Files
opsxsql/tests/test_instance_fields.py
T
logan 88e5f4e7ee feat: Go后端LDAP真实对接 — AES-256-GCM密码加解密 + 登录LDAP fallback
- 新增 crypto.go: AES-256-GCM 加解密,与 Python backend 兼容
- auth.go: Login 添加 LDAP fallback(本地优先→LDAP绑定→自动创建本地用户)
- ldap.go: 实现真实 LDAP 连接/用户搜索/密码验证/OU列表/用户列表
- 所有 LDAP 操作解密 admin_password 后使用
- 新增/更新密码存储时加密
- router.go: 补充 delete-user 路由
- 添加 go-ldap/v3 依赖
2026-05-25 23:32:15 +08:00

145 lines
4.8 KiB
Python

"""测试 Instance 新增字段:access_mode, workflow_id, excluded_databases, mask_fields"""
import pytest
from tests.conftest import auth_header
@pytest.mark.asyncio
async def test_create_instance_with_full_fields(client, admin_token):
"""创建数据源:完整字段"""
res = await client.post("/api/v1/instances", json={
"name": "prod-mysql-只读库",
"db_type": "mysql",
"host": "mysql.example.com",
"port": 3306,
"username": "admin",
"password": "***",
"env": "production",
"access_mode": "read",
"excluded_databases": ["sys", "information_schema", "mysql"],
"mask_fields": [
{"table": "users", "field": "phone", "rule": "mask"},
{"table": "users", "field": "id_card", "rule": "hide"},
],
}, headers=auth_header(admin_token))
assert res.status_code == 201
data = res.json()
assert data["access_mode"] == "read"
assert data["workflow_id"] is None
assert data["excluded_databases"] == ["sys", "information_schema", "mysql"]
assert len(data["mask_fields"]) == 2
assert data["mask_fields"][0]["table"] == "users"
@pytest.mark.asyncio
async def test_create_instance_default_access_mode(client, admin_token):
"""默认连接模式为 readwrite"""
res = await client.post("/api/v1/instances", json={
"name": "test-default",
"db_type": "mysql",
"host": "127.0.0.1",
"port": 3306,
"username": "root",
"password": "***",
}, headers=auth_header(admin_token))
assert res.status_code == 201
assert res.json()["access_mode"] == "readwrite"
@pytest.mark.asyncio
async def test_list_instance_includes_new_fields(client, admin_token):
"""列表接口返回新字段"""
await client.post("/api/v1/instances", json={
"name": "list-test",
"db_type": "postgres",
"host": "10.0.0.1",
"port": 5432,
"username": "postgres",
"password": "***",
"access_mode": "write",
}, headers=auth_header(admin_token))
res = await client.get("/api/v1/instances", headers=auth_header(admin_token))
assert res.status_code == 200
items = res.json()
found = [i for i in items if i["name"] == "list-test"]
assert len(found) == 1
assert found[0]["access_mode"] == "write"
assert "workflow_id" in found[0]
@pytest.mark.asyncio
async def test_update_instance_fields(client, admin_token):
"""更新字段"""
create = await client.post("/api/v1/instances", json={
"name": "update-fields",
"db_type": "mysql",
"host": "127.0.0.1",
"port": 3306,
"username": "root",
"password": "***",
}, headers=auth_header(admin_token))
iid = create.json()["id"]
res = await client.put(f"/api/v1/instances/{iid}", json={
"access_mode": "read",
"excluded_databases": ["test_db"],
}, headers=auth_header(admin_token))
assert res.status_code == 200
data = res.json()
assert data["access_mode"] == "read"
assert data["excluded_databases"] == ["test_db"]
@pytest.mark.asyncio
async def test_instance_null_json_fields(client, admin_token):
"""不传新字段时,返回 null"""
res = await client.post("/api/v1/instances", json={
"name": "minimal",
"db_type": "mysql",
"host": "127.0.0.1",
"port": 3306,
"username": "root",
"password": "***",
}, headers=auth_header(admin_token))
assert res.status_code == 201
data = res.json()
assert data["workflow_id"] is None
assert data["excluded_databases"] is None
assert data["mask_fields"] is None
@pytest.mark.asyncio
async def test_instance_workflow_id_association(client, admin_token):
"""数据源关联审批流程"""
# 创建 workflow
wf_res = await client.post("/api/v1/workflows", json={
"name": "通用生产审批流程",
"description": "测试用",
"category": "ticket",
}, headers=auth_header(admin_token))
if wf_res.status_code == 201:
wf_id = wf_res.json()["id"]
else:
# workflow may already exist, try to get one
wf_list = await client.get("/api/v1/workflows", headers=auth_header(admin_token))
workflows = wf_list.json()
wf_id = workflows[0]["id"] if workflows else None
if not wf_id:
pytest.skip("No workflow available")
# 创建带 workflow_id 的实例
res = await client.post("/api/v1/instances", json={
"name": "wf-instance",
"db_type": "mysql",
"host": "127.0.0.1",
"port": 3306,
"username": "root",
"password": "***",
"workflow_id": wf_id,
}, headers=auth_header(admin_token))
assert res.status_code == 201
data = res.json()
assert data["workflow_id"] == wf_id
assert data["workflow_name"] is not None