79 lines
2.4 KiB
Go
79 lines
2.4 KiB
Go
package data
|
|
|
|
import (
|
|
"io"
|
|
"log/slog"
|
|
"testing"
|
|
"time"
|
|
|
|
"github.com/glebarez/sqlite"
|
|
"gorm.io/gorm"
|
|
)
|
|
|
|
func openDataScopeAuditTestDB(t *testing.T, name string) *gorm.DB {
|
|
t.Helper()
|
|
db, err := gorm.Open(sqlite.Open("file:"+name+"?mode=memory&cache=shared"), &gorm.Config{})
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if err = db.AutoMigrate(&dataAccessLogPO{}); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
// The in-memory SQLite URI is intentionally named so the audit writer can
|
|
// use a second GORM handle. Clear rows left by a prior -count iteration so
|
|
// each test starts with an isolated logical database.
|
|
if err = db.Unscoped().Where("1 = 1").Delete(&dataAccessLogPO{}).Error; err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
return db
|
|
}
|
|
|
|
func waitForDataScopeAuditCount(t *testing.T, db *gorm.DB, want int64) {
|
|
t.Helper()
|
|
deadline := time.Now().Add(time.Second)
|
|
for time.Now().Before(deadline) {
|
|
var count int64
|
|
if err := db.Model(&dataAccessLogPO{}).Count(&count).Error; err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if count == want {
|
|
return
|
|
}
|
|
time.Sleep(5 * time.Millisecond)
|
|
}
|
|
t.Fatalf("data access log count did not reach %d", want)
|
|
}
|
|
|
|
func TestDataScopeAuditWriterFlushesBatch(t *testing.T) {
|
|
db := openDataScopeAuditTestDB(t, "data-scope-audit-batch")
|
|
d := &Data{gormDB: newReloadableDB(db, nil)}
|
|
w := newDataScopeAuditWriterWithOptions(d, slog.New(slog.NewTextHandler(io.Discard, nil)), 8, 2, time.Hour)
|
|
d.auditLog = w
|
|
t.Cleanup(w.Close)
|
|
|
|
d.enqueueDataScopeAudit(dataAccessLogPO{EventType: "no_identity", TargetTable: "example"})
|
|
d.enqueueDataScopeAudit(dataAccessLogPO{EventType: "blocked_write", TargetTable: "example"})
|
|
waitForDataScopeAuditCount(t, db, 2)
|
|
}
|
|
|
|
func TestDataScopeAuditWriterUsesReloadedDatabase(t *testing.T) {
|
|
first := openDataScopeAuditTestDB(t, "data-scope-audit-first")
|
|
second := openDataScopeAuditTestDB(t, "data-scope-audit-second")
|
|
d := &Data{gormDB: newReloadableDB(first, nil)}
|
|
w := newDataScopeAuditWriterWithOptions(d, slog.New(slog.NewTextHandler(io.Discard, nil)), 8, 100, 10*time.Millisecond)
|
|
d.auditLog = w
|
|
t.Cleanup(w.Close)
|
|
|
|
d.enqueueDataScopeAudit(dataAccessLogPO{EventType: "no_identity", TargetTable: "example"})
|
|
d.gormDB.replace(second, nil)
|
|
waitForDataScopeAuditCount(t, second, 1)
|
|
|
|
var firstCount int64
|
|
if err := first.Model(&dataAccessLogPO{}).Count(&firstCount).Error; err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if firstCount != 0 {
|
|
t.Fatalf("audit log was written to retired database: %d", firstCount)
|
|
}
|
|
}
|