87 lines
2.9 KiB
Go
87 lines
2.9 KiB
Go
package repository
|
|
|
|
import (
|
|
"context"
|
|
"path/filepath"
|
|
"testing"
|
|
"time"
|
|
|
|
"git.pcux.cn/xuans/Scert/backend/internal/config"
|
|
"git.pcux.cn/xuans/Scert/backend/internal/database"
|
|
)
|
|
|
|
func TestSQLAuditRepositoryCreatesLog(t *testing.T) {
|
|
dir := t.TempDir()
|
|
dbConfig := config.Default(dir).Database
|
|
dbConfig.DSN = filepath.Join(dir, "data", "audit.db")
|
|
db, err := database.Open(context.Background(), dbConfig)
|
|
if err != nil {
|
|
t.Fatalf("打开数据库失败：%v", err)
|
|
}
|
|
defer db.Close()
|
|
if err := database.Migrate(context.Background(), db.DB, "sqlite"); err != nil {
|
|
t.Fatalf("迁移数据库失败：%v", err)
|
|
}
|
|
repo := NewSQLAuditRepository(db.DB)
|
|
if err := repo.CreateAuditLog(context.Background(), AuditLog{Action: "admin_password_reset", ResourceType: "super_admin", ResourceID: "super-admin", Status: "success", Message: "密码重置成功"}); err != nil {
|
|
t.Fatalf("写入审计日志失败：%v", err)
|
|
}
|
|
var count int
|
|
if err := db.DB.QueryRow("SELECT COUNT(*) FROM audit_logs WHERE action = ? AND status = ?", "admin_password_reset", "success").Scan(&count); err != nil {
|
|
t.Fatalf("查询审计日志失败：%v", err)
|
|
}
|
|
if count != 1 {
|
|
t.Fatalf("审计日志数量不正确：%d", count)
|
|
}
|
|
}
|
|
|
|
func TestSQLAuditRepositoryPrunesOnlyExpiredLogs(t *testing.T) {
|
|
dir := t.TempDir()
|
|
dbConfig := config.Default(dir).Database
|
|
dbConfig.DSN = filepath.Join(dir, "data", "audit-prune.db")
|
|
db, err := database.Open(context.Background(), dbConfig)
|
|
if err != nil {
|
|
t.Fatalf("打开数据库失败：%v", err)
|
|
}
|
|
defer db.Close()
|
|
if err := database.Migrate(context.Background(), db.DB, "sqlite"); err != nil {
|
|
t.Fatalf("迁移数据库失败：%v", err)
|
|
}
|
|
|
|
repo := NewSQLAuditRepository(db.DB)
|
|
cutoff := time.Date(2026, 8, 1, 0, 0, 0, 0, time.UTC)
|
|
items := []AuditLog{
|
|
{Action: "expired", ResourceType: "test", Status: "success", CreatedAt: cutoff.Add(-time.Second)},
|
|
{Action: "boundary", ResourceType: "test", Status: "success", CreatedAt: cutoff},
|
|
{Action: "retained", ResourceType: "test", Status: "success", CreatedAt: cutoff.Add(time.Second)},
|
|
}
|
|
for _, item := range items {
|
|
if err := repo.CreateAuditLog(context.Background(), item); err != nil {
|
|
t.Fatalf("写入审计日志失败：%v", err)
|
|
}
|
|
}
|
|
|
|
deleted, err := repo.PruneExpiredAuditLogs(context.Background(), cutoff)
|
|
if err != nil {
|
|
t.Fatalf("清理过期审计日志失败：%v", err)
|
|
}
|
|
if deleted != 1 {
|
|
t.Fatalf("清理数量不正确：%d", deleted)
|
|
}
|
|
var count int
|
|
if err := db.DB.QueryRow(`SELECT COUNT(*) FROM audit_logs`).Scan(&count); err != nil {
|
|
t.Fatalf("统计保留日志失败：%v", err)
|
|
}
|
|
if count != 2 {
|
|
t.Fatalf("保留日志数量不正确：%d", count)
|
|
}
|
|
for _, action := range []string{"boundary", "retained"} {
|
|
if err := db.DB.QueryRow(`SELECT COUNT(*) FROM audit_logs WHERE action = ?`, action).Scan(&count); err != nil {
|
|
t.Fatalf("检查保留日志失败：%v", err)
|
|
}
|
|
if count != 1 {
|
|
t.Fatalf("应保留审计日志 %s", action)
|
|
}
|
|
}
|
|
}
|