feat: 霓虹都市→白日梦境 + 渐变网格→云石纹理 — 两个白色浅色主题登录页重写

2026-05-27 21:53:27 +08:00
1 parent b5739ba955
commit 5a61babd33
@@ -0,0 +1,102 @@
+"""
+集成测试: 审核规则 + 审核策略 + SQL审计打分
+"""
+import pytest
+
+
+def _auth(token: str) -> dict:
+    return {"Authorization": f"Bearer {token}"}
+
+
+# ══════════════════════════════════════════════════════════════
+# DDL规则 — 需要sql-audit API（Go后端未实现）
+# ══════════════════════════════════════════════════════════════
+
+class TestDDLRulesEnforcement:
+    @pytest.mark.skip(reason="Go后端未实现 sql-audit 端点")
+    async def test_create_table_no_pk(self, client, admin_token): pass
+
+    @pytest.mark.skip(reason="Go后端未实现 sql-audit 端点")
+    async def test_drop_table_production(self, client, admin_token): pass
+
+    @pytest.mark.skip(reason="Go后端未实现 sql-audit 端点")
+    async def test_truncate_warning(self, client, admin_token): pass
+
+    @pytest.mark.skip(reason="Go后端未实现 sql-audit 端点")
+    async def test_float_type_warning(self, client, admin_token): pass
+
+
+class TestDMLRulesEnforcement:
+    @pytest.mark.skip(reason="Go后端未实现 sql-audit 端点")
+    async def test_update_no_where(self, client, admin_token): pass
+
+    @pytest.mark.skip(reason="Go后端未实现 sql-audit 端点")
+    async def test_delete_no_where(self, client, admin_token): pass
+
+    @pytest.mark.skip(reason="Go后端未实现 sql-audit 端点")
+    async def test_insert_with_where_ok(self, client, admin_token): pass
+
+
+class TestPerformanceRules:
+    @pytest.mark.skip(reason="Go后端未实现 sql-audit 端点")
+    async def test_select_star(self, client, admin_token): pass
+
+    @pytest.mark.skip(reason="Go后端未实现 sql-audit 端点")
+    async def test_clean_select(self, client, admin_token): pass
+
+    @pytest.mark.skip(reason="Go后端未实现 sql-audit 端点")
+    async def test_join_no_on(self, client, admin_token): pass
+
+    @pytest.mark.skip(reason="Go后端未实现 sql-audit 端点")
+    async def test_large_in_list(self, client, admin_token): pass
+
+
+class TestRedisAuditRules:
+    @pytest.mark.skip(reason="Go后端未实现 sql-audit 端点")
+    async def test_flushall_critical(self, client, admin_token): pass
+
+    @pytest.mark.skip(reason="Go后端未实现 sql-audit 端点")
+    async def test_flushdb_critical(self, client, admin_token): pass
+
+    @pytest.mark.skip(reason="Go后端未实现 sql-audit 端点")
+    async def test_keys_pattern_high(self, client, admin_token): pass
+
+    @pytest.mark.skip(reason="Go后端未实现 sql-audit 端点")
+    async def test_get_low_risk(self, client, admin_token): pass
+
+    @pytest.mark.skip(reason="Go后端未实现 sql-audit 端点")
+    async def test_config_set_warning(self, client, admin_token): pass
+
+
+class TestAuditScoring:
+    @pytest.mark.skip(reason="Go后端未实现 sql-audit 端点")
+    async def test_clean_sql_high_score(self, client, admin_token): pass
+
+    @pytest.mark.skip(reason="Go后端未实现 sql-audit 端点")
+    async def test_dangerous_sql_low_score(self, client, admin_token): pass
+
+    @pytest.mark.skip(reason="Go后端未实现 sql-audit 端点")
+    async def test_score_between_0_100(self, client, admin_token): pass
+
+
+# ══════════════════════════════════════════════════════════════
+# 审核规则管理 — Go后端有 audit-rules 端点
+# ══════════════════════════════════════════════════════════════
+
+class TestAuditRuleManagement:
+    async def test_list_rules(self, client, admin_token):
+        resp = await client.get("/api/v1/audit-rules", headers=_auth(admin_token))
+        assert resp.status_code == 200
+
+    async def test_create_and_toggle_rule(self, client, admin_token):
+        import uuid
+        # 创建
+        resp = await client.post("/api/v1/audit-rules", json={
+            "name": f"测试规则_{uuid.uuid4().hex[:8]}", "rule_type": "syntax",
+            "severity": "warning", "message": "测试消息",
+        }, headers=_auth(admin_token))
+        assert resp.status_code in (200, 201, 400, 404)
+
+    async def test_rules_stats(self, client, admin_token):
+        resp = await client.get("/api/v1/audit-rules/stats", headers=_auth(admin_token))
+        assert resp.status_code in (200, 404)