Rogee
851ca7e372
后端移除： - SAML: auth/saml.go, handler/saml_handler.go, account_saml_settings_handler.go, model/account_saml_settings.go, model/saml_idp_config.go, repo/*.go - LDAP: auth/ldap.go, handler/ldap_handler.go, model/account_ldap_settings.go, repo/account_ldap_settings_repo.go - MFA: auth/mfa.go, handler/mfa_handler.go - auth_service: 移除 mfaService 依赖、MFARequired 字段、LoginWithMFA 方法 - auth_handler: 移除 LoginMFA handler、MFA 分支逻辑 - bootstrap: 移除 SAML/LDAP/MFA service 初始化和 handler 注册 - sso_middleware: 精简为仅支持 OIDC provider - router: 移除 SAML/LDAP/MFA 路由注册 - config: 移除 SAMLConfig/LDAPConfig struct 和 defaults 前端移除： - v3/login: 移除 MFA 验证流程和 SAML 登录入口 - v3/api/auth: 移除 MFA 响应处理 - v3/routes: 移除 SSO login 路由 - dashboard: 移除 MFA 设置页面、SAML 安全设置页面 - i18n: 移除 mfa.json - featureFlags: 移除 SAML feature flag .env.example / .env: 移除 SAML/LDAP 配置段
84 lines
3.4 KiB
Go
84 lines
3.4 KiB
Go
package service
|
|
|
|
import (
|
|
"context"
|
|
"testing"
|
|
"time"
|
|
|
|
"github.com/stretchr/testify/require"
|
|
"gorm.io/driver/sqlite"
|
|
"gorm.io/gorm"
|
|
"gorm.io/gorm/logger"
|
|
|
|
"github.com/gochat/gochat/internal/auth"
|
|
"github.com/gochat/gochat/internal/config"
|
|
"github.com/gochat/gochat/internal/model"
|
|
"github.com/gochat/gochat/pkg/crypto"
|
|
)
|
|
|
|
func setupAuthServiceTest(t *testing.T) (*AuthService, *gorm.DB, *model.User) {
|
|
t.Helper()
|
|
db, err := gorm.Open(sqlite.Open("file:"+t.Name()+"?mode=memory&cache=private"), &gorm.Config{Logger: logger.Default.LogMode(logger.Silent)})
|
|
require.NoError(t, err)
|
|
require.NoError(t, db.AutoMigrate(&model.Account{}, &model.User{}, &model.AccountUser{}, &model.UserSession{}))
|
|
account := &model.Account{Name: "Auth Service", Status: "active"}
|
|
require.NoError(t, db.Create(account).Error)
|
|
passwordDigest, err := crypto.HashPassword("oldpassword")
|
|
require.NoError(t, err)
|
|
user := &model.User{AccountID: account.ID, Name: "Auth User", Email: "auth-service@example.com", Password: passwordDigest, PasswordDigest: passwordDigest, Provider: "email", Active: true}
|
|
require.NoError(t, db.Create(user).Error)
|
|
require.NoError(t, db.Create(&model.AccountUser{AccountID: account.ID, UserID: user.ID, Role: "administrator"}).Error)
|
|
jwtCfg := &config.JWTConfig{Secret: "auth-service-secret", ExpiryHours: 1, RefreshExpiryHours: 24}
|
|
return NewAuthService(db, auth.NewJWTService(jwtCfg), auth.NewRefreshTokenStore(nil, jwtCfg)), db, user
|
|
}
|
|
|
|
func TestAuthService_ResetPasswordStoresDigestToken(t *testing.T) {
|
|
svc, db, user := setupAuthServiceTest(t)
|
|
|
|
require.NoError(t, svc.ResetPassword(context.Background(), &ResetPasswordInput{Email: " AUTH-SERVICE@example.com "}))
|
|
|
|
var updated model.User
|
|
require.NoError(t, db.First(&updated, user.ID).Error)
|
|
require.NotEmpty(t, updated.ResetPasswordToken)
|
|
require.NotEqual(t, updated.ResetPasswordToken, "AUTH-SERVICE@example.com")
|
|
require.NotNil(t, updated.ResetPasswordSentAt)
|
|
}
|
|
|
|
func TestAuthService_ConfirmResetPasswordUpdatesPasswordAndIssuesTokens(t *testing.T) {
|
|
svc, db, user := setupAuthServiceTest(t)
|
|
rawToken := "reset-token-123"
|
|
sentAt := time.Now().UTC()
|
|
require.NoError(t, db.Model(user).Updates(map[string]interface{}{
|
|
"reset_password_token": digestAuthToken(rawToken),
|
|
"reset_password_sent_at": sentAt,
|
|
}).Error)
|
|
|
|
output, err := svc.ConfirmResetPassword(context.Background(), &ConfirmResetPasswordInput{Token: rawToken, Password: "newpassword", PasswordConfirmation: "newpassword"})
|
|
require.NoError(t, err)
|
|
require.NotEmpty(t, output.TokenPair.AccessToken)
|
|
|
|
var updated model.User
|
|
require.NoError(t, db.First(&updated, user.ID).Error)
|
|
require.True(t, crypto.CheckPassword("newpassword", updated.PasswordDigest))
|
|
require.Empty(t, updated.ResetPasswordToken)
|
|
require.Nil(t, updated.ResetPasswordSentAt)
|
|
require.NotNil(t, updated.ConfirmedAt)
|
|
}
|
|
|
|
func TestAuthService_ConfirmEmailConfirmsAndIssuesTokens(t *testing.T) {
|
|
svc, db, user := setupAuthServiceTest(t)
|
|
require.NoError(t, db.Model(user).Updates(map[string]interface{}{
|
|
"confirmation_token": "confirm-token-123",
|
|
"confirmed_at": nil,
|
|
}).Error)
|
|
|
|
output, err := svc.ConfirmEmail(context.Background(), &ConfirmEmailInput{Token: "confirm-token-123"})
|
|
require.NoError(t, err)
|
|
require.NotEmpty(t, output.TokenPair.AccessToken)
|
|
|
|
var updated model.User
|
|
require.NoError(t, db.First(&updated, user.ID).Error)
|
|
require.NotNil(t, updated.ConfirmedAt)
|
|
require.Empty(t, updated.ConfirmationToken)
|
|
}
|