* fix(ops): 修复运维监控系统的关键安全和稳定性问题
## 修复内容
### P0 严重问题
1. **DNS Rebinding防护** (ops_alert_service.go)
- 实现IP钉住机制防止验证后的DNS rebinding攻击
- 自定义Transport.DialContext强制只允许拨号到验证过的公网IP
- 扩展IP黑名单,包括云metadata地址(169.254.169.254)
- 添加完整的单元测试覆盖
2. **OpsAlertService生命周期管理** (wire.go)
- 在ProvideOpsMetricsCollector中添加opsAlertService.Start()调用
- 确保stopCtx正确初始化,避免nil指针问题
- 实现防御式启动,保证服务启动顺序
3. **数据库查询排序** (ops_repo.go)
- 在ListRecentSystemMetrics中添加显式ORDER BY updated_at DESC, id DESC
- 在GetLatestSystemMetric中添加排序保证
- 避免数据库返回顺序不确定导致告警误判
### P1 重要问题
4. **并发安全** (ops_metrics_collector.go)
- 为lastGCPauseTotal字段添加sync.Mutex保护
- 防止数据竞争
5. **Goroutine泄漏** (ops_error_logger.go)
- 实现worker pool模式限制并发goroutine数量
- 使用256容量缓冲队列和10个固定worker
- 非阻塞投递,队列满时丢弃任务
6. **生命周期控制** (ops_alert_service.go)
- 添加Start/Stop方法实现优雅关闭
- 使用context控制goroutine生命周期
- 实现WaitGroup等待后台任务完成
7. **Webhook URL验证** (ops_alert_service.go)
- 防止SSRF攻击:验证scheme、禁止内网IP
- DNS解析验证,拒绝解析到私有IP的域名
- 添加8个单元测试覆盖各种攻击场景
8. **资源泄漏** (ops_repo.go)
- 修复多处defer rows.Close()问题
- 简化冗余的defer func()包装
9. **HTTP超时控制** (ops_alert_service.go)
- 创建带10秒超时的http.Client
- 添加buildWebhookHTTPClient辅助函数
- 防止HTTP请求无限期挂起
10. **数据库查询优化** (ops_repo.go)
- 将GetWindowStats的4次独立查询合并为1次CTE查询
- 减少网络往返和表扫描次数
- 显著提升性能
11. **重试机制** (ops_alert_service.go)
- 实现邮件发送重试:最多3次,指数退避(1s/2s/4s)
- 添加webhook备用通道
- 实现完整的错误处理和日志记录
12. **魔法数字** (ops_repo.go, ops_metrics_collector.go)
- 提取硬编码数字为有意义的常量
- 提高代码可读性和可维护性
## 测试验证
- ✅ go test ./internal/service -tags opsalert_unit 通过
- ✅ 所有webhook验证测试通过
- ✅ 重试机制测试通过
## 影响范围
- 运维监控系统安全性显著提升
- 系统稳定性和性能优化
- 无破坏性变更,向后兼容
* feat(ops): 运维监控系统V2 - 完整实现
## 核心功能
- 运维监控仪表盘V2(实时监控、历史趋势、告警管理)
- WebSocket实时QPS/TPS监控(30s心跳,自动重连)
- 系统指标采集(CPU、内存、延迟、错误率等)
- 多维度统计分析(按provider、model、user等维度)
- 告警规则管理(阈值配置、通知渠道)
- 错误日志追踪(详细错误信息、堆栈跟踪)
## 数据库Schema (Migration 025)
### 扩展现有表
- ops_system_metrics: 新增RED指标、错误分类、延迟指标、资源指标、业务指标
- ops_alert_rules: 新增JSONB字段(dimension_filters, notify_channels, notify_config)
### 新增表
- ops_dimension_stats: 多维度统计数据
- ops_data_retention_config: 数据保留策略配置
### 新增视图和函数
- ops_latest_metrics: 最新1分钟窗口指标(已修复字段名和window过滤)
- ops_active_alerts: 当前活跃告警(已修复字段名和状态值)
- calculate_health_score: 健康分数计算函数
## 一致性修复(98/100分)
### P0级别(阻塞Migration)
- ✅ 修复ops_latest_metrics视图字段名(latency_p99→p99_latency_ms, cpu_usage→cpu_usage_percent)
- ✅ 修复ops_active_alerts视图字段名(metric→metric_type, triggered_at→fired_at, trigger_value→metric_value, threshold→threshold_value)
- ✅ 统一告警历史表名(删除ops_alert_history,使用ops_alert_events)
- ✅ 统一API参数限制(ListMetricsHistory和ListErrorLogs的limit改为5000)
### P1级别(功能完整性)
- ✅ 修复ops_latest_metrics视图未过滤window_minutes(添加WHERE m.window_minutes = 1)
