110 lines
4.5 KiB
Go
110 lines
4.5 KiB
Go
package config
|
|
|
|
import (
|
|
"strings"
|
|
"testing"
|
|
)
|
|
|
|
func TestApplyEnvRedisCacheSettings(t *testing.T) {
|
|
t.Setenv("REDIS_NAMESPACE", "tenant:prod:v2")
|
|
t.Setenv("HAIXUN_REDIS_NAMESPACE", "")
|
|
t.Setenv("AI_MODEL_CACHE_FINGERPRINT_SECRET", "dedicated-model-cache-secret-at-least-32-bytes")
|
|
t.Setenv("HAIXUN_AI_MODEL_CACHE_FINGERPRINT_SECRET", "")
|
|
|
|
var c Config
|
|
c.ApplyEnv()
|
|
if c.Redis.Namespace != "tenant:prod:v2" {
|
|
t.Fatalf("namespace=%q", c.Redis.Namespace)
|
|
}
|
|
if c.Redis.AIModelCacheFingerprintSecret != "dedicated-model-cache-secret-at-least-32-bytes" {
|
|
t.Fatalf("fingerprint secret environment override was not applied")
|
|
}
|
|
}
|
|
|
|
func TestApplyEnvDefaultsRedisNamespace(t *testing.T) {
|
|
t.Setenv("REDIS_NAMESPACE", "")
|
|
t.Setenv("HAIXUN_REDIS_NAMESPACE", "")
|
|
|
|
var c Config
|
|
c.ApplyEnv()
|
|
if c.Redis.Namespace != "haixun:dev:v1" {
|
|
t.Fatalf("namespace=%q", c.Redis.Namespace)
|
|
}
|
|
}
|
|
|
|
func TestApplyEnvStripeSettings(t *testing.T) {
|
|
t.Setenv("STRIPE_ENABLED", "true")
|
|
t.Setenv("STRIPE_SECRET_KEY", "sk_test")
|
|
t.Setenv("STRIPE_WEBHOOK_SECRET", "whsec_test")
|
|
t.Setenv("STRIPE_STARTER_PRICE_ID", "price_starter")
|
|
t.Setenv("STRIPE_PRO_PRICE_ID", "price_pro")
|
|
t.Setenv("STRIPE_SUCCESS_URL", "https://app.test/success")
|
|
t.Setenv("STRIPE_CANCEL_URL", "https://app.test/cancel")
|
|
t.Setenv("STRIPE_PORTAL_RETURN_URL", "https://app.test/billing")
|
|
|
|
var c Config
|
|
c.ApplyEnv()
|
|
if !c.Stripe.Enabled || c.Stripe.SecretKey != "sk_test" || c.Stripe.WebhookSecret != "whsec_test" || c.Stripe.StarterPriceID != "price_starter" || c.Stripe.ProPriceID != "price_pro" || c.Stripe.SuccessURL != "https://app.test/success" || c.Stripe.CancelURL != "https://app.test/cancel" || c.Stripe.PortalReturnURL != "https://app.test/billing" {
|
|
t.Fatalf("Stripe environment was not fully applied: %+v", c.Stripe)
|
|
}
|
|
}
|
|
|
|
func TestApplyEnvScoutAndSeedSecrets(t *testing.T) {
|
|
t.Setenv("SCOUT_SESSION_SECRET", "dedicated-scout-secret")
|
|
t.Setenv("SCOUT_CRAWLER_ENDPOINT", "http://127.0.0.1:3010")
|
|
t.Setenv("SCOUT_CRAWLER_TOKEN", "crawler-token")
|
|
t.Setenv("SEED_ADMIN_PASSWORD", "seed-password")
|
|
|
|
var c Config
|
|
c.ApplyEnv()
|
|
if c.Scout.SessionSecret != "dedicated-scout-secret" || c.Scout.CrawlerEndpoint != "http://127.0.0.1:3010" || c.Scout.CrawlerToken != "crawler-token" || c.Seed.AdminPassword != "seed-password" {
|
|
t.Fatalf("Scout or seed environment was not fully applied")
|
|
}
|
|
}
|
|
|
|
func TestApplyEnvInvalidPortDoesNotSkipLaterOverrides(t *testing.T) {
|
|
t.Setenv("PORT", "invalid")
|
|
t.Setenv("PUBLIC_WEB_BASE", "https://app.test")
|
|
|
|
var c Config
|
|
c.ApplyEnv()
|
|
if c.PublicWebBase != "https://app.test" {
|
|
t.Fatalf("invalid PORT skipped later environment overrides")
|
|
}
|
|
}
|
|
|
|
func TestValidateProductionDependenciesRequiresDedicatedCacheSecret(t *testing.T) {
|
|
var c Config
|
|
c.Auth.AccessSecret = strings.Repeat("a", 40)
|
|
c.Auth.RefreshSecret = strings.Repeat("b", 40)
|
|
|
|
err := c.ValidateProductionDependencies()
|
|
if err == nil || !strings.Contains(err.Error(), "AI_MODEL_CACHE_FINGERPRINT_SECRET") {
|
|
t.Fatalf("unexpected validation error %v", err)
|
|
}
|
|
|
|
c.Redis.AIModelCacheFingerprintSecret = c.Auth.AccessSecret
|
|
err = c.ValidateProductionDependencies()
|
|
if err == nil || !strings.Contains(err.Error(), "must be dedicated") {
|
|
t.Fatalf("unexpected reused-secret validation error %v", err)
|
|
}
|
|
}
|
|
|
|
func TestValidateStripeEnabledConfiguration(t *testing.T) {
|
|
valid := func(successURL string) error {
|
|
return validateStripe(true, "sk_test_key", "whsec_test_secret", "price_starter", "price_pro", successURL, "https://app.test/app/usage/checkout?result=cancel", "https://app.test/app/usage/plans")
|
|
}
|
|
if err := valid("https://app.test/app/usage/checkout?result=success&checkout_id={CHECKOUT_ID}"); err != nil {
|
|
t.Fatalf("valid Stripe configuration rejected: %v", err)
|
|
}
|
|
if err := valid("https://app.test/app/usage/checkout?result=success"); err == nil || !strings.Contains(err.Error(), "{CHECKOUT_ID}") {
|
|
t.Fatalf("missing checkout token validation error = %v", err)
|
|
}
|
|
if err := validateStripe(true, "sk_test_key", "whsec_test_secret", "price_same", "price_same", "https://app.test/success?checkout_id={CHECKOUT_ID}", "https://app.test/cancel", "https://app.test/plans"); err == nil || !strings.Contains(err.Error(), "must differ") {
|
|
t.Fatalf("duplicate Price ID validation error = %v", err)
|
|
}
|
|
if err := validateStripe(true, "sk_test_key", "whsec_test_secret", "price_starter", "price_pro", "http://app.test/success?checkout_id={CHECKOUT_ID}", "https://app.test/cancel", "https://app.test/plans"); err == nil || !strings.Contains(err.Error(), "HTTPS") {
|
|
t.Fatalf("insecure URL validation error = %v", err)
|
|
}
|
|
}
|