package client import ( "context" "net/http" "net/http/httptest" "os" "path/filepath" "testing" ) func TestProjectClientUsesProjectScopedPaths(t *testing.T) { server := httptest.NewServer(http.HandlerFunc(func(writer http.ResponseWriter, request *http.Request) { if request.URL.Path != "/api/v1/projects/ssl/packages/demo" { t.Fatalf("项目请求路径错误:%s", request.URL.Path) } writer.Header().Set("Content-Type", "application/json") _, _ = writer.Write([]byte(`{"name":"demo","version":"1.0.0","project":"ssl"}`)) })) defer server.Close() api, err := NewProject(server.URL, "ssl") if err != nil { t.Fatal(err) } item, err := api.GetLatest(context.Background(), "demo") if err != nil { t.Fatal(err) } if item.Project != "ssl" || item.Version != "1.0.0" { t.Fatalf("项目包响应错误:%+v", item) } } func TestProjectClientUsesProjectScopedVersionPaths(t *testing.T) { server := httptest.NewServer(http.HandlerFunc(func(writer http.ResponseWriter, request *http.Request) { if request.URL.Path != "/api/v1/projects/ssl/packages/demo/versions" { t.Fatalf("项目版本请求路径错误:%s", request.URL.Path) } writer.Header().Set("Content-Type", "application/json") _, _ = writer.Write([]byte(`{"name":"demo","versions":[{"name":"demo","version":"1.0.0","project":"ssl"}]}`)) })) defer server.Close() api, err := NewProject(server.URL, "ssl") if err != nil { t.Fatal(err) } versions, err := api.ListVersionsFor(context.Background(), "demo", QueryOptions{}) if err != nil { t.Fatal(err) } if len(versions) != 1 || versions[0].Project != "ssl" { t.Fatalf("项目版本响应错误:%+v", versions) } } func TestProjectDownloadKeepsDestinationWhenChecksumFails(t *testing.T) { server := httptest.NewServer(http.HandlerFunc(func(writer http.ResponseWriter, request *http.Request) { writer.Header().Set("Content-Length", "7") writer.Header().Set("X-Scout-SHA256", "invalid") _, _ = writer.Write([]byte("payload")) })) defer server.Close() api, err := NewProject(server.URL, "ssl") if err != nil { t.Fatal(err) } destination := filepath.Join(t.TempDir(), "package.pkg") if err := os.WriteFile(destination, []byte("original"), 0o600); err != nil { t.Fatal(err) } if _, err := api.DownloadFor(context.Background(), "demo", "1.0.0", destination, QueryOptions{}); err == nil { t.Fatal("错误校验值应该导致下载失败") } data, err := os.ReadFile(destination) if err != nil { t.Fatal(err) } if string(data) != "original" { t.Fatalf("项目下载校验失败不应覆盖原文件:%q", data) } } func TestNewProjectRejectsUnsafeProjectID(t *testing.T) { if _, err := NewProject("http://127.0.0.1", "../ssl"); err == nil { t.Fatal("不安全项目标识应该失败") } }