@stackonward/cli 0.0.1 → 1.0.0

package/dist/resources/templates/go-backend/internal/core/audit/enum_test.go

@@ -0,0 +1,314 @@
+package audit
+
+import (
+	"testing"
+
+	"github.com/stretchr/testify/assert"
+)
+
+// TestActorTypeString 验证 ActorType.String() 返回正确的字符串值
+func TestActorTypeString(t *testing.T) {
+	cases := []struct {
+		actor    ActorType
+		expected string
+	}{
+		{ActorTypeUser, "user"},
+		{ActorTypeAdmin, "admin"},
+		{ActorTypeSystem, "system"},
+		{ActorTypeAPIKey, "api_key"},
+		{ActorTypeWebhook, "webhook"},
+	}
+
+	for _, tc := range cases {
+		t.Run(string(tc.actor), func(t *testing.T) {
+			assert.Equal(t, tc.expected, tc.actor.String())
+		})
+	}
+}
+
+// TestActorTypeConstants 验证所有 ActorType 常量已定义且值唯一
+func TestActorTypeConstants(t *testing.T) {
+	all := []ActorType{
+		ActorTypeUser,
+		ActorTypeAdmin,
+		ActorTypeSystem,
+		ActorTypeAPIKey,
+		ActorTypeWebhook,
+	}
+
+	seen := make(map[string]bool)
+	for _, a := range all {
+		v := a.String()
+		assert.False(t, seen[v], "duplicate ActorType value: %s", v)
+		seen[v] = true
+	}
+	assert.Len(t, seen, 5)
+}
+
+// TestAuditActionString 验证 AuditAction.String() 返回正确的字符串值
+func TestAuditActionString(t *testing.T) {
+	cases := []struct {
+		action   AuditAction
+		expected string
+	}{
+		// 通用 CRUD
+		{ActionCreate, "create"},
+		{ActionUpdate, "update"},
+		{ActionDelete, "delete"},
+		{ActionRead, "read"},
+		{ActionList, "list"},
+		{ActionExport, "export"},
+		// 认证相关
+		{ActionLogin, "login"},
+		{ActionLogout, "logout"},
+		{ActionLoginFailed, "login_failed"},
+		{ActionTokenRefresh, "token_refresh"},
+		{ActionPasswordChange, "password_change"},
+		{ActionMFAEnable, "mfa_enable"},
+		{ActionMFADisable, "mfa_disable"},
+		{ActionSessionRevoke, "session_revoke"},
+		{ActionAccountLink, "account_link"},
+		{ActionAccountUnlink, "account_unlink"},
+		// 账号状态
+		{ActionSuspend, "suspend"},
+		{ActionReactivate, "reactivate"},
+		{ActionLock, "lock"},
+		{ActionUnlock, "unlock"},
+		// 商务/订阅
+		{ActionRefund, "refund"},
+		{ActionCancel, "cancel"},
+		{ActionActivate, "activate"},
+		{ActionDeactivate, "deactivate"},
+		{ActionUpgrade, "upgrade"},
+		{ActionDowngrade, "downgrade"},
+		{ActionRenew, "renew"},
+		{ActionPause, "pause"},
+		{ActionResume, "resume"},
+		{ActionExpire, "expire"},
+		{ActionPay, "pay"},
+		{ActionVoid, "void"},
+		{ActionAdjust, "adjust"},
+		{ActionTopup, "topup"},
+		{ActionDebit, "debit"},
+		{ActionFreeze, "freeze"},
+		{ActionUnfreeze, "unfreeze"},
+		{ActionVerify, "verify"},
+		{ActionDispute, "dispute"},
+		{ActionResolve, "resolve"},
+		// 内容/通知
+		{ActionPublish, "publish"},
+		{ActionArchive, "archive"},
+		{ActionUpload, "upload"},
+		{ActionDownload, "download"},
+		{ActionSend, "send"},
+		// 系统/杂项
+		{ActionRegister, "register"},
+		{ActionRequest, "request"},
+		{ActionExecute, "execute"},
+		{ActionGenerate, "generate"},
+		{ActionGrantQuota, "grant_quota"},
+		{ActionExhaustQuota, "exhaust_quota"},
+	}
+
+	for _, tc := range cases {
+		t.Run(string(tc.action), func(t *testing.T) {
+			assert.Equal(t, tc.expected, tc.action.String())
+		})
+	}
+}
+
+// TestAuditActionConstantsAreUnique 验证所有 AuditAction 常量值唯一
