admin
e51666c52e
- 新增 web_sessions 表（sqlc）：refresh_token 以 AES-256-GCM 落盘，密钥取自 CDROP_SESSION_SECRET（env、不在库内）；cookie 仅存不透明随机串，表 id 存其 SHA-256，故 DB 单独泄露既换不出可用 cookie、也解不出 token - /auth/exchange 建 session 并下发 HttpOnly; Secure; SameSite=Lax; Path=/api/auth cookie，响应体不再回传 refresh_token - /auth/refresh 改为 cookie 驱动（7 天滑动失活），同时即开机静默免重登； 新增 /auth/logout（删 session + 清 cookie）、/auth/device（写设备名入 session） - device_name 随 session 存，开机 refresh 带回前端，抗 iOS PWA 存储清除； setup / 改名时 syncWebDeviceName 推送服务端 - striped per-session 锁串行化同会话并发 refresh，防一次性 refresh_token 被 花两次而把用户从所有 tab 登出 - 前端 store 移除 refreshToken 字段（长寿命凭据彻底不进 JS）；main.tsx 首屏前 bootstrapAuth 用 cookie 静默续期，命中直接进已登录态、避免登录页闪现 - config：prod 强制 CDROP_SESSION_SECRET，缺失拒启动 - 桌面端不受影响（自有 loopback flow + Go keyring，不碰这两个端点）
117 lines
3.0 KiB
Go
117 lines
3.0 KiB
Go
package db
|
|
|
|
import (
|
|
"context"
|
|
"path/filepath"
|
|
"sort"
|
|
"testing"
|
|
)
|
|
|
|
func TestBootstrapCreatesAllTables(t *testing.T) {
|
|
tmp := filepath.Join(t.TempDir(), "test.db")
|
|
d, err := Open(tmp)
|
|
if err != nil {
|
|
t.Fatalf("open: %v", err)
|
|
}
|
|
defer d.Close()
|
|
|
|
if err := Bootstrap(context.Background(), d); err != nil {
|
|
t.Fatalf("bootstrap: %v", err)
|
|
}
|
|
|
|
want := []string{"clipboard_state", "devices", "shortcut_tokens", "transfer_sessions", "web_sessions"}
|
|
rows, err := d.Query("SELECT name FROM sqlite_master WHERE type='table' AND name NOT LIKE 'sqlite_%' ORDER BY name")
|
|
if err != nil {
|
|
t.Fatalf("query tables: %v", err)
|
|
}
|
|
defer rows.Close()
|
|
|
|
var got []string
|
|
for rows.Next() {
|
|
var name string
|
|
if err := rows.Scan(&name); err != nil {
|
|
t.Fatalf("scan: %v", err)
|
|
}
|
|
got = append(got, name)
|
|
}
|
|
sort.Strings(got)
|
|
if len(got) != len(want) {
|
|
t.Fatalf("table count: got %v, want %v", got, want)
|
|
}
|
|
for i := range want {
|
|
if got[i] != want[i] {
|
|
t.Errorf("table[%d]: got %q, want %q", i, got[i], want[i])
|
|
}
|
|
}
|
|
}
|
|
|
|
func TestBootstrapIsIdempotent(t *testing.T) {
|
|
tmp := filepath.Join(t.TempDir(), "test.db")
|
|
d, err := Open(tmp)
|
|
if err != nil {
|
|
t.Fatalf("open: %v", err)
|
|
}
|
|
defer d.Close()
|
|
|
|
for i := 0; i < 3; i++ {
|
|
if err := Bootstrap(context.Background(), d); err != nil {
|
|
t.Fatalf("bootstrap iter %d: %v", i, err)
|
|
}
|
|
}
|
|
}
|
|
|
|
func TestOpenEnablesWALMode(t *testing.T) {
|
|
tmp := filepath.Join(t.TempDir(), "test.db")
|
|
d, err := Open(tmp)
|
|
if err != nil {
|
|
t.Fatalf("open: %v", err)
|
|
}
|
|
defer d.Close()
|
|
|
|
var mode string
|
|
if err := d.QueryRow("PRAGMA journal_mode").Scan(&mode); err != nil {
|
|
t.Fatalf("pragma: %v", err)
|
|
}
|
|
if mode != "wal" {
|
|
t.Errorf("journal_mode: got %q, want %q", mode, "wal")
|
|
}
|
|
}
|
|
|
|
// Simulates the prod upgrade: a clipboard_state created before the version
|
|
// column existed must gain it (defaulting to 0) on bootstrap, idempotently.
|
|
func TestBootstrapAddsClipboardVersionToLegacyDB(t *testing.T) {
|
|
tmp := filepath.Join(t.TempDir(), "legacy.db")
|
|
d, err := Open(tmp)
|
|
if err != nil {
|
|
t.Fatalf("open: %v", err)
|
|
}
|
|
defer d.Close()
|
|
|
|
_, err = d.Exec(`CREATE TABLE clipboard_state (
|
|
user_id TEXT PRIMARY KEY, content_type TEXT NOT NULL, content TEXT,
|
|
source_device TEXT, updated_at INTEGER NOT NULL)`)
|
|
if err != nil {
|
|
t.Fatalf("legacy schema: %v", err)
|
|
}
|
|
if _, err := d.Exec(`INSERT INTO clipboard_state (user_id, content_type, content, updated_at)
|
|
VALUES ('u', 'text/plain', 'hi', 100)`); err != nil {
|
|
t.Fatalf("seed row: %v", err)
|
|
}
|
|
|
|
if err := Bootstrap(context.Background(), d); err != nil {
|
|
t.Fatalf("bootstrap: %v", err)
|
|
}
|
|
|
|
var version int64
|
|
if err := d.QueryRow(`SELECT version FROM clipboard_state WHERE user_id='u'`).Scan(&version); err != nil {
|
|
t.Fatalf("select version (column missing?): %v", err)
|
|
}
|
|
if version != 0 {
|
|
t.Errorf("legacy row version: got %d, want 0", version)
|
|
}
|
|
// Second bootstrap must be a no-op (column already present).
|
|
if err := Bootstrap(context.Background(), d); err != nil {
|
|
t.Fatalf("second bootstrap: %v", err)
|
|
}
|
|
}
|