feat: 建立商品目录接入基础 (#132)

2026-08-11 10:00:07 +08:00
parent b1a78f3e2f
commit 107ee5ce85
13 changed files with 631 additions and 7 deletions
@@ -0,0 +1,47 @@
+package integration
+
+import (
+	"net/http"
+	"net/http/httptest"
+	"strings"
+	"testing"
+
+	"github.com/gin-gonic/gin"
+
+	"cmautobuy/admin/config"
+)
+
+func TestRequireCatalogToken(t *testing.T) {
+	gin.SetMode(gin.TestMode)
+	const token = "0123456789abcdef0123456789abcdef"
+	for _, tc := range []struct {
+		name, header string
+		cfg          config.CatalogIntegrationConfig
+		want         int
+	}{
+		{"未启用", "", config.CatalogIntegrationConfig{}, http.StatusServiceUnavailable},
+		{"缺少", "", config.CatalogIntegrationConfig{Source: "script", Token: token}, http.StatusUnauthorized},
+		{"错误", "Bearer wrong", config.CatalogIntegrationConfig{Source: "script", Token: token}, http.StatusUnauthorized},
+		{"正确", "Bearer " + token, config.CatalogIntegrationConfig{Source: "script", Token: token}, http.StatusNoContent},
+	} {
+		t.Run(tc.name, func(t *testing.T) {
+			r := gin.New()
+			r.GET("/protected", RequireCatalogToken(tc.cfg), func(c *gin.Context) {
+				if integrationSource(c) != tc.cfg.Source {
+					t.Fatalf("source=%q", integrationSource(c))
+				}
+				c.Status(http.StatusNoContent)
+			})
+			req := httptest.NewRequest(http.MethodGet, "/protected", nil)
+			req.Header.Set("Authorization", tc.header)
+			resp := httptest.NewRecorder()
+			r.ServeHTTP(resp, req)
+			if resp.Code != tc.want {
+				t.Fatalf("status=%d body=%s", resp.Code, resp.Body.String())
+			}
+			if strings.Contains(resp.Body.String(), token) || strings.Contains(resp.Body.String(), "wrong") {
+				t.Fatal("响应泄露接口凭据")
+			}
+		})
+	}
+}