feat: Go后端LDAP真实对接 — AES-256-GCM密码加解密 + 登录LDAP fallback
- 新增 crypto.go: AES-256-GCM 加解密，与 Python backend 兼容 - auth.go: Login 添加 LDAP fallback（本地优先→LDAP绑定→自动创建本地用户） - ldap.go: 实现真实 LDAP 连接/用户搜索/密码验证/OU列表/用户列表 - 所有 LDAP 操作解密 admin_password 后使用 - 新增/更新密码存储时加密 - router.go: 补充 delete-user 路由 - 添加 go-ldap/v3 依赖
This commit is contained in:
logan committed
1 parent
622923821b
commit
88e5f4e7ee
71 files changed
+20390
-64
No files matched your search
@@ -0,0 +1,241 @@
|
||||
"""Schema 漂移检测 + 连接池管理 API 测试。"""
|
||||
import pytest
|
||||
from unittest.mock import patch, AsyncMock, MagicMock
|
||||
from httpx import AsyncClient
|
||||
|
||||
from tests.conftest import auth_header
|
||||
|
||||
|
||||
# ════════════════════════════════════════════════════════════════════
|
||||
# Schema Drift Tests
|
||||
# ════════════════════════════════════════════════════════════════════
|
||||
|
||||
|
||||
class TestSchemaDriftCapture:
|
||||
"""捕获 Schema 快照。"""
|
||||
|
||||
@pytest.mark.asyncio
|
||||
async def test_capture_success(self, client, admin_token, test_instance):
|
||||
with patch("app.api.v1.endpoints.schema_drift.SchemaDriftDetector") as MockDet:
|
||||
instance_mock = MagicMock()
|
||||
instance_mock.capture_snapshot = AsyncMock(return_value=[{"col": "id"}])
|
||||
instance_mock.save_baseline = AsyncMock()
|
||||
MockDet.return_value = instance_mock
|
||||
|
||||
resp = await client.post(
|
||||
f"/api/v1/schema-drift/instances/{test_instance.id}/capture",
|
||||
headers=auth_header(admin_token),
|
||||
)
|
||||
assert resp.status_code == 200
|
||||
body = resp.json()
|
||||
assert body["message"] == "Schema 快照已捕获"
|
||||
assert body["total_columns"] == 1
|
||||
|
||||
@pytest.mark.asyncio
|
||||
async def test_capture_instance_not_found(self, client, admin_token):
|
||||
resp = await client.post(
|
||||
"/api/v1/schema-drift/instances/9999/capture",
|
||||
headers=auth_header(admin_token),
|
||||
)
|
||||
assert resp.status_code == 404
|
||||
|
||||
@pytest.mark.asyncio
|
||||
async def test_capture_developer_forbidden(self, client, developer_token, test_instance):
|
||||
resp = await client.post(
|
||||
f"/api/v1/schema-drift/instances/{test_instance.id}/capture",
|
||||
headers=auth_header(developer_token),
|
||||
)
|
||||
assert resp.status_code == 403
|
||||
|
||||
@pytest.mark.asyncio
|
||||
async def test_capture_dba_allowed(self, client, dba_token, test_instance):
|
||||
with patch("app.api.v1.endpoints.schema_drift.SchemaDriftDetector") as MockDet:
|
||||
instance_mock = MagicMock()
|
||||
instance_mock.capture_snapshot = AsyncMock(return_value=[])
|
||||
instance_mock.save_baseline = AsyncMock()
|
||||
MockDet.return_value = instance_mock
|
||||
|
||||
resp = await client.post(
|
||||
f"/api/v1/schema-drift/instances/{test_instance.id}/capture",
|
||||
headers=auth_header(dba_token),
|
||||
)
|
||||
assert resp.status_code == 200
|
||||
|
||||
|
||||
class TestSchemaDriftCheck:
|
||||
"""检测 Schema 漂移。"""
|
||||
|
||||
@pytest.mark.asyncio
|
||||
async def test_check_success(self, client, admin_token, test_instance):
|
||||
