(404);
+        $response->assertJsonPath('code', 404);
+    }
+
+    // ========== 状态切换接口测试 ==========
+
+    public function test_patch_user_status_updates_status(): void
+    {
+        $user = $this->createUser();
+
+        $response = $this->patch('/api/v1/users/' . $user->id . '/status', [
+            'status' => 0,
+        ], $this->authHeaders());
+
+        $response->assertStatus(200);
+        $response->assertJsonPath('code', 0);
+        $response->assertJsonPath('data.status', 0);
+
+        $user->refresh();
+        $this->assertSame(0, $user->status);
+    }
+
+    public function test_patch_user_status_invalid_returns_400(): void
+    {
+        $user = $this->createUser();
+
+        $response = $this->patch('/api/v1/users/' . $user->id . '/status', [
+            'status' => 2,
+        ], $this->authHeaders());
+
+        $response->assertStatus(400);
+        $response->assertJsonPath('code', 400);
+    }
+
+    public function test_patch_user_status_not_found_returns_404(): void
+    {
+        $response = $this->patch('/api/v1/users/999999/status', [
+            'status' => 0,
+        ], $this->authHeaders());
+
+        $response->assertStatus(404);
+        $response->assertJsonPath('code', 404);
+    }
+
     // ========== 认证拦截测试 ==========
 
     public function test_list_users_without_token_returns_401(): void