mirror of
https://github.com/Syngnat/GoNavi.git
synced 2026-05-30 07:09:35 +08:00
b2b1e6b944
- MySQL 兼容 JDBC 参数映射并丢弃 allowPublicKeyRetrieval 等无效参数 - 为 PostgreSQL 系、SQL Server、Oracle、达梦、TDengine 接入驱动参数白名单 - 补充连接参数归一化、别名映射和未知参数过滤回归测试
479 lines
13 KiB
Go
479 lines
13 KiB
Go
//go:build gonavi_full_drivers
|
||
|
||
package db
|
||
|
||
import (
|
||
"net/url"
|
||
"strings"
|
||
"testing"
|
||
"time"
|
||
|
||
"GoNavi-Wails/internal/connection"
|
||
|
||
clickhouse "github.com/ClickHouse/clickhouse-go/v2"
|
||
)
|
||
|
||
func TestPostgresDSN_EscapesPassword(t *testing.T) {
|
||
p := &PostgresDB{}
|
||
cfg := connection.ConnectionConfig{
|
||
Type: "postgres",
|
||
Host: "127.0.0.1",
|
||
Port: 5432,
|
||
User: "user",
|
||
Password: "p@ss:wo/rd",
|
||
Database: "db",
|
||
}
|
||
|
||
dsn := p.getDSN(cfg)
|
||
if strings.Contains(dsn, cfg.Password) {
|
||
t.Fatalf("dsn 包含原始密码：%s", dsn)
|
||
}
|
||
if !strings.Contains(dsn, "p%40ss%3Awo%2Frd") {
|
||
t.Fatalf("dsn 未正确转义密码：%s", dsn)
|
||
}
|
||
if !strings.Contains(dsn, "sslmode=disable") {
|
||
t.Fatalf("dsn 缺少 sslmode 参数：%s", dsn)
|
||
}
|
||
}
|
||
|
||
func TestPostgresDSN_SSLModeRequireWhenEnabled(t *testing.T) {
|
||
p := &PostgresDB{}
|
||
cfg := connection.ConnectionConfig{
|
||
Type: "postgres",
|
||
Host: "127.0.0.1",
|
||
Port: 5432,
|
||
User: "user",
|
||
Password: "pass",
|
||
Database: "db",
|
||
UseSSL: true,
|
||
SSLMode: "required",
|
||
}
|
||
|
||
dsn := p.getDSN(cfg)
|
||
if !strings.Contains(dsn, "sslmode=require") {
|
||
t.Fatalf("dsn 缺少 sslmode=require 参数：%s", dsn)
|
||
}
|
||
}
|
||
|
||
func TestPostgresDSN_MergesConnectionParams(t *testing.T) {
|
||
p := &PostgresDB{}
|
||
cfg := connection.ConnectionConfig{
|
||
Type: "postgres",
|
||
Host: "127.0.0.1",
|
||
Port: 5432,
|
||
User: "user",
|
||
Password: "pass",
|
||
Database: "db",
|
||
ConnectionParams: "application_name=GoNavi&connect_timeout=9&statement_timeout=3000&allowPublicKeyRetrieval=true",
|
||
}
|
||
|
||
dsn := p.getDSN(cfg)
|
||
parsed, err := url.Parse(dsn)
|
||
if err != nil {
|
||
t.Fatalf("parse postgres dsn: %v", err)
|
||
}
|
||
query := parsed.Query()
|
||
if got := query.Get("application_name"); got != "GoNavi" {
|
||
t.Fatalf("application_name = %q, want GoNavi", got)
|
||
}
|
||
if got := query.Get("connect_timeout"); got != "9" {
|
||
t.Fatalf("connect_timeout = %q, want 9", got)
|
||
}
|
||
if got := query.Get("statement_timeout"); got != "3000" {
|
||
t.Fatalf("statement_timeout = %q, want 3000", got)
|
||
}
|
||
if got := query.Get("allowPublicKeyRetrieval"); got != "" {
|
||
t.Fatalf("unsupported postgres param should be filtered, got %q", got)
|
||
}
|
||
}
|
||
|
||
func TestMySQLDSN_UsesTLSParamWhenSSLEnabled(t *testing.T) {
|
||
m := &MySQLDB{}
|
||
cfg := connection.ConnectionConfig{
|
||
Type: "mysql",
|
||
Host: "127.0.0.1",
|
||
Port: 3306,
|
||
