Initial open-source release: Aura CRM platform (core + production)

production/backend/internal/modulecontrol/modulecontrol_test.go

@@ -0,0 +1,107 @@
+package modulecontrol
+
+import (
+	"net/http/httptest"
+	"strings"
+	"testing"
+
+	"github.com/gofiber/fiber/v2"
+)
+
+func httptestJSONBody(s string) *strings.Reader {
+	return strings.NewReader(s)
+}
+
+func newTestApp(h *Handler) *fiber.App {
+	app := fiber.New()
+	app.Use(h.Middleware())
+	app.Get("/health", func(c *fiber.Ctx) error { return c.JSON(fiber.Map{"ok": true}) })
+	app.Get("/api/orders", func(c *fiber.Ctx) error { return c.JSON(fiber.Map{"ok": true}) })
+	app.Post("/api/module-control/restart", h.Restart)
+	app.Post("/api/module-control/maintenance", h.SetMaintenance)
+	return app
+}
+
+func TestAuthRejectsEmptyConfiguredToken(t *testing.T) {
+	h := &Handler{controlToken: ""}
+	app := newTestApp(h)
+
+	req := httptest.NewRequest("POST", "/api/module-control/restart", nil)
+	req.Header.Set("X-Control-Token", "anything")
+	resp, err := app.Test(req)
+	if err != nil {
+		t.Fatalf("app.Test: %v", err)
+	}
+	if resp.StatusCode != 401 {
+		t.Errorf("status = %d, want 401 (empty configured token must never authenticate)", resp.StatusCode)
+	}
+}
+
+func TestAuthRejectsWrongToken(t *testing.T) {
+	h := &Handler{controlToken: "correct-secret"}
+	app := newTestApp(h)
+
+	req := httptest.NewRequest("POST", "/api/module-control/maintenance", httptestJSONBody(`{"enabled":true}`))
+	req.Header.Set("Content-Type", "application/json")
+	req.Header.Set("X-Control-Token", "wrong-secret")
+	resp, err := app.Test(req)
+	if err != nil {
+		t.Fatalf("app.Test: %v", err)
+	}
+	if resp.StatusCode != 401 {
+		t.Errorf("status = %d, want 401", resp.StatusCode)
+	}
+	if h.Maintenance() {
+		t.Error("maintenance flag must not change on a rejected request")
+	}
+}
+
+func TestMaintenanceMiddlewareBlocksAndExemptsHealthAndControl(t *testing.T) {
+	h := &Handler{controlToken: "secret"}
+	app := newTestApp(h)
+
+	// Turn maintenance on via the real endpoint.
+	req := httptest.NewRequest("POST", "/api/module-control/maintenance", httptestJSONBody(`{"enabled":true}`))
+	req.Header.Set("Content-Type", "application/json")
+	req.Header.Set("X-Control-Token", "secret")
+	if _, err := app.Test(req); err != nil {
+		t.Fatalf("enabling maintenance: %v", err)
+	}
+	if !h.Maintenance() {
+		t.Fatal("maintenance should now be on")
+	}
+
+	// An ordinary route is blocked.
+	resp, err := app.Test(httptest.NewRequest("GET", "/api/orders", nil))
+	if err != nil {
+		t.Fatalf("app.Test: %v", err)
+	}
+	if resp.StatusCode != 503 {
+		t.Errorf("ordinary route status = %d, want 503 while in maintenance", resp.StatusCode)
+	}
+
+	// /health stays reachable.
+	resp, err = app.Test(httptest.NewRequest("GET", "/health", nil))
+	if err != nil {
+		t.Fatalf("app.Test: %v", err)
+	}
+	if resp.StatusCode != 200 {
+		t.Errorf("/health status = %d, want 200 even in maintenance", resp.StatusCode)
+	}
+
+	// The control route itself must stay reachable — a maintenance flag
+	// that blocks its own toggle would be a one-way door.
+	req = httptest.NewRequest("POST", "/api/module-control/maintenance", httptestJSONBody(`{"enabled":false}`))
+	req.Header.Set("Content-Type", "application/json")
+	req.Header.Set("X-Control-Token", "secret")
+	resp, err = app.Test(req)
+	if err != nil {
+		t.Fatalf("app.Test: %v", err)
+	}
+	if resp.StatusCode != 200 {
+		t.Errorf("disabling maintenance status = %d, want 200", resp.StatusCode)
+	}
+	if h.Maintenance() {
+		t.Error("maintenance should now be off")
+	}
+}