3498dd7a4b
新增独立 xiaobai-datahub 服务（SQLite WAL、Tushare 盘后发布、/v1 契约和管理后台），不改现站页面与数据链路。 Co-authored-by: Cursor <cursoragent@cursor.com> Co-authored-by: multica-agent <github@multica.ai>
97 lines
3.8 KiB
Python
97 lines
3.8 KiB
Python
from __future__ import annotations
|
|
|
|
import json
|
|
import tempfile
|
|
import threading
|
|
import unittest
|
|
from http.server import ThreadingHTTPServer
|
|
from pathlib import Path
|
|
from urllib.request import Request, urlopen
|
|
|
|
from datahub.adapters.tushare import TushareAdapter
|
|
from datahub.crypto import SecretVault
|
|
from datahub.httpapp import make_handler
|
|
from datahub.hub import Hub
|
|
from datahub.settings import Settings
|
|
from tests.fixtures import fake_transport
|
|
|
|
|
|
class AdminTests(unittest.TestCase):
|
|
def setUp(self) -> None:
|
|
self.tmp = tempfile.TemporaryDirectory()
|
|
settings = Settings(
|
|
encryption_key=SecretVault.generate_key(),
|
|
api_token="z" * 32,
|
|
admin_password="StartPass1",
|
|
tushare_token="real-tushare-token-abcdef",
|
|
db_path=Path(self.tmp.name) / "hub.db",
|
|
scheduler_enabled=False,
|
|
)
|
|
self.hub = Hub(settings, adapter=TushareAdapter("real-tushare-token-abcdef", transport=fake_transport))
|
|
handler = make_handler(self.hub)
|
|
self.server = ThreadingHTTPServer(("127.0.0.1", 0), handler)
|
|
threading.Thread(target=self.server.serve_forever, daemon=True).start()
|
|
self.base = f"http://127.0.0.1:{self.server.server_address[1]}"
|
|
|
|
def tearDown(self) -> None:
|
|
self.server.shutdown()
|
|
self.server.server_close()
|
|
self.tmp.cleanup()
|
|
|
|
def _json(self, path, method="GET", body=None, cookie="", csrf=""):
|
|
data = None if body is None else json.dumps(body).encode()
|
|
headers = {"Content-Type": "application/json"}
|
|
if cookie:
|
|
headers["Cookie"] = cookie
|
|
if csrf:
|
|
headers["X-CSRF-Token"] = csrf
|
|
req = Request(self.base + path, data=data, headers=headers, method=method)
|
|
with urlopen(req, timeout=5) as resp:
|
|
set_cookie = resp.headers.get("Set-Cookie", "")
|
|
return resp.status, json.loads(resp.read().decode()), set_cookie
|
|
|
|
def test_login_change_password_and_secret_masking(self) -> None:
|
|
status, body, cookie_header = self._json(
|
|
"/admin/api/login", "POST", {"username": "hub_admin", "password": "StartPass1"}
|
|
)
|
|
self.assertEqual(status, 200)
|
|
self.assertTrue(body["must_change"])
|
|
cookie = cookie_header.split(";")[0]
|
|
csrf = body["csrf"]
|
|
status, _, _ = self._json(
|
|
"/admin/api/change-password",
|
|
"POST",
|
|
{"current": "StartPass1", "new_password": "NewPass123"},
|
|
cookie=cookie,
|
|
csrf=csrf,
|
|
)
|
|
self.assertEqual(status, 200)
|
|
_, sources, _ = self._json("/admin/api/sources", cookie=cookie, csrf=csrf)
|
|
blob = json.dumps(sources)
|
|
self.assertNotIn("real-tushare-token-abcdef", blob)
|
|
self.assertTrue(sources["items"][0]["credential"]["configured"])
|
|
self.assertTrue(str(sources["items"][0]["credential"]["last4"]).endswith("cdef") or "****" in str(sources["items"][0]["credential"]["last4"]))
|
|
|
|
def test_rollback_requires_password_and_confirm(self) -> None:
|
|
_, body, cookie_header = self._json(
|
|
"/admin/api/login", "POST", {"username": "hub_admin", "password": "StartPass1"}
|
|
)
|
|
cookie = cookie_header.split(";")[0]
|
|
csrf = body["csrf"]
|
|
self._json("/admin/api/change-password", "POST", {"current": "StartPass1", "new_password": "NewPass123"}, cookie, csrf)
|
|
from urllib.error import HTTPError
|
|
|
|
with self.assertRaises(HTTPError) as ctx:
|
|
self._json(
|
|
"/admin/api/rollback",
|
|
"POST",
|
|
{"dataset": "daily", "trade_date": "20240902", "password": "wrong", "confirm": "daily:20240902"},
|
|
cookie,
|
|
csrf,
|
|
)
|
|
self.assertEqual(ctx.exception.code, 401)
|
|
|
|
|
|
if __name__ == "__main__":
|
|
unittest.main()
|