+func TestAuditActionConstantsAreUnique(t *testing.T) {
+	all := []AuditAction{
+		ActionCreate, ActionUpdate, ActionDelete, ActionRead, ActionList, ActionExport,
+		ActionLogin, ActionLogout, ActionLoginFailed, ActionTokenRefresh, ActionPasswordChange,
+		ActionMFAEnable, ActionMFADisable, ActionSessionRevoke, ActionAccountLink, ActionAccountUnlink,
+		ActionSuspend, ActionReactivate, ActionLock, ActionUnlock,
+		ActionRefund, ActionCancel, ActionActivate, ActionDeactivate, ActionUpgrade, ActionDowngrade,
+		ActionRenew, ActionPause, ActionResume, ActionExpire, ActionPay, ActionVoid,
+		ActionAdjust, ActionTopup, ActionDebit, ActionFreeze, ActionUnfreeze,
+		ActionVerify, ActionDispute, ActionResolve,
+		ActionPublish, ActionArchive, ActionUpload, ActionDownload, ActionSend,
+		ActionRegister, ActionRequest, ActionExecute, ActionGenerate,
+		ActionGrantQuota, ActionExhaustQuota,
+	}
+
+	seen := make(map[string]bool)
+	for _, a := range all {
+		v := a.String()
+		assert.False(t, seen[v], "duplicate AuditAction value: %s", v)
+		seen[v] = true
+	}
+	assert.Len(t, seen, 51)
+}
+
+// TestAuditCategoryString 验证 AuditCategory.String() 返回正确的字符串值
+func TestAuditCategoryString(t *testing.T) {
+	cases := []struct {
+		category AuditCategory
+		expected string
+	}{
+		{CategoryAuth, "auth"},
+		{CategoryIdentity, "identity"},
+		{CategoryUser, "user"},
+		{CategoryCommerce, "commerce"},
+		{CategoryConfig, "config"},
+		{CategoryContent, "content"},
+		{CategoryStorage, "storage"},
+		{CategorySystem, "system"},
+	}
+
+	for _, tc := range cases {
+		t.Run(string(tc.category), func(t *testing.T) {
+			assert.Equal(t, tc.expected, tc.category.String())
+		})
+	}
+}
+
+// TestAuditCategoryConstantsAreUnique 验证所有 AuditCategory 常量值唯一
+func TestAuditCategoryConstantsAreUnique(t *testing.T) {
+	all := []AuditCategory{
+		CategoryAuth,
+		CategoryIdentity,
+		CategoryUser,
+		CategoryCommerce,
+		CategoryConfig,
+		CategoryContent,
+		CategoryStorage,
+		CategorySystem,
+	}
+
+	seen := make(map[string]bool)
+	for _, c := range all {
+		v := c.String()
+		assert.False(t, seen[v], "duplicate AuditCategory value: %s", v)
+		seen[v] = true
+	}
+	assert.Len(t, seen, 8)
+}
+
+// TestRiskLevelString 验证 RiskLevel.String() 返回正确的字符串值
+func TestRiskLevelString(t *testing.T) {
+	cases := []struct {
+		level    RiskLevel
+		expected string
+	}{
+		{RiskLevelCritical, "critical"},
+		{RiskLevelHigh, "high"},
+		{RiskLevelMedium, "medium"},
+		{RiskLevelLow, "low"},
+	}
+
+	for _, tc := range cases {
+		t.Run(string(tc.level), func(t *testing.T) {
+			assert.Equal(t, tc.expected, tc.level.String())
+		})
+	}
+}
+
+// TestRiskLevelConstantsAreUnique 验证所有 RiskLevel 常量值唯一
+func TestRiskLevelConstantsAreUnique(t *testing.T) {
+	all := []RiskLevel{
+		RiskLevelCritical,
+		RiskLevelHigh,
+		RiskLevelMedium,
+		RiskLevelLow,
+	}
+
+	seen := make(map[string]bool)
+	for _, r := range all {
+		v := r.String()
+		assert.False(t, seen[v], "duplicate RiskLevel value: %s", v)
+		seen[v] = true
+	}
+	assert.Len(t, seen, 4)
+}
+
+// TestRiskLevelOrdering 验证风险级别的排序语义（字符串比较）
+// critical > high > medium > low 是业务语义，此测试确保各级别值存在且不重叠
