nullkey
811802485e
First two leaf commands and the auth/ command group, registered under the root command tree. auth login: - Email + password (interactive huh prompter) OR --with-token (read API key from stdin) for headless / CI use - Validates --host (required, must be http/https URL) - Persists access + refresh tokens (password mode) or api_key (token mode) into the secrets store wired in PR-3 — uses Store.Ref to record the URI scheme without leaking concrete backend type - Writes the named context to ~/.config/weknora/config.yaml and sets it as current_context - Typed loginResult payload for --json output (no map[string]any) auth status: - Calls client.GetCurrentUser -> /auth/me, prints context / host / user / tenant. --json emits a typed statusResult envelope with _meta.context and tenant_id populated for agents. - Service interface narrowed to just GetCurrentUser; tests inject fakes by overriding Factory.Client (no runF gymnastics). cmd/root.go: register \`auth\` parent under the root tree.
105 lines
3.8 KiB
Go
105 lines
3.8 KiB
Go
package auth
|
|
|
|
import (
|
|
"context"
|
|
"errors"
|
|
"strings"
|
|
"testing"
|
|
|
|
"github.com/stretchr/testify/assert"
|
|
"github.com/stretchr/testify/require"
|
|
|
|
"github.com/Tencent/WeKnora/cli/internal/cmdutil"
|
|
"github.com/Tencent/WeKnora/cli/internal/config"
|
|
"github.com/Tencent/WeKnora/cli/internal/iostreams"
|
|
"github.com/Tencent/WeKnora/cli/internal/prompt"
|
|
"github.com/Tencent/WeKnora/cli/internal/testutil"
|
|
sdk "github.com/Tencent/WeKnora/client"
|
|
)
|
|
|
|
type fakeStatusService struct {
|
|
resp *sdk.CurrentUserResponse
|
|
err error
|
|
}
|
|
|
|
func (f *fakeStatusService) GetCurrentUser(_ context.Context) (*sdk.CurrentUserResponse, error) {
|
|
return f.resp, f.err
|
|
}
|
|
|
|
func newCurrentUserResponse(user *sdk.AuthUser, tenant *sdk.AuthTenant) *sdk.CurrentUserResponse {
|
|
r := &sdk.CurrentUserResponse{Success: true}
|
|
r.Data.User = user
|
|
r.Data.Tenant = tenant
|
|
return r
|
|
}
|
|
|
|
func TestRunStatus_HumanOutput(t *testing.T) {
|
|
out, _ := iostreams.SetForTest(t)
|
|
testutil.XDGTempDir(t)
|
|
require.NoError(t, config.Save(&config.Config{
|
|
CurrentContext: "prod",
|
|
Contexts: map[string]config.Context{
|
|
"prod": {Host: "https://kb.example.com", TenantID: 7},
|
|
},
|
|
}))
|
|
f := &cmdutil.Factory{
|
|
Config: func() (*config.Config, error) { return config.Load() },
|
|
Prompter: func() prompt.Prompter { return prompt.AgentPrompter{} },
|
|
}
|
|
svc := &fakeStatusService{
|
|
resp: newCurrentUserResponse(
|
|
&sdk.AuthUser{ID: "u1", Email: "alice@example.com", TenantID: 7},
|
|
&sdk.AuthTenant{ID: 7, Name: "Acme"},
|
|
),
|
|
}
|
|
require.NoError(t, runStatus(context.Background(), &StatusOptions{}, f, svc))
|
|
got := out.String()
|
|
assert.Contains(t, got, "context: prod")
|
|
assert.Contains(t, got, "host: https://kb.example.com")
|
|
assert.Contains(t, got, "alice@example.com")
|
|
assert.Contains(t, got, "Acme")
|
|
}
|
|
|
|
func TestRunStatus_JSONOutput(t *testing.T) {
|
|
out, _ := iostreams.SetForTest(t)
|
|
testutil.XDGTempDir(t)
|
|
require.NoError(t, config.Save(&config.Config{
|
|
CurrentContext: "prod",
|
|
Contexts: map[string]config.Context{"prod": {Host: "https://x"}},
|
|
}))
|
|
f := &cmdutil.Factory{Config: func() (*config.Config, error) { return config.Load() }}
|
|
svc := &fakeStatusService{resp: newCurrentUserResponse(&sdk.AuthUser{ID: "u1", Email: "a@b.c", TenantID: 7}, nil)}
|
|
require.NoError(t, runStatus(context.Background(), &StatusOptions{JSONOut: true}, f, svc))
|
|
assert.True(t, strings.HasPrefix(out.String(), `{"ok":true`), "got: %q", out.String())
|
|
assert.Contains(t, out.String(), `"email":"a@b.c"`)
|
|
}
|
|
|
|
func TestRunStatus_NoSDKClient(t *testing.T) {
|
|
iostreams.SetForTest(t)
|
|
err := runStatus(context.Background(), &StatusOptions{}, &cmdutil.Factory{}, nil)
|
|
require.Error(t, err)
|
|
assert.True(t, cmdutil.IsAuthError(err))
|
|
}
|
|
|
|
func TestRunStatus_SDKError_Transport(t *testing.T) {
|
|
iostreams.SetForTest(t)
|
|
testutil.XDGTempDir(t)
|
|
require.NoError(t, config.Save(&config.Config{CurrentContext: "p", Contexts: map[string]config.Context{"p": {Host: "https://x"}}}))
|
|
f := &cmdutil.Factory{Config: func() (*config.Config, error) { return config.Load() }}
|
|
err := runStatus(context.Background(), &StatusOptions{}, f, &fakeStatusService{err: assert.AnError})
|
|
require.Error(t, err)
|
|
// Non-HTTP errors (DNS / TCP) are transport problems, not auth problems —
|
|
// classify network.error so retry logic / exit code 7 / IsTransient apply.
|
|
assert.True(t, cmdutil.IsTransient(err), "expected transient/network classification, got %v", err)
|
|
}
|
|
|
|
func TestRunStatus_SDKError_HTTP401(t *testing.T) {
|
|
iostreams.SetForTest(t)
|
|
testutil.XDGTempDir(t)
|
|
require.NoError(t, config.Save(&config.Config{CurrentContext: "p", Contexts: map[string]config.Context{"p": {Host: "https://x"}}}))
|
|
f := &cmdutil.Factory{Config: func() (*config.Config, error) { return config.Load() }}
|
|
err := runStatus(context.Background(), &StatusOptions{}, f, &fakeStatusService{err: errors.New("HTTP error 401: invalid token")})
|
|
require.Error(t, err)
|
|
assert.True(t, cmdutil.IsAuthError(err))
|
|
}
|