- ✅ 修复数据回填UPDATE逻辑(QPS计算改为request_count/(window_minutes*60.0))
- ✅ 添加ops_alert_rules JSONB字段后端支持(Go结构体+序列化)
### P2级别(优化)
- ✅ 前端WebSocket自动重连(指数退避1s→2s→4s→8s→16s,最大5次)
- ✅ 后端WebSocket心跳检测(30s ping,60s pong超时)
## 技术实现
### 后端 (Go)
- Handler层: ops_handler.go(REST API), ops_ws_handler.go(WebSocket)
- Service层: ops_service.go(核心逻辑), ops_cache.go(缓存), ops_alerts.go(告警)
- Repository层: ops_repo.go(数据访问), ops.go(模型定义)
- 路由: admin.go(新增ops相关路由)
- 依赖注入: wire_gen.go(自动生成)
### 前端 (Vue3 + TypeScript)
- 组件: OpsDashboardV2.vue(仪表盘主组件)
- API: ops.ts(REST API + WebSocket封装)
- 路由: index.ts(新增/admin/ops路由)
- 国际化: en.ts, zh.ts(中英文支持)
## 测试验证
- ✅ 所有Go测试通过
- ✅ Migration可正常执行
- ✅ WebSocket连接稳定
- ✅ 前后端数据结构对齐
* refactor: 代码清理和测试优化
## 测试文件优化
- 简化integration test fixtures和断言
- 优化test helper函数
- 统一测试数据格式
## 代码清理
- 移除未使用的代码和注释
- 简化concurrency_cache实现
- 优化middleware错误处理
## 小修复
- 修复gateway_handler和openai_gateway_handler的小问题
- 统一代码风格和格式
变更统计: 27个文件,292行新增,322行删除(净减少30行)
* fix(ops): 运维监控系统安全加固和功能优化
## 安全增强
- feat(security): WebSocket日志脱敏机制,防止token/api_key泄露
- feat(security): X-Forwarded-Host白名单验证,防止CSRF绕过
- feat(security): Origin策略配置化,支持strict/permissive模式
- feat(auth): WebSocket认证支持query参数传递token
## 配置优化
- feat(config): 支持环境变量配置代理信任和Origin策略
- OPS_WS_TRUST_PROXY
- OPS_WS_TRUSTED_PROXIES
- OPS_WS_ORIGIN_POLICY
- fix(ops): 错误日志查询限流从5000降至500,优化内存使用
## 架构改进
- refactor(ops): 告警服务解耦,独立运行评估定时器
- refactor(ops): OpsDashboard统一版本,移除V2分离
## 测试和文档
- test(ops): 添加WebSocket安全验证单元测试(8个测试用例)
- test(ops): 添加告警服务集成测试
- docs(api): 更新API文档,标注限流变更
- docs: 添加CHANGELOG记录breaking changes
## 修复文件
Backend:
- backend/internal/server/middleware/logger.go
- backend/internal/handler/admin/ops_handler.go
- backend/internal/handler/admin/ops_ws_handler.go
- backend/internal/server/middleware/admin_auth.go
- backend/internal/service/ops_alert_service.go
- backend/internal/service/ops_metrics_collector.go
- backend/internal/service/wire.go
Frontend:
- frontend/src/views/admin/ops/OpsDashboard.vue
- frontend/src/router/index.ts
- frontend/src/api/admin/ops.ts
Tests:
- backend/internal/handler/admin/ops_ws_handler_test.go (新增)
- backend/internal/service/ops_alert_service_integration_test.go (新增)
Docs:
- CHANGELOG.md (新增)
- docs/API-运维监控中心2.0.md (更新)
* fix(migrations): 修复calculate_health_score函数类型匹配问题
在ops_latest_metrics视图中添加显式类型转换,确保参数类型与函数签名匹配
* fix(lint): 修复golangci-lint检查发现的所有问题
- 将Redis依赖从service层移到repository层
- 添加错误检查(WebSocket连接和读取超时)
- 运行gofmt格式化代码
- 添加nil指针检查
- 删除未使用的alertService字段
修复问题:
- depguard: 3个(service层不应直接import redis)
- errcheck: 3个(未检查错误返回值)
- gofmt: 2个(代码格式问题)
- staticcheck: 4个(nil指针解引用)
