183 lines
7.0 KiB
Go
183 lines
7.0 KiB
Go
package handler
|
|
|
|
import (
|
|
"bytes"
|
|
"encoding/json"
|
|
"net/http"
|
|
"net/http/httptest"
|
|
"strings"
|
|
"testing"
|
|
"time"
|
|
|
|
"yingce/backend/internal/auth"
|
|
"yingce/backend/internal/model"
|
|
"yingce/backend/internal/repository"
|
|
"yingce/backend/internal/service"
|
|
|
|
"github.com/gin-gonic/gin"
|
|
"gorm.io/driver/sqlite"
|
|
"gorm.io/gorm"
|
|
)
|
|
|
|
func TestChannelCostHTTPAuthorizationAndPublicProjection(t *testing.T) {
|
|
gin.SetMode(gin.TestMode)
|
|
db, err := gorm.Open(sqlite.Open(":memory:"), &gorm.Config{})
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
sqlDB, _ := db.DB()
|
|
sqlDB.SetMaxOpenConns(1)
|
|
t.Cleanup(func() { _ = sqlDB.Close() })
|
|
if err := db.AutoMigrate(&model.User{}, &model.AuthSession{}, &model.ModelChannel{}, &model.ChannelModel{}, &model.ChannelModelPriceTier{}, &model.IDSequence{}, &model.SystemSetting{}); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
for _, role := range []model.UserRole{model.UserRoleAdmin, model.UserRoleUser} {
|
|
id := string(role)
|
|
if err := db.Create(&model.User{ID: id, Username: id, Email: id + "@example.invalid", Role: role, Status: model.UserStatusActive}).Error; err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if err := db.Create(&model.AuthSession{ID: id, UserID: id, TokenHash: auth.HashToken("test-token"), ExpiresAt: time.Now().Add(time.Hour)}).Error; err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
}
|
|
channel := model.ModelChannel{ID: "channel", Name: "渠道", Scope: model.ChannelScopeSystem, Enabled: true, ModelsJSON: `[]`}
|
|
if err := db.Create(&channel).Error; err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
svc := service.New(repository.New(db), t.TempDir())
|
|
router := gin.New()
|
|
RegisterFinanceRoutes(router.Group("/api"), svc)
|
|
RegisterModelCatalogRoutes(router.Group("/api"), svc)
|
|
request := service.ChannelModelRequest{ModelKey: "text-model", DisplayName: "文本模型", ChannelLabel: "优惠渠道", Capability: "text", Protocol: string(model.ChannelInterfaceChatCompletion), CapabilityConfig: service.DefaultModelCapabilityConfigForModel(string(model.ChannelInterfaceChatCompletion), "text-model"), PriceTiers: []service.ChannelModelPriceTierRequest{{BillingMode: "fixed_request", UnitPriceMicrocredits: 900_000, PriceConfigured: true, CostPricing: model.CreditCostPricing{Configured: true, UnitPriceMicrocredits: 123_456}}}}
|
|
body, err := json.Marshal(request)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
call := func(role, method, path string, payload []byte) *httptest.ResponseRecorder {
|
|
r := httptest.NewRequest(method, path, bytes.NewReader(payload))
|
|
r.Header.Set("Content-Type", "application/json")
|
|
if role != "" {
|
|
r.AddCookie(&http.Cookie{Name: service.SessionCookieName, Value: role + ".test-token"})
|
|
}
|
|
w := httptest.NewRecorder()
|
|
router.ServeHTTP(w, r)
|
|
return w
|
|
}
|
|
for _, method := range []string{http.MethodGet, http.MethodPost} {
|
|
for _, role := range []string{"", "user"} {
|
|
w := call(role, method, "/api/admin/channels/channel/models", body)
|
|
want := http.StatusForbidden
|
|
if role == "" {
|
|
want = http.StatusUnauthorized
|
|
}
|
|
if w.Code != want {
|
|
t.Fatalf("%s %s: %d %s", role, method, w.Code, w.Body.String())
|
|
}
|
|
}
|
|
}
|
|
for _, method := range []string{http.MethodPost, http.MethodGet} {
|
|
w := call("admin", method, "/api/admin/channels/channel/models", body)
|
|
if w.Code != http.StatusOK || !strings.Contains(w.Body.String(), `"costPricing":`) || !strings.Contains(w.Body.String(), "123456") {
|
|
t.Fatalf("admin cost missing: %d %s", w.Code, w.Body.String())
|
|
}
|
|
}
|
|
t.Run("batch repricing HTTP contract", func(t *testing.T) {
|
|
var item model.ChannelModel
|
|
