159 lines
6.5 KiB
Go
159 lines
6.5 KiB
Go
package search
|
|
|
|
import (
|
|
"encoding/json"
|
|
"fmt"
|
|
"net/http"
|
|
"net/http/httptest"
|
|
"testing"
|
|
"time"
|
|
|
|
"github.com/glebarez/sqlite"
|
|
"github.com/stretchr/testify/require"
|
|
"gorm.io/gorm"
|
|
"senlinai-agent/backend/internal/config"
|
|
"senlinai-agent/backend/internal/httpx"
|
|
"senlinai-agent/backend/internal/models"
|
|
)
|
|
|
|
func TestSearchHandlerRejectsBlankQuery(t *testing.T) {
|
|
router, _ := newSearchHandlerTestRouter(t, 1)
|
|
req := httptest.NewRequest(http.MethodGet, "/api/v1/search?q=%20%20", nil)
|
|
req.Header.Set("Authorization", "Bearer test-token")
|
|
rec := httptest.NewRecorder()
|
|
|
|
router.ServeHTTP(rec, req)
|
|
|
|
require.Equal(t, http.StatusBadRequest, rec.Code)
|
|
var payload httpx.ErrorEnvelope
|
|
require.NoError(t, json.Unmarshal(rec.Body.Bytes(), &payload))
|
|
require.Equal(t, "invalid_query", payload.Error.Code)
|
|
require.Equal(t, "请输入搜索关键词", payload.Error.Message)
|
|
}
|
|
|
|
func TestSearchHandlerReturnsCamelCaseIdentityResults(t *testing.T) {
|
|
database := newSearchHandlerTestDB(t)
|
|
owner := createSearchUser(t, database, "owner@example.com")
|
|
project := models.SaProject{OwnerID: owner.ID, Name: "回调平台", Identifier: "CALLBACK"}
|
|
require.NoError(t, database.Create(&project).Error)
|
|
task := models.SaTask{ProjectID: project.ID, CreatedBy: owner.ID, Title: "回调任务", Description: "检查签名", Status: "open"}
|
|
require.NoError(t, database.Create(&task).Error)
|
|
document := createSearchDocument(t, database, project.ID, owner.ID, "接口说明.md", "回调验签流程", "", time.Time{})
|
|
router := searchHandlerTestRouter(owner.ID)
|
|
req := httptest.NewRequest(http.MethodGet, "/api/v1/search?q=%E5%9B%9E%E8%B0%83", nil)
|
|
req.Header.Set("Authorization", "Bearer test-token")
|
|
rec := httptest.NewRecorder()
|
|
|
|
router.ServeHTTP(rec, req)
|
|
|
|
require.Equal(t, http.StatusOK, rec.Code)
|
|
var payload map[string]any
|
|
require.NoError(t, json.Unmarshal(rec.Body.Bytes(), &payload))
|
|
require.ElementsMatch(t, []string{"items"}, searchMapKeys(payload))
|
|
items, ok := payload["items"].([]any)
|
|
require.True(t, ok)
|
|
require.Len(t, items, 3)
|
|
|
|
byType := make(map[string]map[string]any, len(items))
|
|
for _, raw := range items {
|
|
item, ok := raw.(map[string]any)
|
|
require.True(t, ok)
|
|
require.ElementsMatch(t, []string{"id", "type", "title", "projectId", "snippet"}, searchMapKeys(item))
|
|
byType[item["type"].(string)] = item
|
|
}
|
|
require.Equal(t, project.Identity, byType["project"]["id"])
|
|
require.Equal(t, project.Identity, byType["project"]["projectId"])
|
|
require.Equal(t, task.Identity, byType["task"]["id"])
|
|
require.Equal(t, project.Identity, byType["task"]["projectId"])
|
|
require.Equal(t, document.Identity, byType["document"]["id"])
|
|
require.Equal(t, project.Identity, byType["document"]["projectId"])
|
|
}
|
|
|
|
func TestSearchHandlerOnlyReturnsObjectsVisibleToCurrentUser(t *testing.T) {
|
|
database := newSearchHandlerTestDB(t)
|
|
owner := createSearchUser(t, database, "owner@example.com")
|
|
viewer := createSearchUser(t, database, "viewer@example.com")
|
|
project := models.SaProject{OwnerID: owner.ID, Name: "保密检索词项目", Identifier: "PRIVATE"}
|
|
require.NoError(t, database.Create(&project).Error)
|
|
assigned := models.SaTask{ProjectID: project.ID, CreatedBy: owner.ID, AssigneeID: &viewer.ID, Title: "检索词已指派任务", Status: "open"}
|
|
