mirror of
https://ghfast.top/https://github.com/aeroxw/tick-stock-panel.git
synced 2026-09-12 14:24:15 +08:00
Arepeater
b43e2fe44a
- 统一开发脚本、Vite 代理与 Docker Compose 的 HOST/PORT 配置
- 首次启动按字面值读取 AUTH_PASSWORD，避免 ${VAR} 被环境变量插值
- 已有 auth.json 时继续以 Web 端密码为准，不受 .env 覆盖
67 lines
2.3 KiB
Python
67 lines
2.3 KiB
Python
from __future__ import annotations
|
|
|
|
from collections.abc import Iterator
|
|
from pathlib import Path
|
|
from types import ModuleType
|
|
|
|
import pytest
|
|
|
|
from app import config as app_config
|
|
from app.config import Settings
|
|
|
|
|
|
@pytest.fixture(autouse=True)
|
|
def isolated_auth_store(
|
|
monkeypatch: pytest.MonkeyPatch,
|
|
tmp_path: Path,
|
|
) -> Iterator[tuple[ModuleType, Path, Path]]:
|
|
monkeypatch.setattr(app_config.settings, "data_dir", tmp_path)
|
|
from app.services import auth
|
|
|
|
auth_path = tmp_path / "user_data" / "auth.json"
|
|
env_path = tmp_path / ".env"
|
|
monkeypatch.setattr(app_config, "_ENV_FILE", env_path)
|
|
monkeypatch.setattr(app_config.settings, "auth_password", "")
|
|
auth._sessions.clear()
|
|
auth._configured_cache = None
|
|
yield auth, auth_path, env_path
|
|
auth._sessions.clear()
|
|
auth._configured_cache = None
|
|
|
|
|
|
def test_bootstrap_recovers_compose_interpolated_password_from_raw_env(
|
|
isolated_auth_store: tuple[ModuleType, Path, Path],
|
|
monkeypatch: pytest.MonkeyPatch,
|
|
tmp_path: Path,
|
|
) -> None:
|
|
auth, auth_path, env_path = isolated_auth_store
|
|
password = "pw${special}-secret"
|
|
env_path.write_text(
|
|
f"AUTH_PASSWORD={password}\nDATA_DIR={tmp_path}\n",
|
|
encoding="utf-8",
|
|
)
|
|
configured = Settings(_env_file=env_path)
|
|
configured.auth_password = "pw-secret" # 模拟 Compose 将未定义的 ${special} 插值为空串
|
|
monkeypatch.setattr(app_config, "settings", configured)
|
|
|
|
assert auth.bootstrap_from_env() is True
|
|
assert auth_path.exists()
|
|
assert password not in auth_path.read_text(encoding="utf-8")
|
|
assert auth.verify_and_create_session(password) is not None
|
|
assert auth.verify_and_create_session("pw-secret") is None
|
|
|
|
|
|
def test_bootstrap_from_env_does_not_override_existing_password(
|
|
isolated_auth_store: tuple[ModuleType, Path, Path],
|
|
) -> None:
|
|
auth, auth_path, env_path = isolated_auth_store
|
|
auth.set_password("web-managed-secret")
|
|
before = auth_path.read_bytes()
|
|
env_path.write_text("AUTH_PASSWORD=replacement-secret\n", encoding="utf-8")
|
|
app_config.settings.auth_password = "replacement-secret"
|
|
|
|
assert auth.bootstrap_from_env() is False
|
|
assert auth_path.read_bytes() == before
|
|
assert auth.verify_and_create_session("web-managed-secret") is not None
|
|
assert auth.verify_and_create_session("replacement-secret") is None
|