aliyun sensor server

2026-09-10 18:04:19 +08:00
parent e3e59e7c69
commit 8e2325eda5
38 changed files with 3147 additions and 344 deletions
@@ -0,0 +1,55 @@
+// Copyright 2022 E99p1ant. All rights reserved.
+// Use of this source code is governed by a MIT-style
+// license that can be found in the LICENSE file.
+
+package conf
+
+import (
+	"testing"
+
+	"github.com/stretchr/testify/assert"
+)
+
+// TestValidateTextCensorSource 覆盖 [security] text_censor_source 与 [app] 凭据的搭配校验。
+//
+// 关注两类真实故障：
+//  1. 显式选定通道却缺凭据 —— 运行期审核必然失败，而审核失败是 fail-closed，
+//     会让整站发布/私信不可用且现象隐蔽，必须在启动阶段拦住；
+//  2. 取值拼写错误 —— 若被静默回退成 auto，运维会误以为「已经只用七牛了」。
+func TestValidateTextCensorSource(t *testing.T) {
+	for _, tc := range []struct {
+		name    string
+		enabled bool
+		source  string
+		qk, qs  string
+		ak, as  string
+		wantErr bool
+	}{
+		{name: "审核关闭：不校验任何通道配置", enabled: false, source: "aliyun"},
+		{name: "审核关闭：非法取值也不报错", enabled: false, source: "qinui"},
+
+		{name: "留空：通过（历史默认行为）", enabled: true, source: ""},
+		{name: "auto：通过", enabled: true, source: "auto"},
+		{name: "auto：无任何凭据也通过（不阻断开箱启动）", enabled: true, source: "auto"},
+
+		{name: "qiniu：凭据齐备通过", enabled: true, source: "qiniu", qk: "k", qs: "s"},
+		{name: "qiniu：缺 access key 报错", enabled: true, source: "qiniu", qs: "s", wantErr: true},
+		{name: "qiniu：缺 access secret 报错", enabled: true, source: "qiniu", qk: "k", wantErr: true},
+
+		{name: "aliyun：凭据齐备通过", enabled: true, source: "aliyun", ak: "k", as: "s"},
+		{name: "aliyun：缺凭据报错", enabled: true, source: "aliyun", wantErr: true},
+
+		{name: "大小写与空白不敏感", enabled: true, source: "  QINIU  ", qk: "k", qs: "s"},
+
+		{name: "非法取值：报错而非静默回退为 auto", enabled: true, source: "qinui", qk: "k", qs: "s", wantErr: true},
+	} {
+		t.Run(tc.name, func(t *testing.T) {
+			err := validateTextCensorSource(tc.enabled, tc.source, tc.qk, tc.qs, tc.ak, tc.as)
+			if tc.wantErr {
+				assert.Error(t, err)
+				return
+			}
+			assert.NoError(t, err)
+		})
+	}
+}