가입 약관 동의 기록 · 서비스 탈퇴 · 온보딩 6단계 · Coach Mark

2026-10-05 22:48:25 +09:00
parent e7010010bb
commit 55424bd4a2
36 changed files with 2884 additions and 77 deletions
@@ -0,0 +1,127 @@
+import { afterAll, afterEach, beforeAll, beforeEach, describe, expect, it, vi } from 'vitest';
+import { getAuth } from 'firebase-admin/auth';
+import { getFirestore } from 'firebase-admin/firestore';
+
+import { bootAdmin, shutdownAdmin, wipeUser } from './support.js';
+import { fnAccountWithdraw, fnAuthOnCreate, fnSignupConsent } from '../src/account/account.js';
+import { fnAuthKakao, KAKAO_PROVIDER_ID, kakaoUidOf } from '../src/account/kakao.js';
+
+/** 가입 약관 기록(E-04 · E-05) · 계정 생성 트리거의 덮어쓰기 금지 · 국가 미고정(E-13) · 서비스 탈퇴(E-42) · 카카오 이메일(E-02). */
+
+const U = 'test-onb-user';
+const KAKAO_ID = '555000111';
+const db = () => getFirestore();
+
+type CallReq = Parameters<typeof fnSignupConsent.run>[0];
+const as = (uid: string, data: Record<string, unknown>) => ({ data, auth: { uid, token: {} } }) as CallReq;
+const codeOf = async (p: Promise<unknown>) => {
+  try { await p; return 'ok'; } catch (e) {
+    const err = e as { code?: string; details?: { code?: string } };
+    return err.details?.code ?? err.code;
+  }
+};
+const onCreate = (uid: string, extra: Record<string, unknown> = {}) =>
+  (fnAuthOnCreate as unknown as { run: (u: unknown) => Promise<void> })
+    .run({ uid, email: undefined, displayName: undefined, photoURL: undefined, providerData: [], ...extra });
+
+function stubKakao(email?: string) {
+  vi.stubGlobal('fetch', vi.fn(async (url: string) => {
+    if (url.endsWith('/v1/user/access_token_info')) return Response.json({ id: Number(KAKAO_ID), app_id: 123 });
+    return Response.json({
+      id: Number(KAKAO_ID),
+      kakao_account: { profile: { nickname: '카카오' }, ...(email ? { email, is_email_valid: true, is_email_verified: true } : {}) },
+    });
+  }));
+}
+
+async function wipe() {
+  await getAuth().deleteUsers([U, kakaoUidOf(KAKAO_ID)]);
+  for (const uid of [U, kakaoUidOf(KAKAO_ID)]) {
+    await db().recursiveDelete(db().doc(`users/${uid}`));
+    await wipeUser(uid);
+  }
+}
+
+beforeAll(() => {
+  if (!process.env.FIREBASE_AUTH_EMULATOR_HOST) throw new Error('FIREBASE_AUTH_EMULATOR_HOST 가 없습니다.');
+  process.env.KAKAO_APP_ID = '123';
+  bootAdmin();
+});
+afterAll(async () => { await wipe(); await shutdownAdmin(); });
+beforeEach(wipe);
+afterEach(() => { vi.unstubAllGlobals(); });
+
+describe('계정 생성 트리거', () => {
+  it('국가를 KR 로 고정하지 않고 · 이미 쓴 값(약관 · 닉네임)을 덮지 않는다', async () => {
+    await db().doc(`users/${U}`).set({ nickname: '먼저씀', termsVersion: 'v1' });
+    await onCreate(U, { providerData: [{ providerId: 'oidc.line', email: 'line@fan.io' }] });
+    const user = (await db().doc(`users/${U}`).get()).data()!;
+    expect(user.countryCode).toBeUndefined();
+    expect(user.nickname).toBe('먼저씀');
+    expect(user.termsVersion).toBe('v1');
+    expect(user.email).toBe('line@fan.io');
+    expect(user.status).toBe('active');
+    expect((await db().doc(`users/${U}/wallet/main`).get()).get('activityBalance')).toBe(0);
+  });
+});
+
+describe('fnSignupConsent', () => {
+  it('필수 하나라도 빠지면 거부', async () => {
+    const r = fnSignupConsent.run(as(U, { version: 'v1', agreed: ['service', 'location', 'age'] }));
+    expect(await codeOf(r)).toBe('invalid-argument');
+    expect((await db().doc(`users/${U}`).get()).get('termsAgreedAt')).toBeUndefined();
+  });
+
+  it('항목별 행 · termsAgreedAt · 마케팅 = Push Marketing', async () => {
+    await fnSignupConsent.run(as(U, { version: 'v1', agreed: ['service', 'privacy', 'location', 'age'] }));