+func TestRiskLevelOrdering(t *testing.T) {
+	assert.NotEqual(t, RiskLevelCritical, RiskLevelHigh)
+	assert.NotEqual(t, RiskLevelHigh, RiskLevelMedium)
+	assert.NotEqual(t, RiskLevelMedium, RiskLevelLow)
+	assert.NotEqual(t, RiskLevelCritical, RiskLevelLow)
+}
+
+// TestLoginActionConstants 验证认证动作的持久化值唯一且语义稳定
+func TestLoginActionConstants(t *testing.T) {
+	all := []LoginAction{
+		LoginActionLogin,
+		LoginActionLogout,
+		LoginActionLoginFailed,
+		LoginActionPasswordChange,
+		LoginActionMFAEnable,
+		LoginActionMFADisable,
+		LoginActionMFAVerify,
+		LoginActionSessionRevoke,
+		LoginActionTokenRefresh,
+		LoginActionRegister,
+		LoginActionAccountLink,
+		LoginActionAccountUnlink,
+	}
+
+	seen := make(map[string]bool, len(all))
+	for _, action := range all {
+		value := action.String()
+		assert.False(t, seen[value], "duplicate LoginAction value: %s", value)
+		seen[value] = true
+	}
+	assert.Equal(t, "mfa_verify", LoginActionMFAVerify.String())
+	assert.Len(t, seen, len(all))
+}
+
+// TestLoginMethodConstants 验证登录方式的持久化值唯一且覆盖 MFA 方法
+func TestLoginMethodConstants(t *testing.T) {
+	all := []LoginMethod{
+		LoginMethodPassword,
+		LoginMethodOAuthGoogle,
+		LoginMethodOAuthApple,
+		LoginMethodOAuthGitHub,
+		LoginMethodAPIKey,
+		LoginMethodMFATOTP,
+		LoginMethodMFARecoveryCode,
+		LoginMethodMFAWebAuthn,
+		LoginMethodMFASMS,
+		LoginMethodRefreshToken,
+	}
+
+	seen := make(map[string]bool, len(all))
+	for _, method := range all {
+		value := method.String()
+		assert.False(t, seen[value], "duplicate LoginMethod value: %s", value)
+		seen[value] = true
+	}
+	assert.Equal(t, "mfa_totp", LoginMethodMFATOTP.String())
+	assert.Equal(t, "mfa_recovery_code", LoginMethodMFARecoveryCode.String())
+	assert.Equal(t, "mfa_webauthn", LoginMethodMFAWebAuthn.String())
+	assert.Equal(t, "mfa_sms", LoginMethodMFASMS.String())
+	assert.Len(t, seen, len(all))
+}
+
+// TestEnumStringMethodConsistency 验证 String() 与直接类型转换结果一致
+// 确保 String() 没有额外的格式化逻辑
+func TestEnumStringMethodConsistency(t *testing.T) {
+	t.Run("ActorType", func(t *testing.T) {
+		assert.Equal(t, string(ActorTypeAdmin), ActorTypeAdmin.String())
+		assert.Equal(t, string(ActorTypeSystem), ActorTypeSystem.String())
+	})
+
+	t.Run("AuditAction", func(t *testing.T) {
+		assert.Equal(t, string(ActionCreate), ActionCreate.String())
+		assert.Equal(t, string(ActionDelete), ActionDelete.String())
+		assert.Equal(t, string(ActionGrantQuota), ActionGrantQuota.String())
+	})
+
+	t.Run("AuditCategory", func(t *testing.T) {
+		assert.Equal(t, string(CategoryAuth), CategoryAuth.String())
+		assert.Equal(t, string(CategoryCommerce), CategoryCommerce.String())
+	})
+
+	t.Run("RiskLevel", func(t *testing.T) {
+		assert.Equal(t, string(RiskLevelCritical), RiskLevelCritical.String())
+		assert.Equal(t, string(RiskLevelLow), RiskLevelLow.String())
+	})
+}

package/dist/resources/templates/go-backend/internal/core/audit/errors.go

@@ -0,0 +1,9 @@
+package audit
+
+import "errors"
+
+// ErrAuditBufferFull 审计缓冲区已满
+var ErrAuditBufferFull = errors.New("audit buffer is full")
+
+// ErrExportRangeTooLarge 导出时间范围超限（最大 90 天）
+var ErrExportRangeTooLarge = errors.New("export date range exceeds 90 days limit")