wizardchen
23db592c4a
Introduce platform API keys with capability-based access to tenant management, system settings, runtime queues, and audit logs, plus admin UI for key lifecycle and system audit log viewing.
96 lines
3.4 KiB
Go
96 lines
3.4 KiB
Go
package middleware
|
|
|
|
import (
|
|
"net/http"
|
|
"net/http/httptest"
|
|
"testing"
|
|
|
|
"github.com/Tencent/WeKnora/internal/types"
|
|
"github.com/gin-gonic/gin"
|
|
)
|
|
|
|
func TestPlatformTenantOptionalAPIs(t *testing.T) {
|
|
cases := []struct {
|
|
method string
|
|
path string
|
|
want bool
|
|
}{
|
|
{http.MethodGet, "/api/v1/system/admin/settings", true},
|
|
{http.MethodGet, "/api/v1/tenants/all", true},
|
|
{http.MethodGet, "/api/v1/tenants/search", true},
|
|
{http.MethodPost, "/api/v1/tenants", true},
|
|
{http.MethodGet, "/api/v1/knowledge-bases", false},
|
|
{http.MethodGet, "/api/v1/tenants", false},
|
|
}
|
|
for _, tc := range cases {
|
|
if got := isPlatformTenantOptionalAPI(tc.path, tc.method); got != tc.want {
|
|
t.Fatalf("isPlatformTenantOptionalAPI(%s, %s) = %v, want %v", tc.method, tc.path, got, tc.want)
|
|
}
|
|
}
|
|
}
|
|
|
|
func TestAttachPlatformAPIKeyAuthContext(t *testing.T) {
|
|
gin.SetMode(gin.TestMode)
|
|
c, _ := gin.CreateTestContext(httptest.NewRecorder())
|
|
c.Request = httptest.NewRequest(http.MethodGet, "/api/v1/system/admin/settings", nil)
|
|
attachPlatformAPIKeyAuthContext(c, &types.TenantAPIKey{
|
|
ID: 9, ScopeType: types.APIKeyScopePlatform,
|
|
Capabilities: types.StringArray{string(types.APIKeyCapabilitySystemSettingsRead)},
|
|
})
|
|
scope, ok := types.TenantAPIKeyScopeFromContext(c.Request.Context())
|
|
if !ok || !scope.IsPlatform() || scope.KeyID != 9 {
|
|
t.Fatalf("platform scope = %#v, ok=%v", scope, ok)
|
|
}
|
|
if _, ok := types.TenantIDFromContext(c.Request.Context()); ok {
|
|
t.Fatal("tenantless platform control-plane request must not have tenant context")
|
|
}
|
|
principal, ok := types.PrincipalFromContext(c.Request.Context())
|
|
if !ok || principal.Type != types.PrincipalAPIPlatform {
|
|
t.Fatalf("principal = %#v, ok=%v", principal, ok)
|
|
}
|
|
}
|
|
|
|
func TestPlatformAPIKeyIdentityIsStableAcrossTenants(t *testing.T) {
|
|
principal, user := platformAPIKeyIdentity(&types.TenantAPIKey{ID: 27})
|
|
if principal.Type != types.PrincipalAPIPlatform || principal.ID != "27" {
|
|
t.Fatalf("principal = %#v", principal)
|
|
}
|
|
if user.ID != "api_platform:27" || user.Username != user.ID {
|
|
t.Fatalf("user = %#v", user)
|
|
}
|
|
}
|
|
|
|
func TestAttachTargetedPlatformAPIKeyKeepsPlatformPrincipal(t *testing.T) {
|
|
gin.SetMode(gin.TestMode)
|
|
c, _ := gin.CreateTestContext(httptest.NewRecorder())
|
|
c.Request = httptest.NewRequest(http.MethodGet, "/api/v1/knowledge-bases", nil)
|
|
key := &types.TenantAPIKey{
|
|
ID: 27,
|
|
ScopeType: types.APIKeyScopePlatform,
|
|
FullAccess: true, // Corrupt/legacy data must still be capability-only at runtime.
|
|
Capabilities: types.StringArray{
|
|
string(types.APIKeyCapabilityRetrieve),
|
|
},
|
|
}
|
|
attachAPIKeyAuthContext(c, &fakeTenantService{tenant: &types.Tenant{ID: 42}}, nil, 42, key)
|
|
if c.IsAborted() {
|
|
t.Fatal("targeted platform API key context unexpectedly aborted")
|
|
}
|
|
principal, ok := types.PrincipalFromContext(c.Request.Context())
|
|
if !ok || principal.Type != types.PrincipalAPIPlatform || principal.ID != "27" {
|
|
t.Fatalf("principal = %#v, ok=%v", principal, ok)
|
|
}
|
|
tenantID, ok := types.TenantIDFromContext(c.Request.Context())
|
|
if !ok || tenantID != 42 {
|
|
t.Fatalf("tenant id = %d, ok=%v", tenantID, ok)
|
|
}
|
|
scope, ok := types.TenantAPIKeyScopeFromContext(c.Request.Context())
|
|
if !ok || !scope.IsPlatform() || scope.FullAccess {
|
|
t.Fatalf("scope = %#v, ok=%v", scope, ok)
|
|
}
|
|
user, ok := c.Request.Context().Value(types.UserContextKey).(*types.User)
|
|
if !ok || user.ID != "api_platform:27" || user.TenantID != 42 {
|
|
t.Fatalf("user = %#v, ok=%v", user, ok)
|
|
}
|
|
}
|