80 lines
3.5 KiB
Go
80 lines
3.5 KiB
Go
package setup
|
|
|
|
import (
|
|
"testing"
|
|
|
|
"git.pcux.cn/xuans/Scert/backend/internal/config"
|
|
)
|
|
|
|
func TestApplyRequiresVerifiedDNS(t *testing.T) {
|
|
cfg := config.Default(t.TempDir())
|
|
err := Apply(&cfg, Input{
|
|
AdminUsername: "admin", AdminEmail: "admin@example.com", AdminPassword: "password123", ServerPort: 8080,
|
|
DNSProvider: "cloudflare", DNSCredentialRef: "credential-1", CertificateRoot: cfg.Paths.Certificate,
|
|
WebHostname: "panel.example.com", WebEnabled: true,
|
|
})
|
|
if err == nil {
|
|
t.Fatal("未通过 DNS 验证时不应完成初始化")
|
|
}
|
|
}
|
|
|
|
func TestApplyBuildsReadyConfig(t *testing.T) {
|
|
cfg := config.Default(t.TempDir())
|
|
err := Apply(&cfg, Input{
|
|
AdminUsername: "admin", AdminEmail: "admin@example.com", AdminPassword: "password123", ServerPort: 8080,
|
|
EmailProvider: "mail-api", EmailEndpoint: "https://mail.example.test/send", EmailRecipients: []string{"a@example.test,b@example.test", "a@example.test"},
|
|
DNSProvider: "cloudflare", DNSCredentialRef: "credential-1", DNSVerified: true, CertificateRoot: cfg.Paths.Certificate,
|
|
WebHostname: "panel.example.com", WebEnabled: true,
|
|
})
|
|
if err != nil {
|
|
t.Fatalf("初始化配置失败：%v", err)
|
|
}
|
|
if !cfg.SetupReady || cfg.DNS.VerificationState != "verified" || cfg.Admin.Username != "admin" {
|
|
t.Fatalf("初始化状态不正确：%+v", cfg)
|
|
}
|
|
if len(cfg.Notification.Recipients) != 2 {
|
|
t.Fatalf("收件人去重失败：%v", cfg.Notification.Recipients)
|
|
}
|
|
if cfg.Admin.PasswordHash == "password123" || cfg.Admin.PasswordHash == "" {
|
|
t.Fatal("管理员密码不应明文保存")
|
|
}
|
|
if cfg.ResetURL() != "https://panel.example.com/reset" {
|
|
t.Fatalf("密码重置地址生成错误：%s", cfg.ResetURL())
|
|
}
|
|
}
|
|
|
|
func TestApplyRejectsWebIPAsHostnamePair(t *testing.T) {
|
|
cfg := config.Default(t.TempDir())
|
|
err := Apply(&cfg, Input{
|
|
AdminUsername: "admin", AdminEmail: "admin@example.com", AdminPassword: "password123", ServerPort: 8080,
|
|
DNSProvider: "cloudflare", DNSCredentialRef: "credential-1", DNSVerified: true,
|
|
WebHostname: "panel.example.com", WebPublicIP: "203.0.113.10", WebEnabled: true,
|
|
})
|
|
if err == nil {
|
|
t.Fatal("域名和公网 IP 同时配置时应被拒绝")
|
|
}
|
|
}
|
|
|
|
func TestApplyUsesAdminEmailAndStoresNotificationOptions(t *testing.T) {
|
|
cfg := config.Default(t.TempDir())
|
|
err := Apply(&cfg, Input{
|
|
AdminUsername: "admin", AdminEmail: "admin@example.com", AdminPassword: "password123", ServerPort: 8080,
|
|
EmailHTTPEnabled: true, EmailProvider: "smail", EmailEndpoint: "https://mail.example.test",
|
|
EmailHTTPPath: "/api/email/send", EmailHTTPAuthMode: "bearer", EmailHTTPCredentialRef: "secret://mail/token",
|
|
EmailHTTPHeaders: map[string]string{" X-Tenant ": " scert "}, EmailEventMode: "detailed",
|
|
EmailIncludeDeploymentDetails: true, EmailIncludeCertificateSerial: true, EmailIncludeManagementURL: true,
|
|
EmailSenderName: "证书管理", EmailTimeoutSecs: 15, EmailRetryCount: 2, EmailRetryIntervalsSecs: []int{10, 30},
|
|
DNSProvider: "cloudflare", DNSCredentialRef: "credential-1", DNSVerified: true, CertificateRoot: cfg.Paths.Certificate,
|
|
WebHostname: "panel.example.com", WebEnabled: true,
|
|
})
|
|
if err != nil {
|
|
t.Fatalf("保存邮件通知选项失败：%v", err)
|
|
}
|
|
if len(cfg.Notification.Recipients) != 1 || cfg.Notification.Recipients[0] != "admin@example.com" {
|
|
t.Fatalf("未填写收件人时应使用管理员邮箱：%v", cfg.Notification.Recipients)
|
|
}
|
|
if cfg.Notification.HTTPCredentialRef != "secret://mail/token" || cfg.Notification.HTTPHeaders["X-Tenant"] != "scert" {
|
|
t.Fatalf("HTTP 通知配置未正确保存：%+v", cfg.Notification)
|
|
}
|
|
}
|