with patch("app.api.v1.endpoints.schema_drift.SchemaDriftDetector") as MockDet:
|
||||
report = MagicMock()
|
||||
report.to_dict.return_value = {"drifted": False, "changes": []}
|
||||
instance_mock = MagicMock()
|
||||
instance_mock.detect_drift = AsyncMock(return_value=report)
|
||||
MockDet.return_value = instance_mock
|
||||
|
||||
resp = await client.post(
|
||||
f"/api/v1/schema-drift/instances/{test_instance.id}/check",
|
||||
headers=auth_header(admin_token),
|
||||
)
|
||||
assert resp.status_code == 200
|
||||
body = resp.json()
|
||||
assert body["drifted"] is False
|
||||
|
||||
@pytest.mark.asyncio
|
||||
async def test_check_instance_not_found(self, client, admin_token):
|
||||
resp = await client.post(
|
||||
"/api/v1/schema-drift/instances/9999/check",
|
||||
headers=auth_header(admin_token),
|
||||
)
|
||||
assert resp.status_code == 404
|
||||
|
||||
|
||||
class TestSchemaHistory:
|
||||
|
||||
@pytest.mark.asyncio
|
||||
async def test_history_returns_data(self, client, admin_token, test_instance):
|
||||
resp = await client.get(
|
||||
f"/api/v1/schema-drift/instances/{test_instance.id}/history",
|
||||
headers=auth_header(admin_token),
|
||||
)
|
||||
assert resp.status_code == 200
|
||||
body = resp.json()
|
||||
assert body["instance_id"] == test_instance.id
|
||||
assert "history" in body
|
||||
|
||||
|
||||
# ════════════════════════════════════════════════════════════════════
|
||||
# Connection Pool Tests
|
||||
# ════════════════════════════════════════════════════════════════════
|
||||
|
||||
|
||||
class TestPoolStats:
|
||||
|
||||
@pytest.mark.asyncio
|
||||
async def test_stats_not_initialized(self, client, admin_token, test_instance):
|
||||
with patch("app.api.v1.endpoints.pool.get_pool_manager") as mock_pm:
|
||||
manager = MagicMock()
|
||||
manager.get_pool_stats.return_value = None
|
||||
mock_pm.return_value = manager
|
||||
|
||||
resp = await client.get(
|
||||
f"/api/v1/pools/instances/{test_instance.id}/stats",
|
||||
headers=auth_header(admin_token),
|
||||
)
|
||||
assert resp.status_code == 200
|
||||
body = resp.json()
|
||||
assert body["status"] == "not_initialized"
|
||||
|
||||
@pytest.mark.asyncio
|
||||
async def test_stats_with_data(self, client, admin_token, test_instance):
|
||||
with patch("app.api.v1.endpoints.pool.get_pool_manager") as mock_pm:
|
||||
stats = MagicMock()
|
||||
stats.to_dict.return_value = {"active": 2, "idle": 3}
|
||||
manager = MagicMock()
|
||||
manager.get_pool_stats.return_value = stats
|
||||
mock_pm.return_value = manager
|
||||
|
||||
resp = await client.get(
|
||||
f"/api/v1/pools/instances/{test_instance.id}/stats",
|
||||
headers=auth_header(admin_token),
|
||||
)
|
||||
assert resp.status_code == 200
|
||||
assert resp.json()["active"] == 2
|
||||
|
||||
@pytest.mark.asyncio
|
||||
async def test_stats_instance_not_found(self, client, admin_token):
|
||||
resp = await client.get(
|
||||
"/api/v1/pools/instances/9999/stats",
|
||||
headers=auth_header(admin_token),
|
||||
)
|
||||
assert resp.status_code == 404
|
||||
|
||||
@pytest.mark.asyncio
|
||||