if err := db.First(&item, "channel_id = ?", channel.ID).Error; err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
path := "/api/admin/channels/channel/models/batch-reprice"
|
|
makePayload := func(price any) []byte {
|
|
t.Helper()
|
|
var latest model.ChannelModel
|
|
var tier model.ChannelModelPriceTier
|
|
if err := db.First(&latest, "id = ?", item.ID).Error; err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if err := db.First(&tier, "channel_model_id = ?", item.ID).Error; err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
payload, err := json.Marshal(map[string]any{"models": []any{map[string]any{
|
|
"modelId": item.ID, "priceVersion": latest.PriceVersion,
|
|
"priceTiers": []any{map[string]any{"id": tier.ID, "priceVersion": tier.PriceVersion,
|
|
"prices": map[string]any{"unitPriceMicrocredits": price}}},
|
|
}}})
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
return payload
|
|
}
|
|
payload := makePayload(170_000)
|
|
for _, role := range []string{"", "user"} {
|
|
w := call(role, http.MethodPost, path, payload)
|
|
want := http.StatusForbidden
|
|
if role == "" {
|
|
want = http.StatusUnauthorized
|
|
}
|
|
if w.Code != want {
|
|
t.Fatalf("role %q: %d %s", role, w.Code, w.Body.String())
|
|
}
|
|
}
|
|
for _, invalid := range []string{
|
|
`{}`, `{"models":[]}`, `{"models":null}`,
|
|
`{"models":[{"modelId":"` + item.ID + `","priceVersion":1,"priceTiers":[]}]}`,
|
|
string(makePayload(nil)), string(makePayload(-1)), string(makePayload(1.5)),
|
|
} {
|
|
w := call("admin", http.MethodPost, path, []byte(invalid))
|
|
if w.Code != http.StatusBadRequest {
|
|
t.Fatalf("invalid payload: %d %s", w.Code, w.Body.String())
|
|
}
|
|
}
|
|
w := call("admin", http.MethodPost, path, payload)
|
|
if w.Code != http.StatusOK || !strings.Contains(w.Body.String(), `"updated":1`) {
|
|
t.Fatalf("reprice: %d %s", w.Code, w.Body.String())
|
|
}
|
|
var tier model.ChannelModelPriceTier
|
|
if err := db.First(&tier, "channel_model_id = ?", item.ID).Error; err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if tier.UnitPriceMicrocredits != 170_000 || tier.CostPricing.UnitPriceMicrocredits != 123_456 {
|
|
t.Fatalf("unexpected stored tier: %+v", tier)
|
|
}
|
|
w = call("admin", http.MethodPost, path, payload)
|
|
if w.Code != http.StatusBadRequest {
|
|
t.Fatalf("stale version: %d %s", w.Code, w.Body.String())
|
|
}
|
|
// Explicit zero is a valid final sale price, not a missing field.
|
|
payload = makePayload(0)
|
|
w = call("admin", http.MethodPost, path, payload)
|
|
if w.Code != http.StatusOK {
|
|
t.Fatalf("zero target: %d %s", w.Code, w.Body.String())
|
|
}
|
|
if err := db.First(&tier, "channel_model_id = ?", item.ID).Error; err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if tier.UnitPriceMicrocredits != 0 || tier.CostPricing.UnitPriceMicrocredits != 123_456 {
|
|
t.Fatalf("zero price not preserved: %+v", tier)
|
|
}
|
|
payload = makePayload(170_000)
|
|
w = call("admin", http.MethodPost, path, payload)
|
|
if w.Code != http.StatusOK {
|
|
t.Fatalf("restore target: %d %s", w.Code, w.Body.String())
|
|
}
|
|
})
|
|
for _, path := range []string{"/api/model-catalog", "/api/model-catalog/available", "/api/model-catalog/quote"} {
|
|
method := http.MethodPost
|
|
payload := []byte(`{"capability":"text"}`)
|
|
if path == "/api/model-catalog" {
|
|
method = http.MethodGet
|
|
payload = nil
|
|
}
|
|
if strings.HasSuffix(path, "/quote") {
|
|
payload = []byte(`{"channelId":"channel","modelKey":"text-model","intent":{"capability":"text","operation":"text_generation","inputs":{"text":1}}}`)
|
|
}
|
|
w := call("user", method, path, payload)
|
|
if w.Code != http.StatusOK {
|
|
t.Fatalf("public %s: %d %s", path, w.Code, w.Body.String())
|
|
}
|
|
if strings.Contains(w.Body.String(), "costPricing") || strings.Contains(w.Body.String(), "123456") {
|
|
t.Fatalf("public cost leaked: %s", w.Body.String())
|
|
}
|
|
}
|
|
}
|