fix: 修复 WAF 规则组 PoW 策略发布后边缘不生效

internal/apps/openflare/config_version/logics_test.go

@@ -8,6 +8,7 @@ import (
 	"encoding/json"
 	"testing"
 
+	"github.com/Rain-kl/Wavelet/internal/apps/openflare/waf"
 	"github.com/Rain-kl/Wavelet/internal/db"
 	"github.com/Rain-kl/Wavelet/internal/model"
 	"github.com/glebarez/sqlite"
@@ -81,3 +82,63 @@ func TestPublishConfigVersionCreatesVersion(t *testing.T) {
 	require.NoError(t, err)
 	assert.NotEqual(t, version.ID, forced.ID)
 }
+
+func TestBuildSnapshotWAFDocumentUsesNormalizedSiteNames(t *testing.T) {
+	cleanup := setupConfigVersionTestDB(t)
+	defer cleanup()
+	ctx := context.Background()
+
+	route := &model.ProxyRoute{
+		Domain:    "Example.COM",
+		Domains:   `["example.com","www.example.com"]`,
+		OriginURL: "http://origin.example.com:8080",
+		Upstreams: `["http://origin.example.com:8080"]`,
+		Enabled:   true,
+	}
+	require.NoError(t, model.CreateProxyRouteRecord(ctx, route))
+
+	require.NoError(t, waf.EnsureDefaultRuleGroup(ctx))
+	globalGroup, err := model.GetGlobalOpenFlareWAFRuleGroup(ctx)
+	require.NoError(t, err)
+
+	customGroup := &model.OpenFlareWAFRuleGroup{
+		Name:       "pow-group",
+		Enabled:    true,
+		PoWEnabled: true,
+		PoWConfig:  `{"difficulty":4,"algorithm":"fast","session_ttl":600,"challenge_ttl":300}`,
+	}
+	require.NoError(t, model.CreateOpenFlareWAFRuleGroup(ctx, customGroup))
+	require.NoError(t, model.ReplaceOpenFlareWAFRuleGroupBindings(ctx, customGroup.ID, []uint{route.ID}))
+
+	bundle, err := buildCurrentConfigBundle(ctx, true)
+	require.NoError(t, err)
+	require.Len(t, bundle.SnapshotRoutes, 1)
+	assert.Equal(t, "example.com", bundle.SnapshotRoutes[0].SiteName)
+
+	require.NotEmpty(t, bundle.WAFSnapshot.Bindings)
+	found := false
+	for _, binding := range bundle.WAFSnapshot.Bindings {
+		if binding.RouteID != route.ID {
+			continue
+		}
+		found = true
+		assert.Equal(t, "example.com", binding.SiteName)
+		assert.Contains(t, binding.RuleGroupIDs, customGroup.ID)
+	}
+	assert.True(t, found, "expected WAF binding for enabled route")
+
+	var wafRuntime struct {
+		SiteRuleGroups map[string][]uint `json:"site_rule_groups"`
+	}
+	for _, file := range bundle.SupportFiles {
+		if file.Path != "waf_config.json" {
+			continue
+		}
+		require.NoError(t, json.Unmarshal([]byte(file.Content), &wafRuntime))
+	}
+	require.Contains(t, wafRuntime.SiteRuleGroups, "example.com")
+	require.Contains(t, wafRuntime.SiteRuleGroups["example.com"], customGroup.ID)
+	require.Contains(t, wafRuntime.SiteRuleGroups["example.com"], globalGroup.ID)
+	assert.Contains(t, bundle.RouteConfig, `set $openflare_waf_site "example.com"`)
+	assert.Contains(t, bundle.RouteConfig, `require("pow.runtime").check()`)
+}