Reorganize repo: backend/, deploy/, docs/ layout + AGENTS.md

Restructure the monorepo into clear top-level directories: - backend/: Go module root (cmd, internal, pkg, configs, migrations, docs/swagger, scripts, tests, go.mod, Makefile, .air.toml) - deploy/: Docker (Dockerfile, docker-compose*), quickstart, fluentd - docs/: project documentation + reports/ (moved from repo root) - AGENTS.md: new AI coding-agent guide at repo root Update all references to the new layout: - Dockerfile: COPY backend/go.mod, COPY backend/ (context = repo root) - docker-compose files: context ../.., dockerfile deploy/docker/Dockerfile, env_file ../../.env, volume mounts ../../backend:/app - deploy/quickstart/compose.yaml: dockerfile deploy/docker/Dockerfile - CI: working-directory: backend for go commands, file deploy/docker/Dockerfile, coverage path backend/coverage.out, health_check backend/scripts/ - backend/Makefile: docker target uses -f ../deploy/docker/Dockerfile ../ - README: architecture tree, quickstart, config paths updated Move root stray scripts (rename_models.*, run_m11_tests.sh, verify_build.sh, gorm_bool_main.go) to backend/scripts/legacy/. All moves via git mv to preserve history. Build, vet, SQLite tests, and docker compose config verified.
2026-07-07 14:44:12 +08:00
parent d4ef996f49
commit aeddedf2a3
1348 changed files with 176 additions and 57 deletions
@@ -0,0 +1,178 @@
+package middleware
+
+import (
+	"fmt"
+	"net/http"
+	"net/http/httptest"
+	"testing"
+
+	"github.com/gin-gonic/gin"
+	"github.com/stretchr/testify/assert"
+
+	"github.com/gochat/gochat/internal/auth"
+	"github.com/gochat/gochat/internal/config"
+	"github.com/gochat/gochat/internal/model"
+)
+
+func makeJWTConfig() *config.JWTConfig {
+	return &config.JWTConfig{
+		Secret:              "test-secret-key-for-middleware-test",
+		ExpiryHours:         24,
+		RefreshExpiryHours:  48,
+		AccessExpiryMinutes: 30,
+		Audience:            "gochat-test",
+		Issuer:              "gochat-test",
+	}
+}
+
+func makeValidAccessToken(cfg *config.JWTConfig) string {
+	svc := auth.NewJWTService(cfg)
+	user := &model.User{Base: model.Base{ID: 1}, Provider: "email", Email: "test@test.com"}
+	pair, _ := svc.GenerateTokenPair(user, 2, "agent")
+	return pair.AccessToken
+}
+
+func TestAuthMiddleware_NoAuthHeader(t *testing.T) {
+	gin.SetMode(gin.TestMode)
+	cfg := makeJWTConfig()
+	r := gin.New()
+	r.Use(AuthMiddleware(cfg))
+	r.GET("/test", func(c *gin.Context) {
+		c.JSON(200, gin.H{"ok": true})
+	})
+
+	w := httptest.NewRecorder()
+	req := httptest.NewRequest(http.MethodGet, "/test", nil)
+	r.ServeHTTP(w, req)
+	assert.Equal(t, 401, w.Code)
+}
+
+func TestAuthMiddleware_BearerTokenRequired(t *testing.T) {
+	gin.SetMode(gin.TestMode)
+	cfg := makeJWTConfig()
+	r := gin.New()
+	r.Use(AuthMiddleware(cfg))
+	r.GET("/test", func(c *gin.Context) {
+		c.JSON(200, gin.H{"ok": true})
+	})
+
+	w := httptest.NewRecorder()
+	req := httptest.NewRequest(http.MethodGet, "/test", nil)
+	req.Header.Set("Authorization", "Basic abc123")
+	r.ServeHTTP(w, req)
+	assert.Equal(t, 401, w.Code)
+}
+
+func TestAuthMiddleware_InvalidToken(t *testing.T) {
+	gin.SetMode(gin.TestMode)
