diff --git a/models/setting.go b/models/setting.go
index a3bfe71..0eb809b 100644
--- a/models/setting.go
+++ b/models/setting.go
@@ -15,6 +15,11 @@ type Setting struct {
 // settingCache 设置项缓存
 var settingCache = make(map[string]string)
 
+// ClearCache 清空设置缓存
+func ClearCache() {
+	settingCache = make(map[string]string)
+}
+
 // IsTrueVal 返回设置的值是否为真
 func IsTrueVal(val string) bool {
 	return val == "1" || val == "true"
diff --git a/routers/router_test.go b/routers/router_test.go
index 19d0a05..dbffbce 100644
--- a/routers/router_test.go
+++ b/routers/router_test.go
@@ -1,12 +1,32 @@
 package routers
 
 import (
+	"bytes"
+	"cloudreve/models"
+	"database/sql"
+	"github.com/DATA-DOG/go-sqlmock"
+	"github.com/jinzhu/gorm"
 	"github.com/stretchr/testify/assert"
 	"net/http"
 	"net/http/httptest"
 	"testing"
 )
 
+var mock sqlmock.Sqlmock
+
+// TestMain 初始化数据库Mock
+func TestMain(m *testing.M) {
+	var db *sql.DB
+	var err error
+	db, mock, err = sqlmock.New()
+	if err != nil {
+		panic("An error was not expected when opening a stub database connection")
+	}
+	model.DB, _ = gorm.Open("mysql", db)
+	defer db.Close()
+	m.Run()
+}
+
 func TestPing(t *testing.T) {
 	asserts := assert.New(t)
 	router := InitRouter()
@@ -18,3 +38,80 @@ func TestPing(t *testing.T) {
 	assert.Equal(t, 200, w.Code)
 	asserts.Contains(w.Body.String(), "Pong")
 }
+
+func TestUserSession(t *testing.T) {
+	asserts := assert.New(t)
+	router := InitRouter()
+	w := httptest.NewRecorder()
+
+	testCases := []struct {
+		settingRows *sqlmock.Rows
+		userRows    *sqlmock.Rows
+		reqBody     string
+		expected    string
+	}{
+		// 登录信息正确，不需要验证码
+		{
+			settingRows: sqlmock.NewRows([]string{"name", "value", "type"}).
+				AddRow("login_captcha", "0", "login"),
+			userRows: sqlmock.NewRows([]string{"email", "nick", "password", "options"}).
+				AddRow("admin@cloudreve.org", "admin", "CKLmDKa1C9SD64vU:76adadd4fd4bad86959155f6f7bc8993c94e7adf", "{}"),
+			reqBody:  `{"userName":"admin@cloudreve.org","captchaCode":"captchaCode","Password":"admin"}`,
+			expected: `{"code":0,"data":{"ID":0,"CreatedAt":"0001-01-01T00:00:00Z","UpdatedAt":"0001-01-01T00:00:00Z","DeletedAt":null,"Email":"admin@cloudreve.org","Nick":"admin","Status":0,"Group":0,"PrimaryGroup":0,"Storage":0,"LastNotify":null,"Delay":0,"Avatar":"","OptionsSerialized":{"profile_on":0,"webdav_key":""}},"msg":""}`,
+		},
+		// 邮箱正确密码错误
+		{
+			settingRows: sqlmock.NewRows([]string{"name", "value", "type"}).
+				AddRow("login_captcha", "0", "login"),
+			userRows: sqlmock.NewRows([]string{"email", "nick", "password", "options"}).
+				AddRow("admin@cloudreve.org", "admin", "CKLmDKa1C9SD64vU:76adadd4fd4bad86959155f6f7bc8993c94e7adf", "{}"),
+			reqBody:  `{"userName":"admin@cloudreve.org","captchaCode":"captchaCode","Password":"admin123"}`,
+			expected: `{"code":401, "msg":"用户邮箱或密码错误"}`,
+		},
+		//邮箱格式不正确
+		{
+			reqBody:  `{"userName":"admin@cloudreve","captchaCode":"captchaCode","Password":"admin123"}`,
+			expected: `{"code":40001, "error":"Key: 'UserLoginService.UserName' Error:Field validation for 'UserName' failed on the 'email' tag", "msg":"邮箱格式不正确"}`,
+		},
+		// 用户被Ban
+		{
+			settingRows: sqlmock.NewRows([]string{"name", "value", "type"}).
+				AddRow("login_captcha", "0", "login"),
+			userRows: sqlmock.NewRows([]string{"email", "nick", "password", "options", "status"}).
+				AddRow("admin@cloudreve.org", "admin", "CKLmDKa1C9SD64vU:76adadd4fd4bad86959155f6f7bc8993c94e7adf", "{}", model.Baned),
+			reqBody:  `{"userName":"admin@cloudreve.org","captchaCode":"captchaCode","Password":"admin"}`,
+			expected: `{"code":403, "msg":"该账号已被封禁"}`,
+		},
+		// 用户未激活
+		{
+			settingRows: sqlmock.NewRows([]string{"name", "value", "type"}).
+				AddRow("login_captcha", "0", "login"),
+			userRows: sqlmock.NewRows([]string{"email", "nick", "password", "options", "status"}).
+				AddRow("admin@cloudreve.org", "admin", "CKLmDKa1C9SD64vU:76adadd4fd4bad86959155f6f7bc8993c94e7adf", "{}", model.NotActivicated),
+			reqBody:  `{"userName":"admin@cloudreve.org","captchaCode":"captchaCode","Password":"admin"}`,
+			expected: `{"code":403, "msg":"该账号未激活"}`,
+		},
+	}
+
+	for _, testCase := range testCases {
+		if testCase.settingRows != nil {
+			mock.ExpectQuery("^SELECT (.+)").WillReturnRows(testCase.settingRows)
+		}
+		if testCase.userRows != nil {
+			mock.ExpectQuery("^SELECT (.+)").WillReturnRows(testCase.userRows)
+		}
+		req, _ := http.NewRequest(
+			"POST",
+			"/Api/V3/User/Session",
+			bytes.NewReader([]byte(testCase.reqBody)),
+		)
+		router.ServeHTTP(w, req)
+
+		assert.Equal(t, 200, w.Code)
+		asserts.JSONEq(testCase.expected, w.Body.String())
+		w.Body.Reset()
+		asserts.NoError(mock.ExpectationsWereMet())
+		model.ClearCache()
+	}
+
+}