64 lines
2.0 KiB
Go
64 lines
2.0 KiB
Go
package db
|
|
|
|
import (
|
|
"errors"
|
|
"path/filepath"
|
|
"reflect"
|
|
"testing"
|
|
|
|
"git.pcux.cn/xuans/Smail/models"
|
|
"xorm.io/xorm"
|
|
)
|
|
|
|
func TestSuperAdminInvariantDoesNotMutateAccounts(t *testing.T) {
|
|
if !errors.Is(ValidateSuperAdmin(nil), ErrSuperAdminInvariant) {
|
|
t.Fatal("未初始化数据库没有被拒绝")
|
|
}
|
|
for _, tc := range []struct {
|
|
name string
|
|
users []models.User
|
|
valid bool
|
|
}{
|
|
{"empty", nil, false},
|
|
{"ordinary", []models.User{{Role: "user"}}, false},
|
|
{"explicit-user", []models.User{{Role: "user", IsAdmin: 1}}, false},
|
|
{"single", []models.User{{Role: "super_admin"}}, true},
|
|
{"disabled", []models.User{{Role: "super_admin", Disabled: 1}}, false},
|
|
{"duplicate", []models.User{{Role: "super_admin"}, {Role: "super_admin", Disabled: 1}}, false},
|
|
{"legacy", []models.User{{Role: "legacy", IsAdmin: 1}}, true},
|
|
{"mixed-duplicate", []models.User{{Role: "super_admin"}, {Role: "legacy", IsAdmin: 1}}, false},
|
|
{"multiple-admins", []models.User{{Role: "super_admin"}, {Role: "admin", IsAdmin: 1}, {Role: "admin", IsAdmin: 1}, {Role: "user"}}, true},
|
|
} {
|
|
t.Run(tc.name, func(t *testing.T) {
|
|
engine, err := xorm.NewEngine("sqlite", filepath.Join(t.TempDir(), "accounts.db"))
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
defer engine.Close()
|
|
if err := engine.Sync2(new(models.User)); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
for index, user := range tc.users {
|
|
user.Account, user.Name, user.Password = string(rune('a'+index)), "test", "unused"
|
|
if _, err := engine.Insert(&user); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
}
|
|
var before, after []models.User
|
|
if err := engine.OrderBy("id").Find(&before); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
err = ValidateSuperAdmin(engine)
|
|
if (err == nil) != tc.valid || (!tc.valid && !errors.Is(err, ErrSuperAdminInvariant)) {
|
|
t.Fatalf("唯一性检查不符合预期：%v", err)
|
|
}
|
|
if err := engine.OrderBy("id").Find(&after); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if !reflect.DeepEqual(before, after) {
|
|
t.Fatal("检查意外修改了账号")
|
|
}
|
|
})
|
|
}
|
|
}
|