+	cfg := makeJWTConfig()
+	r := gin.New()
+	r.Use(AuthMiddleware(cfg))
+	r.GET("/test", func(c *gin.Context) {
+		c.JSON(200, gin.H{"ok": true})
+	})
+
+	w := httptest.NewRecorder()
+	req := httptest.NewRequest(http.MethodGet, "/test", nil)
+	req.Header.Set("Authorization", "Bearer invalid-token-string")
+	r.ServeHTTP(w, req)
+	assert.Equal(t, 401, w.Code)
+}
+
+func TestAuthMiddleware_ValidToken(t *testing.T) {
+	gin.SetMode(gin.TestMode)
+	cfg := makeJWTConfig()
+	r := gin.New()
+	r.Use(AuthMiddleware(cfg))
+	r.GET("/test", func(c *gin.Context) {
+		userID, _ := c.Get("user_id")
+		accountID, _ := c.Get("account_id")
+		c.JSON(200, gin.H{"user_id": userID, "account_id": accountID})
+	})
+
+	token := makeValidAccessToken(cfg)
+	w := httptest.NewRecorder()
+	req := httptest.NewRequest(http.MethodGet, "/test", nil)
+	req.Header.Set("Authorization", fmt.Sprintf("Bearer %s", token))
+	r.ServeHTTP(w, req)
+	assert.Equal(t, 200, w.Code)
+}
+
+func TestAuthMiddleware_ChatwootAccessTokenHeader(t *testing.T) {
+	gin.SetMode(gin.TestMode)
+	cfg := makeJWTConfig()
+	r := gin.New()
+	r.Use(AuthMiddleware(cfg))
+	r.GET("/test", func(c *gin.Context) {
+		userID, _ := c.Get("user_id")
+		accountID, _ := c.Get("account_id")
+		c.JSON(200, gin.H{"user_id": userID, "account_id": accountID})
+	})
+
+	token := makeValidAccessToken(cfg)
+	w := httptest.NewRecorder()
+	req := httptest.NewRequest(http.MethodGet, "/test", nil)
+	req.Header.Set("access-token", token)
+	r.ServeHTTP(w, req)
+
+	assert.Equal(t, 200, w.Code)
+}
+
+func TestAuthMiddleware_FallbackHeaders(t *testing.T) {
+	gin.SetMode(gin.TestMode)
+	cfg := makeJWTConfig()
+	r := gin.New()
+	r.Use(AuthMiddleware(cfg))
+	r.GET("/test", func(c *gin.Context) {
+		userID, _ := c.Get("user_id")
+		accountID, _ := c.Get("account_id")
+		c.JSON(200, gin.H{"user_id": userID, "account_id": accountID})
+	})
+
+	w := httptest.NewRecorder()
+	req := httptest.NewRequest(http.MethodGet, "/test", nil)
+	req.Header.Set("X-User-ID", "5")
+	req.Header.Set("X-Account-ID", "10")
+	r.ServeHTTP(w, req)
+	assert.Equal(t, 200, w.Code)
+}
+
+func TestAuthMiddleware_FallbackInvalidUserID(t *testing.T) {
+	gin.SetMode(gin.TestMode)
+	cfg := makeJWTConfig()
+	r := gin.New()
+	r.Use(AuthMiddleware(cfg))
+	r.GET("/test", func(c *gin.Context) {
+		c.JSON(200, gin.H{"ok": true})
+	})
+
+	w := httptest.NewRecorder()
+	req := httptest.NewRequest(http.MethodGet, "/test", nil)
+	req.Header.Set("X-User-ID", "abc")
+	req.Header.Set("X-Account-ID", "10")
+	r.ServeHTTP(w, req)
+	assert.Equal(t, 401, w.Code)
+}
+
+func TestAuthMiddleware_FallbackMissingUserID(t *testing.T) {
+	gin.SetMode(gin.TestMode)
+	cfg := makeJWTConfig()
+	r := gin.New()
+	r.Use(AuthMiddleware(cfg))
+	r.GET("/test", func(c *gin.Context) {
+		c.JSON(200, gin.H{"ok": true})
+	})
+
+	w := httptest.NewRecorder()
+	req := httptest.NewRequest(http.MethodGet, "/test", nil)
+	req.Header.Set("X-Account-ID", "10")
+	r.ServeHTTP(w, req)
+	assert.Equal(t, 401, w.Code)
+}
+
+func TestGenerateToken(t *testing.T) {
+	cfg := makeJWTConfig()
+	tokenString, err := GenerateToken(cfg, 1, 2, "agent")
+	assert.NoError(t, err)
+	assert.NotEmpty(t, tokenString)
+}