- unused: 1个(未使用字段)
代码统计:
- 修改文件:11个
- 删除代码:490行
- 新增代码:105行
- 净减少:385行
386 lines
11 KiB
Go
386 lines
11 KiB
Go
//go:build integration
|
|
|
|
package repository
|
|
|
|
import (
|
|
"context"
|
|
"testing"
|
|
|
|
dbent "github.com/Wei-Shaw/sub2api/ent"
|
|
"github.com/Wei-Shaw/sub2api/internal/pkg/pagination"
|
|
"github.com/Wei-Shaw/sub2api/internal/service"
|
|
"github.com/stretchr/testify/suite"
|
|
)
|
|
|
|
type APIKeyRepoSuite struct {
|
|
suite.Suite
|
|
ctx context.Context
|
|
client *dbent.Client
|
|
repo *apiKeyRepository
|
|
}
|
|
|
|
func (s *APIKeyRepoSuite) SetupTest() {
|
|
s.ctx = context.Background()
|
|
tx := testEntTx(s.T())
|
|
s.client = tx.Client()
|
|
s.repo = NewAPIKeyRepository(s.client).(*apiKeyRepository)
|
|
}
|
|
|
|
func TestAPIKeyRepoSuite(t *testing.T) {
|
|
suite.Run(t, new(APIKeyRepoSuite))
|
|
}
|
|
|
|
// --- Create / GetByID / GetByKey ---
|
|
|
|
func (s *APIKeyRepoSuite) TestCreate() {
|
|
user := s.mustCreateUser("create@test.com")
|
|
|
|
key := &service.APIKey{
|
|
UserID: user.ID,
|
|
Key: "sk-create-test",
|
|
Name: "Test Key",
|
|
Status: service.StatusActive,
|
|
}
|
|
|
|
err := s.repo.Create(s.ctx, key)
|
|
s.Require().NoError(err, "Create")
|
|
s.Require().NotZero(key.ID, "expected ID to be set")
|
|
|
|
got, err := s.repo.GetByID(s.ctx, key.ID)
|
|
s.Require().NoError(err, "GetByID")
|
|
s.Require().Equal("sk-create-test", got.Key)
|
|
}
|
|
|
|
func (s *APIKeyRepoSuite) TestGetByID_NotFound() {
|
|
_, err := s.repo.GetByID(s.ctx, 999999)
|
|
s.Require().Error(err, "expected error for non-existent ID")
|
|
}
|
|
|
|
func (s *APIKeyRepoSuite) TestGetByKey() {
|
|
user := s.mustCreateUser("getbykey@test.com")
|
|
group := s.mustCreateGroup("g-key")
|
|
|
|
key := &service.APIKey{
|
|
UserID: user.ID,
|
|
Key: "sk-getbykey",
|
|
Name: "My Key",
|
|
GroupID: &group.ID,
|
|
Status: service.StatusActive,
|
|
}
|
|
s.Require().NoError(s.repo.Create(s.ctx, key))
|
|
|
|
got, err := s.repo.GetByKey(s.ctx, key.Key)
|
|
s.Require().NoError(err, "GetByKey")
|
|
s.Require().Equal(key.ID, got.ID)
|
|
s.Require().NotNil(got.User, "expected User preload")
|
|
s.Require().Equal(user.ID, got.User.ID)
|
|
s.Require().NotNil(got.Group, "expected Group preload")
|
|
s.Require().Equal(group.ID, got.Group.ID)
|
|
}
|
|
|
|
func (s *APIKeyRepoSuite) TestGetByKey_NotFound() {
|
|
_, err := s.repo.GetByKey(s.ctx, "non-existent-key")
|
|
s.Require().Error(err, "expected error for non-existent key")
|
|
}
|
|
|
|
// --- Update ---
|
|
|
|
func (s *APIKeyRepoSuite) TestUpdate() {
|
|
user := s.mustCreateUser("update@test.com")
