Initial commit

server/internal/database/database_integration_test.go

@@ -0,0 +1,144 @@
+package database
+
+import (
+	"context"
+	"database/sql"
+	"io"
+	"log/slog"
+	"os"
+	"strings"
+	"testing"
+	"time"
+
+	"github.com/google/uuid"
+)
+
+func TestPostgresMigrationAndMaintenanceIntegration(t *testing.T) {
+	dsn := strings.TrimSpace(os.Getenv("TEST_DATABASE_URL"))
+	if dsn == "" {
+		t.Skip("TEST_DATABASE_URL is not set")
+	}
+
+	ctx, cancel := context.WithTimeout(context.Background(), 30*time.Second)
+	defer cancel()
+	logger := slog.New(slog.NewTextHandler(io.Discard, nil))
+	db, err := Open(ctx, dsn, logger)
+	if err != nil {
+		t.Fatal(err)
+	}
+	defer Close(db)
+	sqlDB, err := SQLDB(db)
+	if err != nil {
+		t.Fatal(err)
+	}
+	if err := Migrate(ctx, sqlDB, logger); err != nil {
+		t.Fatal(err)
+	}
+	if err := Migrate(ctx, sqlDB, logger); err != nil {
+		t.Fatalf("second migration run must be idempotent: %v", err)
+	}
+	if err := SchemaReady(ctx, sqlDB); err != nil {
+		t.Fatalf("schema readiness check failed after migration: %v", err)
+	}
+
+	var migrationCount int
+	if err := sqlDB.QueryRowContext(ctx, `SELECT count(*) FROM schema_migrations`).Scan(&migrationCount); err != nil {
+		t.Fatal(err)
+	}
+	if migrationCount < 8 {
+		t.Fatalf("migration count = %d, want at least 8", migrationCount)
+	}
+	var nullable string
+	if err := sqlDB.QueryRowContext(ctx, `
+		SELECT is_nullable
+		FROM information_schema.columns
+		WHERE table_schema = 'public' AND table_name = 'queue_tickets' AND column_name = 'phone_hmac'`).Scan(&nullable); err != nil {
+		t.Fatal(err)
+	}
+	if nullable != "YES" {
+		t.Fatalf("phone_hmac is_nullable = %q, want YES after purge migration", nullable)
+	}
+	if _, err := sqlDB.ExecContext(ctx, `UPDATE users SET password_hash = $1, updated_at = now() WHERE username = $2`, "rotated-hash", "xqkwljtadmin"); err != nil {
+		t.Fatalf("protected super admin password rotation should be allowed: %v", err)
+	}
+	if _, err := sqlDB.ExecContext(ctx, `UPDATE users SET role = 'STAFF' WHERE username = $1`, "xqkwljtadmin"); err == nil {
+		t.Fatal("protected super admin role change should be rejected")
+	}
+
+	fixture := newMaintenanceFixture(t, ctx, sqlDB)
+	stats, err := RunMaintenanceOnce(ctx, sqlDB, time.Now().UTC(), 100)
+	if err != nil {
+		t.Fatal(err)
+	}
+	if stats.PersonalDataPurged != 1 || stats.IdempotencyDeleted != 1 || stats.SessionsDeleted != 1 || stats.AuditDeleted != 1 {
+		t.Fatalf("maintenance stats = %#v, want one row in each category", stats)
+	}
+
+	var phoneCiphertext, phoneNonce, phoneHMAC, purgedAt any
+	if err := sqlDB.QueryRowContext(ctx, `
+		SELECT phone_ciphertext, phone_nonce, phone_hmac, personal_data_purged_at
+		FROM queue_tickets WHERE id = $1`, fixture.ticketID).
