refactor

openflare-server/internal/apps/admin/push/custom_events/admin_login_test.go

@@ -13,6 +13,7 @@ import (
 	"github.com/Rain-kl/Wavelet/internal/apps/admin/push"
 	"github.com/Rain-kl/Wavelet/internal/listener"
 	"github.com/Rain-kl/Wavelet/internal/model"
+	"github.com/Rain-kl/Wavelet/internal/repository"
 	"github.com/Rain-kl/Wavelet/internal/task"
 	"github.com/Rain-kl/Wavelet/internal/testhelper"
 	"github.com/hibiken/asynq"
@@ -166,6 +167,7 @@ func TestAdminLoginPushIntegration(t *testing.T) {
 		require.NoError(t, dbConn.Where("event_key = ?", AdminLogin.Key).First(&event).Error)
 		event.Enabled = false
 		require.NoError(t, dbConn.Save(&event).Error)
+		repository.DeleteActivePushEventCache(context.Background(), AdminLogin.Key)
 
 		listener.EmitAdminLoggedIn(context.Background(), adminUser, "10.0.0.1")
 		waitForAsyncTrigger(t)

openflare-server/internal/apps/admin/push/push_test.go

@@ -25,7 +25,9 @@ import (
 	"github.com/stretchr/testify/require"
 	"gorm.io/gorm"
 
+	"github.com/Rain-kl/Wavelet/internal/apps/oauth"
 	"github.com/Rain-kl/Wavelet/internal/common/response"
+	"github.com/Rain-kl/Wavelet/internal/repository"
 )
 
 var adminLoginEvent = EventMetadata{
@@ -191,6 +193,7 @@ func TestEventTrigger(t *testing.T) {
 		event.Targets = []string{"admin_user"}
 		err = dbConn.Save(&event).Error
 		require.NoError(t, err)
+		repository.DeleteActivePushEventCache(context.Background(), "admin_login")
 
 		// Trigger
 		body := map[string]any{
@@ -249,6 +252,7 @@ func TestEventTrigger(t *testing.T) {
 		event.Targets = []string{"user.username"} // 动态目标
 		err = dbConn.Save(&event).Error
 		require.NoError(t, err)
+		repository.DeleteActivePushEventCache(context.Background(), "admin_login")
 
 		// Trigger with empty body (simulates cron scheduler triggering)
 		DefaultTrigger.Trigger(context.Background(), adminLoginEvent, nil)
@@ -372,6 +376,7 @@ func TestPushRouters(t *testing.T) {
 		// 2. 为该事件关联渠道后，再切换开启，应当成功
 		event.Channels = []string{"email"}
 		dbConn.Save(&event)
+		repository.DeleteActivePushEventCache(context.Background(), event.EventKey)
 
 		req2, _ := http.NewRequest("POST", "/api/v1/admin/push/events/"+strconv.FormatUint(event.ID, 10)+"/toggle", nil)
 		w2 := httptest.NewRecorder()

openflare-server/internal/apps/cap/routers_test.go

@@ -37,6 +37,15 @@ func TestCapEndpointsAndMiddleware(t *testing.T) {
 		c.JSON(http.StatusOK, response.OK("login success"))
 	})
 
+	// Ensure CAPTCHA is disabled initially for step 2
+	if err := sqliteDB.Model(&model.SystemConfig{}).Where("key = ?", model.ConfigKeyCapLoginEnabled).Update("value", "false").Error; err != nil {
+		t.Fatalf("failed to disable cap_login_enabled in DB: %v", err)
+	}
+	if err := repository.InvalidateSystemConfigCache(context.Background(), model.ConfigKeyCapLoginEnabled); err != nil {
+		t.Fatalf("InvalidateSystemConfigCache() error = %v", err)
+	}
+	InvalidateRuntimeSettings()
+
 	// 1. Test challenge generation
 	w := httptest.NewRecorder()
 	req, _ := http.NewRequest("POST", "/api/cap/challenge", nil)

openflare-server/internal/apps/openflare/agent/access_log_region.go

@@ -8,7 +8,7 @@ import (
 	"net"
 	"strings"
 
-	pkggeoip "github.com/rain-kl/openflare/pkg/geoip"
+	pkggeoip "github.com/Rain-kl/Wavelet/pkg/geoip"
 )
 
 var accessLogGeoProviderFactory = func() (pkggeoip.GeoIPService, error) {

openflare-server/internal/apps/openflare/agent/config.go

@@ -11,7 +11,7 @@ import (
 	"time"
 
 	"github.com/Rain-kl/Wavelet/internal/db"
-	openrestyrender "github.com/rain-kl/openflare/pkg/render/openresty"
+	openrestyrender "github.com/Rain-kl/Wavelet/pkg/render/openresty"
 	"gorm.io/gorm"
 )
 

openflare-server/internal/apps/openflare/agent/config_test.go

@@ -6,7 +6,7 @@ package agent
 import (
 	"testing"
 
-	openrestyrender "github.com/rain-kl/openflare/pkg/render/openresty"
+	openrestyrender "github.com/Rain-kl/Wavelet/pkg/render/openresty"
 )
 
 func TestIsRuntimeGeneratedSupportFile(t *testing.T) {

openflare-server/internal/apps/openflare/agent/helpers_test.go

@@ -8,7 +8,7 @@ import (
 	"testing"
 
