214 lines
9.8 KiB
Go
214 lines
9.8 KiB
Go
package main
|
|
|
|
import (
|
|
"encoding/json"
|
|
"fmt"
|
|
"net/http"
|
|
"net/http/httptest"
|
|
"path/filepath"
|
|
"strconv"
|
|
"strings"
|
|
"testing"
|
|
|
|
"github.com/gin-gonic/gin"
|
|
"github.com/glebarez/sqlite"
|
|
"gorm.io/gorm"
|
|
businessbiz "kra/internal/biz/business"
|
|
"kra/internal/biz/system"
|
|
businessdata "kra/internal/data/business"
|
|
systemdata "kra/internal/data/system"
|
|
"kra/internal/server/handler"
|
|
"kra/internal/server/router"
|
|
businessservice "kra/internal/service/business"
|
|
)
|
|
|
|
func TestAlertRecordHTTPCompleteWorkflowAndVisibility(t *testing.T) {
|
|
db, err := gorm.Open(sqlite.Open(filepath.Join(t.TempDir(), "records.db")), &gorm.Config{})
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
pool, _ := db.DB()
|
|
t.Cleanup(func() { _ = pool.Close() })
|
|
for _, step := range append(systemdata.Migrations(), businessdata.Migrations()...) {
|
|
if err := step.Migrate(db); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
}
|
|
for _, sql := range []string{
|
|
"INSERT INTO sys_users(id,uuid,username,level,parent_id,id_path,enable) VALUES(1,'root','admin',0,0,'0',1),(7,'owner','owner',1,0,'0',1),(8,'child','child',2,7,'0,7',1),(9,'leaf','leaf',3,8,'0,7,8',1),(10,'sibling','sibling',2,7,'0,7',1),(99,'other','other',1,0,'0',1)",
|
|
"CREATE TABLE tab_promote(id INTEGER,source_db TEXT,busier_id INTEGER,promote_level INTEGER,status INTEGER)",
|
|
"INSERT INTO tab_promote VALUES(100,'lx',14,1,0),(100,'hw',14,1,1),(100,'yq',14,1,1)",
|
|
"INSERT INTO sys_user_bind_platform(user_id,source_db,platform_busier_id,status) VALUES(9,'lx',14,'0'),(10,'hw',14,'0'),(99,'yq',14,'0')",
|
|
"INSERT INTO sys_alert_record(id,platform_code,target_promote_id,business_id,rule_name,status,created_at,updated_at) VALUES(9007199254740993,'lx',100,7,'目标规则',1,'2026-11-03 08:00:00','2026-11-03 08:00:00'),(2,'hw',100,7,'平级规则',1,'2026-11-03 08:00:00','2026-11-03 08:00:00'),(3,'lx',100,99,'归属错误',1,'2026-11-03 08:00:00','2026-11-03 08:00:00'),(4,'yq',100,99,'其他规则',1,'2026-11-03 08:00:00','2026-11-03 08:00:00'),(5,'lx',100,7,'关闭规则',5,'2026-11-03 08:00:00','2026-11-03 08:00:00'),(6,'lx',100,7,'待审规则',3,'2026-11-03 08:00:00','2026-11-03 08:00:00')",
|
|
"ALTER TABLE tab_promote ADD COLUMN account TEXT DEFAULT '测试渠道'",
|
|
"INSERT INTO media_file_upload_and_downloads(id,url) VALUES(1,'/files/one.png'),(2,'/files/two.png')",
|
|
} {
|
|
if err := db.Exec(sql).Error; err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
}
|
|
provider := businessHTTPData{db}
|
|
accounts := businessbiz.NewAccountUsecase(businessdata.NewAccountRepo(provider))
|
|
service := businessservice.NewAlertRecordService(businessbiz.NewAlertRecordUsecase(businessdata.NewAlertRecordRepo(provider), accounts))
|
|
engine := gin.New()
|
|
engine.Use(func(c *gin.Context) {
|
|
id, _ := strconv.ParseUint(c.GetHeader("X-Test-User"), 10, 64)
|
|
authority := uint(901)
|
|
if id == 1 {
|
|
authority = 888
|
|
}
|
|
c.Request = c.Request.WithContext(system.NewActorContext(c.Request.Context(), system.Actor{UserID: uint(id), AuthorityID: authority}))
|
|
c.Next()
|
|
})
|
|
router.RegisterAlertRecord(engine.Group(""), handler.NewAlertRecord(service))
|
|
router.RegisterAlertGovernance(engine.Group(""), handler.NewAlertGovernance(businessservice.NewAlertGovernanceService(businessbiz.NewAlertGovernanceUsecase(businessdata.NewAlertGovernanceRepo(provider), accounts))))