|
|
key := &service.APIKey{
|
|
UserID: user.ID,
|
|
Key: "sk-update",
|
|
Name: "Original",
|
|
Status: service.StatusActive,
|
|
}
|
|
s.Require().NoError(s.repo.Create(s.ctx, key))
|
|
|
|
key.Name = "Renamed"
|
|
key.Status = service.StatusDisabled
|
|
err := s.repo.Update(s.ctx, key)
|
|
s.Require().NoError(err, "Update")
|
|
|
|
got, err := s.repo.GetByID(s.ctx, key.ID)
|
|
s.Require().NoError(err, "GetByID after update")
|
|
s.Require().Equal("sk-update", got.Key, "Update should not change key")
|
|
s.Require().Equal(user.ID, got.UserID, "Update should not change user_id")
|
|
s.Require().Equal("Renamed", got.Name)
|
|
s.Require().Equal(service.StatusDisabled, got.Status)
|
|
}
|
|
|
|
func (s *APIKeyRepoSuite) TestUpdate_ClearGroupID() {
|
|
user := s.mustCreateUser("cleargroup@test.com")
|
|
group := s.mustCreateGroup("g-clear")
|
|
key := &service.APIKey{
|
|
UserID: user.ID,
|
|
Key: "sk-clear-group",
|
|
Name: "Group Key",
|
|
GroupID: &group.ID,
|
|
Status: service.StatusActive,
|
|
}
|
|
s.Require().NoError(s.repo.Create(s.ctx, key))
|
|
|
|
key.GroupID = nil
|
|
err := s.repo.Update(s.ctx, key)
|
|
s.Require().NoError(err, "Update")
|
|
|
|
got, err := s.repo.GetByID(s.ctx, key.ID)
|
|
s.Require().NoError(err)
|
|
s.Require().Nil(got.GroupID, "expected GroupID to be cleared")
|
|
}
|
|
|
|
// --- Delete ---
|
|
|
|
func (s *APIKeyRepoSuite) TestDelete() {
|
|
user := s.mustCreateUser("delete@test.com")
|
|
key := &service.APIKey{
|
|
UserID: user.ID,
|
|
Key: "sk-delete",
|
|
Name: "Delete Me",
|
|
Status: service.StatusActive,
|
|
}
|
|
s.Require().NoError(s.repo.Create(s.ctx, key))
|
|
|
|
err := s.repo.Delete(s.ctx, key.ID)
|
|
s.Require().NoError(err, "Delete")
|
|
|
|
_, err = s.repo.GetByID(s.ctx, key.ID)
|
|
s.Require().Error(err, "expected error after delete")
|
|
}
|
|
|
|
// --- ListByUserID / CountByUserID ---
|
|
|
|
func (s *APIKeyRepoSuite) TestListByUserID() {
|
|
user := s.mustCreateUser("listbyuser@test.com")
|
|
s.mustCreateAPIKey(user.ID, "sk-list-1", "Key 1", nil)
|
|
s.mustCreateAPIKey(user.ID, "sk-list-2", "Key 2", nil)
|
|
|
|
keys, page, err := s.repo.ListByUserID(s.ctx, user.ID, pagination.PaginationParams{Page: 1, PageSize: 10})
|
|
s.Require().NoError(err, "ListByUserID")
|
|
s.Require().Len(keys, 2)
|
|
s.Require().Equal(int64(2), page.Total)
|
|
}
|
|
|
|
func (s *APIKeyRepoSuite) TestListByUserID_Pagination() {
|
|
user := s.mustCreateUser("paging@test.com")
|
|
for i := 0; i < 5; i++ {
|
|
s.mustCreateAPIKey(user.ID, "sk-page-"+string(rune('a'+i)), "Key", nil)
|
|
}
|
|
|
|
