📋 PM Board
Sub-task EP-01-T03-S02 Yuqori erpbom-mobile

core/api — dio, JWT refresh (single-flight), ApiException, Cubit naqshi

Bajarildi
Status:

Tavsif

Bitta markaziy dio client (`core/api`), baza `API_BASE_URL/api/v1`: * `Authorization: Bearer <access>` (access 15 daqiqa) * 401 → refresh, **single-flight** (parallel so'rovlar bitta refresh'ni kutadi); rotation — yangi refresh token `flutter_secure_storage` da eskisini almashtiradi; refresh yiqilsa → lokal sessiya tozalanadi, login ekrani * login DTO'sida `audience` (`employee|driver|customer| supplier` — tanlangan roldan) va `device_id` (push token bilan bir xil qiymat, 09_auth FP-11 / 10_notifications) * xatolik → `ApiException {code, message, requestId, fields}`; tarmoq yo'q holati alohida `NetworkException`; `403 AUDIENCE_MISMATCH` alohida tip (UI 09_auth epicida) * `core/utils` — money (`Decimal`) va date (UTC → mahalliy) Namunaviy feature (`features/health/` yoki `core/health`) `view → cubit → data` oqimini ko'rsatadi: freezed sealed state (initial/loading/loaded/error), loading indikatori, bo'sh holat, xatolik + qayta urinish tugmasi. Tekshirish Prism mock'ga qarshi: `http://127.0.0.1:4010`.

Qabul mezonlari (DoD)

6 / 7 bajarildi

  • `bloc_test`: namunaviy cubit muvaffaqiyat va xatolik yo'lini qoplaydi

    qa-ep-01-t03-s02 · 2 о аввал

  • Test: 3 ta parallel 401 so'rovda refresh AYNAN BIR MARTA chaqiriladi

    qa-ep-01-t03-s02 · 2 о аввал

  • Refresh yiqilganda secure storage tozalanadi va login ekraniga o'tiladi

    qa-ep-01-t03-s02 · 2 о аввал

  • Login DTO'sida `audience` va `device_id` bor (test); `audience` qiymati tanlangan roldan olinadi

    qa-ep-01-t03-s02 · 2 о аввал

  • Pul `double.parse` bilan o'qilmaydi — `Decimal` ishlatiladi, util testi bor

    qa-ep-01-t03-s02 · 2 о аввал

  • Token log'ga, `print`ga va crash report'ga chiqmaydi

    qa-ep-01-t03-s02 · 2 о аввал

  • Mock (`:4010`) ga qarshi so'rov ishlaydi; ro'yxat ekranida loading/bo'sh/xatolik uchala holati bor

O'zgargan fayllar

33 ta

  • created test/core/health/view/health_list_view_test.dart
  • created test/core/health/cubit/health_cubit_test.dart
  • created test/core/health/data/health_api_test.dart
  • created test/core/health/data/health_item_test.dart
  • created test/core/auth/token_storage_test.dart
  • created test/core/auth/device_id_provider_test.dart
  • created test/core/auth/data/auth_api_test.dart
  • created test/core/auth/data/login_request_test.dart
  • created test/core/api/api_client_test.dart
  • created test/core/api/masking_log_interceptor_test.dart
  • created test/core/api/api_exception_test.dart
  • created test/core/api/auth_interceptor_test.dart
  • created test/support/in_memory_secure_storage_platform.dart
  • created test/support/fake_token_storage.dart
  • created test/support/fake_http_client_adapter.dart
  • created lib/core/health/view/health_list_view.dart
  • created lib/core/health/cubit/health_cubit.dart
  • created lib/core/health/cubit/health_state.dart
  • created lib/core/health/data/health_api.dart
  • created lib/core/health/data/health_item.dart
  • created lib/core/auth/data/login_response.dart
  • created lib/core/auth/data/login_request.dart
  • created lib/core/auth/data/auth_api.dart
  • created lib/core/auth/token_storage.dart
  • created lib/core/auth/device_id_provider.dart
  • created lib/core/auth/auth_session_controller.dart
  • created lib/core/auth/audience.dart
  • created lib/core/api/masking_log_interceptor.dart
  • created lib/core/api/auth_interceptor.dart
  • created lib/core/api/api_exception.dart
  • created lib/core/api/api_client.dart
  • modified pubspec.yaml
  • modified analysis_options.yaml

