refactor(backend): split project write responsibilities

backend/internal/logic/files/handlers_test.go

@@ -0,0 +1,96 @@
+package files
+
+import (
+	"bytes"
+	"encoding/json"
+	"fmt"
+	"mime/multipart"
+	"net/http"
+	"net/http/httptest"
+	"os"
+	"path/filepath"
+	"testing"
+
+	"github.com/gin-gonic/gin"
+	"github.com/glebarez/sqlite"
+	"github.com/stretchr/testify/require"
+	"gorm.io/gorm"
+	"senlinai-agent/backend/internal/config"
+	"senlinai-agent/backend/internal/httpx"
+	"senlinai-agent/backend/internal/models"
+)
+
+func TestFileRegistrarSavesBeforeCreatingIdentitySourceDTO(t *testing.T) {
+	router, database, project, storageRoot := newFileHandlerTestRouter(t, 1, 1)
+	body := &bytes.Buffer{}
+	writer := multipart.NewWriter(body)
+	require.NoError(t, writer.WriteField("title", "客户资料"))
+	part, err := writer.CreateFormFile("file", "客户资料.txt")
+	require.NoError(t, err)
+	_, err = part.Write([]byte("private content"))
+	require.NoError(t, err)
+	require.NoError(t, writer.Close())
+	req := httptest.NewRequest(http.MethodPost, "/api/v1/projects/"+project.Identity+"/sources", body)
+	req.Header.Set("Content-Type", writer.FormDataContentType())
+	req.Header.Set("Authorization", "Bearer test-token")
+	rec := httptest.NewRecorder()
+
+	router.ServeHTTP(rec, req)
+
+	require.Equal(t, http.StatusCreated, rec.Code, rec.Body.String())
+	var source models.SenlinAgentSource
+	require.NoError(t, database.Where("project_id = ?", project.ID).First(&source).Error)
+	require.FileExists(t, filepath.Join(storageRoot, filepath.FromSlash(source.FilePath)))
+	var payload map[string]any
+	require.NoError(t, json.Unmarshal(rec.Body.Bytes(), &payload))
+	require.Equal(t, source.Identity, payload["id"])
+	require.Equal(t, project.Identity, payload["projectId"])
+	require.Equal(t, filepath.ToSlash(source.FilePath), payload["filePath"])
+	require.NotContains(t, payload["filePath"], storageRoot)
+	require.NotContains(t, payload, "AbsolutePath")
+	require.NotContains(t, rec.Body.String(), storageRoot)
+}
+
+func TestFileRegistrarChecksOwnershipBeforeWritingFile(t *testing.T) {
+	router, database, project, storageRoot := newFileHandlerTestRouter(t, 1, 2)
+	body := &bytes.Buffer{}
+	writer := multipart.NewWriter(body)
+	part, err := writer.CreateFormFile("file", "hidden.txt")
+	require.NoError(t, err)
+	_, err = part.Write([]byte("must not be stored"))
+	require.NoError(t, err)
+	require.NoError(t, writer.Close())
+	req := httptest.NewRequest(http.MethodPost, "/api/v1/projects/"+project.Identity+"/sources", body)
+	req.Header.Set("Content-Type", writer.FormDataContentType())
+	req.Header.Set("Authorization", "Bearer test-token")
+	rec := httptest.NewRecorder()
+
+	router.ServeHTTP(rec, req)
+
+	require.Equal(t, http.StatusNotFound, rec.Code, rec.Body.String())
+	var count int64
+	require.NoError(t, database.Model(&models.SenlinAgentSource{}).Count(&count).Error)
+	require.Zero(t, count)
+	entries, err := os.ReadDir(storageRoot)
+	require.NoError(t, err)
+	require.Empty(t, entries)
+}
+
+func newFileHandlerTestRouter(t *testing.T, currentUserID, ownerID uint) (*gin.Engine, *gorm.DB, models.SenlinAgentProject, string) {
+	t.Helper()
+	database, err := gorm.Open(sqlite.Open(fmt.Sprintf("file:%s?mode=memory&cache=shared", t.Name())), &gorm.Config{TranslateError: true})
+	require.NoError(t, err)
+	require.NoError(t, models.AutoMigrate(database))
+	models.DBService = database
+	require.NoError(t, database.Create(&models.SenlinAgentUser{Email: "owner@example.com", DisplayName: "Owner", PasswordHash: "hash"}).Error)
+	require.NoError(t, database.Create(&models.SenlinAgentUser{Email: "other@example.com", DisplayName: "Other", PasswordHash: "hash"}).Error)
+	project := models.SenlinAgentProject{OwnerID: ownerID, Name: "Files", Identifier: fmt.Sprintf("FILES-%d", ownerID)}
+	require.NoError(t, database.Create(&project).Error)
+	storageRoot := t.TempDir()
+	router := httpx.NewProtectedRouter(
+		config.Config{Env: "test"},
+		func(string) (uint, error) { return currentUserID, nil },
+		NewHandler(NewService(storageRoot, database)),
+	)
+	return router, database, project, storageRoot
+}