User: "root",
|
||
Password: "pass",
|
||
Database: "db",
|
||
UseSSL: true,
|
||
SSLMode: "required",
|
||
}
|
||
|
||
dsn, err := m.getDSN(cfg)
|
||
if err != nil {
|
||
t.Fatalf("getDSN failed: %v", err)
|
||
}
|
||
if !strings.Contains(dsn, "tls=true") {
|
||
t.Fatalf("dsn 缺少 tls=true 参数：%s", dsn)
|
||
}
|
||
}
|
||
|
||
func TestOracleDSN_EscapesUserAndPassword(t *testing.T) {
|
||
o := &OracleDB{}
|
||
cfg := connection.ConnectionConfig{
|
||
Type: "oracle",
|
||
Host: "127.0.0.1",
|
||
Port: 1521,
|
||
User: "u@ser",
|
||
Password: "p@ss:wo/rd",
|
||
Database: "svc/name",
|
||
}
|
||
|
||
dsn := o.getDSN(cfg)
|
||
if strings.Contains(dsn, cfg.Password) {
|
||
t.Fatalf("dsn 包含原始密码：%s", dsn)
|
||
}
|
||
if !strings.Contains(dsn, "u%40ser") || !strings.Contains(dsn, "p%40ss%3Awo%2Frd") {
|
||
t.Fatalf("dsn 未正确转义 user/password：%s", dsn)
|
||
}
|
||
if !strings.Contains(dsn, "/svc%2Fname") {
|
||
t.Fatalf("dsn 未正确转义 service：%s", dsn)
|
||
}
|
||
}
|
||
|
||
func TestDamengDSN_KeepsRawPasswordForDriverParser(t *testing.T) {
|
||
d := &DamengDB{}
|
||
cfg := connection.ConnectionConfig{
|
||
Type: "dameng",
|
||
Host: "127.0.0.1",
|
||
Port: 5236,
|
||
User: "SYSDBA",
|
||
Password: "p@ss:wo/rd",
|
||
Database: "DBName",
|
||
}
|
||
|
||
dsn := d.getDSN(cfg)
|
||
if !strings.Contains(dsn, "SYSDBA:p@ss:wo/rd@127.0.0.1:5236") {
|
||
t.Fatalf("dsn 未保留达梦驱动可识别的原始认证信息：%s", dsn)
|
||
}
|
||
if strings.Contains(dsn, "p%40ss") || strings.Contains(dsn, "wo%2Frd") {
|
||
t.Fatalf("dsn 不应转义达梦密码，驱动不会反解码认证信息：%s", dsn)
|
||
}
|
||
if strings.Contains(dsn, "escapeProcess=true") {
|
||
t.Fatalf("dsn 不应自动添加 escapeProcess=true：%s", dsn)
|
||
}
|
||
if !strings.Contains(dsn, "schema=DBName") {
|
||
t.Fatalf("dsn 缺少 schema 参数：%s", dsn)
|
||
}
|
||
}
|
||
|
||
func TestDamengDSN_AppendsQuerySentinelForQuestionMarkInPassword(t *testing.T) {
|
||
d := &DamengDB{}
|
||
cfg := connection.ConnectionConfig{
|
||
Type: "dameng",
|
||
Host: "127.0.0.1",
|
||
Port: 5236,
|
||
User: "SYSDBA",
|
||
Password: "p?ss",
|
||
}
|
||
|
||
dsn := d.getDSN(cfg)
|
||
if dsn != "dm://SYSDBA:p?ss@127.0.0.1:5236?" {
|
||
t.Fatalf("dsn = %q, want raw password with trailing query sentinel", dsn)
|
||
}
|
||
}
|
||
|
||
func TestDamengDSN_AppendsSSLCertAndKeyParams(t *testing.T) {
|
||
d := &DamengDB{}
|
||
cfg := connection.ConnectionConfig{
|
||
Type: "dameng",
|
||
Host: "127.0.0.1",
|
||
Port: 5236,
|
||
User: "SYSDBA",
|
||
Password: "pass",
|
||
Database: "DBName",
|
||
UseSSL: true,
|
||
SSLMode: "required",
|
||
SSLCertPath: "C:\\certs\\client-cert.pem",
|
||
SSLKeyPath: "C:\\certs\\client-key.pem",
|
||
}
|
||
|
||
dsn := d.getDSN(cfg)
|
||
if !strings.Contains(dsn, "sslCertPath=") {
|
||
t.Fatalf("dsn 缺少 sslCertPath 参数：%s", dsn)
|
||
}
|
||
if !strings.Contains(dsn, "sslKeyPath=") {
|
||
t.Fatalf("dsn 缺少 sslKeyPath 参数：%s", dsn)
|
||
}
|
||
}
|
||
