kra-oa/internal/biz/authentication_test.go

80 lines
2.6 KiB
Go

package biz
import (
"context"
"errors"
"testing"
"time"
"golang.org/x/crypto/bcrypt"
)
type authenticationUserRepo struct {
UserRepo
user *User
}
func (r *authenticationUserRepo) FindUserByUsername(context.Context, string) (*User, error) {
return r.user, nil
}
type authenticationSecurityRepo struct{ SecurityRepo }
func (*authenticationSecurityRepo) SecurityConfig(context.Context) (*SecurityConfig, error) {
return &SecurityConfig{CaptchaOpen: 2, CaptchaTimeout: 60}, nil
}
type authenticationCache struct{ activeErr error }
func (c *authenticationCache) Get(_ context.Context, key string) (string, bool, error) {
if key == "admin" {
return "", false, c.activeErr
}
return "", false, nil
}
func (*authenticationCache) Set(context.Context, string, string, time.Duration) error { return nil }
func (*authenticationCache) Delete(context.Context, string) error { return nil }
func (*authenticationCache) Increment(context.Context, string, time.Duration) (int64, error) {
return 1, nil
}
type authenticationSettings struct{ RuntimeSettings }
func (*authenticationSettings) UseMultipoint() bool { return true }
type authenticationIssuer struct{ TokenIssuer }
func (*authenticationIssuer) IssueToken(*User, uint, bool, time.Duration) (*IssuedToken, error) {
return &IssuedToken{Value: "token", ExpiresAt: time.Now().Add(time.Hour), TTL: time.Hour}, nil
}
type authenticationAudit struct {
AuditRecordRepo
logins []*LoginLog
}
func (a *authenticationAudit) RecordLogin(_ context.Context, value *LoginLog) error {
a.logins = append(a.logins, value)
return nil
}
func TestLoginRecordsSuccessBeforeMultipointCacheFailure(t *testing.T) {
hash, err := bcrypt.GenerateFromPassword([]byte("secret"), bcrypt.MinCost)
if err != nil {
t.Fatal(err)
}
users := NewUserUsecase(&authenticationUserRepo{user: &User{ID: 1, Username: "admin", Password: string(hash), AuthorityID: 888, Enable: 1}})
cacheErr := errors.New("cache unavailable")
security := NewSecurityUsecase(&authenticationSecurityRepo{}, &authenticationCache{activeErr: cacheErr}, &authenticationSettings{}, nil)
audit := &authenticationAudit{}
uc := NewAuthenticationUsecase(users, security, &authenticationIssuer{}, audit)
_, err = uc.Login(context.Background(), &LoginAttempt{Username: "admin", Password: "secret", IP: "127.0.0.1", Agent: "test"})
if !errors.Is(err, ErrLoginState) {
t.Fatalf("expected login-state failure, got %v", err)
}
if len(audit.logins) != 1 || !audit.logins[0].Status || audit.logins[0].ErrorMessage != "登录成功" || audit.logins[0].UserID != 1 {
t.Fatalf("expected successful login audit before cache failure, got %+v", audit.logins)
}
}