zheromiku
dcdc8d1ddd
全栈知识治理平台首次入库（P1-P10 + 发布链路模拟验证闭环）： - 治理核心：源目录/变更集/人工审核/发布批次/发布执行（fail-closed 闸口） - 测试通道：WeKnora 测试 KB 上传/轮询/验收；poll 完成时写入 parser_generation/index_generation，修复 manual/seed 路径发布闸口永久拦截 - 发布适配器 v071（本地 source=测试角色 / 云端 target=生产角色 模拟验证通过）： * ES 导出/导入 mapping 自适应（.keyword 子字段、可选 tenant_id） * OSS locator 支持嵌套 scheme；chunks.seq_id 由目标序列分配 * bundle 归档同身份重试原子替换；verifier 按 bundle chunk_type 计数 * 回滚 job payload 支持 prior_execution_id（strict 解码） - 三通道发布+回滚演练实测：publish 4/4 verified，检索命中， rollback 4/4 rolled_back，目标端 PG is_enabled=false、ES is_enabled=false - 前端 A·Data-console 风格全站统一，120 用例通过 - 门禁：go vet / go test 全包通过，gofmt 干净
69 lines
2.1 KiB
Go
69 lines
2.1 KiB
Go
package postgres
|
|
|
|
import (
|
|
"context"
|
|
"encoding/json"
|
|
"os"
|
|
"strings"
|
|
"testing"
|
|
"time"
|
|
|
|
"github.com/jackc/pgx/v5/pgxpool"
|
|
)
|
|
|
|
func TestListSourceConnectionsIntegrationOmitsSensitiveFields(t *testing.T) {
|
|
databaseURL := isolatedIntegrationDatabaseURL(t, os.Getenv("TEST_DATABASE_URL"))
|
|
if databaseURL == "" {
|
|
t.Skip("TEST_DATABASE_URL is not set")
|
|
}
|
|
ctx := context.Background()
|
|
pool, err := pgxpool.New(ctx, databaseURL)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
defer pool.Close()
|
|
if err := ApplyMigrations(ctx, pool); err != nil {
|
|
t.Fatalf("ApplyMigrations() error = %v", err)
|
|
}
|
|
now := time.Date(2026, 9, 6, 2, 0, 0, 0, time.UTC)
|
|
if _, err := pool.Exec(ctx, `
|
|
INSERT INTO source_connections (
|
|
id, source_type, name, base_url, secret_ref, enabled,
|
|
schedule, last_health, created_at, updated_at
|
|
) VALUES (
|
|
'conn-integration', 'alist', 'AList只读集成源',
|
|
'https://sensitive-origin.example', 'sensitive-secret-ref', TRUE,
|
|
'{"type":"daily"}'::jsonb, '{"status":"healthy","detail":"must-not-leak"}'::jsonb, $1, $1
|
|
)`, now); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if _, err := pool.Exec(ctx, `
|
|
INSERT INTO source_items (
|
|
id, source_connection_id, stable_external_id, canonical_uri_hash,
|
|
title, item_type, visibility, visibility_origin, source_change,
|
|
created_at, updated_at
|
|
) VALUES (
|
|
'item-integration', 'conn-integration', 'external-1', $2,
|
|
'Safe item', 'file', 'internal', 'configured_scope', 'unchanged', $1, $1
|
|
)`, now, strings.Repeat("a", 64)); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
|
|
page, err := NewStore(pool).ListSourceConnections(ctx)
|
|
if err != nil {
|
|
t.Fatalf("ListSourceConnections() error = %v", err)
|
|
}
|
|
if len(page.Items) != 1 || page.Items[0].ItemCount != 1 || !page.Items[0].ScheduleConfigured || page.Items[0].HealthStatus != "healthy" {
|
|
t.Fatalf("page = %#v", page)
|
|
}
|
|
encoded, err := json.Marshal(page)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
for _, forbidden := range []string{"sensitive-origin", "sensitive-secret-ref", "must-not-leak", "base_url", "secret_ref"} {
|
|
if strings.Contains(string(encoded), forbidden) {
|
|
t.Fatalf("projection leaked %q: %s", forbidden, encoded)
|
|
}
|
|
}
|
|
}
|