package integration_test import ( "context" "encoding/json" "fmt" "net/http" "testing" "time" "github.com/google/uuid" "golang.org/x/crypto/bcrypt" ) func TestExploreStarConfigs(t *testing.T) { r, pool := setupAPIPool(t) ctx := context.Background() tok := adminLogin(t, r, "admin", "change-me") _, code := doAdminJSON(t, r, http.MethodGet, "/api/v1/admin/explore/star-configs", nil, "") if code != http.StatusUnauthorized { t.Fatalf("expected 401, got %d", code) } limitedRoleID := uuid.New() _, err := pool.Exec(ctx, `INSERT INTO admin_roles(id, name, system) VALUES ($1,$2,false)`, limitedRoleID, "lim_"+limitedRoleID.String()[:8]) if err != nil { t.Fatal(err) } _, err = pool.Exec(ctx, `INSERT INTO admin_role_permissions(role_id, code) VALUES ($1,'admin.users.read')`, limitedRoleID) if err != nil { t.Fatal(err) } hash, err := bcrypt.GenerateFromPassword([]byte("limited-pass"), bcrypt.DefaultCost) if err != nil { t.Fatal(err) } limUser := fmt.Sprintf("lim_%d", time.Now().UnixNano()) _, err = pool.Exec(ctx, `INSERT INTO admin_accounts(username, password_hash, role_id) VALUES ($1,$2,$3)`, limUser, string(hash), limitedRoleID) if err != nil { t.Fatal(err) } t.Cleanup(func() { _, _ = pool.Exec(ctx, `DELETE FROM admin_accounts WHERE username=$1`, limUser) _, _ = pool.Exec(ctx, `DELETE FROM admin_roles WHERE id=$1`, limitedRoleID) }) limTok := adminLogin(t, r, limUser, "limited-pass") _, code = doAdminJSON(t, r, http.MethodGet, "/api/v1/admin/explore/star-configs", nil, limTok) if code != http.StatusForbidden { t.Fatalf("expected 403, got %d", code) } start := time.Now() env, code := doAdminJSON(t, r, http.MethodGet, "/api/v1/admin/explore/star-configs", nil, tok) if code != 200 || env.Code != 0 { t.Fatalf("list http=%d msg=%s", code, env.Message) } if time.Since(start) > 500*time.Millisecond { t.Fatalf("list too slow %v", time.Since(start)) } var list struct { Items []struct { ID string `json:"id"` Code string `json:"code"` } `json:"items"` } _ = json.Unmarshal(env.Data, &list) var id string for _, it := range list.Items { if it.Code == "default_star" { id = it.ID break } } if id == "" { t.Fatalf("missing default_star: %#v", list.Items) } env, code = doAdminJSON(t, r, http.MethodGet, "/api/v1/admin/explore/star-configs/"+id, nil, tok) if code != 200 { t.Fatalf("get %d", code) } _, code = doAdminJSON(t, r, http.MethodGet, "/api/v1/admin/explore/star-configs/"+fakeUUID(), nil, tok) if code != http.StatusNotFound { t.Fatalf("expected 404, got %d", code) } }