让 /admin/ops 错误详情正确归因 API key 并补全早退场景字段,合并三项改动: - 鉴权早退补全用户/分组/平台字段:引入 ops fallback key(ContextKeyOpsFallbackAPIKey), apiKey 一加载成功即写入,覆盖分组停用/删除、Key 停用/过期/额度、用户停用、IP 限制等早退 路径;ops 错误日志改用 getOpsAPIKey(正式 key 优先、回退键兜底),不改「已鉴权」语义。 - 已删除 key 归因(迁移 145):删除 key 时同一事务写 deleted_api_key_audits 映射,认证失败 时用明文反查命中原所有者,错误详情展示「已删除 Key 所有者」「尝试的 Key 前缀」。 - 有效 key 报错快照前缀(迁移 147):对绑定有效 key 的错误,落库时快照明文前 8 位到 api_key_prefix(与 attempted_key_prefix 互斥),key 之后被删仍保留报错当时真实前缀。 均仅对上线后新产生的错误/删除生效。 Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
177 lines
5.8 KiB
Go
177 lines
5.8 KiB
Go
//go:build unit
|
|
|
|
package service
|
|
|
|
import (
|
|
"context"
|
|
"testing"
|
|
"time"
|
|
|
|
"github.com/Wei-Shaw/sub2api/internal/pkg/pagination"
|
|
"github.com/stretchr/testify/require"
|
|
)
|
|
|
|
type quotaStateRepoStub struct {
|
|
quotaBaseAPIKeyRepoStub
|
|
stateCalls int
|
|
state *APIKeyQuotaUsageState
|
|
stateErr error
|
|
}
|
|
|
|
func (s *quotaStateRepoStub) IncrementQuotaUsedAndGetState(ctx context.Context, id int64, amount float64) (*APIKeyQuotaUsageState, error) {
|
|
s.stateCalls++
|
|
if s.stateErr != nil {
|
|
return nil, s.stateErr
|
|
}
|
|
if s.state == nil {
|
|
return nil, nil
|
|
}
|
|
out := *s.state
|
|
return &out, nil
|
|
}
|
|
|
|
type quotaStateCacheStub struct {
|
|
deleteAuthKeys []string
|
|
}
|
|
|
|
func (s *quotaStateCacheStub) GetCreateAttemptCount(context.Context, int64) (int, error) {
|
|
return 0, nil
|
|
}
|
|
|
|
func (s *quotaStateCacheStub) IncrementCreateAttemptCount(context.Context, int64) error {
|
|
return nil
|
|
}
|
|
|
|
func (s *quotaStateCacheStub) DeleteCreateAttemptCount(context.Context, int64) error {
|
|
return nil
|
|
}
|
|
|
|
func (s *quotaStateCacheStub) IncrementDailyUsage(context.Context, string) error {
|
|
return nil
|
|
}
|
|
|
|
func (s *quotaStateCacheStub) SetDailyUsageExpiry(context.Context, string, time.Duration) error {
|
|
return nil
|
|
}
|
|
|
|
func (s *quotaStateCacheStub) GetAuthCache(context.Context, string) (*APIKeyAuthCacheEntry, error) {
|
|
return nil, nil
|
|
}
|
|
|
|
func (s *quotaStateCacheStub) SetAuthCache(context.Context, string, *APIKeyAuthCacheEntry, time.Duration) error {
|
|
return nil
|
|
}
|
|
|
|
func (s *quotaStateCacheStub) DeleteAuthCache(_ context.Context, key string) error {
|
|
s.deleteAuthKeys = append(s.deleteAuthKeys, key)
|
|
return nil
|
|
}
|
|
|
|
func (s *quotaStateCacheStub) PublishAuthCacheInvalidation(context.Context, string) error {
|
|
return nil
|
|
}
|
|
|
|
func (s *quotaStateCacheStub) SubscribeAuthCacheInvalidation(context.Context, func(string)) error {
|
|
return nil
|
|
}
|
|
|
|
type quotaBaseAPIKeyRepoStub struct {
|
|
getByIDCalls int
|
|
}
|
|
|
|
func (s *quotaBaseAPIKeyRepoStub) Create(context.Context, *APIKey) error {
|
|
panic("unexpected Create call")
|
|
}
|
|
func (s *quotaBaseAPIKeyRepoStub) GetByID(context.Context, int64) (*APIKey, error) {
|
|
s.getByIDCalls++
|
|
return nil, nil
|
|
}
|
|
func (s *quotaBaseAPIKeyRepoStub) GetKeyAndOwnerID(context.Context, int64) (string, int64, error) {
|
|
panic("unexpected GetKeyAndOwnerID call")
|
|
}
|
|
func (s *quotaBaseAPIKeyRepoStub) GetByKey(context.Context, string) (*APIKey, error) {
|
|
panic("unexpected GetByKey call")
|
|
}
|
|
func (s *quotaBaseAPIKeyRepoStub) GetByKeyForAuth(context.Context, string) (*APIKey, error) {
|
|
panic("unexpected GetByKeyForAuth call")
|
|
}
|
|
func (s *quotaBaseAPIKeyRepoStub) Update(context.Context, *APIKey) error {
|
|
panic("unexpected Update call")
|
|
}
|
|
