mirror of
https://github.com/Rain-kl/OpenFlare.git
synced 2026-10-01 22:46:38 +08:00
ryan
2f60329886
代码质量全量清理，零行为变化：golangci 扩展集 13 类 linter（gosec/modernize/perfsprint/canonicalheader/usestdlibvars/wastedassign/intrange/errorlint/forcetypeassert/recvcheck/exhaustive/unparam）全量修复，测试代码质量（testifylint/thelper/usetesting）25→0，frpc 进程生命周期真 bug（进程组击杀）、全仓 go test -race 6 类数据竞争（含 1 个生产竞争）、SPDX license 头补齐 131 文件、前端测试套件 next-intl 迁移后 44 失败→全绿、过期 swagger 文档重新生成、pnpm-workspace 构建审批。 Experiments: #2-#17, #18, #20, #21, #23 Metric: total_issues 108 → 8 (-92.6%)
92 lines
2.7 KiB
Go
92 lines
2.7 KiB
Go
// Copyright 2026 Arctel.net
|
|
// SPDX-License-Identifier: Apache-2.0
|
|
|
|
package tasks
|
|
|
|
import (
|
|
"context"
|
|
"testing"
|
|
"time"
|
|
|
|
"github.com/Rain-kl/Wavelet/internal/apps/openflare/tls"
|
|
"github.com/Rain-kl/Wavelet/internal/infra/config"
|
|
db "github.com/Rain-kl/Wavelet/internal/infra/persistence"
|
|
"github.com/Rain-kl/Wavelet/internal/infra/task"
|
|
"github.com/Rain-kl/Wavelet/internal/model"
|
|
"github.com/Rain-kl/Wavelet/internal/repository"
|
|
"github.com/Rain-kl/Wavelet/internal/testhelper"
|
|
"github.com/hibiken/asynq"
|
|
"github.com/stretchr/testify/assert"
|
|
"github.com/stretchr/testify/require"
|
|
)
|
|
|
|
func setupSSLRenewTestDB(t *testing.T) func() {
|
|
t.Helper()
|
|
|
|
task.RegisterTaskMeta(tls.SSLSingleRenewMeta)
|
|
|
|
_, mr, cleanup := testhelper.SetupTestEnvironment(t)
|
|
require.NoError(t, db.DB(nil).AutoMigrate(&model.TLSCertificate{}, &model.TaskExecution{}))
|
|
|
|
// task 包 init() 会按配置创建指向真实 Redis 的客户端；测试显式改用
|
|
// miniredis（与 executor_test 一致），避免依赖本地 redis 实例。
|
|
oldClient := task.AsynqClient
|
|
task.AsynqClient = asynq.NewClient(asynq.RedisClientOpt{Addr: mr.Addr()})
|
|
t.Cleanup(func() {
|
|
_ = task.AsynqClient.Close()
|
|
task.AsynqClient = oldClient
|
|
})
|
|
|
|
oldSecret := config.Config.App.SessionSecret
|
|
config.Config.App.SessionSecret = "test_session_secret_for_ssl_renew"
|
|
return func() {
|
|
config.Config.App.SessionSecret = oldSecret
|
|
cleanup()
|
|
}
|
|
}
|
|
|
|
func TestRunSSLRenewJobTriggersDueCertificates(t *testing.T) {
|
|
cleanup := setupSSLRenewTestDB(t)
|
|
defer cleanup()
|
|
ctx := context.Background()
|
|
|
|
restore := tls.SetObtainCertificateFuncForTest(func(ctx context.Context, cert *model.TLSCertificate) error {
|
|
return nil
|
|
})
|
|
defer restore()
|
|
|
|
now := time.Now().UTC()
|
|
due := &model.TLSCertificate{
|
|
Name: "due-cert",
|
|
Provider: "acme",
|
|
AutoRenew: true,
|
|
ApplyStatus: "ready",
|
|
PrimaryDomain: "due.example.com",
|
|
CertPEM: " ",
|
|
KeyPEM: " ",
|
|
NotAfter: now.Add(2 * 24 * time.Hour),
|
|
}
|
|
fresh := &model.TLSCertificate{
|
|
Name: "fresh-cert",
|
|
Provider: "acme",
|
|
AutoRenew: true,
|
|
ApplyStatus: "ready",
|
|
PrimaryDomain: "fresh.example.com",
|
|
CertPEM: " ",
|
|
KeyPEM: " ",
|
|
NotAfter: now.Add(30 * 24 * time.Hour),
|
|
}
|
|
require.NoError(t, repository.CreateTLSCertificateRecord(ctx, due))
|
|
require.NoError(t, repository.CreateTLSCertificateRecord(ctx, fresh))
|
|
|
|
require.NoError(t, RunSSLRenewJob(ctx))
|
|
|
|
renewed, err := repository.GetTLSCertificateByID(ctx, due.ID)
|
|
require.NoError(t, err)
|
|
assert.Equal(t, "applying", renewed.ApplyStatus)
|
|
|
|
unchanged, err := repository.GetTLSCertificateByID(ctx, fresh.ID)
|
|
require.NoError(t, err)
|
|
assert.Equal(t, "ready", unchanged.ApplyStatus)
|
|
}
|