keys, page, err := s.repo.ListByUserID(s.ctx, user.ID, pagination.PaginationParams{Page: 1, PageSize: 2})
|
|
s.Require().NoError(err)
|
|
s.Require().Len(keys, 2)
|
|
s.Require().Equal(int64(5), page.Total)
|
|
s.Require().Equal(3, page.Pages)
|
|
}
|
|
|
|
func (s *APIKeyRepoSuite) TestCountByUserID() {
|
|
user := s.mustCreateUser("count@test.com")
|
|
s.mustCreateAPIKey(user.ID, "sk-count-1", "K1", nil)
|
|
s.mustCreateAPIKey(user.ID, "sk-count-2", "K2", nil)
|
|
|
|
count, err := s.repo.CountByUserID(s.ctx, user.ID)
|
|
s.Require().NoError(err, "CountByUserID")
|
|
s.Require().Equal(int64(2), count)
|
|
}
|
|
|
|
// --- ListByGroupID / CountByGroupID ---
|
|
|
|
func (s *APIKeyRepoSuite) TestListByGroupID() {
|
|
user := s.mustCreateUser("listbygroup@test.com")
|
|
group := s.mustCreateGroup("g-list")
|
|
|
|
s.mustCreateAPIKey(user.ID, "sk-grp-1", "K1", &group.ID)
|
|
s.mustCreateAPIKey(user.ID, "sk-grp-2", "K2", &group.ID)
|
|
s.mustCreateAPIKey(user.ID, "sk-grp-3", "K3", nil) // no group
|
|
|
|
keys, page, err := s.repo.ListByGroupID(s.ctx, group.ID, pagination.PaginationParams{Page: 1, PageSize: 10})
|
|
s.Require().NoError(err, "ListByGroupID")
|
|
s.Require().Len(keys, 2)
|
|
s.Require().Equal(int64(2), page.Total)
|
|
// User preloaded
|
|
s.Require().NotNil(keys[0].User)
|
|
}
|
|
|
|
func (s *APIKeyRepoSuite) TestCountByGroupID() {
|
|
user := s.mustCreateUser("countgroup@test.com")
|
|
group := s.mustCreateGroup("g-count")
|
|
s.mustCreateAPIKey(user.ID, "sk-gc-1", "K1", &group.ID)
|
|
|
|
count, err := s.repo.CountByGroupID(s.ctx, group.ID)
|
|
s.Require().NoError(err, "CountByGroupID")
|
|
s.Require().Equal(int64(1), count)
|
|
}
|
|
|
|
// --- ExistsByKey ---
|
|
|
|
func (s *APIKeyRepoSuite) TestExistsByKey() {
|
|
user := s.mustCreateUser("exists@test.com")
|
|
s.mustCreateAPIKey(user.ID, "sk-exists", "K", nil)
|
|
|
|
exists, err := s.repo.ExistsByKey(s.ctx, "sk-exists")
|
|
s.Require().NoError(err, "ExistsByKey")
|
|
s.Require().True(exists)
|
|
|
|
notExists, err := s.repo.ExistsByKey(s.ctx, "sk-not-exists")
|
|
s.Require().NoError(err)
|
|
s.Require().False(notExists)
|
|
}
|
|
|
|
// --- SearchAPIKeys ---
|
|
|
|
func (s *APIKeyRepoSuite) TestSearchAPIKeys() {
|
|
user := s.mustCreateUser("search@test.com")
|
|
s.mustCreateAPIKey(user.ID, "sk-search-1", "Production Key", nil)
|
|
s.mustCreateAPIKey(user.ID, "sk-search-2", "Development Key", nil)
|
|
|
|
found, err := s.repo.SearchAPIKeys(s.ctx, user.ID, "prod", 10)
|
|
s.Require().NoError(err, "SearchAPIKeys")
|
|
s.Require().Len(found, 1)
|
|
s.Require().Contains(found[0].Name, "Production")
|
