Add projects
This commit is contained in:
parent
2d3a9ad623
commit
8b607dd700
SSH key fingerprint:
SHA256:GBzT2DXvAuGV9XIV5W3WrzVpjU54FThmxHXdbz95J24
1802 changed files with 503346 additions and 2 deletions
178
backend/internal/runtime/executor/helps/home_refresh_test.go
Normal file
178
backend/internal/runtime/executor/helps/home_refresh_test.go
Normal file
|
|
@ -0,0 +1,178 @@
|
|||
package helps
|
||||
|
||||
import (
|
||||
"context"
|
||||
"encoding/json"
|
||||
"errors"
|
||||
"net/http"
|
||||
"strings"
|
||||
"sync/atomic"
|
||||
"testing"
|
||||
|
||||
"github.com/router-for-me/CLIProxyAPI/v7/internal/config"
|
||||
cliproxyauth "github.com/router-for-me/CLIProxyAPI/v7/sdk/cliproxy/auth"
|
||||
)
|
||||
|
||||
func TestStatusFromHomeErrorCodeMapsAuthenticationErrorToUnauthorized(t *testing.T) {
|
||||
if got := statusFromHomeErrorCode("authentication_error"); got != http.StatusUnauthorized {
|
||||
t.Fatalf("statusFromHomeErrorCode(authentication_error) = %d, want %d", got, http.StatusUnauthorized)
|
||||
}
|
||||
if got := statusFromHomeErrorCode("unauthorized"); got != http.StatusUnauthorized {
|
||||
t.Fatalf("statusFromHomeErrorCode(unauthorized) = %d, want %d", got, http.StatusUnauthorized)
|
||||
}
|
||||
for _, code := range []string{"auth_not_found", "auth_unavailable", "refresh_temporarily_unavailable", "refresh_unsupported"} {
|
||||
if got := statusFromHomeErrorCode(code); got != http.StatusServiceUnavailable {
|
||||
t.Fatalf("statusFromHomeErrorCode(%s) = %d, want %d", code, got, http.StatusServiceUnavailable)
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
type fakeHomeRefreshClient struct {
|
||||
calls atomic.Int32
|
||||
authIndex string
|
||||
accessTokenHash string
|
||||
raw []byte
|
||||
err error
|
||||
}
|
||||
|
||||
func (c *fakeHomeRefreshClient) HeartbeatOK() bool {
|
||||
return true
|
||||
}
|
||||
|
||||
func (c *fakeHomeRefreshClient) GetRefreshAuth(_ context.Context, authIndex string, accessTokenHash string) ([]byte, error) {
|
||||
c.calls.Add(1)
|
||||
c.authIndex = authIndex
|
||||
c.accessTokenHash = accessTokenHash
|
||||
return c.raw, c.err
|
||||
}
|
||||
|
||||
func TestRefreshAuthViaHomePreservesContextErrors(t *testing.T) {
|
||||
client := &fakeHomeRefreshClient{err: context.DeadlineExceeded}
|
||||
oldCurrentHomeRefreshClient := currentHomeRefreshClient
|
||||
currentHomeRefreshClient = func() homeRefreshClient { return client }
|
||||
t.Cleanup(func() { currentHomeRefreshClient = oldCurrentHomeRefreshClient })
|
||||
|
||||
cfg := &config.Config{Home: config.HomeConfig{Enabled: true}}
|
||||
auth := &cliproxyauth.Auth{ID: "home-auth", Index: "home-auth", Provider: "codex"}
|
||||
_, handled, errRefresh := RefreshAuthViaHome(context.Background(), cfg, auth)
|
||||
if !handled || !errors.Is(errRefresh, context.DeadlineExceeded) {
|
||||
t.Fatalf("RefreshAuthViaHome() = handled %v err %v, want true/context.DeadlineExceeded", handled, errRefresh)
|
||||
}
|
||||
}
|
||||
|
||||
func TestRefreshAuthViaHomeMapsTransportFailureToRedacted503(t *testing.T) {
|
||||
client := &fakeHomeRefreshClient{err: errors.New("dial failed with provider-secret")}
|
||||
oldCurrentHomeRefreshClient := currentHomeRefreshClient
|
||||
currentHomeRefreshClient = func() homeRefreshClient { return client }
|
||||
t.Cleanup(func() { currentHomeRefreshClient = oldCurrentHomeRefreshClient })
|
||||
|
||||
cfg := &config.Config{Home: config.HomeConfig{Enabled: true}}
|
||||
auth := &cliproxyauth.Auth{ID: "home-auth", Index: "home-auth", Provider: "codex"}
|
||||
_, handled, errRefresh := RefreshAuthViaHome(context.Background(), cfg, auth)
|
||||
statusErr, okStatus := errRefresh.(interface{ StatusCode() int })
|
||||
if !handled || !okStatus || statusErr.StatusCode() != http.StatusServiceUnavailable {
|
||||
t.Fatalf("RefreshAuthViaHome() = handled %v err %v, want redacted 503", handled, errRefresh)
|
||||
}
|
||||
if strings.Contains(errRefresh.Error(), "provider-secret") {
|
||||
t.Fatalf("refresh error leaked transport detail: %v", errRefresh)
|
||||
}
|
||||
}
|
||||
|
||||
func TestRefreshAuthViaHomeRedactsLegacyErrorEnvelope(t *testing.T) {
|
||||
