mirror of
https://github.com/Rain-kl/OpenFlare.git
synced 2026-09-29 22:06:38 +08:00
ryan
57 lines
1.9 KiB
Go
57 lines
1.9 KiB
Go
// Copyright 2026 Arctel.net
|
|
// SPDX-License-Identifier: Apache-2.0
|
|
|
|
package cache
|
|
|
|
import (
|
|
"Wavelet/plugins/domain/upload/shared"
|
|
"context"
|
|
"testing"
|
|
)
|
|
|
|
// configRow mirrors just enough of w_system_configs to rebuild it mid-test.
|
|
type configRow struct {
|
|
Key string `gorm:"primaryKey;size:64"`
|
|
Value string `gorm:"type:text;not null"`
|
|
Type string `gorm:"size:32;not null"`
|
|
}
|
|
|
|
// TableName returns the system config table.
|
|
func (configRow) TableName() string { return "w_system_configs" }
|
|
|
|
// TestWhitelistReadFailureIsNotCachedAsConfigured pins the defect where a failed
|
|
// read of the public access whitelist was discarded and the resulting restricted
|
|
// default was then cached as though the admin had configured it, narrowing access
|
|
// for the whole TTL with nothing to retry it sooner.
|
|
func TestWhitelistReadFailureIsNotCachedAsConfigured(t *testing.T) {
|
|
db, cleanup := shared.SetupTestEnv(t)
|
|
defer cleanup()
|
|
ResetAccessCaches()
|
|
t.Cleanup(ResetAccessCaches)
|
|
|
|
ctx := context.Background()
|
|
|
|
// Make the config unreadable, then take one sample through the failure path.
|
|
if err := db.Exec("DROP TABLE w_system_configs").Error; err != nil {
|
|
t.Fatalf("drop config table: %v", err)
|
|
}
|
|
if IsFilePublic(ctx, "document") {
|
|
t.Fatal(`document reported public while the whitelist cannot be read`)
|
|
}
|
|
|
|
// Restore a configured whitelist that includes document.
|
|
if err := db.AutoMigrate(&configRow{}); err != nil {
|
|
t.Fatalf("recreate config table: %v", err)
|
|
}
|
|
row := configRow{Key: "file_access_whitelist", Value: `["avatar","document"]`, Type: "system"}
|
|
if err := db.Create(&row).Error; err != nil {
|
|
t.Fatalf("seed whitelist: %v", err)
|
|
}
|
|
|
|
// A failed first read must not have been cached as a real answer, so this call
|
|
// has to re-read and see the configured list.
|
|
if !IsFilePublic(ctx, "document") {
|
|
t.Error("whitelist stayed pinned to the default after a read failure; the failed lookup must be retried")
|
|
}
|
|
}
|