26c350f378
feat: 🚀 增强会话管理与缓存机制 * 会话 ID 空值兜底，若 `conversation_id` 为空时自动生成 UUID * 在响应头写入 `X-Conversation-ID`，供前端使用，保持同一会话状态 perf: ⚡ 会话状态缓存优化 * 当缓存未命中但 DB 已确认/创建会话后，调用 `SetConversationStatus` 回写 Redis * 缓存写回失败时记录日志，不中断聊天主流程，确保业务流畅性 fix: 🐛 修复历史消息顺序问题与编译错误 * 修复历史消息顺序问题，保证返回的 N 条历史消息按时间正序喂给模型 * 通过反转 `created_at desc` 查询结果的切片，确保模型输入顺序正确 * 修复 `fmt.Errorf` 参数不匹配问题，修正编译错误 * 整理 `agent-cache.go` 为标准 UTF-8 编码，避免 Go 编译报错 `invalid UTF-8 encoding` feat: 🛠️ 独立构建 MCP 服务器 * 使用 `Codex` 构建独立于后端的 MCP 服务器，简化与 Codex 的协作 * 通过该服务器方便 Codex 直接测试和查看 Redis 与 MySQL 中的数据
45 lines
1.4 KiB
Go
45 lines
1.4 KiB
Go
package security
|
|
|
|
import "testing"
|
|
|
|
func TestValidateReadOnlySQL(t *testing.T) {
|
|
validator := NewSQLValidator("smartflow", true, []string{"smartflow"}, []string{"smartflow.users", "smartflow.tasks"})
|
|
|
|
tests := []struct {
|
|
name string
|
|
sql string
|
|
wantErr bool
|
|
}{
|
|
{name: "allow select", sql: "SELECT id, name FROM users WHERE id = 1", wantErr: false},
|
|
{name: "allow explain", sql: "EXPLAIN SELECT * FROM tasks", wantErr: false},
|
|
{name: "reject insert", sql: "INSERT INTO users(name) VALUES('x')", wantErr: true},
|
|
{name: "reject multi statement", sql: "SELECT * FROM users; SELECT * FROM tasks", wantErr: true},
|
|
{name: "reject comment", sql: "SELECT * FROM users -- bypass", wantErr: true},
|
|
{name: "reject not whitelisted table", sql: "SELECT * FROM orders", wantErr: true},
|
|
}
|
|
|
|
for _, tc := range tests {
|
|
t.Run(tc.name, func(t *testing.T) {
|
|
err := validator.ValidateReadOnlySQL(tc.sql)
|
|
if tc.wantErr && err == nil {
|
|
t.Fatalf("expected error, got nil")
|
|
}
|
|
if !tc.wantErr && err != nil {
|
|
t.Fatalf("expected no error, got %v", err)
|
|
}
|
|
})
|
|
}
|
|
}
|
|
|
|
func TestRedact(t *testing.T) {
|
|
masked := RedactSQL("SELECT * FROM users WHERE token='abc123' AND id=42")
|
|
if masked == "" || masked == "SELECT * FROM users WHERE token='abc123' AND id=42" {
|
|
t.Fatalf("redaction not applied: %s", masked)
|
|
}
|
|
|
|
key := RedactKey("very-sensitive-key")
|
|
if key == "very-sensitive-key" {
|
|
t.Fatalf("key not redacted")
|
|
}
|
|
}
|