Files

99 lines
3.1 KiB
Go

package middleware
import (
"net/http"
"net/http/httptest"
"testing"
settingsstore "github.com/dujiao-next/internal/modules/settings/infrastructure/gormstore"
complianceapp "github.com/dujiao-next/internal/modules/compliance/application"
"github.com/gin-gonic/gin"
"github.com/stretchr/testify/assert"
"github.com/stretchr/testify/require"
"gorm.io/driver/sqlite"
"gorm.io/gorm"
)
func setupComplianceMW(t *testing.T) (*gin.Engine, *complianceapp.Service) {
t.Helper()
gin.SetMode(gin.TestMode)
db, err := gorm.Open(sqlite.Open(":memory:"), &gorm.Config{})
require.NoError(t, err)
require.NoError(t, db.AutoMigrate(&settingsstore.SettingRecord{}))
cs := complianceapp.NewService(settingsstore.New(db))
r := gin.New()
r.GET("/proto",
func(c *gin.Context) {
if c.GetHeader("X-Test-Super") == "1" {
c.Set("admin_is_super", true)
}
c.Next()
},
PaymentComplianceRequired(cs),
func(c *gin.Context) { c.JSON(http.StatusOK, gin.H{"ok": true}) },
)
return r, cs
}
func TestPaymentComplianceRequired_PassWhenAcked(t *testing.T) {
r, cs := setupComplianceMW(t)
require.NoError(t, cs.Acknowledge(complianceapp.AcknowledgeCommand{
Segment1: "我已阅读并理解上述合规声明提醒",
Segment2: "知悉相关法律风险",
Segment3: "并确认自行承担部署运营和收费行为产生的法律责任",
AdminID: 1, Username: "admin",
}))
w := httptest.NewRecorder()
r.ServeHTTP(w, httptest.NewRequest(http.MethodGet, "/proto", nil))
assert.Equal(t, http.StatusOK, w.Code)
assert.Contains(t, w.Body.String(), "\"ok\":true")
}
func TestPaymentComplianceRequired_SuperNotAcked(t *testing.T) {
r, _ := setupComplianceMW(t)
req := httptest.NewRequest(http.MethodGet, "/proto", nil)
req.Header.Set("X-Test-Super", "1")
w := httptest.NewRecorder()
r.ServeHTTP(w, req)
assert.Equal(t, http.StatusOK, w.Code)
body := w.Body.String()
assert.Contains(t, body, "\"status_code\":403")
assert.Contains(t, body, "compliance_required")
assert.NotContains(t, body, "compliance_required_by_super_admin")
assert.NotContains(t, body, "\"ok\":true")
}
func TestPaymentComplianceRequired_NonSuperNotAcked(t *testing.T) {
r, _ := setupComplianceMW(t)
w := httptest.NewRecorder()
r.ServeHTTP(w, httptest.NewRequest(http.MethodGet, "/proto", nil))
assert.Equal(t, http.StatusOK, w.Code)
body := w.Body.String()
assert.Contains(t, body, "\"status_code\":403")
assert.Contains(t, body, "compliance_required_by_super_admin")
assert.NotContains(t, body, "\"ok\":true")
}
func TestPaymentComplianceRequired_NilService(t *testing.T) {
// 防御性:服务为 nil 时不放行(更安全的默认),但目前实现走 fallback 非超管分支
gin.SetMode(gin.TestMode)
r := gin.New()
r.GET("/proto",
PaymentComplianceRequired(nil),
func(c *gin.Context) { c.JSON(http.StatusOK, gin.H{"ok": true}) },
)
w := httptest.NewRecorder()
r.ServeHTTP(w, httptest.NewRequest(http.MethodGet, "/proto", nil))
// nil service 视为未确认;执行非超管分支
assert.Equal(t, http.StatusOK, w.Code)
body := w.Body.String()
assert.Contains(t, body, "compliance_required_by_super_admin")
assert.NotContains(t, body, "\"ok\":true")
}