MiFaZhan
82466d587d
iotlcm-upstream-proxy：渠道缓存与转发网关。 - 内联原私有依赖：yunze-public → internal/pub/（18 文件）， yunze-pb/pb → internal/pb/（9 文件）；Consul 注册改用官方 gogf/gf/contrib/registry/consul/v2（API 兼容） - Go module：yz-svr → git.5iot.com/iotlcm-public/iotlcm-upstream-proxy - 凭据与内部标识脱敏：MySQL/Redis/Consul 凭据、私网与生产 IP、内网域名 - 移除内部资产：CI 触发器 - Dockerfile 改用公共基础镜像，移除写死的 registry 凭据 - 补 Apache-2.0 LICENSE，重写 README，LF 行尾 + .gitattributes
56 lines
1.7 KiB
Go
56 lines
1.7 KiB
Go
package cardquery
|
|
|
|
import (
|
|
"net/http"
|
|
"strings"
|
|
"testing"
|
|
|
|
"github.com/gogf/gf/v2/frame/g"
|
|
"github.com/gogf/gf/v2/net/ghttp"
|
|
"github.com/gogf/gf/v2/os/gcfg"
|
|
)
|
|
|
|
func TestDiagnosisProxyRejectsUntrustedAndInvalidRequests(t *testing.T) {
|
|
adapter, err := gcfg.NewAdapterContent(`{"appDiagnosis":{"internalToken":"test-token"}}`)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
previous := g.Cfg().GetAdapter()
|
|
g.Cfg().SetAdapter(adapter)
|
|
t.Cleanup(func() { g.Cfg().SetAdapter(previous) })
|
|
server := ghttp.GetServer("diagnosis-proxy-auth-test")
|
|
server.SetAddr("127.0.0.1:0")
|
|
server.Group("/", func(group *ghttp.RouterGroup) {
|
|
group.POST("/internal/app-diagnosis/sim/*any", AppDiagnosisQuery)
|
|
})
|
|
if err := server.Start(); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
t.Cleanup(func() { _ = server.Shutdown() })
|
|
url := "http://" + server.GetListenedAddress() + "/internal/app-diagnosis"
|
|
for _, tc := range []struct {
|
|
path string
|
|
token string
|
|
body string
|
|
status int
|
|
}{
|
|
{"/sim/query/sim-basic-info", "", `{"simKeys":[{"iccid":"123","chanKey":"test"}]}`, http.StatusForbidden},
|
|
{"/sim/restart", "test-token", `{"simKeys":[{"iccid":"123","chanKey":"test"}]}`, http.StatusNotFound},
|
|
{"/sim/query/sim-basic-info", "test-token", `{"simKeys":[{"iccid":"123"}]}`, http.StatusBadRequest},
|
|
} {
|
|
request, err := http.NewRequest(http.MethodPost, url+tc.path, strings.NewReader(tc.body))
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
request.Header.Set("X-App-Diagnosis-Token", tc.token)
|
|
response, err := http.DefaultClient.Do(request)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
_ = response.Body.Close()
|
|
if response.StatusCode != tc.status {
|
|
t.Errorf("%s: got %d want %d", tc.path, response.StatusCode, tc.status)
|
|
}
|
|
}
|
|
}
|