|
}
|
|
|
|
func (s *APIKeyRepoSuite) TestSearchAPIKeys_NoKeyword() {
|
|
user := s.mustCreateUser("searchnokw@test.com")
|
|
s.mustCreateAPIKey(user.ID, "sk-nk-1", "K1", nil)
|
|
s.mustCreateAPIKey(user.ID, "sk-nk-2", "K2", nil)
|
|
|
|
found, err := s.repo.SearchAPIKeys(s.ctx, user.ID, "", 10)
|
|
s.Require().NoError(err)
|
|
s.Require().Len(found, 2)
|
|
}
|
|
|
|
func (s *APIKeyRepoSuite) TestSearchAPIKeys_NoUserID() {
|
|
user := s.mustCreateUser("searchnouid@test.com")
|
|
s.mustCreateAPIKey(user.ID, "sk-nu-1", "TestKey", nil)
|
|
|
|
found, err := s.repo.SearchAPIKeys(s.ctx, 0, "testkey", 10)
|
|
s.Require().NoError(err)
|
|
s.Require().Len(found, 1)
|
|
}
|
|
|
|
// --- ClearGroupIDByGroupID ---
|
|
|
|
func (s *APIKeyRepoSuite) TestClearGroupIDByGroupID() {
|
|
user := s.mustCreateUser("cleargrp@test.com")
|
|
group := s.mustCreateGroup("g-clear-bulk")
|
|
|
|
k1 := s.mustCreateAPIKey(user.ID, "sk-clr-1", "K1", &group.ID)
|
|
k2 := s.mustCreateAPIKey(user.ID, "sk-clr-2", "K2", &group.ID)
|
|
s.mustCreateAPIKey(user.ID, "sk-clr-3", "K3", nil) // no group
|
|
|
|
affected, err := s.repo.ClearGroupIDByGroupID(s.ctx, group.ID)
|
|
s.Require().NoError(err, "ClearGroupIDByGroupID")
|
|
s.Require().Equal(int64(2), affected)
|
|
|
|
got1, _ := s.repo.GetByID(s.ctx, k1.ID)
|
|
got2, _ := s.repo.GetByID(s.ctx, k2.ID)
|
|
s.Require().Nil(got1.GroupID)
|
|
s.Require().Nil(got2.GroupID)
|
|
|
|
count, _ := s.repo.CountByGroupID(s.ctx, group.ID)
|
|
s.Require().Zero(count)
|
|
}
|
|
|
|
// --- Combined CRUD/Search/ClearGroupID (original test preserved as integration) ---
|
|
|
|
func (s *APIKeyRepoSuite) TestCRUD_Search_ClearGroupID() {
|
|
user := s.mustCreateUser("k@example.com")
|
|
group := s.mustCreateGroup("g-k")
|
|
key := s.mustCreateAPIKey(user.ID, "sk-test-1", "My Key", &group.ID)
|
|
key.GroupID = &group.ID
|
|
|
|
got, err := s.repo.GetByKey(s.ctx, key.Key)
|
|
s.Require().NoError(err, "GetByKey")
|
|
s.Require().Equal(key.ID, got.ID)
|
|
s.Require().NotNil(got.User)
|
|
s.Require().Equal(user.ID, got.User.ID)
|
|
s.Require().NotNil(got.Group)
|
|
s.Require().Equal(group.ID, got.Group.ID)
|
|
|
|
key.Name = "Renamed"
|
|
key.Status = service.StatusDisabled
|
|
key.GroupID = nil
|
|
s.Require().NoError(s.repo.Update(s.ctx, key), "Update")
|
|
|
|
got2, err := s.repo.GetByID(s.ctx, key.ID)
|
|
s.Require().NoError(err, "GetByID")
|
|
s.Require().Equal("sk-test-1", got2.Key, "Update should not change key")
|
|
s.Require().Equal(user.ID, got2.UserID, "Update should not change user_id")
|
|
s.Require().Equal("Renamed", got2.Name)
|
|