async def test_stats_developer_forbidden(self, client, developer_token, test_instance):
|
||||
resp = await client.get(
|
||||
f"/api/v1/pools/instances/{test_instance.id}/stats",
|
||||
headers=auth_header(developer_token),
|
||||
)
|
||||
assert resp.status_code == 403
|
||||
|
||||
|
||||
class TestPoolReset:
|
||||
|
||||
@pytest.mark.asyncio
|
||||
async def test_reset_success(self, client, admin_token, test_instance):
|
||||
with patch("app.api.v1.endpoints.pool.get_pool_manager") as mock_pm:
|
||||
manager = MagicMock()
|
||||
manager.reset_pool = AsyncMock()
|
||||
mock_pm.return_value = manager
|
||||
|
||||
resp = await client.post(
|
||||
f"/api/v1/pools/instances/{test_instance.id}/reset",
|
||||
headers=auth_header(admin_token),
|
||||
)
|
||||
assert resp.status_code == 200
|
||||
assert "已重置" in resp.json()["message"]
|
||||
|
||||
@pytest.mark.asyncio
|
||||
async def test_reset_dba_allowed(self, client, dba_token, test_instance):
|
||||
with patch("app.api.v1.endpoints.pool.get_pool_manager") as mock_pm:
|
||||
manager = MagicMock()
|
||||
manager.reset_pool = AsyncMock()
|
||||
mock_pm.return_value = manager
|
||||
|
||||
resp = await client.post(
|
||||
f"/api/v1/pools/instances/{test_instance.id}/reset",
|
||||
headers=auth_header(dba_token),
|
||||
)
|
||||
assert resp.status_code == 200
|
||||
|
||||
@pytest.mark.asyncio
|
||||
async def test_reset_developer_forbidden(self, client, developer_token, test_instance):
|
||||
resp = await client.post(
|
||||
f"/api/v1/pools/instances/{test_instance.id}/reset",
|
||||
headers=auth_header(developer_token),
|
||||
)
|
||||
assert resp.status_code == 403
|
||||
|
||||
|
||||
class TestPoolsOverview:
|
||||
|
||||
@pytest.mark.asyncio
|
||||
async def test_overview_empty(self, client, admin_token):
|
||||
with patch("app.api.v1.endpoints.pool.get_pool_manager") as mock_pm:
|
||||
manager = MagicMock()
|
||||
manager.get_all_stats.return_value = {}
|
||||
mock_pm.return_value = manager
|
||||
|
||||
resp = await client.get(
|
||||
"/api/v1/pools/overview",
|
||||
headers=auth_header(admin_token),
|
||||
)
|
||||
assert resp.status_code == 200
|
||||
assert resp.json()["total_pools"] == 0
|
||||
|
||||
@pytest.mark.asyncio
|
||||
async def test_overview_with_pools(self, client, admin_token):
|
||||
with patch("app.api.v1.endpoints.pool.get_pool_manager") as mock_pm:
|
||||
stats = MagicMock()
|
||||
stats.to_dict.return_value = {"instance_id": 1, "active": 1}
|
||||
manager = MagicMock()
|
||||
manager.get_all_stats.return_value = {1: stats}
|
||||
mock_pm.return_value = manager
|
||||
|
||||
resp = await client.get(
|
||||
"/api/v1/pools/overview",
|
||||
headers=auth_header(admin_token),
|
||||
)
|
||||
assert resp.status_code == 200
|
||||
body = resp.json()
|
||||
assert body["total_pools"] == 1
|
||||
assert len(body["pools"]) == 1
|
||||
|
||||
@pytest.mark.asyncio
|
||||
async def test_overview_guest_forbidden(self, client, guest_token):
|
||||
resp = await client.get(
|
||||
"/api/v1/pools/overview",
|
||||
headers=auth_header(guest_token),
|
||||
)
|
||||
assert resp.status_code == 403
|
||||
Reference in new issue
Block a user