rogee
aeddedf2a3
Restructure the monorepo into clear top-level directories: - backend/: Go module root (cmd, internal, pkg, configs, migrations, docs/swagger, scripts, tests, go.mod, Makefile, .air.toml) - deploy/: Docker (Dockerfile, docker-compose*), quickstart, fluentd - docs/: project documentation + reports/ (moved from repo root) - AGENTS.md: new AI coding-agent guide at repo root Update all references to the new layout: - Dockerfile: COPY backend/go.mod, COPY backend/ (context = repo root) - docker-compose files: context ../.., dockerfile deploy/docker/Dockerfile, env_file ../../.env, volume mounts ../../backend:/app - deploy/quickstart/compose.yaml: dockerfile deploy/docker/Dockerfile - CI: working-directory: backend for go commands, file deploy/docker/Dockerfile, coverage path backend/coverage.out, health_check backend/scripts/ - backend/Makefile: docker target uses -f ../deploy/docker/Dockerfile ../ - README: architecture tree, quickstart, config paths updated Move root stray scripts (rename_models.*, run_m11_tests.sh, verify_build.sh, gorm_bool_main.go) to backend/scripts/legacy/. All moves via git mv to preserve history. Build, vet, SQLite tests, and docker compose config verified.
131 lines
3.2 KiB
Go
131 lines
3.2 KiB
Go
package crypto
|
|
|
|
import (
|
|
"testing"
|
|
|
|
"github.com/stretchr/testify/assert"
|
|
)
|
|
|
|
// --- HashPassword and CheckPassword Tests ---
|
|
|
|
func TestHashPassword_Success(t *testing.T) {
|
|
hash, err := HashPassword("mypassword123")
|
|
assert.NoError(t, err)
|
|
assert.NotEmpty(t, hash)
|
|
// bcrypt hashes should start with "$2a$" or "$2b$"
|
|
assert.Contains(t, hash, "$2")
|
|
}
|
|
|
|
func TestCheckPassword_Matches(t *testing.T) {
|
|
hash, err := HashPassword("securepassword")
|
|
assert.NoError(t, err)
|
|
|
|
result := CheckPassword("securepassword", hash)
|
|
assert.True(t, result)
|
|
}
|
|
|
|
func TestCheckPassword_DoesNotMatch(t *testing.T) {
|
|
hash, err := HashPassword("securepassword")
|
|
assert.NoError(t, err)
|
|
|
|
result := CheckPassword("wrongpassword", hash)
|
|
assert.False(t, result)
|
|
}
|
|
|
|
func TestHashPassword_DifferentHashesForSamePassword(t *testing.T) {
|
|
hash1, err := HashPassword("samepassword")
|
|
assert.NoError(t, err)
|
|
|
|
hash2, err := HashPassword("samepassword")
|
|
assert.NoError(t, err)
|
|
|
|
// bcrypt uses random salt, so hashes should differ
|
|
assert.NotEqual(t, hash1, hash2)
|
|
|
|
// But both should validate against the same password
|
|
assert.True(t, CheckPassword("samepassword", hash1))
|
|
assert.True(t, CheckPassword("samepassword", hash2))
|
|
}
|
|
|
|
func TestHashPassword_EmptyPassword(t *testing.T) {
|
|
hash, err := HashPassword("")
|
|
assert.NoError(t, err)
|
|
assert.True(t, CheckPassword("", hash))
|
|
}
|
|
|
|
// --- JWT GenerateToken and ValidateToken Tests ---
|
|
|
|
func TestGenerateToken_Success(t *testing.T) {
|
|
cfg := JWTConfig{
|
|
Secret: []byte("test-jwt-secret"),
|
|
ExpiryHours: 1,
|
|
RefreshExpiryHours: 24,
|
|
}
|
|
|
|
token, err := GenerateToken(cfg, 1, "user@example.com", "agent")
|
|
assert.NoError(t, err)
|
|
assert.NotEmpty(t, token)
|
|
}
|
|
|
|
func TestValidateToken_Valid(t *testing.T) {
|
|
cfg := JWTConfig{
|
|
Secret: []byte("test-jwt-secret"),
|
|
ExpiryHours: 1,
|
|
RefreshExpiryHours: 24,
|
|
}
|
|
|
|
token, err := GenerateToken(cfg, 42, "test@example.com", "administrator")
|
|
assert.NoError(t, err)
|
|
|
|
claims, err := ValidateToken(cfg, token)
|
|
assert.NoError(t, err)
|
|
assert.Equal(t, float64(42), claims["user_id"])
|
|
assert.Equal(t, "test@example.com", claims["email"])
|
|
assert.Equal(t, "administrator", claims["type"])
|
|
}
|
|
|
|
func TestValidateToken_InvalidSignature(t *testing.T) {
|
|
cfg := JWTConfig{
|
|
Secret: []byte("correct-secret"),
|
|
ExpiryHours: 1,
|
|
RefreshExpiryHours: 24,
|
|
}
|
|
|
|
token, err := GenerateToken(cfg, 1, "user@example.com", "agent")
|
|
assert.NoError(t, err)
|
|
|
|
wrongCfg := JWTConfig{
|
|
Secret: []byte("wrong-secret"),
|
|
ExpiryHours: 1,
|
|
RefreshExpiryHours: 24,
|
|
}
|
|
|
|
claims, err := ValidateToken(wrongCfg, token)
|
|
assert.Error(t, err)
|
|
assert.Nil(t, claims)
|
|
}
|
|
|
|
func TestValidateToken_MalformedToken(t *testing.T) {
|
|
cfg := JWTConfig{
|
|
Secret: []byte("test-jwt-secret"),
|
|
ExpiryHours: 1,
|
|
RefreshExpiryHours: 24,
|
|
}
|
|
|
|
claims, err := ValidateToken(cfg, "invalid-token-string")
|
|
assert.Error(t, err)
|
|
assert.Nil(t, claims)
|
|
}
|
|
|
|
// --- JWTConfig Tests ---
|
|
|
|
func TestJWTConfig_Fields(t *testing.T) {
|
|
cfg := JWTConfig{
|
|
Secret: []byte("secret"),
|
|
ExpiryHours: 2,
|
|
RefreshExpiryHours: 48,
|
|
}
|
|
assert.Equal(t, []byte("secret"), cfg.Secret)
|
|
assert.Equal(t, 2, cfg.ExpiryHours)
|
|
assert.Equal(t, 48, cfg.RefreshExpiryHours)
|
|
} |