mrlee
278f8267b7
- 公网反代：Nginx 状态卡片（版本 / 运行状态 / 配置校验 / 端口监听） - 部署设置第一、二梯队（HTTPS 开关、安全头、限流、连接数、仅中国大陆 IP） - 隧道检测兼容 frps v0.68 / v0.71（V2 与旧版端点） - 恢复被清空的 internal/frp/store.go、internal/api/ddns_handler.go、web/src/views/DdnsView.vue
97 lines
3.0 KiB
Go
97 lines
3.0 KiB
Go
package api
|
|
|
|
import (
|
|
"bytes"
|
|
"context"
|
|
"encoding/json"
|
|
"net/http"
|
|
"net/http/httptest"
|
|
"path/filepath"
|
|
"testing"
|
|
"time"
|
|
|
|
"github.com/fonu/fonu/internal/auth"
|
|
"github.com/fonu/fonu/internal/backup"
|
|
"github.com/fonu/fonu/internal/config"
|
|
"github.com/fonu/fonu/internal/db"
|
|
"github.com/fonu/fonu/internal/discovery"
|
|
"github.com/fonu/fonu/internal/certificate"
|
|
"github.com/fonu/fonu/internal/proxy"
|
|
"github.com/fonu/fonu/internal/service"
|
|
"github.com/fonu/fonu/internal/settings"
|
|
)
|
|
|
|
func TestAuthSetupAndLoginFlow(t *testing.T) {
|
|
conn, err := db.Open(filepath.Join(t.TempDir(), "fonu.db"))
|
|
if err != nil {
|
|
t.Fatalf("open db: %v", err)
|
|
}
|
|
defer conn.Close()
|
|
|
|
if err := db.Migrate(context.Background(), conn, filepath.Join("..", "..", "migrations")); err != nil {
|
|
t.Fatalf("migrate: %v", err)
|
|
}
|
|
|
|
tmpDir := t.TempDir()
|
|
authSvc := auth.New(conn)
|
|
proxySvc := service.NewProxyService(config.Config{DataDir: tmpDir, NginxPIDFile: tmpDir + "/nginx.pid"}, conn, proxy.NewStore(conn), certificate.NewStore(conn), settings.NewStore(conn), nil)
|
|
handler := NewRouter(Deps{
|
|
Config: config.Config{DataDir: tmpDir, NginxPIDFile: tmpDir + "/nginx.pid"},
|
|
Auth: authSvc,
|
|
Proxy: proxySvc,
|
|
Backup: backup.New(tmpDir),
|
|
Discovery: discovery.New(),
|
|
StartedAt: time.Now().UTC().Format(time.RFC3339),
|
|
})
|
|
|
|
statusReq := httptest.NewRequest(http.MethodGet, "/api/auth/status", nil)
|
|
statusRec := httptest.NewRecorder()
|
|
handler.ServeHTTP(statusRec, statusReq)
|
|
if statusRec.Code != http.StatusOK {
|
|
t.Fatalf("status code: %d", statusRec.Code)
|
|
}
|
|
|
|
if err := authSvc.Setup(context.Background(), "admin", "password123"); err != nil {
|
|
t.Fatalf("setup admin: %v", err)
|
|
}
|
|
|
|
loginBody, _ := json.Marshal(map[string]string{
|
|
"username": "admin",
|
|
"password": "password123",
|
|
})
|
|
loginReq := httptest.NewRequest(http.MethodPost, "/api/auth/login", bytes.NewReader(loginBody))
|
|
loginRec := httptest.NewRecorder()
|
|
handler.ServeHTTP(loginRec, loginReq)
|
|
if loginRec.Code != http.StatusOK {
|
|
t.Fatalf("login status: %d body=%s", loginRec.Code, loginRec.Body.String())
|
|
}
|
|
|
|
cookie := loginRec.Result().Cookies()[0]
|
|
if cookie.Name != "fonu_session" || cookie.HttpOnly == false {
|
|
t.Fatal("expected httponly session cookie")
|
|
}
|
|
|
|
authStatusReq := httptest.NewRequest(http.MethodGet, "/api/auth/status", nil)
|
|
authStatusReq.AddCookie(cookie)
|
|
authStatusRec := httptest.NewRecorder()
|
|
handler.ServeHTTP(authStatusRec, authStatusReq)
|
|
if authStatusRec.Code != http.StatusOK {
|
|
t.Fatalf("auth status code: %d", authStatusRec.Code)
|
|
}
|
|
var authStatus authStatusResponse
|
|
if err := json.Unmarshal(authStatusRec.Body.Bytes(), &authStatus); err != nil {
|
|
t.Fatalf("decode auth status: %v", err)
|
|
}
|
|
if !authStatus.Initialized || !authStatus.Authenticated {
|
|
t.Fatalf("expected authenticated status, got %+v", authStatus)
|
|
}
|
|
|
|
proxiesReq := httptest.NewRequest(http.MethodGet, "/api/proxies", nil)
|
|
proxiesReq.AddCookie(cookie)
|
|
proxiesRec := httptest.NewRecorder()
|
|
handler.ServeHTTP(proxiesRec, proxiesReq)
|
|
if proxiesRec.Code != http.StatusOK {
|
|
t.Fatalf("proxies status: %d", proxiesRec.Code)
|
|
}
|
|
}
|