client := &fakeHomeRefreshClient{raw: []byte(`{"error":{"type":"error","message":"provider response: refresh_token=provider-secret"}}`)}
|
||||
oldCurrentHomeRefreshClient := currentHomeRefreshClient
|
||||
currentHomeRefreshClient = func() homeRefreshClient { return client }
|
||||
t.Cleanup(func() { currentHomeRefreshClient = oldCurrentHomeRefreshClient })
|
||||
|
||||
cfg := &config.Config{Home: config.HomeConfig{Enabled: true}}
|
||||
auth := &cliproxyauth.Auth{ID: "home-auth", Index: "home-auth", Provider: "codex"}
|
||||
_, handled, errRefresh := RefreshAuthViaHome(context.Background(), cfg, auth)
|
||||
statusErr, okStatus := errRefresh.(interface{ StatusCode() int })
|
||||
if !handled || !okStatus || statusErr.StatusCode() != http.StatusServiceUnavailable {
|
||||
t.Fatalf("RefreshAuthViaHome() = handled %v err %v, want redacted 503", handled, errRefresh)
|
||||
}
|
||||
if strings.Contains(errRefresh.Error(), "provider-secret") {
|
||||
t.Fatalf("refresh error leaked legacy Home detail: %v", errRefresh)
|
||||
}
|
||||
}
|
||||
|
||||
func TestAuthAccessTokenSHA256SupportsKnownMetadataShapes(t *testing.T) {
|
||||
want := authAccessTokenSHA256(&cliproxyauth.Auth{Metadata: map[string]any{"access_token": "same-token"}})
|
||||
cases := map[string]*cliproxyauth.Auth{
|
||||
"camel case": {Metadata: map[string]any{"accessToken": "same-token"}},
|
||||
"nested any map": {Metadata: map[string]any{"token": map[string]any{"access_token": "same-token"}}},
|
||||
"nested string map": {Metadata: map[string]any{"Token": map[string]string{"accessToken": "same-token"}}},
|
||||
}
|
||||
for name, auth := range cases {
|
||||
t.Run(name, func(t *testing.T) {
|
||||
if got := authAccessTokenSHA256(auth); got == "" || got != want {
|
||||
t.Fatalf("token hash = %q, want %q", got, want)
|
||||
}
|
||||
})
|
||||
}
|
||||
}
|
||||
|
||||
func TestRefreshAuthViaHomeAcceptsAuthEnvelope(t *testing.T) {
|
||||
raw, errMarshal := json.Marshal(struct {
|
||||
Auth cliproxyauth.Auth `json:"auth"`
|
||||
AuthIndex string `json:"auth_index"`
|
||||
}{
|
||||
Auth: cliproxyauth.Auth{
|
||||
ID: "home-auth-1",
|
||||
Provider: "antigravity",
|
||||
Metadata: map[string]any{
|
||||
"access_token": "new-access-token",
|
||||
},
|
||||
},
|
||||
AuthIndex: "home-index-1",
|
||||
})
|
||||
if errMarshal != nil {
|
||||
t.Fatalf("marshal home envelope: %v", errMarshal)
|
||||
}
|
||||
|
||||
client := &fakeHomeRefreshClient{raw: raw}
|
||||
oldCurrentHomeRefreshClient := currentHomeRefreshClient
|
||||
currentHomeRefreshClient = func() homeRefreshClient {
|
||||
return client
|
||||
}
|
||||
t.Cleanup(func() {
|
||||
currentHomeRefreshClient = oldCurrentHomeRefreshClient
|
||||
})
|
||||
|
||||
cfg := &config.Config{Home: config.HomeConfig{Enabled: true}}
|
||||
auth := &cliproxyauth.Auth{
|
||||
ID: "home-auth-1",
|
||||
Provider: "antigravity",
|
||||
Index: "home-index-1",
|
||||
Metadata: map[string]any{
|
||||
"access_token": "old-access-token",
|
||||
"refresh_token": "refresh-token",
|
||||
},
|
||||
}
|
||||
|
||||
updated, handled, err := RefreshAuthViaHome(context.Background(), cfg, auth)
|
||||
if err != nil {
|
||||
t.Fatalf("RefreshAuthViaHome error: %v", err)
|
||||
}
|
||||
if !handled {
|
||||
t.Fatal("RefreshAuthViaHome handled = false, want true")
|
||||
}
|
||||
if got := client.calls.Load(); got != 1 {
|
||||
t.Fatalf("home refresh calls = %d, want 1", got)
|
||||
}
|
||||
if client.authIndex != "home-index-1" {
|
||||
t.Fatalf("home refresh auth_index = %q, want home-index-1", client.authIndex)
|
||||
}
|
||||
if client.accessTokenHash != authAccessTokenSHA256(auth) {
|
||||
t.Fatalf("home refresh access token hash = %q, want %q", client.accessTokenHash, authAccessTokenSHA256(auth))
|
||||
}
|
||||
if updated == nil {
|
||||
t.Fatal("updated auth = nil")
|
||||
}
|
||||
if got := updated.Metadata["access_token"]; got != "new-access-token" {
|
||||
t.Fatalf("updated access_token = %q, want new-access-token", got)
|
||||
}
|
||||
if updated.Index != "home-index-1" {
|
||||
t.Fatalf("updated auth_index = %q, want home-index-1", updated.Index)
|
||||
}
|
||||
}
|
||||
Loading…
Reference in a new issue