Sakurasan
360c6b33a6
后端 (Go/Gin/GORM): - 配置(viper+env)、SQLite/Postgres 迁移、argon2id、AES-GCM 渠道密钥、JWT+refresh cookie - 用户注册/登录/刷新/登出、API Key CRUD(仅存哈希、明文一次展示) - 代理网关: /v1/chat/completions、/v1/responses、/v1/models 直通 OpenAI 渠道 非流式+流式(SSE 零缓冲转发), 用量捕获(chat 末块/responses completed 嵌套), OpenAI 错误格式(401/402/404/502), 余额检查 - 异步批量记账 + 余额流水 + 日聚合, admin 用户/余额/配置 API - 单测: crypto/jwt/apikey/流式 usage 提取 前端 (Vue3+TS+Vite+Tailwind v4): - taste-skill 设计 tokens: 深色仪表盘, 石墨+信号铜色, Outfit+JetBrains Mono - Landing/登录/注册, 控制台(仪表盘图表/密钥管理/用量明细) - 基础组件 Button/Input/Badge/Modal, ECharts 用量图 部署: docker-compose(nginx+api+postgres), 双 Dockerfile, nginx SSE 反代 联调: scripts/mockupstream 本地 mock 上游, 端到端验证通过
45 lines
1.1 KiB
Go
45 lines
1.1 KiB
Go
package crypto
|
|
|
|
import "testing"
|
|
|
|
func TestPasswordHashRoundTrip(t *testing.T) {
|
|
h := NewPasswordHasher(3, 64*1024, 2, 32, 16)
|
|
hash, err := h.HashPassword("s3cret-password")
|
|
if err != nil {
|
|
t.Fatalf("hash: %v", err)
|
|
}
|
|
ok, err := h.VerifyPassword(hash, "s3cret-password")
|
|
if err != nil || !ok {
|
|
t.Fatalf("verify correct password: ok=%v err=%v", ok, err)
|
|
}
|
|
ok, _ = h.VerifyPassword(hash, "wrong-password")
|
|
if ok {
|
|
t.Fatal("wrong password should not verify")
|
|
}
|
|
}
|
|
|
|
func TestEncryptDecrypt(t *testing.T) {
|
|
e := NewEncryptor("master-key-0123456789abcdef")
|
|
enc, err := e.Encrypt("sk-upstream-secret")
|
|
if err != nil {
|
|
t.Fatalf("encrypt: %v", err)
|
|
}
|
|
dec, err := e.Decrypt(enc)
|
|
if err != nil || dec != "sk-upstream-secret" {
|
|
t.Fatalf("decrypt: got %q err %v", dec, err)
|
|
}
|
|
// 密文不可读
|
|
if dec == enc {
|
|
t.Fatal("ciphertext should differ from plaintext")
|
|
}
|
|
}
|
|
|
|
func TestShortMasterKeyDerived(t *testing.T) {
|
|
e := NewEncryptor("short")
|
|
enc, _ := e.Encrypt("x")
|
|
dec, err := e.Decrypt(enc)
|
|
if err != nil || dec != "x" {
|
|
t.Fatalf("short key derive failed: %v", err)
|
|
}
|
|
}
|