xuans/Scert
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

补充管理接口请求体限制测试

Browse Source
This commit is contained in:
xuans 2026-08-30 20:02:38 +08:00
parent 09a4bf829d
commit e178f9fcf0
1 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
backend/internal/httpapi/users_api_test.go
View File

@ -42,7 +42,11 @@ func TestUserManagementAuthorizationAndCRUD(t *testing.T) {
t.Fatalf("保存用户 API 测试超级管理员失败：%v", err) t.Fatalf("保存用户 API 测试超级管理员失败：%v", err)
} }
server := New(Dependencies{Config: cfg, Repository: &stubDomainRepository{}, Users: users}) server := New(Dependencies{Config: cfg, Repository: &stubDomainRepository{}, Users: users})
overSized := `{"username":"operator","password":"` + strings.Repeat("x", 70*1024) + `"}`
overSizedResponse := serveUserRequest(server, httpUserSessionCookie(server, "primary-super-admin", repository.UserRoleSuperAdmin), http.MethodPost, "/api/v1/users", overSized)
if overSizedResponse.Code != http.StatusBadRequest {
t.Fatalf("oversized user request should return 400: %d %s", overSizedResponse.Code, overSizedResponse.Body.String())
}
unauthorized := serveUserRequest(server, nil, http.MethodGet, "/api/v1/users", "") unauthorized := serveUserRequest(server, nil, http.MethodGet, "/api/v1/users", "")
if unauthorized.Code != http.StatusUnauthorized { if unauthorized.Code != http.StatusUnauthorized {
t.Fatalf("未登录请求应返回 401：%d %s", unauthorized.Code, unauthorized.Body.String()) t.Fatalf("未登录请求应返回 401：%d %s", unauthorized.Code, unauthorized.Body.String())