Add projects

backend/internal/pluginhost/plugin_refresh_compat_executor_test.go

@@ -0,0 +1,176 @@
+package pluginhost
+
+import (
+	"context"
+	"net/http"
+	"strings"
+	"testing"
+
+	"github.com/router-for-me/CLIProxyAPI/v7/internal/config"
+	coreauth "github.com/router-for-me/CLIProxyAPI/v7/sdk/cliproxy/auth"
+	cliproxyexecutor "github.com/router-for-me/CLIProxyAPI/v7/sdk/cliproxy/executor"
+	"github.com/router-for-me/CLIProxyAPI/v7/sdk/pluginapi"
+)
+
+type stubCompatExecutor struct {
+	id           string
+	executeCalls int
+	refreshCalls int
+}
+
+func (e *stubCompatExecutor) Identifier() string { return e.id }
+
+func (e *stubCompatExecutor) Execute(context.Context, *coreauth.Auth, cliproxyexecutor.Request, cliproxyexecutor.Options) (cliproxyexecutor.Response, error) {
+	e.executeCalls++
+	return cliproxyexecutor.Response{Payload: []byte(`{"ok":true}`)}, nil
+}
+
+func (e *stubCompatExecutor) ExecuteStream(context.Context, *coreauth.Auth, cliproxyexecutor.Request, cliproxyexecutor.Options) (*cliproxyexecutor.StreamResult, error) {
+	return &cliproxyexecutor.StreamResult{}, nil
+}
+
+func (e *stubCompatExecutor) Refresh(_ context.Context, auth *coreauth.Auth) (*coreauth.Auth, error) {
+	e.refreshCalls++
+	return auth, nil
+}
+
+func (e *stubCompatExecutor) CountTokens(context.Context, *coreauth.Auth, cliproxyexecutor.Request, cliproxyexecutor.Options) (cliproxyexecutor.Response, error) {
+	return cliproxyexecutor.Response{}, nil
+}
+
+func (e *stubCompatExecutor) HttpRequest(context.Context, *coreauth.Auth, *http.Request) (*http.Response, error) {
+	return nil, nil
+}
+
+func (e *stubCompatExecutor) PrepareRequest(*http.Request, *coreauth.Auth) error {
+	return nil
+}
+
+func TestPluginRefreshCompatExecutorDelegatesExecuteAndRefresh(t *testing.T) {
+	refreshCalls := 0
+	host := newHostWithRecords(capabilityRecord{
+		id: "auth-plugin",
+		plugin: pluginapi.Plugin{
+			Capabilities: pluginapi.Capabilities{
+				AuthProvider: fakeAuthProvider{
+					identifier: "plugin-provider",
+					refreshAuth: func(ctx context.Context, req pluginapi.AuthRefreshRequest) (pluginapi.AuthRefreshResponse, error) {
+						refreshCalls++
+						if req.AuthID != "auth-1" || req.AuthProvider != "plugin-provider" {
+							t.Fatalf("RefreshAuth request = %#v", req)
+						}
+						return pluginapi.AuthRefreshResponse{
+							Auth: pluginapi.AuthData{
+								ID:       "auth-1",
+								Provider: "plugin-provider",
+								Metadata: map[string]any{
+									"access_token":  "new-token",
+									"refresh_token": "refresh-1",
+								},
+								Attributes: map[string]string{
+									"base_url": "https://compat.example.com/v1",
+								},
+							},
+						}, nil
+					},
+				},
+			},
+		},
+	})
+
+	inner := &stubCompatExecutor{id: "plugin-provider"}
+	wrapped := NewPluginRefreshCompatExecutor(inner, host, &config.Config{})
+	if wrapped == nil {
+		t.Fatal("NewPluginRefreshCompatExecutor() = nil")
+	}
+	if !IsPluginRefreshCompatExecutor(wrapped) {
+		t.Fatal("IsPluginRefreshCompatExecutor() = false, want true")
+	}
