root/geo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(desktop): implement workspace foundation + desktop-client skeleton

Browse Source 
Plan 0 (workspaces): add workspaces + workspace_memberships schema, extend
JWT/Actor/claims with primary_workspace_id, seed default workspace per tenant,
thread workspace_id through tenant monitoring quota.

Plan A (desktop skeleton): new Electron app (apps/desktop-client) with main/
preload/renderer, shared Vue component package (packages/ui-shared), and server
surface — desktop client registration + token rotation + heartbeat, SSE task
event stream, desktop accounts/tasks/content handlers, publish job endpoint,
and supporting repositories, services, sqlc queries, and migrations.

Hard cutover per plan: remove browser-extension monitoring callback endpoints,
stub legacy media API in admin-web, and delete monitoring_callback_handler.go.
This commit is contained in:
liangxu
2026-04-19 14:18:20 +08:00
parent 98f9e95875
commit b16e9f0bd1
141 changed files with 21533 additions and 357 deletions
Download Patch File Download Diff File Expand all files Collapse all files
server/internal/shared/auth/jwt_test.go
+5 -4
View File
@@ -11,7 +11,7 @@ import (
func TestIssueAndParse(t *testing.T) {
mgr := NewManager("test-secret-key", 15*time.Minute, 7*24*time.Hour)
pair, err := mgr.Issue(42, 10, "tenant_admin")
pair, err := mgr.Issue(42, 10, 100, "tenant_admin")
require.NoError(t, err)
assert.NotEmpty(t, pair.AccessToken)
assert.NotEmpty(t, pair.RefreshToken)
@@ -23,6 +23,7 @@ func TestIssueAndParse(t *testing.T) {
require.NoError(t, err)
assert.Equal(t, int64(42), claims.UserID)
assert.Equal(t, int64(10), claims.TenantID)
assert.Equal(t, int64(100), claims.PrimaryWorkspaceID)
assert.Equal(t, "tenant_admin", claims.Role)
assert.Equal(t, "access", claims.Subject)
assert.Equal(t, pair.AccessJTI, claims.ID)
@@ -31,7 +32,7 @@ func TestIssueAndParse(t *testing.T) {
func TestParseRefreshToken(t *testing.T) {
mgr := NewManager("test-secret-key", 15*time.Minute, 7*24*time.Hour)
pair, err := mgr.Issue(1, 1, "viewer")
pair, err := mgr.Issue(1, 1, 10, "viewer")
require.NoError(t, err)
claims, err := mgr.Parse(pair.RefreshToken)
@@ -43,7 +44,7 @@ func TestParseRefreshToken(t *testing.T) {
func TestParseExpired(t *testing.T) {
mgr := NewManager("test-secret-key", -1*time.Second, -1*time.Second)
pair, err := mgr.Issue(1, 1, "viewer")
pair, err := mgr.Issue(1, 1, 10, "viewer")
require.NoError(t, err)
_, err = mgr.Parse(pair.AccessToken)
@@ -54,7 +55,7 @@ func TestParseWrongSecret(t *testing.T) {
mgr1 := NewManager("secret-one", 15*time.Minute, 7*24*time.Hour)
mgr2 := NewManager("secret-two", 15*time.Minute, 7*24*time.Hour)
pair, err := mgr1.Issue(1, 1, "viewer")
pair, err := mgr1.Issue(1, 1, 10, "viewer")
require.NoError(t, err)
_, err = mgr2.Parse(pair.AccessToken)