56 lines
2.1 KiB
Go
56 lines
2.1 KiB
Go
// Copyright 2022 E99p1ant. All rights reserved.
|
||
// Use of this source code is governed by a MIT-style
|
||
// license that can be found in the LICENSE file.
|
||
|
||
package conf
|
||
|
||
import (
|
||
"testing"
|
||
|
||
"github.com/stretchr/testify/assert"
|
||
)
|
||
|
||
// TestValidateTextCensorSource 覆盖 [security] text_censor_source 与 [app] 凭据的搭配校验。
|
||
//
|
||
// 关注两类真实故障：
|
||
// 1. 显式选定通道却缺凭据 —— 运行期审核必然失败，而审核失败是 fail-closed，
|
||
// 会让整站发布/私信不可用且现象隐蔽，必须在启动阶段拦住；
|
||
// 2. 取值拼写错误 —— 若被静默回退成 auto，运维会误以为「已经只用七牛了」。
|
||
func TestValidateTextCensorSource(t *testing.T) {
|
||
for _, tc := range []struct {
|
||
name string
|
||
enabled bool
|
||
source string
|
||
qk, qs string
|
||
ak, as string
|
||
wantErr bool
|
||
}{
|
||
{name: "审核关闭：不校验任何通道配置", enabled: false, source: "aliyun"},
|
||
{name: "审核关闭：非法取值也不报错", enabled: false, source: "qinui"},
|
||
|
||
{name: "留空：通过（历史默认行为）", enabled: true, source: ""},
|
||
{name: "auto：通过", enabled: true, source: "auto"},
|
||
{name: "auto：无任何凭据也通过（不阻断开箱启动）", enabled: true, source: "auto"},
|
||
|
||
{name: "qiniu：凭据齐备通过", enabled: true, source: "qiniu", qk: "k", qs: "s"},
|
||
{name: "qiniu：缺 access key 报错", enabled: true, source: "qiniu", qs: "s", wantErr: true},
|
||
{name: "qiniu：缺 access secret 报错", enabled: true, source: "qiniu", qk: "k", wantErr: true},
|
||
|
||
{name: "aliyun：凭据齐备通过", enabled: true, source: "aliyun", ak: "k", as: "s"},
|
||
{name: "aliyun：缺凭据报错", enabled: true, source: "aliyun", wantErr: true},
|
||
|
||
{name: "大小写与空白不敏感", enabled: true, source: " QINIU ", qk: "k", qs: "s"},
|
||
|
||
{name: "非法取值：报错而非静默回退为 auto", enabled: true, source: "qinui", qk: "k", qs: "s", wantErr: true},
|
||
} {
|
||
t.Run(tc.name, func(t *testing.T) {
|
||
err := validateTextCensorSource(tc.enabled, tc.source, tc.qk, tc.qs, tc.ak, tc.as)
|
||
if tc.wantErr {
|
||
assert.Error(t, err)
|
||
return
|
||
}
|
||
assert.NoError(t, err)
|
||
})
|
||
}
|
||
}
|