Izoh qoldirish

Tarix

24 yozuv

  • ✎

    finalize-ep-01 yangiladi

    Yangilandi: pr_url

  • ✎

    finalize-ep-01 yangiladi

    Yangilandi: branch, commit_sha

  • 💬

    qa-ep-01-t03-s02 izoh qoldirdi

    QA (mustaqil tekshiruv, kod darajasida). Baseline: `flutter analyze` — 0 issue; `flutter test` — 52/52 yashil. AC131 ✓ bloc_test 4 ta yo'l: success / ApiException / NetworkException / bo'sh ro'yxat (test/core/health/cubit/health_cubit_test.dart). AC132 ✓ Test tavtologiya EMAS: refresh chaqiruvi soxta adapter darajasida sanaladi (`refreshCalls++`, 30ms kechikish bilan concurrency majburlangan), dio → AuthApi haqiqiy yo'l orqali o'tadi; `saveCallCount == 1` ham tekshiriladi. Kod (lib/core/api/auth_interceptor.dart:89-106): `_inFlightRefresh` bitta zanjir, `whenComplete` muvaffaqiyat VA xatolikda ham cache'ni tozalaydi — yetim/kuzatilmagan future qolmaydi, race yo'q. AC133 ✓ lib/core/api/auth_interceptor.dart:69-73 — `tokenStorage.clear()` + `AuthSessionController.notifySessionExpired()`; test ikkalasini ham (clearCallCount, expired event) tekshiradi. Navigatsiyaning o'zi S03 doirasi — signal kontrakti bajarilgan. AC134 ✓ `audience` + `device_id` (snake_case) LoginRequest DTO'da; 4 wire qiymat (employee|driver|customer|supplier) 09_auth R53 (§2.4.1, qator 2144) bilan aynan bir xil; mobil `web` yubormaydi. `device_id` FP-11 bo'yicha DeviceIdProvider orqali barqaror. AC135 ✓ `grep -rn "double.parse|toDouble()" lib/` — faqat izohlarda uchraydi; pul `Decimal` + DecimalJsonConverter (string <-> Decimal). Util testi bor: money_formatter_test (7 ta) + health_item_test aniqlik testi (0.1000000000000000003). AC136 ✓ masking_log_interceptor faqat metod/yo'l/status yozadi; header va tana umuman loglanmaydi. Test tokenlar, parol va "Authorization" so'zining log'da yo'qligini tekshiradi. `grep -rn "print(" lib/` — 0 ta; `avoid_print` lint yoqilgan. 🔴 MUTATSIYA TEKSHIRUVI — 7/7 mutant ushlandi (har biri git checkout bilan tiklandi, daraxt toza): (a) single-flight cache o'chirildi → AC132 testi YIQILDI ✓ (b) maskalash o'chirildi (header+body log'ga) → AC136 testi YIQILDI ✓ (c) Audience.driver wire qiymati buzildi → AC134 testlari (2 ta) YIQILDI ✓ (d) Decimal→double konvertatsiya → AC135 aniqlik testi YIQILDI ✓ (e) tokenStorage.clear() olib tashlandi → AC133 YIQILDI ✓ (f) notifySessionExpired() olib tashlandi → AC133 YIQILDI ✓ (g) bo'sh holat branch'i olib tashlandi → AC137-B testi YIQILDI ✓ Ya'ni testlar haqiqatan xatoni ushlaydi — soxta yashil emas. AC137 — IKKI QISMLI, ataylab `is_met=false` qoldirildi: (B) bajarildi — HealthListView loading / bo'sh / xatolik+retry uchala holati widget testlari bilan qoplangan (mutant (g) buni tasdiqladi); (A) `:4010` Prism mock kontrakt (T00) yo'qligi sabab keyingi epicga qoldirildi. Bu barg AC137 tufayli QAYTARILMADI — (A) bootstrap konteksti, defekt emas. Qo'shimcha: flutter_secure_storage_platform_interface FAQAT dev_dependencies'da; lib/ da import qilinmagan (faqat test/support) — production dependency'ga sizmagan. Kichik kuzatuv (bloklovchi EMAS, S03 uchun eslatma): 3 ta parallel so'rov bir vaqtda 401 olib refresh YIQILSA, har bir chaqiruvchi alohida clear() + expired signalini yuboradi (3 marta). Idempotent, lekin router S03'da signal debounce/bir martalik qilingani ma'qul.

  • ⇄

    qa-ep-01-t03-s02 statusni o'zgartirdi Review → Bajarildi

  • ✓

    qa-ep-01-t03-s02 qabul mezonini belgiladi

    ✗ Mock (`:4010`) ga qarshi so'rov ishlaydi; ro'yxat ekranida loading/bo'sh/xatolik uchala holati bor

  • ✓

    qa-ep-01-t03-s02 qabul mezonini belgiladi

    ✓ Token log'ga, `print`ga va crash report'ga chiqmaydi

  • ✓

    qa-ep-01-t03-s02 qabul mezonini belgiladi

    ✓ Pul `double.parse` bilan o'qilmaydi — `Decimal` ishlatiladi, util testi bor

  • ✓

    qa-ep-01-t03-s02 qabul mezonini belgiladi

    ✓ Login DTO'sida `audience` va `device_id` bor (test); `audience` qiymati tanlangan roldan olinadi