|
||
func TestDamengDSN_FiltersUnsupportedConnectionParams(t *testing.T) {
|
||
d := &DamengDB{}
|
||
cfg := connection.ConnectionConfig{
|
||
Type: "dameng",
|
||
Host: "127.0.0.1",
|
||
Port: 5236,
|
||
User: "SYSDBA",
|
||
Password: "pass",
|
||
Database: "DBName",
|
||
ConnectionParams: "SSL_CERT_PATH=/cert.pem&CONNECT_TIMEOUT=5000&unknown=bad",
|
||
}
|
||
|
||
dsn := d.getDSN(cfg)
|
||
if !strings.Contains(dsn, "sslCertPath=%2Fcert.pem") {
|
||
t.Fatalf("dsn 缺少规范化 sslCertPath 参数：%s", dsn)
|
||
}
|
||
if !strings.Contains(dsn, "connectTimeout=5000") {
|
||
t.Fatalf("dsn 缺少规范化 connectTimeout 参数：%s", dsn)
|
||
}
|
||
if strings.Contains(dsn, "SSL_CERT_PATH") || strings.Contains(dsn, "unknown=bad") {
|
||
t.Fatalf("dsn 不应透传达梦未知或非规范参数：%s", dsn)
|
||
}
|
||
}
|
||
|
||
func TestKingbaseDSN_QuotesPasswordWithSpaces(t *testing.T) {
|
||
k := &KingbaseDB{}
|
||
cfg := connection.ConnectionConfig{
|
||
Type: "kingbase",
|
||
Host: "127.0.0.1",
|
||
Port: 54321,
|
||
User: "system",
|
||
Password: "p@ss word",
|
||
Database: "TEST",
|
||
}
|
||
|
||
dsn := k.getDSN(cfg)
|
||
if !strings.Contains(dsn, "password='p@ss word'") {
|
||
t.Fatalf("dsn 未对包含空格的密码进行引号包裹：%s", dsn)
|
||
}
|
||
}
|
||
|
||
func TestKingbaseDSN_MergesConnectionParams(t *testing.T) {
|
||
k := &KingbaseDB{}
|
||
cfg := connection.ConnectionConfig{
|
||
Type: "kingbase",
|
||
Host: "127.0.0.1",
|
||
Port: 54321,
|
||
User: "system",
|
||
Password: "pass",
|
||
Database: "TEST",
|
||
ConnectionParams: "application_name=GoNavi&connect_timeout=12&statement_timeout=3000&unknown=bad",
|
||
}
|
||
|
||
dsn := k.getDSN(cfg)
|
||
if !strings.Contains(dsn, "application_name=GoNavi") {
|
||
t.Fatalf("dsn 缺少 application_name：%s", dsn)
|
||
}
|
||
if !strings.Contains(dsn, "connect_timeout=12") {
|
||
t.Fatalf("dsn 缺少自定义 connect_timeout：%s", dsn)
|
||
}
|
||
if !strings.Contains(dsn, "statement_timeout=3000") {
|
||
t.Fatalf("dsn 缺少允许的 runtime 参数：%s", dsn)
|
||
}
|
||
if strings.Contains(dsn, "unknown=bad") {
|
||
t.Fatalf("dsn 不应透传未知 Kingbase 参数：%s", dsn)
|
||
}
|
||
}
|
||
|
||
func TestTDengineDSN_UsesWebSocketFormat(t *testing.T) {
|
||
td := &TDengineDB{}
|
||
cfg := connection.ConnectionConfig{
|
||
Type: "tdengine",
|
||
Host: "127.0.0.1",
|
||
Port: 6041,
|
||
User: "root",
|
||
Password: "taosdata",
|
||
Database: "power",
|
||
}
|
||
|
||
dsn := td.getDSN(cfg)
|
||
if !strings.HasPrefix(dsn, "root:taosdata@ws(127.0.0.1:6041)/power") {
|
||
t.Fatalf("tdengine dsn 格式不正确：%s", dsn)
|
||
}
|
||
}
|
||
|
||
func TestTDengineDSN_UsesSecureWebSocketWhenSSLEnabled(t *testing.T) {
|
||
td := &TDengineDB{}
|
||
cfg := connection.ConnectionConfig{
|
||
Type: "tdengine",
|
||
Host: "127.0.0.1",
|
||
Port: 6041,
|
||
User: "root",
|
||
Password: "taosdata",
|
||
Database: "power",
|
||
UseSSL: true,
|
||
SSLMode: "required",
|
||
}
|
||
|
||
dsn := td.getDSN(cfg)
