112 lines
4.7 KiB
JavaScript
112 lines
4.7 KiB
JavaScript
/**
|
|
* 操作记录（审计）单元测试
|
|
* 覆盖：appendAuditLog/loadAuditLogs 读写与过滤、auditService.log 静默容错、getClientIp 支持 nginx 转发
|
|
* 运行：npm test
|
|
*/
|
|
const test = require("node:test");
|
|
const assert = require("node:assert");
|
|
const fs = require("node:fs");
|
|
const os = require("node:os");
|
|
const path = require("node:path");
|
|
|
|
// 使用临时数据目录，避免污染真实 data/
|
|
const tmpDataDir = fs.mkdtempSync(path.join(os.tmpdir(), "registry-audit-test-"));
|
|
process.env.REGISTRY_DATA_DIR = tmpDataDir;
|
|
|
|
const duckdbAdapter = require("../src/persistence/duckdbAdapter");
|
|
const { log: auditLog, getClientIp } = require("../src/services/auditService");
|
|
|
|
test.before(async () => {
|
|
await duckdbAdapter.init();
|
|
});
|
|
|
|
test("记录一条配置操作并可按项目/键查询", async () => {
|
|
await auditLog({
|
|
source: "web",
|
|
actor: "admin",
|
|
ip: "203.0.113.9",
|
|
projectId: "proj-a",
|
|
key: "db/host",
|
|
action: "update",
|
|
value: "db.internal",
|
|
detail: { from: { key: "db/host", value: "old" }, to: { key: "db/host", value: "db.internal" } },
|
|
});
|
|
|
|
const byProject = await duckdbAdapter.loadAuditLogs({ projectId: "proj-a" });
|
|
assert.strictEqual(byProject.items.length, 1);
|
|
assert.strictEqual(byProject.total, 1);
|
|
const byKey = await duckdbAdapter.loadAuditLogs({ projectId: "proj-a", key: "db/host" });
|
|
assert.strictEqual(byKey.items.length, 1);
|
|
// 其它项目/键查不到
|
|
assert.strictEqual((await duckdbAdapter.loadAuditLogs({ projectId: "proj-b" })).items.length, 0);
|
|
assert.strictEqual((await duckdbAdapter.loadAuditLogs({ projectId: "proj-a", key: "other" })).items.length, 0);
|
|
|
|
const rec = byKey.items[0];
|
|
assert.strictEqual(rec.source, "web");
|
|
assert.strictEqual(rec.actor, "admin");
|
|
assert.strictEqual(rec.ip, "203.0.113.9");
|
|
assert.strictEqual(rec.action, "update");
|
|
assert.strictEqual(rec.value, "db.internal");
|
|
assert.strictEqual(rec.detail.from.value, "old");
|
|
assert.ok(rec.createdAt);
|
|
});
|
|
|
|
test("记录按时间倒序返回，MCP 来源也正确记录 Token 名", async () => {
|
|
await auditLog({ source: "mcp", actor: "ci-token", ip: "10.0.0.1", projectId: "proj-a", key: "k/1", action: "read", value: "x" });
|
|
await auditLog({ source: "mcp", actor: "ci-token", ip: "10.0.0.1", projectId: "proj-a", key: "k/1", action: "create", value: "x" });
|
|
|
|
const logs = await duckdbAdapter.loadAuditLogs({ projectId: "proj-a", key: "k/1" });
|
|
const items = logs.items;
|
|
assert.strictEqual(items.length, 2);
|
|
assert.ok(items[0].createdAt >= items[1].createdAt, "最新的应在前");
|
|
assert.ok(items.every((l) => l.source === "mcp" && l.actor === "ci-token"));
|
|
});
|
|
|
|
test("分页与过滤：action / start-end 时间范围 / 键名模糊匹配 / 页码切片", async () => {
|
|
const base = Date.now() - 5 * 60000;
|
|
for (let i = 1; i <= 3; i++) {
|
|
await duckdbAdapter.appendAuditLog({
|
|
id: "aud-pg-" + i,
|
|
source: "mcp",
|
|
actor: "ci-token",
|
|
projectId: "proj-p",
|
|
key: `svc/app-${i}`,
|
|
action: i === 3 ? "delete" : "create",
|
|
value: `v${i}`,
|
|
createdAt: new Date(base + i * 1000).toISOString(),
|
|
});
|
|
}
|
|
|
|
// 分页：page=1 取 2 条，total 应为 3
|
|
const page1 = await duckdbAdapter.loadAuditLogs({ projectId: "proj-p", page: 1, pageSize: 2 });
|
|
assert.strictEqual(page1.items.length, 2);
|
|
assert.strictEqual(page1.total, 3);
|
|
assert.strictEqual(page1.page, 1);
|
|
assert.strictEqual(page1.pageSize, 2);
|
|
const page2 = await duckdbAdapter.loadAuditLogs({ projectId: "proj-p", page: 2, pageSize: 2 });
|
|
assert.strictEqual(page2.items.length, 1);
|
|
|
|
// action 过滤
|
|
const creates = await duckdbAdapter.loadAuditLogs({ projectId: "proj-p", action: "create" });
|
|
assert.strictEqual(creates.items.length, 2);
|
|
assert.strictEqual(creates.items.every((l) => l.action === "create"), true);
|
|
const deletes = await duckdbAdapter.loadAuditLogs({ projectId: "proj-p", action: "delete" });
|
|
assert.strictEqual(deletes.items.length, 1);
|
|
|
|
// key 模糊匹配
|
|
const fuzzy = await duckdbAdapter.loadAuditLogs({ projectId: "proj-p", key: "app-" });
|
|
assert.strictEqual(fuzzy.items.length, 3);
|
|
|
|
// 时间范围：取中间那条
|
|
const midStart = new Date(base + 1500).toISOString();
|
|
const midEnd = new Date(base + 2500).toISOString();
|
|
const range = await duckdbAdapter.loadAuditLogs({ projectId: "proj-p", start: midStart, end: midEnd });
|
|
assert.strictEqual(range.items.length, 1);
|
|
assert.strictEqual(range.items[0].key, "svc/app-2");
|
|
});
|
|
|
|
test("getClientIp 优先取 X-Forwarded-For，其次 remoteAddress", () => {
|
|
assert.strictEqual(getClientIp({ headers: { "x-forwarded-for": "203.0.113.50, 10.0.0.5" } }), "203.0.113.50");
|
|
assert.strictEqual(getClientIp({ headers: {}, socket: { remoteAddress: "127.0.0.1" } }), "127.0.0.1");
|
|
assert.strictEqual(getClientIp(null), "");
|
|
}); |