+	if got, ok := UnwrapPluginRefreshCompatExecutor(wrapped); !ok || got != inner {
+		t.Fatalf("UnwrapPluginRefreshCompatExecutor() = (%T, %v), want inner", got, ok)
+	}
+	if wrapped.Identifier() != "plugin-provider" {
+		t.Fatalf("Identifier() = %q, want plugin-provider", wrapped.Identifier())
+	}
+
+	auth := &coreauth.Auth{
+		ID:       "auth-1",
+		Provider: "plugin-provider",
+		Metadata: map[string]any{
+			"access_token":  "old-token",
+			"refresh_token": "refresh-1",
+		},
+		Attributes: map[string]string{
+			"base_url": "https://compat.example.com/v1",
+		},
+	}
+
+	if _, errExecute := wrapped.Execute(context.Background(), auth, cliproxyexecutor.Request{}, cliproxyexecutor.Options{}); errExecute != nil {
+		t.Fatalf("Execute() error = %v", errExecute)
+	}
+	if inner.executeCalls != 1 {
+		t.Fatalf("inner Execute calls = %d, want 1", inner.executeCalls)
+	}
+
+	refreshed, errRefresh := wrapped.Refresh(context.Background(), auth)
+	if errRefresh != nil {
+		t.Fatalf("Refresh() error = %v", errRefresh)
+	}
+	if refreshCalls != 1 {
+		t.Fatalf("plugin RefreshAuth calls = %d, want 1", refreshCalls)
+	}
+	if inner.refreshCalls != 0 {
+		t.Fatalf("inner Refresh calls = %d, want 0", inner.refreshCalls)
+	}
+	if refreshed == nil || refreshed.Metadata["access_token"] != "new-token" {
+		t.Fatalf("Refresh() auth = %#v, want updated access_token", refreshed)
+	}
+	if refreshed.Attributes["base_url"] != "https://compat.example.com/v1" {
+		t.Fatalf("Refresh() base_url = %q, want preserved", refreshed.Attributes["base_url"])
+	}
+}
+
+func TestPluginRefreshCompatExecutorErrorsWhenRefreshUnavailable(t *testing.T) {
+	inner := &stubCompatExecutor{id: "plugin-provider"}
+	wrapped := NewPluginRefreshCompatExecutor(inner, New(), &config.Config{})
+	auth := &coreauth.Auth{
+		ID:       "auth-1",
+		Provider: "plugin-provider",
+		Metadata: map[string]any{
+			"access_token":  "old-token",
+			"refresh_token": "refresh-1",
+		},
+	}
+
+	_, errRefresh := wrapped.Refresh(context.Background(), auth)
+	if errRefresh == nil {
+		t.Fatal("Refresh() error = nil, want unavailable plugin refresh error")
+	}
+	if !strings.Contains(errRefresh.Error(), "plugin auth provider refresh is unavailable") {
+		t.Fatalf("Refresh() error = %v, want unavailable message", errRefresh)
+	}
+	if inner.refreshCalls != 0 {
+		t.Fatalf("inner Refresh calls = %d, want 0", inner.refreshCalls)
+	}
+}
+
+func TestPluginRefreshCompatExecutorNoOpForAPIKeyAuth(t *testing.T) {
+	inner := &stubCompatExecutor{id: "plugin-provider"}
+	wrapped := NewPluginRefreshCompatExecutor(inner, New(), &config.Config{})
+	auth := &coreauth.Auth{
+		ID:       "auth-1",
+		Provider: "plugin-provider",
+		Attributes: map[string]string{
+			"api_key":  "sk-test",
+			"base_url": "https://compat.example.com/v1",
+		},
+	}
+
+	refreshed, errRefresh := wrapped.Refresh(context.Background(), auth)
+	if errRefresh != nil {
+		t.Fatalf("Refresh() error = %v", errRefresh)
+	}
+	if refreshed == nil || refreshed.Attributes["api_key"] != "sk-test" {
+		t.Fatalf("Refresh() auth = %#v, want unchanged api key auth", refreshed)
+	}
+}