You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
62 lines
2.1 KiB
62 lines
2.1 KiB
package api
|
|
|
|
import (
|
|
"context"
|
|
"net/http"
|
|
"net/http/httptest"
|
|
"strings"
|
|
"testing"
|
|
|
|
"tera-clone/services/tera-api/internal/adapters/mock"
|
|
"tera-clone/services/tera-api/internal/domain"
|
|
)
|
|
|
|
func TestPortLogClearRequiresAdminExactTargetAndConfirmation(t *testing.T) {
|
|
store := mock.NewStore(fixedClock)
|
|
for _, ch := range []string{"CH01", "CH02"} {
|
|
if _, err := store.RecordPortLog(context.Background(), domain.PortLogEvent{Channel: ch, EventType: "command", Command: "show version", ReturnValue: "ok", Message: "command completed", Actor: "tester"}); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
}
|
|
handler := NewRouter(store)
|
|
for _, tc := range []struct {
|
|
actor, body string
|
|
status int
|
|
}{
|
|
{"mock-port-operator", `{"channel":"CH01","confirmation":"CH01"}`, 403},
|
|
{"mock-admin", `{"channel":"CH01"}`, 400},
|
|
{"mock-admin", `{"channel":"","confirmation":""}`, 400},
|
|
{"mock-admin", `{"channel":"CH01","confirmation":"CH02"}`, 400},
|
|
{"mock-admin", `{"channel":"../audit","confirmation":"../audit"}`, 400},
|
|
{"mock-admin", `{"channel":"CH01","confirmation":"CH01","class":"audit"}`, 400},
|
|
} {
|
|
req := httptest.NewRequest(http.MethodPost, "/api/v1/logs/port/clear", strings.NewReader(tc.body))
|
|
req.Header.Set("X-Mock-Actor", tc.actor)
|
|
res := httptest.NewRecorder()
|
|
handler.ServeHTTP(res, req)
|
|
if res.Code != tc.status {
|
|
t.Fatalf("clear %s = %d: %s", tc.actor, res.Code, res.Body.String())
|
|
}
|
|
}
|
|
result := getJSONAs(t, handler, http.MethodPost, "/api/v1/logs/port/clear", `{"channel":"CH01","password":"mock-admin-secret"}`, "mock-admin")
|
|
if result["deleted"] != float64(1) || result["channel"] != "CH01" {
|
|
t.Fatalf("clear result = %+v", result)
|
|
}
|
|
rows, err := store.PortLogEvents(context.Background(), domain.PortLogFilter{})
|
|
if err != nil || len(rows) != 1 || rows[0].Channel != "CH02" {
|
|
t.Fatalf("remaining logs = %+v, %v", rows, err)
|
|
}
|
|
audit, err := store.AuditEvents(context.Background())
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
found := false
|
|
for _, event := range audit {
|
|
if event.Action == "log.port.clear" && event.Target == "CH01" && event.Result == "succeeded" {
|
|
found = true
|
|
}
|
|
}
|
|
if !found {
|
|
t.Fatal("successful deletion is not audited")
|
|
}
|
|
}
|
|
|