|
|
server := httptest.NewServer(engine)
|
|
defer server.Close()
|
|
call := func(user int, method, path, body string, expected int) map[string]any {
|
|
t.Helper()
|
|
req, err := http.NewRequest(method, server.URL+path, strings.NewReader(body))
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
req.Header.Set("Content-Type", "application/json")
|
|
req.Header.Set("X-Test-User", strconv.Itoa(user))
|
|
response, err := server.Client().Do(req)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
defer response.Body.Close()
|
|
var result map[string]any
|
|
if err := json.NewDecoder(response.Body).Decode(&result); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if result["code"] != float64(expected) {
|
|
t.Fatalf("%s %s 用户%d 响应错误: %+v", method, path, user, result)
|
|
}
|
|
return result
|
|
}
|
|
list := func(user int, query string, total int) map[string]any {
|
|
t.Helper()
|
|
data := call(user, "GET", "/sw/alertRecord/list"+query, "", 0)["data"].(map[string]any)
|
|
if data["pageData"].(map[string]any)["total"] != float64(total) {
|
|
t.Fatalf("列表范围错误: %+v", data)
|
|
}
|
|
return data
|
|
}
|
|
list(1, "", 6)
|
|
list(7, "", 4)
|
|
platforms := call(8, "GET", "/sw/alertRecord/platforms", "", 0)["data"].([]any)
|
|
if len(platforms) != 1 || platforms[0] != "lx" {
|
|
t.Fatal("平台下拉必须按当前可见绑定过滤")
|
|
}
|
|
list(8, "", 3)
|
|
list(9, "", 3)
|
|
list(7, "?businessId=8", 3)
|
|
list(8, "?businessId=99", 0)
|
|
list(1, "?businessId=8", 4)
|
|
list(8, "?platformCodes=hw", 0)
|
|
data := list(8, "?status=1&ruleName=%E7%9B%AE%E6%A0%87", 1)
|
|
if len(data["statusCount"].(map[string]any)) != 1 {
|
|
t.Fatal("汇总应继承名称筛选")
|
|
}
|
|
const id = "9007199254740993"
|
|
detailPath := "/sw/alertRecord/detail/" + id
|
|
data = call(9, "GET", detailPath, "", 0)["data"].(map[string]any)
|
|
if data["canAudit"] != false || data["alertRecord"].(map[string]any)["id"] != id {
|
|
t.Fatal("详情审核权限或大 ID 精度错误")
|
|
}
|
|
call(8, "GET", "/sw/alertRecord/detail/2", "", 7)
|
|
call(8, "GET", "/sw/alertRecord/detail/3", "", 7)
|
|
call(99, "GET", detailPath, "", 7)
|
|
body := `{"alertId":"` + id + `"}`
|
|
process := func(user int, action, note string, code int) {
|
|
payload := body
|
|
if note != "" {
|
|
encoded, _ := json.Marshal(note)
|
|
payload = fmt.Sprintf(`{"alertId":"%s","note":%s}`, id, encoded)
|
|
}
|
|
call(user, "POST", "/sw/alertRecord/"+action, payload, code)
|
|
}
|
|
process(9, "submitAudit", "", 7)
|
|
process(9, "startProcess", "开始排查", 0)
|
|
process(9, "startProcess", "重复开始", 7)
|
|
process(9, "submitAudit", "", 0)
|
|
process(1, "approve", "超管不能绕过等级", 7)
|
|
process(8, "approve", "", 7)
|
|
process(9, "approve", "", 7)
|
|
process(7, "reject", "补充说明", 0)
|
|
process(9, "reProcess", "", 0)
|
|
process(9, "submitAudit", "", 0)
|
|
process(7, "approve", "", 0)
|
|
process(9, "reProcess", "", 7)
|
|
data = call(7, "GET", detailPath, "", 0)["data"].(map[string]any)
|
|
if data["canAudit"] != true || data["alertRecord"].(map[string]any)["status"] != float64(5) || len(data["operationLogs"].([]any)) != 8 {
|
|
t.Fatalf("完整处理审核日志错误: %+v", data)
|
|
}
|
|
call(9, "POST", "/sw/alertRecord/addNote", `{"alertId":"`+id+`","noteContent":" ","attachmentIds":[1]}`, 7)
|
|
call(9, "POST", "/sw/alertRecord/addNote", `{"alertId":"`+id+`","noteContent":"关闭后补充","attachmentIds":[2,"1"]}`, 7)
|
|