|
||
if !strings.HasPrefix(dsn, "root:taosdata@wss(127.0.0.1:6041)/power") {
|
||
t.Fatalf("tdengine ssl dsn 格式不正确：%s", dsn)
|
||
}
|
||
}
|
||
|
||
func TestTDengineDSN_MergesConnectionParams(t *testing.T) {
|
||
td := &TDengineDB{}
|
||
cfg := connection.ConnectionConfig{
|
||
Type: "tdengine",
|
||
Host: "127.0.0.1",
|
||
Port: 6041,
|
||
User: "root",
|
||
Password: "taosdata",
|
||
Database: "power",
|
||
ConnectionParams: "timezone=Asia%2FShanghai&protocol=wss&readTimeout=10s&unknown=bad",
|
||
}
|
||
|
||
dsn := td.getDSN(cfg)
|
||
if !strings.Contains(dsn, "timezone=Asia%2FShanghai") {
|
||
t.Fatalf("tdengine dsn 缺少自定义参数或错误透传 protocol：%s", dsn)
|
||
}
|
||
if !strings.Contains(dsn, "readTimeout=10s") {
|
||
t.Fatalf("tdengine dsn 缺少 readTimeout 参数：%s", dsn)
|
||
}
|
||
if strings.Contains(dsn, "protocol=wss") || strings.Contains(dsn, "unknown=bad") {
|
||
t.Fatalf("tdengine dsn 不应透传协议控制项或未知参数：%s", dsn)
|
||
}
|
||
}
|
||
|
||
func TestSQLServerDSN_EncryptMapping(t *testing.T) {
|
||
s := &SqlServerDB{}
|
||
cfg := connection.ConnectionConfig{
|
||
Type: "sqlserver",
|
||
Host: "127.0.0.1",
|
||
Port: 1433,
|
||
User: "sa",
|
||
Password: "pass",
|
||
Database: "master",
|
||
UseSSL: true,
|
||
SSLMode: "required",
|
||
}
|
||
|
||
dsn := s.getDSN(cfg)
|
||
if !strings.Contains(strings.ToLower(dsn), "encrypt=true") {
|
||
t.Fatalf("sqlserver dsn 缺少 encrypt=true：%s", dsn)
|
||
}
|
||
if !strings.Contains(strings.ToLower(dsn), "trustservercertificate=false") {
|
||
t.Fatalf("sqlserver dsn 缺少 TrustServerCertificate=false：%s", dsn)
|
||
}
|
||
}
|
||
|
||
func TestSQLServerDSN_MergesConnectionParams(t *testing.T) {
|
||
s := &SqlServerDB{}
|
||
cfg := connection.ConnectionConfig{
|
||
Type: "sqlserver",
|
||
Host: "127.0.0.1",
|
||
Port: 1433,
|
||
User: "sa",
|
||
Password: "pass",
|
||
Database: "master",
|
||
ConnectionParams: "Application Name=GoNavi&Initial Catalog=appdb&packet size=32767&unknown=bad",
|
||
}
|
||
|
||
dsn := s.getDSN(cfg)
|
||
parsed, err := url.Parse(dsn)
|
||
if err != nil {
|
||
t.Fatalf("parse sqlserver dsn: %v", err)
|
||
}
|
||
query := parsed.Query()
|
||
if got := query.Get("app name"); got != "GoNavi" {
|
||
t.Fatalf("app name = %q, want GoNavi", got)
|
||
}
|
||
if got := query.Get("database"); got != "appdb" {
|
||
t.Fatalf("database = %q, want appdb", got)
|
||
}
|
||
if got := query.Get("packet size"); got != "32767" {
|
||
t.Fatalf("packet size = %q, want 32767", got)
|
||
}
|
||
if got := query.Get("unknown"); got != "" {
|
||
t.Fatalf("unknown should be filtered, got %q", got)
|
||
}
|
||
}
|
||
|
||
func TestClickHouseOptions_UsesStructuredTimeoutAndAuth(t *testing.T) {
|
||
c := &ClickHouseDB{}
|
||
cfg := normalizeClickHouseConfig(connection.ConnectionConfig{
|
||
Type: "clickhouse",
|
||
Host: "127.0.0.1",
|
||
Port: 9000,
|
||
User: "default",
|
||
