mirror of
https://github.com/Rain-kl/OpenFlare.git
synced 2026-09-29 14:06:36 +08:00
ryan
943818f7d4
将 OpenFlare 与平台业务的数据访问从 model 与 apps 直连迁入 repository， model 仅保留实体与无 IO 规则；补充 code-check 架构守卫与开发规范。
112 lines
2.9 KiB
Go
112 lines
2.9 KiB
Go
// Copyright 2026 Arctel.net
|
|
// SPDX-License-Identifier: Apache-2.0
|
|
|
|
package flared
|
|
|
|
import (
|
|
"context"
|
|
"net/http"
|
|
"net/http/httptest"
|
|
"testing"
|
|
|
|
"github.com/Rain-kl/Wavelet/internal/repository"
|
|
|
|
db "github.com/Rain-kl/Wavelet/internal/infra/persistence"
|
|
"github.com/Rain-kl/Wavelet/internal/model"
|
|
"github.com/Rain-kl/Wavelet/internal/shared/response"
|
|
"github.com/gin-gonic/gin"
|
|
"github.com/glebarez/sqlite"
|
|
"github.com/stretchr/testify/assert"
|
|
"github.com/stretchr/testify/require"
|
|
"gorm.io/gorm"
|
|
)
|
|
|
|
func setupFlaredMiddlewareTestDB(t *testing.T) func() {
|
|
t.Helper()
|
|
|
|
sqliteDB, err := gorm.Open(sqlite.Open(":memory:"), &gorm.Config{
|
|
DisableForeignKeyConstraintWhenMigrating: true,
|
|
})
|
|
require.NoError(t, err)
|
|
require.NoError(t, sqliteDB.AutoMigrate(&model.OpenFlareNode{}))
|
|
db.SetDB(sqliteDB)
|
|
|
|
return func() {
|
|
db.SetDB(nil)
|
|
}
|
|
}
|
|
|
|
func seedFlaredNode(t *testing.T, nodeType, accessToken string) *model.OpenFlareNode {
|
|
t.Helper()
|
|
ctx := context.Background()
|
|
node := &model.OpenFlareNode{
|
|
NodeID: "flared-test-node",
|
|
Name: "flared-test",
|
|
Status: "pending",
|
|
NodeType: nodeType,
|
|
AccessToken: accessToken,
|
|
}
|
|
require.NoError(t, repository.CreateOpenFlareNode(ctx, node))
|
|
return node
|
|
}
|
|
|
|
func TestTunnelAuthMissingToken(t *testing.T) {
|
|
cleanup := setupFlaredMiddlewareTestDB(t)
|
|
defer cleanup()
|
|
|
|
gin.SetMode(gin.TestMode)
|
|
engine := gin.New()
|
|
engine.Use(response.ErrorHandlerMiddleware())
|
|
engine.GET("/flared/test", TunnelAuth(), func(c *gin.Context) {
|
|
c.Status(http.StatusOK)
|
|
})
|
|
|
|
req := httptest.NewRequest(http.MethodGet, "/flared/test", nil)
|
|
rec := httptest.NewRecorder()
|
|
engine.ServeHTTP(rec, req)
|
|
|
|
assert.Equal(t, http.StatusUnauthorized, rec.Code)
|
|
}
|
|
|
|
func TestTunnelAuthRejectsWrongNodeType(t *testing.T) {
|
|
cleanup := setupFlaredMiddlewareTestDB(t)
|
|
defer cleanup()
|
|
seedFlaredNode(t, "edge_node", "edge-token-flared")
|
|
|
|
gin.SetMode(gin.TestMode)
|
|
engine := gin.New()
|
|
engine.Use(response.ErrorHandlerMiddleware())
|
|
engine.GET("/flared/test", TunnelAuth(), func(c *gin.Context) {
|
|
c.Status(http.StatusOK)
|
|
})
|
|
|
|
req := httptest.NewRequest(http.MethodGet, "/flared/test", nil)
|
|
req.Header.Set("X-Tunnel-Token", "edge-token-flared")
|
|
rec := httptest.NewRecorder()
|
|
engine.ServeHTTP(rec, req)
|
|
|
|
assert.Equal(t, http.StatusForbidden, rec.Code)
|
|
}
|
|
|
|
func TestTunnelAuthAcceptsTunnelClient(t *testing.T) {
|
|
cleanup := setupFlaredMiddlewareTestDB(t)
|
|
defer cleanup()
|
|
node := seedFlaredNode(t, "tunnel_client", "tunnel-token-valid")
|
|
|
|
gin.SetMode(gin.TestMode)
|
|
engine := gin.New()
|
|
engine.GET("/flared/test", TunnelAuth(), func(c *gin.Context) {
|
|
authNode, ok := c.Get(ctxFlaredNodeKey)
|
|
require.True(t, ok)
|
|
assert.Equal(t, node.NodeID, authNode.(*model.OpenFlareNode).NodeID)
|
|
c.Status(http.StatusOK)
|
|
})
|
|
|
|
req := httptest.NewRequest(http.MethodGet, "/flared/test", nil)
|
|
req.Header.Set("X-Tunnel-Token", "tunnel-token-valid")
|
|
rec := httptest.NewRecorder()
|
|
engine.ServeHTTP(rec, req)
|
|
|
|
assert.Equal(t, http.StatusOK, rec.Code)
|
|
}
|