70 lines
2.4 KiB
Go
70 lines
2.4 KiB
Go
package openbao_test
|
|
|
|
import (
|
|
"encoding/json"
|
|
"net/http"
|
|
"net/http/httptest"
|
|
"testing"
|
|
|
|
"git.ddupan.top/panxiao81/ayatori/internal/database/adapter/openbao"
|
|
)
|
|
|
|
func credentialVersionMetadata(version int) map[string]any {
|
|
return map[string]any{kvVersionKey: version}
|
|
}
|
|
|
|
func TestConfirmedCredentialRead(t *testing.T) {
|
|
for _, test := range []struct {
|
|
name string
|
|
version int64
|
|
status int
|
|
meta map[string]any
|
|
invalid bool
|
|
want error
|
|
}{
|
|
{name: "已确认", version: 1, status: 200, meta: credentialVersionMetadata(1)},
|
|
{name: "未确认禁止读取", version: 0, want: openbao.ErrConflict},
|
|
{name: "版本已变化", version: 1, status: 200, meta: credentialVersionMetadata(2), want: openbao.ErrConflict},
|
|
{name: "版本为零", version: 1, status: 200, meta: credentialVersionMetadata(0), want: openbao.ErrConflict},
|
|
{name: "响应无法解析", version: 1, status: 200, want: openbao.ErrUnavailable},
|
|
{name: "内容损坏", version: 1, status: 200, meta: credentialVersionMetadata(1), invalid: true, want: openbao.ErrConflict},
|
|
{name: "凭据丢失", version: 1, status: 404, want: openbao.ErrConflict},
|
|
{name: "读取被拒绝", version: 1, status: 403, want: openbao.ErrUnavailable},
|
|
{name: "后端不可用", version: 1, status: 503, want: openbao.ErrUnavailable},
|
|
} {
|
|
t.Run(test.name, func(t *testing.T) {
|
|
credential := fixtureCredential(t)
|
|
server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
|
|
if test.version == 0 {
|
|
t.Error("没有持久化确认记录不能读取已有值")
|
|
}
|
|
if r.Method != http.MethodGet || r.URL.RawQuery != "" {
|
|
t.Error("只允许读取最新值，不能写入或回退历史版本")
|
|
}
|
|
w.WriteHeader(test.status)
|
|
if test.status != http.StatusOK {
|
|
return
|
|
}
|
|
data := credential.SecretData()
|
|
if test.invalid {
|
|
delete(data, "password")
|
|
}
|
|
if err := json.NewEncoder(w).Encode(map[string]any{
|
|
kvDataKey: map[string]any{kvDataKey: data, "metadata": test.meta},
|
|
}); err != nil {
|
|
t.Error("测试响应编码失败")
|
|
}
|
|
}))
|
|
defer server.Close()
|
|
store := fixtureStore(t, fixtureClient(t, server.URL))
|
|
observed, err := store.ReadConfirmed(t.Context(), credentialPath, test.version)
|
|
if err != test.want {
|
|
t.Fatalf("期望 %v，得到 %v", test.want, err)
|
|
}
|
|
if err != nil && observed.Validate() == nil {
|
|
t.Fatal("失败时不能返回可用凭据")
|
|
}
|
|
})
|
|
}
|
|
}
|