Files
geo/server/internal/tenant/transport/desktop_client_auth_test.go
T
root b16e9f0bd1 feat(desktop): implement workspace foundation + desktop-client skeleton
Plan 0 (workspaces): add workspaces + workspace_memberships schema, extend
JWT/Actor/claims with primary_workspace_id, seed default workspace per tenant,
thread workspace_id through tenant monitoring quota.

Plan A (desktop skeleton): new Electron app (apps/desktop-client) with main/
preload/renderer, shared Vue component package (packages/ui-shared), and server
surface — desktop client registration + token rotation + heartbeat, SSE task
event stream, desktop accounts/tasks/content handlers, publish job endpoint,
and supporting repositories, services, sqlc queries, and migrations.

Hard cutover per plan: remove browser-extension monitoring callback endpoints,
stub legacy media API in admin-web, and delete monitoring_callback_handler.go.
2026-04-19 14:18:20 +08:00

92 lines
2.5 KiB
Go

package transport
import (
"context"
"net/http"
"net/http/httptest"
"testing"
"time"
"github.com/gin-gonic/gin"
"github.com/google/uuid"
"github.com/stretchr/testify/assert"
"github.com/geo-platform/tenant-api/internal/tenant/repository"
)
type stubDesktopClientRepo struct {
client *repository.DesktopClient
}
func (s *stubDesktopClientRepo) Register(ctx context.Context, params repository.RegisterDesktopClientParams) (*repository.DesktopClient, error) {
panic("unexpected call")
}
func (s *stubDesktopClientRepo) GetByTokenHash(ctx context.Context, tokenHash []byte) (*repository.DesktopClient, error) {
if s.client == nil {
return nil, context.Canceled
}
return s.client, nil
}
func (s *stubDesktopClientRepo) RotateToken(ctx context.Context, params repository.RotateDesktopClientTokenParams) (*repository.DesktopClient, error) {
panic("unexpected call")
}
func (s *stubDesktopClientRepo) Heartbeat(ctx context.Context, params repository.HeartbeatDesktopClientParams) (*repository.DesktopClient, error) {
panic("unexpected call")
}
func (s *stubDesktopClientRepo) Revoke(ctx context.Context, id uuid.UUID, workspaceID int64) (*repository.DesktopClient, error) {
panic("unexpected call")
}
func (s *stubDesktopClientRepo) ListByWorkspace(ctx context.Context, workspaceID int64) ([]repository.DesktopClient, error) {
panic("unexpected call")
}
func TestDesktopClientMiddleware_RequiresBearerToken(t *testing.T) {
gin.SetMode(gin.TestMode)
router := gin.New()
router.Use(DesktopClientMiddleware(&stubDesktopClientRepo{}))
router.POST("/test", func(c *gin.Context) {
c.Status(http.StatusOK)
})
req := httptest.NewRequest(http.MethodPost, "/test", nil)
resp := httptest.NewRecorder()
router.ServeHTTP(resp, req)
assert.Equal(t, http.StatusUnauthorized, resp.Code)
}
func TestDesktopClientMiddleware_SetsClientContext(t *testing.T) {
gin.SetMode(gin.TestMode)
expectedID := uuid.New()
router := gin.New()
router.Use(DesktopClientMiddleware(&stubDesktopClientRepo{
client: &repository.DesktopClient{
ID: expectedID,
TenantID: 1,
WorkspaceID: 2,
UserID: 3,
CreatedAt: time.Now(),
},
}))
var gotID uuid.UUID
router.POST("/test", func(c *gin.Context) {
client := MustDesktopClient(c.Request.Context())
gotID = client.ID
c.Status(http.StatusOK)
})
req := httptest.NewRequest(http.MethodPost, "/test", nil)
req.Header.Set("Authorization", "Bearer client-token")
resp := httptest.NewRecorder()
router.ServeHTTP(resp, req)
assert.Equal(t, http.StatusOK, resp.Code)
assert.Equal(t, expectedID, gotID)
}