s.Require().Equal(service.StatusDisabled, got2.Status)
|
|
s.Require().Nil(got2.GroupID)
|
|
|
|
keys, page, err := s.repo.ListByUserID(s.ctx, user.ID, pagination.PaginationParams{Page: 1, PageSize: 10})
|
|
s.Require().NoError(err, "ListByUserID")
|
|
s.Require().Equal(int64(1), page.Total)
|
|
s.Require().Len(keys, 1)
|
|
|
|
exists, err := s.repo.ExistsByKey(s.ctx, "sk-test-1")
|
|
s.Require().NoError(err, "ExistsByKey")
|
|
s.Require().True(exists, "expected key to exist")
|
|
|
|
found, err := s.repo.SearchAPIKeys(s.ctx, user.ID, "renam", 10)
|
|
s.Require().NoError(err, "SearchAPIKeys")
|
|
s.Require().Len(found, 1)
|
|
s.Require().Equal(key.ID, found[0].ID)
|
|
|
|
// ClearGroupIDByGroupID
|
|
k2 := s.mustCreateAPIKey(user.ID, "sk-test-2", "Group Key", &group.ID)
|
|
k2.GroupID = &group.ID
|
|
|
|
countBefore, err := s.repo.CountByGroupID(s.ctx, group.ID)
|
|
s.Require().NoError(err, "CountByGroupID")
|
|
s.Require().Equal(int64(1), countBefore, "expected 1 key in group before clear")
|
|
|
|
affected, err := s.repo.ClearGroupIDByGroupID(s.ctx, group.ID)
|
|
s.Require().NoError(err, "ClearGroupIDByGroupID")
|
|
s.Require().Equal(int64(1), affected, "expected 1 affected row")
|
|
|
|
got3, err := s.repo.GetByID(s.ctx, k2.ID)
|
|
s.Require().NoError(err, "GetByID")
|
|
s.Require().Nil(got3.GroupID, "expected GroupID cleared")
|
|
|
|
countAfter, err := s.repo.CountByGroupID(s.ctx, group.ID)
|
|
s.Require().NoError(err, "CountByGroupID after clear")
|
|
s.Require().Equal(int64(0), countAfter, "expected 0 keys in group after clear")
|
|
}
|
|
|
|
func (s *APIKeyRepoSuite) mustCreateUser(email string) *service.User {
|
|
s.T().Helper()
|
|
|
|
u, err := s.client.User.Create().
|
|
SetEmail(email).
|
|
SetPasswordHash("test-password-hash").
|
|
SetStatus(service.StatusActive).
|
|
SetRole(service.RoleUser).
|
|
Save(s.ctx)
|
|
s.Require().NoError(err, "create user")
|
|
return userEntityToService(u)
|
|
}
|
|
|
|
func (s *APIKeyRepoSuite) mustCreateGroup(name string) *service.Group {
|
|
s.T().Helper()
|
|
|
|
g, err := s.client.Group.Create().
|
|
SetName(name).
|
|
SetStatus(service.StatusActive).
|
|
Save(s.ctx)
|
|
s.Require().NoError(err, "create group")
|
|
return groupEntityToService(g)
|
|
}
|
|
|
|
func (s *APIKeyRepoSuite) mustCreateAPIKey(userID int64, key, name string, groupID *int64) *service.APIKey {
|
|
s.T().Helper()
|
|
|
|
k := &service.APIKey{
|
|
UserID: userID,
|
|
Key: key,
|
|
Name: name,
|
|
GroupID: groupID,
|
|
Status: service.StatusActive,
|
|
}
|
|
s.Require().NoError(s.repo.Create(s.ctx, k), "create api key")
|
|
return k
|
|
}
|