107 lines
4.0 KiB
Go
107 lines
4.0 KiB
Go
package httpapi
|
|
|
|
import (
|
|
"context"
|
|
"net/http"
|
|
"net/http/httptest"
|
|
"path/filepath"
|
|
|
|
"git.pcux.cn/xuans/Scert/backend/internal/config"
|
|
"git.pcux.cn/xuans/Scert/backend/internal/deployment"
|
|
"git.pcux.cn/xuans/Scert/backend/internal/domain"
|
|
"git.pcux.cn/xuans/Scert/backend/internal/repository"
|
|
)
|
|
|
|
// projectDomainRepositoryStub 仅用于保留旧 HTTP 参数校验测试的存根行为；生产路由始终注入真实项目域名仓储。
|
|
type projectDomainRepositoryStub struct {
|
|
repository.DomainRepository
|
|
authorizeErr error
|
|
authorize func(context.Context, string, string, domain.ProjectPermission) error
|
|
}
|
|
|
|
func (r projectDomainRepositoryStub) AuthorizeProject(ctx context.Context, actorID, projectID string, permission domain.ProjectPermission) error {
|
|
if r.authorize != nil {
|
|
return r.authorize(ctx, actorID, projectID, permission)
|
|
}
|
|
return r.authorizeErr
|
|
}
|
|
|
|
func (r projectDomainRepositoryStub) CreateProjectDomain(ctx context.Context, actorID string, item domain.Domain) error {
|
|
return r.DomainRepository.Create(ctx, item)
|
|
}
|
|
|
|
func (r projectDomainRepositoryStub) UpdateProjectDomain(ctx context.Context, actorID string, item domain.Domain) error {
|
|
return r.DomainRepository.Update(ctx, item)
|
|
}
|
|
|
|
func (r projectDomainRepositoryStub) DeleteProjectDomain(ctx context.Context, actorID, id string) error {
|
|
return r.DomainRepository.Delete(ctx, id)
|
|
}
|
|
|
|
// 仅供旧的响应格式与错误脱敏单元测试显式注入；权限验证使用真实 SQL 资源夹具。
|
|
// 不在产品构造器或通用请求帮助函数中自动补齐，缺失依赖测试必须保持拒绝。
|
|
type projectResourceReaderStub struct {
|
|
domains repository.DomainRepository
|
|
servers repository.ServerRepository
|
|
}
|
|
|
|
func (r projectResourceReaderStub) ListVisibleDomains(ctx context.Context, _ string) ([]domain.Domain, error) {
|
|
return r.domains.List(ctx)
|
|
}
|
|
|
|
func (r projectResourceReaderStub) GetVisibleDomain(ctx context.Context, _ string, id string) (domain.Domain, error) {
|
|
return r.domains.GetByID(ctx, id)
|
|
}
|
|
|
|
func (r projectResourceReaderStub) ListVisibleServers(ctx context.Context, _ string) ([]deployment.Server, error) {
|
|
return r.servers.ListServers(ctx)
|
|
}
|
|
|
|
func (r projectResourceReaderStub) GetVisibleServer(ctx context.Context, _ string, id string) (deployment.Server, error) {
|
|
return r.servers.GetServerByID(ctx, id)
|
|
}
|
|
|
|
func (r projectResourceReaderStub) ListVisibleDomainServers(ctx context.Context, _ string, id string) ([]deployment.Server, error) {
|
|
return r.servers.ListServersByDomainID(ctx, id)
|
|
}
|
|
|
|
func (r projectResourceReaderStub) ListVisibleServerDomains(ctx context.Context, _ string, id string) ([]domain.Domain, error) {
|
|
servers, err := r.servers.ListServers(ctx)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
for _, server := range servers {
|
|
if server.ID == id {
|
|
return []domain.Domain{}, nil
|
|
}
|
|
}
|
|
return nil, repository.ErrProjectAccessDenied
|
|
}
|
|
|
|
func readyTestConfig(directory string) config.Config {
|
|
cfg := config.Default(directory)
|
|
// Linux 默认目录属于正式安装，测试必须显式隔离所有可写路径。
|
|
cfg.Paths = config.PathsConfig{
|
|
Install: directory, Config: filepath.Join(directory, "conf"),
|
|
Data: filepath.Join(directory, "data"), Log: filepath.Join(directory, "logs"),
|
|
Certificate: filepath.Join(directory, "ssl"), Backup: filepath.Join(directory, "backups"),
|
|
}
|
|
cfg.Database.DSN = filepath.Join(cfg.Paths.Data, "scert.db")
|
|
cfg.SetupReady = true
|
|
return cfg
|
|
}
|
|
|
|
func serveAdminHTTP(server *Server, recorder *httptest.ResponseRecorder, request *http.Request) {
|
|
if server.projectResources == nil {
|
|
if repo, ok := server.repository.(*stubDomainRepository); ok {
|
|
if repo.loaded.ID == "" {
|
|
repo.loaded = domain.Domain{ID: "domain-1", ResourceScope: domain.ResourceScope{ProjectID: domain.DefaultProjectID}}
|
|
}
|
|
server.projectResources = projectResourceReaderStub{domains: repo}
|
|
server.projectDomains = projectDomainRepositoryStub{DomainRepository: repo}
|
|
}
|
|
}
|
|
request.AddCookie(httpUserSessionCookie(server, "test-admin", repository.UserRoleAdmin))
|
|
server.Handler().ServeHTTP(recorder, request)
|
|
}
|