97 lines
3.0 KiB
Go
97 lines
3.0 KiB
Go
package cli
|
|
|
|
import (
|
|
"strings"
|
|
"testing"
|
|
|
|
"git.pcux.cn/xuans/Scert/backend/internal/config"
|
|
)
|
|
|
|
func TestTailLinesReturnsOnlyLatestEntries(t *testing.T) {
|
|
values, err := tailLines(strings.NewReader("one\ntwo\nthree\n"), 2)
|
|
if err != nil {
|
|
t.Fatalf("读取日志尾部失败：%v", err)
|
|
}
|
|
if strings.Join(values, ",") != "two,three" {
|
|
t.Fatalf("日志尾部不正确：%v", values)
|
|
}
|
|
}
|
|
|
|
func TestSafeConfigMapRedactsPasswordHash(t *testing.T) {
|
|
cfg := config.Default(t.TempDir())
|
|
cfg.Admin.PasswordHash = "secret-hash"
|
|
result := safeConfigMap(cfg)
|
|
admin, ok := result["admin"].(map[string]any)
|
|
if !ok {
|
|
t.Fatalf("脱敏配置缺少管理员字段：%v", result)
|
|
}
|
|
if admin["password_hash"] != "已配置" {
|
|
t.Fatalf("密码摘要未脱敏：%v", admin["password_hash"])
|
|
}
|
|
}
|
|
|
|
func TestSetConfigValueUpdatesAndValidatesAllowedFields(t *testing.T) {
|
|
cfg := config.Default(t.TempDir())
|
|
if err := setConfigValue(&cfg, "server.port", "5200"); err != nil {
|
|
t.Fatalf("设置端口失败：%v", err)
|
|
}
|
|
if cfg.Server.Port != 5200 {
|
|
t.Fatalf("端口未更新：%d", cfg.Server.Port)
|
|
}
|
|
if err := setConfigValue(&cfg, "notification.recipients", "a@example.com, b@example.com"); err != nil {
|
|
t.Fatalf("设置收件人失败：%v", err)
|
|
}
|
|
if len(cfg.Notification.Recipients) != 2 {
|
|
t.Fatalf("收件人未拆分：%v", cfg.Notification.Recipients)
|
|
}
|
|
if err := setConfigValue(&cfg, "notification.http_login_path", "/api/login"); err != nil {
|
|
t.Fatalf("设置 HTTP 登录路径失败：%v", err)
|
|
}
|
|
if cfg.Notification.HTTPLoginPath != "/api/login" {
|
|
t.Fatalf("HTTP 登录路径未更新：%s", cfg.Notification.HTTPLoginPath)
|
|
}
|
|
if err := setConfigValue(&cfg, "acme.propagation_timeout_secs", "1200"); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if err := setConfigValue(&cfg, "acme.propagation_polling_interval_secs", "15"); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if cfg.ACME.PropagationTimeoutSecs != 1200 || cfg.ACME.PropagationPollingIntervalSecs != 15 {
|
|
t.Fatalf("DNS 传播参数未更新：%+v", cfg.ACME)
|
|
}
|
|
if err := setConfigValue(&cfg, "admin.password_hash", "plain"); err == nil {
|
|
t.Fatal("不应允许直接修改密码摘要")
|
|
}
|
|
}
|
|
|
|
func TestRootIncludesOperationalCommands(t *testing.T) {
|
|
root := newRootCommand()
|
|
for _, name := range []string{"certificate", "logs", "config", "backup", "restore", "service", "dns"} {
|
|
if root.CommandPath() == name || root.Commands() == nil {
|
|
t.Fatalf("根命令状态异常：%s", name)
|
|
}
|
|
found := false
|
|
for _, command := range root.Commands() {
|
|
if command.Name() == name {
|
|
found = true
|
|
break
|
|
}
|
|
}
|
|
if !found {
|
|
t.Fatalf("缺少命令：%s", name)
|
|
}
|
|
}
|
|
}
|
|
|
|
func TestSetSecretRejectsCommandLineValue(t *testing.T) {
|
|
command := newConfigSetSecretCommand()
|
|
command.SilenceUsage, command.SilenceErrors = true, true
|
|
command.SetArgs([]string{
|
|
"--key", "notification.smtp_password",
|
|
"--value", "not-a-real-secret",
|
|
})
|
|
if err := command.Execute(); err == nil || !strings.Contains(err.Error(), "命令行参数") {
|
|
t.Fatalf("命令行敏感值未被拒绝：%v", err)
|
|
}
|
|
}
|