  • ✓

    qa-ep-01-t03-s02 qabul mezonini belgiladi

    ✓ Refresh yiqilganda secure storage tozalanadi va login ekraniga o'tiladi

  • ✓

    qa-ep-01-t03-s02 qabul mezonini belgiladi

    ✓ Test: 3 ta parallel 401 so'rovda refresh AYNAN BIR MARTA chaqiriladi

  • ✓

    qa-ep-01-t03-s02 qabul mezonini belgiladi

    ✓ `bloc_test`: namunaviy cubit muvaffaqiyat va xatolik yo'lini qoplaydi

  • ⇄

    coder-ep-01-t03-s02 statusni o'zgartirdi Ishlanyapti → Review

  • 💬

    coder-ep-01-t03-s02 izoh qoldirdi

    AC137 ikki qismli, faqat (B) bajarildi: (A) `:4010` Prism mock — backend/OpenAPI hali yo'q (bootstrap holati), shu sabab bajarilmadi, `is_met=false` qoldirildi — QA/kelasi ish backend tayyor bo'lgach tekshirsin. (B) namunaviy `core/health` (view->cubit->data) loading/bo'sh/xatolik uchta holatini to'liq qamraydi, soxta HttpClientAdapter + widget test bilan tasdiqlangan. Muhim qarorlar: (1) LoginRequest/LoginResponse DTO maydonlari (`access_token`/`refresh_token`/`audience`, `device_id`/`device_info`) 09_auth §2.4.2 matnidan qo'lda yozildi — `erpbom-backend/openapi/v1/auth.yaml` yozilgach qayta tekshirilishi kerak (kontrakt-birinchi qoidasi bootstrap uchun board topshirig'i bilan ochiq qoldirilgan). (2) `device_id` — `flutter_secure_storage`da saqlanadigan qo'lda generatsiya qilingan RFC4122 v4 (tashqi `uuid` paketi qo'shilmadi, versiyalar S01'da qotirilgan). (3) `AuthSessionController` — refresh yiqilganda faqat signal beradi (`AuthSessionEvent.expired`), navigatsiya/login ekrani S03 doirasi, `app_router.dart`ga tegilmadi. (4) freezed 3.2.5 + Dart 3.13 SDK: `List` maydonli union holat (`HealthState.loaded`) standart generatsiyada kompilyatsiya xatoligi berdi (`final` konstruktor parametri) — `@Freezed(makeCollectionsUnmodifiable: false)` bilan chetlab o'tildi (`lib/core/health/cubit/health_state.dart`); boshqa freezed sinflarda List maydon yo'q, lekin kelajakda List maydonli DTO yozilsa shu muammo qaytishi mumkin — eslatma sifatida qoldirilmoqda. Tekshiruv: `flutter analyze` — toza (0 issue). `flutter test` — 52/52 yashil.

  • ✓

    coder-ep-01-t03-s02 qabul mezonini belgiladi

    ✓ Token log'ga, `print`ga va crash report'ga chiqmaydi

  • ✓

    coder-ep-01-t03-s02 qabul mezonini belgiladi

    ✓ Pul `double.parse` bilan o'qilmaydi — `Decimal` ishlatiladi, util testi bor

  • ✓

    coder-ep-01-t03-s02 qabul mezonini belgiladi

    ✓ Login DTO'sida `audience` va `device_id` bor (test); `audience` qiymati tanlangan roldan olinadi

  • ✓

    coder-ep-01-t03-s02 qabul mezonini belgiladi

    ✓ Refresh yiqilganda secure storage tozalanadi va login ekraniga o'tiladi

  • ✓

    coder-ep-01-t03-s02 qabul mezonini belgiladi

    ✓ Test: 3 ta parallel 401 so'rovda refresh AYNAN BIR MARTA chaqiriladi

  • ✓

    coder-ep-01-t03-s02 qabul mezonini belgiladi

    ✓ `bloc_test`: namunaviy cubit muvaffaqiyat va xatolik yo'lini qoplaydi

  • 📄

    coder-ep-01-t03-s02 fayllarni qayd etdi

    33 ta fayl qayd etildi

  • ⇄

    coder-ep-01-t03-s02 statusni o'zgartirdi Backlog → Ishlanyapti

    Agent ishni boshladi

  • ⚑

    coder-ep-01-t03-s02 ishga oldi

  • 🔗

    pm-agent bog'liqlik qo'shdi

    → EP-01-T03-S01

  • ✦

    pm-agent yaratdi

    core/api — dio, JWT refresh (single-flight), ApiException, Cubit naqshi

Ma'lumot

Agent
coder-ep-01-t03-s02
Olingan
2 о аввал
Boshlandi
17.08.2026 11:07
Tugadi
17.08.2026 11:40
Baho
6 soat
Spec
erp/docs/modules/09_auth.md#2.3
Branch
feat/EP-01-erpbom-mobile
Commit
8f9fbc66689d
Pull request →

Bog'liqliklar

Agent uchun

Bu ishni AI agent quyidagicha oladi:

curl -s -X POST https://pmboard.ferp.uz/api/items/EP-01-T03-S02/claim \
  -H "X-Agent: backend-dev-1"

Tugatgach:

curl -s -X POST https://pmboard.ferp.uz/api/items/EP-01-T03-S02/status \
  -H "X-Agent: backend-dev-1" \
  -H "Content-Type: application/json" \
  -d '{"status":"review","note":"..."}'