89 lines
3.6 KiB
Go
89 lines
3.6 KiB
Go
package httpapi
|
||
|
||
import (
|
||
"encoding/json"
|
||
"fmt"
|
||
"net/http"
|
||
"net/http/httptest"
|
||
"strings"
|
||
"testing"
|
||
|
||
"git.pcux.cn/xuans/Scert/backend/internal/database"
|
||
"git.pcux.cn/xuans/Scert/backend/internal/domain"
|
||
"git.pcux.cn/xuans/Scert/backend/internal/repository"
|
||
"github.com/gin-gonic/gin"
|
||
)
|
||
|
||
func TestDomainResourceScopeAPI(t *testing.T) {
|
||
cfg := readyTestConfig(t.TempDir())
|
||
db, err := database.Open(t.Context(), cfg.Database)
|
||
if err != nil {
|
||
t.Fatal(err)
|
||
}
|
||
defer db.Close()
|
||
if err := database.Migrate(t.Context(), db.DB, "sqlite"); err != nil {
|
||
t.Fatal(err)
|
||
}
|
||
for _, userID := range []string{"creator", "editor"} {
|
||
if _, err := db.DB.ExecContext(t.Context(), `INSERT INTO users (id, username, password_hash, role, status) VALUES (?, ?, 'test-only-no-login', 'super_admin', 'active')`, userID, userID); err != nil {
|
||
t.Fatal(err)
|
||
}
|
||
}
|
||
repo := repository.NewSQLDomainRepository(db.DB)
|
||
projectResources := repository.NewSQLProjectMemberRepository(db.DB)
|
||
server := New(Dependencies{
|
||
Config: cfg, Repository: repo,
|
||
ProjectResources: projectResources,
|
||
ProjectDomains: projectResources,
|
||
})
|
||
request := func(method, path, body, user string) *httptest.ResponseRecorder {
|
||
req := httptest.NewRequest(method, path, strings.NewReader(body))
|
||
req.Header.Set("Content-Type", "application/json")
|
||
req.AddCookie(httpUserSessionCookie(server, user, repository.UserRoleAdmin))
|
||
response := httptest.NewRecorder()
|
||
server.Handler().ServeHTTP(response, req)
|
||
return response
|
||
}
|
||
for _, field := range []string{"project_id", "owner_id", "created_by", "updated_by"} {
|
||
body := fmt.Sprintf(`{"name":"forged.example.test","certificate_type":"single","%s":"forged"}`, field)
|
||
response := request(http.MethodPost, "/api/v1/domains", body, "creator")
|
||
if response.Code != http.StatusBadRequest {
|
||
t.Fatalf("客户端不应提供 %s：%d", field, response.Code)
|
||
}
|
||
}
|
||
response := request(http.MethodPost, "/api/v1/domains", `{"name":"scope.example.test","certificate_type":"single"}`, "creator")
|
||
if response.Code != http.StatusCreated {
|
||
t.Fatalf("创建失败：%d，%s", response.Code, response.Body.String())
|
||
}
|
||
var created domain.Domain
|
||
if err := json.Unmarshal(response.Body.Bytes(), &created); err != nil {
|
||
t.Fatal(err)
|
||
}
|
||
want := domain.ResourceScope{ProjectID: "default", OwnerID: "creator", CreatedBy: "creator", UpdatedBy: "creator"}
|
||
if created.ResourceScope != want {
|
||
t.Fatalf("创建响应归属错误：%+v", created.ResourceScope)
|
||
}
|
||
response = request(http.MethodPut, "/api/v1/domains/"+created.ID, `{"name":"edited.example.test","certificate_type":"single"}`, "editor")
|
||
if response.Code != http.StatusOK {
|
||
t.Fatalf("更新失败：%d，%s", response.Code, response.Body.String())
|
||
}
|
||
loaded, err := repo.GetByID(t.Context(), created.ID)
|
||
want.UpdatedBy = "editor"
|
||
if err != nil || loaded.ResourceScope != want {
|
||
t.Fatalf("更新后归属错误：%+v，%v", loaded.ResourceScope, err)
|
||
}
|
||
}
|
||
|
||
func TestResourceScopePreservesProjectAndCreator(t *testing.T) {
|
||
server := New(Dependencies{Config: readyTestConfig(t.TempDir())})
|
||
recorder := httptest.NewRecorder()
|
||
ctx, _ := gin.CreateTestContext(recorder)
|
||
ctx.Request = httptest.NewRequest(http.MethodPut, "/", nil)
|
||
ctx.Request.AddCookie(httpUserSessionCookie(server, "editor", repository.UserRoleAdmin))
|
||
existing := domain.ResourceScope{ProjectID: "project-a", OwnerID: "owner", CreatedBy: "creator", UpdatedBy: "previous"}
|
||
updated := server.updatedResourceScope(ctx, existing)
|
||
if updated.ProjectID != existing.ProjectID || updated.OwnerID != existing.OwnerID || updated.CreatedBy != existing.CreatedBy || updated.UpdatedBy != "editor" {
|
||
t.Fatalf("更新操作者时丢失原资源归属：%+v", updated)
|
||
}
|
||
}
|