duanshuwen
6245159e7c
- 新增后台登录图形验证码功能，完善登录安全防护 - 新增登录rememberMe参数，控制Refresh Token的会话持久化策略 - 实现OSS私有桶媒体URL自动签名，统一处理图片资源的临时访问签名 - 新增素材库数据库表与上传API，规范媒体资源管理流程 - 统一前端UI图标使用@element-plus/icons-vue，重构布局图标组件 - 登录页新增验证码输入、刷新功能，添加账号记忆与记住密码逻辑 - 更新全套文档，补充API契约、技术决策记录与集成流程说明 - 修复多个业务页面的图标展示问题，新增认证流程相关测试用例
83 lines
2.7 KiB
Python
83 lines
2.7 KiB
Python
from base64 import b64encode
|
|
from hashlib import sha1
|
|
from hmac import new as hmac_new
|
|
from types import SimpleNamespace
|
|
from urllib.parse import parse_qs, urlsplit
|
|
|
|
from app import media_urls
|
|
|
|
|
|
def test_sign_oss_get_url_uses_oss_v1_query_signature():
|
|
url = "https://one-feel-ota-data.oss-cn-guangzhou.aliyuncs.com/admin/site-config/image.webp"
|
|
|
|
signed = media_urls.sign_oss_get_url(
|
|
url,
|
|
access_key_id="test-access-key",
|
|
access_key_secret="test-access-secret",
|
|
endpoint="oss-cn-guangzhou.aliyuncs.com",
|
|
bucket="one-feel-ota-data",
|
|
expires_at=1_800_000_000,
|
|
)
|
|
|
|
parsed = urlsplit(signed)
|
|
query = parse_qs(parsed.query)
|
|
string_to_sign = "GET\n\n\n1800000000\n/one-feel-ota-data/admin/site-config/image.webp"
|
|
expected_signature = b64encode(
|
|
hmac_new(b"test-access-secret", string_to_sign.encode("utf-8"), sha1).digest()
|
|
).decode("ascii")
|
|
|
|
assert parsed.path == "/admin/site-config/image.webp"
|
|
assert query["OSSAccessKeyId"] == ["test-access-key"]
|
|
assert query["Expires"] == ["1800000000"]
|
|
assert query["Signature"] == [expected_signature]
|
|
|
|
|
|
def test_resolve_media_url_only_signs_the_configured_oss_host(monkeypatch):
|
|
monkeypatch.setattr(
|
|
media_urls,
|
|
"get_settings",
|
|
lambda: SimpleNamespace(
|
|
oss_access_key_id="test-access-key",
|
|
oss_access_key_secret="test-access-secret",
|
|
oss_endpoint="oss-cn-guangzhou.aliyuncs.com",
|
|
oss_bucket_name="one-feel-ota-data",
|
|
),
|
|
)
|
|
monkeypatch.setattr(media_urls, "time", lambda: 1_800_000_000)
|
|
|
|
oss_url = "https://one-feel-ota-data.oss-cn-guangzhou.aliyuncs.com/admin/image.webp"
|
|
external_url = "https://cdn.example.test/image.webp"
|
|
|
|
signed = media_urls.resolve_media_url(oss_url)
|
|
|
|
assert signed != oss_url
|
|
assert "OSSAccessKeyId=test-access-key" in signed
|
|
assert media_urls.resolve_media_url(external_url) == external_url
|
|
|
|
|
|
def test_resolve_media_fields_signs_common_image_fields(monkeypatch):
|
|
monkeypatch.setattr(
|
|
"app.serializers.resolve_media_url",
|
|
lambda value: f"signed:{value}" if value else value,
|
|
)
|
|
|
|
from app.serializers import resolve_media_fields
|
|
|
|
result = resolve_media_fields(
|
|
{
|
|
"image": "oss-image",
|
|
"avatar": "oss-avatar",
|
|
"qrImage": "oss-qr",
|
|
"gallery": ["oss-gallery-1", "oss-gallery-2"],
|
|
"label": "unchanged",
|
|
}
|
|
)
|
|
|
|
assert result == {
|
|
"image": "signed:oss-image",
|
|
"avatar": "signed:oss-avatar",
|
|
"qrImage": "signed:oss-qr",
|
|
"gallery": ["signed:oss-gallery-1", "signed:oss-gallery-2"],
|
|
"label": "unchanged",
|
|
}
|