xuans/Smail
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

测试: 增加协议授权码安全解密接口鉴权与有效性单测

Browse Source
This commit is contained in:
smail 2026-09-12 14:13:00 +08:00
parent 8c94d07df5
commit 3611110ced
1 changed files with 48 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

49
backend/controllers/security_authentication_test.go
View File

@ -7,6 +7,7 @@ import (
"strings"
"testing"
"git.pcux.cn/xuans/Smail/db"
"git.pcux.cn/xuans/Smail/dto/response"
"git.pcux.cn/xuans/Smail/services/access"
"git.pcux.cn/xuans/Smail/services/credentials"
@ -30,6 +31,7 @@ func TestSecurityHandlersRejectUnauthenticatedRequests(t *testing.T) {
{name: "set protocol enabled", hand: SetProtocolCredentialEnabled, body: `{"protocol":"smtp","enabled":true}`},
{name: "generate protocol credential", hand: GenerateProtocolCredential, body: `{"protocol":"smtp"}`},
{name: "revoke protocol credential", hand: RevokeProtocolCredential, body: `{"protocol":"smtp"}`},
{name: "reveal protocol credentials", hand: RevealProtocolCredentials, body: `{"password":"FixtureP12"}`},
{name: "request verification", hand: RequestVerification, body: `{"purpose":"login","account":"smail","email":"user@example.com"}`},
{name: "verify verification", hand: VerifyVerification, body: `{"id":"challenge","account":"smail","email":"user@example.com","code":"12345678","purpose":"login"}`},
{name: "list external emails", hand: ListExternalEmails},
@ -123,9 +125,16 @@ func TestProtocolCredentialHandlersManageCurrentUserCredential(t *testing.T) {
if err != nil {
t.Fatal(err)
}
tempVault := t.TempDir()
credentialService.SetVaultRoot(tempVault)
previousDB := db.Instance
db.Instance = engine
previous := securityRuntime
securityRuntime.credentials = credentialService
t.Cleanup(func() { securityRuntime = previous })
t.Cleanup(func() {
securityRuntime = previous
db.Instance = previousDB
})
ctx := &appcontext.Context{UserID: user.ID, UserAccount: user.Account}
list := func() response.Response {
@ -201,6 +210,44 @@ func TestProtocolCredentialHandlersManageCurrentUserCredential(t *testing.T) {
t.Fatal("SMTP protocol status was not returned")
}
revealFailRecorder := httptest.NewRecorder()
revealFailRequest := httptest.NewRequest(
http.MethodPost,
"/api/security/credentials/protocols/reveal",
strings.NewReader(`{"password":"wrong-password"}`),
)
RevealProtocolCredentials(ctx, revealFailRecorder, revealFailRequest)
var revealFailResult response.Response
if err := json.Unmarshal(revealFailRecorder.Body.Bytes(), &revealFailResult); err != nil {
t.Fatalf("invalid reveal fail response: %v", err)
}
if revealFailResult.ErrorNo == 0 {
t.Fatal("expected wrong password to fail reveal, got errorNo 0")
}
revealSuccessRecorder := httptest.NewRecorder()
revealSuccessRequest := httptest.NewRequest(
http.MethodPost,
"/api/security/credentials/protocols/reveal",
strings.NewReader(`{"password":"FixtureP12"}`),
)
RevealProtocolCredentials(ctx, revealSuccessRecorder, revealSuccessRequest)
var revealSuccessResult response.Response
if err := json.Unmarshal(revealSuccessRecorder.Body.Bytes(), &revealSuccessResult); err != nil {
t.Fatalf("invalid reveal success response: %v", err)
}
if revealSuccessResult.ErrorNo != 0 {
t.Fatalf("reveal protocol credentials failed: %+v", revealSuccessResult)
}
revealedMap, ok := revealSuccessResult.Data.(map[string]any)
if !ok {
t.Fatalf("expected map[string]any reveal response, got %#v", revealSuccessResult.Data)
}
if revealedMap["smtp"] != generated["code"] {
t.Fatalf("expected revealed smtp code %v, got %v", generated["code"], revealedMap["smtp"])
}
revokeRecorder := httptest.NewRecorder()
revokeRequest := httptest.NewRequest(
http.MethodPost,