48 lines
1.5 KiB
Go
48 lines
1.5 KiB
Go
package integration
|
|
|
|
import (
|
|
"net/http"
|
|
"net/http/httptest"
|
|
"strings"
|
|
"testing"
|
|
|
|
"github.com/gin-gonic/gin"
|
|
|
|
"cmautobuy/admin/config"
|
|
)
|
|
|
|
func TestRequireCatalogToken(t *testing.T) {
|
|
gin.SetMode(gin.TestMode)
|
|
const token = "0123456789abcdef0123456789abcdef"
|
|
for _, tc := range []struct {
|
|
name, header string
|
|
cfg config.CatalogIntegrationConfig
|
|
want int
|
|
}{
|
|
{"未启用", "", config.CatalogIntegrationConfig{}, http.StatusServiceUnavailable},
|
|
{"缺少", "", config.CatalogIntegrationConfig{Source: "script", Token: token}, http.StatusUnauthorized},
|
|
{"错误", "Bearer wrong", config.CatalogIntegrationConfig{Source: "script", Token: token}, http.StatusUnauthorized},
|
|
{"正确", "Bearer " + token, config.CatalogIntegrationConfig{Source: "script", Token: token}, http.StatusNoContent},
|
|
} {
|
|
t.Run(tc.name, func(t *testing.T) {
|
|
r := gin.New()
|
|
r.GET("/protected", RequireCatalogToken(tc.cfg), func(c *gin.Context) {
|
|
if integrationSource(c) != tc.cfg.Source {
|
|
t.Fatalf("source=%q", integrationSource(c))
|
|
}
|
|
c.Status(http.StatusNoContent)
|
|
})
|
|
req := httptest.NewRequest(http.MethodGet, "/protected", nil)
|
|
req.Header.Set("Authorization", tc.header)
|
|
resp := httptest.NewRecorder()
|
|
r.ServeHTTP(resp, req)
|
|
if resp.Code != tc.want {
|
|
t.Fatalf("status=%d body=%s", resp.Code, resp.Body.String())
|
|
}
|
|
if strings.Contains(resp.Body.String(), token) || strings.Contains(resp.Body.String(), "wrong") {
|
|
t.Fatal("响应泄露接口凭据")
|
|
}
|
|
})
|
|
}
|
|
}
|