Password: "p@ss:wo/rd",
|
||
Database: "analytics",
|
||
Timeout: 15,
|
||
})
|
||
|
||
opts := c.buildClickHouseOptions(cfg)
|
||
if opts == nil {
|
||
t.Fatal("options 为空")
|
||
}
|
||
if len(opts.Addr) != 1 || opts.Addr[0] != "127.0.0.1:9000" {
|
||
t.Fatalf("addr 不符合预期：%v", opts.Addr)
|
||
}
|
||
if opts.Auth.Username != "default" {
|
||
t.Fatalf("username 不符合预期：%s", opts.Auth.Username)
|
||
}
|
||
if opts.Auth.Password != cfg.Password {
|
||
t.Fatalf("password 不符合预期：%s", opts.Auth.Password)
|
||
}
|
||
if opts.Auth.Database != "analytics" {
|
||
t.Fatalf("database 不符合预期：%s", opts.Auth.Database)
|
||
}
|
||
if opts.DialTimeout != 15*time.Second {
|
||
t.Fatalf("dial timeout 不符合预期：%s", opts.DialTimeout)
|
||
}
|
||
if opts.ReadTimeout != minClickHouseReadTimeout {
|
||
t.Fatalf("read timeout 不符合预期：%s", opts.ReadTimeout)
|
||
}
|
||
if _, ok := opts.Settings["write_timeout"]; ok {
|
||
t.Fatalf("options 不应包含 write_timeout 设置：%v", opts.Settings)
|
||
}
|
||
if _, ok := opts.Settings["read_timeout"]; ok {
|
||
t.Fatalf("options 不应通过 settings 传递 read_timeout：%v", opts.Settings)
|
||
}
|
||
if _, ok := opts.Settings["dial_timeout"]; ok {
|
||
t.Fatalf("options 不应通过 settings 传递 dial_timeout：%v", opts.Settings)
|
||
}
|
||
}
|
||
|
||
func TestClickHouseOptions_MergesConnectionParamsIntoOptionsAndSettings(t *testing.T) {
|
||
c := &ClickHouseDB{}
|
||
cfg := normalizeClickHouseConfig(connection.ConnectionConfig{
|
||
Type: "clickhouse",
|
||
Host: "127.0.0.1",
|
||
Port: 9000,
|
||
User: "default",
|
||
Password: "secret",
|
||
Database: "analytics",
|
||
Timeout: 15,
|
||
ConnectionParams: "max_execution_time=60&compress=lz4&read_timeout=10s",
|
||
})
|
||
|
||
opts := c.buildClickHouseOptions(cfg)
|
||
if opts == nil {
|
||
t.Fatal("options 为空")
|
||
}
|
||
if opts.ReadTimeout != 10*time.Second {
|
||
t.Fatalf("read timeout 不符合预期：%s", opts.ReadTimeout)
|
||
}
|
||
if opts.Compression == nil || opts.Compression.Method != clickhouse.CompressionLZ4 {
|
||
t.Fatalf("compression 不符合预期：%v", opts.Compression)
|
||
}
|
||
if got := opts.Settings["max_execution_time"]; got != 60 {
|
||
t.Fatalf("max_execution_time = %#v, want 60", got)
|
||
}
|
||
}
|
||
|
||
func TestClickHouseOptions_ReadTimeoutUsesLargerConfiguredTimeout(t *testing.T) {
|
||
c := &ClickHouseDB{}
|
||
cfg := normalizeClickHouseConfig(connection.ConnectionConfig{
|
||
Type: "clickhouse",
|
||
Host: "127.0.0.1",
|
||
Port: 9000,
|
||
User: "default",
|
||
Password: "secret",
|
||
Database: "analytics",
|
||
Timeout: 900,
|
||
})
|
||
|
||
opts := c.buildClickHouseOptions(cfg)
|
||
if opts == nil {
|
||
t.Fatal("options 为空")
|
||
}
|
||
if opts.DialTimeout != 900*time.Second {
|
||
t.Fatalf("dial timeout 不符合预期：%s", opts.DialTimeout)
|
||
}
|
||
if opts.ReadTimeout != 900*time.Second {
|
||
t.Fatalf("read timeout 不符合预期：%s", opts.ReadTimeout)
|
||
}
|
||
}
|