chore: 并入 iotlcm-upstream-proxy 历史到 upstream-proxy/（原提交 44209ec）

2026-11-02 13:28:02 +08:00
parent 9c9f6c2a29 44209ecaaf
commit 6de2e503cc
117 changed files with 8690 additions and 0 deletions
@@ -0,0 +1,55 @@
+package cardquery
+
+import (
+	"net/http"
+	"strings"
+	"testing"
+
+	"github.com/gogf/gf/v2/frame/g"
+	"github.com/gogf/gf/v2/net/ghttp"
+	"github.com/gogf/gf/v2/os/gcfg"
+)
+
+func TestDiagnosisProxyRejectsUntrustedAndInvalidRequests(t *testing.T) {
+	adapter, err := gcfg.NewAdapterContent(`{"appDiagnosis":{"internalToken":"test-token"}}`)
+	if err != nil {
+		t.Fatal(err)
+	}
+	previous := g.Cfg().GetAdapter()
+	g.Cfg().SetAdapter(adapter)
+	t.Cleanup(func() { g.Cfg().SetAdapter(previous) })
+	server := ghttp.GetServer("diagnosis-proxy-auth-test")
+	server.SetAddr("127.0.0.1:0")
+	server.Group("/", func(group *ghttp.RouterGroup) {
+		group.POST("/internal/app-diagnosis/sim/*any", AppDiagnosisQuery)
+	})
+	if err := server.Start(); err != nil {
+		t.Fatal(err)
+	}
+	t.Cleanup(func() { _ = server.Shutdown() })
+	url := "http://" + server.GetListenedAddress() + "/internal/app-diagnosis"
+	for _, tc := range []struct {
+		path   string
+		token  string
+		body   string
+		status int
+	}{
+		{"/sim/query/sim-basic-info", "", `{"simKeys":[{"iccid":"123","chanKey":"test"}]}`, http.StatusForbidden},
+		{"/sim/restart", "test-token", `{"simKeys":[{"iccid":"123","chanKey":"test"}]}`, http.StatusNotFound},
+		{"/sim/query/sim-basic-info", "test-token", `{"simKeys":[{"iccid":"123"}]}`, http.StatusBadRequest},
+	} {
+		request, err := http.NewRequest(http.MethodPost, url+tc.path, strings.NewReader(tc.body))
+		if err != nil {
+			t.Fatal(err)
+		}
+		request.Header.Set("X-App-Diagnosis-Token", tc.token)
+		response, err := http.DefaultClient.Do(request)
+		if err != nil {
+			t.Fatal(err)
+		}
+		_ = response.Body.Close()
+		if response.StatusCode != tc.status {
+			t.Errorf("%s: got %d want %d", tc.path, response.StatusCode, tc.status)
+		}
+	}
+}