 	"github.com/Rain-kl/Wavelet/internal/model"
-	pkggeoip "github.com/rain-kl/openflare/pkg/geoip"
+	pkggeoip "github.com/Rain-kl/Wavelet/pkg/geoip"
 )
 
 type fakeGeoIPProvider struct {

openflare-server/internal/apps/openflare/config_version/renderer.go

@@ -4,7 +4,7 @@
 package config_version
 
 import (
-	openrestyrender "github.com/rain-kl/openflare/pkg/render/openresty"
+	openrestyrender "github.com/Rain-kl/Wavelet/pkg/render/openresty"
 )
 
 // SupportFile is a rendered configuration support artifact.

openflare-server/internal/apps/openflare/config_version/snapshot.go

@@ -13,7 +13,7 @@ import (
 
 	"github.com/Rain-kl/Wavelet/internal/apps/openflare/waf"
 	"github.com/Rain-kl/Wavelet/internal/model"
-	openrestyrender "github.com/rain-kl/openflare/pkg/render/openresty"
+	openrestyrender "github.com/Rain-kl/Wavelet/pkg/render/openresty"
 )
 
 type snapshotRoute struct {

openflare-server/internal/apps/openflare/flared/middleware_test.go

@@ -9,6 +9,7 @@ import (
 	"net/http/httptest"
 	"testing"
 
+	"github.com/Rain-kl/Wavelet/internal/common/response"
 	"github.com/Rain-kl/Wavelet/internal/db"
 	"github.com/Rain-kl/Wavelet/internal/model"
 	"github.com/gin-gonic/gin"
@@ -53,6 +54,7 @@ func TestTunnelAuthMissingToken(t *testing.T) {
 
 	gin.SetMode(gin.TestMode)
 	engine := gin.New()
+	engine.Use(response.ErrorHandlerMiddleware())
 	engine.GET("/flared/test", TunnelAuth(), func(c *gin.Context) {
 		c.Status(http.StatusOK)
 	})
@@ -71,6 +73,7 @@ func TestTunnelAuthRejectsWrongNodeType(t *testing.T) {
 
 	gin.SetMode(gin.TestMode)
 	engine := gin.New()
+	engine.Use(response.ErrorHandlerMiddleware())
 	engine.GET("/flared/test", TunnelAuth(), func(c *gin.Context) {
 		c.Status(http.StatusOK)
 	})

openflare-server/internal/apps/openflare/geoip/lookup.go

@@ -9,7 +9,7 @@ import (
 	"net"
 	"strings"
 
-	pkggeoip "github.com/rain-kl/openflare/pkg/geoip"
+	pkggeoip "github.com/Rain-kl/Wavelet/pkg/geoip"
 )
 
 // LookupView is the legacy OpenFlare GeoIP lookup response shape.

openflare-server/internal/apps/openflare/geoip/lookup_test.go

@@ -7,7 +7,7 @@ import (
 	"net"
 	"testing"
 
-	pkggeoip "github.com/rain-kl/openflare/pkg/geoip"
+	pkggeoip "github.com/Rain-kl/Wavelet/pkg/geoip"
 )
 
 type fakeLookupProvider struct{}

openflare-server/internal/apps/openflare/relay/middleware_test.go

@@ -9,6 +9,7 @@ import (
 	"net/http/httptest"
 	"testing"
 
+	"github.com/Rain-kl/Wavelet/internal/common/response"
 	"github.com/Rain-kl/Wavelet/internal/db"
 	"github.com/Rain-kl/Wavelet/internal/model"
 	"github.com/gin-gonic/gin"
@@ -53,6 +54,7 @@ func TestRelayAuthMissingToken(t *testing.T) {
 
 	gin.SetMode(gin.TestMode)
 	engine := gin.New()
+	engine.Use(response.ErrorHandlerMiddleware())
 	engine.GET("/relay/test", RelayAuth(), func(c *gin.Context) {
 		c.Status(http.StatusOK)
 	})
@@ -71,6 +73,7 @@ func TestRelayAuthRejectsWrongNodeType(t *testing.T) {
 
 	gin.SetMode(gin.TestMode)
 	engine := gin.New()
+	engine.Use(response.ErrorHandlerMiddleware())
 	engine.GET("/relay/test", RelayAuth(), func(c *gin.Context) {
 		c.Status(http.StatusOK)
 	})

openflare-server/internal/apps/user/routers_test.go

@@ -139,6 +139,11 @@ func TestRegisterCreatesAuthenticatedEncryptedUser(t *testing.T) {
 	dbConn, _, cleanup := testhelper.SetupTestEnvironment(t)
 	defer cleanup()
 
+	// Enable registration for this test
+	dbConn.Model(&model.SystemConfig{}).Where("key = ?", model.ConfigKeyRegistrationEnabled).Update("value", "true")
+	dbConn.Model(&model.SystemConfig{}).Where("key = ?", model.ConfigKeyPasswordRegisterEnabled).Update("value", "true")
+	_ = repository.InvalidateAllSystemConfigCaches(context.Background())
+
 	router := setupUserTestRouter(t)
 	payload := registerRequest{
 		Username: "newuser",