call(9, "POST", "/sw/alertRecord/addNote", `{"alertId":"6","noteContent":"待审核补充","attachmentIds":[2,"1"]}`, 0)
|
|
data = call(9, "GET", "/sw/alertRecord/detail/6", "", 0)["data"].(map[string]any)
|
|
logs := data["operationLogs"].([]any)
|
|
latest := logs[0].(map[string]any)
|
|
if len(logs) != 1 || latest["attachments"].([]any)[0] != "/files/two.png" || data["alertRecord"].(map[string]any)["status"] != float64(3) {
|
|
t.Fatalf("独立备注或附件错误: %+v", data)
|
|
}
|
|
call(9, "POST", "/sw/alertRecord/ignore", `{"ids":["6"]}`, 7)
|
|
call(7, "POST", "/sw/alertRecord/ignore", `{"ids":["6","4"]}`, 7)
|
|
data = call(7, "GET", "/sw/alertRecord/detail/6", "", 0)["data"].(map[string]any)
|
|
if data["alertRecord"].(map[string]any)["status"] != float64(3) {
|
|
t.Fatal("混入越权 ID 时不能部分忽略")
|
|
}
|
|
call(7, "POST", "/sw/alertRecord/ignore", `{"ids":["6","6"]}`, 0)
|
|
call(7, "POST", "/sw/alertRecord/ignore", `{"ids":["6"]}`, 0)
|
|
data = call(7, "GET", "/sw/alertRecord/detail/6", "", 0)["data"].(map[string]any)
|
|
if data["alertRecord"].(map[string]any)["status"] != float64(6) || len(data["operationLogs"].([]any)) != 2 {
|
|
t.Fatal("忽略必须幂等留痕")
|
|
}
|
|
|
|
call(99, "POST", "/sw/alertRecord/addNote", `{"alertId":"`+id+`","noteContent":"越权"}`, 7)
|
|
call(1, "POST", "/sw/alertRecord/startProcess", `{"alertId":0}`, 7)
|
|
call(9, "PUT", "/sw/alertRule/gap", `{"enabled":true,"days":7}`, 7)
|
|
call(7, "PUT", "/sw/alertRule/gap", `{"enabled":true,"days":0}`, 7)
|
|
call(7, "PUT", "/sw/alertRule/gap", `{"enabled":true,"days":1000}`, 0)
|
|
gap := call(9, "GET", "/sw/alertRule/gap", "", 0)["data"].(map[string]any)
|
|
if gap["days"] != float64(1000) || gap["enabled"] != true {
|
|
t.Fatal("下级应看到其一级商务设置的统一间隔")
|
|
}
|
|
call(9, "GET", "/sw/alertExemption/candidates?keyword=test", "", 7)
|
|
choices := call(7, "GET", "/sw/alertExemption/candidates", "", 0)["data"].([]any)
|
|
if len(choices) != 2 {
|
|
t.Fatalf("候选渠道越权或丢失: %+v", choices)
|
|
}
|
|
for _, choice := range choices {
|
|
if _, ok := choice.(map[string]any)["id"].(string); !ok {
|
|
t.Fatal("渠道 ID 应保持字符串精度")
|
|
}
|
|
}
|
|
call(9, "POST", "/sw/alertExemption/add", `{"sourceDb":"lx","promoteId":"100","reason":"测试"}`, 7)
|
|
call(7, "POST", "/sw/alertExemption/add", `{"sourceDb":"yq","promoteId":"100","reason":"越权"}`, 7)
|
|
call(7, "POST", "/sw/alertExemption/add", `{"sourceDb":"lx","promoteId":"100","reason":"测试免预警"}`, 0)
|
|
call(7, "POST", "/sw/alertExemption/add", `{"sourceDb":"lx","promoteId":"100","reason":"重复"}`, 7)
|
|
call(9, "GET", "/sw/alertExemption/list", "", 7)
|
|
ex := call(7, "GET", "/sw/alertExemption/list?active=true", "", 0)["data"].(map[string]any)
|
|
entry := ex["rows"].([]any)[0].(map[string]any)
|
|
eid := entry["id"].(string)
|
|
call(99, "PUT", "/sw/alertExemption/remove/"+eid, "", 7)
|
|
call(7, "PUT", "/sw/alertExemption/remove/"+eid, "", 0)
|
|
ex = call(7, "GET", "/sw/alertExemption/list?active=false", "", 0)["data"].(map[string]any)
|
|
entry = ex["rows"].([]any)[0].(map[string]any)
|
|
if entry["removedName"] != "owner" || entry["removeReason"] != "手动移出" || entry["reason"] != "测试免预警" {
|
|
t.Fatal("移出后应保留完整审计记录")
|
|
}
|
|
if err := db.Exec("DROP TABLE tab_promote").Error; err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
data = list(8, "", 0)
|
|
if data["available"] != false {
|
|
t.Fatal("缺渠道表应报告未知范围")
|
|
}
|
|
call(8, "GET", detailPath, "", 7)
|
|
process(9, "startProcess", "", 7)
|
|
list(1, "", 6)
|
|
}
|