811802485e
First two leaf commands and the auth/ command group, registered under the root command tree. auth login: - Email + password (interactive huh prompter) OR --with-token (read API key from stdin) for headless / CI use - Validates --host (required, must be http/https URL) - Persists access + refresh tokens (password mode) or api_key (token mode) into the secrets store wired in PR-3 — uses Store.Ref to record the URI scheme without leaking concrete backend type - Writes the named context to ~/.config/weknora/config.yaml and sets it as current_context - Typed loginResult payload for --json output (no map[string]any) auth status: - Calls client.GetCurrentUser -> /auth/me, prints context / host / user / tenant. --json emits a typed statusResult envelope with _meta.context and tenant_id populated for agents. - Service interface narrowed to just GetCurrentUser; tests inject fakes by overriding Factory.Client (no runF gymnastics). cmd/root.go: register \`auth\` parent under the root tree.
121 lines
3.5 KiB
Go
121 lines
3.5 KiB
Go
package auth
|
|
|
|
import (
|
|
"context"
|
|
"strings"
|
|
"testing"
|
|
|
|
"github.com/spf13/cobra"
|
|
"github.com/stretchr/testify/assert"
|
|
"github.com/stretchr/testify/require"
|
|
|
|
"github.com/Tencent/WeKnora/cli/internal/cmdutil"
|
|
"github.com/Tencent/WeKnora/cli/internal/config"
|
|
"github.com/Tencent/WeKnora/cli/internal/iostreams"
|
|
"github.com/Tencent/WeKnora/cli/internal/prompt"
|
|
"github.com/Tencent/WeKnora/cli/internal/secrets"
|
|
"github.com/Tencent/WeKnora/cli/internal/testutil"
|
|
sdk "github.com/Tencent/WeKnora/client"
|
|
)
|
|
|
|
func TestNewCmdAuth_TreeShape(t *testing.T) {
|
|
cmd := NewCmdAuth(&cmdutil.Factory{})
|
|
assert.Equal(t, "auth", cmd.Use)
|
|
subs := map[string]*cobra.Command{}
|
|
for _, c := range cmd.Commands() {
|
|
subs[c.Use] = c
|
|
}
|
|
assert.Contains(t, subs, "login")
|
|
assert.Contains(t, subs, "status")
|
|
}
|
|
|
|
func TestNewCmdLogin_FlagsRegistered(t *testing.T) {
|
|
cmd := NewCmdLogin(&cmdutil.Factory{}, nil)
|
|
for _, name := range []string{"host", "context", "with-token", "json"} {
|
|
assert.NotNilf(t, cmd.Flags().Lookup(name), "flag %s missing", name)
|
|
}
|
|
}
|
|
|
|
func TestNewCmdLogin_InvokesRunF(t *testing.T) {
|
|
iostreams.SetForTest(t)
|
|
called := false
|
|
store := secrets.NewMemStore()
|
|
f := &cmdutil.Factory{
|
|
Secrets: func() (secrets.Store, error) { return store, nil },
|
|
}
|
|
cmd := NewCmdLogin(f, func(_ context.Context, opts *LoginOptions, _ *cmdutil.Factory, _ LoginService) error {
|
|
called = true
|
|
assert.Equal(t, "https://kb.example.com", opts.Host)
|
|
assert.True(t, opts.WithToken)
|
|
return nil
|
|
})
|
|
cmd.SetArgs([]string{"--host", "https://kb.example.com", "--with-token"})
|
|
require.NoError(t, cmd.Execute())
|
|
assert.True(t, called)
|
|
}
|
|
|
|
func TestLoginServiceFor(t *testing.T) {
|
|
assert.Nil(t, loginServiceFor(""))
|
|
assert.NotNil(t, loginServiceFor("https://x"))
|
|
}
|
|
|
|
func TestPersistAPIKey_WritesContext(t *testing.T) {
|
|
iostreams.SetForTest(t)
|
|
testutil.XDGTempDir(t)
|
|
store := secrets.NewMemStore()
|
|
f := &cmdutil.Factory{
|
|
Config: func() (*config.Config, error) { return config.Load() },
|
|
Prompter: func() prompt.Prompter { return prompt.AgentPrompter{} },
|
|
Secrets: func() (secrets.Store, error) { return store, nil },
|
|
}
|
|
opts := &LoginOptions{
|
|
Host: "https://kb.example.com",
|
|
Context: "ci",
|
|
APIKey: "sk-zzz",
|
|
}
|
|
require.NoError(t, persistAPIKey(opts, f))
|
|
v, _ := store.Get("ci", "api_key")
|
|
assert.Equal(t, "sk-zzz", v)
|
|
cfg, _ := f.Config()
|
|
assert.Equal(t, "ci", cfg.CurrentContext)
|
|
assert.Equal(t, "https://kb.example.com", cfg.Contexts["ci"].Host)
|
|
// APIKeyRef should be the mem:// URI from the store's Ref method.
|
|
assert.Equal(t, "mem://ci/api_key", cfg.Contexts["ci"].APIKeyRef)
|
|
}
|
|
|
|
func TestPersistJWT_StoresBothTokens(t *testing.T) {
|
|
iostreams.SetForTest(t)
|
|
testutil.XDGTempDir(t)
|
|
store := secrets.NewMemStore()
|
|
f := &cmdutil.Factory{
|
|
Config: func() (*config.Config, error) { return config.Load() },
|
|
Prompter: func() prompt.Prompter { return prompt.AgentPrompter{} },
|
|
Secrets: func() (secrets.Store, error) { return store, nil },
|
|
}
|
|
opts := &LoginOptions{
|
|
Host: "https://x",
|
|
Context: "p",
|
|
JSONOut: true,
|
|
}
|
|
resp := &sdk.LoginResponse{
|
|
Token: "jwt-acc",
|
|
RefreshToken: "jwt-ref",
|
|
User: &sdk.AuthUser{Email: "a@b.c", TenantID: 7},
|
|
}
|
|
require.NoError(t, persistJWT(opts, f, resp))
|
|
a, _ := store.Get("p", "access")
|
|
r, _ := store.Get("p", "refresh")
|
|
assert.Equal(t, "jwt-acc", a)
|
|
assert.Equal(t, "jwt-ref", r)
|
|
}
|
|
|
|
func TestReadStdinTrimmed(t *testing.T) {
|
|
out, err := readStdinTrimmed(strings.NewReader(" hello \n"))
|
|
require.NoError(t, err)
|
|
assert.Equal(t, "hello", out)
|
|
|
|
out, err = readStdinTrimmed(nil)
|
|
require.NoError(t, err)
|
|
assert.Equal(t, "", out)
|
|
}
|