+		Scan(&phoneCiphertext, &phoneNonce, &phoneHMAC, &purgedAt); err != nil {
+		t.Fatal(err)
+	}
+	if phoneCiphertext != nil || phoneNonce != nil || phoneHMAC != nil || purgedAt == nil {
+		t.Fatalf("purged ticket fields = %#v/%#v/%#v/%#v", phoneCiphertext, phoneNonce, phoneHMAC, purgedAt)
+	}
+}
+
+type maintenanceFixture struct {
+	userID    string
+	projectID string
+	ticketID  string
+}
+
+func newMaintenanceFixture(t *testing.T, ctx context.Context, db *sql.DB) maintenanceFixture {
+	t.Helper()
+	now := time.Now().UTC().Truncate(time.Microsecond)
+	userID, projectID, sessionID, ticketID := uuid.NewString(), uuid.NewString(), uuid.NewString(), uuid.NewString()
+	code := "MNT" + strings.ToUpper(strings.ReplaceAll(userID[:5], "-", ""))
+	if _, err := db.ExecContext(ctx, `
+		INSERT INTO users (id, username, password_hash, role, active)
+		VALUES ($1, $2, $3, 'ADMIN', true)`, userID, "maintenance_"+userID[:8], "not-a-real-hash"); err != nil {
+		t.Fatal(err)
+	}
+	if _, err := db.ExecContext(ctx, `
+		INSERT INTO projects (
+			id, code, name, status, timezone, ticket_prefix, call_batch_size,
+			grace_period_minutes, eta_mode, average_batch_interval_seconds,
+			continuous_rate_per_minute, eta_buffer_minutes, device_simulation_mode
+		) VALUES ($1, $2, 'Maintenance Test', 'ENDED', 'Asia/Shanghai', 'M', 1, 0,
+			'FIXED_BATCH', 60, 1, 0, 'DISABLED')`, projectID, code); err != nil {
+		t.Fatal(err)
+	}
+	if _, err := db.ExecContext(ctx, `
+		INSERT INTO queue_sessions (id, project_id, business_date, status, next_ticket_number, revision, opened_at, closed_at)
+		VALUES ($1, $2, '2020-01-01', 'ENDED', 2, 1, $3, $3)`, sessionID, projectID, now.Add(-48*time.Hour)); err != nil {
+		t.Fatal(err)
+	}
+	if _, err := db.ExecContext(ctx, `
+		INSERT INTO queue_tickets (
+			id, project_id, queue_session_id, ticket_number, display_number,
+			public_token_hash, phone_ciphertext, phone_nonce, phone_hmac, honorific,
+			status, joined_at, completed_at, personal_data_purge_at, created_by
+		) VALUES ($1, $2, $3, 1, '00001', $4, $5, $6, $7, '女士', 'COMPLETED',
+			$8, $8, $9, $10)`, ticketID, projectID, sessionID, strings.Repeat("a", 64), []byte("ciphertext"), make([]byte, 12), strings.Repeat("b", 64), now.Add(-72*time.Hour), now.Add(-time.Hour), userID); err != nil {
+		t.Fatal(err)
+	}
+	if _, err := db.ExecContext(ctx, `
+		INSERT INTO idempotency_keys (project_id, user_id, scope, key, request_hash, response_code, response_body, expires_at)
+		VALUES ($1, $2, 'TEST', $3, $4, 200, '{}', $5)`, projectID, userID, "expired-"+userID, strings.Repeat("c", 64), now.Add(-time.Hour)); err != nil {
+		t.Fatal(err)
+	}
+	if _, err := db.ExecContext(ctx, `
+		INSERT INTO auth_sessions (id, user_id, token_hash, expires_at, last_seen_at)
+		VALUES ($1, $2, $3, $4, $4)`, uuid.NewString(), userID, strings.Repeat("d", 64), now.Add(-time.Hour)); err != nil {
+		t.Fatal(err)
+	}
+	if _, err := db.ExecContext(ctx, `
+		INSERT INTO audit_entries (project_id, actor_user_id, action, entity_type, details, request_id, user_agent, retain_until)
+		VALUES ($1, $2, 'TEST', 'TEST', '{}', $3, 'integration-test', $4)`, projectID, userID, "request-"+userID, now.Add(-time.Hour)); err != nil {
+		t.Fatal(err)
+	}
+	return maintenanceFixture{userID: userID, projectID: projectID, ticketID: ticketID}
+}