require.NoError(t, database.Create(&assigned).Error)
|
|
privateTask := models.SaTask{ProjectID: project.ID, CreatedBy: owner.ID, Title: "检索词私有任务", Status: "open"}
|
|
require.NoError(t, database.Create(&privateTask).Error)
|
|
sharedDocument := createSearchDocument(t, database, project.ID, owner.ID, "检索词共享文档.md", "已显式分享", "", time.Time{})
|
|
privateDocument := createSearchDocument(t, database, project.ID, owner.ID, "检索词私有文档.md", "不得泄漏", "", time.Time{})
|
|
otherProject := models.SaProject{OwnerID: owner.ID, Name: "其他项目", Identifier: "OTHER"}
|
|
require.NoError(t, database.Create(&otherProject).Error)
|
|
crossProjectDocument := createSearchDocument(t, database, otherProject.ID, owner.ID, "检索词跨项目文档.md", "伪造分享也不得泄漏", "", time.Time{})
|
|
require.NoError(t, database.Create(&models.SaTaskShare{
|
|
TaskID: assigned.ID, ObjectType: "document", ObjectID: sharedDocument.ID,
|
|
}).Error)
|
|
// 即使历史数据绕过服务层写入跨项目分享，搜索也必须在读取边界再次校验项目一致性。
|
|
require.NoError(t, database.Create(&models.SaTaskShare{
|
|
TaskID: assigned.ID, ObjectType: "document", ObjectID: crossProjectDocument.ID,
|
|
}).Error)
|
|
router := searchHandlerTestRouter(viewer.ID)
|
|
req := httptest.NewRequest(http.MethodGet, "/api/v1/search?q=%E6%A3%80%E7%B4%A2%E8%AF%8D", nil)
|
|
req.Header.Set("Authorization", "Bearer test-token")
|
|
rec := httptest.NewRecorder()
|
|
|
|
router.ServeHTTP(rec, req)
|
|
|
|
require.Equal(t, http.StatusOK, rec.Code)
|
|
var payload struct {
|
|
Items []struct {
|
|
ID string `json:"id"`
|
|
Type string `json:"type"`
|
|
ProjectID string `json:"projectId"`
|
|
} `json:"items"`
|
|
}
|
|
require.NoError(t, json.Unmarshal(rec.Body.Bytes(), &payload))
|
|
require.Len(t, payload.Items, 2)
|
|
require.ElementsMatch(t, []string{assigned.Identity, sharedDocument.Identity}, []string{payload.Items[0].ID, payload.Items[1].ID})
|
|
for _, item := range payload.Items {
|
|
require.Equal(t, project.Identity, item.ProjectID)
|
|
require.Contains(t, []string{"task", "document"}, item.Type)
|
|
require.NotEqual(t, privateTask.Identity, item.ID)
|
|
require.NotEqual(t, privateDocument.Identity, item.ID)
|
|
require.NotEqual(t, crossProjectDocument.Identity, item.ID)
|
|
require.NotEqual(t, project.Identity, item.ID)
|
|
}
|
|
}
|
|
|
|
func newSearchHandlerTestRouter(t *testing.T, userID uint) (http.Handler, *gorm.DB) {
|
|
t.Helper()
|
|
database := newSearchHandlerTestDB(t)
|
|
return searchHandlerTestRouter(userID), database
|
|
}
|
|
|
|
func searchHandlerTestRouter(userID uint) http.Handler {
|
|
return httpx.NewProtectedRouter(
|
|
config.Config{Env: "test"},
|
|
func(string) (uint, error) { return userID, nil },
|
|
NewHandler(NewService()),
|
|
)
|
|
}
|
|
|
|
func newSearchHandlerTestDB(t *testing.T) *gorm.DB {
|
|
t.Helper()
|
|
database, err := gorm.Open(sqlite.Open(fmt.Sprintf("file:%s?mode=memory&cache=shared", t.Name())), &gorm.Config{})
|
|
require.NoError(t, err)
|
|
require.NoError(t, models.AutoMigrate(database))
|
|
models.DBService = database
|
|
return database
|
|
}
|
|
|
|
func createSearchUser(t *testing.T, database *gorm.DB, email string) models.SaUser {
|
|
t.Helper()
|
|
user := models.SaUser{Email: email, DisplayName: email, PasswordHash: "hash"}
|
|
require.NoError(t, database.Create(&user).Error)
|
|
return user
|
|
}
|
|
|
|
func searchMapKeys(values map[string]any) []string {
|
|
keys := make([]string, 0, len(values))
|
|
for key := range values {
|
|
keys = append(keys, key)
|
|
}
|
|
return keys
|
|
}
|