All checks were successful
构建并部署到测试环境(无 SSH) / build-and-deploy (push) Successful in 8m38s
84 lines
3.2 KiB
Go
84 lines
3.2 KiB
Go
package customer_binding
|
|
|
|
import (
|
|
"context"
|
|
"database/sql"
|
|
"database/sql/driver"
|
|
"io"
|
|
"testing"
|
|
|
|
"gorm.io/driver/postgres"
|
|
"gorm.io/gorm"
|
|
|
|
accessauditapp "github.com/break/junhong_cmp_fiber/internal/application/accessaudit"
|
|
"github.com/break/junhong_cmp_fiber/internal/model"
|
|
"github.com/break/junhong_cmp_fiber/pkg/constants"
|
|
)
|
|
|
|
func init() { sql.Register("customer_binding_audit_test", customerAuditDriver{}) }
|
|
|
|
type customerAuditDriver struct{}
|
|
|
|
func (customerAuditDriver) Open(string) (driver.Conn, error) { return customerAuditConn{}, nil }
|
|
|
|
type customerAuditConn struct{}
|
|
|
|
func (customerAuditConn) Prepare(string) (driver.Stmt, error) { return nil, driver.ErrSkip }
|
|
func (customerAuditConn) Close() error { return nil }
|
|
func (customerAuditConn) Begin() (driver.Tx, error) { return nil, driver.ErrSkip }
|
|
func (customerAuditConn) QueryContext(context.Context, string, []driver.NamedValue) (driver.Rows, error) {
|
|
return &customerAuditRows{}, nil
|
|
}
|
|
|
|
type customerAuditRows struct{ sent bool }
|
|
|
|
func (*customerAuditRows) Columns() []string { return []string{"id", "nickname"} }
|
|
func (r *customerAuditRows) Close() error { return nil }
|
|
func (r *customerAuditRows) Next(dest []driver.Value) error {
|
|
if r.sent {
|
|
return io.EOF
|
|
}
|
|
r.sent = true
|
|
dest[0], dest[1] = int64(7), "客户"
|
|
return nil
|
|
}
|
|
|
|
type captureAuditWriter struct{ change accessauditapp.ChangeAudit }
|
|
|
|
func (w *captureAuditWriter) WriteAccessChange(_ context.Context, _ *gorm.DB, change accessauditapp.ChangeAudit) error {
|
|
w.change = change
|
|
return nil
|
|
}
|
|
|
|
func TestWriteBindingAuditOmitsInternalAssets(t *testing.T) {
|
|
db, err := sql.Open("customer_binding_audit_test", "")
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
defer db.Close()
|
|
tx, err := gorm.Open(postgres.New(postgres.Config{Conn: db}), &gorm.Config{})
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
writer := &captureAuditWriter{}
|
|
service := &Service{accessAudit: writer}
|
|
personalDevices := []accessauditapp.PersonalCustomerDeviceChange{{Binding: &model.PersonalCustomerDevice{Model: gorm.Model{ID: 2}, CustomerID: 7, VirtualNo: "DEVICE-1"}}}
|
|
personalICCIDs := []accessauditapp.PersonalCustomerICCIDChange{{Binding: &model.PersonalCustomerICCID{Model: gorm.Model{ID: 3}, CustomerID: 7, ICCID: "ICCID-1"}}}
|
|
cards := []accessauditapp.IotCardChange{{Card: &model.IotCard{Model: gorm.Model{ID: 9}}}}
|
|
devices := []accessauditapp.DeviceChange{{Device: &model.Device{Model: gorm.Model{ID: 10}}}}
|
|
|
|
if err := service.writeBindingAudit(context.Background(), tx, constants.AuditActionPersonalCustomerAssetBound, "绑定个人客户资产", 7, personalDevices, personalICCIDs, cards, devices); err != nil {
|
|
t.Fatalf("写入绑定审计失败: %v", err)
|
|
}
|
|
change := writer.change
|
|
if len(change.Cards) != 0 || len(change.Devices) != 0 {
|
|
t.Fatalf("绑定审计泄露内部资源: Cards=%d Devices=%d", len(change.Cards), len(change.Devices))
|
|
}
|
|
if change.PersonalCustomer == nil || change.PersonalCustomer.ID != 7 || len(change.PersonalDevices) != 1 || len(change.PersonalICCIDs) != 1 {
|
|
t.Fatalf("绑定审计未保留个人客户字段: %#v", change)
|
|
}
|
|
if change.SubjectData["asset_type"] != constants.AuditResourceIotCard || change.SubjectData["asset_id"] != uint(9) {
|
|
t.Fatalf("绑定审计未保留主体摘要: %#v", change.SubjectData)
|
|
}
|
|
}
|