+    const user = (await db().doc(`users/${U}`).get()).data()!;
+    expect(user.termsAgreedAt).toBeDefined();
+    expect(user.notificationPrefs.marketing).toBe(false);
+    const rows = (await db().collection(`users/${U}/consents`).get()).docs.map((d) => d.id).sort();
+    expect(rows).toEqual(['age_v1_grant', 'location_v1_grant', 'marketing_v1_revoke', 'privacy_v1_grant', 'service_v1_grant']);
+  });
+});
+
+describe('fnAccountWithdraw', () => {
+  it('SNS 연동이 남아 있으면 E-AUTH-14 (비정상 탈퇴)', async () => {
+    await getAuth().createUser({ uid: U });
+    await getAuth().updateUser(U, { providerToLink: { providerId: 'google.com', uid: 'g1' } });
+    await getAuth().updateUser(U, { providerToLink: { providerId: KAKAO_PROVIDER_ID, uid: 'k1' } });
+    expect(await codeOf(fnAccountWithdraw.run(as(U, {})))).toBe('E-AUTH-14');
+    expect((await getAuth().getUser(U)).uid).toBe(U);
+  });
+
+  it('개인식별정보를 지우고 원장은 남기며 Auth 계정을 지운다', async () => {
+    await getAuth().createUser({ uid: U });
+    await db().doc(`users/${U}`).set({ nickname: '팬', email: 'a@b.c', status: 'active' });
+    await db().doc(`users/${U}/popTransactions/t1`).set({ amount: 10 });
+    expect(await fnAccountWithdraw.run(as(U, {}))).toEqual({ withdrawn: true });
+    const user = (await db().doc(`users/${U}`).get()).data()!;
+    expect(user.status).toBe('withdrawn');
+    expect(user.nickname).toBeNull();
+    expect(user.email).toBeNull();
+    expect((await db().doc(`users/${U}/popTransactions/t1`).get()).exists).toBe(true);
+    await expect(getAuth().getUser(U)).rejects.toBeDefined();
+  });
+});
+
+describe('카카오 이메일 · 탈퇴 후 재가입', () => {
+  it('동의한 이메일만 사용자 문서에 남기고 · 없어도 로그인된다', async () => {
+    stubKakao();
+    await fnAuthKakao.run({ data: { accessToken: 'good' } } as Parameters<typeof fnAuthKakao.run>[0]);
+    expect((await db().doc(`users/${kakaoUidOf(KAKAO_ID)}`).get()).get('email')).toBeUndefined();
+    stubKakao('fan@kakao.com');
+    await fnAuthKakao.run({ data: { accessToken: 'good' } } as Parameters<typeof fnAuthKakao.run>[0]);
+    expect((await db().doc(`users/${kakaoUidOf(KAKAO_ID)}`).get()).get('email')).toBe('fan@kakao.com');
+  });
+
+  it('탈퇴한 kakao:<id> 문서가 있으면 새 UID 로 만든다', async () => {
+    stubKakao();
+    await db().doc(`users/${kakaoUidOf(KAKAO_ID)}`).set({ status: 'withdrawn' });
+    const { token } = await fnAuthKakao.run({ data: { accessToken: 'good' } } as Parameters<typeof fnAuthKakao.run>[0]) as { token: string };
+    const uid = JSON.parse(Buffer.from(token.split('.')[1]!, 'base64url').toString()).uid as string;
+    expect(uid).not.toBe(kakaoUidOf(KAKAO_ID));
+    expect(uid.startsWith(`${kakaoUidOf(KAKAO_ID)}:`)).toBe(true);
+    await getAuth().deleteUser(uid);
+  });
+});
@@ -93,13 +93,11 @@ describe('귀속 제한', () => {
    expect((await db().collection('referrals').where('referredUid', '==', C).get()).size).toBe(1);
  });

-  it('추천인 하루 상한(referralDailyCapPerReferrer)을 넘으면 귀속만 남고 capped', async () => {
+  it('추천인 하루 상한이 없다 — 같은 날 여러 명을 추천해도 모두 pending (10/3 통합회신 7항)', async () => {
    await db().doc('config/policy').set({ referralDailyCapPerReferrer: 1 });
    const codeA = await inviteCodeOf(A);
    expect((await attribute(B, codeA)).reward).toBe('pending');
-    expect((await attribute(C, codeA)).reward).toBe('capped');
-    await complete(C);
-    expect((await wallet(A)).pendingActivity ?? 0).toBe(0);
+    expect((await attribute(C, codeA)).reward).toBe('pending');
  });

  it('귀속 전에 검증 활동이 있으면 ineligible — 지급 없음', async () => {