实现账号绑定、持久登录与跨设备对局恢复

test/client-identity-session.test.js

@@ -141,3 +141,24 @@ test('live token ownership survives a duplicated tab, reload and reconnect', { t
   assert.equal(welcome.playerId, a.welcome.playerId);
   await assertOnline(h, [a2, b]);
 });
+
+
+test('explicit account tokens are tentative until welcome and do not overwrite the last established local identity', async () => {
+  const old = '1'.repeat(32), selected = '2'.repeat(32), attached = '3'.repeat(32);
+  const local = storage(), session = storage({ 'sp.token': old });
+  const id = createIdentity({ local, session, channel: null });
+  await id.init();
+  id.saveToken(old);
+  assert.equal(id.stageToken(selected), true);
+  assert.equal(id.getToken(), selected);
+  assert.deepEqual(id.getTokenClaim(), { noReplace: false });
+  assert.equal(session.getItem('sp.token'), old);
+  assert.deepEqual(JSON.parse(local.getItem('sp.tokens')), [old]);
+  assert.equal(id.stageToken(''), false);
+  assert.equal(id.getToken(), selected);
+  id.saveToken(attached);
+  assert.equal(session.getItem('sp.token'), attached);
+  assert.equal(id.getToken(), attached);
+  assert.ok(Number.isFinite(id.getTokenClaim().claimAt));
+  assert.equal(JSON.parse(local.getItem('sp.tokens')).includes(selected), false, 'only the rotated welcome token is remembered');
+});