cdrop — 跨 OS 剪贴板与文件传输服务

Commilitia Drop：自托管的跨设备剪贴板同步与点对点文件传输。 - 后端 Go（chi / SQLite WAL / SSE Hub / WebRTC signaling + 状态机 / Relay ring buffer），编译进单个 distroless 镜像（前端 go:embed）。 - 前端 React + TanStack Router + Zustand，自实现 SSE + WebRTC P2P，NAT 受阻时回退服务端中继；聚珍（Juzhen）CJK 综合排版。 - 桌面端 Wails v2（macOS / Windows），瘦客户端复用 web。 - 鉴权 OIDC PKCE（自建 Casdoor 等），refresh_token 信封加密存系统密钥库；iOS Shortcut 用 HS256 scoped token。架构文档与变更记录见 docs 分支（PROJECT_BRIEF / FRONTEND_DESIGN / CHANGELOG）。本次为公开发布初始提交：完整开发历史（含部署细节）留存于私有归档，公开仓库自此干净起步。
2026-06-15 21:38:28 +08:00
commit f21fa5b5e8
239 changed files with 29010 additions and 0 deletions
@@ -0,0 +1,69 @@
+package platform
+
+import (
+	"context"
+	"encoding/json"
+	"net/http"
+	"net/http/httptest"
+	"testing"
+)
+
+func TestFetchOAuthConfig_Success(t *testing.T) {
+	srv := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		if r.URL.Path != "/api/auth/config" {
+			t.Errorf("path = %s, want /api/auth/config", r.URL.Path)
+		}
+		w.Header().Set("Content-Type", "application/json")
+		_ = json.NewEncoder(w).Encode(map[string]any{
+			"auth_mode":     "prod",
+			"authorize_url": "https://casdoor.example/login/oauth/authorize",
+			"token_url":     "https://casdoor.example/api/login/oauth/access_token",
+			"client_id":     "web-client-id",
+			"redirect_uri":  "https://drop.example/oauth/callback",
+			"scopes":        "openid profile groups",
+		})
+	}))
+	defer srv.Close()
+
+	// trailing slash on apiBase must be tolerated
+	cfg, err := FetchOAuthConfig(context.Background(), srv.URL+"/")
+	if err != nil {
+		t.Fatalf("FetchOAuthConfig: %v", err)
+	}
+	if cfg.ClientID != "web-client-id" {
+		t.Errorf("client_id = %q, want web-client-id (reused web client)", cfg.ClientID)
+	}
+	if cfg.TokenURL != "https://casdoor.example/api/login/oauth/access_token" {
+		t.Errorf("token_url = %q", cfg.TokenURL)
+	}
+	if cfg.Scopes != "openid profile groups" {
+		t.Errorf("scopes = %q", cfg.Scopes)
+	}
+}
+
+func TestFetchOAuthConfig_Incomplete(t *testing.T) {
+	// backend missing token_url / client_id (e.g. dev mode) must be rejected.
+	srv := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, _ *http.Request) {
+		w.Header().Set("Content-Type", "application/json")
+		_ = json.NewEncoder(w).Encode(map[string]any{
+			"auth_mode":     "dev",
+			"authorize_url": "https://casdoor.example/login/oauth/authorize",
+		})
+	}))
+	defer srv.Close()
+
+	if _, err := FetchOAuthConfig(context.Background(), srv.URL); err == nil {
+		t.Fatal("want error for incomplete backend config, got nil")
+	}
+}
+
+func TestFetchOAuthConfig_BadStatus(t *testing.T) {
+	srv := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, _ *http.Request) {
+		w.WriteHeader(http.StatusInternalServerError)
+	}))
+	defer srv.Close()
+
+	if _, err := FetchOAuthConfig(context.Background(), srv.URL); err == nil {
+		t.Fatal("want error for 500 status, got nil")
+	}
+}