Blizzard
92329ddce2
Checks / verify (push) Failing after 9m52s
统一单入口 Go 工程与前端依赖目录，增加后台供应商配置、候选审核、计划预算、成交冲正、持仓复盘和站内通知。接入策略版本、Python 回测、可配置 A 股公开行情及 zap 文件轮转日志，补充迁移、契约与验证。
52 lines
1.9 KiB
Go
52 lines
1.9 KiB
Go
package handler
|
|
|
|
import (
|
|
"context"
|
|
"go.uber.org/zap"
|
|
"net/http"
|
|
"net/http/httptest"
|
|
"strings"
|
|
"testing"
|
|
|
|
"git.sundynix.cn/Blizzard/Veyra/internal/service"
|
|
)
|
|
|
|
func TestAuthenticationAndCSRFBoundaries(t *testing.T) {
|
|
auth, err := service.NewAuthService(nil)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
probe := func(context.Context) error { return nil }
|
|
router := NewRouter(service.NewHealthService(probe, probe), zap.NewNop(), IdentityOptions{Auth: auth, DevelopmentLogin: true})
|
|
for _, tc := range []struct {
|
|
method, path, body, origin string
|
|
status int
|
|
}{
|
|
{http.MethodGet, "/api/admin/v1/users", "", "", 401},
|
|
{http.MethodGet, "/api/v1/accounts", "", "", 401},
|
|
{http.MethodPost, "/api/admin/v1/auth/login", `{"login_name":"admin","password":"test-password"}`, "http://evil.example", 403},
|
|
{http.MethodPost, "/api/admin/v1/auth/login", `{"login_name":"admin","password":"test-password"}`, "", 403},
|
|
{http.MethodPost, "/api/admin/v1/auth/login", `{"login_name":"admin","password":"test-password","role":"ADMIN"}`, "http://example.com", 422},
|
|
{http.MethodPost, "/api/v1/auth/login", `{} {}`, "", 422},
|
|
} {
|
|
req := httptest.NewRequest(tc.method, "http://example.com"+tc.path, strings.NewReader(tc.body))
|
|
req.Header.Set("Content-Type", "application/json")
|
|
req.Header.Set("Origin", tc.origin)
|
|
rec := httptest.NewRecorder()
|
|
router.ServeHTTP(rec, req)
|
|
if rec.Code != tc.status {
|
|
t.Fatalf("%s %s got %d want %d", tc.method, tc.path, rec.Code, tc.status)
|
|
}
|
|
}
|
|
}
|
|
|
|
func TestDevelopmentLoginDisabledByDefault(t *testing.T) {
|
|
probe := func(context.Context) error { return nil }
|
|
router := NewRouter(service.NewHealthService(probe, probe), zap.NewNop(), IdentityOptions{})
|
|
rec := httptest.NewRecorder()
|
|
router.ServeHTTP(rec, httptest.NewRequest(http.MethodPost, "/api/v1/auth/login", strings.NewReader(`{}`)))
|
|
if rec.Code != http.StatusServiceUnavailable {
|
|
t.Fatal("development login open outside explicitly enabled environment")
|
|
}
|
|
}
|