func (s *quotaBaseAPIKeyRepoStub) Delete(context.Context, int64) error {
|
|
panic("unexpected Delete call")
|
|
}
|
|
func (s *quotaBaseAPIKeyRepoStub) DeleteWithAudit(context.Context, int64) error {
|
|
panic("unexpected DeleteWithAudit call")
|
|
}
|
|
func (s *quotaBaseAPIKeyRepoStub) ListByUserID(context.Context, int64, pagination.PaginationParams, APIKeyListFilters) ([]APIKey, *pagination.PaginationResult, error) {
|
|
panic("unexpected ListByUserID call")
|
|
}
|
|
func (s *quotaBaseAPIKeyRepoStub) VerifyOwnership(context.Context, int64, []int64) ([]int64, error) {
|
|
panic("unexpected VerifyOwnership call")
|
|
}
|
|
func (s *quotaBaseAPIKeyRepoStub) CountByUserID(context.Context, int64) (int64, error) {
|
|
panic("unexpected CountByUserID call")
|
|
}
|
|
func (s *quotaBaseAPIKeyRepoStub) ExistsByKey(context.Context, string) (bool, error) {
|
|
panic("unexpected ExistsByKey call")
|
|
}
|
|
func (s *quotaBaseAPIKeyRepoStub) ListByGroupID(context.Context, int64, pagination.PaginationParams) ([]APIKey, *pagination.PaginationResult, error) {
|
|
panic("unexpected ListByGroupID call")
|
|
}
|
|
func (s *quotaBaseAPIKeyRepoStub) SearchAPIKeys(context.Context, int64, string, int) ([]APIKey, error) {
|
|
panic("unexpected SearchAPIKeys call")
|
|
}
|
|
func (s *quotaBaseAPIKeyRepoStub) ClearGroupIDByGroupID(context.Context, int64) (int64, error) {
|
|
panic("unexpected ClearGroupIDByGroupID call")
|
|
}
|
|
func (s *quotaBaseAPIKeyRepoStub) UpdateGroupIDByUserAndGroup(context.Context, int64, int64, int64) (int64, error) {
|
|
panic("unexpected UpdateGroupIDByUserAndGroup call")
|
|
}
|
|
func (s *quotaBaseAPIKeyRepoStub) CountByGroupID(context.Context, int64) (int64, error) {
|
|
panic("unexpected CountByGroupID call")
|
|
}
|
|
func (s *quotaBaseAPIKeyRepoStub) ListKeysByUserID(context.Context, int64) ([]string, error) {
|
|
panic("unexpected ListKeysByUserID call")
|
|
}
|
|
func (s *quotaBaseAPIKeyRepoStub) ListKeysByGroupID(context.Context, int64) ([]string, error) {
|
|
panic("unexpected ListKeysByGroupID call")
|
|
}
|
|
func (s *quotaBaseAPIKeyRepoStub) IncrementQuotaUsed(context.Context, int64, float64) (float64, error) {
|
|
panic("unexpected IncrementQuotaUsed call")
|
|
}
|
|
func (s *quotaBaseAPIKeyRepoStub) UpdateLastUsed(context.Context, int64, time.Time) error {
|
|
panic("unexpected UpdateLastUsed call")
|
|
}
|
|
func (s *quotaBaseAPIKeyRepoStub) IncrementRateLimitUsage(context.Context, int64, float64) error {
|
|
panic("unexpected IncrementRateLimitUsage call")
|
|
}
|
|
func (s *quotaBaseAPIKeyRepoStub) ResetRateLimitWindows(context.Context, int64) error {
|
|
panic("unexpected ResetRateLimitWindows call")
|
|
}
|
|
func (s *quotaBaseAPIKeyRepoStub) GetRateLimitData(context.Context, int64) (*APIKeyRateLimitData, error) {
|
|
panic("unexpected GetRateLimitData call")
|
|
}
|
|
|
|
func TestAPIKeyService_UpdateQuotaUsed_UsesAtomicStatePath(t *testing.T) {
|
|
repo := "aStateRepoStub{
|
|
state: &APIKeyQuotaUsageState{
|
|
QuotaUsed: 12,
|
|
Quota: 10,
|
|
Key: "sk-test-quota",
|
|
Status: StatusAPIKeyQuotaExhausted,
|
|
},
|
|
}
|
|
cache := "aStateCacheStub{}
|
|
svc := &APIKeyService{
|
|
apiKeyRepo: repo,
|
|
cache: cache,
|
|
}
|
|
|
|
err := svc.UpdateQuotaUsed(context.Background(), 101, 2)
|
|
require.NoError(t, err)
|
|
require.Equal(t, 1, repo.stateCalls)
|
|
require.Equal(t, 0, repo.getByIDCalls, "fast path should not re-read API key by id")
|
|
require.Equal(t, []string{svc.authCacheKey("sk-test-quota")}, cache.deleteAuthKeys)
|
|
}
|